Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Fri, 10 Jan 2014 03:47:18 -0800 [received:] => Array ( [0] => from mail-pd0-f194.google.com ([209.85.192.194]:45992)by lester.newsblaze.com with esmtps (TLSv1:RC4-SHA:128)(Exim 4.80.1)(envelope-from )id 1W1aYX-0001MN-BAfor submitted@scamdex.com; Fri, 10 Jan 2014 03:47:17 -0800 [1] => by mail-pd0-f194.google.com with SMTP id g10so3329712pdj.1 for ; Fri, 10 Jan 2014 03:47:19 -0800 (PST) [2] => by 10.70.131.230 with HTTP; Fri, 10 Jan 2014 02:45:33 -0800 (PST) ) [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:message-id:subject:from:to:content-type; bh=thL1PoZf3Pf4SVdVvu2fQb+EUbX0eOo1zVfaDEPlJjI=; b=iZSFgIm0o1HU4YpLcCKfjjDwyXBwUFLGQAYRI/od4d0/HruFWuN/Ndb8Bt+MbqqTSD mljeLCy6UYPDt9vJBVxX9k4ANijzSMevNMY3tEi8W5Tu1QTR0VuSZj3kZD64r3oYbyPe 3qYTlvjHLs1m4R/cN+F3DEcf/SvJFtn1s3jqT7/Kr21EPZrWVv3JcmKqYkkqxs/D9on1 YLIAYavqemfbEhvdpPF2rcqfekjcbDZfWG1OGPbBlVko1pZNbbLvif6dup1LQRi1rfmG BxadvsPWSajOOS6Hgl5tceXLFEZDZClOjf4IHxeXUv/AX5kITigumd5j+Jg0jcCYGpLq uVsQ== [mime-version:] => 1.0 [x-received:] => by 10.68.106.130 with SMTP id gu2mr10259445pbb.59.1389350733979;Fri, 10 Jan 2014 02:45:33 -0800 (PST) [sender:] => aaaaabere@gmail.com [date:] => Fri, 10 Jan 2014 10:45:33 +0000 [x-google-sender-auth:] => mlm9h7SCnNAXknr_dk_1sX-8J7Q [message-id:] => [subject:] => hi [from:] => aaaaabere andrew [to:] => undisclosed-recipients:; [content-type:] => multipart/alternative; boundary=047d7b6d7c1cf7b9ca04ef9b6caa [bcc:] => submitted@scamdex.com [x-spam-status:] => No, score=2.8 [x-spam-score:] => 28 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: hello my name is miss abeera andrew,i will like you to be my close friend, if you accept it contact me at my email(abeeraandrew1990@yahoo.com.sg)for my photos and more details about me,thanks abeera hello my name is miss abeera andrew,i will like you to be my close friend, if you accept it contact me at my email(abeeraandrew1990@yahoo.com.sg)for my photos and more details about me,thanks abeera [...] Content analysis details: (2.8 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.6 HK_RANDOM_ENVFROM Envelope sender username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (aaaaabere[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED-0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLY From and body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.