Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 10.96.135.9 with SMTP id po9csp2226qdb; Tue, 16 Jun 2015 10:19:06 -0700 (PDT) [1] => from ironport01.blueash.triplefin.com (ironport01.blueash.triplefin.com. [66.195.148.176]) by mx.google.com with ESMTP id x143si1231723iod.50.2015.06.16.10.19.05 for ; Tue, 16 Jun 2015 10:19:05 -0700 (PDT) [2] => from cinwinexhvp01.blueash.triplefin.com ([10.44.40.50]) by ironport01.blueash.triplefin.com with ESMTP; 16 Jun 2015 13:19:03 -0400 [3] => from CINWINEXHVP01.blueash.triplefin.com (10.44.40.50) byCINWINEXHVP01.blueash.triplefin.com (10.44.40.50) with Microsoft SMTP Server(TLS) id 15.0.995.29; Tue, 16 Jun 2015 11:57:23 -0400 [4] => from [127.0.0.1] (91.240.209.176) byCINWINEXHVP01.blueash.triplefin.com (10.44.40.50) with Microsoft SMTP Serverid 15.0.995.29 via Frontend Transport; Tue, 16 Jun 2015 11:57:23 -0400 ) [x-received:] => by 10.50.114.5 with SMTP id jc5mr4849966igb.43.1434475145986; Tue, 16 Jun 2015 10:19:05 -0700 (PDT) [return-path:] => Array ( [0] => [1] => sw.yespo@admin.com ) [received-spf:] => neutral (google.com: 66.195.148.176 is neither permitted nor denied by best guess record for domain of sw.yespo@admin.com) client-ip=66.195.148.176; [authentication-results:] => mx.google.com; spf=neutral (google.com: 66.195.148.176 is neither permitted nor denied by best guess record for domain of sw.yespo@admin.com) smtp.mail=sw.yespo@admin.com [x-ironport-anti-spam-filtered:] => true [x-ironport-anti-spam-result:] => A2A//QAoWoBV/zIoLAo/FQeDZAiFIrlYB4JxhABWghQOAQEBAQEBAYEKQQECAQGDU1gOQQEdDAEBJgVJJoZGDWpjmiGJVYM7lR+BDosbhTeNAYMBWQgBgwSBFgWBIotEhnmBLoMkhEiCK4EzhnCIaAKDMINbJmOBNUwOIWs5PHgCBxcDAXodCQEBAQ [x-ipas-result:] => A2A//QAoWoBV/zIoLAo/FQeDZAiFIrlYB4JxhABWghQOAQEBAQEBAYEKQQECAQGDU1gOQQEdDAEBJgVJJoZGDWpjmiGJVYM7lR+BDosbhTeNAYMBWQgBgwSBFgWBIotEhnmBLoMkhEiCK4EzhnCIaAKDMINbJmOBNUwOIWs5PHgCBxcDAXodCQEBAQ [subject:] => [SPAM] MSG-ID:66455620730] - multiple invalid login attempts [x-ironport-av:] => E=Sophos;i="5.13,627,1427774400"; d="scan'208,217";a="5017881" [x-crosspremisesheadersfilteredbysendconnector:] => CINWINEXHVP01.blueash.triplefin.com [message-id:] => <55807FA9.4CC9CAB1@admin.com> [date:] => Tue, 16 Jun 2015 19:57:29 +0400 [from:] => RBC [to:] => [content-type:] => multipart/alternative;boundary="6ywn77Dkv=_VcPuH5ttvaufyswjMDMbYVK" [mime-version:] => 1.0 [x-mailer:] => Mozilla 4.77 [en] (Windows NT 5.0; U) [x-organizationheaderspreserved:] => CINWINEXHVP01.blueash.triplefin.com )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.