Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mc_mxw@o7e.net [delivery-date:] => Mon, 09 Jan 2012 22:51:43 -0800 [received:] => Array ( [0] => from c2mds.mailcentro.com ([208.67.179.143])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RkVYc-0001dM-8vfor mc_mxw@o7e.net; Mon, 09 Jan 2012 22:51:43 -0800 [1] => from dmz-mailsec-scanner-7.mit.edu (DMZ-MAILSEC-SCANNER-7.MIT.EDU [18.7.68.36])by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with ESMTP id q0A6pb1S003752for ; Mon, 9 Jan 2012 22:51:38 -0800 [2] => from mailhub-auth-1.mit.edu ( [18.9.21.35])by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 01.DC.02310.BFFDB0F4; Tue, 10 Jan 2012 01:51:39 -0500 (EST) [3] => from outgoing-exchange-1.mit.edu (OUTGOING-EXCHANGE-1.MIT.EDU [18.9.28.15])by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id q0A6pXi6015257;Tue, 10 Jan 2012 01:51:33 -0500 [4] => from OC11EXEDGE4.EXCHANGE.MIT.EDU (OC11EXEDGE4.EXCHANGE.MIT.EDU [18.9.3.27])by outgoing-exchange-1.mit.edu (8.13.8/8.12.4) with ESMTP id q0A6pM9U024585;Tue, 10 Jan 2012 01:51:23 -0500 [5] => from w92exhub5.exchange.mit.edu (18.7.73.11) byOC11EXEDGE4.EXCHANGE.MIT.EDU (18.9.3.27) with Microsoft SMTP Server (TLS) id14.1.289.1; Tue, 10 Jan 2012 01:50:32 -0500 [6] => from EXPO7.exchange.mit.edu ([18.9.4.12]) byw92exhub5.exchange.mit.edu ([18.7.73.11]) with mapi; Tue, 10 Jan 201201:51:22 -0500 ) [x-mc-sender:] => zhengyr@mit.edu [x-mc-ipaddr:] => DMZ-MAILSEC-SCANNER-7.MIT.EDU [18.7.68.36] [x-auditid:] => 12074424-b7fae6d000000906-48-4f0bdffb534f [from:] => Yaorong Zheng [date:] => Tue, 10 Jan 2012 01:51:21 -0500 [subject:] => Staff Mailbox Storage Alert!!! [thread-topic:] => Staff Mailbox Storage Alert!!! [thread-index:] => AQHMz2RD5dZbKVbcvUGHDjyQHQaTWg== [message-id:] => <2E52161EE073D841858C7E9CAECF598E095266F621@EXPO7.exchange.mit.edu> [accept-language:] => en-US [content-language:] => en-US [x-ms-has-attach:] => [x-ms-tnef-correlator:] => [acceptlanguage:] => en-US [content-type:] => multipart/alternative;boundary="_000_2E52161EE073D841858C7E9CAECF598E095266F621EXPO7exchange_" [mime-version:] => 1.0 [to:] => Undisclosed recipients:; [x-brightmail-tracker:] => H4sIAAAAAAAAA01Ta0wUVxT2zszODI/RYXXdK8U0XXzVdmltjZ4mbbGNbScxgaZtauuPtlt2ZDfCgruA4I8GShWDVUlBi1s2rmClLItEg2R5FHFTHkuA0kgEgVLkYXjbJrwXpDNsEP7cfOd85/vOOck9LKnMZYNZoylBNJt0MRran1L6qUK13n8CIl8f69OA/eeTUFEyiiDjficJ9b0bYbLsFOQ174c/Ox6T0LL8kALHOSXkNlQowOXtZKDf1kFC6fhtGuzLBQz0jHQhGCtuIGDC8zsDD/8tp2Gxvx3BrbphBGdr/iJh7Md4aHvgIuHpXcmyyGEjoPVJGQP3Gm8jsPWEQvmVCPAsDhGQ555koHq8GEFhWx0BVWWPGPh1uYQE94CVhuqzqRQ0V94goTGvg4EB57gCLj4tQtA6e4GG4pl6BI46OwnOOTcBNXduUOC9Ok7BzFIOAd78mxRMd+czh94Q8htPCY2FNZQwMZVBCEWzgcKw54JCcNm6kXA9NYcQzjywI+HvW//RQs58NhKm7x8R7l1qZARruxMJfXVfCgVLViQ0LDjJj9XH/N/WizHGJNH82rvf+BvaZobp+PZNyZWLyalohstELIv5/bhqeEcm8pPgVtzWW0pnIn9Wydcg3J42RfqCWoSraqcUvqAB4eyRnxhfUI5wS9cTJOuV/CWER0Z3ypjmd+JpRwchY0rCC7/NMzLezO/GC33dChlv4V/Fc9+foX04DPeXTKzkOT4SO84vrHgiaabZJueKD8mrcdfgNcI3axDO/6WaXJ37WeVj2levwj0ZpUhejeTj8NBohM8yCHuuDlK+ViE4N+sanYVU1nWu1jWFdZ3CVxKGOy/n0D78Cr55fYz0YS3Ofeam1uftiHGg7frY09pYnTHGIkZpLVE6k0k0aw+GxRoTwkR94h0kf3Tm8A4XSndr3IhnkSaQ8+wJiFQqdEmWlFg32sYSGhVH90qpjd/G6VMMOovha3NijGhxI8ySmi1c0VcSx+l1KadFc9wq9QJLadTcnr2TEUo+WpcgnhDFeNG8yoawrAZzB6TjUgaZxWgx+bgxJmGNJlg/2TxQMn9ZruEs8bpYizHaxzeht9jRVFsrYj137dL7Q6v0KilTnEkMVnPhsoCXBYZE03PP1YMeRWppxc3cm3JVoHTuz11HpYaE1FClWmmYoFujglNR+uTJpYq4ycyXDjcUFO7aUPs+p2sO33ZOnzZlOD9/kOwL+bAlOL4zyWv4zD3oCM39bi7qo3TbwKcfzDwaKgkPdLsWTfrjfXOUs6le/Z42jKzJ2n40e3ek4500/aEoy4vNWzds2rd0xRVw8fNdyvRjn9R+wZ1IOvrHfBZuLzriXE73HtBQFoNu317SbNH9D8u6rsyrBAAA [x-mc-filter:] => 7.6.9 [x-mc-filter-antivirus:] => Scanned for virus - Status 0 [x-mc-deliveryid:] => 130 [x-mc-ctfilter:] => CT RefID = str=0001.0A010208.4F0BDFFD.000D,ss=1,fgs=0 - Class:Unknown - Virus Threat:Unknown - Phishing Threat:Low [x-mc-filterskip:] => 0 [x-mc-spamscore:] => 0 T 49 [x-spam-status:] => No, score=1.1 [x-spam-score:] => 11 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: You have exceeded your mailbox quota storage limit beforethe xmas holiday and we have to verify all staff account within 24hours. Pleasevisit our below link for immediate verification on your mailbox account.[...] Content analysis details: (1.1 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)0.0 HTML_MESSAGE BODY: HTML included in message0.1 SINGLE_HEADER_1K A single header contains 1K-2K characters [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.