Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => cfjy@scamdex.com,fenwj@scamdex.com [delivery-date:] => Sun, 09 Mar 2014 11:35:37 -0700 [received:] => Array ( [0] => from mail-ea0-f196.google.com ([209.85.215.196]:49654)by lester.newsblaze.com with esmtps (TLSv1:RC4-SHA:128)(Exim 4.80.1)(envelope-from )id 1WMiZV-0000Iw-9F; Sun, 09 Mar 2014 11:35:37 -0700 [1] => by mail-ea0-f196.google.com with SMTP id l9so2023127eaj.3 for ; Sun, 09 Mar 2014 11:35:37 -0700 (PDT) [2] => from ripn ([134.17.149.77]) by mx.google.com with ESMTPSA id x3sm35323512eep.17.2014.03.09.11.35.33 for (version=TLSv1 cipher=RC4-SHA bits=128/128); Sun, 09 Mar 2014 11:35:36 -0700 (PDT) ) [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:to:from:subject:message-id:mime-version:content-type :content-transfer-encoding; bh=nRsd/cevraURJMe7CnBDh7wOm6zTXk23FmTrC/qgtI0=; b=Fa/IxOEAcSfcfYxl9hMZv0jep0y8/XRh3/u0ddVR6ZghkQ6olwLYoVYbsW+0/enRfr msfjbMW35p3kQGSnIW0+6ivGlZQBAoy57RCDbmoPueU6VV0lbBda0BdkI6wg1JumaC86 xFOmqrn50thPgekEeQf4dT5SCjND+lHfTy+agq6YsqDCauA96omjJLWICGP9uVDf5fQc fpDuqdQHpDhKBJA2s/aoOqWEGsN0KvgC6gMCVg8cz6olO5a1jdn/7spKNI0scCbRw7Wc SO/UwbNDAZJ1fSxeUXqTDGe38yU5OWBuQXaSiRYfZIcoo9QeWq/0RKzr3/hB6KfKAte7 o8qQ== [x-received:] => by 10.14.193.201 with SMTP id k49mr21712801een.50.1394390136949; Sun, 09 Mar 2014 11:35:36 -0700 (PDT) [date:] => Sun, 9 Mar 2014 21:35:31 +0300 [to:] => "Yahoo Award Center " , "Administractor " , "Online TeliaSonera " , "Debt Management Office " , "ands " , "Yung Kyu Kim " , "Victor J. Gutierrez de Pineres " , "Mr.Kelvin Tan " , "Mrs. Teresa AU " , "Matt Harding " , "Yung kyu kim " , "apple.com " , "Lloyds Internet Banking " , "Andrew Woods " ,"" , "Nick Goodman " , "" , "" , "MRS FALAK ABBAS " , "" , "Brophy, Dolly " , "PERFECT LOAN COMPANY " , "Sandra Hassan " , "cheli " , "Mrs. Rebecca Garang " , "Western Union " , "" , "Visa/MasterCard.Europe " , "Gumtree.com " , "Max " [from:] => Bob Vinton [subject:] => Re: URGENT scamdex Brand Registration Confirmation [message-id:] => <9d227b38c1f7d54c3b83217e08076462@ripn> [x-priority:] => 3 [mime-version:] => 1.0 [content-type:] => text/plain; charset=iso-8859-1 [content-transfer-encoding:] => 8bit [x-spam-status:] => No, score=0.1 [x-spam-score:] => 1 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Hello, I am ready to settle and need advice on how to proceed. Best Regards, Bob Vinton [...] Content analysis details: (0.1 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (bobbyvinton55[at]gmail.com)-0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (bobbyvinton55[at]gmail.com)-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

Hello,
I am ready to settle and need advice on how to
proceed.
 
Best Regards,
Bob Vinton