Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Sun, 23 Sep 2012 19:18:33 -0700 [received:] => Array ( [0] => from alpha.arel.edu.tr ([193.255.56.5]:42985)by lester.newsblaze.com with esmtp (Exim 4.77)(envelope-from )id 1TFyFi-0006Ha-I7for scam@scamdex.com; Sun, 23 Sep 2012 19:18:32 -0700 [1] => from localhost (localhost [127.0.0.1])by alpha.arel.edu.tr (Postfix) with ESMTP id 271D8642ABD;Mon, 24 Sep 2012 04:46:11 +0300 (EEST) [2] => from alpha.arel.edu.tr ([127.0.0.1])by localhost (alpha.arel.edu.tr [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id yoYwoGf+KK5B; Mon, 24 Sep 2012 04:46:10 +0300 (EEST) [3] => from alpha.arel.edu.tr (alpha.arel.edu.tr [193.255.56.5])by alpha.arel.edu.tr (Postfix) with ESMTP id 9C94364247B;Mon, 24 Sep 2012 04:46:09 +0300 (EEST) ) [x-virus-scanned:] => amavisd-new at arel.edu.tr [date:] => Mon, 24 Sep 2012 04:46:09 +0300 (EEST) [from:] => "Barr. Timothy Fancourt" [reply-to:] => "tfancourt@blumail.org" [message-id:] => <1038957954.37594.1348451169634.JavaMail.root@alpha> [subject:] => URGENT...PLEASE CONFIRM [mime-version:] => 1.0 [content-type:] => text/plain; charset=utf-8 [content-transfer-encoding:] => 7bit [x-originating-ip:] => [41.215.160.153] [x-mailer:] => Zimbra 6.0.10_GA_2692 (zclient/6.0.10_GA_2692) [to:] => undisclosed-recipients:; [x-spam-status:] => No, score=2.6 [x-spam-score:] => 26 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Good Day I am Barr. Timothy Fancourt, I got your name and contact information during my search for any extended family member of my late client, and I am contacting you based on what is presently at hand, on that capacity, I am seeking your consent in good assistance in helping me to claim fund deposit left behind by my late client. [...] Content analysis details: (2.6 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ]-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record-0.4 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.0 DECEASED_NO_ML Dead not via mailing list 0.8 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) 2.9 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.