Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [delivered-to:] => Array ( [0] => unknown [1] => scamdex@gmail.com ) [received:] => Array ( [0] => from imap.gmail.com (74.125.195.108:993) by mail.scamalot.com with IMAP4-SSL; 06 Jul 2020 04:31:32 -0000 [1] => by 2002:a05:6638:24f:0:0:0:0 with SMTP id w15csp384339jaq; Fri, 12 Jun 2020 04:39:32 -0700 (PDT) [2] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id i11sor3419652ljb.54.2020.06.12.04.39.32 for (Google Transport Security); Fri, 12 Jun 2020 04:39:32 -0700 (PDT) [3] => from maxsmail.top (maxsmail.top. [93.85.85.34]) by gmr-mx.google.com with ESMTPS id k6si499915ljj.6.2020.06.12.04.39.31 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 12 Jun 2020 04:39:32 -0700 (PDT) ) [x-received:] => Array ( [0] => by 2002:a2e:8ed6:: with SMTP id e22mr5962216ljl.401.1591961972540; Fri, 12 Jun 2020 04:39:32 -0700 (PDT) [1] => by 2002:a2e:8110:: with SMTP id d16mr6882170ljg.12.1591961972233; Fri, 12 Jun 2020 04:39:32 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1591961972; cv=pass; d=google.com; s=arc-20160816; b=eUJxfY+jTJ5zk9gMkSqm6BXhfV3NSU9Ih1V9GjA7GRfxPuSPYX/0U7W4PzoEDFxaQk Juc2/xzC1dRjHoartDUZZ0/vT7RC1GJw60ZIB/5e+Ul6PbBWkTqbeZeB0R0liETcuh+p jMfJQ3jQsTePLHXF6zZlHSI+2vKBPL8ZWytxl0X8ULEL/UhUmYqOqhTyiSQP51kfi3u3 5TmezmioF46JJQjwDW/XTvWUr+TprbwETvFzHlcApZtmkiU5M6m6HL7jiqLSSSZulK8W toliOu1FO41SI4OpZYzkf8c3SmXT2xk18pW3sZ1owgCLG17fE+sOYvdqkIYd83nxpq0I lhtg== [1] => i=1; a=rsa-sha256; t=1591961972; cv=none; d=google.com; s=arc-20160816; b=fckdy+3x/9zSATkcYumpBrN6f+lcAre4f6WuFWtz8rismpBHNup/Ghrowsbs+ZhuXr 1csFYhYca/hbOifol21afhxWV3KzFs8ZVXpzztE90CUmcYwFATAOwZHAQc9N3ZiJHpBs a9SH7ElKa4K8G7yUMy2F+/ewbSVyqYPhFJrhu9iz70WVhGL/6nO7GLygfRyz32c0jLv2 E3eWlWfbAsG1/6a1E26B6FDCCAy2m4RraWm9kgXYh2elOre6J0T3A+J2XFztpHcS2dKM DYu4GlSR3jxSAdlT6GFu1HasPWlphkxgSHTglZqq9XyWz5BbFW0vVXy8W2shlDtbE244 gKnA== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:message-id:date:subject:to:from:domainkey-signature :dkim-signature; bh=jp6jKfPbMYbwiclZQSMHqfShElZNtVSlKlYk5tLK5rY=; b=FzqSKRQEks45aF0OuFECSuqWguA0bseYIsfp/M4cC1tWgG766YiU+JSY8Y8LN4XuUs LBU2GJiBb7A1lT4nzOikdOJbPBZzrxT+cdaMHysmDA2OmENS6XhNyfIbe0yMPLRNNb2V 6Xyo4g+CWD5KcAFvvitWEi6Hue8WEc64nSgkYgAWKZqyqyQErZgi40ZqayBMTiP30lbt t4DgA/FDNKbGe/oei+Ia/EgDvtCN4HMxRWFl4VJjAOzdRFeb6clrhtnK/SxON/92/YXT ib01wJYFlw7iiw8SE6BwbJWrzAKljmbLwGW8UCJAYGKwlb/lOsw9NeT7G8sbQdvb8ReP xBtQ== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:message-id:date:subject:to:from:domainkey-signature :dkim-signature; bh=jp6jKfPbMYbwiclZQSMHqfShElZNtVSlKlYk5tLK5rY=; b=uQhMAm4422bUYX5hTE9/f1Wab4HDe4bFlaRU5p3GGEUsIs/Nwv4RouUvmw4HFXcLS+ z0Se5PeccomrSY4r3byoywvRwhY66QWz1q8ZT215HGnxpIU2uR8szQk4/qSqEzLBnXzY 5alYi/VmpWAK+Q0f+5VqtAcotihQVqMfZEGAm959G55fJEKNXxZik9PFmFP0xBR/hXj7 NtZXxj+BhLpiLuRkAmUbeMYtSncDhbrlAR/Bhsa3YZxDVHPaSRzhHlmLl50AmOEn6+Kk SacXRXk/sd5fTh5wwFNQzohOvpwOJaImtc5oeWbxMx+7KkWYThwefsHzrCZW4hDmopew sTAg== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; dkim=pass header.i=@maxsmail.top header.s=default header.b=D8jddcm+; arc=pass (i=1 spf=pass spfdomain=maxsmail.top dkim=pass dkdomain=maxsmail.top dmarc=pass fromdomain=maxsmail.top); spf=softfail (google.com: domain of transitioning mkt@maxsmail.top does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=mkt@maxsmail.top; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=maxsmail.top [1] => i=1; gmr-mx.google.com; dkim=pass header.i=@maxsmail.top header.s=default header.b=D8jddcm+; spf=pass (google.com: domain of mkt@maxsmail.top designates 93.85.85.34 as permitted sender) smtp.mailfrom=mkt@maxsmail.top; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=maxsmail.top ) [received-spf:] => Array ( [0] => softfail (google.com: domain of transitioning mkt@maxsmail.top does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41; [1] => pass (google.com: domain of mkt@maxsmail.top designates 93.85.85.34 as permitted sender) client-ip=93.85.85.34; ) [authentication-results:] => mx.google.com; dkim=pass header.i=@maxsmail.top header.s=default header.b=D8jddcm+; arc=pass (i=1 spf=pass spfdomain=maxsmail.top dkim=pass dkdomain=maxsmail.top dmarc=pass fromdomain=maxsmail.top); spf=softfail (google.com: domain of transitioning mkt@maxsmail.top does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=mkt@maxsmail.top; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=maxsmail.top [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:dkim-signature:domainkey-signature:from:to :subject:date:message-id:mime-version; bh=jp6jKfPbMYbwiclZQSMHqfShElZNtVSlKlYk5tLK5rY=; b=nwzFnqKi4Azmai6LsEfYXS6RM80gAufTiQDzzUM6buYBPbkG+I+gGf+ybrIKpKJog9 nSoBHnk7NU2E9+kvpuhmr3mUC50ivCarBI2uHAbpQnkwdUgYKbDD7zAnY1/v64RtT5/V oluzgjoKvEcOchsx1r6GYnRaxS3oGb/k/Chvxk1m0eQ4wtc5LAfYBuioS9tVpv01mJZ+ rpuSZJr/4TxBEro6TJJYB6RNkmqtOk60n33hAR8QpRgWDgUH2T3FscbBKCMIR92sMdzL 8bHil404E5eOXX1WXpKE5abjuAxyvteiFEXbqayQyyCEk2RXBT0P8KIyQlsOtqlrKFqo aVVA== [x-gm-message-state:] => AOAM531A08gJCEz4MCIcl78jSkT4YX3JlBlQSKy0z5I8a93YbYNYhWnU oAOaECzYFQjBg3QT+TKzJh2l0DY0OEpneKR6Ow== [x-google-smtp-source:] => ABdhPJy0J0ytqFR4+VlhILcLGDthS3O9sIg4ud48qdym3mD3bc91PJ4UBNQFdirOYGen1TuLFAgKATly7NC4HqytSzPCxtn/+Co= [dkim-signature:] => v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=maxsmail.top; h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type; i=mkt@maxsmail.top; bh=HOHOtIjaP3Lfboclb8IOX/r/0aU=; b=D8jddcm+sVX/9rIIJ3nM5St+JDUnF2UcDsOP9Ob0ZDcYh280MRlWRPqin60ChSa6A6gCAZCWJwTw dF9V3OjexagBMjc93Fe6oxeLKvwYlqZ18WMCDSBssWA1IcJ8XXTD+jZ6aWErZhM+mnNbpBm35nMU 5fAF65wBslvM9mk1LdY= [domainkey-signature:] => a=rsa-sha1; c=nofws; q=dns; s=default; d=maxsmail.top; b=PybbTva7m2vRn2rvd/0OnFGOSFgOMDK/HusxwXK4hDermPG20XbrRbfw4MTlHOlr32+ED/rMSJCh B0KKbZstLIO0atxdi14KZlBKqBAMh4tDHJKTThLMO/Dc/XCCpuOLoabgsPJAlLnbY+O6NdUkL7h3 IpGVmNSj1PV3R+LwF1M=; [from:] => scamdex.com [to:] => support [subject:] => Avoid account supension support@scamdex.com [date:] => Fri, 12 Jun 2020 14:39:25 +0300 [message-id:] => <00d8f9a4388f$cc11f21d$b0607989$@mpc> [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="----=_NextPart_000_0FE9_01A1F74B.1B7D8500" [x-mailer:] => Microsoft Outlook 16.0 [x-getmail-retrieved-from-mailbox:] => =?utf-8?q?=5BGmail=5D/Spam?= [x-gmail-thrid:] => =?utf-8?q?1669293116992477207?= [x-gmail-msgid:] => =?utf-8?q?1669293116992477207?= )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.