Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mc_mxw@o7e.net [delivery-date:] => Wed, 25 Sep 2013 18:56:27 -0700 [received:] => Array ( [0] => from c2mds.mailcentro.com ([208.67.179.143]:56278)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1VP0oc-0000Vv-2Yfor mc_mxw@o7e.net; Wed, 25 Sep 2013 18:56:26 -0700 [1] => from wtsd.k12.ms.us (mail.wtsd.k12.ms.us [74.231.185.255])by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with ESMTP id r8Q1uMmw015053for ; Wed, 25 Sep 2013 18:56:22 -0700 [2] => from localhost (localhost.localdomain [127.0.0.1])by wtsd.k12.ms.us (Postfix) with ESMTP id 9DC1A668187;Wed, 25 Sep 2013 16:32:03 -0500 (CDT) [3] => from wtsd.k12.ms.us ([127.0.0.1])by localhost (mail.wtsd.k12.ms.us [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id uLZbnqizkvx7; Wed, 25 Sep 2013 16:32:03 -0500 (CDT) [4] => from localhost (localhost.localdomain [127.0.0.1])by wtsd.k12.ms.us (Postfix) with ESMTP id 2079D66817E;Wed, 25 Sep 2013 16:32:03 -0500 (CDT) [5] => by wtsd.k12.ms.us (Postfix, from userid 101)id 0F8E3668187; Wed, 25 Sep 2013 16:32:03 -0500 (CDT) [6] => from 41.82.112.163 ([41.82.112.163]) by mail.wtsd.k12.ms.us(Horde Framework) with HTTP; Wed, 25 Sep 2013 16:32:02 -0500 ) [x-mc-sender:] => conference_2013@mynet.com [x-mc-ipaddr:] => mail.wtsd.k12.ms.us [74.231.185.255] [x-virus-scanned:] => amavisd-new at wtsd.k12.ms.us [message-id:] => <20130925163202.12916px1jd72necc@mail.wtsd.k12.ms.us> [date:] => Wed, 25 Sep 2013 16:32:02 -0500 [from:] => "sylvester violet" [reply-to:] => con_secretariat@globomail.com [to:] => undisclosed-recipients:; [subject:] => [Bulk?]INTANATIONAL CONFERENCE INVITATION 2013!!! [mime-version:] => 1.0 [content-type:] => text/plain;charset=ISO-8859-1;DelSp="Yes";format="flowed" [content-disposition:] => inline [content-transfer-encoding:] => 7bit [user-agent:] => Internet Messaging Program (IMP) 4.2.2 [x-mc-filter:] => 7.6.9 [x-mc-filter-antivirus:] => Scanned for virus - Status 0 [x-mc-deliveryid:] => 130 [x-mc-ctfilter:] => CT RefID = str=0001.0A090208.52439449.0051,ss=3,pt=R_299226,fgs=0 - Class:Bulk - Virus Threat:Unknown - Phishing Threat:Low [x-mc-filterskip:] => 0 [x-mc-spamscore:] => 40 T 49 [x-spam-status:] => No, score=-0.6 [x-spam-score:] => -5 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Dear Madam/Sir, On behalf of the International Child Right Organization we are delighted to invite you to the United State and Senegal for the Joint World Conference on child right and war-affected children from November 19th to 22nd In the united States and from November 25th to 29th in Senegal. [...] Content analysis details: (-0.6 points, 4.5 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (conference_2013[at]mynet.com) 0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=conference_2013%40mynet.com;ip=208.67.179.143;r=lester.newsblaze.com] 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (conference_2013[at]mynet.com) 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: globomail.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.