Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Thu, 06 Mar 2014 04:55:31 -0800 [received:] => Array ( [0] => from imta-38.everyone.net ([216.200.145.38]:35630)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1WLXpi-0001a3-1Xfor submitted@scamdex.com; Thu, 06 Mar 2014 04:55:31 -0800 [1] => from pps.filterd (omta003.sj2.proofpoint.com [127.0.0.1])by imta-38.everyone.net (8.14.5/8.14.5) with SMTP id s26CrbtY003050;Thu, 6 Mar 2014 04:53:37 -0800 [2] => from shredder.s7media.co.uk (109.73.168.201 [109.73.168.201])by dm0215.mta.everyone.net (EON-INBOUND) with ESMTP id dm0215.52e880f0.137c58for ; Thu, 6 Mar 2014 04:53:36 -0800 [3] => from gafootpr by shredder.s7media.co.uk with local (Exim 4.82)(envelope-from )id 1WLXhd-0002XS-Dyfor advance@antihotmail.com; Thu, 06 Mar 2014 15:47:09 +0300 ) [x-eon-delivered-to:] => [x-eon-dm:] => dm0215 [to:] => advance@antihotmail.com [subject:] => FW:Re: ATTACHED SWIFT FOR PAYMENT [x-php-script:] => www.ga-footprint.co.uk/tools/Mailer.php for 175.142.227.193 [from:] => Hassan [mime-version:] => 1.0 [content-type:] => text/html [content-transfer-encoding:] => 8bit [message-id:] => [date:] => Thu, 06 Mar 2014 15:47:09 +0300 [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - shredder.s7media.co.uk [2] => Original Domain - antihotmail.com [3] => Originator/Caller UID/GID - [503 32007] / [47 12] [4] => Sender Address Domain - shredder.s7media.co.uk ) [x-get-message-sender-via:] => shredder.s7media.co.uk: authenticated_id: gafootpr/only user confirmed/virtual account not confirmed [x-source:] => /usr/bin/php [x-source-args:] => /usr/bin/php /home/gafootpr/public_html/tools/Mailer.php [x-source-dir:] => ga-footprint.co.uk:/public_html/tools [sender:] => [x-eon-alias-sig:] => AQI82n9TGG/Qtq0fcAEAAAAY,edcb3b52fc2e457694f5d40c39edab1f [x-proofpoint-virus-version:] => vendor=fsecure engine=2.50.10432:5.11.87,1.0.14,0.0.0000definitions=2014-03-06_03:2014-03-05,2014-03-06,1970-01-01 signatures=0 [x-proofpoint-spam-details:] => rule=notspam policy=default score=0 spamscore=0 suspectscore=32phishscore=98 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlxscancount=1 engine=7.0.1-1305240000 definitions=main-1403060033 [x-spam-status:] => No, score=-1.2 [x-spam-score:] => -11 [x-spam-bar:] => - [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Dear Sir, Please find T/T copy of payment for our order. Kindly please Confirm receipt and do the needful asap. Regards, Hassan Emirates.Technotrade. L.L.C Tel: +971 6 5347536 Fax: +971 6 5347981 [...] Content analysis details: (-1.2 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'-0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only 0.0 T_REMOTE_IMAGE Message contains an external image [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.