An
Email with the Subject "actorola.com expiration" was
received in one of Scamdex's honeypot email accounts on Wed, 18 Nov 2015 21:24:20 -0800 (PST)
and has been classified as a Employment/Job Scam Email.
The sender shows as "Domain Service" <info@kramerspennystocks.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
sellingendedpromotionaccountnotificationpaymentcustomerserviceprocessproposallegalcustomsecuresentsellonlinemailsoftwareconfidential will spamach
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => dumbtube@gmail.com
[received:] => Array
(
[0] => by 10.27.211.143 with SMTP id k137csp1623316wlg; Wed, 18 Nov 2015 21:24:20 -0800 (PST)
[1] => from t9017 ([104.128.190.76]) by mx.google.com with ESMTPS id j8si5053853oeo.51.2015.11.18.21.24.19 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 18 Nov 2015 21:24:19 -0800 (PST)
[2] => from [104.251.176.31] (port=2975 helo=XS10425117631)by t9017 with esmtpa (Exim 4.86)(envelope-from )id 1ZzHhj-0005FT-3ifor dumbtube@gmail.com; Thu, 19 Nov 2015 13:24:19 +0800
)
[x-received:] => by 10.182.33.98 with SMTP id q2mr3834491obi.20.1447910660012; Wed, 18 Nov 2015 21:24:20 -0800 (PST)
[return-path:] =>
[received-spf:] => pass (google.com: domain of info@kramerspennystocks.com designates 104.128.190.76 as permitted sender) client-ip=104.128.190.76;
[authentication-results:] => mx.google.com; spf=pass (google.com: domain of info@kramerspennystocks.com designates 104.128.190.76 as permitted sender) smtp.mailfrom=info@kramerspennystocks.com; dkim=pass header.i=@kramerspennystocks.com
[dkim-signature:] => v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;d=kramerspennystocks.com; s=default; h=Content-Type:MIME-Version:Date:Subject:To:From:Message-ID; bh=4MdjhzbYmCvszxzA+KOLJ1tzLbDpmdBs5G+7Dl5BfFc=; b=ZElY4Rl0/k1JWDkIZG/mIO93OYR0lt0oNCstEBC/gR9+T95DfB4zTI+zYLI1Om0FMicZNd6wVe6HwCUOPAqoobmusl2uEM39ooC26dYr37+SCZRwsvLD0c+OlhqZFDKlVyyKwDW7nWAa2XF2fqnOjxFc0tiF8E307mH+T5C1DqI=;
[message-id:] =>
[from:] => "Domain Service"
[to:] =>
[subject:] => actorola.com expiration
[date:] => Thu, 19 Nov 2015 13:08:43 +0800
[mime-version:] => 1.0
[content-type:] => multipart/alternative;boundary="205f01ccbdf20207c0b0e0ffccbbc"
[x-antiabuse:] => Array
(
[0] => This header was added to track abuse, please include it with any abuse report
[1] => Primary Hostname - t9017
[2] => Original Domain - gmail.com
[3] => Originator/Caller UID/GID - [47 12] / [47 12]
[4] => Sender Address Domain - kramerspennystocks.com
)
[x-get-message-sender-via:] => t9017: authenticated_id: info@kramerspennystocks.com
[x-authenticated-sender:] => t9017: info@kramerspennystocks.com
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
To:
Mark Urquhart-Webb,
2816 Marshall Way
Sacramento
California, 95818,
UNITED STATES
Domain
Name:
Registration
SEO Period:
Price:
Term:
actorola.com
12/09/2015 to 12/08/2016
$64.00
1 Year
SECURE ONLINE
PAYMENT
Domain Name:
actorola.com Attn: Mark Urquhart-Webb
This
important expiration notification proposal
notifies you about the expiration notice of
your domain registration for actorola.com search
engine optimization submission. The information in this
expiration notification proposal may contain
confidential and/or legally privileged information from
the notification processing department to purchase our
search engine traffic generator. We do not register or
renew domain names. We are selling traffic generator
software tools. This information is intended only for
the use of the individual(s) named
above. If
you fail to complete your domain name registration
actorola.com search engine optimization service
by the expiration date, may result in the
cancellation of this search engine optimization domain
name notification proposal notice.
PLEASE CLICK ON
SECURE ONLINE PAYMENT
TO
COMPLETE YOUR PAYMENT.
Failure
to complete your seo domain name registration
actorola.com search engine optimization service
process may make it difficult for customers to find you
on the web.
CLICK UNDERNEATH FOR IMMEDIATE
PAYMENT
PROCESS
PAYMENT FOR actorola.com
SECURE
ONLINE PAYMENT
ACT IMMEDIATELY
This domain seo registration for actorola.com
search engine service optimization
notification proposal will expire
11/25/2015.
Instructions
and Unsubscribe Instructions: You have received this message
because you elected to receive special notification
proposal. If you no longer wish to receive our
notifications, please unsubscribe here or mail us a
written request to US Main Office: SEO Domain
Registration Company, Los Angeles, CA 90036, Email:
seodomainregservice@mail.com or Asia Main Office: SEO
Domain Registration Company, Shenzhen Futian, Email:
seodomainregservice@mail.com. If you have multiple
accounts with us, you must opt out for each one
individually in order to stop receiving notifications
notices. We are a search engine optimization company. We
do not directly register or renew domain names. We are
selling traffic generator software tools. This message
is CAN-SPAM compliant. THIS IS NOT A BILL. THIS IS A
NOTIFICATION PROPOSAL. YOU ARE UNDER NO OBLIGATION TO
PAY THE AMOUNT STATED UNLESS YOU ACCEPT THIS
NOTIFICATION PROPOSAL. This message, which contains
promotional material strictly along the guidelines of
the CAN-SPAM act of 2003. We have clearly mentioned the
source mail-id of this email, also clearly mentioned our
subject lines and they are in no way misleading. Please
do not reply to this email, as we are not able to
respond to messages sent to this address.
