Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 2002:a02:cb08:0:0:0:0:0 with SMTP id j8csp743933jap; Wed, 7 Oct 2020 14:09:53 -0700 (PDT) [1] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id 27sor1854608pgo.80.2020.10.07.14.09.53 for (Google Transport Security); Wed, 07 Oct 2020 14:09:53 -0700 (PDT) [2] => from mail.kcma.or.kr (mail.kcma.or.kr. [118.37.127.99]) by gmr-mx.google.com with ESMTPS id mv6si184154pjb.0.2020.10.07.14.09.52 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 07 Oct 2020 14:09:53 -0700 (PDT) [3] => from [103.207.39.71] ([103.207.39.71]) (authenticated bits=0) by mail.kcma.or.kr (8.14.7/8.14.7) with ESMTP id 097HEGLJ026239; Thu, 8 Oct 2020 05:29:30 +0900 ) [x-received:] => Array ( [0] => by 2002:a17:902:bc4b:b029:d3:d350:eb69 with SMTP id t11-20020a170902bc4bb02900d3d350eb69mr4579401plz.45.1602104993592; Wed, 07 Oct 2020 14:09:53 -0700 (PDT) [1] => by 2002:a63:fd11:: with SMTP id d17mr4703343pgh.213.1602104993344; Wed, 07 Oct 2020 14:09:53 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1602104993; cv=pass; d=google.com; s=arc-20160816; b=xYQw859NFYRm8H0Qy7UMCnYSztetSQ7Y/MG/cvajMdvmnnry3i1ZMy/1KkbAbGgMtD EJqXkV1OlfNjjPbqsxECDgpYnfYIy+ab1kOFMy4GesprzCn0s9Y7/4Woq5hq3GhsshpX ro0WarY4uBjT4fLBBf5UHubkIp1w6kFv/kWDdTTTx/Kkv9KokIjTbcju5zQy7kxOiuk+ Ir+T7+pjS6HRHoDnAHoYgIXcOlHVqo21BU7YHL+G2NI1GjuPcX9VqCv+xk/lMgR/Bc4E Mk8aKmZq8ELorT93e8ZKfQczYVe4OjxfHhFWFBMBBEKfBxmk47vHGzhCI2IFf+JdDvqG loCw== [1] => i=1; a=rsa-sha256; t=1602104993; cv=none; d=google.com; s=arc-20160816; b=NWd/RNI3+byxvE8nYGI7nxOPJrA6zrTsGfm1KF9OLZXWgcMQJVIzh+t0a8Z4CLc2MX Yo03O8JzcwTK4618zPXZKcWxjI2loVkePrioe7mDRdmjR8uMtCynbl9bnnbvNQNDb2lg FfgDBaGZiq28l/VSbTc1wB5lgWxAq69sWAaix03Ddev1BhfGOAhmVZU7uCtzY83v/EZf DENxUx4yy5t0zE/THoTteBICkG6flj/5qJuE6G1cDIVX5f4TLEKS478siuAl0o6X2NlU e86BoM3TSeLr79dHGVKv1haF6AG7D6T7cc2Kvt8GnY4mrbs0ZzTuDn7X1U7sQHz/Jt5A vbJQ== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=reply-to:date:from:to:subject:mime-version:message-id; bh=dSZ/sQA5tfnIGG+gaaK+TM/2oPMZlHmQ19EAyTWylU8=; b=ugwXsLrzkuBNGdRyR3V6FcaGU/4myZ3GxK6psfcOOw0KMd0P+YxioSvaIF9LPcgFJf mj3paTMTS3bFbft36K5v9nfjoaMK2zN/RGYnYKGeIdVBfpKE1t9zZM0Y2kBIMgtrhykl /txtLG0z+1R/VfTFB1f4c4Pe4Uf0zS0UnEmI37r7FYsSCuhBlREDLO7qm7jUBNE68Jsx 8S6Pmx9Ubyw/pgSuty94L/oAcO+BfZAAsHgzQeX8S1VJuz56yA4Fxg2C1MLlKNPrSgIg AXtewsmvmXqckljUGQfPkjZ5CjzxmX8bCfQesiH+qWS4CiuktyBtWZwXflz1fk3tYNHz 8h8Q== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=reply-to:date:from:to:subject:mime-version:message-id; bh=dSZ/sQA5tfnIGG+gaaK+TM/2oPMZlHmQ19EAyTWylU8=; b=v+8RaKra8fn5q38Z08zzZ0tED+fG5ykWNBmZfL4lhf+bnYGMVfj80xak7a9dDJ7NA6 zvJSKPKv0qQyrH0pIyuy1fnCOUKyFALW2E1e2hMNEDrNgvWfELyJZhdNSF4aAvYUr21i nsn99D34b1hK7l8OOCs7pqBO1WYqMubNZcyeVqU/LTO8nShsqY8wuMk9mv1EkLyZNWPQ BXB+WaxAeM2RTGeOk5Riy2K+O14jtf5BuPazRqqvaaqhmkglLHendy6456WZ5GNnWQuj sV0iF5K59DtvXWWUJE311LShwqyyi2zvOc8PGWbCh2gSp73nP91WGU5K/IseA8JmienX mgqQ== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning takagi@ookura.or.jp does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=takagi@ookura.or.jp [1] => i=1; gmr-mx.google.com; spf=softfail (google.com: domain of transitioning takagi@ookura.or.jp does not designate 118.37.127.99 as permitted sender) smtp.mailfrom=takagi@ookura.or.jp ) [return-path:] => Array ( [0] => [1] => ) [received-spf:] => Array ( [0] => softfail (google.com: domain of transitioning takagi@ookura.or.jp does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41; [1] => softfail (google.com: domain of transitioning takagi@ookura.or.jp does not designate 118.37.127.99 as permitted sender) client-ip=118.37.127.99; ) [authentication-results:] => mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning takagi@ookura.or.jp does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=takagi@ookura.or.jp [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:message-id :mime-version:subject:to:from:date:reply-to; bh=dSZ/sQA5tfnIGG+gaaK+TM/2oPMZlHmQ19EAyTWylU8=; b=BdqnQiioNmru6452EUvbLApuBPNrVA9QWHrP+XGZ7TUyBR3VhoWpulVjEdHpC2fecW vyPo3qaPDqi69oc3PLIXKaL5uMk1giClyROQyq70qWfw0EFf08+/8lbSezuwgQ40IKqc iqNO/ShGEGbV83yK2NIMnsm/QlvrDdIXfwWcMmZnBPWNGVSSNcxXKn4BMMq0QFVYQKX+ hMNlFC8Xc4zVFgYIJkA3TdoIynraLGy1Au/Wm2VAnvSc/+yZi8nGsbxRI1Y226X67mNT LoHfw1Biv3cXqYOhFJOSgKYy+nsQkKi7rmN0wJfxGMX26FQFON0DZzBMryVMKtaAA9pR WFow== [x-original-authentication-results:] => gmr-mx.google.com; spf=softfail (google.com: domain of transitioning takagi@ookura.or.jp does not designate 118.37.127.99 as permitted sender) smtp.mailfrom=takagi@ookura.or.jp [x-gm-message-state:] => AOAM531jnfxSF39QI14sKlWedSU4dFEY0P15LTh+6h7ZJG7p393f/D/b oORhNp9dqwOSrdLz/cVdXAzuT3+13tKf2M0T3A== [x-google-smtp-source:] => ABdhPJx2FFTPsjP2qmUlmHyw+RfD1ZS0bWmwV5mNKORprS3eU5K1LWWAdhB+cYMeoMJ5oJk82sXdUws78e7sK4UbA210tKAiRlQ= [message-id:] => <202010072029.097HEGLJ026239@mail.kcma.or.kr> [content-type:] => multipart/alternative; boundary="===============1657387915==" [mime-version:] => 1.0 [subject:] => Re:.. [to:] => Powered By Google [from:] => "Powered By Google" [date:] => Wed, 07 Oct 2020 13:29:18 -0700 [reply-to:] => adrian00@zohomail.com )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.