Miss Rose Farah <[email protected]>

[Faizan Docherty]

Header Analysis Quick Report
Originating IP: 66.196.81.105
Originating ISP: Yahoo!
City: Sunnyvale
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.70.51.10 with SMTP id g10csp5299243pdo;
Wed, 7 Jan 2015 00:10:46 -0800 (PST)
X-Received: by 10.66.102.1 with SMTP id fk1mr3201735pab.16.1420618245791;
Wed, 07 Jan 2015 00:10:45 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (aso-006-i414.relay.mailchannels.net. [207.210.193.23])
by mx.google.com with ESMTP id bh17si1616916pdb.105.2015.01.07.00.10.44
for <snipped>;
Wed, 07 Jan 2015 00:10:45 -0800 (PST)
Received-SPF: neutral (google.com: 207.210.193.23 is neither permitted nor denied by domain of [email protected]) client-ip=207.210.193.23;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 207.210.193.23 is neither permitted nor denied by domain of [email protected]) smtp.mail=[email protected];
dkim=fail [email protected]
X-Sender-Id: _forwarded-from|98.139.212.163
Received: from r8-chicago.webserversystems.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id 5172F120917
for <snipped>; Wed, 7 Jan 2015 08:10:43 +0000 (UTC)
X-Sender-Id: _forwarded-from|98.139.212.163
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.254.9.84])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.4.2);
Wed, 07 Jan 2015 08:10:43 GMT
X-MC-Relay: Junk
X-MailChannels-SenderId: _forwarded-from|98.139.212.163
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1420618243565:3633015660
X-MC-Ingress-Time: 1420618243564
Received: from nm4.bullet.mail.bf1.yahoo.com ([98.139.212.163]:50444)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1Y8lhQ-000BoO-57
for <snipped>; Wed, 07 Jan 2015 02:10:42 -0600
DKIM-Signature: <snipped>
Received: from [98.139.212.151] by nm4.bullet.mail.bf1.yahoo.com with NNFMP; 07 Jan 2015 08:10:39 -0000
Received: from [98.139.215.249] by tm8.bullet.mail.bf1.yahoo.com with NNFMP; 07 Jan 2015 08:10:39 -0000
Received: from [127.0.0.1] by omp1062.mail.bf1.yahoo.com with NNFMP; 07 Jan 2015 08:10:39 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 66.196.81.105; Wed, 07 Jan 2015 08:10:39 +0000
Date: Wed, 7 Jan 2015 08:10:38 +0000 (UTC)
From: Rose Farah <[email protected]>
Reply-To: Rose Farah <[email protected]>
Message-ID: <1763197760.5694830.1420618238565.JavaMail.yahoo@jws10611.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_5694829_1738562788.1420618238559"
X-Spam-Status: Yes, score=6.9
X-Spam-Score: 69
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Hello my dear, My name is miss Rose Farah,i found your contactÂ
miraculously  while browsing by trying to know if it will work for us
to know each other very well for good and reliable friendship.Please, do
not be embarrassed to see my email.I will like you to contact me through
my address Please i have a lot to share with you and hoping to hear from
you any moment from now [...]

Content analysis details: (6.9 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(kenneth_zeddy[at]yahoo.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.212.163 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.9 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'
1.0 MISSING_HEADERS Missing To: header
0.3 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
2.5 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
X-Spam-Flag: YES
Subject: ***SPAM*** Hello friend, This is miss Rose farah
X-AuthUser:

Hello my dear, My name is miss Rose Farah,i found your contact miraculously while browsing by trying to know if it will work for us to know each other very well for good and reliable friendship.Please, do not be embarrassed to see my email.I will like you to contact me through my address Please i have a lot to share with you and hoping to hear from you any moment from now