Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Mon, 24 Sep 2012 15:44:24 -0700 [received:] => Array ( [0] => from smtpauth.daycomsmtp.com ([207.178.147.242]:45051 helo=dcs01.dcsrv.com)by lester.newsblaze.com with esmtps (TLSv1:AES256-SHA:256)(Exim 4.77)(envelope-from )id 1TGHO3-0003Yo-IJfor submissions@scamdex.com; Mon, 24 Sep 2012 15:44:24 -0700 [1] => (qmail 25206 invoked by uid 48); 24 Sep 2012 10:47:55 -0700 [2] => from 41.15.77.24 ([41.15.77.24]) bywebmail.thecreativedoodlers.com (Horde Framework) with HTTP; Mon, 24 Sep2012 10:46:53 -0700 ) [message-id:] => <20120924104653.28670az1phklcf4d@webmail.thecreativedoodlers.com> [date:] => Mon, 24 Sep 2012 10:46:53 -0700 [from:] => "steveunash@ups.com" [reply-to:] => steveunash@upsdeliver.com [to:] => undisclosed-recipients: ; [subject:] => Call me 734-757-4799 [mime-version:] => 1.0 [content-type:] => text/plain;charset=ISO-8859-1;DelSp="Yes";format="flowed" [content-disposition:] => inline [content-transfer-encoding:] => 7bit [user-agent:] => Internet Messaging Program (IMP) H3 (4.3.9) [x-spam-status:] => No, score=3.8 [x-spam-score:] => 38 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Esteemed Customer, we are surprise that until this moment we have not heard from you.a certified check of $500,000 (Five Hundred Thousand US Dollars) with us which was issued in your name by the Western Union manager in Michigan.This check was registered to be delivered to your doorstep and the check is ready ,please we will like you to update us about your conclusion with the certified check.call me or get back as soon as you receive this email.We also do not know if you are still willing to receive your certified check in this transaction and we will only be at rest if we hear from you.here is my personal phone number 734 757-4799 contact anytime i will be waiting on your urgent response. Regards Mr Steve unash [...] Content analysis details: (3.8 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 URG_BIZ BODY: Contains urgent matter 0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=steveunash%40ups.com;ip=207.178.147.242;r=lester.newsblaze.com] 0.0 LOTS_OF_MONEY Huge... sums of money 3.0 MONEY_FROM_41 Lots of money from Africa 2.9 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.