An
Email with the Subject "Registration Suspension CRAIGSLIST TERMS OF USE" was
received in one of Scamdex's honeypot email accounts on Tue, 19 Oct 2010 12:58:59 -0700
and has been classified as a Auction/Escrow Scam Email.
The sender shows as Craigslist <help@craigslist.org>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
lockedaccountcraigslist
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => mxw@o7e.net
[delivery-date:] => Tue, 19 Oct 2010 12:58:59 -0700
[received:] => Array
(
[0] => from mailout18.yourhostingaccount.com ([65.254.253.150])by chester.loopbiz.com with esmtp (Exim 4.69)(envelope-from )id 1P8IKp-0000Qz-2Vfor mxw@o7e.net; Tue, 19 Oct 2010 12:58:59 -0700
[1] => from mailscan08.yourhostingaccount.com ([10.1.15.8] helo=mailscan08.yourhostingaccount.com)by mailout18.yourhostingaccount.com with esmtp (Exim)id 1P8IKt-0003uM-Hqfor mxw@o7e.net; Tue, 19 Oct 2010 15:59:03 -0400
[2] => from impout03.yourhostingaccount.com ([10.1.55.3] helo=impout03.yourhostingaccount.com)by mailscan08.yourhostingaccount.com with esmtp (Exim)id 1P8IKt-0002qG-9Pfor mxw@o7e.net; Tue, 19 Oct 2010 15:59:03 -0400
[3] => from cgi0804.yourhostingaccount.com ([10.1.12.37])by impout03.yourhostingaccount.com with NO UCEid Ljz21f0040nxX1W0000000; Tue, 19 Oct 2010 15:59:02 -0400
[4] => from pow.rhgsfresth by cgi0804.yourhostingaccount.com with local (Exim)id 1P8I7l-0004hk-TIfor mxw@o7e.net; Tue, 19 Oct 2010 15:45:29 -0400
)
[x-en-origoutip:] => 10.1.12.37
[x-en-impsid:] => Ljz21f0040nxX1W0000000
[x-en-info:] => U=pow.rhgsfresth P=/index.php
[x-en-cgiuser:] => pow.rhgsfresth
[x-en-cgipath:] => /index.php
[x-en-origip:] => 172.190.104.226
[message-id:] => 1287517529-855-pow.rhgsfresth@cgi0804.yourhostingaccount.com
[to:] => mxw@o7e.net
[subject:] => Registration Suspension CRAIGSLIST TERMS OF USE
[from:] => Craigslist
[reply-to:] => NOREPLY@craigslist.org
[mime-version:] => 1.0
[content-type:] => text/html
[content-transfer-encoding:] => 8bit
[x-en-timestamp:] => Tue, 19 Oct 2010 15:45:29 -0400
[date:] => Tue, 19 Oct 2010 15:45:29 -0400
[sender:] => Craigslist
[x-spam-status:] => No, score=2.6
[x-spam-score:] => 26
[x-spam-bar:] => ++
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
We reserve the right, at our sole discretion, to change, modify or otherwise alter your account at any time.
Therefore your account has been blocked. Click here to confirm and restore your Craigslist account.
Thank you for using craigslist!
We reserve the right, at our sole discretion, to change, modify or otherwise alter your account at any time.
Therefore your account has been blocked.
Click here to confirm and restore your Craigslist account.
Thank you for using craigslist!