Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scams@scamdex.com [delivery-date:] => Thu, 11 Aug 2011 06:40:51 -0700 [received:] => Array ( [0] => from mail.mimo3.com.br ([200.155.65.82] helo=server.mimo3.com.br)by chester.loopbiz.com with esmtps (TLSv1:AES256-SHA:256)(Exim 4.69)(envelope-from )id 1QrVVC-0006b4-2afor scams@scamdex.com; Thu, 11 Aug 2011 06:40:51 -0700 [1] => from u0001 by server.mimo3.com.br with local (Exim 4.69)(envelope-from )id 1QrVTi-0006Yz-JUfor scams@scamdex.com; Thu, 11 Aug 2011 10:39:18 -0300 ) [to:] => scams@scamdex.com [subject:] => Dear counsel [from:] => Kazuko Harris [reply-to:] => hariss.kazuko@yahoo.cn [mime-version:] => 1.0 [content-type:] => text/plain [content-transfer-encoding:] => 8bit [message-id:] => [date:] => Thu, 11 Aug 2011 10:39:18 -0300 [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - server.mimo3.com.br [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [610 608] / [47 12] [4] => Sender Address Domain - server.mimo3.com.br ) [x-spam-subject:] => ***SPAM*** Dear counsel [x-spam-status:] => Yes, score=4.4 [x-spam-score:] => 44 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear counsel, I am contacting you in regards to a breach ofbusiness loan agreement with a client in your locality. I provided a loanto the company so that they can meet up with their management and operationalobligation during the rough economic climate of last year. I provided thecompany with an emergency loan of $386,000 with a term of 24 months and fixedinterest rate of 6.0%. The repayment period has since elapsed but the companyhas been unable to finalize the repayment of the loan and have only paid$85,000.00 till date. Let me know if this falls under the scope of your practiceso that I can provide you with more information on this matter. [...] Content analysis details: (4.4 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(hariss.kazuko[at]yahoo.com)1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT[200.155.65.82 listed in bb.barracudacentral.org]-0.0 SPF_HELO_PASS SPF: HELO matches SPF record-0.0 SPF_PASS SPF: sender matches SPF record0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain0.0 LOTS_OF_MONEY Huge... sums of money2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service [x-spam-flag:] => YES )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.