Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 2002:a05:6638:524:0:0:0:0 with SMTP id j4csp2812645jar; Tue, 21 Jul 2020 07:53:33 -0700 (PDT) [1] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id t15sor24421639pga.44.2020.07.21.07.53.32 for (Google Transport Security); Tue, 21 Jul 2020 07:53:32 -0700 (PDT) [2] => from mail-pg1-x544.google.com (mail-pg1-x544.google.com. [2607:f8b0:4864:20::544]) by gmr-mx.google.com with ESMTPS id d12si185606pgm.4.2020.07.21.07.53.32 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 21 Jul 2020 07:53:32 -0700 (PDT) [3] => by mail-pg1-x544.google.com with SMTP id w2so12040743pgg.10 for ; Tue, 21 Jul 2020 07:53:32 -0700 (PDT) [4] => from moPC ([103.216.142.51]) by smtp.gmail.com with ESMTPSA id x7sm20123472pfp.96.2020.07.21.07.53.30 for (version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128); Tue, 21 Jul 2020 07:53:31 -0700 (PDT) ) [x-received:] => Array ( [0] => by 2002:a17:902:7689:: with SMTP id m9mr22019891pll.240.1595343212900; Tue, 21 Jul 2020 07:53:32 -0700 (PDT) [1] => by 2002:a63:b956:: with SMTP id v22mr22884293pgo.242.1595343212629; Tue, 21 Jul 2020 07:53:32 -0700 (PDT) [2] => by 2002:a62:1b4e:: with SMTP id b75mr23284166pfb.33.1595343211935; Tue, 21 Jul 2020 07:53:31 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1595343212; cv=pass; d=google.com; s=arc-20160816; b=YYILrYDBf2I9JzSaDULSUInxhptz7iyDjSepcQr0X4R0W0gVwpZ8iMzOCLXjEu2+iv hOZx07j0/j0Yx4IBIlClr/DpiF9VnLqzmb5D5nHfgl0RG1kK56hGS16BBG2VpiLfCvAS AD7ud9OSzutfdr9FGmErAs4Jv655vByBNngLcrVR+dWhGNFg9Y1wWvr8ds+k7cRGImSn hVx9UkNZvescldgzNgqWOm+ekX1fyXZrnvF4ZxorUiOEnBRAlCidcqSzcq72oLc7V9fh TzdrgY+w5zyIabOkaQVf5QYBlB6+g8O97gZzrC+kLp4rj/EEJDTanR5SAirtyYdC2GGl 8CYA== [1] => i=1; a=rsa-sha256; t=1595343212; cv=none; d=google.com; s=arc-20160816; b=UCMKQSWeU/9EEttY0DrWG4yl6hKJW+0yK9Ju9iK1kzIn773KWc78vFtNu0hE6/xytT RBwzXKl1KDD0c8r6KzWgqC81JEUsWtJMw/boyGAUA/z32TZk2oDjNNR+7R7QpuCBwL+y Cq0r1IwsESrHaW+2wDqC5VbSk4v16ORY/gricAN6rRmMROXLRlofwar+ytBvZEhRaQ5Y ljU24l3ZMOPsZW7vixraYrgxy1ZnYUGUHw/M7qnMyC20vQB6l3+ynBA155N3G0rRFZuL NxrBiWJT4c++ejXPDT+qxL1USF6rFCiHu46+zGeQ9iGknOqm0Xr2XMfiXkzCdlU0Enmb shQQ== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-language:thread-index:mime-version:message-id:date:subject :to:from:dkim-signature; bh=8hIfQ1uJCzE4XHH39QMSwcZL0vqJWloLk+2ApE5pJXY=; b=nRg6DjI+aqpYGCsxrNosggHd8oU0WecvkO9NNd9mGJBFGMg+/Qqv6cCaJa724N940z OpSz8Hf6WXbX0MRRO/5W11HNjlEbZ4/5FD+jwhth5cfKj+y2neJRw5GKl/uzzLZewjB2 wyUdqlQWFuu9UNhYkDO4F+AhmA4eFixlNgkO2aPiArg4/bOd6YDJaG+UgHLxGSJ+o6JN BWfFz3VC77ARC5vuEJlijmU++KxcOk+yXLWbKLJrYdbHeIMNU1dR6g4vmfEDA6U+eMqF utlOd7pKYTB4YK6NSo1xJhtysBNh56fTrekclxntcUO31BnYQyUYSyVBjWrpXIIccv0C lh2A== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-language:thread-index:mime-version:message-id:date:subject :to:from:dkim-signature; bh=8hIfQ1uJCzE4XHH39QMSwcZL0vqJWloLk+2ApE5pJXY=; b=Nk2l4LPjY7CbmMdV3YzLVHgZBRaHGvXM41x582QCu0iDF9Nw8jXpmqNbPRP47T7x7R WjQM1zqPxj1m7xSMrJBMPSD32Q0kUkpCM3wZTkQaaCGMSagRjmhjoIHJ4lLpeISLJPQO bc7t2LIb7c+Bgo2W/O84dhG8tIQMa8RpDM7/ENWiwhWTQr32mHsgvV4B97eJIin3MY7C lW8dvtW2ADsl9DPerrZcDbCdf5zwkMi9dgEeEPCmPvFfx6zv2lfJ+NXlyTsE5PRsG/Ka wWRVbOLi/2XqtTZXRfpogQV/DDvDWXT0ilvvmgUg1+tlqnN5GcXs99AkDkYoq4yrb5qy ONbg== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; dkim=pass header.i=@mrcool.tech header.s=google header.b=ZBhETSDN; arc=pass (i=1 spf=pass spfdomain=mrcool.tech dkim=pass dkdomain=mrcool.tech dmarc=pass fromdomain=mrcool.tech); spf=pass (google.com: domain of kishore@mrcool.tech designates 209.85.220.41 as permitted sender) smtp.mailfrom=kishore@mrcool.tech; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=mrcool.tech [1] => i=1; gmr-mx.google.com; dkim=pass header.i=@mrcool.tech header.s=google header.b=ZBhETSDN; spf=pass (google.com: domain of kishore@mrcool.tech designates 2607:f8b0:4864:20::544 as permitted sender) smtp.mailfrom=kishore@mrcool.tech; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=mrcool.tech ) [return-path:] => Array ( [0] => [1] => [2] => ) [received-spf:] => Array ( [0] => pass (google.com: domain of kishore@mrcool.tech designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41; [1] => pass (google.com: domain of kishore@mrcool.tech designates 2607:f8b0:4864:20::544 as permitted sender) client-ip=2607:f8b0:4864:20::544; ) [authentication-results:] => mx.google.com; dkim=pass header.i=@mrcool.tech header.s=google header.b=ZBhETSDN; arc=pass (i=1 spf=pass spfdomain=mrcool.tech dkim=pass dkdomain=mrcool.tech dmarc=pass fromdomain=mrcool.tech); spf=pass (google.com: domain of kishore@mrcool.tech designates 209.85.220.41 as permitted sender) smtp.mailfrom=kishore@mrcool.tech; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=mrcool.tech [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:dkim-signature:from:to:subject:date:message-id :mime-version:thread-index:content-language; bh=8hIfQ1uJCzE4XHH39QMSwcZL0vqJWloLk+2ApE5pJXY=; b=bjxJzqFSjeN/uXw9hxQjoFq/F6nW323Mi11gGGfCw9k2wE76OPhnPv1tTfClqufA1T AZY3QQEmeRLqcAah21fHIDs3FEoKQRyDMNGkRKdaYvSQWTPOYMJJL/cHpurOHb16NiUB cs/M9pFl4XdFa59ougoEFc5v/SYhNYR3EL7bw6jRS9cF8JMnCfncJxhRYIPxDQCFKjrL dXTHkYBAhtax/J3MxZpPFF0WI1AkgQONlxBwCgEpdvCQg4BfMEpmXw4Fnj/zVuP5/J3c U1YGZEOPtdjuze9aqr7W6oE118kNbssuyPqqnmZjvDv0hvtcUnxpiQOojO82ks0inI4w HdhQ== [x-gm-message-state:] => AOAM530jcqGQI5hJQd3m33lfjP/ax/Cayo5NSLs6TH+82fBz8AWdY9Wd S9/N5duyeLKvNVqMr6EYOM0q41BiIyXwSPW+zvx9 [x-google-smtp-source:] => ABdhPJwdC1HwmftMTm93q8kXLEemoQKtnwK57h9D0zt5S+Y+EKNvOkE5SVR1efOCVxUfcsBymblDNX7qh3a7fveOq2v5dmTGtiE= [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=mrcool.tech; s=google; h=from:to:subject:date:message-id:mime-version:thread-index :content-language; bh=8hIfQ1uJCzE4XHH39QMSwcZL0vqJWloLk+2ApE5pJXY=; b=ZBhETSDNVTCioVWBlqNw8ukXmhYxFtK/bJ5cHBjTH+cVk6hTL8giPOA1kfYqgBbh9w pzfGgjCQPWaLPzWyYlFeFCsZbdRJcfnFBd+jX4Ta2P3/4KdIWVdYMimbj7G4IExU1OcD /vgYddrdiRzlDOhGdtYXUDvhsxfA9ub02fa9joMuOurI69oaYhYC50sf2E450xQ0tauP Yovm0/rJSog/85BNiFEJl7b2ZwkI5WSWaCgtrRGdeazDc2Crz8uwS8djjfPKavhiLykp BO2LWM21KB+dIeiWrgDoPHq2QxCgInRiyGKuvqSef6wPmwGhSABwj4TqtMAalsU1D/vl v8Bw== [from:] => "Kishore" [to:] => [subject:] => App Proposal... [date:] => Tue, 21 Jul 2020 07:51:24 -0700 [message-id:] => <0e5601d65f6e$b1f9d5b0$15ed8110$@tech> [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="----=_NextPart_000_0E57_01D65F34.059AFDB0" [x-mailer:] => Microsoft Office Outlook 12.0 [thread-index:] => AdZfPh7E9LThUCcNQTaJ7cKB3FMCTg== [content-language:] => en-us )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.