Page 1 of 1

Please help me with this

Posted: Thu Mar 30, 2017 2:04 am
by ravik
i've been receiving job mails from one email address. i'm not sure it's scam. please help me trace it. it's extremely important to me.

header .

Delivered-To: [email protected]
Received: by 10.157.5.168 with SMTP id 37csp941445otd;
Sat, 18 Mar 2017 15:19:14 -0700 (PDT)
X-Received: by 10.223.139.196 with SMTP id w4mr19415808wra.172.1489875554861;
Sat, 18 Mar 2017 15:19:14 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-wm0-x22a.google.com (mail-wm0-x22a.google.com. [2a00:1450:400c:c09::22a])
by mx.google.com with ESMTPS id q16si12082008wra.35.2017.03.18.15.19.14
for <[email protected]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 18 Mar 2017 15:19:14 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:400c:c09::22a as permitted sender) client-ip=2a00:1450:400c:c09::22a;
Authentication-Results: mx.google.com;
dkim=pass [email protected];
spf=pass (google.com: domain of [email protected] designates 2a00:1450:400c:c09::22a as permitted sender) smtp.mailfrom=[email protected];
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
Received: by mail-wm0-x22a.google.com with SMTP id n11so21409923wma.1
for <[email protected]>; Sat, 18 Mar 2017 15:19:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=EmYxHVYUeZV1cM5wlKTnk3lr6ygTbNBTgv9EEY2g48Y=;
b=NYbj7ZoHtypcEexFFbCP3tKVfe+WBbDxYtzjgFhrKQe1AjERgOVGSar23e7tKOrXjn
LF7smZDlLkXC7WMOfVO//Q4DjLjEUDAB0j+npNmpRNWjpnmDrxRYjqy2DNwtfVhcrINm
YBLpFCm9q9BrV+pb3lRBrrrA3hXvJ/qDPlHXw0A3RBVlvzoq2Vn0cM+hHFEiFGHjkCl7
EDeeyP7iyZuIWq382snkgULZ5UifNmOg0RnF27+NxVvqisXYIisQ23BFH13YS2KzyUb8
tXPT4Za3jYLan0SnAZ3j5cZ+ATKLr0Ux/qrdExiZ5CVXxXS3iD8+y6OHLjtrkbp7wSuA
Fsnw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=EmYxHVYUeZV1cM5wlKTnk3lr6ygTbNBTgv9EEY2g48Y=;
b=N6NPSCh3L92eH5gCGID5Yzw3gihC7SOsY2SWBusEBzMLV+fN+at6XBZ51V2xmd6oan
JK17C1jzfJOVw1TPy3THdX0lzvBkkZow1KPIoeRLsMGLniBUdkZh/V0j7jeyyjHrt6OC
IgsIZKFtkBEs2ZDiP12cD+yERM5g5uM9h9cOVLK/+RTtTQ1uQm2iVWFvU4OC/iSZe5QX
wI6vnrFA03Qi4kfAhR7eeVsMABkiZz+ez2c603QZ7H8YKvzUC38WzeaQKa0ekmiTKYKI
paQAfOal9BD0sVlqU2YWvCK1Qt44zpacD1lEyc+7VQ0EWVzZHRuzIVvXz14+K77QAbcD
Ep2Q==
X-Gm-Message-State: AFeK/H1rDLiu7QTOUZogVfO0BXLhjWKuWHuh373wNXqYrX+UXOY9ZKZ/fjYJCB2nZV1kqrcNJVemfM8WHgnR8g==
X-Received: by 10.28.217.136 with SMTP id q130mr3787362wmg.132.1489875554205; Sat, 18 Mar 2017 15:19:14 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.80.176.99 with HTTP; Sat, 18 Mar 2017 15:19:13 -0700 (PDT)
From: Seaboard Oversea <[email protected]>
Date: Sat, 18 Mar 2017 15:19:13 -0700
Message-ID: <CADgfGq=d78icNx9CKpAuDrmE57s=[email protected]>
Subject: COMPANY CURRENT INTERVIEW
To: [email protected]
Content-Type: multipart/mixed; boundary=001a114695fc2c088f054b08af1f

--001a114695fc2c088f054b08af1f
Content-Type: text/plain; charset=UTF-8

--
Human Resource
Seaboard Marine shipping line
Asia Recruitment

Thank you for forwarding your job application.
We have review it carefully, and found your credentials impressive.
please download the attachment for the schedule interview.

Regards
Ms Monika
Hr Department
Seaboard Marine shipping line

--001a114695fc2c088f054b08af1f
Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="active job interview.docx"
Content-Disposition: attachment; filename="active job interview.docx"
Content-Transfer-Encoding: base64
X-Attachment-Id: file0


--001a114695fc2c088f054b08af1f--

Re: Please help me with this

Posted: Thu Mar 30, 2017 7:13 am
by Chrispcritters
There are two things that make this email suspicious to me:
1) Poor grammar
2) Company using a gmail.com address.

Here's a good resource to spot job scams: https://www.totaljobs.com/careers-advic ... cam-emails