Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => bwedl@o7e.net [delivery-date:] => Thu, 02 Apr 2015 19:58:11 -0700 [received:] => from [181.232.104.23] (port=12370 helo=adsl-181-232-104-23.edatel.net.co)by bigcat.newsblaze.com with esmtp (Exim 4.85)(envelope-from )id 1Ydrnv-0003IU-2ffor bwedl@o7e.net; Thu, 02 Apr 2015 19:58:11 -0700 [message-id:] => <003e01d06d90$056ecd3e$0d62a1b1@webasd> [from:] => [to:] => [subject:] => Advice [date:] => 2 Apr 2015 15:41:48 -0600 [mime-version:] => 1.0 [content-type:] => multipart/alternative;boundary="----=_NextPart_000_003B_01D06D90.056AB025" [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Outlook Express 6.00.2800.1106 [x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2800.1106 [x-spam-status:] => No, score=-81.4 [x-spam-score:] => -813 [x-spam-bar:] => --------------------------------------------------- [x-ham-report:] => Spam detection software, running on the system "bigcat.newsblaze.com",has NOT identified this incoming email as spam. The originalmessage has been attached to this so you can view it or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Good day! We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you. Our firm specializes in business trade. We cooperate with different countries and currently we have many clients in the USA, Canada, Europe and Australia. Due to this fact, we need to increase the number of our destination representatives' regular staff. [...] Content analysis details: (-81.4 points, 4.5 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: alwayscareer.com]-100 USER_IN_WHITELIST From: address is in the user's white-list 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: alwayscareer.com] 1.7 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist [URIs: alwayscareer.com] 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 0.0 HTML_MESSAGE BODY: HTML included in message 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 0.8 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP) 3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr 1) 3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.