Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 2002:a05:6638:3e9:0:0:0:0 with SMTP id s9csp188857jaq; Mon, 10 Aug 2020 23:26:15 -0700 (PDT) [1] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id k15sor9101362ljb.14.2020.08.10.23.26.15 for (Google Transport Security); Mon, 10 Aug 2020 23:26:15 -0700 (PDT) [2] => from bredenmaster.com (bredenmaster.com. [190.96.85.238]) by gmr-mx.google.com with ESMTPS id u9si837956ljg.8.2020.08.10.23.26.14 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 10 Aug 2020 23:26:14 -0700 (PDT) [3] => from [185.156.173.77] (port=57570 helo=User) by bredenmaster85238.dedicados.cl with esmtpa (Exim 4.93) (envelope-from ) id 1k5Nis-0006J3-BJ; Tue, 11 Aug 2020 02:25:22 -0400 ) [x-received:] => Array ( [0] => by 2002:a19:f808:: with SMTP id a8mr2447263lff.62.1597127175264; Mon, 10 Aug 2020 23:26:15 -0700 (PDT) [1] => by 2002:a05:651c:1293:: with SMTP id 19mr2172345ljc.427.1597127174933; Mon, 10 Aug 2020 23:26:14 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1597127175; cv=pass; d=google.com; s=arc-20160816; b=fxmU+phiQgplJ0HZKSOUC7nF0WKdLWymPRVItxUCK8q9NqTHBQrU72AuRoj0/E/f+B BGLWLKsJwBZgCp4XGgYxf/qnEpgDvskWnGq0wZiI8qfT9BuDVUqqnnsVtmS2hodFPbYK O01dhAgwOdBAMIYfifk/dZ8oNCK9wiiqa/qfVMqXE9NypaIb7B40DIwf3pLB8e9H9jPw JPOwlCFlsj6e4TIaT8RYkYHCIRnYWe3R7NoMsjk/CNMu1LkV2OYvIvJbM+nXTWn8qZlc PQ+7b3UXtYDcQG3PnrIhlc/OdrMsvfQVX6AvB+FL9rStFsNUGK0gaGP7pn3sUWehS88N b2Sg== [1] => i=1; a=rsa-sha256; t=1597127174; cv=none; d=google.com; s=arc-20160816; b=AA9Amy4s3BluXASAKp9hyJa9JnUZnZKzCPpFD0+koyquworDkjFqf+920QsWqXd1pR rUI8/tvFGvM8PfXYbrjsaPYCwqTtO9kZXU2f6gDlOUE9zZWp3TlEGTSn3z93NgbufiYc 14SZlr43HAaowyw78Xu9reICgpCBI84PidtyFdM7z9gowwRA8UeLKuEG62AE1F1nLWGc F0teZtlyeP8jqJMZY6KU5NiV1+/HPs3PUbjO7KRlnD7SqrOoWnCkSacjJSKjADjqYngU xv/xCksuV4MxnOJrD9GzaKuhEnnz+Qz38Y/kGrlk/r4rf872rt38DCBQH1XbF7ll1PVS RlpQ== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:date:subject:from:reply-to:message-id; bh=JB11NVbW7IVPf+REeXyX4ohRE1Vs2Oa/oewj0zY8sRg=; b=n851sPwnxmM3b3Mea7YgCd3TRylkR3hdHxwxZUnwuiVA/dm3bo9l5yskDZmJg8d94B Yi4/mKktIv9U3CmwHU82HhK6oA7nWsLTBh/mYTDGcaOPpt77PBR4V+VF9bEu9PA3knMF Khp2TpY1NPZj8EsV9Etj1euQwAOav6JV/gyNV1ZHPuEF1R8lU8nDRmSNGetzemtIMVq3 s9VyT0OYewX7Y8deyLeAfEFUrIh3PBmzYOlZsZdT/Cs0ZQ1bc7mccQJnUY0rv9kK4Z3r rST0MLFhiJo6YypwQqq4Jdb84A7+qYdzBs8j7PwDeGKjtpwofEOA36NA+omX4gF9WYjl hhOg== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:date:subject:from:reply-to:message-id; bh=JB11NVbW7IVPf+REeXyX4ohRE1Vs2Oa/oewj0zY8sRg=; b=BDh5Nuw02Al6LE8F61zHF8i8Hu3ZkdMWGUvFbko4vzeqaS7wj5B5GyU1LvbsgBIX9l KsXP5OgI7a3qbjyzeTbnjdIByKnYuisbwdSoagWkEnX+fOO+MwwJlBXpEF1WqwnnRwoA HBS77w7u345klS5riQdnIglRI6eb1I1c9w3ni2kbNjpZysMsUkJORKJXOnWNycQYCrZT cvStA1x52f1rJnveZUh8Pc6AvmBTb2xVkqcONtkGXxjhTjXoYbI0t6eFALYGESKb+rvd VpN6q9962WkOpQYth39XVJotbwUDw69ZjNtCZyXMm68MpcmlK7xphlM/EZXRvf81gcl7 JoyA== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; arc=pass (i=1 spf=pass spfdomain=bredenmaster.com); spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by best guess record for domain of ups@bredenmaster.com) smtp.mailfrom=ups@bredenmaster.com [1] => i=1; gmr-mx.google.com; spf=pass (google.com: best guess record for domain of ups@bredenmaster.com designates 190.96.85.238 as permitted sender) smtp.mailfrom=ups@bredenmaster.com ) [return-path:] => Array ( [0] => [1] => ) [received-spf:] => Array ( [0] => neutral (google.com: 209.85.220.41 is neither permitted nor denied by best guess record for domain of ups@bredenmaster.com) client-ip=209.85.220.41; [1] => pass (google.com: best guess record for domain of ups@bredenmaster.com designates 190.96.85.238 as permitted sender) client-ip=190.96.85.238; ) [authentication-results:] => mx.google.com; arc=pass (i=1 spf=pass spfdomain=bredenmaster.com); spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by best guess record for domain of ups@bredenmaster.com) smtp.mailfrom=ups@bredenmaster.com [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:message-id :reply-to:from:subject:date:mime-version; bh=JB11NVbW7IVPf+REeXyX4ohRE1Vs2Oa/oewj0zY8sRg=; b=pqNVJu4va8+pQ+sRU9JgM9FZH4QWEqizBgKw0AQvfiqWS1YT82BzpItFvtq252t5cI AsoUI1Vb83vuGztCF4R0g4tr28DfhURS8rAd9l9dH9AntfSc7/dRH0xyLFhxRn8mkGe7 etA6jXnDN4wpdHKTYU9NQ3nX8P1OmJ9GjYK+tLH5Hg09BpdwuPxJMJVkxQ1FosYDeQN9 MmhuL7ZEC3awx30R6BUOSTSpAnMHOEJhokhixFHO9jBL8OZX6UIsMDZiSLvLcaNl8ET0 6PGA9YMCAC+9PzVjSzYO/ll1cbVh4WLnoy/9tjpa04Jo9FHfk+ofvlet3/8uJY90F2Yn Hnvw== [x-original-authentication-results:] => gmr-mx.google.com; spf=pass (google.com: best guess record for domain of ups@bredenmaster.com designates 190.96.85.238 as permitted sender) smtp.mailfrom=ups@bredenmaster.com [x-gm-message-state:] => AOAM532fPh5nlT+c/eykMjAGQpJgJTMOi2fUuh4WjTlDBp7croD6BVId Rq/aKWr22fMuY53xyRr9aup/y0PsVrxNnEInXw== [x-google-smtp-source:] => ABdhPJzbzqP9KAWDdpgjfjbg93lHF9wGloV1gvuRCWlOwVmMxymoreINY6lL+ITMvBBXCG5Y4xcnFKxVnaI7ED6vWfRfknjvYc4= [message-id:] => <5f323a06.1c69fb81.df88c.84fcSMTPIN_ADDED_MISSING@gmr-mx.google.com> [reply-to:] => [from:] => "MD matt Brittin" [subject:] => Google Anniversary [date:] => Tue, 11 Aug 2020 15:43:28 -0700 [mime-version:] => 1.0 [content-type:] => multipart/mixed; boundary="----=_NextPart_000_0033_01C2A9A6.0F9CF744" [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Outlook Express 6.00.2600.0000 [x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2600.0000 [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - bredenmaster85238.dedicados.cl [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [47 12] / [47 12] [4] => Sender Address Domain - bredenmaster.com ) [x-get-message-sender-via:] => bredenmaster85238.dedicados.cl: authenticated_id: ups@bredenmaster.com [x-authenticated-sender:] => bredenmaster85238.dedicados.cl: ups@bredenmaster.com [x-source:] => [x-source-args:] => [x-source-dir:] => )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.