Understanding an email header

  • Thread starter Thread starter hba2pd
  • Start date Start date
H

hba2pd

Hello,

I got the following email. I would like to know whether it is a spam or
not. Where does this email come from?

Thank you,


Delivered-To: (e-mail address removed)
Received: by 10.90.72.15 with SMTP id u15cs35366aga;
Wed, 24 Jan 2007 07:19:26 -0800 (PST)
Received: by 10.78.164.13 with SMTP id m13mr665752hue.1169651965501;
Wed, 24 Jan 2007 07:19:25 -0800 (PST)
Return-Path: <[email protected]>
Received: from xxx.com (xxx.xxx.com [69.59.195.39])
by mx.google.com with ESMTP id
11si1104277hug.2007.01.24.07.19.24;
Wed, 24 Jan 2007 07:19:25 -0800 (PST)
Received-SPF: softfail (xxx.com: domain of transitioning
(e-mail address removed) does not designate 69.59.195.39 as permitted sender)
Received: from xxx.xxx.com (xxx.xxx.com [65.212.180.62])
by xxx.xxx.com (8.13.6/8.12.1) with ESMTP id l0OFJMGh013117
for <[email protected]>; Wed, 24 Jan 2007 07:19:23 -0800
Received: from xxx.com (xxx.com [209.191.88.131])
by xxx.com (8.13.8/8.13.6) with SMTP id l0OFIsdR024636
for <[email protected]>; Wed, 24 Jan 2007 07:19:11 -0800
X-Yahoo-Forwarded: from (e-mail address removed) to (e-mail address removed)
X-YahooFilteredBulk: 220.194.46.155
X-Originating-IP: [220.194.46.155]
Authentication-Results: xxx.com from=docomo.ne.jp; domainkeys=neutral
(no sig)
Received: from 220.194.46.155 (EHLO mail.101.docomo.ne.jp)
(220.194.46.155)
by mta378.mail.mud.yahoo.com with SMTP; Wed, 24 Jan 2007 07:18:36
-0800
Subject:
=?ISO-2022-JP?B?gWuNpYpPl/aIpFNOU4FsIJZGkOyXUonKgrOC8YKpgueCoILIgr2ItoLJj7WR0o/zgvCCqJdhgqmC6IK1gsSCooLcgreBQg==?=
From: (e-mail address removed)
 
hba2pd said:
I got the following email. I would like to know whether it is a spam
or not. Where does this email come from?
Click to expand...

It came from Japan (docomo.ne.jp). Do you know anyone in Japan? If not,
then it's spam.
 
Can it be from 220.194.46.155 which is said to be in China? Or can it
be from a server of docomo in China?
 
hba2pd said:
Can it be from 220.194.46.155 which is said to be in China? Or can it
be from a server of docomo in China?
Click to expand...

You're right, that's a Chinese address (China United Telecom). I missed
that line. The docomo reference appears fake.
 
Back
Top