Understanding an email header

[hba2pd]

Hello,

I got the following email. I would like to know whether it is a spam or
not. Where does this email come from?

Thank you,


Delivered-To: (e-mail address removed)
Received: by 10.90.72.15 with SMTP id u15cs35366aga;
Wed, 24 Jan 2007 07:19:26 -0800 (PST)
Received: by 10.78.164.13 with SMTP id m13mr665752hue.1169651965501;
Wed, 24 Jan 2007 07:19:25 -0800 (PST)
Return-Path: <[email protected]>
Received: from xxx.com (xxx.xxx.com [69.59.195.39])
by mx.google.com with ESMTP id
11si1104277hug.2007.01.24.07.19.24;
Wed, 24 Jan 2007 07:19:25 -0800 (PST)
Received-SPF: softfail (xxx.com: domain of transitioning
(e-mail address removed) does not designate 69.59.195.39 as permitted sender)
Received: from xxx.xxx.com (xxx.xxx.com [65.212.180.62])
by xxx.xxx.com (8.13.6/8.12.1) with ESMTP id l0OFJMGh013117
for <[email protected]>; Wed, 24 Jan 2007 07:19:23 -0800
Received: from xxx.com (xxx.com [209.191.88.131])
by xxx.com (8.13.8/8.13.6) with SMTP id l0OFIsdR024636
for <[email protected]>; Wed, 24 Jan 2007 07:19:11 -0800
X-Yahoo-Forwarded: from (e-mail address removed) to (e-mail address removed)
X-YahooFilteredBulk: 220.194.46.155
X-Originating-IP: [220.194.46.155]
Authentication-Results: xxx.com from=docomo.ne.jp; domainkeys=neutral
(no sig)
Received: from 220.194.46.155 (EHLO mail.101.docomo.ne.jp)
(220.194.46.155)
by mta378.mail.mud.yahoo.com with SMTP; Wed, 24 Jan 2007 07:18:36
-0800
Subject:
=?ISO-2022-JP?B?gWuNpYpPl/aIpFNOU4FsIJZGkOyXUonKgrOC8YKpgueCoILIgr2ItoLJj7WR0o/zgvCCqJdhgqmC6IK1gsSCooLcgreBQg==?=
From: (e-mail address removed)

 

[Brian Tillman]

I got the following email. I would like to know whether it is a spam
or not. Where does this email come from?

It came from Japan (docomo.ne.jp). Do you know anyone in Japan? If not,
then it's spam.

 

[hba2pd]

Can it be from 220.194.46.155 which is said to be in China? Or can it
be from a server of docomo in China?

 

[Brian Tillman]

Can it be from 220.194.46.155 which is said to be in China? Or can it
be from a server of docomo in China?

You're right, that's a Chinese address (China United Telecom). I missed
that line. The docomo reference appears fake.