Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scams@scamdex.com [delivery-date:] => Thu, 24 Oct 2013 00:00:55 -0700 [received:] => Array ( [0] => from [188.138.8.72] (port=51721 helo=host1.crossfire-hosting.com)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1VZEuc-0005SQ-G5for scams@scamdex.com; Thu, 24 Oct 2013 00:00:55 -0700 [1] => from nethulan by host1.crossfire-hosting.com with local (Exim 4.80.1)(envelope-from )id 1VZEua-0005mk-Bnfor scams@scamdex.com; Thu, 24 Oct 2013 09:00:52 +0200 ) [date:] => Thu, 24 Oct 2013 09:00:52 +0200 [to:] => scams@scamdex.com [from:] => =?UTF-8?Q?Administrator?= [subject:] => =?UTF-8?Q?Upgrade_Your_Account?= [message-id:] => [x-priority:] => 3 [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-type:] => text/html; charset="us-ascii" [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - host1.crossfire-hosting.com [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [512 512] / [47 12] [4] => Sender Address Domain - host1.crossfire-hosting.com ) [x-get-message-sender-via:] => host1.crossfire-hosting.com: authenticated_id: nethulan/only user confirmed/virtual account not confirmed [x-spam-status:] => No, score=2.4 [x-spam-score:] => 24 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: New Page 1 Hello Account Holder, Due to increasing rate in spam mails being sent across the globe, Email providers have hereby devised a means to stop the amount of spam mails. You should CLICK TO VERIFY below to upgrade your account by entering your VALID email address and password. You are also advised to verify every other account under your care to avoid service disruption and termination of your accounts. [...] Content analysis details: (2.4 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: iinet.net.au] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.