Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => Scams@scamdex.com [delivery-date:] => Mon, 12 Mar 2012 02:19:17 -0700 [received:] => Array ( [0] => from [217.124.178.15] (helo=srv1.extremadura.es)by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1S71PQ-00066H-JOfor Scams@scamdex.com; Mon, 12 Mar 2012 02:19:17 -0700 [1] => from localhost (localhost [127.0.0.1])by srv1.extremadura.es (Postfix) with ESMTP id A0C2E72F057;Mon, 12 Mar 2012 10:08:25 +0100 (CET) [2] => from srv1.extremadura.es ([127.0.0.1])by localhost (srv1.extremadura.es [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id TSHTRLtZ8Lbu; Mon, 12 Mar 2012 10:08:25 +0100 (CET) [3] => from correo.extremadura.es (unknown [172.30.238.138])(Authenticated sender: rafael.gomez84@srv1.extremadura.es)by srv1.extremadura.es (Postfix) with ESMTP id 9D7F172EC61;Mon, 12 Mar 2012 09:47:08 +0100 (CET) [4] => from 41.218.252.131 (SquirrelMail authenticated user rafael.gomez84) by correo.extremadura.es with HTTP; Mon, 12 Mar 2012 09:46:51 +0100 (CET) ) [x-virus-scanned:] => Debian amavisd-new at extremadura.es [message-id:] => <18366.41.218.252.131.1331542011.squirrel@correo.extremadura.es> [date:] => Mon, 12 Mar 2012 09:46:51 +0100 (CET) [subject:] => This Will Be Beneficial To All Parties Concerned (Inheritance) [from:] => vanvoorst@gmx.com [reply-to:] => vanvoorstt@gmx.com [user-agent:] => SquirrelMail/1.4.9a [mime-version:] => 1.0 [content-type:] => text/plain;charset=iso-8859-15 [x-priority:] => 3 (Normal) [importance:] => Normal [to:] => undisclosed-recipients:; [content-transfer-encoding:] => quoted-printable [x-spam-subject:] => ***SPAM*** This Will Be Beneficial To All Parties Concerned (Inheritance) [x-spam-status:] => Yes, score=4.4 [x-spam-score:] => 44 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Friend, Compliments, I am Mr.Van Voorst the former SalesManager in the SNS Bank Rotterdam area but am now based in United Kingdomafter I retired, I have a proposal to discuss with you is about a certainbonded account in SNS bank, which shares the same last name with yours, Pleasecontact me through my email if you are interested to know more. [...] Content analysis details: (4.4 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(vanvoorst[at]gmx.com)1.5 RCVD_IN_NJABL_SPAM RBL: NJABL: sender is confirmed spam source[217.124.178.15 listed in combined.njabl.org]2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL[217.124.178.15 listed in psbl.surriel.com]0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=vanvoorst%40gmx.com;ip=217.124.178.15;r=lester.newsblaze.com]-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear!1.3 RDNS_NONE Delivered to internal network by a host with no rDNS1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails [x-spam-flag:] => YES )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.