|
|
|
The email was sent on 2019-02-02 04:13:38 and appeared to be from ARpromos@reply.ml00.net but this address could have been spoofed.
If you replied to this email, your reply would have been sent to ARpromos@reply.ml00.net which was the scammer's actual email address.
It was probably sent from 216.39.127.57 in Unknown, United States
Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it
pts rule description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 TVD_RCVD_IP4 Message was received from an IPv4 address
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but isn't
0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
necessarily valid
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
2.0 MIME_NO_TEXT No (properly identified) text body parts Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)
