Zen Xuji Umeko [email protected] [email protected]

Header Analysis Quick Report
Originating IP: 104.243.24.169
Originating ISP: Black Fox Limited
City: Wilkes Barre
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.39.129 with SMTP id n123csp184979ion;
Fri, 30 Oct 2015 20:29:08 -0700 (PDT)
X-Received: by 10.28.137.194 with SMTP id l185mr1318534wmd.21.1446262148156;
Fri, 30 Oct 2015 20:29:08 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mediawebs3.ran.es ([212.34.137.21])
by mx.google.com with ESMTPS id h2si13018599wjx.151.2015.10.30.20.29.07
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Fri, 30 Oct 2015 20:29:08 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 212.34.137.21 as permitted sender) client-ip=212.34.137.21;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 212.34.137.21 as permitted sender) [email protected]
Message-Id: <[email protected]>
Received: from [104.243.24.169] (helo=User)
by mediawebs3.ran.es with esmtpa (Exim 4.77)
(envelope-from <[email protected]>)
id 1ZsMqb-0007Nc-Iz; Sat, 31 Oct 2015 04:28:53 +0100
Reply-To: <[email protected]>
From: "Hong Kong HCL Technologies"<[email protected]>
Subject: Work from home. Hurry now!!!!
Date: Fri, 30 Oct 2015 20:28:54 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Dear Candidates,

Amazing work from home offer! Hong Kong HCL Technologies Ltd needs Foreign Representatives/ Payment Managers for 2015/2016 business year.

If you are interested in this amazing offer, forward to us the Information below:

(I)Your Full Names;
(II)Mailing address,
(III)Phone Number:
(IV)Present job; (And Position Held )
(V)Age:
(VI)Mode of Identification (If Any)
(VII)Bank name;(If Any)

Please send the above details to me via the below details,

Best Regards,
Mr. Zen Xuji Umeko
Online Recruitment Manager

Hong Kong HCL Technologies.
E-mail: [email protected]
Tel : +852 2887 8422
Fax : +852 2512 4070

For the site killers:

Domain Name: HUNGHUACCL.COM
Registrar: NAMESILO, LLC
Sponsoring Registrar IANA ID: 1479
Whois Server: whois.namesilo.com
Referral URL: http://www.namesilo.com
Name Server: DNS1.YANDEX.NET
Name Server: DNS2.YANDEX.NET
Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Updated Date: 28-jul-2015
Creation Date: 28-jul-2015
Expiration Date: 28-jul-2016
Mail Exchangers
mx.yandex.net(10)

I am updating with more details.

Delivered-To: <snipped>
Received: by 10.37.116.18 with SMTP id p18csp1320403ybc;
Mon, 2 Nov 2015 08:26:06 -0800 (PST)
X-Received: by 10.107.6.195 with SMTP id f64mr21952788ioi.46.1446481566032;
Mon, 02 Nov 2015 08:26:06 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-ig0-x22d.google.com (mail-ig0-x22d.google.com. [2607:f8b0:4001:c05::22d])
by mx.google.com with ESMTPS id f9si12695951igc.5.2015.11.02.08.26.05
for <snipped>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 02 Nov 2015 08:26:06 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::22d as permitted sender) client-ip=2607:f8b0:4001:c05::22d;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::22d as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by <snipped>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=pQNrIR9SVgmvd6j0Ms9KWhLbs1gGEhW9YMG7CH84/B0=;
b=WwLVCaYUhokVUOmpCK61mVgYp/jQ7vNwUiUZLAPMSmg1SZI7n6ljdCW4Q4LZlOuV8B
gANBFroxNcyuMsLfBjEiVmZ0eFXRN6em+Qix+WTUuIGRhnEkhKpFKVopnxu6n8CNbNRH
wwU+MCDt8VAiIk+dlCWhPFIRaNidsFyKBW3FMiv2JPzthSfGRNg+RwIGl+GX4gP1bk5a
kPY1Ok79KAhnDTJG24y0R9bIG6MZxXBuDCnn3YHSfQkItw40lTbamUndIgN8zjH5KRNm
eN15jW5Op5aQYlTNrHkf5irYKU1sQCKFbn0q5wiJCBFReYnDki+YONy1Bo7YiN5eUyK9
iy4g==
MIME-Version: 1.0
X-Received: by 10.50.111.137 with SMTP id ii9mr12780009igb.91.1446481565746;
Mon, 02 Nov 2015 08:26:05 -0800 (PST)
Received: <snipped>
In-Reply-To: <CAOXAHu2SUR=d5B9QuF3wXXeU83HoxXzu_oXm+jYPxUyNUo3vAg@mail.gmail.com>
References: <CAOXAHu2SUR=d5B9QuF3wXXeU83HoxXzu_oXm+jYPxUyNUo3vAg@mail.gmail.com>
Date: Mon, 2 Nov 2015 11:26:05 -0500
Message-ID: <CAB93CXS_4z0Tu1Sai2xFXS877T9MeasHKcu2=eg9mOLt0DcrGw@mail.gmail.com>
Subject: Re: Re
From: Zen Xuji Umeko <[email protected]>
To: <snipped>
Content-Type: multipart/alternative; boundary=047d7b41411ee68b5b0523913beb

As stated in my e-mail, it is a 100 percent work from home job. As an Asian corporation doing business with clients in Northern America we need the services of country representatives to act on our behalf for follow up, responding to inquiries and payment collection.

Please send requested information so that we can process your application.

Regards,
Z.X

This is a money mule scam, recieving payments on behalf of the scammer - from his illegal activities. Watch out.