Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => Array ( [0] => [1] => ) [delivered-to:] => newblood@scamdex.com [received:] => Array ( [0] => from edie.newsblaze.comby edie.newsblaze.com with LMTP id uLxhH+IiYVyUDAAApOa+twfor ; Mon, 11 Feb 2019 02:23:14 -0500 [1] => from smtp01.chsf.fr ([90.83.106.187]:42006)by edie.newsblaze.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)(Exim 4.91)(envelope-from )id 1gt5vu-0000qE-8Ifor submitted@scamdex.com; Mon, 11 Feb 2019 02:23:14 -0500 [2] => from localhost (unknown [127.0.0.1])by IMSVA (Postfix) with SMTP id EE8232ACDE;Mon, 11 Feb 2019 08:22:32 +0100 (CET) [3] => from smtp01.chsf.fr (unknown [127.0.0.1])by IMSVA (Postfix) with ESMTP id 09C302AF9B;Mon, 11 Feb 2019 08:22:28 +0100 (CET) [4] => from cpsureproxyhello.chsf.fr (unknown [192.168.16.27])by smtp01.chsf.fr (Postfix) with ESMTP;Mon, 11 Feb 2019 08:22:27 +0100 (CET) [5] => from chsfvu186.ch-sf.priv (localhost [127.0.0.1])by cpsureproxyhello.chsf.fr (CPSureProxy) with ESMTP id CC82817FC2C;Mon, 11 Feb 2019 08:22:26 +0100 (CET) [6] => from localhost ([127.0.0.1]) by cpsure-proxycpsureproxyhello.chsf.fr (CpsureProxy SMTP Server ) with SMTP ID 213; Mon, 11 Feb 2019 08:22:20 +0100 (CET) [7] => from CHSFVW052.ch-sf.priv (chsfvw052.ch-sf.priv [10.1.163.248])by cpsureproxyhello.chsf.fr (CPSureProxy) with ESMTP id C0DD817FBCB;Mon, 11 Feb 2019 08:22:19 +0100 (CET) [8] => from chsfvw051.ch-sf.priv (10.1.163.249) by CHSFVW052.ch-sf.priv(10.1.163.248) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Mon, 11 Feb2019 08:22:20 +0100 [9] => from chsfvw051.ch-sf.priv ([fe80::dc5f:f956:4e87:30d3]) byCHSFVW051.ch-sf.priv ([fe80::dc5f:f956:4e87:30d3%15]) with mapi id15.00.1367.000; Mon, 11 Feb 2019 08:22:20 +0100 ) [envelope-to:] => submitted@scamdex.com [delivery-date:] => Mon, 11 Feb 2019 02:23:14 -0500 [dkim-signature:] => v=1; a=rsa-sha256; c=simple/simple; d=chsf.fr; s=default;t=1549869753; bh=beeLQFYOMj1QafBNNXeN6pHTQtrdquo4s/lCcuYxgZg=;h=From:Date:To;b=c09nxzqIDpzMgqi4Lt3j/J8Z3rl2BIj1c7AcLpoUTGGuvhcmY2ud9Pz5La+QduKLM fRaD2qmfYXcAP04NgELaNNP3Gz85Ox9G/JtXv+O3nn69GceImLkmUmuAfllGdKON2y AjzPNl7DSwTp/ThZgs11jYZmURlVsdAy/Uzj0G5w= [subject:] => [Spam][SPAM - Web Reputation]RE: Purchase Order 7780. [from:] => "RIGONNOT LUC (LRIGONNOT)" [thread-topic:] => Purchase Order 7780. [thread-index:] => AdTB2dgOP5rE3Il/QUK7LiVto1fz3Q== [date:] => Mon, 11 Feb 2019 07:22:19 +0000 [message-id:] => <817359989979470f84bf54d6f10d4eae@CHSFVW051.ch-sf.priv> [references:] => <4a06c930165f4619a4e27c6119e47921@CHSFVW051.ch-sf.priv> [in-reply-to:] => [reply-to:] => "browstgis@hotmail.com" [accept-language:] => fr-FR, en-US [content-language:] => en-US [x-ms-has-attach:] => [x-ms-tnef-correlator:] => [x-ms-exchange-transport-fromentityheader:] => Hosted [x-originating-ip:] => [10.1.162.198] [content-type:] => multipart/alternative;boundary="_000_817359989979470f84bf54d6f10d4eaeCHSFVW051chsfpriv_" [mime-version:] => 1.0 [to:] => undisclosed-recipients:; [x-tm-as-gconf:] => 00 [x-tm-as-product-ver:] => IMSVA-9.1.0.1817-8.2.0.1013-24422.005 [x-tm-as-result:] => Yes-10.259-7.0-31-17|11 [x-imss-scan-details:] => Yes-10.259-7.0-31-17|11;Yes-10.259-5.0-31-17|11 [x-tm-as-user-approved-sender:] => No;No [x-tm-as-user-blocked-sender:] => No [x-tmase-version:] => IMSVA-9.1.0.1817-8.2.1013-24422.005 [x-tmase-result:] => 17-10.259300-10.000000 [x-tmase-matchedrid:] => 1KtQzVHGe/JuyE7l+qvRL/Qajs/Ywumpcu3PbSjdYYHb6Y+fnTZULzMEcqwMcuifTK/i5+HShOfjBW4nOiFWZUvGVeQMJ+zMY0JZkmdk1WJy8MkeiNO56rBEYTMV7OfaVNga6wjBFwk9+4BmpYIC/qgMIY1kSEHbUdy+fcRWL33CtSG/SQAC8d9WrDP4LKdpqVVEdEr2LUqM0vGtzEpWJYyRWx0wlnUGf6WytOayZdvWV8MKb34RlVgowyUWHgGdh+w9Wz/xXDoR8rMICe0qkPMxs+ucp3ZM7gzcfk5O5gtiXQjTxUn166dwsJe6fN2LEgwM8US/pTF9e88fgoklswwv1ZvdCH+FmPMvFiO40LCPL1kerA0y5Kstby4QSn9brYdEhLwunNQOsNNBnlgRWsSSYvOBTYp6myiLZetSf8mVHVxP1hp9BZGd42ezg8V8jrm90mHKtYQQsMnpwIvzpVLx8mbbpBMDK5FjWOd8IVkTEC0P9PvYRhVbotouCSLjLhXKXK1MbdQckJs7xmqWAApJTXGpol2E2nK5trakhKe42qznYLzMMw== [x-tmase-snap-result:] => Not scanned )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.