Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => paypal@o7e.net [delivery-date:] => Sat, 16 Jan 2016 20:10:01 -0800 [received:] => Array ( [0] => from smtp004.earthlinkbusiness.com ([69.95.226.14]:47818)by bigcat.newsblaze.com with smtp (Exim 4.86)(envelope-from )id 1aKeew-0000Ql-SQfor paypal@o7e.net; Sat, 16 Jan 2016 20:10:01 -0800 [1] => (qmail 5406 invoked from network); 17 Jan 2016 03:42:22 -0000 [2] => from unknown (HELO TACOMA.TTPies.local) (209.113.204.218) by smtp004.earthlinkbusiness.com with SMTP; 17 Jan 2016 03:42:22 -0000 ) [content-type:] => multipart/alternative; boundary="===============1489496669==" [mime-version:] => 1.0 [subject:] => New Security Safeguards Alert [to:] => Recipients [from:] => USAA [date:] => Sat, 16 Jan 2016 22:40:18 -0500 [x-spam-status:] => No, score=2.6 [x-spam-score:] => 26 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "bigcat.newsblaze.com",has NOT identified this incoming email as spam. The originalmessage has been attached to this so you can view it or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: To ensure delivery to your inbox, please add USAA.Web.Services@customermail.usaa.com to your address book. USAA will never ask for sensitive personal information, such as a Social Security number, PIN, password or an account number in an e-mail. [...] Content analysis details: (2.6 points, 4.5 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: usaa.com] 0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror) 0.0 HTML_MESSAGE BODY: HTML included in message 1.6 MISSING_MID Missing Message-Id: header 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 0.0 T_REMOTE_IMAGE Message contains an external image [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.