Search Scamdex & Scamalot
An Email with the Subject "loan offer" was received in one of Scamdex's honeypot email accounts on Wed, 12 Aug 2015 09:22:53 -0700 and has been classified as a Employment/Job Scam Email. The sender shows as DUKE.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be added to their email address lists for spam purposes.
EEEEEstdClass Object
(
[return-path:] => <>
[envelope-to:] => accounts@scamdex.com
[delivery-date:] => Wed, 12 Aug 2015 09:22:53 -0700
[received:] => Array
(
[0] => from mail-bl2hn0246.outbound.protection.outlook.com ([65.55.169.246]:16802 helo=na01-bl2-obe.outbound.protection.outlook.com)by bigcat.newsblaze.com with esmtps (TLSv1.2:AES256-SHA256:256)(Exim 4.85)id 1ZPYnl-0007FS-0Cfor accounts@scamdex.com; Wed, 12 Aug 2015 09:22:53 -0700
[1] => from CY1PR0201CA0039.namprd02.prod.outlook.com (10.163.30.177) byCY1PR0201MB1482.namprd02.prod.outlook.com (10.163.139.152) with MicrosoftSMTP Server (TLS) id 15.1.225.19; Wed, 12 Aug 2015 16:22:51 +0000
[2] => from BY2FFO11FD001.protection.gbl (2a01:111:f400:7c0c::131) byCY1PR0201CA0039.outlook.office365.com (2a01:111:e400:58b9::49) with MicrosoftSMTP Server (TLS) id 15.1.225.19 via Frontend Transport; Wed, 12 Aug 201516:22:51 +0000
[3] => from fsu-exch-nwr02.fsu.edu (146.201.58.209) byBY2FFO11FD001.mail.protection.outlook.com (10.1.14.123) with Microsoft SMTPServer (TLS) id 15.1.243.9 via Frontend Transport; Wed, 12 Aug 2015 16:22:49+0000
[4] => from [192.168.43.122] (197.180.136.60) by fsu-exch-nwr02.fsu.edu(10.146.58.166) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 12 Aug2015 12:22:11 -0400
)
[authentication-results:] => spf=none (sender IP is 146.201.58.209)smtp.helo=fsu-exch-nwr02.fsu.edu; paypalbillingsupport.com; dkim=none(message not signed) header.d=none;
[received-spf:] => None (protection.outlook.com: fsu-exch-nwr02.fsu.edu does notdesignate permitted sender hosts)
[content-type:] => multipart/alternative; boundary="===============0856294952=="
[mime-version:] => 1.0
[subject:] => loan offer
[to:] => Recipients
[from:] => DUKE
[date:] => Wed, 12 Aug 2015 09:21:11 -0700
[reply-to:] =>
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.