by Faizan Docherty
Tue Feb 18, 2014 2:37 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 200.195.226.6<br>Originating ISP: Commcorp Comunicacoes Ltda<br> City: Florianópolis<br>Country of Origin: Brazil<br>* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.70.126.40 with SMTP id mv8csp49139pdb;
Tue, 18 Feb 2014 08:13:28 -0800 (PST)
X-Received: by 10.50.124.131 with SMTP id mi3mr22399968igb.42.1392740007695;
Tue, 18 Feb 2014 08:13:27 -0800 (PST)
Return-Path: <[email protected]>
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com. [184.154.1.124])
by mx.google.com with ESMTPS id ix6si25596897icb.148.2014.02.18.08.13.25
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 18 Feb 2014 08:13:25 -0800 (PST)
Received-SPF: fail (google.com: domain of [email protected] does not designate 184.154.1.124 as permitted sender) client-ip=184.154.1.124;
Authentication-Results: mx.google.com;
spf=hardfail (google.com: domain of [email protected] does not designate 184.154.1.124 as permitted sender) [email protected]
Received: from s-exchange.energia.com.br ([200.195.226.6]:63432)
by r8-chicago.webserversystems.com with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1WFnIR-000EKG-EF
for <snipped>; Tue, 18 Feb 2014 10:13:24 -0600
Received: from S-EXCHANGE.energia.edu.br ([fe80::814:a6b5:5130:8f51]) by
s-exchange.energia.edu.br ([fe80::814:a6b5:5130:8f51%10]) with mapi; Tue, 18
Feb 2014 13:13:19 -0300
From: Rafael Macedo <[email protected]>
Subject: re
Thread-Topic: re
Thread-Index: Ac8sxFXfxGEYeYfRQA+tGaODhrJS5w==
Date: Tue, 18 Feb 2014 16:13:18 +0000
Message-ID: <0AEC625BDE6CA749B89C54D209B68904455EB47B@s-exchange.energia.edu.br>
Accept-Language: pt-BR, en-US
Content-Language: pt-BR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: multipart/alternative;
boundary="_000_0AEC625BDE6CA749B89C54D209B68904455EB47Bsexchangeenergi_"
MIME-Version: 1.0
X-Spam-Status: No, score=-0.1
X-Spam-Score: 0
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Wij bieden loanin:email:[email protected] Wij bieden
loanin:email:[email protected] [...]
Content analysis details: (-0.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
-0.5 CRM114_PROB_GOOD CRM114: CRM114_PROB_GOOD
X-Spam-Flag: NO
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r8-chicago.webserversystems.com
X-AntiAbuse: Original Domain - <snipped>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - energia.com.br
X-Get-Message-Sender-Via: r8-chicago.webserversystems.com: none
X-Source:
X-Source-Args:
X-Source-Dir:
Wij bieden loanin:email: [email protected]
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.