by Faizan Docherty
Sun Jan 25, 2015 6:21 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 217.12.8.245
Originating ISP: Yahoo! Europe
City: n/a
Country of Origin: United Kingdom
* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.70.51.10 with SMTP id g10csp1597489pdo;
Tue, 20 Jan 2015 15:30:13 -0800 (PST)
X-Received: by 10.68.211.104 with SMTP id nb8mr6621571pbc.29.1421796613011;
Tue, 20 Jan 2015 15:30:13 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (nov-007-i623.relay.mailchannels.net. [46.232.183.177])
by mx.google.com with ESMTP id m4si1804050pdb.61.2015.01.20.15.30.10
for <snipped>;
Tue, 20 Jan 2015 15:30:13 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=46.232.183.177;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected];
dkim=fail [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=yahoo.pt
X-Sender-Id: _forwarded-from|212.82.96.205
Received: from r8-chicago.webserversystems.com (ip-10-229-11-165.us-west-2.compute.internal [10.229.11.165])
by relay.mailchannels.net (Postfix) with ESMTPA id AA605100319
for <snipped>; Tue, 20 Jan 2015 23:29:54 +0000 (UTC)
X-Sender-Id: _forwarded-from|212.82.96.205
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.245.17.46])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.4.2);
Tue, 20 Jan 2015 23:30:06 GMT
X-MC-Relay: Junk
X-MailChannels-SenderId: _forwarded-from|212.82.96.205
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1421796595686:3880318879
X-MC-Ingress-Time: 1421796595685
Received: from nm15-vm8.bullet.mail.ir2.yahoo.com ([212.82.96.205]:51843)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1YDiF6-0000rV-9b
for <snipped>; Tue, 20 Jan 2015 17:29:53 -0600
DKIM-Signature: <snipped>
Received: from [212.82.98.54] by nm15.bullet.mail.ir2.yahoo.com with NNFMP; 20 Jan 2015 23:29:49 -0000
Received: from [212.82.98.66] by tm7.bullet.mail.ir2.yahoo.com with NNFMP; 20 Jan 2015 23:29:48 -0000
Received: from [127.0.0.1] by omp1003.mail.ir2.yahoo.com with NNFMP; 20 Jan 2015 23:29:48 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 217.12.8.245; Tue, 20 Jan 2015 23:29:48 +0000
Date: Tue, 20 Jan 2015 23:29:47 +0000 (UTC)
From: ramiro emerico <[email protected]>
Reply-To: ramiro emerico <[email protected]>
Message-ID: <1878384265.4586693.1421796587292.JavaMail.yahoo@jws11142.mail.ir2.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_4586692_787044085.1421796587290"
X-Spam-Status: Yes, score=8.1
X-Spam-Score: 81
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Name is Sr. ramiro De emerico I am from Portugal I have
been diagnosed with cancer. It has defiled all forms of medical treatment,
and right now I have only about a few months to live, according to medical
experts. I have not particularly lived my life so well, as I never really
cared for anyone (not even myself) but my business. Though I am very rich,
I was never generous; [...]
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ramiroemerico473[at]yahoo.pt)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[212.82.96.205 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (ramiroemerico473[at]yahoo.pt)
1.0 MISSING_HEADERS Missing To: header
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
2.2 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** My Name is Sr. ramiro De emerico
X-AuthUser:
My Name is Sr. ramiro De emerico
I am from Portugal I have been diagnosed with cancer. It has defiled
all forms of medical treatment, and right now I have only about a few
months to live, according to medical experts. I have not particularly
lived my life so well, as I never really cared for anyone (not even
myself) but my business. Though I am very rich, I was never generous;
I was always hostile to People and only focused on my business as that
was the only thing I cared for. But now I regret all this as I now
know that there is more to life than just wanting to have or make all
the money in the world. I believe when God gives me a second chance to
come to this world I would live my life a different way from how I
have lived it. I would want to have a Personal and Trustworthy
Relationship with you, as I intend and willing to empower the change
of ownership for the transfer of my Deposits to your personal
possession for further Investment and Charity Disbursement to the Less
Privilege and Homeless write me via my mail [email protected]
I will send you the photos of me and my very hopeless and selfish
family members, including my wife, who I learn t is getting married to
my personal friend and attorney,
Thank you for your due consideration. God be with you
Yours Brother.
Sr ramiro De emerico
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.