by buried under 419s
Thu Aug 22, 2013 10:05 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 22 Aug 2013 18:23:12 -0700
Received: from [14.97.171.116] (port=12704 helo=static-116.171.97.14-tataidc.co.in)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1VCg5j-0006yO-FA
for ; Thu, 22 Aug 2013 18:23:12 -0700
Received: from [158.55.111.158] (helo=pmqcoat.pwvptgnpwtzrn.com)
by static-116.171.97.14-tataidc.co.in with esmtpa (Exim 4.69)
(envelope-from )
id 1MMIXY-5024zs-IB
for ; Thu, 22 Aug 2013 17:48:29 -0800
Date: Thu, 22 Aug 2013 17:48:29 -0800
From: <>
X-Mailer: The Bat! (v3.81.14 Beta) Professional
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: <>
MIME-Version: 1.0
Content-Type: text/html;
charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=15.2
X-Spam-Score: 152
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary
research articles Necessary conditions: - Own a company - Be reachable on
daily basis through E-mail, phone or Skype - Proper execution of all planned
undertakings [...]
Content analysis details: (15.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(opossumd6[at]gmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[14.97.171.116 listed in bb.barracudacentral.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=st ... roject.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (opossumd6[at]gmail.com)
1.6 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: worlds-trade.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: worlds-trade.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5267]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: worlds-trade.com]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** We are actively looking for individuals willing to work as representatives of our environmental organization worldwide.
Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary research articles
Necessary conditions:
- Own a company
- Be reachable on daily basis through E-mail, phone or Skype
- Proper execution of all planned undertakings
In case if being interested, please provide:
- Name and Surname
- Age
- Telephone number (including country code)
- City and Country
- Email
Please answer to: [email protected]
Faithfully yours,
HR dept
Envelope-to:
Delivery-date: Thu, 22 Aug 2013 18:23:12 -0700
Received: from [14.97.171.116] (port=12704 helo=static-116.171.97.14-tataidc.co.in)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1VCg5j-0006yO-FA
for ; Thu, 22 Aug 2013 18:23:12 -0700
Received: from [158.55.111.158] (helo=pmqcoat.pwvptgnpwtzrn.com)
by static-116.171.97.14-tataidc.co.in with esmtpa (Exim 4.69)
(envelope-from )
id 1MMIXY-5024zs-IB
for ; Thu, 22 Aug 2013 17:48:29 -0800
Date: Thu, 22 Aug 2013 17:48:29 -0800
From: <>
X-Mailer: The Bat! (v3.81.14 Beta) Professional
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: <>
MIME-Version: 1.0
Content-Type: text/html;
charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=15.2
X-Spam-Score: 152
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary
research articles Necessary conditions: - Own a company - Be reachable on
daily basis through E-mail, phone or Skype - Proper execution of all planned
undertakings [...]
Content analysis details: (15.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(opossumd6[at]gmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[14.97.171.116 listed in bb.barracudacentral.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=st ... roject.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (opossumd6[at]gmail.com)
1.6 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: worlds-trade.com]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: worlds-trade.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5267]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: worlds-trade.com]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** We are actively looking for individuals willing to work as representatives of our environmental organization worldwide.
Environmental enterprise searching for representation internationally
5% commission on 200K cash flow originated from promotion and sales of proprietary research articles
Necessary conditions:
- Own a company
- Be reachable on daily basis through E-mail, phone or Skype
- Proper execution of all planned undertakings
In case if being interested, please provide:
- Name and Surname
- Age
- Telephone number (including country code)
- City and Country
Please answer to: [email protected]
Faithfully yours,
HR dept
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces