Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scamdex@scamdex.com [delivery-date:] => Wed, 18 Dec 2013 09:52:47 -0800 [received:] => Array ( [0] => from pdx0smtp00.up.edu ([64.251.254.100]:51778)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1VtLIc-0002lS-Vgfor scamdex@scamdex.com; Wed, 18 Dec 2013 09:52:47 -0800 [1] => from cas04.campus.up.edu (cas04.campus.up.edu [10.5.128.174])by pdx0smtp00.up.edu (Messaging Gateway) with SMTP id 90.32.19641.210E1B25; Wed, 18 Dec 2013 09:49:06 -0800 (PST) [2] => from 64-60-87-19.static-ip.telepacific.net (10.5.100.135) bycas04.campus.up.edu (10.5.128.174) with Microsoft SMTP Server (TLS) id14.3.146.0; Wed, 18 Dec 2013 09:52:05 -0800 ) [x-auditid:] => 0a0a0164-b7fe88e000004cb9-61-52b1e01222c9 [message-id:] => [from:] => Merrill Lynch [subject:] => =?utf-8?B?TWVycmlsbCBMeW5jaDogSW1wb3J0YW50IFVwZGF0ZSBOb3RpY2U=?= [date:] => Wed, 18 Dec 2013 09:51:33 -0800 [mime-version:] => 1.0 [content-type:] => multipart/alternative;boundary="----=_NextPart_000_184A_01CEFBD6.BBC5AB30" [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Windows Mail 6.0.6001.18000 [x-mimeole:] => Produced By Microsoft MimeOLE V6.0.6001.18000 [to:] => Undisclosed recipients:; [x-brightmail-tracker:] => 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 [x-spam-status:] => No, score=2.0 [x-spam-score:] => 20 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Dear Valuable Customer, Safety is very important and we do everything to safeguard and protect your accounts. We recently upgraded our SSL security server and we require that you update your account immediately [...] Content analysis details: (2.0 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: householdaccount.com] 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: batdongsankimtan.com.vn] 0.0 HTML_MESSAGE BODY: HTML included in message 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.0 T_REMOTE_IMAGE Message contains an external image [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.