Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [delivered-to:] => Array ( [0] => unknown [1] => scamdex@gmail.com ) [received:] => Array ( [0] => from imap.gmail.com (74.125.195.108:993) by mail.scamalot.com with IMAP4-SSL; 06 Jul 2020 04:23:00 -0000 [1] => by 2002:a05:6638:24f:0:0:0:0 with SMTP id w15csp2869949jaq; Fri, 5 Jun 2020 20:58:59 -0700 (PDT) [2] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id l65sor4005314oig.37.2020.06.05.20.58.59 for (Google Transport Security); Fri, 05 Jun 2020 20:58:59 -0700 (PDT) [3] => from server.com ([180.214.239.247]) by gmr-mx.google.com with ESMTP id d2si247821oig.4.2020.06.05.20.58.58 for ; Fri, 05 Jun 2020 20:58:59 -0700 (PDT) ) [x-received:] => Array ( [0] => by 2002:a9d:7751:: with SMTP id t17mr2231013otl.334.1591415939622; Fri, 05 Jun 2020 20:58:59 -0700 (PDT) [1] => by 2002:aca:b5d5:: with SMTP id e204mr4029483oif.108.1591415939515; Fri, 05 Jun 2020 20:58:59 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1591415939; cv=pass; d=google.com; s=arc-20160816; b=hTyfErq0gABPfeK9QpKzpzu0JEBroHdUvq/rLt47okMYUn9ZWMhoX5SVSjf4JIJZSz kMbCfULj/Ac6xIt4GZllbNr8P9UNCqsB9LrP/gBCj9LIoIzhFez4erno4tgfX5l+uWeK ytGgH5PQGYLRWNpTZHqy7Y+yYnC61YYxs5IkC5JPVa0Pwpz/0r0EdRdZ6HZWLvOrcTQI 7hhF2UY+6NmS2kQJpZQm+yrDo2qW7gwmiLeMcm3slsGNWRYGgO8lRBv3/wxABtyaoVPC OtnFL5GJX31LWcBvS7TELmXXp3aVo9/jvzPKhrA7G9RLwIFj9Xj56OgRIyiiVV7+pZDP jqcg== [1] => i=1; a=rsa-sha256; t=1591415939; cv=none; d=google.com; s=arc-20160816; b=vaF1JEt1wDfp36f9fORBR4ANKc/TDBhFzQnWSo4ObCjkAM/HwgkHLh7QfWj6d+lDjN DpSPVQVwbMPqgrCJqobCh4micR8kPIVqRPg4CNVODWUrjshsUgHlDqChaiuRrqf8AtaR vBDGvTtqFT/47rkvsnUk1lYkdPc66s6wRYDDPIAgpNgnMRCTvOhJUymtCgCXJRH3TlTl wlLY6mw1sUoDZoGtSsHmWko1HwYdRSoGYgHhpj4sfnU1Gh+J2f0Te0cG4ezvJgJuDvCU H3gLtmgNTIrFr1qssIPHXnZn4GWPjatLblcLQjxPUDgJUMYor/Tl7QDMFsFnblAdxCTO rltg== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:reply-to; bh=61NRZh9RcCNZ4PeAg18nnRhWu8OtxfYzkGoLnqtL1X8=; b=FtHwvQqHWqc54MKZegFHzdeOjYmifsL7W0BbO8246nOuMRR2Dnxsk3G0x77bvhS7q5 oUf/pzDYeN+cCNGSeHd13cnvWBlC31lCa5+y/OByoWS96DQFrteXIM7btPkKq6/NVFoF 6xEg1jwte/3pc3C69pngSBS0shS3otZDx4Qo+m/WPQE9TpEMfn0gNzRzxVySua6lm8NG iMDmUe6yRMCsq4YTKEvOdp+FK25FA0JKGmTAgD8/GhbG2iRGTS7ZrIbYRfrYFYAHFsIw Mo9VaeFRcck/4dNXdt3koeKbkZjczwLA87zo3O/MfClPQ5YIjlDLgS9AXo487jTFgema gbJA== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:reply-to; bh=61NRZh9RcCNZ4PeAg18nnRhWu8OtxfYzkGoLnqtL1X8=; b=CxaA+/GRu/aKqYxSNuRMGD8j+rdgMs73S8PZp6shl1k5HOSI/n7eBIoqIYnbNVBFEt d+G1QCNBiBn0vCG/An+RifT8UA9UrMp2gV0ZRrnuDUuY5DoQ0zmd/p/gOa7KgzKkyCnX BoH3t3mKXe8oW+gqQv5MjpLyM9uVdcd42fvqfjI7g6N074nV9gn76nqlYYk1ayotmDS6 sHl9hdw+J/aVEIP9f8umfpeBcDT50cAGGLVn6baLloGa9TkC3Gm2eYoWtPuRxxWMCRtO GYC3Rlc1onjoErsc/ipjGiGksooh7Itg9u01IrLaENJ0yYdScKhnEw3FMT3ggdZOjogA q27Q== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; arc=pass (i=1); spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by best guess record for domain of secureserver@server.com) smtp.mailfrom=secureserver@server.com [1] => i=1; gmr-mx.google.com; spf=neutral (google.com: 180.214.239.247 is neither permitted nor denied by best guess record for domain of secureserver@server.com) smtp.mailfrom=secureserver@server.com ) [received-spf:] => Array ( [0] => neutral (google.com: 209.85.220.41 is neither permitted nor denied by best guess record for domain of secureserver@server.com) client-ip=209.85.220.41; [1] => neutral (google.com: 180.214.239.247 is neither permitted nor denied by best guess record for domain of secureserver@server.com) client-ip=180.214.239.247; ) [authentication-results:] => mx.google.com; arc=pass (i=1); spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by best guess record for domain of secureserver@server.com) smtp.mailfrom=secureserver@server.com [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:reply-to:from :to:subject:date:message-id:mime-version:content-transfer-encoding; bh=61NRZh9RcCNZ4PeAg18nnRhWu8OtxfYzkGoLnqtL1X8=; b=r/ottVSWCfpzVa/X8BfqEUZp75w8eNNcdWkRdCfyv0bNgRPJPw8c91JXqcRFasSjCF 8WIdLCwrBzWiB1c8XDizblHsD8RgpPTOb+i+y2+jWJlx3IfCo48UiDfnSVYEFRQwUXeV GglyzgV+Zcw0i0Mh3ldPKanTfb8aHPXufSIRbIvuXIzsHQ3pN6t73flQ9bsIKbXJPJCg SuIpbKEn/uPYJzq7a+GgNslOSdN7NhoixFIENRyDjVZb7t3YN12Kq+jWalPxlEaZzChG a3UZ1nJ0Vbfuo6z1bqdJvqCUd+1rlz3Qpb2m5IxNuPNCUj3g29uTLl1RSZbNQc0tTQ1i JrBQ== [x-original-authentication-results:] => gmr-mx.google.com; spf=neutral (google.com: 180.214.239.247 is neither permitted nor denied by best guess record for domain of secureserver@server.com) smtp.mailfrom=secureserver@server.com [x-gm-message-state:] => AOAM530qdk1tWg3rwE4ZDNSYcERvhRDGPZUmuAJM71Iy+zslKpSzfc1H 3IEBsgSKVEoLhyjzoBiizWI4Ckk38tP4yDFhCg== [x-google-smtp-source:] => ABdhPJydCLbGtKXTle3XQZu4j7qV/x0XFkF0kifQExFdndigveH6sHFB/MN4cALRBs/M/1gPhMrnTm6plYmyZ74utSUM4fCZbMY= [reply-to:] => exportkhoto@yahoo.com [from:] => Peter Kim [to:] => submittedemails@scamdex.com [subject:] => Request for quotation [date:] => 5 Jun 2020 20:58:56 -0700 [message-id:] => <20200605205856.A2A5CA068DC82899@server.com> [mime-version:] => 1.0 [content-type:] => text/html [content-transfer-encoding:] => quoted-printable [x-getmail-retrieved-from-mailbox:] => =?utf-8?q?=5BGmail=5D/Spam?= [x-gmail-thrid:] => =?utf-8?q?1668720560656417691?= [x-gmail-msgid:] => =?utf-8?q?1668720560656417691?= )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.