Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => paypal@o7e.net [delivery-date:] => Thu, 02 Jan 2014 22:27:02 -0800 [received:] => Array ( [0] => from www.call-green.com ([91.250.97.97]:33040 helo=call-green.com)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1VyyDk-0001X0-S6for paypal@o7e.net; Thu, 02 Jan 2014 22:27:02 -0800 [1] => (qmail 25780 invoked by uid 10003); 3 Jan 2014 06:30:22 +0100 ) [date:] => 3 Jan 2014 06:30:22 +0100 [message-id:] => <20140103053022.25777.qmail@call-green.com> [to:] => paypal@o7e.net [subject:] => Standard Delivery Failure [x-php-originating-script:] => 10003:sys09725851.php [from:] => "Best Buy" [x-mailer:] => CF-XPInformer [reply-to:] => "Best Buy" [mime-version:] => 1.0 [content-type:] => multipart/alternative;boundary="----------138872702252C64AEE66F7E" [x-spam-status:] => No, score=0.5 [x-spam-score:] => 5 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: My Besy Buy ID: 001832300 Reward certificate(s) available. Sir/Madam, [...] Content analysis details: (0.5 points, 4.5 required) pts rule name description---- ---------------------- ---------------------------------------------------0.4 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=anonymous%40call-green.com;ip=91.250.97.97;r=lester.newsblaze.com] 0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)[SPF failed: Please see http://www.openspf.net/Why?s=helo;id=call-green.com;ip=91.250.97.97;r=lester.newsblaze.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: stk-souz.ru] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.