Spam Impersonating Social Contacts
Received: from br115.dialhost.com.br (br115.dialhost.com.br [177.52.160.99])
by masakari.coreitpro.com (8.14.4/8.14.4) with SMTP id rATIuhcH074591
for <contact@seanmcollins.com>; Fri, 29 Nov 2013 13:56:44 -0500 (EST)
(envelope-from gustavo@glarus.com.br)
Received: (qmail 28115 invoked by uid 508); 29 Nov 2013 16:56:36 -0200
Received: from 189.173.74.186 (gustavo@glarus.com.br@189.173.74.186) by br115.dialhost.com.br
(envelope-from <gustavo@glarus.com.br>, uid 89) with qmail-scanner-2.08st
(clamdscan: 0.97.8/18176. spamassassin: 3.3.1. perlscan: 2.08st.
Clear:RC:0(189.173.74.186):SA:0(5.9/15.0):.
Processed in 0.061533 secs); 29 Nov 2013 18:56:36 -0000
X-Spam-Status: No, score=4.2 required=4.5 tests=BAYES_50,FSL_HELO_BARE_IP_2,
RCVD_NUMERIC_HELO,SPF_PASS,TVD_SPACE_RATIO autolearn=no version=3.3.2
X-Spam-Level: ****
Received: from unknown (HELO localhost) (gustavo@glarus.com.br@189.173.74.186)
by br115.dialhost.com.br with SMTP; 29 Nov 2013 16:56:36 -0200
Date: Fri, 29 Nov 2013 01:56:32 PM
From: Ed <REDACTED> <gustavo@glarus.com.br>
Subject: NEWS
To: contact@seanmcollins.com
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-ID: <1385751396101828080@br115.dialhost.com.br>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
masakari.coreitpro.com
hey! <MALICIOUS LINK>
It appears that spammers scrape social networking sites, looking for connections to a person, then use that name as the FROM line in an e-mail message, in an attempt to convince you to open the link.