Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Tue, 22 Feb 2011 02:28:42 -0800 [received:] => Array ( [0] => from [222.124.144.182] (helo=webmail.unsada.ac.id)by chester.loopbiz.com with esmtp (Exim 4.69)(envelope-from )id 1PrpTz-0006EQ-BKfor submitted@scamdex.com; Tue, 22 Feb 2011 02:28:42 -0800 [1] => from localhost (localhost.localdomain [127.0.0.1])by webmail.unsada.ac.id (Postfix) with ESMTP id 6363C21864CA;Tue, 22 Feb 2011 17:24:45 +0700 (WIT) [2] => from webmail.unsada.ac.id ([127.0.0.1])by localhost (webmail.unsada.ac.id [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id KDVVqtFyQq0g; Tue, 22 Feb 2011 17:24:44 +0700 (WIT) [3] => from webmail.unsada.ac.id (webmail.unsada.ac.id [222.124.144.182])by webmail.unsada.ac.id (Postfix) with ESMTP id 411F121863B5;Tue, 22 Feb 2011 17:24:42 +0700 (WIT) ) [x-virus-scanned:] => amavisd-new at unsada.ac.id [date:] => Tue, 22 Feb 2011 17:24:21 +0700 (WIT) [from:] => WESTERNUNIONOFFICE [reply-to:] => "westerunionoffc211@wss-id.org" [message-id:] => <13314571.3114.1298370261290.JavaMail.root@webmail> [subject:] => PICK UP THE FIRST $5000.00USD [mime-version:] => 1.0 [content-type:] => text/plain; charset=utf-8 [content-transfer-encoding:] => quoted-printable [x-originating-ip:] => [196.46.245.29] [x-mailer:] => Zimbra 6.0.6_GA_2324.UBUNTU8 (zclient/6.0.6_GA_2324.UBUNTU8) [to:] => undisclosed-recipients:; [x-spam-status:] => No, score=-3.1 [x-spam-score:] => -30 [x-spam-bar:] => --- [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: How are you today? I write to inform you that we have sentyou $5000.00USD through Western Union as we have been given the mandate totransfer your full compensation payment of $1.8Million USD via western unionby the United Nation Government. I have been trying to give you the information,but internet hackers were many and we do not have any means of reaching youfor over two weeks now and even this morning. So,I decided to email you theMTCN and Sender's Name so that you can pick up this $5000.00 USD to enableus send another £5000.00 Pounds by tomorrow as you knows we will be sendingyou only $5000.00 USD per day.Please pick up this information, you are torun fast to any western Union in your country to pick up the $5000.00 USDand send us e-mail back so we can send you another payment tomorrow as soonas possible. Manager Mr Peter Johnson Tell: +234-805-257-5611 +234-806-370-4267Email: westerunionoffc211@wss-id.org E-mail me once you picked up this $5000.00USD today. Here is the western union information to pick up the $5000.00USD, [...] Content analysis details: (-3.1 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server[196.46.245.29 listed in dnsbl.sorbs.net]-2.0 SUBJ_ALL_CAPS Subject is all capitals0.0 LOTS_OF_MONEY Huge... sums of money1.3 RDNS_NONE Delivered to internal network by a host with no rDNS [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.