Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Sun, 12 Jan 2014 09:28:22 -0800 [received:] => Array ( [0] => from max3.sunderland.ac.uk ([157.228.66.95]:55233)by lester.newsblaze.com with smtp (Exim 4.80.1)(envelope-from )id 1W2Oph-0002VM-9ufor scam@scamdex.com; Sun, 12 Jan 2014 09:28:22 -0800 [1] => (qmail 1737 invoked from network); 12 Jan 2014 17:28:10 -0000 [2] => from localhost (127.0.0.1) by max3.sunderland.ac.uk with SMTP; 12 Jan 2014 17:28:10 -0000 [3] => from max3.sunderland.ac.uk ([127.0.0.1])by localhost (max3.sunderland.ac.uk [127.0.0.1]) (amavisd-new, port 10024)with SMTP id 30463-09 for ;Sun, 12 Jan 2014 17:28:10 +0000 (GMT) [4] => (qmail 1408 invoked by uid 599); 12 Jan 2014 17:28:04 -0000 [5] => from unknown (HELO cas-01.uni.ad.sunderland.ac.uk) (157.228.67.41) by max3.sunderland.ac.uk (qpsmtpd/0.28) with ESMTP; Sun, 12 Jan 2014 17:28:04 +0000 [6] => from MB-03.uni.ad.sunderland.ac.uk ([169.254.1.171]) bycas-01.uni.ad.sunderland.ac.uk ([157.228.67.41]) with mapi id 14.02.0298.004;Sun, 12 Jan 2014 17:28:03 +0000 ) [from:] => Nicholas Cope [to:] => Nicholas Cope [subject:] => RE: Notification!!! [thread-topic:] => Notification!!! [thread-index:] => Ac8PqFiqdrH9T1vTTZiUMGJPjR+l6AAE0LOh [date:] => Sun, 12 Jan 2014 17:28:02 +0000 [message-id:] => [references:] => [in-reply-to:] => [accept-language:] => en-US, en-GB [content-language:] => en-US [x-ms-has-attach:] => [x-ms-tnef-correlator:] => [x-originating-ip:] => [41.190.3.105] [content-type:] => multipart/alternative;boundary="_000_D38DB9A37E8632499AABC55209A1592B01022B090Cmb03uniadsund_" [mime-version:] => 1.0 [x-virus-scanned:] => by iCritical at max3.sunderland.ac.uk [x-spam-status:] => No, score=2.7 [x-spam-score:] => 27 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: From: Nicholas Cope Sent: Sunday, January 12, 2014 3:09 PM To: Nicholas Cope Subject: Notification!!! This is an automatic message sent by our security system to let you know that you have 48 hours to confirm your account information. Once you have updated your account records, your account will be automatically upgraded. This will help protect your account in the future. This process does not take more than 3 minutes. [...] Content analysis details: (2.7 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.190.3.105 listed in dnsbl.sorbs.net] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.190.3.105 listed in zen.spamhaus.org]-0.0 SPF_PASS SPF: sender matches SPF record-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.0 HTML_MESSAGE BODY: HTML included in message [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.