Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => <> [envelope-to:] => cw2000@legomad.com [delivery-date:] => Wed, 17 Aug 2011 07:53:47 -0700 [received:] => Array ( [0] => from smtp-cpk.frontbridge.com ([204.231.192.41] helo=WA2EHSNDR001.bigfish.com)by lester.newsblaze.com with esmtps (TLSv1:AES128-SHA:128)(Exim 4.69)id 1QthV5-0007c0-4Hfor cw2000@legomad.com; Wed, 17 Aug 2011 07:53:47 -0700 [1] => from VA3EHSOBE003.bigfish.com (10.2.40.3) byWA2EHSNDR001.bigfish.com (10.2.40.21) with Microsoft SMTP Server (TLS) id14.1.225.8; Wed, 17 Aug 2011 14:53:44 +0000 [2] => from mail102-va3-R.bigfish.com (10.7.14.239) byVA3EHSOBE003.bigfish.com (10.7.40.23) with Microsoft SMTP Server id14.1.225.22; Wed, 17 Aug 2011 14:53:33 +0000 [3] => from mail102-va3 (localhost.localdomain [127.0.0.1]) bymail102-va3-R.bigfish.com (Postfix) with ESMTP id EF74C1970295; Wed, 17 Aug2011 14:53:26 +0000 (UTC) [4] => from mail102-va3 (localhost.localdomain [127.0.0.1]) by mail102-va3(MessageSwitch) id 1313592803581844_11529; Wed, 17 Aug 2011 14:53:23 +0000(UTC) [5] => from VA3EHSMHS002.bigfish.com (unknown [10.7.14.248]) bymail102-va3.bigfish.com (Postfix) with ESMTP id A8448CC0051; Wed, 17 Aug 201114:52:58 +0000 (UTC) [6] => from KELLER.ad.peralta.edu (209.129.192.67) byVA3EHSMHS002.bigfish.com (10.7.99.12) with Microsoft SMTP Server (TLS) id14.1.225.22; Wed, 17 Aug 2011 14:52:41 +0000 [7] => from EXPMBS07.ad.peralta.edu([0000:0000:0000:0000:0000:0000:0.0.0.1]) by KELLER.ad.peralta.edu([10.10.16.67]) with mapi; Wed, 17 Aug 2011 07:34:05 -0700 ) [x-bigfish:] => VPS41(zzc85dh9f05jqzz1202hzz8275bhz2fh2a8h668h839h) [x-fb-outbound-spam:] => yes [x-spamscore:] => 41 [x-forefront-antispam-report:] => CIP:209.129.192.67;KIP:(null);UIP:(null);IPVD:NLI;H:KELLER.ad.peralta.edu;RD:none;EFVD:NLI [received-spf:] => pass (mail102-va3: domain of peralta.edu designates 209.129.192.67 as permitted sender) client-ip=209.129.192.67; envelope-from=erodriguez@peralta.edu; helo=KELLER.ad.peralta.edu ;.peralta.edu ; [from:] => Eusebio Rodriguez [to:] => "info@mailbox.com" [date:] => Wed, 17 Aug 2011 07:34:03 -0700 [subject:] => Your mailbox is full. [thread-topic:] => Your mailbox is full. [thread-index:] => AQHMXOq2+nv9Z1qASUCcF0+S1l8lrg== [message-id:] => <2F32CD48457E6540B45DFE6A392F11DC430DB923FB@EXPMBS07.ad.peralta.edu> [accept-language:] => en-US [content-language:] => en-US [x-ms-has-attach:] => [x-ms-tnef-correlator:] => [acceptlanguage:] => en-US [content-type:] => multipart/alternative;boundary="_000_2F32CD48457E6540B45DFE6A392F11DC430DB923FBEXPMBS07adper_" [mime-version:] => 1.0 [reply-to:] => [x-originatororg:] => peralta.edu )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.