Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [delivered-to:] => Array ( [0] => unknown [1] => scamdex@gmail.com ) [received:] => Array ( [0] => from imap.gmail.com (74.125.195.108:993) by mail.scamalot.com with IMAP4-SSL; 06 Jul 2020 04:20:29 -0000 [1] => by 2002:a05:6638:186:0:0:0:0 with SMTP id a6csp2531550jaq; Sat, 21 Mar 2020 20:00:08 -0700 (PDT) [2] => from SMG-QNH.qnh.gov.vn (mail.quangninh.gov.vn. [103.140.42.222]) by mx.google.com with ESMTPS id n30si7933631pgc.62.2020.03.21.20.00.05 (version=TLS1 cipher=AES128-SHA bits=128/128); Sat, 21 Mar 2020 20:00:08 -0700 (PDT) [3] => from localhost (localhost [127.0.0.1]) by web2.quangninh.gov.vn (Postfix) with ESMTP id A82C44C1D2E; Sun, 22 Mar 2020 10:00:01 +0700 (+07) [4] => from web2.quangninh.gov.vn ([127.0.0.1]) by localhost (web2.quangninh.gov.vn [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id 7HpeiyEUIsbn; Sun, 22 Mar 2020 10:00:00 +0700 (+07) [5] => from localhost (localhost [127.0.0.1]) by web2.quangninh.gov.vn (Postfix) with ESMTP id 463514C1CEB; Sun, 22 Mar 2020 10:00:00 +0700 (+07) [6] => from web2.quangninh.gov.vn ([127.0.0.1]) by localhost (web2.quangninh.gov.vn [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id Yd1TyA3alKbl; Sun, 22 Mar 2020 10:00:00 +0700 (+07) [7] => from MAC-PC.24.43.51.19 (unknown [10.128.199.250]) by web2.quangninh.gov.vn (Postfix) with ESMTPSA id 27CFE4C1C41; Sun, 22 Mar 2020 09:59:07 +0700 (+07) ) [x-google-smtp-source:] => ADFU+vsQRtxpWHequMcqnWU2bKmTY6B/SwOFKSmFeqs5KUPuWqe21Dv3W8Lkh6HVHDo7JZgGIL8o [x-received:] => by 2002:a17:902:32b:: with SMTP id 40mr15302379pld.22.1584846008058; Sat, 21 Mar 2020 20:00:08 -0700 (PDT) [arc-seal:] => i=1; a=rsa-sha256; t=1584846008; cv=none; d=google.com; s=arc-20160816; b=NaW8cldDW4e9/XUaxzD0kr5X4d39QZEigD75SOaNzvJAezdqmOqF4LBia9qP2UsWMo vhejnY1/iB4it2rEtORirEGep+pYTtG8imOgyeVWaG0X5r1mVE5BtY0qioxVaGiWLW2c 22sWeh4SszTqThS+5jyyv58GMXbjvsIDFEAHkQDca6V4QZdHkwqSgOyJ/1CFGqC0KIeh yzjuUfobbuYgbm7D4OHEpJXuHIkHdAGaXG3q2p3ZOh68JATD/b8XvDwAe+/bovrNg+hw KsQmbuOUCbYQ6vIzvZ4Ft1PLMq3qMiP8UYljKDmNS3Cv2hKybYTeOL4adlyHesHNgedG CV2Q== [arc-message-signature:] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=message-id:reply-to:date:from:to:subject:content-description :content-transfer-encoding:mime-version; bh=ZhYWYWXFjYVdjoXggzAB+5dyHpRLwC6tvYewc7QFmI0=; b=QBGV28epSycHuf0O14h3WaRUhJAraq6xeI1gKi3XLJLzcrTAKjtbXKd9AxVZVHQZjN JHTEIuC0HzXKDuQWP4B6hWvAtyXQY9EaZEaTl02wkLOMMVmSH1SDaeiNvcA57JhanYgA OMdSctBusyXDpzqr3BtQpRI2MlQBOAKNb+HO6UtEyeW17FzRWkitA+w+KXKkp+qb+JV6 7QNKGYa+FJQ5YfG1hSiTf4VkaHp2Xq2qPmgtXcPe/k34ZF8Ipm1MvMXxIbqTs996e3y4 /LNLLUpSbc9DbLVV6FPZf22iJk4AYpbfvkOREvayv9Da0rd9apg09ON/DXn8xJP5x4Ro dk4Q== [arc-authentication-results:] => i=1; mx.google.com; spf=neutral (google.com: 103.140.42.222 is neither permitted nor denied by domain of zemlak@tonynkim.us) smtp.mailfrom=zemlak@tonynkim.us [received-spf:] => neutral (google.com: 103.140.42.222 is neither permitted nor denied by domain of zemlak@tonynkim.us) client-ip=103.140.42.222; [authentication-results:] => mx.google.com; spf=neutral (google.com: 103.140.42.222 is neither permitted nor denied by domain of zemlak@tonynkim.us) smtp.mailfrom=zemlak@tonynkim.us [x-auditid:] => 0a80c63d-f79c66d000004fd9-15-5e76cf224257 [x-virus-scanned:] => amavisd-new at web.quangninh.gov.vn [content-type:] => text/plain; charset="iso-8859-1" [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-description:] => Mail message body [subject:] => Urgent Attention. [to:] => Recipients [from:] => "Mr. MK." [date:] => Sun, 22 Mar 2020 04:58:10 +0200 [reply-to:] => hillsp_d2563@protonmail.com [x-antivirus:] => Avast (VPS 200321-0, 03/21/2020), Outbound message [x-antivirus-status:] => Clean [message-id:] => <20200322025911.27CFE4C1C41@web2.quangninh.gov.vn> [x-brightmail-tracker:] => H4sIAAAAAAAAA+NgFprAKsWRmVeSWpSXmKPExsXC1XBcUlfpfFmcwd5nFhZPuhYwW5z8/4zZ Ys7M4ywWJ56uYLY4fHofk8XOf59ZLDacDLC409nLbrHp1zU2i4ajm9ks/m5ezmoxa06xxYqj m5ksWrq+MVrc6LrNbjHvpY/Flp0d7BanV15hs9h+4A27xbu9vYwOIh4/Dk9m8nh4ssxj08nZ zB47Z91l93h6oIfdo+deL4vHzmM9bB5TPm9l9HjYuIfF48DB7WweS+9vY/Po3rqMzWP1xF3M HptfrWT3OHvyMaPHrFmHmQIEorhsUlJzMstSi/TtErgyVkw/w1bwjLHi0c4W5gbGvYxdjJwc EgImEtOWdLFC2GISF+6tZ+ti5OIQEpjBKNF66w8rhHOYUaL/3A9muMz1LX9ZYdr3zT+JUPWq 7QI7SEJIYBmjxNQuWRCbWUBP4sbUKWwgNq+AoMTJmU9YIOLaEssWvgaaygFkq0l87SoBCQsL SEts23sBrEREQFni2KmNYK1sAioSJx/NZwaxWQRUJW7OmMMMsUpVYtrCuywQ99hLPL74EcqW lHhyezIjxFo7iduL/7JOYBSZheSiWUgumoXkolkIFy1gZFnFKBHs664b6OehV1iamJeel5mX oZeeX6ZXlreJEZxOjtnuYPyz0fkQowAHoxIPb4RNWZwQa2JZcWXuIUYJDmYlEV7d9OI4Id6U xMqq1KL8+KLSnNTiQ4zSHCxK4rwfv6RHCwmkJ5akZqemFqQWwWSZODilGhiL+4NtSs+0FMVq bK568bQrctbxufXFa2MnLS+1FMh7GZUlERpw38b8i+sG5s8V5TGPLt07vCR7n0TuVO0vHLpr +OP65WPOXlT6u+BCe/xMQdPD+37oJLyyehuc/ivlzFHXHAtxfv03kkL/+3P0P/+52uwygT1M X8Qqg9G254B8serP181ilkosxRmJhlrMRcWJAHMZvT8jAwAA [x-getmail-retrieved-from-mailbox:] => =?utf-8?q?=5BGmail=5D/All_Mail?= [x-gmail-labels:] => =?utf-8?q?SCAMS?= [x-gmail-thrid:] => =?utf-8?q?1661831487993678734?= [x-gmail-msgid:] => =?utf-8?q?1661831487993678734?= )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

Contact us for informations in regards to $2,000,000 in your name. Send us a mail at: 
hillsp_d2563@protonmail.com

--
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus