by buried under 419s
Fri Aug 29, 2014 7:09 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 29 Aug 2014 02:39:58 -0700
Received: from aso-006-i405.relay.mailchannels.net ([143.95.81.34]:47043 helo=relay.mailchannels.net)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1XNIex-0005lo-0O
for ; Fri, 29 Aug 2014 02:39:58 -0700
X-Sender-Id: arvixe|x-sg-opt|108.168.250.7:/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale/mailer.php
Received: from teal.arvixe.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id 34248101B23
for <>; Fri, 29 Aug 2014 09:39:51 +0000 (UTC)
X-Sender-Id: arvixe|x-sg-opt|108.168.250.7:/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale/mailer.php
Received: from teal.arvixe.com (teal.arvixe.com [10.227.41.147])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.2.12);
Fri, 29 Aug 2014 09:39:52 GMT
X-MC-Relay: Bad
X-MailChannels-SenderId: arvixe|x-sg-opt|108.168.250.7:/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale/mailer.php
X-MailChannels-Auth-Id: arvixe
X-MC-Ingress-Time: 1409305192394
Received: from localhost.localdomain ([127.0.0.1]:59712 helo=teal.arvixe.com)
by teal.arvixe.com with smtp (Exim 4.82)
(envelope-from <[email protected]>)
id 1XNIer-0000hV-Kf
for ; Fri, 29 Aug 2014 02:39:49 -0700
Date: Fri, 29 Aug 2014 02:39:49 -0700
X-SG-User: dzclipv
X-SG-Opt: SCRIPT_FILENAME=/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale/mailer.php REQUEST_URI=/admin_area/charts/tmp-upload-images/docs.sale/mailer.php PWD=/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale REMOTE_ADDR=154.66.3.72
To:
Subject: job opening : NOS Energy Drink(R)
From: NOS ENERGY DRINK <[email protected]>
MIME-Version: 1.0
Content-Type: text/html
X-AuthUser:
X-Spam-Status: No, score=1.6
X-Spam-Score: 16
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Would You Wrap Your Car in an Advert for $300 Weekly. Reply
if interested. Best Regards, Paul Nelson. Hiring Manager, NOS Energy Drink®
[...]
Content analysis details: (1.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[143.95.81.34 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(nosenergydrinkhiring[at]gmail.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.2419]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.5 MISSING_MID Missing Message-Id: header
X-Spam-Flag: NO
Would You Wrap Your Car in an Advert for $300 Weekly. Reply if interested.
Best Regards,
Paul Nelson.
Hiring Manager,
NOS Energy Drink®
Envelope-to:
Delivery-date: Fri, 29 Aug 2014 02:39:58 -0700
Received: from aso-006-i405.relay.mailchannels.net ([143.95.81.34]:47043 helo=relay.mailchannels.net)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1XNIex-0005lo-0O
for ; Fri, 29 Aug 2014 02:39:58 -0700
X-Sender-Id: arvixe|x-sg-opt|108.168.250.7:/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale/mailer.php
Received: from teal.arvixe.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id 34248101B23
for <>; Fri, 29 Aug 2014 09:39:51 +0000 (UTC)
X-Sender-Id: arvixe|x-sg-opt|108.168.250.7:/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale/mailer.php
Received: from teal.arvixe.com (teal.arvixe.com [10.227.41.147])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.2.12);
Fri, 29 Aug 2014 09:39:52 GMT
X-MC-Relay: Bad
X-MailChannels-SenderId: arvixe|x-sg-opt|108.168.250.7:/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale/mailer.php
X-MailChannels-Auth-Id: arvixe
X-MC-Ingress-Time: 1409305192394
Received: from localhost.localdomain ([127.0.0.1]:59712 helo=teal.arvixe.com)
by teal.arvixe.com with smtp (Exim 4.82)
(envelope-from <[email protected]>)
id 1XNIer-0000hV-Kf
for ; Fri, 29 Aug 2014 02:39:49 -0700
Date: Fri, 29 Aug 2014 02:39:49 -0700
X-SG-User: dzclipv
X-SG-Opt: SCRIPT_FILENAME=/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale/mailer.php REQUEST_URI=/admin_area/charts/tmp-upload-images/docs.sale/mailer.php PWD=/home/dzclipv/public_html/admin_area/charts/tmp-upload-images/docs.sale REMOTE_ADDR=154.66.3.72
To:
Subject: job opening : NOS Energy Drink(R)
From: NOS ENERGY DRINK <[email protected]>
MIME-Version: 1.0
Content-Type: text/html
X-AuthUser:
X-Spam-Status: No, score=1.6
X-Spam-Score: 16
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Would You Wrap Your Car in an Advert for $300 Weekly. Reply
if interested. Best Regards, Paul Nelson. Hiring Manager, NOS Energy Drink®
[...]
Content analysis details: (1.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[143.95.81.34 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(nosenergydrinkhiring[at]gmail.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.2419]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.5 MISSING_MID Missing Message-Id: header
X-Spam-Flag: NO
Would You Wrap Your Car in an Advert for $300 Weekly. Reply if interested.
Best Regards,
Paul Nelson.
Hiring Manager,
NOS Energy Drink®
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces