Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [delivered-to:] => Array ( [0] => unknown [1] => scamdex@gmail.com ) [received:] => Array ( [0] => from imap.gmail.com (74.125.195.108:993) by mail.scamalot.com with IMAP4-SSL; 06 Jul 2020 04:27:15 -0000 [1] => by 2002:a05:6638:24f:0:0:0:0 with SMTP id w15csp462384jaq; Tue, 9 Jun 2020 03:21:05 -0700 (PDT) [2] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id z18sor1447531wrn.62.2020.06.09.03.21.04 for (Google Transport Security); Tue, 09 Jun 2020 03:21:04 -0700 (PDT) [3] => from imta-38.everyone.net (imta-38.everyone.net. [216.200.145.38]) by gmr-mx.google.com with ESMTPS id o195si144084wme.0.2020.06.09.03.21.04 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 09 Jun 2020 03:21:04 -0700 (PDT) [4] => from pps.filterd (omta003.sj2.proofpoint.com [127.0.0.1]) by imta-38.everyone.net (8.16.0.27/8.16.0.27) with SMTP id 059AEjVP032206; Tue, 9 Jun 2020 03:19:33 -0700 [5] => from smtp.smtpout.orange.fr (smtp03.smtpout.orange.fr [80.12.242.125]) by m0116292.mta.everyone.net (EON-INBOUND) with ESMTP id m0116292.5e67f919.37e9535 for ; Tue, 9 Jun 2020 03:19:30 -0700 [6] => from zz ([5.62.58.123]) by mwinf5d79 with ME id oxzQ2200J2fXMot03yKUNa; Tue, 09 Jun 2020 12:19:28 +0200 ) [x-received:] => Array ( [0] => by 2002:a05:6000:1146:: with SMTP id d6mr3550337wrx.400.1591698065006; Tue, 09 Jun 2020 03:21:05 -0700 (PDT) [1] => by 2002:a5d:46d0:: with SMTP id g16mr3878882wrs.229.1591698064753; Tue, 09 Jun 2020 03:21:04 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1591698065; cv=pass; d=google.com; s=arc-20160816; b=hRj3zxkTpO0/VJ9eu8FehKDQm8/s5N61N7NahiHhAZHY8CB9pnxvy2y8zkMatioH3I eIw+hHLLgktpfHzo7h5XETGLYOKTubN9dz9ic5UutvmLlNHqKs4Eq6OVqfbDf5ieiSBW uCltlSdBgAlb30GL7el17OSuEQegiM8E6lWvPVnXoJ1N5HTTpSN4xEJ3jrYNWvVYTX+h XHFrODvPjTKEe6sDAoTytRqnQRXA+P8bpzzLMP3O/SAqjqChAjGVPBFx9shPCZwcgE+J W1bsU4ByQ4CXe+mUN/as8RO4Ubc42McPeqY3yiZpaSGeNqGGKBruhPwT9Ltg8A2FHg/b wm4w== [1] => i=1; a=rsa-sha256; t=1591698064; cv=none; d=google.com; s=arc-20160816; b=GXbpjVNCoFQIIgLiJuMt1Fpm4nddWpNo7Cxhxvtke/Nu/opPlr8G9phbp1xYaQhL86 ct1fKnnW+OITq6nameslTU9jeNR41A7/pooFrikQf2tO+bkfLWDyE6ae2Xl19IzvfTsj 7zUvzHPqeQ5g3GuyL66DK08Z96eIsiit2mX6IPAIoXlmwvB1dGdKkoqQnc9h7bZBhB0T +YEL9uZIVSYV17w9H0yXMdpeqLHcK5T1OxtRb/AisMzUI08BVCI2Ys6gf0NJce18zXgF RPKfizrFx8Q8I0LZ72ILzUReZqBCKv8AlmeyH451wO+K/s2UB0iHwMJKtJp9KXNY4HBK tidg== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=subject:date:to:from:mime-version:message-id; bh=qMEd7B/bMa7YzQuQIek1oZuy1Je/HHpHgwx6Jj9AIJk=; b=Fo3rKsnlkZcrmTUTVKLvsb+nNRQmjqP7dH+r+6sLN7Ua4y5HxVzTGeXE1cbxsGQmB1 mhHEb1BIHSQfhw5sSSW0qx4mzT+zyEJ5e5VxsGj50ZkM+Kt23N6j1az9nkNHk4itl07V MmnQ87IL46QpKEHhUgVy8yH/R/6oZad9aI/jhf3Kakr4s1hhNQ7O1FTkiYGiFXORJDyH BD3opDS/OmAxdRbX4P2paQ0A3rZrtQLfHmzngrtJ0hFFMSKy7gqSbtjZeKN03P+L82TP edbR5DpEQ7ZkV2+vBgxpYwZ4LcyB1eZ50oAdswHT/pgDTD83jY4Jt2YnO2u4sRzxkaqm otiA== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=subject:date:to:from:mime-version:message-id; bh=qMEd7B/bMa7YzQuQIek1oZuy1Je/HHpHgwx6Jj9AIJk=; b=mXYKafLvdcpU5ITDKJW+W1LTjDjioOQpHdOvkSQ5fZb4+5PMimy4uulm2xJCC+Ip8q 00cAPQ6jcLu3D4pUMNBkEyvuMB6agQXcUgdcz+73ZxYXRyg9RYq/cSwmhgC35OK1prHN YZxrgo7sFSDDcoAnyCks/BqKsjUmVLLkFmpSHr06XwSLJUAHqsSR/+H833Nq4InXc/v3 CM8SmnYhCMzGbX8yPGOUOgBYiek+kdEPdskFPpB0VzD/fdloQClRtJovvIsB4NAPyVgg ydxN8GjLZyzW9aY2i7Upy2QqfAlfuIfkiXsO3Lhnk5hn7Q7AOvgMtov+QD5Hy2tP0Fk7 +S5g== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; arc=pass (i=1 spf=pass spfdomain=e1m.net); spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by domain of list-admin@e1m.net) smtp.mailfrom=list-admin@e1m.net [1] => i=1; gmr-mx.google.com; spf=pass (google.com: domain of list-admin@e1m.net designates 216.200.145.38 as permitted sender) smtp.mailfrom=list-admin@e1m.net ) [received-spf:] => Array ( [0] => neutral (google.com: 209.85.220.41 is neither permitted nor denied by domain of list-admin@e1m.net) client-ip=209.85.220.41; [1] => pass (google.com: domain of list-admin@e1m.net designates 216.200.145.38 as permitted sender) client-ip=216.200.145.38; ) [authentication-results:] => mx.google.com; arc=pass (i=1 spf=pass spfdomain=e1m.net); spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by domain of list-admin@e1m.net) smtp.mailfrom=list-admin@e1m.net [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:message-id :mime-version:from:to:date:subject; bh=qMEd7B/bMa7YzQuQIek1oZuy1Je/HHpHgwx6Jj9AIJk=; b=LGhreUJU/joWE+9ZCtyjD+r7HTNb40JPepQUae6SvbxS8HYOwVcv9dVbZDXhURQSCp TxVjM6rE9qRpcdQIZmXxWvM8mywbpiS+ElLo1+UlIVZDe8MVFnCFzxvIwpgFRMjerVmR 1uwnfHuo5tg4Y9jaGiizj1sbtQpLUZdiO3XQM2PZF0nXlGSI6YjyCNkn5IAs5JHVDrGr A46ENJPoB5Ziul1bJ9mZxg5dAKEqdbGKxaIsODCsmcly1e/sp0FcWqECrG04URypu3RW 2xCw0R3bAALsjAI8jJ5dZhTTrB6V7KjHCWBV2tsocYMuVzmwid9S71NA+RaznhOxlzif nOCQ== [x-original-authentication-results:] => gmr-mx.google.com; spf=pass (google.com: domain of list-admin@e1m.net designates 216.200.145.38 as permitted sender) smtp.mailfrom=list-admin@e1m.net [x-gm-message-state:] => AOAM532aWiwjlgqfhhUHkpDmEF+qPqRXd0t5R49I8Irigz1QUw/fkSke TjgmqT+FiGI2YBVKPSj0bRPai0c6X/iJkcqFoA== [x-google-smtp-source:] => ABdhPJx1CW/la8xaw0LI5T/nPWHav9Z9NwbyZbHTiwYOULtrd5xt1pWdDcUPyFy6zuOX9j0o4tWKu7Y9q04DvYLQzeQCh4eRGEI= [x-eon-delivered-to:] => [x-eon-originating-account:] => Kqht9ul229PLZY3yzrRclXlwjbpZTV35-H0CKuQmYbQaiBD_S2esc-DeDYgt9LQQ [x-eon-dm:] => m0116292.ppops.net [x-me-helo:] => zz [x-me-auth:] => dC5kZXN3ZXRAb3JhbmdlLmZy [x-me-date:] => Tue, 09 Jun 2020 12:19:28 +0200 [x-me-ip:] => 5.62.58.123 [message-id:] => [mime-version:] => 1.0 [from:] => "Deutsche Post" [to:] => advance@antihotmail.com [date:] => 9 Jun 2020 10:19:28 +0000 [subject:] => DHL:Paket414778700 [content-type:] => multipart/related; type="text/html"; boundary=--boundary_3427_54f4a2e1-9b9b-4983-a88d-df2e71868f87 [x-antivirus:] => AVG (VPS 200608-2, 06/08/2020), Outbound message [x-antivirus-status:] => Clean [x-eon-alias-sig:] => AQI82n9e32I0iy2CMwEAAAAY,5502fb339e915192102558bc6cf64e96 [x-proofpoint-virus-version:] => vendor=fsecure engine=2.50.10434:6.0.216,18.0.687 definitions=2020-06-09_03:2020-06-09,2020-06-09 signatures=0 [x-proofpoint-spam-details:] => rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=5 phishscore=0 bulkscore=0 spamscore=0 clxscore=1034 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=296 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2004280000 definitions=main-2006090079 [x-getmail-retrieved-from-mailbox:] => =?utf-8?q?=5BGmail=5D/Spam?= [x-gmail-thrid:] => =?utf-8?q?1669016390612982424?= [x-gmail-msgid:] => =?utf-8?q?1669016390612982424?= )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.