The email was sent on 2018-12-10 09:59:33 and appeared to be from firstname.lastname@example.org but this address could have been spoofed.
If you replied to this email, your reply would have been sent to email@example.com which was the scammer's actual email address.
It was probably sent from 22.214.171.124 in Shenzhen, China
Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it
|X-Apparently-To:||Used when there is no 'to' field in the header, does the same thing (says what email address(es) the email is sent to||[email address removed] Mon, 10 Dec 2018 06:59:32 +0000|
|Return-Path:||The address the email was sent from, or at least the one this email should be 'bounced' back to if it can not be delivered. Often spammers and scammers modify the email header to set a different return-path||[email address removed]|
|X-YahooFilteredBulk:||The IP here was blacklisted by Yahoo for sending spam||126.96.36.199|
|Received-SPF:||Returns 'pass' if the email was sent legitimately, 'neutral' if the server thinks nothing is right or wrong, 'soft fail' if it's not a serious issue, 'fail' if the email was sent by an unauthorised user or IP address (often if the mail server is hacked into), 'none' if the server can't tell, 'permerror' if the mail client does not understand what the server is saying, 'temperror' if the client can't connect to the server. More info||fail (domain of cvta.com does not designate 188.8.131.52 as permitted sender)|
|X-YMailISG:||A unique ID added by the Yahoo Inbound Spam Guard||ZgHyiXoWLDvpd8AwU82QM8t4IgvTfGukyF0IJTb4oa3bsdsx 4fuzJ1pOwh7DFpTMvuH5fJiySaEWoiLN4viEEgPZodMW5k6s9tXIEOS5sHe2 rldFNpc.lmcqKsOPy0Tq1ZcIvWGLfh60Kh3_OGqZUFZrEdeIRhhk8EoVNXZ0 3.9iyyN7x7h3XCyjiTog.TKcNj9mGROFg6S6_nu.9TmTZuncCttXZe6MAl1L Vjqe44caztI_y8RsVaCA4dDzFAMd3q9pN8iZQTUknAcO9OjzzPWCikTA.9gC W_50KjJrmclgwn73JA.3bWJouwE6WfwUoQTD4zQnWz83r3fx7AyjA_i3qxyi BvoNas3WmU_gwkcmLDnTivP2Z9P3JcpNdTX_Mn928SDGb0EVR7hYKzYfpX2m WkY65.csKkbQxrC4e_tDGBFhj_3l.CZotBDZtKDXKf7o.HHkLQFh2jxhMKHs 1pym788M.bvNA9cUAc0aSkCQnSy061vGEnwX439fpuS2BezOpLaCWUB0ckPr iyIoISXPylG7lLLe3sms7B1pwy_cx1O.xzCvJMgJaX3Oj8a7klQ5KCZXQ7LC UMZUPHLDdjZBH5vll0Z.Pp7.VpWRDm2u8Cz8aoXHFKtbIiHcCey.deV7ezbR L8hUR1ILwd8KgTCE4PiFCHcDLHpnqhUZj3lUNOJ4wubJvVH8eisfSw8frI.g 5HXMcX_7wMahA55b3XRhqrWqBogkUyAzGDXlS1kQSWyuP9ygf3TzUWx8Y2xp vjZQtpd4TdqbidsLrKLsb_QqI2ldbF4MV7YJ15xtgYKk4arEqcDwJGfHfDpN cwFngHStUOXJhVZkhFTxFWoy5yf8zlbaJOedjjUEfG7TpJoyBhk1otO67X.K iKBy5AkiGh7oplqBSJNTZm43_B_CyIGtT7r5IQtWDGX5Km4kgUixKgQCsJGF gb7NotiVVMZGwuWCM3ifFZ4SJe5dpZ1Bo_rDE5an1eaMxSYaix_XVbKzcT4Y U9QeWJJPdmYeWxVq2nrEOoVQaBTYHGEPtaxG3q8dL8DQjA--|
|X-Originating-IP:||The IP address the email was originally sent from, sometimes wrong - the bottom 'Received' field in the email header is the most reliable indicator of what IP the email came from||[184.108.40.206]|
|Authentication-Results:||Returns the result given in the Received-SPF field, and says spf=pass if the email passed authentication. Also uses the DKIM signature, and equally returns dkim=pass if the DKIM signature was okay. More info||mta4123.mail.gq1.yahoo.com from=cvta.com; domainkeys=neutral (no sig); from=aliyun.com; dkim=neutral (no sig)|
|Received:||Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took||from 127.0.0.1 (EHLO smtp.secureserver.net) (220.127.116.11) by mta4123.mail.gq1.yahoo.com with SMTP; Mon, 10 Dec 2018 06:59:32 +0000|
|Date:||The date/time the email was sent||Mon, 10 Dec 2018 14:59:34 +0800 (CST)|
|From:||This is the address the email was apparently sent from||pfmold [email address removed]|
|Sender:||The official sender of the email, can be different from the 'from' (e.g. if a company wishes to maintain that the email was officially sent by them)||autqoesy [email address removed]|
|To:||The email address(es) the email was sent to||sscatcher [email address removed]|
|Message-ID:||A unique ID assigned to the ID for reference purposes||[email address removed]|
|Subject:||The subject of the email||RE:sscatcher,Let's Make Your Design a Reality!|
|MIME-Version:||Included, usually 1.0, if the email or header contains any non-ASCII characters or non-text attachments, or if the email is multi-part (contains a plain text version plus an HTML one, lets the user's email client or webmail decide which version to display)||1.0|
|Content-Type:||What type of content the email usually is, usually text/html, and what character set is used||text/html; charset=UTF-8|
|Content-Transfer-Encoding:||How the email has been encoded to comply with regulations (e.g. maximum characters per line)||quoted-printable|
|Content-Length:||The size of the email, in bytes||5862|
PFMOLD is excited to work with new customers to the plastic injection industry. The moon affects her as it does a woman, he thought.
Extensive experence in working with different types of materials,industries, and
product requriements means that whatever your needs may be PF has the I did, Joe.What did you make of it, Tom?
solution.Then he was on his knees and then he rose slowly to his feet.
PF will demistify the process and empower your company to make informed and
cost effective decisions from day one. The flexible services and options will
enable your company to lower expenses and maximize your strengths.Mr. Darcy is not to be laughed at! cried Elizabeth. That is an uncommon advantage,
Please reply this email today and let's work together to make your design a reality!O1is back was as blue as a sword fish's and his belly was silver and his hide was smooth and handsome.
Thanks & Best regards
Peter JiaMaster should be soetimes blind and sometimes deaf.
PF Industry Co.,ltdNot at all, was her answer; but depend upon it, he means to be severe on us, and our surest way of disappointing him will be to ask nothing about it.
No.49,Jinkang Road,Pingshan, shenzhen, China. 518000Mrs. Philips was quite awed by such an excess of good breeding; but her contemplation of one stranger was soon put an end to by exclamations and inquiries about the other, of whom,
whatsapp: +86-18038086989and his left hand was taking all the strain and cutting badly.
None but the wearer knows where the shoe pinches. When there's no expectation, losing won't bring hurt, gaining makes you surprised.Repent,for the kingdom of heaven is near.Miss Bingley's eyes were instantly turned towards Darcy, and she had something to say to him before he had advanced many steps.
pts rule description ---- ---------------------- -------------------------------------------------- -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (pfmold[at]aliyun.com) 0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 SPF_FAIL SPF: sender does not match SPF record (fail) 3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [18.104.22.168 listed in zen.spamhaus.org] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom freemail headers are different
Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)