Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => Scams@scamdex.com [delivery-date:] => Thu, 03 Nov 2011 05:27:10 -0700 [received:] => Array ( [0] => from mail-iy0-f193.google.com ([209.85.210.193])by lester.newsblaze.com with esmtps (TLSv1:RC4-SHA:128)(Exim 4.69)(envelope-from )id 1RLwNx-0000sN-O5for Scams@scamdex.com; Thu, 03 Nov 2011 05:27:10 -0700 [1] => by iaqq3 with SMTP id q3so411606iaq.4 for ; Thu, 03 Nov 2011 05:27:07 -0700 (PDT) [2] => by 10.182.41.69 with SMTP id d5mr1787562obl.47.1320323223350; Thu,03 Nov 2011 05:27:03 -0700 (PDT) [3] => by 10.182.43.198 with HTTP; Thu, 3 Nov 2011 05:27:03 -0700 (PDT) ) [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; bh=hOPbYZa4YHB8vkCWXN0Qsd7TOm58vYfbhfzWGv5C0TA=; b=nT3eGUh/lVrYRW99ebT+U8nYWFeTReBYwuAhRr3VMKwZiAfN23HQ2+B+wCh+u0qNCz WI/eMQ2JGGlJgrZmUUkMXzvAFTZN6o/wnJ4F03LAGjGt+oAfeGZcZw4ZH1i0vvyrOIQm p9DvQamWIoyXaWsxEcg4yO+VPo+ZmJAKDde08= [bcc:] => Scams@scamdex.com [mime-version:] => 1.0 [date:] => Thu, 3 Nov 2011 04:27:03 -0800 [message-id:] => [subject:] => Y0UR E-MAlL lD HAS W0N Y0U A PRlZE CHEQUE 0F (US$75O,OOO.OO) [from:] => Barrister Williams [to:] => cheshirehawkingclub@hotmail.co.uk [content-type:] => text/plain; charset=ISO-8859-1 [x-spam-status:] => No, score=2.9 [x-spam-score:] => 29 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: E.N.F NATl0NAL HEADQUARTERS L0ND0N-UK WlNNlNG~FlLE N0: FD2349QUIDE-MAlL~REF N0: Enf234417532719746 TlCKET ~ NUMBER : Enf 6781345 ====================================================DEAR E-MAlL ACC0UNT 0WNER; ================================================================C0NGRATULATl0NS! WE HAPPlLY ANN0UNCE T0 Y0U THE E.N.F C0RP0RATl0N PR0M0Tl0NALDRAW 2011! Y0UR E-MAlL lD HAS W0N Y0U A PRlZE CHEQUE 0F (US$75O,OOO.OO) SEVENHUNDRED & FlFTY TH0USAND US D0LLARS lN 0UR M0NTHLY EMAlL AWARD PR0M0TI0NWHlCH lS PR0UDLY 0RGANlZED BY THE EUR0PEAN NATl0NAL FUND lNC L0ND0N lN C0NJUNCTl0NWlTH THE MlCR0S0FT C0RP0RATl0N lNTERNATl0NAL EMAlL L0TTERY W0RLDWlDE PR0M0Tl0NT0 M0TlVATE & ENC0URAGE THE USE 0F THE C0MPUTER lNTERNET GL0BALLY W0RLDWlDE.============================== =========== ANNUALLY E.N.F! C0LLECTS ALL THEEMAlL lD'S 0F THE PE0PLE THAT ARE 0NLlNE 0N WlND0WS LlVE! AM0NG THE MlLLl0NSTHAT SUBSCRlBE T0 YAH00! AND VARl0US MlCR0S0FT WlND0WS USERS! Y0UR E-MAlLlD WAS PlCKED BY THE MlCR0S0FT AUT0MATED C0MPUTER BALL0T SYSTEM AS THE lNTERNETACTlVE USER! THlS HAS EVENTUALLY QUALlFlED Y0U F0R THE WlNNlNG. 0UR PARTlClPANTSlN THlS L0TTERY PR0GRAM WERE SELECTED RAND0MLY THR0UGH MlCR0S0FT AUT0MATEDC0MPUTER BALL0T SYSTEM WlTH0UT THE WlNNER APPLYlNG. WE ARE C0NGRATULATlNGY0U F0R BElNG 0NE 0F THE PE0PLE SELECTED F0R THlS SEC0ND RAND0M F0R THE YEAR2011. ============================== =============================== PLEASE,N0TE THAT Y0UR LUCKY WlNNlNG NUMBER FALLS WlTHlN 0UR ASlAN REPRESENTATlVE'SB00KLET lN JAKARTA - lND0NESlA AS lNDlCATED lN Y0UR {FlLE NUMBER: FD2349QUlD}.lN VlEW 0F THlS, Y0UR W0N PRlZE CHEQUE 0F {$750,000.00 US D0LLARS} W0ULDBE RELEASED T0 Y0U BY 0UR PAYMENT CLAlM AGENT, 0UR PAYMENT CLAlM AGENT WlLLlMMEDlATELY C0MMENCE THE PR0CESS T0 FAClLlTATED THE RELEASE 0F Y0UR W0N PRlZECHEQUE AS S00N AS Y0U C0NTACT BARRlSTER 0FFlCE IN JAKARTA, INDONESIA. ==========================================H0W T0 CLAlM? KlNDLY C0NTACT BARRlSTER NWAFOR KENNETH 0FFlCE IN JAKARTA,VIAHlS C0NTACT EMAlL lD AND TELEPH0NE NUMBER [...] Content analysis details: (2.9 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, lowtrust[209.85.210.193 listed in list.dnswl.org]0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(barristerwilliams111[at]gmail.com)-0.0 SPF_PASS SPF: sender matches SPF record0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (barristerwilliams111[at]gmail.com)0.0 T_FRT_ABSOLUT BODY: ReplaceTags: Absolutely0.0 T_FRT_BEFORE BODY: ReplaceTags: Before0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)0.0 T_FRT_FOLLOW2 BODY: ReplaceTags: Follow (2)2.6 FUZZY_MILLION BODY: Attempt to obfuscate words in spam0.0 T_FRT_CONTACT BODY: ReplaceTags: Contact0.0 T_FRT_FOLLOW1 BODY: ReplaceTags: Follow0.0 LOTS_OF_MONEY Huge... sums of money0.8 UPPERCASE_50_75 message body is 50-75% uppercase0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service0.0 AWL AWL: From: address is in the auto white-list [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.