Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mark@o7e.net [delivery-date:] => Tue, 26 May 2015 04:45:08 -0700 [received:] => Array ( [0] => from c-98-204-83-16.hsd1.md.comcast.net ([98.204.83.16]:3954)by bigcat.newsblaze.com with esmtp (Exim 4.85)(envelope-from )id 1YxDHu-00052J-70for mark@o7e.net; Tue, 26 May 2015 04:45:08 -0700 [1] => from (192.168.1.2) by cintas.com (98.204.83.16) with Microsoft SMTP Server id 8.0.685.24; Tue, 26 May 2015 06:44:48 -0500 ) [message-id:] => <9640441823.F05OG80E252427.706080@c-98-204-83-16.hsd1.md.comcast.net> [date:] => Tue, 26 May 2015 06:44:48 -0500 [from:] => "Australian Taxation Office" [user-agent:] => Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.9) Gecko/20101112 Thunderbird/3.1.4 [mime-version:] => 1.0 [to:] => [subject:] => Notice of Underreported Income [content-type:] => multipart/alternative;boundary="------------06080100202090107080104" [x-spam-status:] => No, score=3.6 [x-spam-score:] => 36 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "bigcat.newsblaze.com",has NOT identified this incoming email as spam. The originalmessage has been attached to this so you can view it or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Taxpayer ID: ufwsd-000001586844UKTax Type: Income TaxIssue: Unreported/Underreported Income (Fraud Application)Please review your tax income statement on HM Revenue and Customs ( HMRC ).Download your HMRC statement.Please complete the form. You can download HMRC Form here.HM Revenue and Customs [...] Content analysis details: (3.6 points, 4.5 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: here.hm] 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 HTML_MESSAGE BODY: HTML included in message 0.4 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr 1) [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.