SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #255737 - OEM 6000 2Z C3

Email info

The email was sent on 2019-01-08 23:31:14 and appeared to be from 278362098@qq.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to info@hkcores.com which was the scammer's actual email address.
It was probably sent from 117.81.246.195 in Songjiang, China

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

--Mark=_6986311334931556987 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hi Sir?


Greeting!
We have deep groove ball bearing, Self-aligning roller bearing, Tapered roller bearing, Spherical Roller Bearing and etc, for sale.
Good quality, order start from one piece.
Any interesting? Please send me inquiry. thank you.



Best Regards,

Jennifer  Wu
Mobile: 0086-18721302775
Email: info@hkcores.com

--Mark=_6986311334931556987--

SpamAssassin Report (spam score: 11.1)


 pts rule                          description                                       
---- ----------------------        --------------------------------------------------
 0.0 TVD_RCVD_IP4                  Message was received from an IPv4 address         
 0.0 TVD_RCVD_IP                   Message was received from an IP address           
 1.6 SUBJ_ALL_CAPS                 Subject is all capitals                           
 0.0 FREEMAIL_FROM                 Sender email is commonly abused enduser mail      
                                   provider (278362098[at]qq.com)                    
 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are  
                                   different                                         
 1.3 RCVD_IN_RP_RNBL               RBL: Relay in RNBL,                               
                                   https://senderscore.org/blacklistlookup/          
                                   [122.114.189.151 listed in                        
                                   bl.score.senderscore.com]                         
 2.6 RCVD_IN_SBL                   RBL: Received via a relay in Spamhaus SBL         
                                   [122.114.189.151 listed in zen.spamhaus.org]      
 3.6 RCVD_IN_SBL_CSS               RBL: Received via a relay in Spamhaus SBL-CSS     
 0.0 URIBL_BLOCKED                 ADMINISTRATOR NOTICE: The query to URIBL was      
                                   blocked. See                                      
                                   http://wiki.apache.org/spamassassin/DnsBlocklists…
                                   #dnsbl-block for more information. [URIs:         
                                   hkcores.com]                                      
 0.0 PP_MIME_FAKE_ASCII_TEXT       BODY: MIME text/plain claims to be ASCII but isn't
 0.0 UNPARSEABLE_RELAY             Informational: message has unparseable relay lines
 0.0 FREEMAIL_FORGED_FROMDOMAIN    2nd level domains in From and EnvelopeFrom        
                                   freemail headers are different                    
 2.0 MIME_NO_TEXT                  No (properly identified) text body parts          



Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer