Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scams@scamdex.com,scam@scamdex.com [delivery-date:] => Tue, 17 Dec 2013 06:56:00 -0800 [received:] => Array ( [0] => from na01-by2-ndr.ptr.protection.outlook.com ([207.46.108.103]:29897 helo=na01-by2-obe.outbound.protection.outlook.com)by lester.newsblaze.com with esmtps (TLSv1:AES128-SHA:128)(Exim 4.80.1)(envelope-from )id 1Vsw3z-0006gz-CN; Tue, 17 Dec 2013 06:56:00 -0800 [1] => from [180.215.224.214] (180.215.224.214) byDM2PR04MB349.namprd04.prod.outlook.com (10.141.98.139) with Microsoft SMTPServer (TLS) id 15.0.842.7; Tue, 17 Dec 2013 14:55:56 +0000 ) [content-type:] => text/plain; charset="iso-8859-1" [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-description:] => Mail message body [subject:] => I need urgent response...... [to:] => Recipients [from:] => Luis Sarkie [date:] => Tue, 17 Dec 2013 20:25:29 +0530 [reply-to:] => [message-id:] => [x-originating-ip:] => [180.215.224.214] [x-clientproxiedby:] => BY2PR02CA015.namprd02.prod.outlook.com (10.242.234.143)To DM2PR04MB349.namprd04.prod.outlook.com (10.141.98.139) [x-forefront-prvs:] => 006339698F [x-forefront-antispam-report:] => SFV:SPM;SFS:(10009001)(199002)(189002)(23756003)(33646001)(42186004)(218543002)(54356001)(46102001)(76482001)(74706001)(43066001)(31686002)(74876001)(50466002)(80976001)(81816001)(81342001)(69226001)(81542001)(87266001)(47776003)(63696002)(56776001)(66066001)(80022001)(65816001)(77982001)(79102001)(53256004)(59766001)(54316002)(85306002)(51856001)(325944007)(87976001)(77096001)(76786001)(47736001)(50986001)(85852003)(49866001)(83072002)(4396001)(56816005)(76576001)(47976001)(74316001)(76176001)(1496004)(83322001)(74502001)(47446002)(76796001)(74366001)(89136003)(74662001)(64872005)(81686001)(19580405001)(19580395003)(90146001)(62346011);DIR:OUT;SFP:1501;SCL:5;SRVR:DM2PR04MB349;H:[180.215.224.214];CLIP:180.215.224.214;FPR:;RD:InfoNoRecords;A:0;MX:1;LANG:en; [x-originatororg:] => Rosemarie840.onmicrosoft.com [x-spam-status:] => No, score=1.6 [x-spam-score:] => 16 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Dear friend, Compliment and greetings of the day! I am Kevin Young, researcher/consultant of pharmaceutical product working with a pharmaceutical company here in London. I came across your e-mail contact during a comprehensive web research in Indian sites and its my pleasure to contact you for a mutual business relation and I wish this mail will find you in good health and prosperity!I have a business offer which I would like to share with you for a clear understanding and adequate collaboration, hope you will find it extremely reasonable. [...] Content analysis details: (1.6 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 URG_BIZ BODY: Contains urgent matter 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (blumen6[at]rosemarie840.onmicrosoft.com)-0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (blumen6[at]rosemarie840.onmicrosoft.com) 0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 3.7 AXB_ONMS_LEAKS Onmicrosoft Leak Party 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.7 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.