Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mxw@scamdex.com [delivery-date:] => Wed, 03 Jul 2013 19:37:13 -0700 [received:] => Array ( [0] => from [216.59.19.96] (port=43967 helo=localhost.local.com)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1UuZQ1-0005go-A2for mxw@scamdex.com; Wed, 03 Jul 2013 19:37:13 -0700 [1] => from localhost ([127.0.0.1]:36210 helo=[216.59.19.96])by localhost.local.com with esmtpa (Exim 4.80.1)(envelope-from )id 1UuS57-0003kg-4G; Wed, 03 Jul 2013 14:47:09 -0400 [2] => from 41.190.4.253 ([41.190.4.253]) (SquirrelMail authenticated user info@beeline.com) by 216.59.19.96 with HTTP; Wed, 3 Jul 2013 14:47:09 -0400 ) [message-id:] => [date:] => Wed, 3 Jul 2013 14:47:09 -0400 [subject:] => ENQUIRY [from:] => "Julian Smith" [reply-to:] => juliansmith@126.com [user-agent:] => SquirrelMail/1.4.22 [mime-version:] => 1.0 [content-type:] => text/plain;charset=iso-8859-1 [content-transfer-encoding:] => 8bit [x-priority:] => 3 (Normal) [importance:] => Normal [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - localhost.local.com [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [47 12] / [47 12] [4] => Sender Address Domain - yahoo.fr ) [x-get-message-sender-via:] => localhost.local.com: authenticated_id: info@beeline.com [x-spam-status:] => No, score=3.9 [x-spam-score:] => 39 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Hello, This is Ms Julian Smith,a sales representative from KINGSTON INVESTMENT COMPANY in France, One of your customer directed your company to us and we are contacting you regarding some product we need from your company.it will be very great if you render 100% services to us. [...] Content analysis details: (3.9 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 URG_BIZ BODY: Contains urgent matter 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: company.it] 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.