Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD

Scam email #238822 - Get all the health benefits of cannabis without smoking

Email info

The email was sent on 2018-01-12 20:45:40 and appeared to be from Medical.Cannabis@ferpekt.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to Medical.Cannabis@ferpekt.com which was the scammer's actual email address.
It was probably sent from 165.78.119.129 in Houston, United States

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Header field	Description	Value
X-Apparently-To:	Used when there is no 'to' field in the header, does the same thing (says what email address(es) the email is sent to	[email address removed] Fri, 12 Jan 2018 17:45:39 +0000
Return-Path:	The address the email was sent from, or at least the one this email should be 'bounced' back to if it can not be delivered. Often spammers and scammers modify the email header to set a different return-path	[email address removed]
X-YahooFilteredBulk:	The IP here was blacklisted by Yahoo for sending spam	165.78.119.129
Received-SPF:	Returns 'pass' if the email was sent legitimately, 'neutral' if the server thinks nothing is right or wrong, 'soft fail' if it's not a serious issue, 'fail' if the email was sent by an unauthorised user or IP address (often if the mail server is hacked into), 'none' if the server can't tell, 'permerror' if the mail client does not understand what the server is saying, 'temperror' if the client can't connect to the server. More info	pass (domain of ferpekt.com designates 165.78.119.129 as permitted sender)
X-YMailISG:	A unique ID added by the Yahoo Inbound Spam Guard	.iU5XAIWLDvPSro7PSUqFfIAH.zKIjMBTDQzT9uL_.6npBow r2I0Ec2FWcCm6bJRwvAajtLIvHbEo3CUA4Kldzuhs1okPEHv.BCxmkTsAnOl QMIilrX4mvf.moYckMZZLK94R2nowK3H7yxhtSfgZW0OCDktZ.4xbqdUj5aR qRkizHEd8WO83SaLK_7KP1jZHdxH0XMUYbZBAVqR8A7bTgvfyN6qK2yd7Ukz CGVfHUQfhdMq3AhWUtbcTPM3uOxAqjuX6_GYfQsKPDNFjrmNXtxfNKbiM2p_ vI0TGUlaARAqhSUTj4HfirVSpWCPHLS.PrB3ffqX6Jj54g0XhNeGUr7czJgt 5W_M9ZVrKJk4wR8NksS72fGnhcOKI0Hogw2Zm8oEGaGFMlhp4CS3WuHwxlXL LawORPw8_p4ebkt47.UeIX0xkczgpvyCngX.b1VwKouZRKBNFeLuQhMzXcG3 nMMOhV918Enfw9mRlAclatYVLSCS6stTmxUBITMvtOYh4KM0e9Vs3r1mlYNQ 7.OMOSRB7VsPztSekHOTKm1tLKe8ZGo1HQrOwMiJuu1nyAWKwz9mmF0D0SNV GBP_vC_XmN._oKfccAauVy.gvLu35M5ao8aAeH8ynXfPiG6deqNrM4gUC7dI yEK8lGxUWnhNa9af9_4WDGvLvIox1U7zyd6C2phMoAMWNXxq1WExryIqcNfG zDzJrGk0OWA_NRlEveVV_3y6GV_TNfYoiycyngwoEkXRyDOz.blZluXbRDnu GLuKt4uOqGtG0h8hRS_1L9vBS7WRv5Uo6bI2F8D8yjrlNaLr9Ty1gqh1dMLg STVHKh.sak73lCaLEUa.4VzEcDG8ZJWCz7mS2kHpYhaZLNI1QZpVbSLUD.rb .sC2zQ.fBtsFLsZeMglvXE0FjfmnC6BSKMgbUVjzKbXifFdzx7OXg1KXM7IF 0ibFhkPcwBHWE3QLXV6kFDrS8Q4yFBW1Qe90YxtFQw1oidOTb7gnm3S2BXIN LTzI8TznQMEL2DHEfZZIppl75xLp7TIe9w8l1Dyf3ObaLTfOV1aqnWBqZZ.O 8z8YtdD5MYrEWIyOhy7_gsdvzaSwobY5uUpmwrZCCcrEGtWxG74x7rHC2E7. vPZFYOhXF7CX78iLZoAhJOPmhoAD80yvy.2GvQ35Pzp90.WMeN3_Y5aEua6B 1KbdW9t9GZB8lLXnuafVfxDPfHAxmgSParkv8UCD4rBs
X-Originating-IP:	The IP address the email was originally sent from, sometimes wrong - the bottom 'Received' field in the email header is the most reliable indicator of what IP the email came from	[165.78.119.129]
Authentication-Results:	Returns the result given in the Received-SPF field, and says spf=pass if the email passed authentication. Also uses the DKIM signature, and equally returns dkim=pass if the DKIM signature was okay. More info	mta4494.mail.bf1.yahoo.com from=ferpekt.com; domainkeys=pass (ok); from=ferpekt.com; dkim=permerror (future timestamp)
Received:	Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took	from 127.0.0.1 (EHLO megustads.com) (165.78.119.129) by mta4494.mail.bf1.yahoo.com with SMTP; Fri, 12 Jan 2018 17:45:39 +0000
DKIM-Signature:	Used to verify message integrity and ensure the header is not spoofed	v=1; a=rsa-sha1; c=relaxed/relaxed; d=ferpekt.com; s=gamma; t=1515782979; bh=0K5L0rf2CUIVy9CVhwxGJGnjV7U=; h=To:From; b=M720qb+895TvIVSbPVUq+GDe0BxFBAzAhOd2nktRgqBsoedIryz7Vs5eQRL090pIO u2SUy0Up6tzpgActERHqv1tdUVmcNF9LneyVz6C8/JDb9KhhvfcL+VywbdxAieyyuD UViZNDXIBof3t4JlCDcGHFgBTMHUOSwptex1aHbs=
DomainKey-Signature:	Used to verify message integrity	a=rsa-sha1; q=dns; c=nofws; s=gamma; d=ferpekt.com; h=To:From; b=hoXNMbSJ0ObdCu6v8/2jkNUscgarIa7YNBZOEl/3Fd9tr8az/jhLcN5cDgIc1hLKV fFvVTpPrJKNLNZgHbYXzsCL4IOkuqtKQukSofiKylh/Y7om6r36ixzZvn2ZP7G7Vem PPVU0w88gGNfrS6TCa+2P8fBxH38KAtdCLWLmkLA=;
To:	The email address(es) the email was sent to	[email address removed]
From:	This is the address the email was apparently sent from	"Medical Cannabis" [email address removed]
Subject:	The subject of the email	Get all the health benefits of cannabis without smoking
Date:	The date/time the email was sent	12 Jan 2018 13:49:39 -0500
Message-ID:	A unique ID assigned to the ID for reference purposes	[email address removed]
MIME-Version:	Included, usually 1.0, if the email or header contains any non-ASCII characters or non-text attachments, or if the email is multi-part (contains a plain text version plus an HTML one, lets the user's email client or webmail decide which version to display)	1.0
Content-Type:	What type of content the email usually is, usually text/html, and what character set is used	text/html;charset=UTF-8
Content-Transfer-Encoding:	How the email has been encoded to comply with regulations (e.g. maximum characters per line)	8bit
Content-Length:	The size of the email, in bytes	915

Your content is below the advert

The scam

SpamAssassin Report (spam score: )

 pts rule name undefined

---

Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from