by buried under 419s
Sat Nov 25, 2017 9:54 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 25 Nov 2017 17:49:16 -0800
Received: from [104.223.124.77] (port=37568 helo=linedsim.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eIm46-00035V-Po
for ; Sat, 25 Nov 2017 17:49:16 -0800
Received: from User (unknown [155.94.230.119])
by linedsim.com (Postfix) with ESMTPA id D8560B7E5;
Sat, 25 Nov 2017 09:04:27 -0500 (EST)
Reply-To: <[email protected]>
From: "Nathaniel Cheong"<[email protected]>
Date: Sat, 25 Nov 2017 06:04:32 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=37.1
X-Spam-Score: 371
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Contract Opportunity Commission-5% Job type-Contract [...]
Content analysis details: (37.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[104.223.124.77 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[104.223.124.77 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?104.223.124.77>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[104.223.124.77 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(nathanielchoung01[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (nathanielchoung01[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 MISSING_MID Missing Message-Id: header
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.3 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.1 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.1 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** CONTRACT OPPORTUNITY
Contract Opportunity
Commission-5%
Job type-Contract
Duration:12months
Time Required:3-5 hours per week.
Role- Account Receivable Agent.
Hello President & CEO
We are currently recruiting companies/individuals on behalf of a large steel company
located in china {China South Industries Group Corporation (CSGC)} for a number of
account receivable agents in North America. As an Account Receivable agent, you will
be responsible for collection of all account receivables due to the Company in North
America to directly support sales operations.
This position does not affect your current job or business operations.
Please email us if interested in the role or have any questions on the role.
Regards
Nathaniel Cheong
China South Industries Group Corporation (CSGC)
Please reply to this email--------- [email protected]
Envelope-to:
Delivery-date: Sat, 25 Nov 2017 17:49:16 -0800
Received: from [104.223.124.77] (port=37568 helo=linedsim.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eIm46-00035V-Po
for ; Sat, 25 Nov 2017 17:49:16 -0800
Received: from User (unknown [155.94.230.119])
by linedsim.com (Postfix) with ESMTPA id D8560B7E5;
Sat, 25 Nov 2017 09:04:27 -0500 (EST)
Reply-To: <[email protected]>
From: "Nathaniel Cheong"<[email protected]>
Date: Sat, 25 Nov 2017 06:04:32 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=37.1
X-Spam-Score: 371
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Contract Opportunity Commission-5% Job type-Contract [...]
Content analysis details: (37.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[104.223.124.77 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[104.223.124.77 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?104.223.124.77>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[104.223.124.77 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(nathanielchoung01[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (nathanielchoung01[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 MISSING_MID Missing Message-Id: header
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.3 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.1 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.1 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** CONTRACT OPPORTUNITY
Contract Opportunity
Commission-5%
Job type-Contract
Duration:12months
Time Required:3-5 hours per week.
Role- Account Receivable Agent.
Hello President & CEO
We are currently recruiting companies/individuals on behalf of a large steel company
located in china {China South Industries Group Corporation (CSGC)} for a number of
account receivable agents in North America. As an Account Receivable agent, you will
be responsible for collection of all account receivables due to the Company in North
America to directly support sales operations.
This position does not affect your current job or business operations.
Please email us if interested in the role or have any questions on the role.
Regards
Nathaniel Cheong
China South Industries Group Corporation (CSGC)
Please reply to this email--------- [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces