RSS

“Xboree Store”

26 Jan

EMPLOYMENT (JOB) SCAM – ONLINE FRAUD

NOTE: This scammer sent me several idenical job scam emails but used different originating ip addresses (same received ip addresses though.) — Under the header details is a list of the other IP addresses used.

Representative Assistant needed for our busy online store to work from home. Applicant must have computer with a reliable internet, ability to work and think independently and be very trustworthy and dependable.

Hours are 11:00 am to 4:00 pm between 2-3 days during weekdays.

Duties include :

-Answering emails

-Email shipping confirmations to customers

-Collection of packages

-Candidate will be a fast learner and able to follow directions.

-Filing

COMPENSATION:

• Benefits package offered.

• Payment is $15/hr

Regards, Paul Manson

Return-Path: <paulmanson739@yahoo.com>
X-YahooFilteredBulk: 212.227.17.8
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: Gr5Vux8WLDthkVrA7DoxxXaxcIludNn1wFZFCObzlcYohm8Y 2NPaeChXN1r_.69p.5ambCN6JWSHvq3iGTM0T7au_t6DJBQSOfMuSB.jUlti Ix58wtjqpm.rS.9lnC48lvBCfI._pGUiEF9qtZjQna.skF1lK9MOmrUzkb7y KgqTTgtHqfHPyDwAQ1R89glNisuP3eixF0977XRqiSjUXuPwK3X.NoNbsPfq aLl0bGchRUbdIJ511_0abj.F9k78huUh2TnCI_KxgBmT8NmgjcO3zlXQIDB4 Mq4fSzAzbyfXevMjQFabbE5kMI7XSn6WF0oIMe1G1.1dHFGj9OvdwxHaI0gg e46G14bTCUWI1KBFC3474WOMndG0lTPLTVxh4GvBeOxog3V6rFfUsn_YgFPP SlrSxhHofJGP_T_78jkwlo7VL2lLhGJIA_9vUdBbSI9SIRmX1__AdnRY.UhU FKPgaWP39xmv47mH7jogztZgvMTsOL1N03bY98CW9X1P6YsSAHYlNA7CZT9m GWoQbFte9HG12aynuL1SPEYMtmmyvGzAamZvetWfm6DZvTGbdLCe.M.qvI_B JqJMny7.Qnor.UgkPjDB1_MFQUUFa4Gp3zJ2FqoXtXX0HzSgBqHGd0PesxH_ .lhSvLd17H5SUO_78NN8iPCT2uhf1rM4knbtWIYLvYAlyIOKP3x2_futHjRO vNYgOunMUQA8XCb4b2I.p0GSgPHQmwTZR61M82WHRgpqdlNVwqZOWPlUmF.L U_HlZFGV8lH9Wmo7FM7YETmr9MZCxVz5EplQtNvK.b5SynYXApYpr22uugKZ bm3PgKDciE.aar8SIL2ncHgpfr6vfULvkKDpL2_72HyjZTP87eaRODZMD6kX 0QQGRlUop6ASLcrI4h2sp196e7FyfBQMq.2bXJXzFv2id3g8c8jVvEeDPRn5 0yjsfy_7NHn9_8sHIO.DnN58Um7qVh5C0qVMajGO8oVtsPZs26IrQHG14kwg szbYva2zlgq0qNk0vhMwJta8pb25XMDanmsRRuPRsxqx2O.D8N.J.vFKBmAa 95v9sgxYPCrfL_0nxHgF3tvmxd8KVYIbZ_HOoYy2wOOC.HEXpxi2KJGuNeDN hXUZUR6CdZ8te2u9KaXPoKpb01DG3v8wQg5ZHsnB7KicAx1vzjCd4QZ6Nz7o qDF72F8x58k9qbeAchL_ld9LnFN73PviG57VH2qIz5iWdgrGg8zZabXkJy8C xkEhNC4gQv1Hwq69nZ5VxoihSJZ8k3sfHv33qSWJEjlgtIEhDAwtc78Ny7b. O5hfpkI.mxpyPxU_udS38GJm1QUKnHp81kmsepS9uTZWca9CTAfCHpyyBA–
X-Originating-IP: [212.227.17.8]
Authentication-Results: mta1108.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO moutng.kundenserver.de) (212.227.17.8) by mta1108.mail.bf1.yahoo.com with SMTP; Wed, 23 Jan 2013 06:01:43 -0800
Received: from icpu2586.kundenserver.de (infong-es85.1and1.es [212.227.221.5]) by mrelayeu.kundenserver.de (node=mreu2) with ESMTP (Nemesis) id 0MYrDT-1TSJ0P0TjP-00VXdK; Wed, 23 Jan 2013 15:01:42 +0100
Received: from 41.190.3.124 (IP may be forged by CGI script) by icpu2586.kundenserver.de with HTTP id 49lvhe-1T1nwT0JdL-00wGZV; Wed, 23 Jan 2013 15:01:42 +0100
X-Sender-Info: <412040538@icpu2586.kundenserver.de>
Date: Wed, 23 Jan 2013 15:01:42 +0100
Message-Id: <49lvhe-1T1nwT0JdL-00wGZV@icpu2586.kundenserver.de>
Subject: Job Offer For Extra Income
From: Xboree Store <paulmanson739@yahoo.com>
Reply-To: onatila1@gmail.com
X-Provags-ID: V02:K0:jX19HEqSVZkKV1EZDy68/RHuVMqIZCNdbSdKo+FHXaG bt5KeoPqhB4ieRyIYs7kAa3NjLXlt1wwqVJryKuk18C1jOvGgS zyuLahUxUptba+hBjpA+TYDupAJHje6+rFZi3WIJv5kzsr9Gbx H4OcQT3SjZA9nYi4IDf12tz+7VM14HeA4aUo6NjAhIr2DTZPpe /BP9K1qq0+JSAXQXZVe2YnoHxial6dR9sxU2atw3ILv2pANin5 E0eJqeOxyOFOz2DyEdvLuXGO54fXcAe9hw3h+eBXPPd5kUtjQt +UDVW/r1zVAiBJtVEkIcCeS7A6C0o0hWLFLStQ4nkYQbbJWaCj SVzbzMe4wh1nTzdb3ydSlSIa+6Q88p8Vct53LDPEzpf4fF1oRk OQNBDmUMhEL9G24RH5KbATJzYDMrZTGlQSDyzU40FuYDhFhPDS cXufU

Xboree Store paulmanson739@yahoo.com REPLY-ADDRESS: onatila1@gmail.com RETURN-ADDRESS: paulmanson739@yahoo.com RECEIVED_IP: 41.190.3.124 ORIGINATING_IP: 212.227.17.8

OTHER IP ADDRESSES USED BY THIS SCAMMER –

[212.227.17.10] <> 212.227.17.8 <> from 41.190.3.124 (IP may be forged by CGI script) by icpu2586.kundenserver.de with HTTP id 4A87YP-1TLOWD2KDc-00cgJ2; Wed, 23 Jan 2013 15:16:25 +0100

 
 

Tags: , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: