Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 2002:a05:6638:3e9:0:0:0:0 with SMTP id s9csp142209jaq; Tue, 28 Jul 2020 04:51:26 -0700 (PDT) [1] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id f4sor11854806plt.16.2020.07.28.04.51.24 for (Google Transport Security); Tue, 28 Jul 2020 04:51:24 -0700 (PDT) [2] => from honglve.com.cn ([103.99.1.226]) by gmr-mx.google.com with ESMTP id k12si458783pls.1.2020.07.28.04.51.18 for ; Tue, 28 Jul 2020 04:51:22 -0700 (PDT) ) [x-received:] => Array ( [0] => by 2002:a63:9212:: with SMTP id o18mr24284762pgd.347.1595937085039; Tue, 28 Jul 2020 04:51:25 -0700 (PDT) [1] => by 2002:a17:902:bd84:: with SMTP id q4mr7240600pls.29.1595937083732; Tue, 28 Jul 2020 04:51:23 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1595937085; cv=pass; d=google.com; s=arc-20160816; b=nLnzpCyGYIs3Dm/b4AoDwOmAZWurW58n9ioAsh2e5k4YwZWHvuB0vjpP7kehBSoItG C65pBoFj1ucsL2IpoRR8HVoFKAyEcpr6o2WMiregS9e9h6fX2QOqjQPD+zOkkHw+oz2B WAlMad6Q7/fVw7LCF+PPmotEfxCXqlXviyGu1o5NeXOcvyTBzsRBrJqgh554fgJR+A4b M8MKbWKym7GxBvc/0VgeUaBe0schHUNOkxZuJKm/VRcUfkCPY78HHuzPINKn0D0A+3qk fu54PW3WpqX0NgpO/jN4IiGGDa9jPn9vR3TP0jnAGDhHqRtlyvLVC2itC+y9HJxw4sHK qRyg== [1] => i=1; a=rsa-sha256; t=1595937083; cv=none; d=google.com; s=arc-20160816; b=DpjMppn5/BUAnIQonU5LjMgphQUefxLtyTwk0KsKOwiqi2fuwGrG0bwnRN4HLqZTz0 REHu55vPByGasd9Ne+r2G3pStcfj3emAZFOTAPdVLadManCmrJtF3z5MhNNN+2LkaYQu 3D5yzsochStYVyzRJ6p9lh5CkUdqNYMfaGFqnKVLGtI6Ulgq7TNmYuz0Ic1Qhp2z8rRK PuOgbb4U07Dqp3m5T+vGykQ5Bev1/8ar7dRcdeFhHjPsislNt0HCUO2gBcW9cRDCen46 Z7CFGAYVglb4g1SEVl5CiOsWGnmOtX4VBNynEMLgpvZZMDa8HUgI9YeYfnSuaiHmyW1d 1ztQ== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:message-id:date:subject:to:from; bh=tnWXgL74wrEtMq0CIe0X0SgB3J6f5tifDL1MlxgAZyY=; b=DCW0RfZAyXB9le7IwIMxT0WbsMa8zk6DI1L+eqpl3OBD3whvOTlgZTeBCQL+UrGAHT IBYPXrwwVB9BENSBV/qGaXAxjy6Rc3WdPT4Ecgu1y1CGGJHKMTjz2l80JXVHtI48+4ND Nz45IjqOCCfOL4q5oQye0uVEdliNJiyUSUd6qso1GOT+VCEJaLP2IMUdwizjmqyhRPe1 nZ1Slvsysrp3kfCrWWSiydvw7X7HBnE+ElxobT7T2bEBlwpQe2685S9/HNg69S8jsGTA 28M5TLA/Qien5D9mXF4lDNzsvYqVs2meHLrAHccl8iqjzvZCw21RZSPT3PWCh6zkmwof +c1Q== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:message-id:date:subject:to:from; bh=tnWXgL74wrEtMq0CIe0X0SgB3J6f5tifDL1MlxgAZyY=; b=no/KEzZNqewhiK8EFuwABqICs6+H2Oj/l0QQLpFwCrJd+Im8NLvICY5j+ygTed5/z5 wrEvjA3F2gS64y5Pc1bmCMNnDKgjdWk1YBNYqVyiRE/RlFC/Q4buVfE26jRUf44RJNVQ yqFXnyyf6WSerqbHWXxxDlRffbUmIQqTBxvqvd+yW3f6/K0N4wPrwGAtVvDKSX7k1oEk fAH0lj9j+CSZs3wPACC38QiVejtzPrvHCY4wuZfzSYjrftBYBwCxqmYUm9hkAGHapL19 IBnx8920UmsQ/Ch+793+1iHU+AusnmwALbso5LoDRs1zflg9JbfNCsD0aEtbLv/C3mex jpjA== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning operation@honglve.com.cn does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=operation@honglve.com.cn [1] => i=1; gmr-mx.google.com; spf=softfail (google.com: domain of transitioning operation@honglve.com.cn does not designate 103.99.1.226 as permitted sender) smtp.mailfrom=operation@honglve.com.cn ) [return-path:] => Array ( [0] => [1] => ) [received-spf:] => Array ( [0] => softfail (google.com: domain of transitioning operation@honglve.com.cn does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41; [1] => softfail (google.com: domain of transitioning operation@honglve.com.cn does not designate 103.99.1.226 as permitted sender) client-ip=103.99.1.226; ) [authentication-results:] => mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning operation@honglve.com.cn does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=operation@honglve.com.cn [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:from:to :subject:date:message-id:mime-version; bh=tnWXgL74wrEtMq0CIe0X0SgB3J6f5tifDL1MlxgAZyY=; b=Xn4CoJXWhl7Uj6rIHtPWHL5NfYoJ4lOAKe0qR3kIRgQ5MyurtZaQsWLfnP/fjky6Rc lQIICUiOPuI6Y+cV2lnF4rIb8qDIsSiXOaR7OhkiGdT/RpYaTwaXyAPKYwPW+BrKWF+n bV1o9RAHAnkhrfcDsWpnSKHhR0UOw1IQkWJtVmzpgMIDddc/L8K1S7TokT3CKKCXOQai wbjabZloIIiTEhEWPXcIj/Yiua1fUiKrxNeR8LAAIpNFaZuwxhLfQwG2ADu+1Kj/xYcx S0xEjunGIwVEjhpht08/n5IkIPmD0judJDWXTqcgRLYHDk9sERNfU01o7Pq5A9Qwa28O cdnw== [x-original-authentication-results:] => gmr-mx.google.com; spf=softfail (google.com: domain of transitioning operation@honglve.com.cn does not designate 103.99.1.226 as permitted sender) smtp.mailfrom=operation@honglve.com.cn [x-gm-message-state:] => AOAM530F637F76ysYQah8pSegY5/9evFFGSGsLWkNULowv2RUifrPbUA g2d79j1hLZsj8TQtIi+8rOWlBNuZRHEhojf6yg== [x-google-smtp-source:] => ABdhPJw+V41W287P9D9mLkD449clv8jHjo2tYFcLgEtHrH8N7aGXZ5fCJYQzhpN5eqZVJVRyUMmgksnsuwQ4xISwxVOYdurVXCg= [from:] => "Janice Liu" [to:] => submissions@scamdex.com [subject:] => Re: copy of PO. no. 132 [date:] => 28 Jul 2020 04:51:17 -0700 [message-id:] => <20200728045117.DD24BB977A21D101@honglve.com.cn> [mime-version:] => 1.0 [content-type:] => multipart/mixed; boundary="----=_NextPart_000_0012_5055F4D2.6346603D" )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.