by Diamond
Tue Jun 25, 2013 3:47 pm
After some time without scam emails, I received two at once today, both very similar and most probably sent by the same scammer. They pretend to represent a bank this time! However, lack of any information, names, phones, work from home, strange email addresses and bad English give them away.
The first one:
The headers follow:
The second one I will post just in case, as it's very similar, but not exactly the same.
The text:
And its headers:
The first one:
Hello XXX XXXXX !
An affiliate of Meta Bank is hiring for business mail registrator. This at home position requires internet access. Accounting skills are not required. Potential candidates will be expected to be of full legal age and possess United States valid physical address in order to apply. Applicant has a sense of timeliness and stringency, has ability to work independently, communicate effectively with all company levels.
If you're looking for a part-time, home-based job which will require only 1 hour on a daily base - feel free to contact with your information, such as: First and Last names and e-mail if different from this one. Our representatives will contact with you shortly.
The headers follow:
Delivered-To: [email protected]
Received: by 10.76.114.195 with SMTP id ji3csp120944oab;
Tue, 25 Jun 2013 07:14:31 -0700 (PDT)
X-Received: by 10.68.76.34 with SMTP id h2mr13682508pbw.20.1372169669881;
Tue, 25 Jun 2013 07:14:29 -0700 (PDT)
Return-Path: <[email protected]>
Received: from users110.phy.lolipop.jp (users110.phy.lolipop.jp. [210.172.144.216])
by mx.google.com with ESMTP id xx2si11759114pac.248.2013.06.25.07.14.29
for <[email protected]>;
Tue, 25 Jun 2013 07:14:29 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 210.172.144.216 as permitted sender) client-ip=210.172.144.216;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of [email protected] designates 210.172.144.216 as permitted sender) [email protected]
Received: by users110.phy.lolipop.jp (Postfix, from userid 499)
id C5C5E7464C1; Tue, 25 Jun 2013 23:14:28 +0900 (JST)
To: [email protected]
Subject: =?UTF-8?B?VmFjYW5jeSBPZmZlciBJbmZvcm1hdGlvbg==?=
From: [email protected]
Reply-To: [email protected]
Errors-To: [email protected]
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-Id: <[email protected]>
Date: Tue, 25 Jun 2013 23:14:28 +0900 (JST)
The second one I will post just in case, as it's very similar, but not exactly the same.
The text:
Hello XXXXXX XXXXXXX !
A partner of Meta Bank is hiring for business mail registrar. This at home job requires internet access. Accounting skills are not required. Potential candidates must be of full legal age and possess United States valid physical address in order to apply. Candidate should demonstrate a sense of timeliness and urgency, has ability to work independently, communicate effectively with all company levels.
If you're looking for a part-time, home-based job which will obligate only 1 hour on a daily base - feel free to reply with your information, such as: First and Last names and email if different from this one. Our managers will contact with you shortly.
And its headers:
Delivered-To: [email protected]
Received: by 10.76.114.195 with SMTP id ji3csp121537oab;
Tue, 25 Jun 2013 07:22:56 -0700 (PDT)
X-Received: by 10.66.221.132 with SMTP id qe4mr33130932pac.200.1372170175810;
Tue, 25 Jun 2013 07:22:55 -0700 (PDT)
Return-Path: <[email protected]>
Received: from outbound-ss-1164.bluehost.com (outbound-ss-1164.bluehost.com. [74.220.219.251])
by mx.google.com with SMTP id tr9si11501935pbc.193.2013.06.25.07.22.55
for <[email protected]>;
Tue, 25 Jun 2013 07:22:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 74.220.219.251 as permitted sender) client-ip=74.220.219.251;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 74.220.219.251 as permitted sender) [email protected]
Message-Id: <51c9a7bf.e9e8440a.7a2e.fffffac5SMTPIN_ADDED_MISSING@mx.google.com>
Received: (qmail 31087 invoked by uid 0); 25 Jun 2013 14:22:55 -0000
Received: from unknown (HELO box685.bluehost.com) (66.147.244.185)
by soproxy4.bluehost.com with SMTP; 25 Jun 2013 14:22:55 -0000
Received: from localhost ([127.0.0.1]:47124 helo=box685.bluehost.com)
by box685.bluehost.com with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1UrU8w-0003Dp-0V
for [email protected]; Tue, 25 Jun 2013 08:22:55 -0600
Date: Tue, 25 Jun 2013 08:22:49 -0600
To: [email protected]
Subject: =?UTF-8?B?V29yayBndWlkYW5jZS4=?=
X-PHP-Script: http://www.chapa-de.org/chapaadmin/wp.modules.php for 64.27.23.80
From: [email protected]
Reply-To: [email protected]
Errors-To: [email protected]
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Identified-User: {:box685.bluehost.com:chapadeo:box685.bluehost.com} {sentby:program running on server}
