Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scams@scamdex.com [delivery-date:] => Thu, 21 Feb 2013 13:54:25 -0800 [received:] => Array ( [0] => from [210.32.2.5] (port=39986 helo=zju.edu.cn)by lester.newsblaze.com with esmtp (Exim 4.80)(envelope-from )id 1U8e5w-0007wE-3Ofor scams@scamdex.com; Thu, 21 Feb 2013 13:54:25 -0800 [1] => by ajax-webmail-mailapp2 (Coremail) ; Fri, 22 Feb 2013 05:52:15+0800 (CST) ) [date:] => Fri, 22 Feb 2013 05:52:15 +0800 (CST) [from:] => "Admin LoGon" [message-id:] => <1b75a58.12cfc.13cfebe130a.Coremail.ynshao@zju.edu.cn> [subject:] => Login Trial Exceeded [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="----=_Part_269180_18370693.1361483535114" [x-originating-ip:] => [192.81.209.128] [x-priority:] => 3 [x-mailer:] => Coremail Webmail Server Version 4.0.5 build20120813(19382.4832.4830) Copyright (c) 2002-2013 www.mailtech.cn zju [x-sendmailwithsms:] => false [x-cm-transid:] => IAbKCpDr7_MPlyZRNfhiAA--.4231W [x-cm-senderinfo:] => qqqrjiatr66yvxohv3gofq/1tbiAQKdSk+j5DeO4wACsE [x-coremail-antispam:] => 1Ur529EdanIXcx71UUUUU7IcSsGvfJTRUUU1k0S07vEb7Iv0xC_Ar1lV2xY67kC6x804xWlV2xY67CY07I20VC2zVCF04k26cxKx2IYs7xG6rWj6s0DMIAIbVAFxVCF77xC64kEw24lV2xY67C26IkvcIIF6IxKo4kEV4ylV2xY628lY4IE4IxF12IF4wCS07vE84ACjcxK6xIIjxv20xvE14v26w1j6s0DMIAIbVA2z4x0Y4vE2Ix0cI8IcVCY1x0267AKxVW0oVCq3wCS07vE84ACjcxK6I8E87Iv67AKxVW0oVCq3wCS07vE84ACjcxK6I8E87Iv6xkF7I0E14v26rxl6s0DMIAIbVAa7VA2z4x0Y4vE2Ix0cI8IcVCY1x0267AKxVW0oVCq3VA2z4x0Y4vE2Ix0cI8IcVAFwI0_tr0E3s0E7I0Y6sxI4wCS07vEnx0E84ACjcxK6xIIjxv20xvEc7CjxVAFwI0_GcCE3s0E84ACjcxK6I8E87Iv67AKxVW0oVCq3VCjxxvEa2IrMIAIbVAa7VA2z4x0Y4vE2Ix0cI8IcVCY1x0267AKxVW0oVCq3VCjxxvEa2IrMIAIbVAS0I0E0xvYzxvE52x082IY62kv0487MIAIbVAqx4xG64xvF2IEw4CE5I8CrVC2j2WlV2xY6cIj6xIIjxv20xvE14v26r1q6rW5MIAIbVAv7VC2z280aVAFwI0_Gr1j6F4UJwCS07vEOx8S6xCaFVCjc4AY6r1j6r4UMIAIbVACI402YVCY1x026xAvFcxGjxylV2xY6x02cVCv0xWlV2xY6xkI7II2jI8vz4vEwIxGrwCS07vE4c8EcI0En4kS14v26r43JVWrXr1lV2xY6xAqzxv26xkF7I0En4kS14v26F1UJr0E3s0q3wCS07vE4x8a6x804xWlV2xY6xCIbckI1I0E14v26r43JVWrXr1lV2xY6I8I3I0E5I8CrVAFwI0_JrI_JrWlV2xY6I8I3I0E7480Y4vE14v26r106r1rMIAIbVC2zVAF1VAY17CE14v26rWY6r4UJwCS07vEIxAIcVC0I7IYx2IY67AKxVW8JVW5JwCS07vEIxAIcVC0I7IYx2IY6xkF7I0E14v26rxl6s0DMIAIbVCI42IY6xAIw20EY4v20xvaj40_Gr0_Zr1lV2xY6IIF0xvEx4A2jsIE14v26r4UJVWxJr1lV2xY6IIF0xvEx4A2jsIEc7CjxVAFwI0_GcCE3sUvcSsGvfC2KfnxnUU== [x-spam-status:] => No, score=2.5 [x-spam-score:] => 25 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: An unidentified user was trying to access your account with an incorrect password,as a result we partially blocked your account, please click on: MY ACCOUNT in other for us to re-active your account Webmaster Admin Team ©2004-2012 copyright all right reserved. [...] Content analysis details: (2.5 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ow.ly] 0.0 HTML_MESSAGE BODY: HTML included in message 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.