Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 2002:a05:6638:3e9:0:0:0:0 with SMTP id s9csp1185657jaq; Wed, 29 Jul 2020 17:42:35 -0700 (PDT) [1] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id q185sor2195117oig.56.2020.07.29.17.42.35 for (Google Transport Security); Wed, 29 Jul 2020 17:42:35 -0700 (PDT) [2] => from biccvl-pweb001.bic.ky ([209.27.61.166]) by gmr-mx.google.com with SMTP id i19si257347oie.3.2020.07.29.17.42.34 for ; Wed, 29 Jul 2020 17:42:35 -0700 (PDT) [3] => from [103.99.1.172] (unknown [103.99.1.172]) by biccvl-pweb001.bic.ky (Postfix) with ESMTPA id 8964C5D7B74; Wed, 29 Jul 2020 19:39:24 -0500 (EST) ) [x-received:] => Array ( [0] => by 2002:a9d:4e6:: with SMTP id 93mr446883otm.308.1596069755393; Wed, 29 Jul 2020 17:42:35 -0700 (PDT) [1] => by 2002:a54:450f:: with SMTP id l15mr10185946oil.2.1596069755270; Wed, 29 Jul 2020 17:42:35 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1596069755; cv=pass; d=google.com; s=arc-20160816; b=fxAhnMRZguTcN+rLPlE3OW6Kjxl4B3sajmqKZnYDqSqR9bZ4ScYaa2y5rlrcFtm9pM UUBVm7vVttEJq7AAQEgvB/5H9HxTmwRKaPf66oGHjlbdeGHS40kVnGW7FgZD/t3j/b1L tpX5FhY26zviFBEWAW4iKVZDm2LC5XlJecWyYZhOE/VM/QcSFQVyBy1+L2aRAB+kdAuM lhrjubzUCnj2iGm7Zn+eFnzSyJJDGSiQJtPQAkAAKjZv0g30LBPZMe6AbFb/w3+xls1G mszJWBW+KcKtz1z26dZYneCYJ6UPNRQ77phEMeqHfnJu1imGdJL320wgOffwf38e2Zwh 9fLQ== [1] => i=1; a=rsa-sha256; t=1596069755; cv=none; d=google.com; s=arc-20160816; b=JuKSmVCLfRye62Ey9zzmH6/RYX0oQPqV8zeZ4mq6r6gnj/suChm19dq6b23lTyl/6N IMIA6MoYJxgx+7woKN4Cjtg4TOHMTUN4q7Cj48yxs9LUDxRQr6nwcp8KnHCHaM47XogQ vZQJrvzAvsGMQFeadZQCr2ZHiFWAltPq+Ly5xqETe64oLKL+CrLGBcbzxVCVHf/mePh6 hVkBzD+QhPH9rm6sAhAOrmnNbgJUYb8hhUdZV0d5dR6jSPhwJaOw6daxtNPXJXfTqC05 k5n04yYVxuc6uPy5EELOyW/nYCabiKPTjFf7WTP4U0T+TBGk/e4+WyJUAv7lYIOOEdxn uBRw== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=reply-to:date:from:to:subject:mime-version:message-id; bh=2vvpTCblJkrl6En4VSKP29FSsygF+dekCWEFxccJl6c=; b=UAmbHklEeTnQME/5YeBkNMsqSd4whU/vhkN9hoPr1/OWOfyfHRPwwrBiJbafO7QSkn wnoOjxmMqDUbN5jzNm20skUvtqaHjAFEUITSBzdkN0DUyA6/2/sIdA/h7AqlGE5XV0RN g/KHUDxj1UBFvlKp5tGBDaRmoxJrI2J+821Hl7HqqI2YJlvA6ZXRiaHkd4poP18fm6Bp XWRqh0dQ1tdRmtZkcEUNtMkdsXR4NCveVhef9ENhiHO8SyBJtDAR7Ug1BgZG359ZGQCx 0eXjB3nu5IqT+MfddNI/UlgBMxx0lEysQ4ttYL9F2f3pkfUgkNA+wtcWbIQACtA+8yaF 5j5A== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=reply-to:date:from:to:subject:mime-version:message-id; bh=2vvpTCblJkrl6En4VSKP29FSsygF+dekCWEFxccJl6c=; b=FQOqhWIKKi58u5sawXLcPiDD6AsPCDNYRNec/I+cDqXD28ofMSoyfYiD+NNdDrladj mqCYXl7IBBv1fACNXA6n4GvHk+nSLIN18my852R1sU9NdSKYffaKv/dBPsd4L5BoUhIh 9v7DKu6tok0yn8BuyaRLA6fjMhGuQfbmIJ+cwfKOsYWtK5eCXJiARSzZflE+/6xflBYE rR015enbYuV8PF4f5FgrnN91VE8Fcf2dGXDCYYomF1YAh530D8Oh/dtZPN2SlZjRBVb6 GFdITqAJqi3y6JQtjUSP9YbIFfHKK6bW0qNOH3pqk8Mledd9ia9emvrYnQaSXS0y0cJl YC5w== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning tp1@bic.ky does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=tp1@bic.ky [1] => i=1; gmr-mx.google.com; spf=softfail (google.com: domain of transitioning tp1@bic.ky does not designate 209.27.61.166 as permitted sender) smtp.mailfrom=tp1@bic.ky ) [return-path:] => Array ( [0] => [1] => ) [received-spf:] => Array ( [0] => softfail (google.com: domain of transitioning tp1@bic.ky does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41; [1] => softfail (google.com: domain of transitioning tp1@bic.ky does not designate 209.27.61.166 as permitted sender) client-ip=209.27.61.166; ) [authentication-results:] => mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning tp1@bic.ky does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=tp1@bic.ky [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:message-id :mime-version:subject:to:from:date:reply-to; bh=2vvpTCblJkrl6En4VSKP29FSsygF+dekCWEFxccJl6c=; b=eOq5MuPKj6YqtJwYymIURCXd4xjz6SniahSRlMMH6nKPjtMTE+CWjQri/o+/BiYJ3A ssa7ROh0mwTPmVHDngKNV1HK9x5YI5oahC4ADdnadTlCe4BndfnCu7/SNwQXWtCkMfAm K4g1w/WxQ04PJQUhrrHkgV7hsPu/YbZewSSuDOj8jAPfh/cjs4eCmAKO73JnHgZNox9c vg8GWTP5aI2chI3m90ctkcBNeA5SejgZZcjES7goPYem4VFTqQ/Qmh71KFCKuoAheEd6 CyExtDvNp8fuRsqfpKMpLj9j4zhFINEgrakpW2Ndukad0buJLfKlOKNJv3soplA68nli mYzA== [x-original-authentication-results:] => gmr-mx.google.com; spf=softfail (google.com: domain of transitioning tp1@bic.ky does not designate 209.27.61.166 as permitted sender) smtp.mailfrom=tp1@bic.ky [x-gm-message-state:] => AOAM5308j4b9uslbcraFKOGkvndPQw5TW2qpE8FZo5bnqLDrXhakAjAi +rh1uoXBZOAd/cX7Vak4Q03DVEli6loJPTfePA== [x-google-smtp-source:] => ABdhPJzzBuAiqaJ/ihVCtHOwb64DqW9L9QM5L+/eVFTxo5Z/JzNL5RHEBwlgqRAHAwIE+y3o2FyPu9pOSPAh8ffa8xe9+QtVtRw= [message-id:] => <5f22177b.1c69fb81.bb9a2.3f45SMTPIN_ADDED_MISSING@gmr-mx.google.com> [content-type:] => multipart/alternative; boundary="===============1207013559==" [mime-version:] => 1.0 [subject:] => AW: [to:] => Recipients [from:] => tp1@bic.ky [date:] => Wed, 29 Jul 2020 17:39:16 -0700 [reply-to:] => maviswanczykinc@gmail.com )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.