An
Email with the Subject "Attn" was
received in one of Scamdex's honeypot email accounts on Fri, 12 Oct 2012 10:42:38 -0700
and has been classified as a Generic Scam Email.
The sender shows as "marjana dar" <dar.marjana@menara.ma>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submitted@scamdex.com,scams@scamdex.com,submissions@scamdex.com
[delivery-date:] => Fri, 12 Oct 2012 10:42:38 -0700
[received:] => Array
(
[0] => from smtp-s5.menara.ma ([196.217.246.123]:43287)by lester.newsblaze.com with esmtp (Exim 4.77)(envelope-from )id 1TMjFs-0006HR-Ha; Fri, 12 Oct 2012 10:42:38 -0700
[1] => from winfesmtp3.menara.local ( [10.0.1.3])by smtp-s5.menara.ma (Symantec Mail Security) with SMTP id 9A.23.16573.63458705; Fri, 12 Oct 2012 17:32:38 +0000 (WET)
[2] => from EXVS21.menara.local ([192.168.5.51]) by winfesmtp3.menara.local with Microsoft SMTPSVC(6.0.3790.4675); Fri, 12 Oct 2012 17:33:42 +0000
)
[x-auditid:] => c0a80a17-b7cf7ae0000040bd-ca-5078543642c1
[to:] => undisclosed-recipients:;
[mime-version:] => 1.0
[content-type:] => multipart/alternative;boundary="----_=_NextPart_001_01CDA89F.B4F2C937"
[content-class:] => urn:content-classes:message
[x-mimeole:] => Produced By Microsoft Exchange V6.5
[subject:] => Attn
[date:] => Fri, 12 Oct 2012 17:29:50 -0000
[message-id:] => <57C9FEEEBF0F7C4FBA6F83059961AEB05E3F0C@EXVS21.menara.local>
[x-ms-has-attach:] =>
[x-ms-tnef-correlator:] =>
[thread-topic:] => Attn
[thread-index:] => Ac2onyxP/O9J/ZleSneTLMHpzOdWHQ==
[from:] => "marjana dar"
[bcc:] =>
[x-originalarrivaltime:] => 12 Oct 2012 17:33:42.0708 (UTC) FILETIME=[B961E740:01CDA89F]
[x-brightmail-tracker:] => AAAAAA==
[x-spam-status:] => No, score=0.1
[x-spam-score:] => 1
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: This is from the email account investigation agency, we where set up by the U.N working under the CIA (Central Intelligence Agency) Bodies, our duties is to monitor and investigate email addresses and mails to prevent individuals from getting scam. [...] Content analysis details: (0.1 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------0.8 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=dar.marjana%40menara.ma;ip=196.217.246.123;r=lester.newsblaze.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
This is from the email account investigation agency, we where set up by the U.N working under the CIA (Central Intelligence Agency) Bodies, our duties is to monitor and investigate email addresses and mails to prevent individuals from getting scam.
You are hereby required to forward to this office via email; emailinvestigation.team@yahoo.com.hk every mail and content of anyone you are dealing any transaction with online or paying money to, or any email you suspect to be scam, so we can investigate them and let you know the legitimacy, and if any is to be Fraudulent, we shall immediately send the FBI after them, and charge them for Fraud
Our duties is to fight against scam and terrorism.
This is from the email account investigation agency, we where set up by the U.N working under the CIA (Central Intelligence Agency) Bodies, our duties is to monitor and investigate email addresses and mails to prevent individuals from getting scam.
You are hereby required to forward to this office via email; emailinvestigation.team@yahoo.com.hk every mail and content of anyone you are dealing any transaction with online or paying money to, or any email you suspect to be scam, so we can investigate them and let you know the legitimacy, and if any is to be Fraudulent, we shall immediately send the FBI after them, and charge them for Fraud
Our duties is to fight against scam and terrorism.
