by buried under 419s
Fri Mar 11, 2011 12:55 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 11 Mar 2011 01:55:21 -0800
Received: from [211.239.159.242] (helo=mailtong.net)
by with esmtps (TLSv1:DES-CBC3-SHA:168)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Pxz43-0002oh-Q1
for ; Fri, 11 Mar 2011 01:55:21 -0800
Received: from 70.32.43.50.rdns.nodesdirect.com (70.32.43.50.rdns.nodesdirect.com [70.32.43.50] (may be forged))
(authenticated bits=0)
by mailtong.net (8.12.5/8.12.
with ESMTP id p2B8nPBu004008;
Fri, 11 Mar 2011 17:49:28 +0900
Message-ID: <ABB21798646F42FCAC725C96F4F9FEFE@13338-VZ020>
Reply-To: "David Rodman" <[email protected]>
From: "David Rodman" <[email protected]>
Subject: URGENT JOB OFFER .
Date: Fri, 11 Mar 2011 03:46:24 -0600
Organization: Mystery Shopper company.Org
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_2055_01CBDF9E.E48D8DA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-Spam-Subject: ***SPAM*** URGENT JOB OFFER .
X-Spam-Status: Yes, score=16.5
X-Spam-Score: 165
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello , We have a mystery shopping assignment in your area
and we would like you to participate. We are accepting applications for this
job. It's fun and rewarding, and it will not affect your present work . After
you sign up you will have access to training materials. [...]
Content analysis details: (16.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[211.239.159.242 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[211.239.159.242 listed in bb.barracudacentral.org]
0.0 FREEMAIL_FROM Sender email is freemail (pym10222[at]aol.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
("david rodman" <pym10222[at]aol.com>
)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (pym10222[at]aol.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5040]
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 FILL_THIS_FORM Fill in a form with personal information
0.3 MAY_BE_FORGED Relay IP's reverse DNS does not resolve to IP
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------=_NextPart_000_2055_01CBDF9E.E48D8DA0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hello ,
We have a mystery shopping assignment in your area and we would like you to participate.
We are accepting applications for this job. It's fun and rewarding, and it will not affect your present work .
After you sign up you will have access to training materials.
Please send the information below to sign up.
1. Full Name :
2. Contact address:(Inclusive City State and Zip code)
3. Direct Telephone No:, ( Cell & Home )
4. Age:
5.Nationality :
6.Country:
7.Present Occupation:
Yours sincerely.
Person: David Rodman
Time: 24 Hours daily by e-mail
Processing Job-Unit.
Secret Shopper®
Envelope-to:
Delivery-date: Fri, 11 Mar 2011 01:55:21 -0800
Received: from [211.239.159.242] (helo=mailtong.net)
by with esmtps (TLSv1:DES-CBC3-SHA:168)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Pxz43-0002oh-Q1
for ; Fri, 11 Mar 2011 01:55:21 -0800
Received: from 70.32.43.50.rdns.nodesdirect.com (70.32.43.50.rdns.nodesdirect.com [70.32.43.50] (may be forged))
(authenticated bits=0)
by mailtong.net (8.12.5/8.12.

Fri, 11 Mar 2011 17:49:28 +0900
Message-ID: <ABB21798646F42FCAC725C96F4F9FEFE@13338-VZ020>
Reply-To: "David Rodman" <[email protected]>
From: "David Rodman" <[email protected]>
Subject: URGENT JOB OFFER .
Date: Fri, 11 Mar 2011 03:46:24 -0600
Organization: Mystery Shopper company.Org
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_2055_01CBDF9E.E48D8DA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-Spam-Subject: ***SPAM*** URGENT JOB OFFER .
X-Spam-Status: Yes, score=16.5
X-Spam-Score: 165
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello , We have a mystery shopping assignment in your area
and we would like you to participate. We are accepting applications for this
job. It's fun and rewarding, and it will not affect your present work . After
you sign up you will have access to training materials. [...]
Content analysis details: (16.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[211.239.159.242 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[211.239.159.242 listed in bb.barracudacentral.org]
0.0 FREEMAIL_FROM Sender email is freemail (pym10222[at]aol.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
("david rodman" <pym10222[at]aol.com>
)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (pym10222[at]aol.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5040]
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 FILL_THIS_FORM Fill in a form with personal information
0.3 MAY_BE_FORGED Relay IP's reverse DNS does not resolve to IP
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------=_NextPart_000_2055_01CBDF9E.E48D8DA0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hello ,
We have a mystery shopping assignment in your area and we would like you to participate.
We are accepting applications for this job. It's fun and rewarding, and it will not affect your present work .
After you sign up you will have access to training materials.
Please send the information below to sign up.
1. Full Name :
2. Contact address:(Inclusive City State and Zip code)
3. Direct Telephone No:, ( Cell & Home )
4. Age:
5.Nationality :
6.Country:
7.Present Occupation:
Yours sincerely.
Person: David Rodman
Time: 24 Hours daily by e-mail
Processing Job-Unit.
Secret Shopper®
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces