The email was sent on 2017-05-19 05:32:04 and appeared to be from email@example.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to firstname.lastname@example.org which was the scammer's actual email address.
It was probably sent from 184.108.40.206 in Yiwu, China
Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it
|X-Apparently-To:||Used when there is no 'to' field in the header, does the same thing (says what email address(es) the email is sent to||[email address removed] Fri, 19 May 2017 02:32:03 +0000|
|Return-Path:||The address the email was sent from, or at least the one this email should be 'bounced' back to if it can not be delivered. Often spammers and scammers modify the email header to set a different return-path||[email address removed]|
|X-YahooFilteredBulk:||The IP here was blacklisted by Yahoo for sending spam||220.127.116.11|
|Received-SPF:||Returns 'pass' if the email was sent legitimately, 'neutral' if the server thinks nothing is right or wrong, 'soft fail' if it's not a serious issue, 'fail' if the email was sent by an unauthorised user or IP address (often if the mail server is hacked into), 'none' if the server can't tell, 'permerror' if the mail client does not understand what the server is saying, 'temperror' if the client can't connect to the server. More info||none (domain of maystarproducts.net does not designate permitted sender hosts)|
|X-YMailISG:||A unique ID added by the Yahoo Inbound Spam Guard||xDY.uZoWLDuX9sAVIFF.EQc3UpgwzkQ_0_MkcQhtVqvNt9TJ m3_ehPqU.6.8hdY7067czvgEuKUZ7JS3TjIfnBNCUPALLiysyNmfpT0sXE5a rsvnjSNJWBAKsiuF7bT45YeB6zx_6Ini6cjCVe527.3rMScC8WK_WhcIU5GY 4rYmDY_xcHCd2YCRjDnLM.N2SGjKEFsHxd_8tMzRublz1Q3VsiPPgqluio_J QcoFZURmwkwTlXOY5DWFAd5eArt7kbWVqeSJFkPkGFDSciOZSxDPL1jHb23u bLr2V0Cd8Bxr1ABOzFyKGltYSbgwgLVOwRCMGkUxMdoYW8sxcKdZZ2CBADQL vYv.6OHGS61JZPQya2maIjEaEZgtjaDaoyHfo9Of9Ics.EIarMVSPWDTqkLM guXixE_nAFJmM2nialxyPhyvL4Z8wnjsWIGfK_SRdN9nthN9ByxpyAn6iUkl p1rWKmlLw4gbXgsPrFH6ZmJlC9ZaNzUpMpBKSgvsJ5HevL..Ax7raX_Ruff_ tH8wCxOqHjHGVmyWPYHVXjV2bhw_bwyS5.M3tvsc9T5oLBTNUZ4DI2URFB5b 81PyNKlcTryHFTPwaNp1kfrCb6U_M3ODv14Ddp_j9kGeDyqu_0swEfX9sq3D YuoRGRaBRMxDNt3v94idyTrab6ycEMUYx20m.eRQorG0GpjYIMq21ayB60bT 0crqeqj7Ub4e.O4JxJTdVgTa_sNSMjQ6W_lHHFGyZwFdRpDYD0VROdSI9otG GK96.JOqYr4lkB69veD1ysx95bMcUwjiiOc0wX4O8Lxk8yATpKU9RL5GJ5xu 9HuSXn6Yxjazq68tg1BCu22PwadU2vvKF_RlZZ0rW0.Zxt2VGwc3K8tIk_RS MK9dYmXc.HMUx2bOuo7PjmopBPw73plmdk56nIH77LU5isriXrXJukd90osd 3rbWNG7fVu7eiZ8IoM2qGb_zi1DLAnIXdSItAOM97bnVrkXaKvFe.A2WAHkU 2lWt2Nbb6Bxn9Rmdyo2hw9Jf.QlIFnwWdkoRVXP2h2ZG6lEtxHhDVQ68kyTG KQLbuGj3FGd9JSQK1e3fS5xTtAINHvj.fJtHcTTKuO5PCfV.9EXZe48hmt.Z MuBYB281DqyOtyaYA1i0pwObF0gbyQS88zHXoS08d47DWGBDmFKsc8H8I0NU MfRvOoeylGoGdp8LAxVWBgTmVmAkHcuIViHbjSHg3drhNhrU_.V.wOy8vxXd HcSsmjFqdDCmJWzUxGOf452LzG9aODR2ndCordu2LJEL2V3bhTHev22Ouokk kX9_7MtkjVX4PQSok5paPD6lDyt8anlY.lz4oaYwc20i_HT5HnTkHcSsTyUo EwXNkICIRJHDowOvZc3oLWuhOtThpMxKPm1uFOR95RrcI1H6AY24BHUShaqS yp403C60pyAKpdDDVr6jfnwVOL0H7pSvilRCvJBwpxxH3qYRtsZuwQDu35Rh 07k-|
|X-Originating-IP:||The IP address the email was originally sent from, sometimes wrong - the bottom 'Received' field in the email header is the most reliable indicator of what IP the email came from||[18.104.22.168]|
|Authentication-Results:||Returns the result given in the Received-SPF field, and says spf=pass if the email passed authentication. Also uses the DKIM signature, and equally returns dkim=pass if the DKIM signature was okay. More info||mta1011.mail.ne1.yahoo.com from=maystarproducts.net; domainkeys=neutral (no sig); from=maystargift.com; dkim=neutral (no sig)|
|Received:||Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took||from 127.0.0.1 (HELO maystarproducts.net) (22.214.171.124) by mta1011.mail.ne1.yahoo.com with SMTP; Fri, 19 May 2017 02:32:03 +0000|
|Received:||Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took||from WIN-6[127.0.0.1] by WIN-6[127.0.0.1] (SMTPD32); Thu, 18 May 2017 12:59:02 +0800|
|From:||This is the address the email was apparently sent from||[email address removed] [email address removed]|
|Subject:||The subject of the email||Cheap flat polyester lanyards from May Star|
|To:||The email address(es) the email was sent to||[email address removed]|
|Content-Type:||What type of content the email usually is, usually text/html, and what character set is used||multipart/mixed; charset=UTF-8; boundary="6=_K6BLcCh515RCFTCjaBjJnqgaqzTs6v9"|
|MIME-Version:||Included, usually 1.0, if the email or header contains any non-ASCII characters or non-text attachments, or if the email is multi-part (contains a plain text version plus an HTML one, lets the user's email client or webmail decide which version to display)||1.0|
|Sender:||The official sender of the email, can be different from the 'from' (e.g. if a company wishes to maintain that the email was officially sent by them)||[email address removed]|
|Reply-To:||This is the email address any reply would be sent to by default||[email address removed]|
|Date:||The date/time the email was sent||Thu, 18 May 2017 12:59:02 +0800|
|X-Mailer:||The software used to send the email. Spambots, including those used by scammers, often falsify this as a version of Outlook or Outlook Express to get through some spam filters||Foxmail 6, 13, 102, 15 [cn]|
|Content-Length:||The size of the email, in bytes||244706|
Good day !
Nice to know that you may need the lanyards from your website !
This is Stone from Yiwu May Star Craft & Gift Co.,Ltd , we have been a lanyards manufacturer
for more than 10 years in China , we can provide you any kinds of lanyards , such as :
rhinestone lanyards ,
polyester lanyards ,
sublimation lanyards ,
tubular lanyards ,
woven lanyards ,
zipper lanyards ,
luggage belt , dog leash , shoelace , paracords
as well as lanyards accessories , lanyard material .
You needs the lanyards , and we produce the lanyards , that is all !
Samples and pictures can be provided if request , any needs or inquiries about lanyards , just feel free to
contact me . Your soonest reply is highly appreciated , thank you for your time !
If you are not responsible for this matter , could you pls help me pass to the purchasing department or sales
department . Thank you so much !
Yours sincerely ,
Sales Manager ǀ Yiwu May Star Craft & Gift Co.,Ltd
3rd Floor,Unit 1,Building 33,Xiafan Village,Yiwu City, China
Tel : +86 579 85509593 ǀ Web : www.maystargift.com
Mob : +86 18957997600 (WhatsApp) ǀ Skype : huqungang
If you wish to unsubscribe to this email in future , just kindly let me know , I will remove you from the email list .
pts rule name description ---- ---------------------- -------------------------------------------------- 0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [126.96.36.199 listed in zen.spamhaus.org] 0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 0.1 MISSING_MID Missing Message-Id: header 1.0 MIME_NO_TEXT No (properly identified) text body parts
Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)