Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Sun, 15 Sep 2013 13:21:27 -0700 [received:] => Array ( [0] => from defender.whspn.net ([64.119.182.88]:46495)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1VLIox-0000QD-2ifor scam@scamdex.com; Sun, 15 Sep 2013 13:21:27 -0700 [1] => from localhost.localdomain ([127.0.0.1]:56314 helo=webmail.pkmeat.com)by defender.whspn.net with esmtpa (Exim 4.80.1)(envelope-from )id 1VLIln-0005KV-S9; Sun, 15 Sep 2013 14:18:11 -0600 [2] => from 41.190.2.36 ([41.190.2.36]) (proxying for 41.190.2.36) (SquirrelMail authenticated user basit@pkmeat.com) by webmail.pkmeat.com with HTTP; Sun, 15 Sep 2013 14:18:11 -0600 ) [message-id:] => <13ffa5e1c96fc7e7e5f3c6414d717885.squirrel@webmail.pkmeat.com> [date:] => Sun, 15 Sep 2013 14:18:11 -0600 [subject:] => purchase inquiry [from:] => "shady peters" [reply-to:] => megalinespurecompany@yahoo.com [user-agent:] => SquirrelMail/1.4.22 [mime-version:] => 1.0 [content-type:] => text/plain;charset=iso-8859-1 [content-transfer-encoding:] => 8bit [x-priority:] => 3 (Normal) [importance:] => Normal [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - defender.whspn.net [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [47 12] / [47 12] [4] => Sender Address Domain - yahoo.com ) [x-get-message-sender-via:] => defender.whspn.net: authenticated_id: basit@pkmeat.com [x-spam-status:] => No, score=1.4 [x-spam-score:] => 14 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Dear sir/ma, We have received your contact information through an internet base where it is published that you are dealing with the best of good quality products.We are glad to say that we are interested in purchasing your product,to have a long term business co-operation with you company and will be glad if you can login into our placement website to view the product specification and quantity which we need from you and also send to us your best catalog,FOB price list together with necessary details needed for our placement order to you.website http://peter-group.jigsy.com we hope to see your reply soon. [...] Content analysis details: (1.4 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (megalinespurecompany[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: jigsy.com] 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.