Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Sun, 26 Aug 2012 16:39:36 -0700 [received:] => Array ( [0] => from smtp4.princetonhcs.org ([209.123.81.114]:1684)by lester.newsblaze.com with esmtp (Exim 4.77)(envelope-from )id 1T5mQY-00070M-Unfor submissions@scamdex.com; Sun, 26 Aug 2012 16:39:36 -0700 [1] => from [10.240.205.65] by smtp4.princetonhcs.org with ESMTP (SMTP Relay (Email Firewall v6.5)); Sun, 26 Aug 2012 19:17:12 -0400 [2] => from exch-ms-01.PHCS.ORG (10.240.194.201) bymsg-hub-01.PHCS.ORG (10.240.205.65) with Microsoft SMTP Server (TLS) id8.3.213.0; Sun, 26 Aug 2012 19:17:07 -0400 [3] => from exch-ms-01.PHCS.ORG ([10.240.194.201]) byexch-ms-01.PHCS.ORG ([10.240.194.201]) with mapi; Sun, 26 Aug 201219:17:07 -0400 ) [x-server-uuid:] => AC413B40-993A-4B64-8C1E-3F59D0672E28 [from:] => "mancini, joann" [to:] => "winner@uk.com" [date:] => Sun, 26 Aug 2012 19:17:05 -0400 [subject:] => Dear Recipient [thread-topic:] => Dear Recipient [thread-index:] => AQHNg+DoPiMZhe6LKUCrLiR/0GS7lg== [message-id:] => <9A2E501B9EDE8A469B47F9047F11AB1E07AD5FA0@exch-ms-01.PHCS.ORG> [accept-language:] => en-US [content-language:] => en-US [x-ms-has-attach:] => [x-ms-tnef-correlator:] => [acceptlanguage:] => en-US [mime-version:] => 1.0 [x-wss-id:] => 7C2471D83DO8676736-281-01 [content-type:] => multipart/alternative;boundary=_000_9A2E501B9EDE8A469B47F9047F11AB1E07AD5FA0exchms01PHCSORG_ [x-spam-status:] => No, score=-0.5 [x-spam-score:] => -4 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Recipient, PIN id:58638039. Confirm the Receipt of Your BBC IplayCash-Out Award of $2.950.000.00 with your Full Name, Address/Country & Mobile No to: claimsdpt_coleferguson@yahoo.com.hk Phone; +447024060693 [...] Content analysis details: (-0.5 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------0.0 SPF_HELO_PASS SPF: HELO matches SPF record-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 LOTS_OF_MONEY Huge... sums of money 1.5 FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

===========================================================

This e-mail transmission and any documents attached hereto contain information from Princeton HealthCare System which is confidential and/or legally privileged.  This information is intended only for the use of the individual or entity to which it is addressed, and only for the purpose for which this transmission was made.  Any other use, disclosure, copying, distribution, re-transmission, or the taking of any action in reliance upon the contents of this information is strictly prohibited.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, re-transmission or the taking of any action in reliance upon the contents of this information is strictly prohibited, and that this e-mail transmission and accompanying documents should be returned to Princeton HealthCare System immediately.  If you have received this e-mail transmission in error, please notify the sender immediately and destroy all copies of the information contained in this transmission.  The above signature block is intended for identification purposes only and does not constitute affirmation that a binding contract has been created via this e-mail communication unless expressly so stated within the body of this e-mail transmission.

===========================================================