Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Sat, 19 May 2012 11:44:12 -0700 [received:] => Array ( [0] => from imta-35.everyone.net ([216.200.145.35]:55649 helo=imta-38.everyone.net)by lester.newsblaze.com with esmtps (TLSv1:AES256-SHA:256)(Exim 4.77)(envelope-from )id 1SVodQ-0000no-CBfor submitted@scamdex.com; Sat, 19 May 2012 11:44:12 -0700 [1] => from pps.filterd (omta001 [127.0.0.1])by imta-38.everyone.net (8.14.4/8.14.4) with SMTP id q4JIWCoe025294;Sat, 19 May 2012 11:33:26 -0700 [2] => from mail-lb0-f194.google.com (mail-lb0-f194.google.com [209.85.217.194])by dm0223.mta.everyone.net (EON-INBOUND) with ESMTP id dm0223.4f90dc56.5623565for ; Sat, 19 May 2012 11:33:25 -0700 [3] => by lbom4 with SMTP id m4so108752lbo.9 for ; Sat, 19 May 2012 11:33:23 -0700 (PDT) [4] => by 10.112.47.8 with SMTP id z8mr6500739lbm.51.1337446476409; Sat, 19May 2012 09:54:36 -0700 (PDT) [5] => by 10.114.25.99 with HTTP; Sat, 19 May 2012 09:54:36 -0700 (PDT) ) [x-eon-delivered-to:] => [x-eon-dm:] => dm0223 [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=M9XciellCn0YjYyRWb2xTjwqAdykDbMosTzHBFJqEFI=; b=RNYUIBPJyeQ1VWBegZYSucyPjDRm0ej6xLcjrHtZxbBqrlFo3FJeV80SDd2UbGO0nF 87jCbBP4pP3Kl2SPXCFjs5byC7ezrppzqBVp9J0NWOm4mFoViPxoG1XTqvOsCCtmR555 kgrT1WDQqTw8UxL8Fr5JxCs6LOFNZJw/dFvaZu2uLhQ0UZjfFqgG16NgNDrS+GVT0ziU sHC/3WZ4xri/piVPwysSVTBEru9jzfpneFM7xFTSE8+hAwv6cyUMdUJgEBKYgiCQYjiz Td2eL0WautfY9VGNObOuDXmOmVNnWdVJtTGX1U0rTbr4m1FVwx+6+LgvHJvfkgYJqZhX rQYQ== [mime-version:] => 1.0 [date:] => Sun, 20 May 2012 00:54:36 +0800 [message-id:] => [subject:] => URGENT PRODUCTS INQUIRY [from:] => "Miguel Trading Co." [to:] => undisclosed-recipients:; [content-type:] => multipart/alternative; boundary=bcaec555562221f38104c0668642 [x-proofpoint-virus-version:] => vendor=fsecure engine=2.50.10432:5.6.7580,1.0.260,0.0.0000definitions=2012-05-19_07:2012-05-18,2012-05-19,1970-01-01 signatures=0 [x-proofpoint-spam-details:] => rule=notspam policy=default score=5 spamscore=5 ipscore=0 suspectscore=10phishscore=0 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlxscancount=1 engine=6.0.2-1203120001 definitions=main-1205190178 [x-spam-status:] => No, score=-1.3 [x-spam-score:] => -12 [x-spam-bar:] => - [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Suppliers, Hope everything goes well, We got a recommendation of you from one of your customers about your products. Hope you can ship to any of our branches both in south east Asia, United Arab Emirates, Australia and south America. [...] Content analysis details: (-1.3 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mickwelltradingcompany[at]gmail.com) 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.0 HTML_MESSAGE BODY: HTML included in message [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.