Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [delivered-to:] => Array ( [0] => unknown [1] => scamdex@gmail.com ) [received:] => Array ( [0] => from imap.gmail.com (74.125.195.108:993) by mail.scamalot.com with IMAP4-SSL; 06 Jul 2020 04:29:29 -0000 [1] => by 2002:a05:6638:24f:0:0:0:0 with SMTP id w15csp727222jaq; Wed, 10 Jun 2020 12:51:11 -0700 (PDT) [2] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id y7sor621573lji.14.2020.06.10.12.51.11 for (Google Transport Security); Wed, 10 Jun 2020 12:51:11 -0700 (PDT) [3] => from ereplysstrangeasia.us (ereplysstrangeasia.us. [185.12.125.89]) by gmr-mx.google.com with ESMTPS id f16si57314lfm.0.2020.06.10.12.51.10 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Wed, 10 Jun 2020 12:51:10 -0700 (PDT) ) [x-received:] => Array ( [0] => by 2002:ac2:4567:: with SMTP id k7mr2471129lfm.122.1591818671206; Wed, 10 Jun 2020 12:51:11 -0700 (PDT) [1] => by 2002:a2e:9eca:: with SMTP id h10mr2684665ljk.273.1591818670935; Wed, 10 Jun 2020 12:51:10 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1591818671; cv=pass; d=google.com; s=arc-20160816; b=iGjInz4FIm6bYzJtebilRFHEVo6SVwS+2Uth6ilSt9YZVInGoovmk2X1h/EOxEmjdi YSpXEZkOK3KcEMVtDo0ivePr39G44nT0ZBymbXJDZlGswKeTlkQ0xnid1AI8P1aLH6FF 0cCfPkUDtgSrtcq+WboHmPylMZmH3lu0Qx20nRMjpnOiLlAoRSOmW+Ljr/ui9k/dyqxe tR5EYfRJpN2+dx7EURfBmNuqU5sVuYmBrHhSq+HaSCSAWBe66EpvFL+z9Hk278UxkJmn z9XQ6iuTHI/2LY9fpMdgJ+VdlP0zPm1cTUVeLjnZKttNRhRY/xvbIIyVFj5K6ovAYsYA zrTA== [1] => i=1; a=rsa-sha256; t=1591818670; cv=none; d=google.com; s=arc-20160816; b=FdR0691F8xCp3LAQMKCpGb4aolShK/PlH1KPcXTvfEI1x0qcd+/yxCwS4Mm+nxbMiZ f2m4obLV9V5UGgAwPTVnR/Bri8yRJmYd2Lpn3cQ6CsnHdqref3a4QRbIj6J+6noFdeIn IMWNgQqXPJsd/VInvdo0d8HBE/iEN4p0WtR5mVTelzmtp0kTRyvMW7InOtp03So9AFBO IuIj5pGvIJTWvTFTEEHx6rDIaKhTg/xmrp4OhjDCc2iM9hZNkHOmz1Ao/acE49ZR8HNB /yVM6si+Ah616Ddr81hYFL5t7kyJpyhySKGmWwBxec0qCUBLe1oAj+JDbOA8UrKQWv0z clNQ== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:date:subject:to:from:message-id:dkim-signature; bh=8r7B8rxcDjO5eo4EtTGPT1oOTb1pyeTbGmJjh2uUg9Q=; b=BoTJe5MrPg01pcmIQvPOMjZTcD/Yz6P68sAh5rBK3l1A4tmPgJyZWAsvkMJlFaEDjA ne65YNUu7BUOf8C7p+IDoTiKKLwfkxcGhGpFRPQcSX+5dL7udWqALq8buUIgbHHtDoyh tHEH7DPvpHBTjxLgYOFcm9m2M9tFfJRjnip3B3+oqeAaS3Y1ViOseCLg0Fw6XMn29w+p Ace4T+sssMV1+6LN2XvgGX46oHKih1SVJt1bbnhHU0F+0itzWlDTALl5ZrxexZtq6iuP h17cQWillHJ7LrUIZp/ySeHqah8sr64i+gNAUdxbxUwCanFVrWmHvzEyS/5sGesP6lTs QU3Q== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:date:subject:to:from:message-id:dkim-signature; bh=8r7B8rxcDjO5eo4EtTGPT1oOTb1pyeTbGmJjh2uUg9Q=; b=GBPemapRo46aknt9Y+TPqJUhH4kRvwYXkvUQGR2nyD49c0BGdD45xwyiwfZiPWJGkh Hv8lLWrW9xu/Of6fxZunNmQvSBvFvgHdo8sAfRBiD7B/lwlTVZKTq4nD4EMGUREdEoBH kJE0EMey0m1DJL4t45erpfk6wA28p3+GsYCIojn9Otco4LHZrdAljv+SeVVRKU+S9ZgF SzvRMYuj/Nyl4OMb3vT90syvj0QE24u/llnH6z0JWpvq30qWOQ+OQaqXJN9wZ+K4Tc+P A61fHXTkG/9at0lpDBrRBCn4sTDJ+HRNYNN7w74hTSvKc0CJUO6fHQMLViCAf/xhJ4Z8 q3GQ== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; dkim=pass header.i=@ereplysstrangeasia.us header.s=mail header.b=GmnlJ7X6; arc=pass (i=1 spf=pass spfdomain=ereplysstrangeasia.us dkim=pass dkdomain=ereplysstrangeasia.us dmarc=pass fromdomain=ereplysstrangeasia.us); spf=softfail (google.com: domain of transitioning statement@ereplysstrangeasia.us does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=statement@ereplysstrangeasia.us; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=ereplysstrangeasia.us [1] => i=1; gmr-mx.google.com; dkim=pass header.i=@ereplysstrangeasia.us header.s=mail header.b=GmnlJ7X6; spf=pass (google.com: domain of statement@ereplysstrangeasia.us designates 185.12.125.89 as permitted sender) smtp.mailfrom=statement@ereplysstrangeasia.us; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=ereplysstrangeasia.us ) [received-spf:] => Array ( [0] => softfail (google.com: domain of transitioning statement@ereplysstrangeasia.us does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41; [1] => pass (google.com: domain of statement@ereplysstrangeasia.us designates 185.12.125.89 as permitted sender) client-ip=185.12.125.89; ) [authentication-results:] => mx.google.com; dkim=pass header.i=@ereplysstrangeasia.us header.s=mail header.b=GmnlJ7X6; arc=pass (i=1 spf=pass spfdomain=ereplysstrangeasia.us dkim=pass dkdomain=ereplysstrangeasia.us dmarc=pass fromdomain=ereplysstrangeasia.us); spf=softfail (google.com: domain of transitioning statement@ereplysstrangeasia.us does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=statement@ereplysstrangeasia.us; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=ereplysstrangeasia.us [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:dkim-signature:message-id:from:to:subject:date :mime-version; bh=8r7B8rxcDjO5eo4EtTGPT1oOTb1pyeTbGmJjh2uUg9Q=; b=scFmNx6gb0BVwAdMImrTFjm90pfkhQwcZCNjgnNEiNKpxYVxksd9YRLb7pXYYA6iqi W448EBrokyU+EHyolva5NmXF31FicwZlUfIo9BnOHFstuYYQu+jHGFO7kH8XnuFH5Oqz ZZUZl/zyL75R1uqOttQFbsuytfBguyhkNFs+KYNvTuK+tdZbaq7bN6IqUO6FF6Hw5syR HMBZbidmCrctfXej0k1VpnSqzCdiXkWURLLKNW77RSQTeRA7LAhZMQwvLvSJmcWyxxxO DcTidYw9CiLr0W0+k/nleylgIJIkiM44GW3HHv1/ybIgbVjiVGliUoX4zNfbL9tJhweh tpXQ== [x-gm-message-state:] => AOAM530KAXdiZIzhYRdrHm0IpLngNXgkRCZ1AJZgmGYdSgHYL8SL8qIW RKuXnLIRXLsVZq593AcnvA+/w90+OyhrYbejdg== [x-google-smtp-source:] => ABdhPJwbHWqljD3SK09gb0VoTaEe490yk8u/jBt0yAylLJlcpUOe2VWquX15wA1N4LpVL5ijJHts/tqGyDpwRjVRzYhQ0Ep190g= [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail; d=ereplysstrangeasia.us; h=Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:Content-Type; i=statement@ereplysstrangeasia.us; bh=8r7B8rxcDjO5eo4EtTGPT1oOTb1pyeTbGmJjh2uUg9Q=; b=GmnlJ7X6YgGrAg4VYLtY4VbVV1SEm6NZPGR9MVSkpwk7ME5qk16hptuAvMWE1R+ntk/oILDLfmXb ve4iIyXXf8AypUzHc+IqKzDnKqgNJRMIxZjLe5NNn7GOsPGeIYYLTopb8qJsm7e8BXasfkpRsw3M VXLi6Pc2IXHG5zsg+PM= [message-id:] => <04bd5a8773a372daf907f1a2a97d4b87a465b0d460@ereplysstrangeasia.us> [from:] => "Bausch & Lomb Incorporated" [to:] => "bTZzNTAxNkBzY2FtZGV4LmNvbQ==" [subject:] => New incoming voicemail from 19175524304 [date:] => Wed, 10 Jun 2020 22:51:10 +0300 [mime-version:] => 1.0 [content-type:] => Array ( [0] => multipart/alternative; boundary="09f3bee9b96d43f02c2960d0e43021263cc6" [1] => a281c8606f1f353da1a412be5642685fe10d72 ) [x-getmail-retrieved-from-mailbox:] => =?utf-8?q?=5BGmail=5D/Spam?= [x-gmail-thrid:] => =?utf-8?q?1669142855202902411?= [x-gmail-msgid:] => =?utf-8?q?1669142855202902411?= )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.