Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => webmaster@scamdex.com [delivery-date:] => Wed, 13 Nov 2013 18:56:32 -0800 [received:] => Array ( [0] => from mail.cplire.ru ([195.208.192.26]:23137)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1Vgn6d-00067n-0Cfor webmaster@scamdex.com; Wed, 13 Nov 2013 18:56:32 -0800 [1] => from 211-79-112-27.veetime.com ([211.79.112.27] helo=User)by mail.cplire.ru with esmtpa (Exim 4.80.1 (FreeBSD))(envelope-from )id 1Vgn3D-000IQz-4c; Thu, 14 Nov 2013 06:53:19 +0400 ) [reply-to:] => [from:] => "Muhammad Shafiq" [subject:] => Order list/Catalogs [date:] => Thu, 14 Nov 2013 10:52:54 +0800 [mime-version:] => 1.0 [content-type:] => multipart/mixed;boundary="----=_NextPart_000_002C_01C2A9A6.28CA274E" [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Outlook Express 6.00.2600.0000 [x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2600.0000 [x-spam_score:] => 16.5 [x-spam_score_int:] => 165 [x-spam_bar:] => ++++++++++++++++ [x-spam_report:] => Spam detection software, running on the system "mail", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeThe administrator of that system for details.Content preview: Dear Sir/Madam, We are General Trading Company (GTC) Saudi Arabia, Kindly find the attached Order lists/sample Catalogues and quote your best price, c&f port Jeddah. inform us about payment terms and MOQ. [...] Content analysis details: (16.5 points, 5.0 required) pts rule name description---- ---------------------- ---------------------------------------------------1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP 0.8 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam 0.0 TVD_RCVD_IP TVD_RCVD_IP 2.0 NSL_RCVD_HELO_USER Received from HELO User 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (pouya.network[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.2 MISSING_HEADERS Missing To: header 0.3 FSL_UA FSL_UA 0.1 MISSING_MID Missing Message-Id: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.1 FROM_MISSP_NO_TO From misspaced, To missing 1.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER 0.9 FROM_MISSP_DKIM From misspaced, DKIM dependable 1.7 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to 3.6 FROM_MISSPACED From: missing whitespace 0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.6 FROM_MISSP_EH_MATCH From misspaced, matches envelope 0.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider [x-sa-exim-connect-ip:] => 211.79.112.27 [x-sa-exim-mail-from:] => pouya.network@gmail.com [x-sa-exim-scanned:] => No (on mail.cplire.ru); Message bigger than SAmaxbody (256000) )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.