An
Email with the Subject "Inquiry About Your Product" was
received in one of Scamdex's honeypot email accounts on Sun, 08 Jun 2014 01:27:37 -0700
and has been classified as a Employment/Job Scam Email.
The sender shows as Tradekey <welcome@tradekey.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
servicebuymail
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submitted@scamdex.com
[delivery-date:] => Sun, 08 Jun 2014 01:27:37 -0700
[received:] => Array
(
[0] => from sitemail3.everyone.net ([216.200.145.37]:42984 helo=imta-37.everyone.net)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1WtYRz-0006g5-Vlfor submitted@scamdex.com; Sun, 08 Jun 2014 01:27:37 -0700
[1] => from pps.filterd (m0004959.ppops.net [127.0.0.1])by imta-38.everyone.net (8.14.5/8.14.5) with SMTP id s588QK3m031183;Sun, 8 Jun 2014 01:26:35 -0700
[2] => from mci.cp.veritris.com (67.14.165.111 [67.14.165.111])by dm0208.mta.everyone.net (EON-INBOUND) with ESMTP id dm0208.5388209a.1a16439for ; Sun, 8 Jun 2014 01:26:29 -0700
[3] => from drcarter by mci.cp.veritris.com with local (Exim 4.82)(envelope-from )id 1WtYQt-0001zB-HMfor advance@antihotmail.com; Sun, 08 Jun 2014 04:26:27 -0400
)
[x-eon-delivered-to:] =>
[x-eon-dm:] => dm0208
[to:] => advance@antihotmail.com
[subject:] => Inquiry About Your Product
[from:] => Tradekey
[mime-version:] => 1.0
[content-type:] => text/html
[content-transfer-encoding:] => 8bit
[message-id:] =>
[date:] => Sun, 08 Jun 2014 04:26:27 -0400
[x-antiabuse:] => Array
(
[0] => This header was added to track abuse, please include it with any abuse report
[1] => Primary Hostname - mci.cp.veritris.com
[2] => Original Domain - antihotmail.com
[3] => Originator/Caller UID/GID - [505 501] / [47 12]
[4] => Sender Address Domain - mci.cp.veritris.com
)
[x-get-message-sender-via:] => mci.cp.veritris.com: authenticated_id: drcarter/only user confirmed/virtual account not confirmed
[x-source:] => /usr/bin/php
[x-source-args:] => /usr/bin/php /home/drcarter/public_html/flash.php
[x-source-dir:] => gentlefamilydentistryok.com:/public_html
[sender:] =>
[x-eon-alias-sig:] => AQI82n9TlB47RIDPEAEAAAAY,2d5fbfd79d3cf6cfad45d0486c2ab5e5
[x-proofpoint-virus-version:] => vendor=fsecure engine=2.50.10432:5.12.52,1.0.14,0.0.0000definitions=2014-06-08_01:2014-06-06,2014-06-08,1970-01-01 signatures=0
[x-proofpoint-spam-details:] => rule=notspam policy=default score=19 spamscore=19 suspectscore=99phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlxscancount=1 engine=7.0.1-1402240000 definitions=main-1406080121
[x-spam-status:] => No, score=1.1
[x-spam-score:] => 11
[x-spam-bar:] => +
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Trade Alert July 25 Trade Alert 07 June, 2014 search Products I Post Buying Request I Post Company Profile Dear Supplier, A verified buyer on Tradekey.com is interested in your listed product (s). To read the message from the buyer, kindly login to Tradekey.com by clicking on the "View Inquiry or Message Center " [...] Content analysis details: (1.1 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
A verified buyer on
Tradekey.com is interested in your
listed product (s). To read the message from the
buyer, kindly login to
Tradekey.com by clicking on the "View
Inquiry or Message Center "
The buyer has
marked the inquiry as "Urgent".
Thank you for using our services.
You
are
receiving this email because you are a
registered member of the
TradeKey.com website.
To unsubscrible from future service email. Click
here.
You are receiving this email because you are a
member of
TradeKey.com.
To opt-out from
TradeKey.com informational email, please
follow this
link.
Trade Alert 07 June, 2014
Post Buying Request I
TradeKey.com website.
To unsubscrible from future service email. Click
here.
You are receiving this email because you are a
member of
TradeKey.com.
To opt-out from
TradeKey.com informational email, please
follow this
link.