|
|
|
The email was sent on 2018-09-25 02:04:26 and appeared to be from file.o9@peoplepc.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to masglobalexpresslogstics@peoplepc.com which was the scammer's actual email address.
It was probably sent from 209.86.224.176 in Unknown, United States
Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it
pts rule description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP4 Message was received from an IPv4 address
0.0 TVD_RCVD_IP Message was received from an IP address
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit
(file.o9[at]peoplepc.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider (file.o9[at]peoplepc.com)
0.6 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [209.86.89.68 listed in
wl.mailspike.net]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust [209.86.89.68 listed in list.dnswl.org]
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score:
0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
necessarily valid
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.6 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)
