Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => paypal@o7e.net [delivery-date:] => Tue, 25 Feb 2014 08:45:45 -0800 [received:] => Array ( [0] => from outrelay04.libero.it ([212.52.84.105]:42691)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1WIL8a-0007YW-RAfor paypal@o7e.net; Tue, 25 Feb 2014 08:45:45 -0800 [1] => from outrelay01.libero.it (192.168.34.10) by outrelay04.libero.it (8.5.140.03) id 530761680033FB38 for paypal@o7e.net; Tue, 25 Feb 2014 17:45:44 +0100 [2] => from webmail21 (172.31.0.141) by outrelay01.libero.it (8.5.140.03) id 53075FB700747E66; Tue, 25 Feb 2014 17:43:15 +0100 ) [x-ctch-spam:] => Array ( [0] => Unknown [1] => Unknown ) [x-ctch-refid:] => Array ( [0] => str=0001.0A0C0201.530CC8B8.015B,ss=1,re=0.000,fgs=0 [1] => str=0001.0A0C0203.530CC824.0004,ss=1,re=0.000,fgs=0 ) [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=libero.it; s=20120403; t=1393346745; bh=lx2383WvMF+WeE+kVvgixhT++OZYYrf/J38yu0Xbjp8=; h=Message-ID:Date:From:Reply-To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding; b=IFb7HTVrAqq+LkqtbDsTs9Hcn+ahXsQ7dhWYw850g8SCRjHAFVheWrX9p2NVPPJuKVCxjNddThHR4kgTFNR9zvGJ2Uf0mEVRJL0AXLH22gBKLeJvu1iapcgXrGCjCwNkhOcCKNMy5Kz0GILS2gdren48+XDutqmCuGpc/wepvNg= [x-libjamoibt:] => 1587 [message-id:] => <459625508.18459921393346595862.JavaMail.defaultUser@defaultHost> [date:] => Tue, 25 Feb 2014 17:43:15 +0100 (CET) [from:] => benitajohnson883 [reply-to:] => benitajohnson112@outlook.com [subject:] => Hello [mime-version:] => 1.0 [content-type:] => text/plain;charset="UTF-8" [content-transfer-encoding:] => 7bit [x-senderip:] => 41.82.177.120 [x-libjamv:] => 42lIh1ZrLW4= [x-libjamsun:] => aw1V6H0ez/sSiVsETVQz0Jr3sDQ66kXJ9gVkD2tU4P8= [x-spam-status:] => No, score=4.2 [x-spam-score:] => 42 [x-spam-bar:] => ++++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Hello My name is BenitaJohnson i saw your profile toda and became interested in you,i will also like to know you the more,and i want you to send an email to my email address so i can give you my picture for you to know whom i am.Here is my email address (benitajohnson112@outlook.com) I believe we can move from here!I am waiting for your mail to my email address above. Benita (Remeber the distance or colour does not matter but love matters alot in life) please contact me here (benitajohnson112@outlook.com) [...] Content analysis details: (4.2 points, 4.5 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FROM_LOCAL_DIGITS From: localpart has long digit sequence 0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (benitajohnson8832222222222222[at]libero.it)-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (benitajohnson8832222222222222[at]libero.it) 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.