by Koraxbear
Sat Jun 21, 2014 10:02 am
Ghess what? Another Employment Money Mule! They really must be desperate for the ill gotten goods to travel from a legal bank account. Suspect a Proxy address was used here as I traced the address back to the US.
Note again if they were a large company they would have their own domain, not yahoo one and the .hk extension makes a reappearance again (Hong Kong).
Health World Marketing Service
Second Floor, Centurion House,
37, Jewry Street, EC3N 2ER, London, United Kingdom.
Health World Marketing Service is a wholly owned indigenous company based
in China, affiliated to foreign distributors through our marketing outlet
in the United Kingdom, for the distribution of our fast moving
bio-nutritional supplements. Due to the activities of few of our customers
in some locations, through uncooperative activities of their banks in
making accelerated payments to our office in the UK, we have resolved to
appoint Payment Receiving Agents for our customers.
In line with our company's vision and business plans, suitable applicants
are hereby invited to urgently fill the positions of Payment Receiving
Agents in our corporation. The appointment is for a term of six months in
the first instance; renewable subject to satisfactory performance and
diligent service. The remuneration for your service is simply a 10%
commission on every payment you shall receive on behalf of our company. Be
mindful of the fact that, it won't conflict with your present job. If you
are interested, you should reply to this notice through this email
([email protected]) stating your -
Complete Names:
Contact Address (Mailing and Residential):
Date Of Birth:
Age:
Sex:
Marital Status:
Working Experience / Position Held:
Telephone Number: / Mobile Phone Number:
Our business offers high potential for economic growth, with good returns
on dedication and competence. You will be proud to serve this company!
Signed,
Leung Yin Kow
Director - Sales & Marketing.
Note again if they were a large company they would have their own domain, not yahoo one and the .hk extension makes a reappearance again (Hong Kong).
Return-Path: <[email protected]>
Delivered-To: (removed)
Received: from mxen5.enta.net (mxen5.enta.net [78.33.48.8])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id 4240121623F0
for <(removed)>; Sat, 21 Jun 2014 09:29:08 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen5.enta.net (Postfix) with ESMTP id 136A2DED0D1
for <(removed)>; Sat, 21 Jun 2014 09:29:08 +0100 (BST)
Received: from mxen5.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 23131-03 for <(removed)>;
Sat, 21 Jun 2014 09:29:06 +0100 (BST)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.6
Received: from mail.nbu.bg (mail.nbu.bg [193.19.172.28])
by mxen5.enta.net (Postfix) with ESMTP id F0770DED0D2
for <(removed)>; Sat, 21 Jun 2014 09:29:05 +0100 (BST)
Received: from webmail.nbu.bg (localhost [127.0.0.1])
by mail.nbu.bg (Postfix) with ESMTP id 3150E59F04B0;
Sat, 21 Jun 2014 11:28:41 +0300 (EEST)
X-Virus-Status: Clean
X-Virus-Scanned: clamav-milter 0.97.8 at mail.nbu.bg
Received: from 23.81.21.46
(SquirrelMail authenticated user [email protected])
by webmail.nbu.bg with HTTP;
Sat, 21 Jun 2014 11:28:42 +0300 (EEST)
Message-ID: <[email protected]>
Date: Sat, 21 Jun 2014 11:28:42 +0300 (EEST)
Subject: ***SPAM*** An Opportunity To Better Your Life
From: "HWMS2" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.16
MIME-Version: 1.0
Content-Type: text/plain;charset=utf8
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=10.535 tagged_above=-999 required=3
tests=ADVANCE_FEE_2_NEW_FORM=2.638, DOS_FAKE_SQUIRREL=0.001,
FILL_THIS_FORM=0.001, FILL_THIS_FORM_LONG=2, FREEMAIL_FORGED_REPLYTO=2.503,
FREEMAIL_REPLYTO_END_DIGIT=0.25, MISSING_HEADERS=1.207,
REPLYTO_WITHOUT_TO_CC=1.946, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01
X-Spam-Level: **********
X-Spam-Flag: YES
To: undisclosed-recipients:;
X-Brightmail-Tracker: AAAAAiDTbTog03GQ
X-Brightmail-Tracker: AAAAAA==