by Faizan Docherty
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 106.10.196.91
Originating ISP: Internet Content Provider
City: n/a
Country of Origin: Singapore
* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.70.51.10 with SMTP id g10csp5354482pdo;
Wed, 7 Jan 2015 04:16:35 -0800 (PST)
X-Received: by 10.70.133.98 with SMTP id pb2mr4541141pdb.137.1420632995494;
Wed, 07 Jan 2015 04:16:35 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (si-002-i29.relay.mailchannels.net. [184.154.112.194])
by mx.google.com with ESMTP id ol2si2645001pdb.162.2015.01.07.04.16.34
for <snipped>;
Wed, 07 Jan 2015 04:16:35 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=184.154.112.194;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) smtp.mail=[email protected];
dkim=fail [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=yahoo.com.sg
X-Sender-Id: _forwarded-from|106.10.148.118
Received: from r8-chicago.webserversystems.com (ip-10-237-13-110.us-west-2.compute.internal [10.237.13.110])
by relay.mailchannels.net (Postfix) with ESMTPA id CD69D4447
for <snipped>; Wed, 7 Jan 2015 12:16:32 +0000 (UTC)
X-Sender-Id: _forwarded-from|106.10.148.118
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.252.27.228])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.4.2);
Wed, 07 Jan 2015 12:16:33 GMT
X-MC-Relay: Junk
X-MailChannels-SenderId: _forwarded-from|106.10.148.118
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1420632993090:456466085
X-MC-Ingress-Time: 1420632993090
Received: from nm3-vm7.bullet.mail.sg3.yahoo.com ([106.10.148.118]:45951)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1Y8pXK-000Dzn-2U
for <snipped>; Wed, 07 Jan 2015 06:16:31 -0600
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>;
Received: from [106.10.166.61] by nm3.bullet.mail.sg3.yahoo.com with NNFMP; 07 Jan 2015 12:16:26 -0000
Received: from [106.10.150.23] by tm18.bullet.mail.sg3.yahoo.com with NNFMP; 07 Jan 2015 12:16:26 -0000
Received: from [127.0.0.1] by omp1024.mail.sg3.yahoo.com with NNFMP; 07 Jan 2015 12:16:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 106.10.196.91; Wed, 07 Jan 2015 12:16:26 +0000
Date: Wed, 7 Jan 2015 12:16:25 +0000 (UTC)
From: favour Prince <[email protected]>
Reply-To: favour Prince <[email protected]>
Message-ID: <1980002394.1798170.1420632985788.JavaMail.yahoo@jws10902g.mail.sg3.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_1798169_467051387.1420632985785"
X-Spam-Status: Yes, score=6.2
X-Spam-Score: 62
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: please contact me with ([email protected])for more chart
please contact me with ([email protected])for more chart [...]
Content analysis details: (6.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(rosalynprince25[at]yahoo.com.sg)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[106.10.148.118 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (rosalynprince25[at]yahoo.com.sg)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
2.5 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** hi my dear
X-AuthUser:
please contact me with ([email protected])for more chart
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.


