Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scamdex@scamdex.com [delivery-date:] => Sat, 15 Oct 2011 05:22:48 -0700 [received:] => Array ( [0] => from secmail.uni-muenster.de ([128.176.192.141])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RF3GI-0007U6-Syfor scamdex@scamdex.com; Sat, 15 Oct 2011 05:22:48 -0700 [1] => from g228197042.adsl.alicedsl.de (g228197042.adsl.alicedsl.de [92.228.197.42])by SECMAIL.UNI-MUENSTER.DE (Postfix) with ESMTP id 04254C111A;Sat, 15 Oct 2011 14:05:05 +0200 (CEST) ) [message-id:] => [reply-to:] => =?utf-8?B?SGFsaWZheCBCYW5rIFBsYyA8dmlvbGF0aW9uc0BoYWxpZmF4LmNvLnVrPg==?= [from:] => =?utf-8?B?SGFsaWZheCBCYW5rIFBsYyA8dmlvbGF0aW9uc0BoYWxpZmF4LmNvLnVrPg==?= [subject:] => =?utf-8?B?U2VydmljZSBWaW9sYXRpb24gOiBVcmdlbnQgQWN0aW9uIFJlcXVpcmVk?= [date:] => Sat, 15 Oct 2011 13:03:14 +0100 [mime-version:] => 1.0 [content-type:] => multipart/alternative;boundary="----=_NextPart_000_151E_01CC8B3A.CC8FEC50" [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Outlook Express 6.00.2900.5512 [x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2900.5512 [to:] => undisclosed-recipients:; [x-spam-status:] => No, score=1.6 [x-spam-score:] => 16 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Customer, We noticed a violation of our services on yourbank account and for this reason, your bank account will be closed if youfail to resolve the issue within the next 48 hours. This will only take amoment...Click the "RESOLVE" link below and enter the requested details tocomplete the process. [...] Content analysis details: (1.6 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, mediumtrust[128.176.192.141 listed in list.dnswl.org]-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain1.7 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist[URIs: hsstudy.org]1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist[URIs: hsstudy.org]0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words0.0 HTML_MESSAGE BODY: HTML included in message0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily0.0 T_REMOTE_IMAGE Message contains an external image [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.