Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => Array ( [0] => [1] => ) [delivered-to:] => o7enet@edie.newsblaze.com [received:] => Array ( [0] => from edie.newsblaze.comby edie.newsblaze.com (Dovecot) with LMTP id mUonDCXwT1jIXQAApOa+twfor ; Tue, 13 Dec 2016 07:57:09 -0500 [1] => from ccpay247.com ([104.223.81.28]:54726 helo=mail.ccpay247.com)by edie.newsblaze.com with esmtp (Exim 4.87)(envelope-from )id 1cGmda-00061p-4bfor mxw@o7e.net; Tue, 13 Dec 2016 07:57:09 -0500 [2] => by mail.ccpay247.com id ha067o0001gj for ; Tue, 13 Dec 2016 09:31:49 -0500 (envelope-from ) ) [envelope-to:] => mxw@o7e.net [delivery-date:] => Tue, 13 Dec 2016 07:57:09 -0500 [dkim-signature:] => v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=ccpay247.com;h=Date:From:To:Subject:MIME-Version:Content-Type:List-Unsubscribe:Message-ID; i=harrison_hill@ccpay247.com;bh=uziiv8V20HjzaB+9FOG/oeZoURA=;b=Iaopf0a+gKIQTW7D6FVMw9p04pt/3xcygU4fbpa51G0DJDVaAoFIG+O6huzY5lxKkA8FiRzDiVN1 5tX6nxe0Ed/7t4duYdsa8HKxPsIFSS20oHNy5pIgUk3shX6n2E6LGChQ1FcWwMrjyBhN/VaNI5AI bh9ZCmADVrjrduJzI9s= [domainkey-signature:] => a=rsa-sha1; c=nofws; q=dns; s=dkim; d=ccpay247.com;b=d7MRN0iGKSknXY+WnjaFaPIg619IJa3gR4A5fZc4Dpialc59bqgxFFmpaxvB5SP99cPkX9C8I331 ur/Zc6CgCo4Xw1LToGW1Q2kBcOUOPKEJZLXBKqu+ctgI4oj57JtYeMtvqPg/pkKryAnXXFMLcqH0 uyIwGqjfDKVltIco0Hc=; [date:] => Tue, 13 Dec 2016 09:31:49 -0500 [from:] => "Harrison Hill" [to:] => [subject:] => Alert - Your Credit Card has been Charged! [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="----=_Part_3529_1160119026.1481632157785" [x-smtpapi:] => {"category": "20161213-072033-782-72"} [list-unsubscribe:] => [feedback-id:] => 2016121307203378272 [message-id:] => <0.0.0.188.1D2554DA3BFF22E.3AE894@mail.ccpay247.com> [x-spam-status:] => No, score=2.8 [x-spam-score:] => 28 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "edie.newsblaze.com",has NOT identified this incoming email as spam. The originalmessage has been attached to this so you can view it or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Dear Customer, We have just processed your payment against Invoice no. KW1521 ( Download Receipt). The payment details are: Order Value: $1200 Sales Tax: $96 Total Amount Received: $1296 [...] Content analysis details: (2.8 points, 4.5 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ccpay247.com] 2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3) [104.223.81.28 listed in bl.mailspike.net]-0.0 SPF_PASS SPF: sender matches SPF record-3.1 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.7 MPART_ALT_DIFF BODY: HTML and text parts are different 1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted 0.0 T_REMOTE_IMAGE Message contains an external image [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.