Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 10.96.141.68 with SMTP id rm4csp2535495qdb; Mon, 1 Jun 2015 16:08:03 -0700 (PDT) [1] => from smtp.mail.drexel.edu (pm1.irt.drexel.edu. [144.118.29.81]) by mx.google.com with ESMTP id g5si1394127qca.6.2015.06.01.16.08.01; Mon, 01 Jun 2015 16:08:03 -0700 (PDT) [2] => from esa5000-a.irt.drexel.edu (ace-smtp-nat.noc.drexel.edu [144.118.29.70])by smtp.mail.drexel.edu (Postfix) with ESMTP id 7F01C5C9200;Mon, 1 Jun 2015 19:08:01 -0400 (EDT) [3] => from esa5000-a.irt.drexel.edu (localhost.localdomain [127.0.0.1])by localhost (Email Security Appliance) with SMTP id 5E6FF24A7C0A_56CE5D1B;Mon, 1 Jun 2015 23:08:01 +0000 (GMT) [4] => from CH2.drexel.edu (ch2.drexel.edu [144.118.29.17])by esa5000-a.irt.drexel.edu (Sophos Email Appliance) with ESMTP id E26AD24A7C08_56CE5D0F;Mon, 1 Jun 2015 23:08:00 +0000 (GMT) [5] => from MB2.drexel.edu ([fe80::e4:648b:e10b:7bd3]) by CH2.drexel.edu([2002:9076:1d11::9076:1d11]) with mapi id 14.02.0347.000; Mon, 1 Jun 201519:08:00 -0400 ) [x-received:] => by 10.140.236.22 with SMTP id h22mr26301216qhc.92.1433200083284; Mon, 01 Jun 2015 16:08:03 -0700 (PDT) [return-path:] => [received-spf:] => pass (google.com: best guess record for domain of gdh29@drexel.edu designates 144.118.29.81 as permitted sender) client-ip=144.118.29.81; [authentication-results:] => mx.google.com; spf=pass (google.com: best guess record for domain of gdh29@drexel.edu designates 144.118.29.81 as permitted sender) smtp.mail=gdh29@drexel.edu [from:] => "Hoefling,Gerard" [to:] => "Hallowell,David" [subject:] => RE: NEW ORDER [thread-topic:] => NEW ORDER [thread-index:] => AQHQnL82YcQR3RABMEqQwREl0XbXnw== [date:] => Mon, 1 Jun 2015 23:08:00 +0000 [message-id:] => <525EF7157E71414FB111003F5FF2C1D12B1DFC18@MB2.drexel.edu> [accept-language:] => en-US [content-language:] => en-US [x-ms-has-attach:] => [x-ms-tnef-correlator:] => [x-originating-ip:] => [50.118.162.36] [content-type:] => multipart/alternative;boundary="_000_525EF7157E71414FB111003F5FF2C1D12B1DFC18MB2drexeledu_" [mime-version:] => 1.0 )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.