An
Email with the Subject "TERMS OF USE: Your account has been suspended" was
received in one of Scamdex's honeypot email accounts on Tue, 20 Sep 2011 19:15:16 -0700
and has been classified as a Generic Scam Email.
The sender shows as "craigslist.org" <new@craigslist-info.org>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => heather_weather2419@scamdex.com
[delivery-date:] => Tue, 20 Sep 2011 19:15:16 -0700
[received:] => Array
(
[0] => from smtplq-out16.aruba.it ([62.149.158.36] helo=smtplq01.aruba.it)by lester.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1R6CLD-00010W-Pzfor heather_weather2419@scamdex.com; Tue, 20 Sep 2011 19:15:16 -0700
[1] => (qmail 31705 invoked by uid 89); 21 Sep 2011 02:15:12 -0000
[2] => from unknown (HELO smtp5.aruba.it) (62.149.158.225) by smtplq01.aruba.it with SMTP; 21 Sep 2011 02:15:12 -0000
[3] => (qmail 9438 invoked by uid 89); 21 Sep 2011 02:15:12 -0000
[4] => from unknown (HELO ixgqg) (new@craigslist-info.org@93.112.48.136) by smtp5.ad.aruba.it with SMTP; 21 Sep 2011 02:15:12 -0000
)
[from:] => "craigslist.org"
[subject:] => TERMS OF USE: Your account has been suspended
[to:] => heather_weather2419@scamdex.com
[content-type:] => multipart/alternative;boundary="=_NextPart_2rfkindysadvnqw3nerasdf";charset="US-ASCII"
[mime-version:] => 1.0
[reply-to:] => new@craigslistinfo.org
[date:] => Tue, 20 Sep 2011 19:15:09 -0700
[x-priority:] => 3
[x-spam-rating:] => Array
(
[0] => smtp5.ad.aruba.it 1.6.2 0/1000/N
[1] => smtplq01.aruba.it 1.6.2 0/1000/N
)
[x-spam-status:] => No, score=0.9
[x-spam-score:] => 9
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: letter Important Information TERMS OF USE: We reserve theright, at our sole discretion, to change, =modify or otherwise alter youraccount at any time. Therefore your account has been blocked. [...] Content analysis details: (0.9 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, notrust[62.149.158.36 listed in list.dnswl.org]0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME0.0 HTML_MESSAGE BODY: HTML included in message0.7 MPART_ALT_DIFF BODY: HTML and text parts are different0.1 MISSING_MID Missing Message-Id: header0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
TERMS OF USE: We reserve the right, at our sole discretion, to change,
=modify or otherwise alter your account at any time. Therefore your
account has been blocked.
Common reasons include:
* Essentially you posted the same item to multiple
cities or categories, or more than once in 48 hours
* Your post contains a link or URL to a commercial
website or auction
* Your ad appears to contain a phone #, email
address, or URL
To avoid deletion of your account please Sign In:
Click
here to confirm your Craigslist account
Thanks,
Craigslist team
Copyright 2005-2011
Craigslist
International Limited.