by blanky78
Tue Feb 04, 2014 11:13 am
Hi all,
I can usually tell which emails are scams and which are not, but I'm not too sure about this one. It does seem a little suspicious to me, as it doesnt sound official even and it is very short. Here is the header:
From Stephen Turner Mon Feb 3 16:44:47 2014
X-Apparently-To: [email protected] via 188.125.83.172; Mon, 03 Feb 2014 08:44:49 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 72.167.180.18
Received-SPF: none (domain of stephenturner.biz does not designate permitted sender hosts)
X-YMailISG: c2iLF64WLDtMafvLMgNhuDYnCawop53vFsiV286hJzhSDBSf
LyjKGRCpdDaq0CYC9OoPCC4FenKp39SJCXyYkEXKdz5aJS61cw6gKSYpIN82
Z6wDLbsEXa.c5Rf7VJF_1CGdhvfCH_thDQY42BhAlVraOKpVW.aYE_qzfPHi
0hndd2hN59G.Z5yfecW0iXD9kCAYfsxMLdwt1F_zU3qtMlV6idXwTNpfXjVV
ogRTbGX0XYJhAgZlPN1jgEAw6Sep4YdVy7AI.gx5matm16whi1koLxigh9wL
2TDt4MSvpjew2_qRoyRx4aU.NE1yCoP2tQjssFuUuj9DYsmVmRrFW3eWWy6a
FWzx0Nf3Mk0ZUeERjnZ.GOaNn5wfDm.KPpK..MwaTwGTOXxztj2Uxgysk0lU
iTI30C4IcCOX.LZ4CwuZO0rpn5VHyR3LY5MHKCAwYkkAf43HvztQC6Z.zTEi
ZKISUCtrefsXc3JJSgxWker2P00SLBvdt69YTXfIrfkeVO9uKhalVvu.J79.
lmO77KNDxG4ybz47NyPivpHAa0SvXvApVF7_Ls8WZKIB7ylc2aC2kpWB4ZXh
659IZkRh4deAzakg_38zoZupyUCdNSWz6TZuIpPoG38wmnmw2SlATFoji3e0
9mBWpHktYvM698Z2MG_2SYK9pHQ.q_NyzYnXLEwZK.EuKlA791IBZOfHsEKg
m9CsDqE8cZ_hy1k7b_ddNGRZa6SOnBkBHExncTjgMrnjDn7SM250kH6npv45
2jAYWxzjxEQitIb438etQG1t8pBCytRfvTCrAQuSc02aQQ8HrhwFzOK9mGga
HNWL9OvbyIqL11ratcxkBOmLFH8BjwlklwlJ3Dsyqh8sKjjaWSt9LoVtZmeT
fQG5ctGBJ9zS.Uy2w7NkPRMnDwPZq92AkdXlZYRPrkpkTUbS5qfopK5xb5JF
RrHFo9900tz.1zfy4OCJRyOWk9OJevejVEYiWXek8l2RwZNkn0nb77a0OG3X
m07worIIm4knLwGnw6ew.WwKd0t82zXj2nKHcp9rGIfm43ubmKO5Eh88JrPE
BM.p5X7KyGWikTR_QvxblnM8po_xOj2cCYSSvbnhWteQmNVuyztZElK5kzJM
1qOQHLHx8oBbVFk3kcZbrAVY4us_usfjA2T.3NpqA8_Us3Tl4JpLYoFS9dpy
AAJP_XcZ.Drcbwbi5wbPMVCDiyADZaiSFIeER16Utu6Jzp2tAUlD2vUeIIyT
hb9eLkOo7JQetPe1bdoNEYOVYVR_0Yk2Ou5qN2tyuq3xljkBttn0_sAHHvua
HQNx9FIDKHv_RPC5Qcs4EayUJdXePvrItBJrizRmVPGCEc6JWFl0FIiS7bEI
EM5VdjbcyXD6SCFe6Ol9Gv0bwFRiKkx6mlc8sHNXAijLfnkAOnmjtx6ENKDZ
qyvcLDhG26IBgCURfsIGoHF59aLiTyhzJ9vLbz.izr4koYhqLTTZy0Am
X-Originating-IP: [72.167.180.18]
Authentication-Results: mta1316.mail.bf1.yahoo.com from=stephenturner.biz; domainkeys=neutral (no sig); from=stephenturner.biz; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO p3plex1out02.prod.phx3.secureserver.net) (EHLO mta1316.mail.bf1.yahoo.com) (72.167.180.18)
by mta1316.mail.bf1.yahoo.com with SMTP; Mon, 03 Feb 2014 08:44:48 -0800
Received: (qmail 12896 invoked from network); 3 Feb 2014 16:44:48 -0000
Received: from unknown (HELO p3plex2out03.prod.phx3.secureserver.net) (184.168.131.16)
by p3plex1out02.prod.phx3.secureserver.net with SMTP; 3 Feb 2014 16:44:48 -0000
Received: from P3PWEX4HT001.ex4.secureserver.net ([72.167.83.21])
by p3plex2out03.prod.phx3.secureserver.net with secureserver.net
id Msko1n0010TcVxU01skoNL; Mon, 03 Feb 2014 09:44:48 -0700
Received: from P3PWEX4MB002.ex4.secureserver.net ([169.254.9.97]) by
P3PWEX4HT001.ex4.secureserver.net ([72.167.83.21]) with mapi id
14.03.0123.003; Mon, 3 Feb 2014 09:44:48 -0700
From: Stephen Turner <[email protected]>
To: "[email protected]" <[email protected]>
Subject: Your CV
Thread-Topic: Your CV
Thread-Index: Ac8gLbYOdf9+PkqgQ5a9IYhr/pvCdQ==
Date: Mon, 3 Feb 2014 16:44:47 +0000
Message-ID: <1623D2969278A34AAED38BC7AE8AF21E3A88A5@P3PWEX4MB002.ex4.secureserver.net>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [176.254.61.201]
Content-Type: multipart/alternative;
boundary="_000_1623D2969278A34AAED38BC7AE8AF21E3A88A5P3PWEX4MB002ex4se_"
MIME-Version: 1.0
Content-Length: 26759
And the message:
Good Afternoon,
Re: Your CV Details,
Having seen your CV details, you might be interested in a Career Opportunity with our Company.
Please request us to email our information letter and an invitation to meet the Company.
Please include the best number to contact you, and times available.
Regards
Stephen Turner
www.StephenTurner.Biz
If you don't want to receive any more emails from us, you can click here to unsubscribe
It most likely probably is a scam, something about the way its worded sounds odd...
I can usually tell which emails are scams and which are not, but I'm not too sure about this one. It does seem a little suspicious to me, as it doesnt sound official even and it is very short. Here is the header:
From Stephen Turner Mon Feb 3 16:44:47 2014
X-Apparently-To: [email protected] via 188.125.83.172; Mon, 03 Feb 2014 08:44:49 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 72.167.180.18
Received-SPF: none (domain of stephenturner.biz does not designate permitted sender hosts)
X-YMailISG: c2iLF64WLDtMafvLMgNhuDYnCawop53vFsiV286hJzhSDBSf
LyjKGRCpdDaq0CYC9OoPCC4FenKp39SJCXyYkEXKdz5aJS61cw6gKSYpIN82
Z6wDLbsEXa.c5Rf7VJF_1CGdhvfCH_thDQY42BhAlVraOKpVW.aYE_qzfPHi
0hndd2hN59G.Z5yfecW0iXD9kCAYfsxMLdwt1F_zU3qtMlV6idXwTNpfXjVV
ogRTbGX0XYJhAgZlPN1jgEAw6Sep4YdVy7AI.gx5matm16whi1koLxigh9wL
2TDt4MSvpjew2_qRoyRx4aU.NE1yCoP2tQjssFuUuj9DYsmVmRrFW3eWWy6a
FWzx0Nf3Mk0ZUeERjnZ.GOaNn5wfDm.KPpK..MwaTwGTOXxztj2Uxgysk0lU
iTI30C4IcCOX.LZ4CwuZO0rpn5VHyR3LY5MHKCAwYkkAf43HvztQC6Z.zTEi
ZKISUCtrefsXc3JJSgxWker2P00SLBvdt69YTXfIrfkeVO9uKhalVvu.J79.
lmO77KNDxG4ybz47NyPivpHAa0SvXvApVF7_Ls8WZKIB7ylc2aC2kpWB4ZXh
659IZkRh4deAzakg_38zoZupyUCdNSWz6TZuIpPoG38wmnmw2SlATFoji3e0
9mBWpHktYvM698Z2MG_2SYK9pHQ.q_NyzYnXLEwZK.EuKlA791IBZOfHsEKg
m9CsDqE8cZ_hy1k7b_ddNGRZa6SOnBkBHExncTjgMrnjDn7SM250kH6npv45
2jAYWxzjxEQitIb438etQG1t8pBCytRfvTCrAQuSc02aQQ8HrhwFzOK9mGga
HNWL9OvbyIqL11ratcxkBOmLFH8BjwlklwlJ3Dsyqh8sKjjaWSt9LoVtZmeT
fQG5ctGBJ9zS.Uy2w7NkPRMnDwPZq92AkdXlZYRPrkpkTUbS5qfopK5xb5JF
RrHFo9900tz.1zfy4OCJRyOWk9OJevejVEYiWXek8l2RwZNkn0nb77a0OG3X
m07worIIm4knLwGnw6ew.WwKd0t82zXj2nKHcp9rGIfm43ubmKO5Eh88JrPE
BM.p5X7KyGWikTR_QvxblnM8po_xOj2cCYSSvbnhWteQmNVuyztZElK5kzJM
1qOQHLHx8oBbVFk3kcZbrAVY4us_usfjA2T.3NpqA8_Us3Tl4JpLYoFS9dpy
AAJP_XcZ.Drcbwbi5wbPMVCDiyADZaiSFIeER16Utu6Jzp2tAUlD2vUeIIyT
hb9eLkOo7JQetPe1bdoNEYOVYVR_0Yk2Ou5qN2tyuq3xljkBttn0_sAHHvua
HQNx9FIDKHv_RPC5Qcs4EayUJdXePvrItBJrizRmVPGCEc6JWFl0FIiS7bEI
EM5VdjbcyXD6SCFe6Ol9Gv0bwFRiKkx6mlc8sHNXAijLfnkAOnmjtx6ENKDZ
qyvcLDhG26IBgCURfsIGoHF59aLiTyhzJ9vLbz.izr4koYhqLTTZy0Am
X-Originating-IP: [72.167.180.18]
Authentication-Results: mta1316.mail.bf1.yahoo.com from=stephenturner.biz; domainkeys=neutral (no sig); from=stephenturner.biz; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO p3plex1out02.prod.phx3.secureserver.net) (EHLO mta1316.mail.bf1.yahoo.com) (72.167.180.18)
by mta1316.mail.bf1.yahoo.com with SMTP; Mon, 03 Feb 2014 08:44:48 -0800
Received: (qmail 12896 invoked from network); 3 Feb 2014 16:44:48 -0000
Received: from unknown (HELO p3plex2out03.prod.phx3.secureserver.net) (184.168.131.16)
by p3plex1out02.prod.phx3.secureserver.net with SMTP; 3 Feb 2014 16:44:48 -0000
Received: from P3PWEX4HT001.ex4.secureserver.net ([72.167.83.21])
by p3plex2out03.prod.phx3.secureserver.net with secureserver.net
id Msko1n0010TcVxU01skoNL; Mon, 03 Feb 2014 09:44:48 -0700
Received: from P3PWEX4MB002.ex4.secureserver.net ([169.254.9.97]) by
P3PWEX4HT001.ex4.secureserver.net ([72.167.83.21]) with mapi id
14.03.0123.003; Mon, 3 Feb 2014 09:44:48 -0700
From: Stephen Turner <[email protected]>
To: "[email protected]" <[email protected]>
Subject: Your CV
Thread-Topic: Your CV
Thread-Index: Ac8gLbYOdf9+PkqgQ5a9IYhr/pvCdQ==
Date: Mon, 3 Feb 2014 16:44:47 +0000
Message-ID: <1623D2969278A34AAED38BC7AE8AF21E3A88A5@P3PWEX4MB002.ex4.secureserver.net>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [176.254.61.201]
Content-Type: multipart/alternative;
boundary="_000_1623D2969278A34AAED38BC7AE8AF21E3A88A5P3PWEX4MB002ex4se_"
MIME-Version: 1.0
Content-Length: 26759
And the message:
Good Afternoon,
Re: Your CV Details,
Having seen your CV details, you might be interested in a Career Opportunity with our Company.
Please request us to email our information letter and an invitation to meet the Company.
Please include the best number to contact you, and times available.
Regards
Stephen Turner
www.StephenTurner.Biz
If you don't want to receive any more emails from us, you can click here to unsubscribe
It most likely probably is a scam, something about the way its worded sounds odd...