by buried under 419s
Mon Aug 19, 2013 6:53 pm
Return-path: >
Envelope-to:
Delivery-date: Mon, 19 Aug 2013 11:31:39 -0700
Received: from [5.237.5.138] (port=61292 helo=gmail.com)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1VBUDi-0000lr-DV
for ; Mon, 19 Aug 2013 11:31:39 -0700
Received: from [116.169.46.126] (helo=zknauabmpqox.thbikkzpmeeazv.com)
by with esmtpa (Exim 4.69)
(envelope-from )
id 1MM87A-6062hu-XN
for ; Mon, 19 Aug 2013 22:25:18 +0330
Date: Mon, 19 Aug 2013 22:25:18 +0330
From: <>
X-Mailer: The Bat! (v3.5.30) Educational
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: <
>
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary
research articles Necessary conditions: - Own a company - Be reachable on
daily basis through E-mail, phone or Skype - Proper execution of all planned
undertakings [...]
Content analysis details: (18.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: googleapp-consult.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(chromebz13[at]gmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.7 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (chromebz13[at]gmail.com)
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: googleapp-consult.com]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: googleapp-consult.com]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5833]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: googleapp-consult.com]
0.2 TAB_IN_FROM From starts with a tab
2.8 KB_DATE_CONTAINS_TAB KB_DATE_CONTAINS_TAB
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.7 KB_FAKED_THE_BAT KB_FAKED_THE_BAT
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Environmental business currently seeking representatives worldwide.
Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary research articles
Necessary conditions:
- Own a company
- Be reachable on daily basis through E-mail, phone or Skype
- Proper execution of all planned undertakings
In case if being interested, please provide:
- Name and Surname
- Age
- Telephone number (including country code)
- City and Country
- Email
Please answer to: [email protected]
Faithfully yours,
HR dept
Envelope-to:
Delivery-date: Mon, 19 Aug 2013 11:31:39 -0700
Received: from [5.237.5.138] (port=61292 helo=gmail.com)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1VBUDi-0000lr-DV
for ; Mon, 19 Aug 2013 11:31:39 -0700
Received: from [116.169.46.126] (helo=zknauabmpqox.thbikkzpmeeazv.com)
by with esmtpa (Exim 4.69)
(envelope-from )
id 1MM87A-6062hu-XN
for ; Mon, 19 Aug 2013 22:25:18 +0330
Date: Mon, 19 Aug 2013 22:25:18 +0330
From: <>
X-Mailer: The Bat! (v3.5.30) Educational
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: <
>
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary
research articles Necessary conditions: - Own a company - Be reachable on
daily basis through E-mail, phone or Skype - Proper execution of all planned
undertakings [...]
Content analysis details: (18.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: googleapp-consult.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(chromebz13[at]gmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.7 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (chromebz13[at]gmail.com)
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: googleapp-consult.com]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: googleapp-consult.com]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5833]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: googleapp-consult.com]
0.2 TAB_IN_FROM From starts with a tab
2.8 KB_DATE_CONTAINS_TAB KB_DATE_CONTAINS_TAB
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.7 KB_FAKED_THE_BAT KB_FAKED_THE_BAT
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Environmental business currently seeking representatives worldwide.
Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary research articles
Necessary conditions:
- Own a company
- Be reachable on daily basis through E-mail, phone or Skype
- Proper execution of all planned undertakings
In case if being interested, please provide:
- Name and Surname
- Age
- Telephone number (including country code)
- City and Country
Please answer to: [email protected]
Faithfully yours,
HR dept
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces