The email was sent on 2019-01-08 09:34:23 and appeared to be from firstname.lastname@example.org but this address could have been spoofed.
If you replied to this email, your reply would have been sent to email@example.com which was the scammer's actual email address.
It was probably sent from 188.8.131.52 in Shenzhen, China
Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it
|X-Apparently-To:||Used when there is no 'to' field in the header, does the same thing (says what email address(es) the email is sent to||[email address removed] Tue, 08 Jan 2019 06:34:23 +0000|
|Return-Path:||The address the email was sent from, or at least the one this email should be 'bounced' back to if it can not be delivered. Often spammers and scammers modify the email header to set a different return-path||[email address removed]|
|X-YahooFilteredBulk:||The IP here was blacklisted by Yahoo for sending spam||184.108.40.206|
|Received-SPF:||Returns 'pass' if the email was sent legitimately, 'neutral' if the server thinks nothing is right or wrong, 'soft fail' if it's not a serious issue, 'fail' if the email was sent by an unauthorised user or IP address (often if the mail server is hacked into), 'none' if the server can't tell, 'permerror' if the mail client does not understand what the server is saying, 'temperror' if the client can't connect to the server. More info||temperror (encountered temporary error during SPF processing of domain of intersonicgroup.com)|
|X-YMailISG:||A unique ID added by the Yahoo Inbound Spam Guard||2r.ORuwWLDsKqpP3NopZ9pcqxxfHSJzCGg0UCMO.psxN1rYE 08YC4ewqohEan9Dd3BdnVCkiuLUqHun6gxM7DoLkZB29BZZGdpSjmxjUSv1p t505GpETJ1xXfWoEMPMC5GrG76PZTny_Vfp9RXqulTCPQTAXGaXJE92GEiGO Ucz3XzjD9njIkD9_KyxzPfzJnLdq2CaJzcSkcJ1i3iFD66yKCIZnEploOXDE b0XjgSHSL4xc19soCz0EKlnKdUxSgAUDEUCae8YY7ELaRilDkU4NJVb0ncup HpK3m0dmI0qj0zztv6O7z6pP57Tj9n2qzk3DZgtOYgTLub6kh8_vw9VPU87R EDS_fpKMe3I1atyoUqaiYl7xptEj9drmZrbYqjCVE7pstjclh.3UR7EeqVgY txJ_S6PiAqTB_Mtb8eZRfPLlLWfdNf3v0JqZYdPixanFJXolFUKpmIjrG9yI Jw6cDipN2WGZNXfGNAEjMLHscYtFym_KWssM8hoWptLSNaYdh.LxmA9HXjtp bwT9EhEF8sNdnqBMv0quC.yU8o_4Oo0qh.44RrZxHa0sE._BUZl73ShqYXpH wZUk989snUxNbaD3nND0IZypHccnZcevnAFN10kcE13PQcoEsKcvBQg.LYUa Fd3kTLxGTaK1MfBpzRLtB__ZXBGqjGAroPsT60qM1DlJi9BxQMi_N.0ivRdd PunPlnJRQ_0NnxT9035Q8mMVo1u8eSM61r2E0NEcsJr7Sfu1j2HbGlqHdHfM Ca3DvOaZC2oHGkqNP3XHAErMpOx_z0jUdYqSGk1pNXgm_PulOOKiRmaOKnNl qYU_g0moaRDqEaf_KGQ1.WUISi3YZoufzTOf2pEKB3zdglbVUBya9moIXCEz cuhHmywjR.7dgAlyo7AmIJiDgJuHziPpr.cmkSzT_UOBB2flLBXul.rQC.52 EN9QdLp4ykOmSj0rTrGMFJs5NHQNL9syUpY.iM1rCCqOWBzF4AquoUEYXHFR SJIU.6tAhioRM_TKz1hixNOrC4SYzt7k5LN7wBWsMVpRlYY2O14zRmYXwTbp _Bvm1iwpFX3uyi_bubhOA0f0bmqDX8Jd.r_jChp08GJ8s.y2e_Ny3B5Lpz1p 8ucrWS_bW0prm2GFLmeVAzwJnXh_9DsMp0fEr3FvE4AwrC.ugcP1NlT0W48q IvUanT069cePRsNwSiEPMfXW9GxmAg--|
|X-Originating-IP:||The IP address the email was originally sent from, sometimes wrong - the bottom 'Received' field in the email header is the most reliable indicator of what IP the email came from||[220.127.116.11]|
|Authentication-Results:||Returns the result given in the Received-SPF field, and says spf=pass if the email passed authentication. Also uses the DKIM signature, and equally returns dkim=pass if the DKIM signature was okay. More info||mta4195.mail.gq1.yahoo.com from=intersonicgroup.com; dkim=neutral (no sig)|
|Received:||Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took||from 127.0.0.1 (HELO intersonicgroup.com) (18.104.22.168) by mta4195.mail.gq1.yahoo.com with SMTP; Tue, 08 Jan 2019 06:34:22 +0000|
|Received:||Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took||from LAPTOP-R45V9KAU[127.0.0.1] by LAPTOP-R45V9KAU[127.0.0.1] (SMTPD32); Mon, 7 Jan 2019 20:57:07 +0800|
|MIME-Version:||Included, usually 1.0, if the email or header contains any non-ASCII characters or non-text attachments, or if the email is multi-part (contains a plain text version plus an HTML one, lets the user's email client or webmail decide which version to display)||1.0|
|Date:||The date/time the email was sent||Mon, 7 Jan 2019 20:57:07 +0800|
|Content-Type:||What type of content the email usually is, usually text/html, and what character set is used||multipart/alternative; charset=UTF-8; boundary="KaeLiknFdRV29ND5KXiZBJth=_9iEvi73P"|
|Content-Transfer-Encoding:||How the email has been encoded to comply with regulations (e.g. maximum characters per line)||8bit|
|Content-Disposition:||Email presentation style - decides if what it refers to should be displayed (email content) or available for download (attachment)||inline|
|From:||This is the address the email was apparently sent from||[email address removed] [email address removed]|
|Subject:||The subject of the email||OEM/ODM Wireless Charger Qi/CE/FCC/RoHS|
|To:||The email address(es) the email was sent to||[email address removed]|
|Sender:||The official sender of the email, can be different from the 'from' (e.g. if a company wishes to maintain that the email was officially sent by them)||[email address removed]|
|Reply-To:||This is the email address any reply would be sent to by default||[email address removed]|
|Message-ID:||A unique ID assigned to the ID for reference purposes||[email address removed]|
|X-Mailer:||The software used to send the email. Spambots, including those used by scammers, often falsify this as a version of Outlook or Outlook Express to get through some spam filters||Foxmail 6, 13, 102, 15 [cn]|
|In-Reply-To:||The message-ID of the email this one replied to||[email address removed]|
|Content-Length:||The size of the email, in bytes||3265|
pts rule description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [22.214.171.124 listed in zen.spamhaus.org] 0.0 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but isn't 0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records 0.0 TVD_SPACE_RATIO No description available.
Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)