Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 2002:a05:6638:524:0:0:0:0 with SMTP id j4csp2639189jar; Tue, 21 Jul 2020 04:00:39 -0700 (PDT) [1] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id z16sor9399158ljk.40.2020.07.21.04.00.39 for (Google Transport Security); Tue, 21 Jul 2020 04:00:39 -0700 (PDT) [2] => from smtp.dansknet.dk (smtp.dansknet.dk. [85.233.225.148]) by gmr-mx.google.com with ESMTPS id u11si1233525ljg.6.2020.07.21.04.00.39 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 21 Jul 2020 04:00:39 -0700 (PDT) [3] => from MAJEZIEBOBA446 (5cf3e28e.rev.dansknet.dk [92.243.226.142]) by smtp.dansknet.dk (Postfix) with ESMTPS id 70C541071B6 for ; Tue, 21 Jul 2020 12:57:25 +0200 (CEST) ) [x-received:] => Array ( [0] => by 2002:a2e:5802:: with SMTP id m2mr12050139ljb.289.1595329239571; Tue, 21 Jul 2020 04:00:39 -0700 (PDT) [1] => by 2002:a2e:91c4:: with SMTP id u4mr13126759ljg.20.1595329239275; Tue, 21 Jul 2020 04:00:39 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1595329239; cv=pass; d=google.com; s=arc-20160816; b=UZLN7F3nJ5Fyh2MwQ4Uty6RrqKzWM1uD/cAUBgxWJ9BtCCMv1Pt984ZNaudgsPdKKC uL8AmRlY1uZxa8S8ru6WengfBvRmCmIpa1hSvg02EocIHNP8t1fqbvQo9zxpC6FbjDB3 iioOx7Ypi/FmsPdueqpf5ZshyccA4AKCuPWvORml7Dw+elLfQWplhZjlaYKsCGWxZ/uo btKYCT4JPEtUGad+lD65zycdePmic6FCD9EZO3a1yw2yjnUXcKg8EDuNUVB0FWLGNvyt P5biFTHnFLWnyPksEhRWjy1s+qScPXXa4rKxM64kx9ryqsc1q7csb+l72sTfckinvGUA U6bQ== [1] => i=1; a=rsa-sha256; t=1595329239; cv=none; d=google.com; s=arc-20160816; b=vk/UWaiR5z6DmWxHGVbEBsvNDRn4axt23qqO/JFrprpcPd2x/v44uIufC0o9j5RPOR bFEwMsNOpZfbU+1ZMN8fHZZwGpy+fbUlXblC/vwmiH6mvVsMXzawfzhWmy8eRWE2j+zl CQ12qGeQwCDRYNmrJUPmf8FghTGT7bAc0DJ63JVgdo2Txw2REfQbtdwHSBByFIqS3YAA dMnjc0kIl+7Ad6sPJNLGy3RNhpBkaYOEBNX7xsNYRo03YSStGbqgbxENjzu2VW1TtME2 2p2cMsxy7mjrsBtEDkJLF7dqwc3qn2wkxQFjalBS+UYIs4jUBdHQt87DqD0SnPsqG3Nn uFjw== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=message-id:importance:priority:date:reply-to:to:subject:from; bh=wH8YrNuN3pVCXMFXOUT+J1EAy9xHriHCNp/t9SGIZJk=; b=CM+bZJitL90FxqCmu+tRqyiH35wGZ4EdNlYPRqm0E8xlCcdD3OEWttW7+0wwYgl6Vu ekBzlLYXp7fCNkCUfP1QTNjBBYvd1y6ZAQwNcY6yziEsueF4TN23Zqe6S2APgINO2uUo OHGfgHborWO2oQKmEJuWywCXl3izaAmOvbTt67369fByt5tQvKh6TUzxsJ1ZH9UHB7Zs ep/cAVWjqDDcHcz1MpSHlq7OG8qozjHI8BpgSwsY58N27LMaC8ZI6vHDgXZcv11WApcu aUNcgXLxJkZ1XO99yD2+dDAaxVhCnoDIISvKxQcyDz0/vZQ2xg4JPoSjUiB+QpokO1AD 0LlA== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=message-id:importance:priority:date:reply-to:to:subject:from; bh=wH8YrNuN3pVCXMFXOUT+J1EAy9xHriHCNp/t9SGIZJk=; b=WUDfAuHiB35UQ9XeQymhkrL0OeLyUewdT3XSFlGT9lsDi6C//ZB5d9KZAXGJsBTzwr xI2zGUR17ONCODRfIhbEy9OjOe/4ewMNX3gpuMKIt8XdQezSAHf6WBTonzxWkOulfnO7 h76Qdn0frNoaPB+SFg/t7UToIptHIIIH55w/49lXk0R264MPadxoSvtSnM7iJc1wR3/k Gl2FgvD4ip9Y4v+Q30gJspiK01ggO2oW99CcKeyWSqqxQRSgnkM5mjcOabWncvVfo+dE 7A4fIGFUZc2QdRNmon5QueRAfh9qM66U7OrArcbEQ5H1FR3ZyMA2JBg/P25i7uJ7doEU kJIQ== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; arc=pass (i=1 spf=pass spfdomain=dansknet.dk); spf=fail (google.com: domain of dscamdex.comscamm@dansknet.dk does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=dscamdex.comscamm@dansknet.dk [1] => i=1; gmr-mx.google.com; spf=pass (google.com: domain of dscamdex.comscamm@dansknet.dk designates 85.233.225.148 as permitted sender) smtp.mailfrom=dscamdex.comscamm@dansknet.dk ) [return-path:] => Array ( [0] => [1] => ) [received-spf:] => Array ( [0] => fail (google.com: domain of dscamdex.comscamm@dansknet.dk does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41; [1] => pass (google.com: domain of dscamdex.comscamm@dansknet.dk designates 85.233.225.148 as permitted sender) client-ip=85.233.225.148; ) [authentication-results:] => mx.google.com; arc=pass (i=1 spf=pass spfdomain=dansknet.dk); spf=fail (google.com: domain of dscamdex.comscamm@dansknet.dk does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=dscamdex.comscamm@dansknet.dk [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:from:subject :to:reply-to:date:priority:importance:message-id; bh=wH8YrNuN3pVCXMFXOUT+J1EAy9xHriHCNp/t9SGIZJk=; b=F/iRO/Aip9sCtPGtvxzQVPWNLPjbp6R7v8AzDLgIH1hewD+cf6haFUSvlJ0MeXzuBl NmmQLQGwUQv2tnn63O/scCW1oQEZMFTuqLXbNQ1b4N7RAcsIe0GM84ZieL6BuU8as1nO Uil1XG5AFY9yuOgaN2kuWT7xDXcdpIGiRwablXeHTWeI3kFCze8PrqQigqdp2SmyrKK7 S4o9xh6pF2ZxOcuZGFM5HBAvgIPpqqfqygByxgriwa4b+b2ecpe58qEBT/7p/WVn68Dl 3LqRl+8/Ry7qi8/ZmZzY4BH5lNbvBrYnQY3fxisnH6dWKCknUajd438cWZh7WtRRvxYL xX4A== [x-original-authentication-results:] => gmr-mx.google.com; spf=pass (google.com: domain of dscamdex.comscamm@dansknet.dk designates 85.233.225.148 as permitted sender) smtp.mailfrom=dscamdex.comscamm@dansknet.dk [x-gm-message-state:] => AOAM5310vjyU+0pv8op5VfYNgR/1o0r+ZN/HCNN0aD5KWxa4Etks9XGb X53j0F0cadvZyKHJYBfVjrQY5PPjihiWSHJ9WQ== [x-google-smtp-source:] => ABdhPJy6vsTPF548VOQl6v7gtj4ZNfbL6JA3g98slEBE1RV+FZ8q62pbWOdi5cnNNRmdDML6XSrkQtpIiAaGipo15X3BtmjdEC0= [from:] => "IT-HelpDesk Scamdex.com=?utf-8?B?4oSiwq4=?=" [subject:] => =?UTF-8?B?IlNjYW1AIFNjYW1kZXguY29tIiBtYcOtbHMgcMmQbmTDrW5n?= =?UTF-8?B?L3VuZMmQbMOtdsmQcsmQZA==?= [to:] => [content-type:] => text/html; charset=utf-8 [reply-to:] => [date:] => Tue, 21 Jul 2020 05:57:25 -0500 [priority:] => urgent [x-priority:] => 1 [importance:] => high [message-id:] => <2020210705572437B5EB08C7$86EFD4E79B@dansknet.dk> )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.