Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => contact@stoptot.com [delivery-date:] => Wed, 13 Apr 2011 10:59:45 -0700 [received:] => Array ( [0] => from mail-pz0-f49.google.com ([209.85.210.49])by chester.loopbiz.com with esmtps (TLSv1:RC4-SHA:128)(Exim 4.69)(envelope-from )id 1QA4Lw-0001UG-RSfor contact@stoptot.com; Wed, 13 Apr 2011 10:59:45 -0700 [1] => by pzk5 with SMTP id 5so393808pzk.8 for ; Wed, 13 Apr 2011 10:59:46 -0700 (PDT) [2] => by 10.142.142.4 with SMTP id p4mr1154953wfd.43.1302717586137; Wed, 13 Apr 2011 10:59:46 -0700 (PDT) [3] => from adsl-69-108-103-219.dsl.irvnca.pacbell.net? (adsl-69-108-126-137.dsl.irvnca.pacbell.net [69.108.126.137]) by mx.google.com with ESMTPS id n4sm1091163wfl.14.2011.04.13.10.59.44 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 13 Apr 2011 10:59:45 -0700 (PDT) ) [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:message-id:from:subject:to:content-type :mime-version:content-transfer-encoding:date; bh=1LvuSiVa15HpYKQiCmdE5Vv+bc/+Z1YcKYHHDilFU00=; b=olM+Q3+YFUy2QvekcidWFLdSl6nxRiPrn0FJYRxSmzFBQQgNA01pD50ex6+WqVOH98 v8SS6ZF8X0jnqsFt12YUopArUA+5AlY0vgrK+jYAQyU/iYo7S3lQOz1Pk4pYdVMAinie QOhDi+UQtjLAuLj0T+9jtTNs+zyS2UdfISvzE= [domainkey-signature:] => a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:subject:to:content-type:mime-version :content-transfer-encoding:date; b=k7BuqhSq7ejkzHMgjf+FTt+lLbTOTUGEOHkvSMizo7d86tyqIPBS0DrcF3RcG9mQ8y wAzxG6oopJOCWN3ZEuuSscF5GkkpmVoBabE4Ws38hmv94LgkmOtRhKI5gdeJef/vViN0 fciYROUYE43k81QESw3gJko9NBfNi1kJfRasI= [message-id:] => <4da5e491.04558f0a.2cd9.3e4a@mx.google.com> [from:] => "george" [subject:] => please help your brother [to:] => "contact" [content-type:] => multipart/alternative; boundary="fLXmCssmDl4esQX8ARMCv=_AZ5MqfyQNof" [mime-version:] => 1.0 [content-transfer-encoding:] => 8bit [date:] => Wed, 13 Apr 2011 11:00:23 -0700 [x-spam-status:] => No, score=1.5 [x-spam-score:] => 15 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: 04-13-2011 Dear: Your Excellency As you know helping yourbrother from another country is a favor in a name of our prophet Mohammad.If you have excess fund in which is put aside for distribution for poor people,I want to have this chance to receive your free will donation. [...] Content analysis details: (1.5 points, 5.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, lowtrust[209.85.210.49 listed in list.dnswl.org]0.0 FREEMAIL_FROM Sender email is freemail (behzady005[at]gmail.com)-0.0 SPF_PASS SPF: sender matches SPF record2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (behzady005[at]gmail.com)0.0 HTML_MESSAGE BODY: HTML included in message [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.