An
Email with the Subject "[Bulk?]Business Opportunity" was
received in one of Scamdex's honeypot email accounts on Mon, 06 Feb 2012 07:41:16 -0800
and has been classified as a Generic Scam Email.
The sender shows as "William Clark" <w_clark@inbox.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => mc_mxw@o7e.net
[delivery-date:] => Mon, 06 Feb 2012 07:41:16 -0800
[received:] => Array
(
[0] => from c2mds.mailcentro.com ([208.67.179.143])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RuQgt-0005J4-SMfor mc_mxw@o7e.net; Mon, 06 Feb 2012 07:41:16 -0800
[1] => from oncosmos.com.tw (211-75-166-188.HINET-IP.hinet.net [211.75.166.188])by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with SMTP id q16FfEq8008251for ; Mon, 6 Feb 2012 07:41:15 -0800
[2] => (qmail 14627 invoked from network); 6 Feb 2012 15:39:56 -0000
[3] => from unknown (HELO VPS6799) (postmaster@111.90.149.101) by 0 with SMTP; 6 Feb 2012 15:39:56 -0000
)
[message-id:] => <201202061541.q16FfEq8008251@c2mds.mailcentro.com>
[x-mc-sender:] => w_clark@inbox.com
[x-mc-ipaddr:] => 211-75-166-188.HINET-IP.hinet.net [211.75.166.188]
[from:] => "William Clark"
[subject:] => [Bulk?]Business Opportunity
[to:] => "mxw"
[content-type:] => multipart/alternative; boundary="bxTb4A1mgV2Q5Im=_midj4ua8raOLWbMSn"
[mime-version:] => 1.0
[reply-to:] => "William Clark"
[date:] => Mon, 6 Feb 2012 10:33:44 -0500
[x-mc-filter:] => 7.6.9
[x-mc-filter-antivirus:] => Scanned for virus - Status 0
[x-mc-deliveryid:] => 130
[x-mc-ctfilter:] => CT RefID = str=0001.0A010207.4F2FF49B.0057,ss=3,fgs=0 - Class:Bulk - Virus Threat:Unknown - Phishing Threat:Low
[x-mc-filterskip:] => 0
[x-mc-spamscore:] => 40 T 49
[x-spam-status:] => No, score=1.0
[x-spam-score:] => 10
[x-spam-bar:] => +
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Greetings Mark Urquhart-Webb, My name is William Clark, andI would like to discuss a business opportunity that offers the potentialfor considerable earnings. I work for a privately held manufacturing company,which currently purchases a product vital to its processing operations ata price significantly above the manufacturing cost. In my proposed businessventure, you would assume the role of stand-in supplier, providing this keymaterial while retaining the same profit margins. My role would be to introduceyou to my company as the supplier and to obtain a contract between you andmy employer. [...] Content analysis details: (1.0 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(w_clark[at]inbox.com)1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)0.0 HTML_MESSAGE BODY: HTML included in message0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
My name is William Clark, and I would like to discuss a business opportunity that offers the potential for considerable earnings.
I work for a privately held manufacturing company, which currently purchases a product vital to its processing operations at a price significantly above the manufacturing cost. In my proposed business venture, you would assume the role of stand-in supplier, providing this key material while retaining the same profit margins. My role would be to introduce you to my company as the supplier and to obtain a contract between you and my employer.
I understand that your past experience does not directly relate to my field. However, this venture is more in line with your personal capabilities rather than your professional experience.
I would like to confirm your current phone number 916- 985 4445 x 229. Please send a return email to verify your contact number and to schedule the most convenient time to discuss these possibilities in detail. I look forward to speaking with you soon.
Kindest Regards, William Clark
Greetings Mark Urquhart-Webb,
My name is William Clark, and I would like to discuss a business opportunity that offers the potential for considerable earnings.
I work for a privately held manufacturing company, which currently purchases a product vital to its processing operations at a price significantly above the manufacturing cost. In my proposed business venture, you would assume the role of stand-in supplier, providing this key material while retaining the same profit margins. My role would be to introduce you to my company as the supplier and to obtain a contract between you and my employer.
I understand that your past experience does not directly relate to my field. However, this venture is more in line with your personal capabilities rather than your professional experience.
I would like to confirm your current phone number 916- 985 4445 x 229. Please send a return email to verify your contact number and to schedule the most convenient time to discuss these possibilities in detail. I look forward to speaking with you soon.
