Phishing or scam email?

[atikovi]

Got this in my spam folder,

When I hover the cursor over the FROM, it has my email address. Not sure what Mail Demon is but assume a scam or phishing. My email address is still connected.

 

[riff1006]

Doesn't look legit to me.

 

[GMBoy]

Scam - don't do anything with it.

 

[atikovi]

Deleted, but why does it show my actual email when I hover over the FROM? Scams usually have something obviously fake.

 

[cptbarkey]

Programmatically you can make the From whatever you want.

 

[atikovi]

Programmatically you can make the From whatever you want.

How? When I write an email, there is no way to change the From in the message, just the to and the subject.

 

[cptbarkey]

How? When I write an email, there is no way to change the From in the message, just the to and the subject.

https://stackoverflow.com/questions/449887/sending-e-mail-using-c-sharp

From is just a property. You can make it look like its from [email protected] if you like.

 

[himemsys]

Got this in my spam folder,

View attachment 224390

When I hover the cursor over the FROM, it has my email address. Not sure what Mail Demon is but assume a scam or phishing. My email address is still connected.

If you look at the message source (or Headers), you will probably see the actual address it was sent from. The headers provide a lot of clues as to the actual origin of the email.

 

[atikovi]

If you look at the message source (or Headers), you will probably see the actual address it was sent from. The headers provide a lot of clues as to the actual origin of the email.

And where do I see these headers?

 

[dogememe]

If you have a web hosting account on a cpanel server it could be legit.

That said, I admin several cpanel servers and have never seen that email.

 

[atikovi]

I keep getting fake messages saying my email account will expire on such and such and to click on this to restore it, but that's obvious scams as it's coming from some omnicraft.com or elkforcenature.com.

 

[Sedin26]

And where do I see these headers?

It depends on who your email provider is. If you google "view email headers in gmail" it will direct you on that and if you replace gmail with your own provider (if it isn't google) you should find the answer.

A lot of the stuff in the headers is tough to interpret if you don't know anything about it but that's where a lot of the interesting data is found. Here's an interesting site where you can take the headers from an email, copy/paste them in, and have it analyze them - it puts them in a bit easier to read format:

https://mha.azurewebsites.net/

 

[himemsys]

And where do I see these headers?

It depends on your email client. For example, Outlook, Thunderbird, native Gmail, native Apple Mail. Whatever your email client, Google how to view email headers for it.

 

[atikovi]

It depends on your email client. For example, Outlook, Thunderbird, native Gmail, native Apple Mail. Whatever your email client, Google how to view email headers for it.

I don't know what you mean by client but I use mail.com for email. And the only thing I found on Google was this from 13 years ago and is nothing like what the site is like now. https://www.emailquestions.com/threads/mail-com.3638/

 

[himemsys]

I don't know what you mean by client but I use mail.com for email. And the only thing I found on Google was this from 13 years ago and is nothing like what the site is like now. https://www.emailquestions.com/threads/mail-com.3638/

https://www.mail.com/blog/posts/email-header-example/215/

 

[atikovi]

https://www.mail.com/blog/posts/email-header-example/215/

Ok found it. Header is this and I crossed out my address:

Extended Header Information​

Return-Path:<[email protected]>
Authentication-Results: mail.com; dkim=none
Received: from smtp.4xr1.com ([27.0.234.26]) by mx.mail.com (mxgmxus010 [74.208.5.22]) with ESMTPS (Nemesis) id 1MBEOG-1s7iZj18fe-00Flj0 for <[email protected]>; Tue, 11 Jun 2024 15:56:01 +0200
From: 'Mail Daemon Systemr'<[email protected]>
To: [email protected]
Subject: =?UTF-8?B?44CQUE9QMy0=?=email.com=?UTF-8?B?44CRIERlYWN0aXZhdGlvbiBOb3RpZmljzrF0aW9uICM=?=288183792811
Date: 11 Jun 2024 04:39:21 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
Envelope-To: <[email protected]>
X-GMX-Antispam: 20 (nemesis spam protection); Detail=V3;
X-Spam-Flag: YES
UI-InboundReport: junk:10;M010:faGXGKZoVmw=;wasUNthvynHuvoTECIQSobtUH89z88 poi5o5Umu/I0m+tyCHjb54wo9txmFqlpN5WOOq551JyNDBuTuR80mkiz1SPwtRySNZOxgdYgB OLRMTfN4b7Ew+zkD96mIDTUX45SkZFNA27JrsbsQYcvEh1wazgloJRs9ON5aePJibW7qC/ZhN WVWlnhkCrw8skgmeUSM43UgiBab73ll3NrOJxaD7qpZ3KVRS1jYug1/dRsIwO+SPkF7NWAPII O2wGyxO1t5AntF5Ffb55OLZNX71u0DY067gBASXHAyrALJOuy5kGtrOHNf9mS2sbpE+QpkjP5 I7ljlbmXlBHdIMzVVUih9ESBW2nDuxcyfS0xfgtIqPs6scu6Xvv0OyvvWOGy5yeLRO11R53KO 9r3sP64T+i6xHIEsxMiwcvgiy0vR5zb2mf3GLQsziSnABSM8XR0ZlugA8aMtaCABesESLidKR 3HNqKTp2iqPZvqkcpqE2upne1Yh40dR8WjERzZdjbY6RK5xvi9AGglF6CSWTJu35JLqe/XuxB c0X8ewO8Uztrjzpw96PhYvWNEmrlXlYsRyuxWUxqEk7a+1XgD2ZBMnm8LISmllo/qct6w580t /zIwaYJX7uCrL0fjaZb4N+72DMROYfk1Y3QGNF5zDfHS7JPmluYYQVxW4Zq00v3/4NHcn2eLt Z7wO5A8ERbsbM5yk8YXGqcp2vlLGM1KAPB7CqOC+rrjlOJE3Eo6ygx5Hn2beo/yLsERaH9KMQ qnNkq7sez0lHUXSLAogHKKYZYLw8WsSd6WUiGC4Gm67ux0jX0qIfNoFdl1Vuu1H9Q7nmCFbew 24cYba3Go06rgk1rddkxO+65EgZvD7JosXQpyGX+oSJCtuFTvLmltIqCPhYbj7MlnCl0fmOTb XL+js8D/Yv5NOq/5cPZuojXCyvRRA8eMoMa66UH6ntNX8CGZkA2qv2AzjXLwopHdZvHL2ReYA 0I16zwSRsA9QNcwwtSx8/QFQMKuulN75koTS5bPPRhN/ep9k/jcUC5d/uvxh07XtOtZYbSDgM gpip3Jd8aTXMVlHz/EgMgqaVWao6w5c8e6/YoGBA9UquN6xJspcmQOIVnwPfRggeTBch9+5Ur /ibDeQa1RNRuI1jV55xUo/Gcm3VyBuLb6PdGX25wKZu7crEGzMvU16FKRwt1EbYrDDDCVn1C8 570d8FvobSGk3oYQP8KYTpNpyeERwbdtNKvSIvo5Jwr3QFU8tXGkdmFkcPh1HcfHxTk1IW1bB JkUOZBg5Bgp6iBW1/IInAro4LN/DU9vQVOrMAuC3va+ExOSGXzGBCEQq9dxTfkWTpjD6p2Q9F WKrUsRjd8iBAQ8UAFjacAgv1KPg+GwBPGsnrUJlmiJ8OzPuV89JfJ7fqzkMS0aVdIQAfFQPYX LtvwooZSIcXVvJXOuh3wJwBS4jE0SCo9B80/ZMLSUvIHTFGKwm05dJHi5qN/JjlzHg3fCTbst ImwsS9mzFxLM/kz6Ws+iDP5AGyZLGTNjzAWoPFe06u2mLYeFeFaCjEou3VPhNnD9+J3yZr/o9 cMzEHbK973HGXeOakdIZr+puui4e9E9RVjgfIko5cKnRnDvJ0JeIhSWlEi+XhO5Ufa1JXmoXf FlbEOBKFBd6LlbP4NdOukkmwMTDcqvrAJZZgeINCaNiYDq5+yWwyVzvEEZ3XHyRF47rIlznGv 3dtYt5DgyIt1DlVLz2JQ4YzzKtNVpBRFfKNalHtegShcomIsz91ZX4Y7CfcL3QCzCMrVn8QF6 XxkA3lGLOp+TUrkA8xhB60dHKOYMQcQlRH1D9A4LOyV+I0Qor05M7DF2AdLt8BVEiVbt7Mr93 fp8T7l6tLkNShZ8G0rWhu0gcnz1FF+Ngz11P84xNc8WYPv53mZDtntMRVu2wGj+RK0eBk3Sic eAh/P+V+rSZ8WAP1Ixa2kw31TJJXKHDAdHbw+3B5kuhuwJvXMiL75r25xizslnjk2gsrJDA2L yezQ2BaiK3JvtCOSKvulqTsKX2XWVcH+UM3NrgvQOIq0Ib7QLAegeoHrr4vf0yJv4Mac1Cmcr UjMXl3vg5deC6XnU8SkvLQ2b7/wdrf72+p36qo+390T5wQQg0qvsqmtglueIPpLArZHF1VTnW g8rkmDzS342a/LpjSSZz6O7MNHJ1QnUeaQc3r8cj6+z1WUM1J0dVlYDm1NP3i7k+XoWDGNm8r lfINuhvwpLdgmvZMSJRQJldKENKT7PtU9Z85KWj/zODa0THoD/GjafOzM9HWN7VYwhDGwzjYT g0I+43a2usv7UalBtm6t3iFvoTzHt2s0F6+O46oSMDEKMdNXXZc+K1aFcGUuouajz0IAKz1Ar Now3Z2XKyuT0CqjHghKY7sBH/x+uU/3lkdqlNCir2CZflZWZwmWAjOpxefhAmpZLOkKgs+GzG TwYpHmaR83T4/+FdEpaWjP5fbjn03xhMsHPf6OkGCUCPI4vk0bOkSE8oblQvDim1A9y5WUj+k EY6QBA2o8/Ko7/GDWxd5goeTp+ud6/GMlORUhZ6gZehgQXPfjT4bbQSmqcM66WGRX/UDvoLv1 ZwbzOskIEgqC77VKs/Cu3QXAlfK5b4Al8cEGdk+DQ7L4RSDljgeLyQVHr+2k+1/YtG5hULQQB cGbPWcxkJD+8nlp5JpaGr+eJTfdDwK40HYSSiMIpw5U+MajlUHJse3B+Fww7PPZ2zZNjqGZhW +k/tE16lxdh0kCb8F29uMe7rNL1ZxB6hemTtD21GCUCbfVoPrDbsEsNODFLGVjpaZHoR9KX6J 9vwH9/1LRx5tP704k2UiLElALWATHnkOe9jD9gMXMZonxwd0e7Kzlb8Jt/qeguczCCNISsjP8 2LkGatgo6EHEg6mBXmfZNBM6Yy8vtXlp9YxVGgS6iHj8lIk7xRZ1n1Z316fEEWJSLj4aZ3MDA lPA+JcpjxXBC2kWrvwO2kwhk6sYEnBj4+7jQb1YpEedt2LwNs8wHf71VwP516jS2RZSKvaG07 Lfkq6K3db7DCg0py8gsMZ7nPxu06EW1rLesVGz2J9iqXr+8o13kG0vPTc57wa/NB+d2dibJjo 6KUzZvsCC85a53nuIra0CCKm8rNqRknFA6q394ZgAwe5QSxOk5dVZlkMOh4xjMi4+vpv9FgQI eFTmU4tYzkqwEB/Gd3nWK2Evi2mu/P6WM/vH07LwSEUAwFLyW2LxOWkGuEHQ4JOxQpec5rC5w B/6Trvg46FBznFP228EGraTtHb7mdeHV6ganaPnZz6bx2VahIT5YsfjDxx5kYPiQ5Zslmd3t5 P+Uf194btp+u7d/K7w56i0MfQsfm8BH+YqEiLqRn1K8wOJLecMziidL7W3Mi8XweFBme0BqMT cju2UUowHjfualIelUTxb0UJlB/6K0pZkKMVCSTrLYMa/3MGvCn+NCVGExvLFQkliXGbawnyk NtvjMRjuaGj7xnTmKuqmfy1fRVuFKJ0b6Yw4WBSkUP1OhSep0Bq1v6K3Ze7bqU0Hz8ARAQk0l 9F6RLdvXpQ9VeqS98/uPVIYWT506JD1vsrZuvvcANIszqEt6OaQ1Wi1UARUUo9WiELJxOLgmU 0Y6fk1m7NsHC68ANxIFqdZG36brS5b7zHcSpOlfRAe+QLuAcBGmZKG7ez/sFN9DBEuLvUk1I8 IhooZRsj4kFUEv630TUcUSVMrbu2TzURZf2VxOH4BxzUvoRsfQrgHAamyEsAv0fB1dd6khOn8 1Ey4cDREaBc5QsVUEkWHTcX5zGQn7PfSlhJC1o2VUCbteFOkCtda8x4878WWeWLKNvQsq9Yf8 0lDO/MUvBFSb4GHn/YBQqCIud9XobehU59aePuAEQm2lzSIrAE53YZVUdX4kQnAOWIdVgJedX RXgWzxUH+oY/LcfkV94+qEpNPgnGl5hbW06ZNg3e2OOfmjXC5bZcWIaDVHUlpBf7MiUA+jVLU dAHwNpLQg7UiIxotSs9gOIPr5Oa49fgY0tBVq2zM6KWbBmrd5iasYdb5ZOsPtA+h1w8g0KFmq lXTJjEbnS2qchnkEbJrF8q8UUWGpl7tn4cCbKoDjVFamyhUgIOH8G2SCalG6Uk4TPnWHmHIlu AmeDG41o8tDPnGlymBwLRK3igywUt8gw0w0nfKEmnDkY23AhKtPFy4WeOIhjZ8ITsvDDlP1sr IrUizIrzgDwrY5Es66TWEfBcUQ8jvm3UkkzPVVfxRqQsB0+cuXpO/dMYitp9gD++vgsj2cOlc C6WxqwVV84amCszXsf60HgyK0uE4D97pXVZ0+jkSmytACMtCONkv638cqSR/Kni1JzOBOwoXK Vpif4npJPB/4T6A75YborMZ506IaohlARi1g5qH3/9NX8wSYSWWNw8wrtBpXyHdtXqYSnigJR oVaaPgvyRClgh8EH3O0JEBGKEROdl9USQya+L0+OYkS51Qz9Gs8MCah1nVVu+w0X52CcAuwE5 kn26wU0Ahn/YlfTL3nnMQT0eOnGRmjZIljhzycN7rImh6OrQ2WZFqZYocItbvffo4rV1BTEwM DhxiTooD4RE5gCvVaKI4UC7Bzph6/lRYs34huynrziDZK6fLhvzm5zreMP0niy7FI6xfwGE7C 8CdALv0DLI73rKyOIlV/GTX12qRGCUG+mWXgRf6s+Egb0/WHdjN9yLkGEMi3SzJHl/ni157xT yJKd2yENfnplCV5CyvZmHP8beq85b6BxSe1hQfRrc45Ib4vdgkuFNySfxr5Z/ZNWl5Ubs+Pxv Dz0ZQm3geLS+FNI0V7I0IIq46E1FCLlW1I86zntA2/dKY4ld9GeH885cG7HVE1oTQNQqJI+q+ hWdYQL0sN8aN3Y8dW0C7YeIDR/Uo+ehu7MYWrKKJ0MKcUfWRuNDwk1Lr9bKuxacZ7uAYGxhN1 juaI8Z2JHlmWd1260A4Iy/0nZqR2wUAIgTsy+3L3urlbpVnZs8=

 

[Leo99]

I assume everything is a scam. It's a huge red flag when the sketchy email has an urgency to it that you must act quickly.

 

[Wylie6G72]

I am more than a little tired of getting emails from Harbor Freight and Lowes about some bonus or prize. I wish it were impossible for scammers to send emails from addresses that can't be responded to, because I've got some very choice responses for them.

 

[himemsys]

Ok found it. Header is this and I crossed out my address:

Extended Header Information​

Return-Path:<[email protected]>
Authentication-Results: mail.com; dkim=none
Received: from smtp.4xr1.com ([27.0.234.26]) by mx.mail.com (mxgmxus010 [74.208.5.22]) with ESMTPS (Nemesis) id 1MBEOG-1s7iZj18fe-00Flj0 for <[email protected]>; Tue, 11 Jun 2024 15:56:01 +0200
From: 'Mail Daemon Systemr'<[email protected]>
To: [email protected]
Subject: =?UTF-8?B?44CQUE9QMy0=?=email.com=?UTF-8?B?44CRIERlYWN0aXZhdGlvbiBOb3RpZmljzrF0aW9uICM=?=288183792811
Date: 11 Jun 2024 04:39:21 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
Envelope-To: <[email protected]>
X-GMX-Antispam: 20 (nemesis spam protection); Detail=V3;
X-Spam-Flag: YES
UI-InboundReport: junk:10;M010:faGXGKZoVmw=;wasUNthvynHuvoTECIQSobtUH89z88 poi5o5Umu/I0m+tyCHjb54wo9txmFqlpN5WOOq551JyNDBuTuR80mkiz1SPwtRySNZOxgdYgB OLRMTfN4b7Ew+zkD96mIDTUX45SkZFNA27JrsbsQYcvEh1wazgloJRs9ON5aePJibW7qC/ZhN WVWlnhkCrw8skgmeUSM43UgiBab73ll3NrOJxaD7qpZ3KVRS1jYug1/dRsIwO+SPkF7NWAPII O2wGyxO1t5AntF5Ffb55OLZNX71u0DY067gBASXHAyrALJOuy5kGtrOHNf9mS2sbpE+QpkjP5 I7ljlbmXlBHdIMzVVUih9ESBW2nDuxcyfS0xfgtIqPs6scu6Xvv0OyvvWOGy5yeLRO11R53KO 9r3sP64T+i6xHIEsxMiwcvgiy0vR5zb2mf3GLQsziSnABSM8XR0ZlugA8aMtaCABesESLidKR 3HNqKTp2iqPZvqkcpqE2upne1Yh40dR8WjERzZdjbY6RK5xvi9AGglF6CSWTJu35JLqe/XuxB c0X8ewO8Uztrjzpw96PhYvWNEmrlXlYsRyuxWUxqEk7a+1XgD2ZBMnm8LISmllo/qct6w580t /zIwaYJX7uCrL0fjaZb4N+72DMROYfk1Y3QGNF5zDfHS7JPmluYYQVxW4Zq00v3/4NHcn2eLt Z7wO5A8ERbsbM5yk8YXGqcp2vlLGM1KAPB7CqOC+rrjlOJE3Eo6ygx5Hn2beo/yLsERaH9KMQ qnNkq7sez0lHUXSLAogHKKYZYLw8WsSd6WUiGC4Gm67ux0jX0qIfNoFdl1Vuu1H9Q7nmCFbew 24cYba3Go06rgk1rddkxO+65EgZvD7JosXQpyGX+oSJCtuFTvLmltIqCPhYbj7MlnCl0fmOTb XL+js8D/Yv5NOq/5cPZuojXCyvRRA8eMoMa66UH6ntNX8CGZkA2qv2AzjXLwopHdZvHL2ReYA 0I16zwSRsA9QNcwwtSx8/QFQMKuulN75koTS5bPPRhN/ep9k/jcUC5d/uvxh07XtOtZYbSDgM gpip3Jd8aTXMVlHz/EgMgqaVWao6w5c8e6/YoGBA9UquN6xJspcmQOIVnwPfRggeTBch9+5Ur /ibDeQa1RNRuI1jV55xUo/Gcm3VyBuLb6PdGX25wKZu7crEGzMvU16FKRwt1EbYrDDDCVn1C8 570d8FvobSGk3oYQP8KYTpNpyeERwbdtNKvSIvo5Jwr3QFU8tXGkdmFkcPh1HcfHxTk1IW1bB JkUOZBg5Bgp6iBW1/IInAro4LN/DU9vQVOrMAuC3va+ExOSGXzGBCEQq9dxTfkWTpjD6p2Q9F WKrUsRjd8iBAQ8UAFjacAgv1KPg+GwBPGsnrUJlmiJ8OzPuV89JfJ7fqzkMS0aVdIQAfFQPYX LtvwooZSIcXVvJXOuh3wJwBS4jE0SCo9B80/ZMLSUvIHTFGKwm05dJHi5qN/JjlzHg3fCTbst ImwsS9mzFxLM/kz6Ws+iDP5AGyZLGTNjzAWoPFe06u2mLYeFeFaCjEou3VPhNnD9+J3yZr/o9 cMzEHbK973HGXeOakdIZr+puui4e9E9RVjgfIko5cKnRnDvJ0JeIhSWlEi+XhO5Ufa1JXmoXf FlbEOBKFBd6LlbP4NdOukkmwMTDcqvrAJZZgeINCaNiYDq5+yWwyVzvEEZ3XHyRF47rIlznGv 3dtYt5DgyIt1DlVLz2JQ4YzzKtNVpBRFfKNalHtegShcomIsz91ZX4Y7CfcL3QCzCMrVn8QF6 XxkA3lGLOp+TUrkA8xhB60dHKOYMQcQlRH1D9A4LOyV+I0Qor05M7DF2AdLt8BVEiVbt7Mr93 fp8T7l6tLkNShZ8G0rWhu0gcnz1FF+Ngz11P84xNc8WYPv53mZDtntMRVu2wGj+RK0eBk3Sic eAh/P+V+rSZ8WAP1Ixa2kw31TJJXKHDAdHbw+3B5kuhuwJvXMiL75r25xizslnjk2gsrJDA2L yezQ2BaiK3JvtCOSKvulqTsKX2XWVcH+UM3NrgvQOIq0Ib7QLAegeoHrr4vf0yJv4Mac1Cmcr UjMXl3vg5deC6XnU8SkvLQ2b7/wdrf72+p36qo+390T5wQQg0qvsqmtglueIPpLArZHF1VTnW g8rkmDzS342a/LpjSSZz6O7MNHJ1QnUeaQc3r8cj6+z1WUM1J0dVlYDm1NP3i7k+XoWDGNm8r lfINuhvwpLdgmvZMSJRQJldKENKT7PtU9Z85KWj/zODa0THoD/GjafOzM9HWN7VYwhDGwzjYT g0I+43a2usv7UalBtm6t3iFvoTzHt2s0F6+O46oSMDEKMdNXXZc+K1aFcGUuouajz0IAKz1Ar Now3Z2XKyuT0CqjHghKY7sBH/x+uU/3lkdqlNCir2CZflZWZwmWAjOpxefhAmpZLOkKgs+GzG TwYpHmaR83T4/+FdEpaWjP5fbjn03xhMsHPf6OkGCUCPI4vk0bOkSE8oblQvDim1A9y5WUj+k EY6QBA2o8/Ko7/GDWxd5goeTp+ud6/GMlORUhZ6gZehgQXPfjT4bbQSmqcM66WGRX/UDvoLv1 ZwbzOskIEgqC77VKs/Cu3QXAlfK5b4Al8cEGdk+DQ7L4RSDljgeLyQVHr+2k+1/YtG5hULQQB cGbPWcxkJD+8nlp5JpaGr+eJTfdDwK40HYSSiMIpw5U+MajlUHJse3B+Fww7PPZ2zZNjqGZhW +k/tE16lxdh0kCb8F29uMe7rNL1ZxB6hemTtD21GCUCbfVoPrDbsEsNODFLGVjpaZHoR9KX6J 9vwH9/1LRx5tP704k2UiLElALWATHnkOe9jD9gMXMZonxwd0e7Kzlb8Jt/qeguczCCNISsjP8 2LkGatgo6EHEg6mBXmfZNBM6Yy8vtXlp9YxVGgS6iHj8lIk7xRZ1n1Z316fEEWJSLj4aZ3MDA lPA+JcpjxXBC2kWrvwO2kwhk6sYEnBj4+7jQb1YpEedt2LwNs8wHf71VwP516jS2RZSKvaG07 Lfkq6K3db7DCg0py8gsMZ7nPxu06EW1rLesVGz2J9iqXr+8o13kG0vPTc57wa/NB+d2dibJjo 6KUzZvsCC85a53nuIra0CCKm8rNqRknFA6q394ZgAwe5QSxOk5dVZlkMOh4xjMi4+vpv9FgQI eFTmU4tYzkqwEB/Gd3nWK2Evi2mu/P6WM/vH07LwSEUAwFLyW2LxOWkGuEHQ4JOxQpec5rC5w B/6Trvg46FBznFP228EGraTtHb7mdeHV6ganaPnZz6bx2VahIT5YsfjDxx5kYPiQ5Zslmd3t5 P+Uf194btp+u7d/K7w56i0MfQsfm8BH+YqEiLqRn1K8wOJLecMziidL7W3Mi8XweFBme0BqMT cju2UUowHjfualIelUTxb0UJlB/6K0pZkKMVCSTrLYMa/3MGvCn+NCVGExvLFQkliXGbawnyk NtvjMRjuaGj7xnTmKuqmfy1fRVuFKJ0b6Yw4WBSkUP1OhSep0Bq1v6K3Ze7bqU0Hz8ARAQk0l 9F6RLdvXpQ9VeqS98/uPVIYWT506JD1vsrZuvvcANIszqEt6OaQ1Wi1UARUUo9WiELJxOLgmU 0Y6fk1m7NsHC68ANxIFqdZG36brS5b7zHcSpOlfRAe+QLuAcBGmZKG7ez/sFN9DBEuLvUk1I8 IhooZRsj4kFUEv630TUcUSVMrbu2TzURZf2VxOH4BxzUvoRsfQrgHAamyEsAv0fB1dd6khOn8 1Ey4cDREaBc5QsVUEkWHTcX5zGQn7PfSlhJC1o2VUCbteFOkCtda8x4878WWeWLKNvQsq9Yf8 0lDO/MUvBFSb4GHn/YBQqCIud9XobehU59aePuAEQm2lzSIrAE53YZVUdX4kQnAOWIdVgJedX RXgWzxUH+oY/LcfkV94+qEpNPgnGl5hbW06ZNg3e2OOfmjXC5bZcWIaDVHUlpBf7MiUA+jVLU dAHwNpLQg7UiIxotSs9gOIPr5Oa49fgY0tBVq2zM6KWbBmrd5iasYdb5ZOsPtA+h1w8g0KFmq lXTJjEbnS2qchnkEbJrF8q8UUWGpl7tn4cCbKoDjVFamyhUgIOH8G2SCalG6Uk4TPnWHmHIlu AmeDG41o8tDPnGlymBwLRK3igywUt8gw0w0nfKEmnDkY23AhKtPFy4WeOIhjZ8ITsvDDlP1sr IrUizIrzgDwrY5Es66TWEfBcUQ8jvm3UkkzPVVfxRqQsB0+cuXpO/dMYitp9gD++vgsj2cOlc C6WxqwVV84amCszXsf60HgyK0uE4D97pXVZ0+jkSmytACMtCONkv638cqSR/Kni1JzOBOwoXK Vpif4npJPB/4T6A75YborMZ506IaohlARi1g5qH3/9NX8wSYSWWNw8wrtBpXyHdtXqYSnigJR oVaaPgvyRClgh8EH3O0JEBGKEROdl9USQya+L0+OYkS51Qz9Gs8MCah1nVVu+w0X52CcAuwE5 kn26wU0Ahn/YlfTL3nnMQT0eOnGRmjZIljhzycN7rImh6OrQ2WZFqZYocItbvffo4rV1BTEwM DhxiTooD4RE5gCvVaKI4UC7Bzph6/lRYs34huynrziDZK6fLhvzm5zreMP0niy7FI6xfwGE7C 8CdALv0DLI73rKyOIlV/GTX12qRGCUG+mWXgRf6s+Egb0/WHdjN9yLkGEMi3SzJHl/ni157xT yJKd2yENfnplCV5CyvZmHP8beq85b6BxSe1hQfRrc45Ib4vdgkuFNySfxr5Z/ZNWl5Ubs+Pxv Dz0ZQm3geLS+FNI0V7I0IIq46E1FCLlW1I86zntA2/dKY4ld9GeH885cG7HVE1oTQNQqJI+q+ hWdYQL0sN8aN3Y8dW0C7YeIDR/Uo+ehu7MYWrKKJ0MKcUfWRuNDwk1Lr9bKuxacZ7uAYGxhN1 juaI8Z2JHlmWd1260A4Iy/0nZqR2wUAIgTsy+3L3urlbpVnZs8=

The most important thing to note is your mail server detected this as spam, which is good. I don't know what the scale is on their spam score, but this one is a 20 with the "nemesis" anti-spam engine. Another clue is dkim=none. There are three authentication methods that mail servers use to determine legitimacy and deliverability of emails: DKIM, SPF, and DMARC. Here's more about that:
https://www.cloudflare.com/learning/email-security/dmarc-dkim-spf/

Basically, it appears as if there was no verification that email was from you, so it received a higher spam score and was sent to spam folder.

I don't see any evidence that SPF or DMARC were used, but it could be that when it failed DKIM it just stopped because it had enough info to determine its spamminess.

The last clue are the from and to servers. This was sent from smtp.4xr1.com ([27.0.234.26]). That IP address is in Singapore and the ISP is WebHorizon. The destination (you) is mx.mail.com (mxgmxus010 [74.208.5.22]). The IP location is somewhere in the Missouri/Pennsylvania area and the ISP is IONOS. So if you were sending yourself an email from the same email account, it should be coming from mx.mail.com, not 4xr1.com. That appears to be where DKIM failed the message.

 

[atikovi]

Interesting stuff. Looks like you're in a computer related field if you figured that out.