Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD

Scam email #255431 - Dear Beloved

Email info

The email was sent on 2018-12-05 20:25:02 and appeared to be from serviceconso.purevia@equitable.fr but this address could have been spoofed.
If you replied to this email, your reply would have been sent to williamsimon@willsi.net which was the scammer's actual email address.
It was probably sent from 62.161.0.155 in Unknown, France

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Header field	Description	Value
X-Apparently-To:	Used when there is no 'to' field in the header, does the same thing (says what email address(es) the email is sent to	[email address removed] Wed, 05 Dec 2018 17:25:01 +0000
Return-Path:	The address the email was sent from, or at least the one this email should be 'bounced' back to if it can not be delivered. Often spammers and scammers modify the email header to set a different return-path	[email address removed]
X-YahooFilteredBulk:	The IP here was blacklisted by Yahoo for sending spam	62.161.7.3
Received-SPF:	Returns 'pass' if the email was sent legitimately, 'neutral' if the server thinks nothing is right or wrong, 'soft fail' if it's not a serious issue, 'fail' if the email was sent by an unauthorised user or IP address (often if the mail server is hacked into), 'none' if the server can't tell, 'permerror' if the mail client does not understand what the server is saying, 'temperror' if the client can't connect to the server. More info	none (domain of equitable.fr does not designate permitted sender hosts)
X-YMailISG:	A unique ID added by the Yahoo Inbound Spam Guard	1acP_OIWLDs2AlViklxhtrVdC_v0o0HCM4fgiU3c7lKEkmJS uD5FvQAcd6eojRPRSAwj.yGRD8cNGrXlvzrMZloX_0aTY9OrZ8mecdlkKVpo fbqvj5sgcPzkX7hm4KOxmqNLpXVZhji_h_bKvvrbuTg4le8lVOZK6ePyD86_ bBie_SUuipYiMiao8xXd599OU5pONxhieI42QHzCGNEJpvJYRLQO7l8I4XNQ BapF0NL_HCPJemsvchCG5F0fD_CPZ48Yd.Ykl6N9w3MEboyDo4WbyZViRgLC VFXqMJLPUYlfM1c7Bso3tytXM5ycuhPZSIM88cfwtHbL1GnaUJ6rtt1t2Mxo 8stUWXutUfHvwQ4enJdqfHfRFOosTa.65dl7lR8QHtb4veKO3.0Auy8ZD6me npYGXx76Is86HljMtx1G.ABBbdQ8CmIwpdPweNOz3hfb.HyHUp3eVJa5gqZR sS6IuvrCGbEfgudxofJoz0_fRWNgprsiHbCeCSr5YfeE_QYC0qmtdsultW6z .WTMihVSripA0D4QL_xJs29UMnMaLU6syPWlO83016V1M4UiKLFBxH0_X2wR zAASIj7y3bklUQ2XPC99caOenUGr5As1Tz.wnXbb0MPtPFSQVCXO8lRlDgOq RLdaUU2YXuxm3zG2VD3BCwMuLVFp36GUayO9hQSd9ASczrW8s0NO0FtNO.Ty q7QeYgdzA67CZG_MKC0HwNlTf910k0WgLbgbdW9jxOn4qKH9hUeN_rnpwu7y hTmN9HSbPSmxVP0UIBmp5yz.wLorlbD42ZDZZ4B8Czk5ovk0q7tKTVKscosJ uQIw6pjwXVBHbk6yFcLUiiIe7bZwiKy_zBz6mtfalyoQPXtgG8qn0iYj_YTb 2Occ9vgDEZZh1JTM_qLerpXKWWoTVUsW6Ng9QukZEwQQBuGv6DJiHEm2RdC2 XUASFMEDDeKQN9Vno7ntkrawcEP689WjBB3TXaZ0w13sNrrThqylvYtaq56O wvQ8c.QiLv2d_dPyz76RXTNrdh2_O1Pyw6oJ3apSyooKk.IWWUv17.zxRTmK RQ2DHSu524p4WFDp1bwlilTQTmOGhMvpnrvW2zs8RUGx7bwn9vgavdrt2L9w pKYyfcq.zRmwYv2uTWERgKPWFWr3wSyeDsN0pnPunvIIooKhYNeY92mS1eyN 6qzvOvB8sUR3kysSEnxnn3Mq
X-Originating-IP:	The IP address the email was originally sent from, sometimes wrong - the bottom 'Received' field in the email header is the most reliable indicator of what IP the email came from	[62.161.7.3]
Authentication-Results:	Returns the result given in the Received-SPF field, and says spf=pass if the email passed authentication. Also uses the DKIM signature, and equally returns dkim=pass if the DKIM signature was okay. More info	mta4051.mail.bf1.yahoo.com from=equitable.fr; domainkeys=neutral (no sig); from=equitable.fr; dkim=neutral (no sig)
Received:	Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took	from 127.0.0.1 (EHLO smtp-out05.msg.oleane.net) (62.161.7.3) by mta4051.mail.bf1.yahoo.com with SMTP; Wed, 05 Dec 2018 17:25:01 +0000
Received:	Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took	from smtp04.msg.oleane.net ([172.17.20.113]) by smtp-out05.msg.oleane.net with ESMTP id wB5HP0G4003143; Wed, 5 Dec 2018 18:25:00 +0100
Received:	Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took	from smtp04.msg.oleane.net (localhost.localdomain [127.0.0.1]) by smtp04.msg.oleane.net (MTA-AV) with ESMTP id wB5HOsBA015922; Wed, 5 Dec 2018 18:24:54 +0100
Received:	Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took	from webmail.orange-business.com (webmail02.msg.oleane.net [62.161.7.130]) (authenticated) by smtp04.msg.oleane.net (MTA) with ESMTP id wB5HOnAa015746; Wed, 5 Dec 2018 18:24:49 +0100 X-Oleane-Rep: REPA
Received:	Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took	from 195-154-56-101.rev.poneytelecom.eu ([195.154.56.101]) via rpwm05.dmz-bslb.hex.oleane.net ([62.161.0.155]) by webmail.orange-business.com with HTTP (HTTP/1.1 POST); Wed, 05 Dec 2018 18:24:50 +0100
MIME-Version:	Included, usually 1.0, if the email or header contains any non-ASCII characters or non-text attachments, or if the email is multi-part (contains a plain text version plus an HTML one, lets the user's email client or webmail decide which version to display)	1.0
Content-Type:	What type of content the email usually is, usually text/html, and what character set is used	text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding:	How the email has been encoded to comply with regulations (e.g. maximum characters per line)	7bit
Date:	The date/time the email was sent	Wed, 05 Dec 2018 18:24:50 +0100
From:	This is the address the email was apparently sent from	William Simon [email address removed]
To:	The email address(es) the email was sent to	undisclosed-recipients:;
Subject:	The subject of the email	Dear Beloved
Reply-To:	This is the email address any reply would be sent to by default	[email address removed]
Mail-Reply-To:	Same as reply-to, the email address any reply would be sent to by default	[email address removed]
Message-ID:	A unique ID assigned to the ID for reference purposes	[email address removed]
X-Sender:	Further information on the sender of an email	[email address removed]
User-Agent:	What was used to send the email, e.g. a webmail client or Microsoft Outlook	Roundcube Webmail/0.6 X-Backend: vm-mx-sophos-mta61 X-Backend: vm-mx-sophos-mta59 X-PMX-Backend: PMX 6.3.1.2588712, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2018.12.5.171517 running on vm-mx-sophos-mta61 X-PMX-Backend: PMX 6.3.1.2588712, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2018.12.5.171517 running on vm-mx-sophos-mta59 X-PMX-VirusScan: no virus found X-PMX-VirusScan: no virus found X-PFSI-Info: PMX 6.3.1.2588712, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2018.12.5.171517 (no virus found)
X-Spam-Flag:	A simple yes if the email is spam, or no if it is not	NO X-PMX-Spam: Probability=9% X-PMX-Spam: Probability=9% X-PMX-SpamScan: NO 9% X-PMX-SpamScan: NO 9% X-Orange-Auth: c2VydmljZWNvbnNvLnB1cmV2aWFAc3ByaWJveDIuZnIuZnRv
Content-Length:	The size of the email, in bytes	206

Your content is below the advert

The scam

--
Dear Beloved,

I am William Simon, I came across your email and I decided to share a
business proposal with you. Please if interested, please permit me to
write in details.

Regards,

William Simon

SpamAssassin Report (spam score: 0.3)

 pts rule                   description                                       
---- ---------------------- --------------------------------------------------
-0.0 BAYES_40               BODY: Bayes spam probability is 20 to 40% [score: 
                            0.3398]                                           
 0.0 TVD_RCVD_IP            Message was received from an IP address           
 0.0 TVD_RCVD_IP4           Message was received from an IPv4 address         
-0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2) [62.161.7.3 listed in
                            wl.mailspike.net]                                 
-0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at http://www.dnswl.org/, low  
                            trust [62.161.7.3 listed in list.dnswl.org]       
 1.0 HK_SCAM_S7             BODY: No description available.

Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)