Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => detectedscams@scamdex.com [delivery-date:] => Fri, 12 Apr 2013 15:19:42 -0700 [received:] => Array ( [0] => from bt7.bankoi.com ([217.75.242.87]:45203 helo=bankoi-bt7.c.mad.interhost.com)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80)(envelope-from )id 1UQmJo-00060m-Umfor detectedscams@scamdex.com; Fri, 12 Apr 2013 15:19:42 -0700 [1] => (qmail 17952 invoked by uid 48); 12 Apr 2013 23:39:11 +0200 ) [date:] => 12 Apr 2013 23:39:11 +0200 [message-id:] => <20130412213911.17949.qmail@bankoi-bt7.c.mad.interhost.com> [to:] => detectedscams@scamdex.com [subject:] => Unique Transaction ID Q34303199921I [from:] => PayPal@customers.pay_92.au [content-type:] => text/html [x-spam-status:] => No, score=3.9 [x-spam-score:] => 39 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Notice Transaction Transaction Details PayPal Express Checkout Payment Sent (Unique Transaction ID Q34303199921I) [...] Content analysis details: (3.9 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: paypalobjects.com] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.