Company Representative scams, Payment Processing scams and other Employment scams.
by buried under 419s Tue Jul 16, 2013 11:54 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 16 Jul 2013 03:15:19 -0700
Received: from [190.80.64.227] (port=61901 helo=gol.net.gy)
by m with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1Uz2Hr-0004Ep-Gz
for ; Tue, 16 Jul 2013 03:15:19 -0700
Message-ID: <51E519DB.401040@
Date: Tue, 16 Jul 2013 02:35:00 -0800
From: <>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6
MIME-Version: 1.0
To:
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=18.4
X-Spam-Score: 184
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "=, has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary
research articles Necessary conditions: - Own a company - Be reachable on
daily basis through E-mail, phone or Skype - Proper execution of all planned
undertakings [...]

Content analysis details: (18.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(equalizedz9196[at]gmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[190.80.64.227 listed in bb.barracudacentral.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[190.80.64.227 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[190.80.64.227 listed in bl.score.senderscore.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (equalizedz9196[at]gmail.com)
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=go ... roject.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: careers-consulting.com]
1.6 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: careers-consulting.com]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: careers-consulting.com]
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8190]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?190.80.64.227>]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: careers-consulting.com]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Environmental company currently looking for partners from all over the world.

Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary research articles

Necessary conditions:
- Own a company
- Be reachable on daily basis through E-mail, phone or Skype
- Proper execution of all planned undertakings

In case if being interested, please provide:
- Name and Surname
- Age
- Telephone number (including country code)
- City and Country
- Email

Please answer to: [email protected]

Faithfully yours,
HR dept

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

by HannahsDad Tue Jul 16, 2013 6:50 pm
There is a cluster of 8 sites, the names of which do not instil confidence!

poker-roomz.com
google-consulting.com
yahoo-works.com
applejob-nl.com
google-emploi.com
lavoro-italy.com
careers-consulting.com
worlds-registrar.com

But none of them have actually been placed yet
so presumably you couldn't apply for your job as a money mule if you wanted to, because your email would bounce.

Totally unprofessional, it shouldn't be allowed.

[Edit - that just shows how much I know. The email will work fine even without a working website.]

Who is online

Users browsing this forum: ClaudeBot and 10 guests