Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => cj@scamdex.com [delivery-date:] => Tue, 16 Sep 2014 08:43:42 -0700 [received:] => Array ( [0] => from ns.mac-mike.sk ([92.240.253.96]:37015)by lester.newsblaze.com with esmtp (Exim 4.82)(envelope-from )id 1XTuus-0002W4-9efor cj@scamdex.com; Tue, 16 Sep 2014 08:43:42 -0700 [1] => by ns.mac-mike.sk (Postfix, from userid 1001)id B79191304570; Tue, 16 Sep 2014 17:42:54 +0200 (CEST) [2] => from User (unknown [5.39.223.78])by ns.mac-mike.sk (Postfix) with ESMTPA id 9F68D130456C;Tue, 16 Sep 2014 17:42:53 +0200 (CEST) ) [dkim-filter:] => Array ( [0] => OpenDKIM Filter v2.9.0 ns.mac-mike.sk B79191304570 [1] => OpenDKIM Filter v2.9.0 ns.mac-mike.sk 9F68D130456C ) [x-spam-checker-version:] => SpamAssassin 3.3.1 (2010-03-16) on ns.mac-mike.sk [x-spam-flag:] => YES [x-spam-level:] => **************************** [x-spam-status:] => Yes, score=28.0 required=5.0 tests=ADVANCE_FEE_3_NEW,ADVANCE_FEE_4_NEW,ADVANCE_FEE_5_NEW,ALL_TRUSTED,AXB_XMAILER_MIMEOLE_OL_024C2,BAYES_99,BAYES_999,DATE_IN_PAST_06_12,DEAR_BENEFICIARY,FORGED_MUA_OUTLOOK,FORM_FRAUD_5,FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED,FROM_MISSP_MSFT,FROM_MISSP_USER,FROM_MISSP_XPRIO,FSL_CTYPE_WIN1251,FSL_NEW_HELO_USER,HK_SCAM_N8,LOTTO_DEPT,MISSING_HEADERS,MISSING_MID,NSL_RCVD_FROM_USER,REPLYTO_WITHOUT_TO_CC,TO_NO_BRKTS_FROM_MSSP,T_FILL_THIS_FORM_SHORT,T_FROM_MISSP_DKIM,T_SMF_FM_FORGED_REPLYTOautolearn=spam version=3.3.1 [x-spam-report:] => * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP* 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%* [score: 1.0000]* 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam* 0.0 NSL_RCVD_FROM_USER Received from User* 1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date* 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit* ()* 1.0 MISSING_HEADERS Missing To: header* 3.4 HK_SCAM_N8 BODY: HK_SCAM_N8* 3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:* 0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%* [score: 1.0000]* 0.5 MISSING_MID Missing Message-Id: header* 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority* 1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC* 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool* 1.9 FSL_NEW_HELO_USER Spam's using Helo and User* 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait* 0.0 FROM_MISSP_USER From misspaced, from "User"* 2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From* 0.0 T_SMF_FM_FORGED_REPLYTO Freemail in Reply-To, but not From* 1.2 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors* 0.0 FROM_MISSPACED From: missing whitespace* 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable* 1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook* 2.0 LOTTO_DEPT Claims Department* 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal* information* 2.2 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)* 0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)* 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases* 2.6 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) [reply-to:] => [from:] => "Mrs. Joyce Savage" [subject:] => [SPAM] DEAR BENEFICIARY / Notice of your compensation payment. [date:] => Tue, 16 Sep 2014 00:53:15 -0700 [mime-version:] => 1.0 [content-type:] => text/plain;charset="Windows-1251" [content-transfer-encoding:] => 7bit [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Outlook Express 6.00.2600.0000 [x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2600.0000 [x-spam-prev-subject:] => DEAR BENEFICIARY / Notice of your compensation payment. [message-id:] => <20140916154254.B79191304570@ns.mac-mike.sk> [to:] => undisclosed-recipients:; )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

Dear Beneficiary,
NOTICE OF YOUR PAYMENT

I write to notify you of the payment of your compensation fund to this office as one those that has 
been Scammed through African countries mainly from Nigeria. You only have to re-verify your data 
such as your full name, your address, your phone number and your occupation so it can be used to 
authenticate you as the legal owner of this fund. Immediately this is done successfully, you will 
be given every details of your compensation fund and the amount accrue to you.

However, you are to contact the Supervising Agent in charge of this payment; his name is Mr. Smith 
Brad. He has been given the full mandate to get your fund paid to you, so kindly send the required 
information through his email address at ( smith.brad1158@aol.com ) for immediate processing of 
your compensation sum.

Your immediate response to this email will be fully appreciated.

Yours Faithfully,
For: UNITED NATIONS

Mrs. Joyce Savage