Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Spam Emails from edm.cazxa.com to Sent to qq.com

Spam Emails from edm.cazxa.com to Sent to qq.com

This morning I woke up to approximately 2000 bounced emails from postmaster@edm.cazxa.com. Please see the sample below. It appears the emails are being sent to qq.com email addresses with a carbon copy (CC) sent to my email address. When the spam emails are ejected by qq.com, a copy of the bounced email is sent to me. And, that is how I ended up receiving almost 2000 bounced emails in my inbox.

Sample of the edm.cazxa.com Bounced Email

  • Delivery report
  • From: postmaster@edm.cazxa.com
  • Reporting-MTA: dns;edm.cazxa.com
  • X-PowerMTA-VirtualMTA: localhost.com
  • Received-From-MTA: dns;swz (154.223.166.96)
  • Arrival-Date: Wed, 21 Aug 2019 09:46:47 +0800
  • Final-Recipient: rfc822;1640716785@qq.com
  • Action: failed
  • Status: 5.3.2 (system not accepting network messages)
  • Remote-MTA: dns;mx3.qq.com (203.205.219.57)
  • Diagnostic-Code: smtp;550 Connection frequency limited. http://service.mail.qq.com/cgi-bin/help?subtype=1&&id=20022&&no=1000722 [MDThoCbEAzIXoZSHKNYZWnZu0IrdIehBR73SDBVFXWHvYiYLSJhCEaHxOa3oe8tCug== IP: 162.248.4.103]
  • X-PowerMTA-BounceCategory: other

Hello, this is the mail server on edm.cazxa.com.

I am sending you this message to inform you on the delivery status of a

message you previously sent. Immediately below you will find a list of

the affected recipients; also attached is a Delivery Status Notification

(DSN) report in standard format, as well as the headers of the original

message.

<934695409@qq.com> delivery failed; will not continue trying

Email Headers

  • X-Email-Count: 1
  • X-Source-Sender: () [162.248.4.102]:36421
  • X-Local-Domain: No
  • X-Exim-ID: 1A1erdFFxwJPj1-4KCKq7K-141ra6O90k
  • X-Source-IP: 162.248.4.102
  • Return-Path: <>
  • Received: from edm.cazxa.com (mta35.aeonmail.com [162.248.4.102]) by with SMTP;
  • Tue, 20 Aug 2019 20:30:43 -0500
  • Date: Wed, 21 Aug 2019 09:43:08 +0800
  • From: postmaster@edm.cazxa.com
  • Subject: Delivery report
  • To:
  • MIME-Version: 1.0
  • Content-Type: multipart/report; report-type=delivery-status;
  • boundary="report5D5CA1AC@edm.cazxa.com"
  • Message-ID: <322255739aae45fcbfd8db7c1808c685@com>
  • X-SmarterMail-Spam: Reverse DNS Lookup [Passed], ISpamAssassin 0 [raw: 0], DK_None, DKIM_None
  • X-SmarterMail-SpamDetail: 0.6 MISSING_MID Missing Message-Id: header
  • X-SmarterMail-TotalSpamWeight: 0

Comment sectionComments or Answers

To protect your privacy, please remove sensitive or identifiable information from your post. Your IP address will be used to display your estimated location in your post.

waiting

CommentsPost Comment or Answer