by Usurper
This is the second email I have received from these guys.
Tracing the sender's IP address from the email header is useless. It belongs to a server company called The Planet (https://www.facebook.com/theplanet) who have now merged with Softlayer (http://www.softlayer.com/), a much larger IT infrastructure company that is part of the IBM group. Unfortunately, the only way we'll find the originator is if IBM/Softlayer disclose these details, which will require a warrant, and they will only do so to a law enforcement agency. This also depends on whether the servers actually keep IP address logs. Even then, it is likely that they will be located in a country where international co-operation between law enforcement agencies is non-existent. Sadly, our best defense is education.
In the email below, everywhere you see "[removed]" is where I have removed my personal identifiers.
Tracing the sender's IP address from the email header is useless. It belongs to a server company called The Planet (https://www.facebook.com/theplanet) who have now merged with Softlayer (http://www.softlayer.com/), a much larger IT infrastructure company that is part of the IBM group. Unfortunately, the only way we'll find the originator is if IBM/Softlayer disclose these details, which will require a warrant, and they will only do so to a law enforcement agency. This also depends on whether the servers actually keep IP address logs. Even then, it is likely that they will be located in a country where international co-operation between law enforcement agencies is non-existent. Sadly, our best defense is education.
In the email below, everywhere you see "[removed]" is where I have removed my personal identifiers.
x-store-info:SmXCjkY1Un5L3qlTmewTw96lIBBsorVt
Authentication-Results: hotmail.com; spf=pass (sender IP is 184.173.153.222) smtp.mailfrom=bounce+bb0649.95cf-[removed]@mailgun.org; dkim=none header.d=ukglobal-holdings.com; x-hmca=none header.id=[email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MTtsPTE7YT0wO0Q9MDtHRD0wO1NDTD01
X-Message-Info: iX7TQ9X6NSoj7qCMoQV3FdUkXpgas5s6yWN51uE2r4bZkFOfhHs1rdgnzZDBijFx3GQzCOw9z+t8UiNvVA3KGNt6Au/qdORBfvH3tVMsiADvMRW1TkDeR5XR6V5NemlxXvedB+HnRJI1CZdrKzWUlwLjF8Oh4Dl3S/PfGmWYuBeJsqZoOP8ylQPe/9MUH5YtqEgDw/o8UHNAPyTMf2217UizXcZ/CAenXbgDxjeVyOg=
Received: from mail-s94.mailgun.info ([184.173.153.222]) by COL004-MC5F13.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22712);
Thu, 19 Jun 2014 02:23:25 -0700
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=mailgun.org; q=dns/txt; s=mg;
t=1403169804; h=Date: From: Message-Id: To: Subject: In-Reply-To:
References: Mime-Version: Content-Type: Content-Transfer-Encoding:
Sender; bh=Lzy8AALgNZEpgf0rKfe/CXGwOeg1LwxDEH+h9qa7VUA=; b=i643WOQzMb9xQ067iRXWKDI0kwx1UNNlJ+172G2x8KPRoJOxrQmKDgUQzvgzTXnLb+vxQmQW
uuuPN+gI+BooexODzQ86Jh69kpZ2aAuuRqszwhYPnxjAAdh6EbzECdQVs6V7RVaVYJdq8/Lh
80rWOsREndcxkhWk/TkI+xdtg8I=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=mailgun.org; s=mg; q=dns;
h=Date: From: Message-Id: To: Subject: In-Reply-To: References:
Mime-Version: Content-Type: Content-Transfer-Encoding: Sender;
b=R8OrSBdmSjNk1nbooOHV1pX2mm03/WyciMZVFEm4/ZKF147ve+a/oasHy0/2hucAJ+b3rI
CNns36sCW5e/4m9MoiDOd9S7tjO0ZS/bqXtylHcw38eI+ZF5Af7XHgaV25Gptotd9g7YTajH
wlLHQg8k3xO689hRQLA15yqrnDUyY=
Received: from [172.20.17.6] (unknown.hostforweb.com [205.234.214.168]) by
mxa.mailgun.org with ESMTP id 53a2ac0b.7fd694a31c70-in1; Thu, 19 Jun 2014
09:23:23 -0000 (UTC)
Date: Thu, 19 Jun 2014 10:18:58 +0000
From: Carrie Richardson <[email protected]>
Organization: GLOBAL CAREER HOLDINGS
X-Priority: 3 (Normal)
Message-Id: <[email protected]>
To: [removed]
Subject: Re: A Great Opportunity for the right person, position for [removed]
- Thu. Jun.19, 2014, 6:01 AM
In-Reply-To: <[email protected]>
References: <[email protected]>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Mailgun-Sid: WyI4OTUzMiIsICJmZWFybmVyc19tY2dlZUBob3RtYWlsLmNvLnVrIiwgIjk1Y2YiXQ==
Sender: job=[email protected]
Return-Path: bounce+bb0649.95cf-[removed]
X-OriginalArrivalTime: 19 Jun 2014 09:23:25.0490 (UTC) FILETIME=[1F66E920:01CF8BA0]
Hello,
Here is additional information about the vacancy with GLOBAL CAREER HOLDING=
S.
Our main goal, within the company, is to match our clients needs with the b=
est freelancers available, world wide.
Job title is Payment Processing Agent.
Job requirements:
- 18 years of age or older;
- Internet access;
- working telephone number;=20
- bank account (current/savings) or a Verified Premier or Business PayPal a=
ccount. New accounts are also welcomed!
- availability of 2-3 hours per day.
Refer to the links below for additional information: http://www.ukglobal-h=
oldings.com/job/finance2?lang=3Duk
Base salary of 1500 pounds is paid at the end of each month, various bonuse=
s, including the Sign-On bonus in the amount of 300 pounds are also added t=
o your monthly base salary.=20
You will also receive 8 commission for every transaction, 3 are designated =
for transfer expenses and 5 is for you.
SIGN ON BONUS! Please follow the link: http://www.ukglobal-holdings.com/job=
/finance-bonus?lang=3Duk
Our company registration number is: 08937791
For further information or to request an application, please reply to this =
e-mail.
There are two steps to apply for this position. First of all you will have =
to complete the on-line electronic application. Then you will have to provi=
de us some form of ID to verify all your information. It will take us about=
24 hours. Then you'll get started.
If you are interesting please follow the link: http://www.ukglobal-holdings=
.com/registration/1
Thank you for your interest and please don't hesitate to contact us with an=
y questions that you may have. We wish you the best of luck in search of yo=
ur ideal job and we hope that this opportunity is something that you'll con=
sider.
Best Regards,
Carrie Richardson
Phone: (020) 8123 0674
