by buried under 419s
Fri Aug 02, 2013 7:16 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 02 Aug 2013 11:37:06 -0700
Received: from [201.183.194.197] (port=61219 helo=host-201-183-194-197.ecutel.net)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1V5KDn-0006ux-8Z
for ; Fri, 02 Aug 2013 11:37:06 -0700
Message-ID: <51FCE152.209060@s>
Date: Fri, 2 Aug 2013 19:59:24 +0100
From: <>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6
MIME-Version: 1.0
To: <>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary
research articles Necessary conditions: - Own a company - Be reachable on
daily basis through E-mail, phone or Skype - Proper execution of all planned
undertakings [...]
Content analysis details: (16.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: googleapps-consult.com]
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(twanginggpn74[at]gmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[201.183.194.197 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?201.183.194.197>]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[201.183.194.197 listed in zen.spamhaus.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (twanginggpn74[at]gmail.com)
1.6 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: googleapps-consult.com]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: googleapps-consult.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: googleapps-consult.com]
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8526]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Environmental organization aggressively recruiting partners worldwide.
Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary research articles
Necessary conditions:
- Own a company
- Be reachable on daily basis through E-mail, phone or Skype
- Proper execution of all planned undertakings
In case if being interested, please provide:
- Name and Surname
- Age
- Telephone number (including country code)
- City and Country
- Email
Please answer to: [email protected]
Faithfully yours,
HR dept
Envelope-to:
Delivery-date: Fri, 02 Aug 2013 11:37:06 -0700
Received: from [201.183.194.197] (port=61219 helo=host-201-183-194-197.ecutel.net)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1V5KDn-0006ux-8Z
for ; Fri, 02 Aug 2013 11:37:06 -0700
Message-ID: <51FCE152.209060@s>
Date: Fri, 2 Aug 2013 19:59:24 +0100
From: <>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6
MIME-Version: 1.0
To: <>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary
research articles Necessary conditions: - Own a company - Be reachable on
daily basis through E-mail, phone or Skype - Proper execution of all planned
undertakings [...]
Content analysis details: (16.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: googleapps-consult.com]
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(twanginggpn74[at]gmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[201.183.194.197 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?201.183.194.197>]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[201.183.194.197 listed in zen.spamhaus.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (twanginggpn74[at]gmail.com)
1.6 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: googleapps-consult.com]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: googleapps-consult.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: googleapps-consult.com]
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8526]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Environmental organization aggressively recruiting partners worldwide.
Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary research articles
Necessary conditions:
- Own a company
- Be reachable on daily basis through E-mail, phone or Skype
- Proper execution of all planned undertakings
In case if being interested, please provide:
- Name and Surname
- Age
- Telephone number (including country code)
- City and Country
Please answer to: [email protected]
Faithfully yours,
HR dept
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces