by Diamond
Wed Jul 03, 2013 2:03 am
Received a stupid scam email today, bad English and other distinctive features give the scammers away immediately. Here's the text:
And the headers:
Hello CXXXX XXXXXX!
MyUsaPack is seeking for Express Couriers who can help the company to provide our international package forwarding service.At the moment we have a part time vacancy (approximately10-20 hours a week, weekdays only).
Vacancy/Job Duties:-
American citizenship or real permission to operate in the United States
- Minimum years old 21-
High school degree-
Excellent/Good time management/control skills-
Must/Should be confident-
Professional attitude-
Good/Excellent communication skills-
Common PC skills
Wages starts from $14.00 per hour.We are an equal opportunity employer.To get more info, please contact our HR Department by e-mail.
And the headers:
Received: by 10.76.19.11 with SMTP id a11csp377235oae; Mon, 1 Jul 2013 10:24:32 -0700 (PDT)
X-Received: by 10.66.145.164 with SMTP id sv4mr24946159pab.46.1372699471924; Mon, 01 Jul 2013 10:24:31 -0700 (PDT)
Return-Path: <[email protected]>
Received: from bet.betweenity.com (bet.betweenity.com. [192.254.129.93]) by mx.google.com with ESMTPS id qn3si3697839pbc.152.2013.07.01.10.24.31 for <[email protected]> (version=TLSv1 cipher=RC4-SHA bits=128/128); Mon, 01 Jul 2013 10:24:31 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 192.254.129.93 as permitted sender) client-ip=192.254.129.93;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 192.254.129.93 as permitted sender) [email protected]
Received: from promusic by bet.betweenity.com with local (Exim 4.80.1) (envelope-from <[email protected]>) id 1Uthoy-0002qK-24 for [email protected];
Mon, 01 Jul 2013 10:23:24 -0700
To: [email protected]
Subject: =?UTF-8?B?WW91IGFyZSBhZnRlciBnb29kIGNhcmVlcj8=?= X-PHP-Script: promusic325.com/backup/wp.modules.php for 64.27.23.80
From: [email protected]
Reply-To: [email protected]
Errors-To: [email protected]
Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Message-Id: <[email protected]>
Date: Mon, 01 Jul 2013 10:23:24 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - bet.betweenity.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [517 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - bet.betweenity.com
X-Get-Message-Sender-Via: bet.betweenity.com: authenticated_id: promusic/only user confirmed/virtual account not confirmed
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/promusic/public_html/backup/wp.modules.php
X-Source-Dir: promusic325.com:/public_html/backup