Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mc_mxw@o7e.net [delivery-date:] => Tue, 13 Aug 2013 22:58:20 -0700 [received:] => Array ( [0] => from c2mds.mailcentro.com ([208.67.179.143]:58712)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1V9U66-0001gS-SVfor mc_mxw@o7e.net; Tue, 13 Aug 2013 22:58:20 -0700 [1] => from mail-qe0-f47.google.com (mail-qe0-f47.google.com [209.85.128.47])by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with ESMTP id r7E5wEch021292for ; Tue, 13 Aug 2013 22:58:14 -0700 [2] => by mail-qe0-f47.google.com with SMTP id b10so4860787qen.34 for ; Tue, 13 Aug 2013 22:58:17 -0700 (PDT) [3] => from ID669377 ([66.96.201.68]) by mx.google.com with ESMTPSA id x2sm16622579qat.8.2013.08.13.22.58.14 for (version=TLSv1 cipher=RC4-SHA bits=128/128); Tue, 13 Aug 2013 22:58:16 -0700 (PDT) ) [x-mc-sender:] => gailbern@cableone.net [x-mc-ipaddr:] => mail-qe0-f47.google.com [209.85.128.47] [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-gm-message-state:message-id:errors-to:list-owner:list-unsubscribe :list-help:precedence:list-id:mime-version:from:to:reply-to:date :subject:content-type; bh=O39Mkpp6C+jjHTpvkLi/SV9onG99Y2KrV+ADg99y5J4=; b=cOLpO+T/5JHrAIoz4JEtMy4Mf0zQlU6+pBDehAC41EC1xGKG8wK3w0oda6FOWcLk2x uvgnLfpi2Ri2R6Yib2lPgiLStTF+33vR+loc8kvAeHyOf0Up3uJdPO2FvCDsjq3OJTv8 oDdoazzH7abgY+kU2xxvhjfGdSTicrFCVGoRZv/zbmmy4ip8E77xwKvzQ+vNp3fl+IcV o1AEad0foU8+LkPgo4D8jDPefF7ZEFtTzwLp5/Lfb4OWgO/K82H8KR0elU6hMWyuJ1TL Tmea6Cgx+CDoVSLzPpnmNT8hmyFnrWeJG/dUWq+nEr8oydk7HfQBPIgKFSD89MxkIm5v bpGg== [x-gm-message-state:] => ALoCoQk+Vm9e4BDN+7rtSwEr2OPkDkjyU19NCVdJ1FGKc3rlsg1JXsJmNfPxkTQxrSmFGz5AHUz6 [x-received:] => by 10.224.54.210 with SMTP id r18mr8973895qag.62.1376459897275; Tue, 13 Aug 2013 22:58:17 -0700 (PDT) [message-id:] => <520b1c78.c289e00a.0858.2bd7@mx.google.com> [x-subscribe-email:] => josepgrau@swampoll.in [x-abuse-reports-to:] => josepgrau@swampoll.in [errors-to:] => josepgrau@swampoll.in [list-owner:] => josepgrau@swampoll.in [list-unsubscribe:] => [list-help:] => aymioypmmhh0 [x-author:] => aymioypmmhh1 [precedence:] => bulk [list-id:] => aymioypmmhh of 2 [mime-version:] => 1.0 [from:] => "Mr. Kuen Yang" [to:] => Nighthawk6@cableone.net, gailbern@cableone.net [reply-to:] => =?utf-8?B?TXIuIEt1ZW4gWWFuZw==?= [date:] => Tue, 13 Aug 2013 22:58:16 -0700 (PDT) [subject:] => [Bulk?]=?utf-8?B?UHJvcG9zYWw=?= [content-type:] => multipart/alternative;boundary=--boundary_1207_840e6ef0-beec-49e2-9f78-70561a1054d5 [x-mc-filter:] => 7.6.9 [x-mc-filter-antivirus:] => Scanned for virus - Status 0 [x-mc-deliveryid:] => 130 [x-mc-ctfilter:] => CT RefID = str=0001.0A090207.520B1C7A.0086,ss=3,pt=R_345755,fgs=0 - Class:Bulk - Virus Threat:Unknown - Phishing Threat:Low [x-mc-filterskip:] => 0 [x-mc-spamscore:] => 40 T 49 [x-spam-status:] => No, score=1.4 [x-spam-score:] => 14 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: August 2013 RE: INVESTMENT PROPOSAL [...] Content analysis details: (1.4 points, 4.5 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral) 0.0 HTML_MESSAGE BODY: HTML included in message 0.7 MPART_ALT_DIFF BODY: HTML and text parts are different [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.