Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Thu, 31 Jan 2013 05:15:34 -0800 [received:] => Array ( [0] => from imta-35.everyone.net ([216.200.145.35]:38486 helo=imta-38.everyone.net)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80)(envelope-from )id 1U0tzJ-0004JP-Ltfor submitted@scamdex.com; Thu, 31 Jan 2013 05:15:34 -0800 [1] => from pps.filterd (m0004961 [127.0.0.1])by imta-38.everyone.net (8.14.4/8.14.4) with SMTP id r0VDD9IR011469;Thu, 31 Jan 2013 05:13:26 -0800 [2] => from mail.barnget.ru (mail.barnget.ru [81.201.242.106])by dm42.mta.everyone.net (EON-INBOUND) with ESMTP id dm42.51091aa0.20a652for ; Thu, 31 Jan 2013 05:13:25 -0800 [3] => from www-data by mail.barnget.ru with local (Microsoft ESMTP )(envelope-from ) ; Thu, 31 Jan 2013 20:12:03 +0700 ) [x-eon-delivered-to:] => [x-eon-dm:] => dm42 [to:] => undisclosed-recipients:; [subject:] => Este es su mensaje directo de UBS Investment Bank de Londres. [x-php-originating-script:] => 0:main.inc [mime-version:] => 1.0 [content-type:] => text/plain;charset=UTF-8;format=flowed [content-transfer-encoding:] => 8bit [date:] => Thu, 31 Jan 2013 13:12:03 +0000 [from:] => JJ Harris [reply-to:] => [mail-reply-to:] => [message-id:] => <83aadc0581b4762859a530eb62c7bf25@barnget.ru> [x-sender:] => jjharris010@gmail.com [user-agent:] => BarnGET Webmail/0.7.1 [sender:] => www-data [x-eon-alias-sig:] => AQI82n9RCm31DZuI1QEAAAAY,03aadd21f4f740ab946b711fca835c54 [x-proofpoint-virus-version:] => vendor=fsecure engine=2.50.10432:5.9.8327,1.0.431,0.0.0000definitions=2013-01-31_03:2013-01-31,2013-01-31,1970-01-01 signatures=0 [x-proofpoint-spam-details:] => rule=notspam policy=default score=4 spamscore=4 ipscore=0 suspectscore=0phishscore=9 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlxscancount=1 engine=6.0.2-1211240000 definitions=main-1301310064 [x-spam-status:] => No, score=0.0 [x-spam-score:] => 0 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: -- A la atención de: He pasado por tu perfil y me enteré de que usted comparte el mismo nombre con mi cliente tarde. Él tiene fondos aquí en UBS Investment Bank de Londres, que todavía no se han reivindicado, pero nadie ha llegado para la reclamación porque no tiene parientes que son conocidos por mí, por favor, hágamelo saber si usted puede ayudar y estar de pie para hacer esta afirmación ya que tienen el mismo apellido. [...] Content analysis details: (0.0 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (jjharris010[at]gmail.com)-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [216.200.145.35 listed in list.dnswl.org] [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.