Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com,scams@scamdex.com,submitted@scamdex.com [delivery-date:] => Thu, 20 Mar 2014 20:02:27 -0700 [received:] => Array ( [0] => from mailhub245.itcs.purdue.edu ([128.210.5.245]:53823)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1WQpj0-0002HT-Ml; Thu, 20 Mar 2014 20:02:27 -0700 [1] => from setup1.alteer.com (tsc-oio-216-255-53-42.ded.bright.net [216.255.53.42])(authenticated bits=0)by mailhub245.itcs.purdue.edu (8.14.4/8.14.4/mta-auth.smtp.purdue.edu) with ESMTP id s2L2oDZp009685(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);Thu, 20 Mar 2014 23:02:23 -0400 ) [message-id:] => <201403210302.s2L2oDZp009685@mailhub245.itcs.purdue.edu> [content-type:] => multipart/mixed; boundary="===============1005271793==" [mime-version:] => 1.0 [subject:] => Confirmation of mobile number [to:] => Recipients [from:] => "CreditCardOnlineServicesTeam" [date:] => Thu, 20 Mar 2014 23:02:29 -0400 [x-pmx-version:] => 6.0.2.2308539 [x-perlmx-url-scanned:] => Yes [x-perlmx-virus-scanned:] => Yes [x-spam-status:] => No, score=0.9 [x-spam-score:] => 9 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: We just want to confirm your mobile to your NatWest Credit Card account was updated on Thursday 20.03.2014 at 10.56:PM. Please verify and update your mobile number via secure attachment. [...] Content analysis details: (0.9 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=note%40sos.com;ip=128.210.5.245;r=lester.newsblaze.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF failed 0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.