Gulf Posts [email protected]

[email protected]

Another questionable site that is spamming. There's no registered company by this name and the only web presence they have is their own website although they claim to be the leading human resource agency in the Middle East. The site has all the usual red flags, no contact details and private one-year registration.

Header Analysis Quick Report
Originating IP: 15.11.17.18
Originating ISP: Hewlett-packard Company
City: Palo Alto
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.55.209.196 with SMTP id o65csp978579qkl;
Tue, 17 Nov 2015 18:46:24 -0800 (PST)
X-Received: by 10.68.95.129 with SMTP id dk1mr68854824pbb.23.1447814784264;
Tue, 17 Nov 2015 18:46:24 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.kvrplacements.com ([184.105.237.244])
by mx.google.com with ESMTP id pt7si978268pbb.8.2015.11.17.18.46.23
for <<snipped>>;
Tue, 17 Nov 2015 18:46:24 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) client-ip=184.105.237.244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) [email protected]
Message-Id: <564be680.a787440a.dbf44.ffffc364SMTPIN_ADDED_MISSING@mx.google.com>
Received: from WIN-DV2CNI4B47H (WIN-DV2CNI4B47H [184.105.237.244]) by mail.kvrplacements.com with SMTP;
Tue, 17 Nov 2015 18:42:13 -0800
MIME-Version: 1.0
From: "Devika Mathur" <[email protected]>
To: <snipped>
Date: 17 Nov 2015 18:42:13 -0800
Subject: Your Resume is Shortlisted
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

We have few clients in Dubai who are hiring candidates for there company
if intersted reply back

Domain Name: GULFPOSTS.COM
Registrar: WILD WEST DOMAINS, LLC
Sponsoring Registrar IANA ID: 440
Whois Server: whois.wildwestdomains.com
Referral URL: http://www.wildwestdomains.com
Name Server: NS1.GULFPOSTS.COM
Name Server: NS2.GULFPOSTS.COM
Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Updated Date: 23-sep-2015
Creation Date: 27-oct-2014
Expiration Date: 27-oct-2016

Delivered-To: <snipped>
Received: by 10.55.209.196 with SMTP id o65csp1221288qkl;
Wed, 18 Nov 2015 06:16:49 -0800 (PST)
X-Received: by 10.66.132.105 with SMTP id ot9mr2423189pab.122.1447856209044;
Wed, 18 Nov 2015 06:16:49 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.kvrplacements.com ([184.105.237.244])
by mx.google.com with ESMTP id mi6si4610631pab.85.2015.11.18.06.16.48
for <<snipped>>;
Wed, 18 Nov 2015 06:16:49 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) client-ip=184.105.237.244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) [email protected]
MIME-Version: 1.0
Date: Wed, 18 Nov 2015 06:12:31 -0800
Content-Type: text/plain;
charset=utf-8
Content-Transfer-Encoding: quoted-printable
Subject: hi
From: [email protected]
Reply-To: [email protected]
To: <snipped>
Message-ID: <58ddb9795c7641428f26d32897d73a3d@33c957a2bbb94210aee286f33c38447e>

please upload your resume on our website
http://gulfposts.com/

so that our client can evaluate

Delivered-To: <snipped>
Received: by 10.55.47.194 with SMTP id v185csp2789200qkh;
Tue, 12 Jan 2016 22:36:21 -0800 (PST)
X-Received: by 10.98.13.85 with SMTP id v82mr39804553pfi.158.1452666981947;
Tue, 12 Jan 2016 22:36:21 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.kvrplacements.com ([184.105.237.244])
by mx.google.com with ESMTP id z9si7684695par.42.2016.01.12.22.36.21
for <<snipped>>;
Tue, 12 Jan 2016 22:36:21 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) client-ip=184.105.237.244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 184.105.237.244 as permitted sender) [email protected]
Message-Id: <[email protected]>
Received: from WIN-DV2CNI4B47H (WIN-DV2CNI4B47H [184.105.237.244]) by mail.kvrplacements.com with SMTP;
Tue, 12 Jan 2016 22:32:26 -0800
MIME-Version: 1.0
From: "Devika Mathur" <[email protected]>
To: <snipped>
Date: 12 Jan 2016 22:32:26 -0800
Subject: Hi Are you looking for job in Dubai
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Are you looking for a job in Middle East, Our Clients are hiring

Delivered-To: <snipped>
Received: by 10.112.228.136 with SMTP id si8csp1194806lbc;
Sun, 7 Feb 2016 20:21:26 -0800 (PST)
X-Received: by 10.98.73.8 with SMTP id w8mr39440851pfa.106.1454905286040;
Sun, 07 Feb 2016 20:21:26 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.vortexsoftwares.com ([66.160.143.69])
by mx.google.com with ESMTP id fi15si43503584pac.191.2016.02.07.20.21.25
for <<snipped>>;
Sun, 07 Feb 2016 20:21:26 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 66.160.143.69 as permitted sender) client-ip=66.160.143.69;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 66.160.143.69 as permitted sender) [email protected]
Message-Id: <56b817c6.4fba420a.7d7c2.ffffc4feSMTPIN_ADDED_MISSING@mx.google.com>
Received: from WIN-76D0T0N3MUM (WIN-76D0T0N3MUM [66.160.143.69]) by mail.vortexsoftwares.com with SMTP;
Mon, 8 Feb 2016 04:17:48 -0800
MIME-Version: 1.0
From: "Devika Mathur" <[email protected]>
To: <snipped>
Date: 8 Feb 2016 04:17:48 -0800
Subject: Your Resume is Shortlisted
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

We have few clients in Dubai who are hiring candidates for their company
if intersted reply back