{"id":15336,"date":"2025-03-25T10:19:46","date_gmt":"2025-03-25T17:19:46","guid":{"rendered":"https:\/\/bone-in-the-throat.com\/Blog\/?p=15336"},"modified":"2025-03-25T10:23:14","modified_gmt":"2025-03-25T17:23:14","slug":"ahhh-is-it-a-scam-or-isnt-it-a-scam-that-is-the-question","status":"publish","type":"post","link":"https:\/\/bone-in-the-throat.com\/Blog\/2025\/03\/25\/ahhh-is-it-a-scam-or-isnt-it-a-scam-that-is-the-question\/","title":{"rendered":"Ahhh, Is it a SCAM or isn&#8217;t it a SCAM? That is the question."},"content":{"rendered":"<p>I got an email yesterday. It appears to be a response to a job application.<\/p>\n<p>The English is good.\u00a0<\/p>\n<p>Had it showed up in my normal inbox, I\u2019d have been giddy. But for some reason it was in my junk mail folder.<\/p>\n<p>Hmmm. Why would that be?<\/p>\n<p>It\u2019s possible that the reason was that all CAPS subject line. That might have tripped the junk filter.<\/p>\n<p>I\u2019d have ignored it except that the rest of the message looks like a standard business email.<\/p>\n<p>Hmmm.<\/p>\n<p>Then, because I\u2019m desperate for a job, and I have nothing better to do, I looked at the routing and header information.<\/p>\n<p>That\u2019s not exactly true, I have better things to do it\u2019s just that those things aren\u2019t things I actually <em><strong>want<\/strong><\/em> to do. In other words, I\u2019m procrastinating and engaging in a bit of sophistry with myself as to the importance of determining if this is a real response.<\/p>\n<p>So I looked up the originating domain. It was registered the same day as the email was sent. Well, that\u2019s suspicious but the originating domain could just be a way for the company in question to separate recruiting email from the main corporate email.<\/p>\n<p>The company is a global enterprise, as such, I could see the logic in keeping the two separate. The newness of the domain registration could have tripped the junk mail filter. It\u2019s possible that said domain\u2019s registration had not propagated to whitelists yet.<\/p>\n<p>Inconclusive.<\/p>\n<p>I looked at the originating email server\u2019s IP address. It\u2019s in Helsinki Finland. Weird!<\/p>\n<p>Also associated with that IP are a number of complaints claiming that a lot of spam \/ scam email was coming from that particular email server. The most recent \u00a0complaint email was 3 years old. It\u2019s possible that the junk mail filter was tripped by this older data and associated black list information.<\/p>\n<p>Still inconclusive.\u00a0<\/p>\n<p>Things happen fast in the IT world and 3 years is an eternity.\u00a0<\/p>\n<p>The IP address could have been cleaned up, or reallocated, the owner might simply have misconfigured the email server and corrected the problem that was allowing SPAM mail to pass through it.<\/p>\n<p>The Domain is registered in Germany. It could be that they\u2019re using an email server in Finland. Although why not an email server in Berlin or Munich?<\/p>\n<p>Still inconclusive.<\/p>\n<p>This email has an X-Spam score of 12.5. Anything above a 5 is considered spam, that\u2019s probably why the junk mail filter reacted.<\/p>\n<p>However the X-Spam scoring system is based on previous behaviors, complaints, &amp; reliability data. This is why it\u2019s vitally important that email servers be configured properly such that unauthorized users cannot use them to send spam. It\u2019s a pain in the behind to regain your reputation after a billion spam email have been sent through your server.<\/p>\n<p>More conclusive.<\/p>\n<p>The X-Spam system isn\u2019t bad, but it can make mistakes.<\/p>\n<p>Oddly, I can\u2019t find any evidence that I\u2019ve applied to this company. That being said, if they were using a recruiting firm I wouldn\u2019t necessarily have a direct link. The position description in the message looks very much like something I would have applied to.<\/p>\n<p>So, after all of this, it comes down to faith. Not faith in the email itself but faith that my defenses are strong enough to repel an onslaught of spam from some nefarious person or persons, attempting to rip me off.<\/p>\n<p>There is one thing that caught my attention. There is IPv6 data in the email header. That makes me think the email may be legitimate. IPv6 is not something I\u2019d expect to see coming from a spammer. Not that it\u2019s impossible. I just wouldn\u2019t expect to see it coming from a teenager in their mom\u2019s basement.<\/p>\n<p>Well, Hell.<\/p>\n<p>I guess I\u2019ll check my defenses, run another header analysis and respond.<\/p>\n<p>I hate that I\u2019ve been kicked enough that I\u2019m so suspicious. But after a 5 year job search where so many scammers have wasted my time and had me jumping through hoops trying to get my personal data it just makes sense.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I got an email yesterday. It appears to be a response to a job application. The English is good.\u00a0 Had it showed up in my normal inbox, I\u2019d have been giddy. But for some reason it was in my junk mail folder. Hmmm. Why would that be? It\u2019s possible that the reason was that all &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/bone-in-the-throat.com\/Blog\/2025\/03\/25\/ahhh-is-it-a-scam-or-isnt-it-a-scam-that-is-the-question\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Ahhh, Is it a SCAM or isn&#8217;t it a SCAM? That is the question.&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15],"tags":[194],"class_list":["post-15336","post","type-post","status-publish","format-standard","hentry","category-job-search","tag-job-search"],"_links":{"self":[{"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/posts\/15336","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/comments?post=15336"}],"version-history":[{"count":2,"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/posts\/15336\/revisions"}],"predecessor-version":[{"id":15339,"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/posts\/15336\/revisions\/15339"}],"wp:attachment":[{"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/media?parent=15336"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/categories?post=15336"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bone-in-the-throat.com\/Blog\/wp-json\/wp\/v2\/tags?post=15336"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}