Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [delivered-to:] => Array ( [0] => unknown [1] => scamdex@gmail.com ) [received:] => Array ( [0] => from imap.gmail.com (74.125.195.108:993) by mail.scamalot.com with IMAP4-SSL; 06 Jul 2020 04:27:19 -0000 [1] => by 2002:a05:6638:24f:0:0:0:0 with SMTP id w15csp519908jaq; Tue, 9 Jun 2020 04:47:12 -0700 (PDT) [2] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id c9sor7016872lji.64.2020.06.09.04.47.11 for (Google Transport Security); Tue, 09 Jun 2020 04:47:11 -0700 (PDT) [3] => from servers.com ([45.153.241.150]) by gmr-mx.google.com with ESMTP id k6si1037939ljj.6.2020.06.09.04.47.09 for ; Tue, 09 Jun 2020 04:47:11 -0700 (PDT) ) [x-received:] => Array ( [0] => by 2002:a2e:5c2:: with SMTP id 185mr12703950ljf.260.1591703231894; Tue, 09 Jun 2020 04:47:11 -0700 (PDT) [1] => by 2002:a2e:9cd8:: with SMTP id g24mr13659189ljj.438.1591703231665; Tue, 09 Jun 2020 04:47:11 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1591703231; cv=pass; d=google.com; s=arc-20160816; b=tvHxHRrP6lW2bv6MoeyWQqXBibA18sDZTh1V4AkV7jllzwIlD9yMSPSNBNjI0HX5cY cbWrxfUIHTv4zV3gUYWqlEWjw3zl7wyobUa8+a74OU8/1+sbKyJ7Pl9GRpJ1llbDsSsO HbeO+6s4pzwh9z6CxdhkGYzngjcxOXGkYor7XPOmX6Fni9OvukCELHyS+HbFqvDKZ17Z B3V5ZkS472epRHmv6pGffKrdHX66qA1vqspZwd+8dVVuRk1ZjJEnCTi8KhIYwdlt/qoW dKuoBeHoGqcGyNkd/C+VYIHgVzSMA+gkDJhcH3C7Jv4wyiMoeiBOi/Vv+W32tVPu9k0x 6h+A== [1] => i=1; a=rsa-sha256; t=1591703231; cv=none; d=google.com; s=arc-20160816; b=retpKWrbpn/x1KitSyEEMnVYw2pcf2QmXkzCvxHs8UwfCIHOG+C39lwYaxi0MvxgGu GLVigAmE7/5v0tp6yWobAtS24qYQtPaQtIFEqqgi2GBRHt5yB7Iu8V19/gJkByfehz5/ we5CvKhEmiiKynF+7NMPD+TPmLfpQFTC2l5k+YvVyvBRRplmeyDOiH3TnsOYNLFG7W13 YIdH/I5mbcY/j24+TvFCFX+c/8JJMQLAE11naz5qgPhJtzEJl8RJS9lfV6PhqTsSDe37 QcKl3IqoxJe9YbM+JDd4lb3mxfelbl6NgD4xLG43fra76mRYYpvfpd7xGb8NlshrmIK9 wwpQ== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:reply-to; bh=H0D3UQ2NjEYlkydsuxA8x4r7EQUbE1NSgyb6xa0MmBk=; b=pcG2Dr2vSBJ9BvXwG/AhzkIORZOXXtyumeiRecwVBNDWCu0CmCd1O4aDMW8aS+/Rff ODW5lUgVX8MIOFiHDORJHqtK+T9X66eTopDmjm626f4GECwjE/8bcVJ/MU9ZYMTSXaK/ vw8oShcczSpDVkiDFK3zcANmSzk7JlFqM278T1C8QEYPk+17neg8GPRstbGUEj0ow7Di zv0MVtpdtPMRM8OnCSqbgEIMCaKxHtdRZJsK7D0MgiF1ymwi3gHhVtyFoCi+iUowFZ73 S5CH1dKcVvAiQLKbXReezSGtjocGmI4yuj5zntkVvva30SeXcTeIT5eS2aUpiWHNGCKS 6wyA== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:reply-to; bh=H0D3UQ2NjEYlkydsuxA8x4r7EQUbE1NSgyb6xa0MmBk=; b=F64f4djikEgAdRIliiot/aG73+d5jsAcIdRX4J6dXDNgw0dZ9A+nHbgFV9SHpcl/UP Jbbz/p+3h0lJGIUwFqBJ+mqashKfLFogZLuVHHkmSnoCW8hAWBix2PXAy51xN8Bz5OGB VQ2oWIpsCHmODznVti6wKfElIW7fUvhncb6bFAfhKMw9XYYUaFn8VfuDfgbl6rP3RRJE h9eDGXGiWSBEtMgzVEzcdlO7NOh5e7YZgWcmml9LwOZwJHjeGwWnKN/2st7C3WEaTH9j QU8VMBnqkga/CmotNsxdAGWk6ajvZLKcjF8IUmtr17h5r01DJC9KodDqkdeQ9xFI4Wyc lVjw== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning secureserver@servers.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=secureserver@servers.com; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=servers.com [1] => i=1; gmr-mx.google.com; spf=softfail (google.com: domain of transitioning secureserver@servers.com does not designate 45.153.241.150 as permitted sender) smtp.mailfrom=secureserver@servers.com; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=servers.com ) [received-spf:] => Array ( [0] => softfail (google.com: domain of transitioning secureserver@servers.com does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41; [1] => softfail (google.com: domain of transitioning secureserver@servers.com does not designate 45.153.241.150 as permitted sender) client-ip=45.153.241.150; ) [authentication-results:] => mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning secureserver@servers.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=secureserver@servers.com; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=servers.com [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:reply-to:from :to:subject:date:message-id:mime-version:content-transfer-encoding; bh=H0D3UQ2NjEYlkydsuxA8x4r7EQUbE1NSgyb6xa0MmBk=; b=iObO96adPCuY8meoaLYqbCSSdwizn3XXbzRQrZwuZrNzVO9IXnCKByxPeL2xPOdfiI FzCcn2hwJ8W6MCWPD+aO4++qKmyjtyqqidWth6hVpgRlJ+rlKPEvpBJvLkttxw0FZANc m2AW8N7AfWvUAs0elKfnp8+z9hu3QlK/PEJwUJfffnR0zPyk21rVRFeoXLGxkHZLf1JK YCpQG0cma9l75VQcGL+zHQH7WRblU/0edXrPA6bk13uTazC6/cyrfRDORU4T52fV7IyR lY1yJI9qOWNLkQveizvO0JS/cbUJWBSvtD9HaLkCFaeXwGMtVmyuGq+k02qy8RFtZHVU 8RJw== [x-original-authentication-results:] => gmr-mx.google.com; spf=softfail (google.com: domain of transitioning secureserver@servers.com does not designate 45.153.241.150 as permitted sender) smtp.mailfrom=secureserver@servers.com; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=servers.com [x-gm-message-state:] => AOAM533wdU7n/3az1Lwx6ukinVxa0ptv8QQOVp5bFVpYNpT4YN8bS9ro OQawi+sMjbQfJ/FLBUeiMdLN9NMZpd7Q240Now== [x-google-smtp-source:] => ABdhPJyD94euYAkOHXlNPMMzFvN8r4WfMef0g6dDZ6bsRkkfgtR+l62Q2Wj1LuShO8d+YyFeMvms0qGy8rU8esHMkGprJHHkpeg= [reply-to:] => daiichristianless@yahoo.com [from:] => Tippawan Sonkhun [to:] => submittedemails@scamdex.com [subject:] => NEW ORDER PRODUCTS NEEDED [date:] => 09 Jun 2020 04:47:09 -0700 [message-id:] => <20200609044708.965EDB86A82E8E5A@servers.com> [mime-version:] => 1.0 [content-type:] => text/html; charset="iso-8859-1" [content-transfer-encoding:] => quoted-printable [x-getmail-retrieved-from-mailbox:] => =?utf-8?q?=5BGmail=5D/Spam?= [x-gmail-thrid:] => =?utf-8?q?1669021808063608272?= [x-gmail-msgid:] => =?utf-8?q?1669021808063608272?= )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.