Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Wed, 05 Mar 2014 01:01:41 -0800 [received:] => Array ( [0] => from sitemail3.everyone.net ([216.200.145.37]:49394 helo=imta-37.everyone.net)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1WL7ht-00075V-8Cfor submitted@scamdex.com; Wed, 05 Mar 2014 01:01:41 -0800 [1] => from pps.filterd (omta004.sj2.proofpoint.com [127.0.0.1])by imta-38.everyone.net (8.14.5/8.14.5) with SMTP id s258vFp6008387;Wed, 5 Mar 2014 00:57:51 -0800 [2] => from mail-ve0-f193.google.com (mail-ve0-f193.google.com [209.85.128.193])by m0005470.mta.everyone.net (EON-INBOUND) with ESMTP id m0005470.52e880af.7ffe148for ; Wed, 5 Mar 2014 00:57:51 -0800 [3] => by mail-ve0-f193.google.com with SMTP id oz11so256609veb.8 for ; Wed, 05 Mar 2014 00:57:50 -0800 (PST) [4] => by 10.52.251.135 with HTTP; Wed, 5 Mar 2014 00:51:11 -0800 (PST) ) [x-eon-delivered-to:] => [x-eon-dm:] => m0005470.ppops.net [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=HHcoAoN/GPClhEuMjT4wqbFCtjfXWQDCiJdzZgqwzHw=; b=HaBy81yrNR1gLmnEX9B1KRowgpv96dbJF6gLtO/nNyTwe1PjQldhVuLo1xuwCftqSE l5yKuYAP8KVxS5AiQI0G4x5PNmUIkYPGV68A+korC6/RD+8gLaetMjDtcb6LTLNy5dM0 101R26TVU6ChWhsBCeGkg28pRDo0h3w/MmNE2POYevt2aVBiKwxvH69M4l4d5dNEX4cv mtrVAyoxlbx+FmORX6jwj7Vjn1AR3gFHM1Dkaxlh19Od/iqfuCGNQxEqffV5fTehlL4Y qB76+ot2WMettHaKkYyeufK5Q3if2S5+oYpnlbFgAyU9vupZ2oTWaHahbheZk6uBkCQX SoxA== [mime-version:] => 1.0 [x-received:] => by 10.220.95.139 with SMTP id d11mr3560310vcn.21.1394009471520;Wed, 05 Mar 2014 00:51:11 -0800 (PST) [date:] => Wed, 5 Mar 2014 08:51:11 +0000 [message-id:] => [subject:] => I NEED A REPRESENTATION [from:] => smith carter [to:] => undisclosed-recipients:; [content-type:] => multipart/alternative; boundary=001a11c2ae765d150704f3d81fa8 [x-eon-alias-sig:] => AQI82n9TFucP+zqS/QEAAAAY,8d57ffd22af80bd7fa73f2a708c51b3b [x-proofpoint-virus-version:] => vendor=fsecure engine=2.50.10432:5.11.87,1.0.14,0.0.0000definitions=2014-03-05_03:2014-03-05,2014-03-05,1970-01-01 signatures=0 [x-proofpoint-spam-details:] => rule=notspam policy=default score=32 spamscore=32 suspectscore=1phishscore=0 adultscore=5 bulkscore=0 classifier=spam adjust=0 reason=mlxscancount=1 engine=7.0.1-1305240000 definitions=main-1403050009 [x-spam-status:] => No, score=-2.0 [x-spam-score:] => -19 [x-spam-bar:] => -- [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Dear Counsel, I am seeking legal representation from your law firm regarding a breach of divorce settlement agreement I had with my ex husband who now reside in your jurisdiction. We had an out of court agreement for him to pay me $641,000.00 plus legal fees. He has only paid me $71,000 ever since this agreement was reached. [...] Content analysis details: (-2.0 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mariamj0147[at]gmail.com)-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.