Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scamdex@scamdex.com [delivery-date:] => Thu, 27 Mar 2014 19:46:28 -0700 [received:] => Array ( [0] => from mail.aspireofillinois.org ([173.161.18.220]:53326)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1WTMoO-0005P1-1pfor scamdex@scamdex.com; Thu, 27 Mar 2014 19:46:28 -0700 [1] => from localhost (localhost.localdomain [127.0.0.1])by mail.aspireofillinois.org (Postfix) with ESMTP id 94DA155B2D;Thu, 27 Mar 2014 20:07:15 -0500 (CDT) [2] => from mail.aspireofillinois.org ([127.0.0.1])by localhost (mail.aspireofillinois.org [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id TPZt8VHY2lws; Thu, 27 Mar 2014 20:07:14 -0500 (CDT) [3] => from srv-rdp.etiketki.local (unknown [82.209.218.12])by mail.aspireofillinois.org (Postfix) with ESMTPSA id 91A4C4BC16;Thu, 27 Mar 2014 20:07:05 -0500 (CDT) ) [x-virus-scanned:] => amavisd-new at mail.aspireofillinois.org [content-type:] => text/plain; charset="utf-8" [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-description:] => Mail message body [to:] => michealbrandon50@gmail.com [from:] => "Michael Brandon" [date:] => Fri, 28 Mar 2014 04:06:56 +0300 [reply-to:] => michealbrandon50@gmail.com [message-id:] => <20140328010705.91A4C4BC16@mail.aspireofillinois.org> [x-spam-status:] => Yes, score=4.8 [x-spam-score:] => 48 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Hi, I am Michael Brandon from America, 31 years of age. I have a little problem but will enlarge our coast if only you can believe it; my late friend who died Twelve days ago had 100 kilo of Gold Dust with a Gold Mining Company in London. I am contacting you because I need your help in regards to this issue. I have contacted the Gold Company in London to ship the 100 kilo of Gold Dust to me but the Company asked me to pay for the shipment of the Gold Dust. I am contacting you and at the same time if you can be my partner so we can both put head together and pay the shipping cost and share the Gold Dust among ourselves 50/50. But this shipment fee will be paid only when you confirm that the Gold Dust has arrived into your country through online courier tracking. Please note if you want the Gold Company to ship in the Gold Dust to your destination first no problem I believe that when the Gold Dust finally get to your destination later I can fly down and meet with you and collect my own share of 50 kilo. [...] Content analysis details: (4.8 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (michealbrandon50[at]gmail.com) 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [173.161.18.220 listed in psbl.surriel.com] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [173.161.18.220 listed in bb.barracudacentral.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (michealbrandon50[at]gmail.com) 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list [x-spam-flag:] => YES [subject:] => ***SPAM*** WITH DEFINITE TRUST )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.