Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => dean@scamdex.com,davidj@scamdex.com [delivery-date:] => Mon, 20 May 2013 09:00:57 -0700 [received:] => Array ( [0] => from 50-77-100-26-static.hfc.comcastbusiness.net ([50.77.100.26]:3864)by lester.newsblaze.com with esmtp (Exim 4.80)(envelope-from )id 1UeSW4-00030p-QN; Mon, 20 May 2013 09:00:57 -0700 [1] => from (192.168.1.10) by npgcable.com (50.77.100.26) with Microsoft SMTP Server id 8.0.685.24; Mon, 20 May 2013 11:00:54 -0500 ) [message-id:] => <519A4584.409030@npgcable.com> [date:] => Mon, 20 May 2013 11:00:54 -0500 [from:] => "eFax Corporate" [user-agent:] => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.24) Gecko/20100328 Thunderbird/2.0.0.24 [mime-version:] => 1.0 [to:] => [content-type:] => multipart/alternative;boundary="------------07050600706070203090903" [x-spam-status:] => Yes, score=4.1 [x-spam-score:] => 41 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Fax Message [Caller-ID: 650-621-5242] You have received a 5 pages fax at 05-20-2013 10:37:15 .View this fax using your PDF Editor.Please visit www.eFax.com/en/efax/twa/page/help if you have any questions regarding this message or your service.Thank you for using the eFax service!Home Contact Login 2013 j2 Global Communications, Inc. All rights reserved.eFax is a registered trademark of j2 Global Communications, Inc.This account is subject to the terms listed in the eFax Customer Agreement. [...] Content analysis details: (4.1 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: efax.com] 0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split IP) 0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or Generic rPTR-0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2) [x-spam-flag:] => YES [subject:] => ***SPAM*** Corporate eFax message - 5 pages )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.