Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => Array ( [0] => [1] => ) [delivered-to:] => newblood@scamdex.com [received:] => Array ( [0] => from edie.newsblaze.comby edie.newsblaze.com with LMTP id wH9RN1fHEVsaVAAApOa+twfor ; Fri, 01 Jun 2018 18:23:19 -0400 [1] => from mailchk-m03.uwaterloo.ca ([129.97.128.240]:50146)by edie.newsblaze.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)(Exim 4.91)(envelope-from )id 1fOsS7-0005U5-Qmfor scams@scamdex.com; Fri, 01 Jun 2018 18:23:19 -0400 [2] => from connect.uwaterloo.ca (connhm04.connect.uwaterloo.ca [172.16.137.68])by mailchk-m03.uwaterloo.ca (8.14.7/8.14.7) with ESMTP id w51MAFSI030712(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=OK);Fri, 1 Jun 2018 18:10:55 -0400 [3] => from DESKTOP2K7LD81 (41.82.16.45) by connhm04.connect.uwaterloo.ca(172.16.137.68) with Microsoft SMTP Server (version=TLS1_2,cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1415.2; Fri, 1 Jun2018 18:09:45 -0400 ) [envelope-to:] => scams@scamdex.com [delivery-date:] => Fri, 01 Jun 2018 18:23:19 -0400 [dmarc-filter:] => OpenDMARC Filter v1.3.2 mailchk-m03.uwaterloo.ca w51MAFSI030712 [authentication-results:] => Array ( [0] => mailchk-m03/w51MAFSI030712; dmarc=fail (p=none dis=none) header.from=uwaterloo.ca [1] => mailchk-m03; spf=fail smtp.mailfrom=amir.yazdanmehr@uwaterloo.ca ) [dkim-filter:] => OpenDKIM Filter v2.11.0 mailchk-m03.uwaterloo.ca w51MAFSI030712 [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=uwaterloo.ca;s=default; t=1527891082;bh=c1l5AtgcVvZDv3YvxTkuZedL5rmqcxiCAa8Y61KE7e8=;h=Reply-To:From:To:Subject:Date:From;b=5EuQrrR9+6R+bJpZd3NhAvU4qJ+cJAbUvMbPGVAl5xb9vIoeSabeOxdE3G3b10YRJ 76Uoaq0qJ2DLcypepho3mfubXswnLSGT3Sf/pDOYs+weeCceqxv84eeobXlLwQwzJk EEYCkbHpK7PpX/xwEbHp+oMi8wmhMFJsTcITTUVk= [reply-to:] => [from:] => "Mr. Terry" [to:] => "Mr. Terry" [subject:] => Hello Dear: [date:] => Fri, 1 Jun 2018 14:44:47 -0700 [organization:] => Mr. Terry [message-id:] => <015e01d3f9f5$54a612b0$fdf23810$@yazdanmehr@uwaterloo.ca> [mime-version:] => 1.0 [content-type:] => multipart/alternative;boundary="----=_NextPart_000_015F_01D3F9BA.A8473AB0" [x-mailer:] => Microsoft Office Outlook 12.0 [thread-index:] => AdP58MpzJ+hXzxDlQkC88YymkExIOQ== [content-language:] => en-us [x-originating-ip:] => [41.82.16.45] [x-clientproxiedby:] => connhm02.connect.uwaterloo.ca (172.16.137.66) Toconnhm04.connect.uwaterloo.ca (172.16.137.68) [x-greylist:] => Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (mailchk-m03.uwaterloo.ca [129.97.128.141]); Fri, 01 Jun 2018 18:11:22 -0400 (EDT) [x-miltered:] => at mailchk-m03 with ID 5B11C448.000 by Joe's j-chkmail (http://j-chkmail.ensmp.fr)! [x-virus-scanned:] => clamav-milter 0.99.3 at mailchk-m03 [x-virus-status:] => Clean )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.