by Faizan Docherty
Fri Feb 21, 2014 3:04 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.82.158.107
Originating ISP: Clients-adsl
City: Dakar
Country of Origin: Senegal
* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.70.126.40 with SMTP id mv8csp112725pdb;
Fri, 21 Feb 2014 10:45:42 -0800 (PST)
X-Received: by 10.60.70.239 with SMTP id p15mr11281778oeu.26.1393008341639;
Fri, 21 Feb 2014 10:45:41 -0800 (PST)
Return-Path: <[email protected]>
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com. [184.154.1.124])
by mx.google.com with ESMTPS id m4si7624490oel.100.2014.02.21.10.45.41
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Fri, 21 Feb 2014 10:45:41 -0800 (PST)
Received-SPF: neutral (google.com: 184.154.1.124 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=184.154.1.124;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 184.154.1.124 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.ca
Received: from nm27-vm2.bullet.mail.ne1.yahoo.com ([98.138.91.215]:34644)
by r8-chicago.webserversystems.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1WGv6S-0007mq-Iq
for <snipped>; Fri, 21 Feb 2014 12:45:40 -0600
Received: from [98.138.226.180] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 21 Feb 2014 18:45:40 -0000
Received: from [98.138.87.9] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 21 Feb 2014 18:45:40 -0000
Received: from [127.0.0.1] by omp1009.mail.ne1.yahoo.com with NNFMP; 21 Feb 2014 18:45:40 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 75899 invoked by uid 60001); 21 Feb 2014 18:45:40 -0000
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>
Received: from [41.82.158.107] by web122306.mail.ne1.yahoo.com via HTTP; Fri, 21 Feb 2014 10:45:39 PST
X-Rocket-MIMEInfo: <snipped>
X-Mailer: YahooMailWebService/0.8.177.636
Message-ID: <[email protected]>
Date: Fri, 21 Feb 2014 10:45:39 -0800 (PST)
From: Franca Achim <[email protected]>
Reply-To: Franca Achim <[email protected]>
Subject: Hello
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-140725594-545734268-1393008339=:68526"
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: hi my name is miss franca, i saw your profile and become interested
to know more about you meanwhile you can contact me with my e-mail address
([email protected]) so i can give you my picture so you can know more
about me too, thanks yours franca. [...]
Content analysis details: (4.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.91.215 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(francaachim24[at]yahoo.ca)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(franca achim <francaachim24[at]yahoo.ca>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (francaachim24[at]yahoo.ca)
2.6 FSL_MY_NAME_IS BODY: My name is ...
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
X-Spam-Flag: NO
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r8-chicago.webserversystems.com
X-AntiAbuse: Original Domain - <snipped>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.ca
X-Get-Message-Sender-Via: r8-chicago.webserversystems.com: none
X-Source:
X-Source-Args:
X-Source-Dir:
hi my name is miss franca, i saw your profile and become interested to know more about you meanwhile you can contact me with my e-mail address ([email protected]) so i can give you my picture so you can know more about me too,
thanks yours
franca.
([email protected])
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.