MYSTERY SHOPPING AGENCY <[email protected]>

Header Analysis Quick Report
Originating IP: 89.216.30.85
Originating ISP: Fixed Ip For Cable Modem Customers
City: Novi Sad
Country of Origin: Serbia
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.25.145.6 with SMTP id t6csp193679lfd;
Wed, 19 Nov 2014 23:16:25 -0800 (PST)
X-Received: by 10.68.189.67 with SMTP id gg3mr26560336pbc.158.1416467785031;
Wed, 19 Nov 2014 23:16:25 -0800 (PST)
Return-Path: <[email protected]>
Received: from mx0.tiwc.co.jp (mx0.tiwc.co.jp. [2001:2f0:89:2204:250:56ff:fe98:22])
by mx.google.com with ESMTPS id nq15si1800796pdb.212.2014.11.19.23.16.23
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Wed, 19 Nov 2014 23:16:25 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=2001:2f0:89:2204:250:56ff:fe98:22;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from aurora.tiwc.co.jp ([IPv6:2001:2f0:89:2204:250:56ff:fe93:7649])
by mx0.tiwc.co.jp (8.14.8/8.14.8 ) with ESMTP id sAK7Epea045063
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
Thu, 20 Nov 2014 16:14:51 +0900 (JST)
(envelope-from [email protected])
Message-Id: <[email protected]>
Received: from [89.216.30.85] (helo=User)
by aurora.tiwc.co.jp with esmtpa (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1XrLx2-0005W6-WC; Thu, 20 Nov 2014 16:14:51 +0900
Reply-To: <[email protected]>
From: "Timothy Cook"<[email protected]>
Subject: Personal Assistant Needed
Date: Wed, 19 Nov 2014 20:14:46 -1100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Score: 320
X-Spam-Flag: YES
X-Spam-Report: Spam detection software, running on the system "aurora.tiwc.co.jp",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hi We get hired to go to other companies and act like customers,in
order to examine services rendered by them.Once your details are confirmed
you would be funded (online wire transfer) and would be directed to offices
to either purchase or process items,then you would write comments on the
services rendered. [...]

Content analysis details: (32.0 points, 13.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
5.0 WINDOWS_CHARSET Windows-1252 message
1.9 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.1 CONTENT_TYPE_PRESENT exists:Content-Type
3.3 NSL_RCVD_HELO_USER Received from HELO User
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(timcook77[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
2.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.4 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.3 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
2.0 FORGED99 FORGED_* && BAYES_99
X-ACL-Warn: This message is marked as SPAM by the Anti-Spam System. Spam-score too high : 32.0 spam points - Please reformat your email and send again
To: undisclosed-recipients:;

Hi


We get hired to go to other companies and act like customers,in order to examine
services rendered by them.Once your details are confirmed you would be funded
(online wire transfer) and would be directed to offices to either purchase or
process items,then you would write comments on the services rendered.

Examples of comments you would forward to us after examining the offices:
#How long it took you to get serviced. #Smartness of the attendant
#Customer service professionalism #Sometimes you might be required to upset the
attendant to see how they react
#Poor services

THIS IS A WORK FROM/PART-TIME 4-6 FLEXIBLE HOURS WEEKLY AND PAYS UP TO $2000 IN
A MONTH.

FILL REQUIREMENTS TO QUALIFY:
FULL
NAME.....
ADDRESS......
CITY......
STATE......
ZIP CODE......
COUNTRY.....
PHONE NUMBERS.....
GENDER.....
OCCUPATION....
YOUR EMAIL ADDRESS.....
AGE.......
You must have a Bank Account Is Required Because Payment Will Be Sent To You Via money order or checks.

(you need to have an Instant Messenger either Yahoo or AIM to chat with us)


COMPLETE ABOVE REQUIREMENTS TO QUALIFY FOR THE POSITION,A PROPER NOTIFICATION
WOULD BE SENT TO YOU IN 24HRS, AFTER ABOVE DETAILS ARE RECEIVED.


Timothy Cook

MYSTERY SHOPPING AGENCY.