Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 2002:a05:6638:3e9:0:0:0:0 with SMTP id s9csp2804778jaq; Fri, 7 Aug 2020 11:58:31 -0700 (PDT) [1] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id mn5sor11463289pjb.16.2020.08.07.11.58.30 for (Google Transport Security); Fri, 07 Aug 2020 11:58:30 -0700 (PDT) [2] => from 142-4-8-247.bluehost-ob.net (142-4-8-247.unifiedlayer.com. [142.4.8.247]) by gmr-mx.google.com with ESMTPS id q137si575938pfc.4.2020.08.07.11.58.30 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 07 Aug 2020 11:58:30 -0700 (PDT) [3] => from [156.96.56.15] (port=52709 helo=User) by 142-4-8-247.bluehost-ob.net with esmtpa (Exim 4.92) (envelope-from ) id 1k47Xd-0005kM-Kx; Fri, 07 Aug 2020 12:56:33 -0600 ) [x-received:] => Array ( [0] => by 2002:a62:7ac2:: with SMTP id v185mr14685774pfc.277.1596826710914; Fri, 07 Aug 2020 11:58:30 -0700 (PDT) [1] => by 2002:a17:90b:3605:: with SMTP id ml5mr7773865pjb.203.1596826710722; Fri, 07 Aug 2020 11:58:30 -0700 (PDT) ) [arc-seal:] => Array ( [0] => i=2; a=rsa-sha256; t=1596826710; cv=pass; d=google.com; s=arc-20160816; b=T9WTuPUM4PxwnSWPKuScvlkPc8K3cSV+fvFHUHr7oAnJJ7A4MieI5DDqw3K7CJhmYb 8Cn2k2OEUAPbD9xmG8dVnhzIcJzso/NYU2j12PPjaqRc/70UqBLd5X1do0aaZgATciw8 e8YM0os8ogK2rtDvhxqxqNKOTzkfbDjtzAmWicFzSP/0lG5vSTkogxKO/El6kBItL1T9 Ysix3pzuheEHDW/NSHpM+rRNrZskRLsl+vU5rNXFq5LXBmUErRDbIzsOJjeikBUrnJ9V 0Ol4JziksNOlxCSRw44PHWhj0dKBYuLtJGfaiqD/hs4Qu1c384nyOpHVsmJLGOttAKT1 n0RA== [1] => i=1; a=rsa-sha256; t=1596826710; cv=none; d=google.com; s=arc-20160816; b=AeXMNGGN5GDrkFNdjuFSdpp17T11F7lvVme8TmeRdnzuac1jl7LuugoxZzcdaQzoFV GUeAL2FOeS2wh0ZYy4z7z/9wD6XMppz+Fpf5XWKwRj45lUtGwi3EJqhU2G4bL5YsY2m9 8jKOgxlhLFwZ5CRqvnzL9H01OiwChhNx/0L7mFcbHJDlUVI21fUcdSB9cQrHrcCcPl44 KlsAvHDVpYkEKwtpud6DoExZJFa8Tbd2kfQbdZ42kzw2A8+UVus89WBRQTNmveI8aUV3 Ta+/NDELP2KOGKHHjN6US1DDVQZS0w3pVyUhkAZBZ15GA7J7mZsl//WanfGkngpubtri HEtA== ) [arc-message-signature:] => Array ( [0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:date:subject:from:reply-to :message-id; bh=XI/AHj31DLZx2BMRlFc+7pWKSPTiRAinTZdlKZQYQdc=; b=xZcOe6sZBHsFIm3rqT8sObZVpiCoPsgW+PxZssgYGqqVus9M1Xcyn+yEUYTbO+Gjsm +UQkJv2/mlrWUCSSpE4JLJkTpJ5hTnCIIcse4I7B9CxUoLfIDb9F2koWR1BBRbEtWvAr jj5J3SVene4BVowbg9QD9nV2/OXIbbz+FnGAP70i8J6o11GyJV3EY1qQHi296UMLRasm k4ODaom2vUKns1TUdquDruc5z6fHDUMlH16+M/Nzqgn7AuUTqqd9eEnyZWWMZYPBUTPI hKmo9tMDZh+sOWSSD6+wqBLJLGH6qx5MuK0mCN1m5Af5wib6QlqnA0eBwR9HPGcCXdiJ J72g== [1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:date:subject:from:reply-to :message-id; bh=XI/AHj31DLZx2BMRlFc+7pWKSPTiRAinTZdlKZQYQdc=; b=OSwLVNonrS5eqOSK1pBLXxKZ/CHHoH0tFmcQMc5Vu4kp2+QDvconiTdMVQBoM/Q4YR rIl6cibhEw+gOuodR+NvVpDCsKKK37DvustPgCmvzCvI4Ryhpgce6T0AQeaw/8aEAbfK aO+Nvj7kAk0gVf3pgaosEBfjH51vaa1TK/vZInVMlNAf2BpcOR9YSgn9tbp7ioEQYRtr i3aENsNVTMW7E+MrC75PdWGvV92BLROOIKLWCDkI1SH3lUCb/4QgWYk99kNnpEmcMlFy C7Nm1kQru1Dtf/5Mfcz7QVwerWO7a1QU6i9DRc6kmVqex19sZmOoZwYnvAiVthA6fBG1 eNlw== ) [arc-authentication-results:] => Array ( [0] => i=2; mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning maryvandermerwe1@yandex.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=maryvandermerwe1@yandex.com; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=yandex.com [1] => i=1; gmr-mx.google.com; spf=softfail (google.com: domain of transitioning maryvandermerwe1@yandex.com does not designate 142.4.8.247 as permitted sender) smtp.mailfrom=maryvandermerwe1@yandex.com; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=yandex.com ) [return-path:] => Array ( [0] => [1] => ) [received-spf:] => Array ( [0] => softfail (google.com: domain of transitioning maryvandermerwe1@yandex.com does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41; [1] => softfail (google.com: domain of transitioning maryvandermerwe1@yandex.com does not designate 142.4.8.247 as permitted sender) client-ip=142.4.8.247; ) [authentication-results:] => mx.google.com; arc=pass (i=1); spf=softfail (google.com: domain of transitioning maryvandermerwe1@yandex.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=maryvandermerwe1@yandex.com; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=yandex.com [x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:message-id :reply-to:from:subject:date:mime-version:content-transfer-encoding; bh=XI/AHj31DLZx2BMRlFc+7pWKSPTiRAinTZdlKZQYQdc=; b=orqTD9HS/45T6cLBt8TqhvhcOjwJmasRJ82EKyn6Z+5YNHgvCPh0++wxQJb9Lww5G/ fTjDDSfBVaOsK5kQNFtgCy5O84Jyy5Kt7ru4l5fc9DIr+9mUC3MI3p+wQvQFM0v50dbo XQ9UZUkCzchAfgS4Spqidtft9IbbXVTxtqGnIMJtSWhodppFRHfki2jYHyN6Qvb7JKfN PpGWoKlW2eM+1fAHnH5uMd2HZUEhQpdKTq9A3+emYWG+xzBPuAXbsZBGX6fO7z3F7w4K J7k/GMrLmb8+yiMU8SEdsGMo30Vb6wG9x1uWun618EYtrkWPxm2fdZeurLg1ErzqDGDc Eb8g== [x-original-authentication-results:] => gmr-mx.google.com; spf=softfail (google.com: domain of transitioning maryvandermerwe1@yandex.com does not designate 142.4.8.247 as permitted sender) smtp.mailfrom=maryvandermerwe1@yandex.com; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=yandex.com [x-gm-message-state:] => AOAM530UO1XuIJ8DoMIWcavd6V3TbfapgmsMXaikbhYVrbkN9kkog1P4 BHQDe5vpoWmm9e6YTRpOQGLOrxM3UtAVKD2QQg== [x-google-smtp-source:] => ABdhPJxNTYb97MYPcDgeV3A5Q+L1RzrBhSrJVSciEB6lD1m7v5fPyocc078wPJpYy/6PlxirNAno76hkZG0vBdFnB8a3fspf0o8= [message-id:] => <5f2da456.1c69fb81.66190.dcbeSMTPIN_ADDED_MISSING@gmr-mx.google.com> [reply-to:] => [from:] => "Mrs. Mary Van Dermerwe" [subject:] => Confidential [date:] => Fri, 7 Aug 2020 11:15:26 -0700 [mime-version:] => 1.0 [content-type:] => text/html; charset="Windows-1251" [content-transfer-encoding:] => 7bit [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Outlook Express 6.00.2600.0000 [x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2600.0000 [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - 142-4-8-247.bluehost-ob.net [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [47 12] / [47 12] [4] => Sender Address Domain - yandex.com ) [x-get-message-sender-via:] => 142-4-8-247.bluehost-ob.net: authenticated_id: oye2@onwaoyoko.tk [x-authenticated-sender:] => 142-4-8-247.bluehost-ob.net: oye2@onwaoyoko.tk [x-source:] => [x-source-args:] => [x-source-dir:] => )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.