RSS

Tag Archives: 196.27.113.22

“Marcus-Ashley HR”

EMPLOYMENT (JOB) SCAM

Click here to view the first email sent by Marcus Ashley

Hi ,

Happy New Year and thanks for your response to our job offer.

I am sorry for the late response as we just resumed yesterday so i haven’t been able to get back to you sooner.

Basically the position available currently is for the Payment Dispatcher / Coordinator.

You will need an active internet connection, a printer and some spare time, say 2hrs twice a day.

I would like for us to chat and have an online interview so i can explain the job description to you in details and we can take things up from there (if you are interested)

we can chat using :

GOOGLE MESSENGER: hr.marcusashley@gmail.com
YAHOO MESSENGER: hr.marcusashley@ymail.com

I have added you to my yahoo messenger, so accept the request and we can chat on there

Please add me on any of the above so we can chat , i will add you likewise.

Looking forward to discussing with you!.

Marcus Ashley.

Return-Path: <hr.marcusashley@ymail.com>
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts) IHJlc3BvbnNlIHRvIG91ciBqb2Igb2ZmZXIuIEkgYW0gc29ycnkgZm9yIHRo ZSBsYXRlIHJlc3BvbnNlIGFzIHdlIGp1c3QgcmVzdW1lZCB5ZXN0ZXJkYXkg c28gaSBoYXZlbid0IGJlZW4gYWJsZSB0byBnZXQgYmFjayB0byB5b3Ugc29v bmVyLiBCYXNpY2FsbHkgdGhlIHBvc2l0aW9uIGF2YWlsYWJsZSBjdXJyZW50 bHkgaXMgZm9yIHRoZSBQYXltZW50IERpc3BhdGNoZXIgLyBDbwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: zQ62lroWLDtS30tyTrKcz6ETGWEPEll0CPtd7QF6Ds_mm7Kk vJd1yKT1Uj.9CN3aovlketDd0SqBa3kKlEtl1PsId..UbgdKprrTA87m5DVa bJkRINkW4GHCEJu_fJxh6TxGzCWvjxFYlOQgz223VhLThFOtVn26pgPI66nb _6v0gBs1KwjjoEqMrWc8xOlJwW5K8GFlCMW8U0m6laV8Be8kRzzS9QSBYZ8L V3mhKAuEeDYKTwaH1Wa7UfWiKB9pDudlC8JF5MzV5.FtCuvi1YX5zu7TYMcI EHhUlMCbDHOS55ejcYGtYMJzDf5eSUjqFduWEH3VpDrzfEr.72S1W5ZKz_Td kDXX.WjV6j2SB_pOH9WonemwZSKRhEBnJH4RgD3_xRpFB9NSB_PsWsHo2bOf i4x5GDmbcSQFF2qhDn7Zb6lAziTSSuXjUTyNiKiWEmuvuM6Bmiuj8oDjfuAN am1BBidBEvAyUBdliCc_K5..iyTQ8bVZ27g8KK2gJ.Lizb7j5nhc4aqz9qhF JQkzFAZQFMcZjhIpojiJkmWXoAR0dgRyJVpgKhw1GZrQT.Kbh.9rm8atBpRp 3HU6XBvmJKyBCGmVt2hYAP0qopmywT3KcqaCoaMJzXkauXCdkJPhf0oNTU6U k2QjBwur6DghHH.ootexZrGW8k68YUXLUYZnpWTDHaqBom8zQolsFRcoh8Fv QHInTaQ4_UhVv3GVdgddmWf9K53NLg.yQeXEJa0lSUBaMktVIZjwUVBFuX6c 3tpSIAU0AwEftbIKZm0HGPEIcTO56EnR2BnNvTvVK510yON1Sr_r0HeXE.oQ DbpmQIYOU4kRgQpIn0f38nSV.BxCSwGymzvN2wK_koID.7vYU2RPytGI4gyE QakaLkIb7qISJA7.HNyYckX0LCFLVJXPKwJmLgN3VN6B6wssFH3mTjLPhevf Nv8NhTITfYcFnTYAsjE69M3GPKoNoaEIfb9zGQOuw1tzXp5CZXGEUTwsK0DK 8xm1_A5ZlG6pheeboKQ0wXlMIc8fbGl3qUib1K7VQSpin1wp66NDIXTkeflS 5MxU6doTIaOXERfuqKkuKlTVuttaud3RIlqn7mWyu._VILz4dQvVGwmGJOyw n6m00.m.3BWEOFV.g.J49LRPWB.stwVvnIBiMGWwzvzKMFR121vgpCU_mXle 557Sy46Q1CvcNoE3zFiyiBHCq8f93KY5jQDsfGpkYgFAJQLbDuD3Lh3XX0Ka GzqNLP5cUlc6CugW.vcvktOoVdMGEs6y3YxJW4eGViBT2v3opv0bdwGSAl03 yySqeLD6p5tr7urAtT4OFCw6WFt946jXGqzOK7LieIvxx3qMmK3YyKt99Ref DQtkXLCRpFvROOvROC6RQJiip9NDoy3.zMvXE1Bv
X-Originating-IP: [98.139.212.183]
Authentication-Results: mta1129.mail.gq1.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm24.bullet.mail.bf1.yahoo.com) (98.139.212.183) by mta1129.mail.gq1.yahoo.com with SMTP; Mon, 07 Jan 2013 23:35:57 -0800
Received: from [98.139.215.140] by nm24.bullet.mail.bf1.yahoo.com with NNFMP; 08 Jan 2013 07:35:56 -0000
Received: from [98.139.212.239] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 08 Jan 2013 07:35:56 -0000
Received: from [127.0.0.1] by omp1048.mail.bf1.yahoo.com with NNFMP; 08 Jan 2013 07:35:56 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 265247.46231.bm@omp1048.mail.bf1.yahoo.com
Received: (qmail 23963 invoked by uid 60001); 8 Jan 2013 07:35:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1357630556; bh=pQacON5ieHyZtsPi//b8ogYyq3geJA9HYiZFY+DNiSI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=OyoThpnA/P1ENZLGmGc+HWr5EgmuOphE50ZiZdeuu0XRm69GaYbXZt35eezHukfyUntessMZQ0wBxrdWFR3bT0MVALzJF9tRg5sdoj18EnOGDE1qDwm8EWFEAMoB9NiVUHgvrh3+Hau9aCycwXlB74swsbE30XrtO6/UrwhqqlY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=5ykyVM2sfT/KhXVN6gL4HMDnTZo80NwU8/rsfyetNWHeRurZcKhiFr0O3GMT3sBCVNdY4l3z+wOSL6iXzL4Qj8paqME0tn0l7ippjBVW4nym+2yxDNm0bDrW+C7e85Yq6dtJiOngnYFrCIT0hS5+8z5Mq8mi01LVDZn74LR3iwA=;
X-YMail-OSG: FpExrSYVM1lbnUuT3K_0hbyN1DNGS0_bp9QF9xW_L2pr1pP 0g1ZL7aP45jeLTNhb6jBx_TqNZA00bEj562_acfwerJw2N53RymFMqQhbIRh pwLM2sXlLEQxslGpsVfIIl3FhbPIl7P3mWjyzWnGtkw68KUeOZ30Bu4suvpe Z_xCZWyAz6UhFY2ZSTjcSJ_zzRsPZQiMyysUIK0Sl1qJcJ545DmHVExZ3JX8 A5Q84KQzTbguPRj2A7qSfwWZlj7XBpAZqvnMTowDOJk4ZTeX60isjt6CUELO TIBXTDGkHBySmNwY5NiuU8.mNL4YWv4.jJJEcVWtJ2qvR063y1UgDQk0j5nf nHJBzReIXTEIe0k8NRFUfDLPS.jP0cB_XkyFEswObd75jds3EijEpijrwtsy fOBTOgCZ_K9ob2WSlmDkXPPxI1EoKIXjrP0HwkRyh8uZR2R0sTtqhjPgfFf8 NwiZag2D1FHYfAkQcrtjFC1_IDYx0NxuvxWmy
Received: from [196.27.113.22] by web162206.mail.bf1.yahoo.com via HTTP; Mon, 07 Jan 2013 23:35:56 PST
X-Mailer: YahooMailWebService/0.8.130.494
References: <1357276996.27629.YahooMailClassic@web161003.mail.bf1.yahoo.com>
Message-ID: <1357630556.3934.YahooMailNeo@web162206.mail.bf1.yahoo.com>
Date: Mon, 7 Jan 2013 23:35:56 -0800 (PST)
From: Marcus-Ashley HR <hr.marcusashley@ymail.com>
Reply-To: Marcus-Ashley HR <hr.marcusashley@ymail.com>
Subject: Job Offer.

Marcus-Ashley HR hr.marcusashley@ymail.com <> hr.marcusashley@gmail.com

RECEIVED IP: 196.27.113.22 ORIGINATING-IP: 98.139.212.183

The IPs used in the last email sent by this scammer are: 201.17.162.7 <and> 150.176.200.164

 
 

Tags: , , , , , , , ,

Personal Driver/Chauffeur SCAM – “Helena Gordon”

Job Scam: Personal Driver/Chauffeur Job (Nigerian Scam)

After a little investigation, I believe ”Helena Gorden” is a male in his mid-20’s (25 to be exact. Birthday is on December 10th, 1986 ) He is from Zimbabwe? Nigeria (where 90% of scammers are located.) His full name is, ” Gerald Mugoma Dzuda ” Email is gdzuda@gmail.com –  Jerry@zol.co.zw ? His username is ” geraldmugoma ” on a particular website (don’t know if I should write it down but am happy to send you the website privately.) I had a photo up of the potential ‘suspect’ scammer, but until I am 100% sure he is infact the one i’ve explained above, I’d rather not post it just yet.

Submitted on 2013/05/14 at 23:49

Hello,

My daughter has an evaluation project around your city so I decided to contact you to see if you are interested in driving her around.

The job requires driving for three hours a day, three days a week and the pay is $600 weekly plus $155 for gas.

If you are interested kindly write me here susantoorchemicals@gmail.com

Cheers
Susan Toor
susatoor@outlook.com

On Feb 3, 2013 8:34 PM, Helena Gordon a.k.a Richard Brent wrote:

Hi ,

I am emailing you to find out if you are interested in a part time driving job as i found your AD on Craigslist.

I need a personal driver / chauffeur for one month for my daughter who has an evaluation project in your city.

The job requires driving for three hours a day, three days a week and the pay is $600 weekly plus $155 for gas.

Kindly email me for more details if interested.

Regards.

Richard Brent.
————————-
————————-

The job position is flexible and my daughter is willing to work with you on times and days when you are available.

The driver position available is for a personal driver/ chauffeur, someone who will be committed and ready to work with good manners and attitude and of course with safety as a priority.

My name is Richard Brent and i reside with my wife and my daughter. My daughter will be needing a personal driver as she has gotten an Evaluation program to run in many Hospitals and Medical Stores around your location so i need a local who knows the area pretty well .

This program is for her to Evaluate all Hospitals and Medical Stores under her project for the time frame so am only looking for a driver who will be able to take care of the driving duties in good competency.

The project which will be starting from March 1st 2013 i suppose you know what an Evaluation is, sometimes you evaluate companies without a notice of evaluation and many times it is secretly done this might include walking in as a patient and then taking records of how you are been attended to and how others feel about the hospital and Medical Stores around your location.

This job comes with a flexible time schedule and you can decide when you can have time as the evaluation doesn’t have a specific time frame of running so the evaluation can take place any time as most hospitals and Medical Stores are open 24hrs.

An arrangement will be made for a sedan car that you will drive if you don’t have your Personal Car and also an apartment will be made ready where she will stay for the time being,all this information will get to you as soon as you are confirmed as the driver. The car will be brought to you a day prior to when she arrives after i have confirmed you for this driver job.

MORE INFORMATION:

Dress Code during work: Well Mannered. Date work starts: March 1st 2013 Airport: (Fill in your closest airport for your convenience on booking her flight)

Weekly pay: $600 Gas: $155 Working Hours a week: 3 times a week and for 3 Hrs each day.

QUESTIONS:

What time will you be available?

What is your present work places,name and address with phone Number.

Do you think you are a better driver for this open?Yes….Give reasons.

If you think you have read and answered this correctly and you have concluded that you are worthy of the open,then i will need some more information of you.

A car delivery will be made to you for this job if you don’t have your Personal Car.

Reply back answering all questions and details as requested .

Thanks.

Richard Brent

– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –

Subject: Personal Driver/Chauffeur

Hi ,
I am emailing you to find out if you are interested in a part time driving job as i found your AD on Craigslist.
I need a personal driver / chauffeur for one month for my daughter who has an evaluation project in your city.
The job requires driving for three hours a day, three days a week and the pay is $600 weekly plus $155 for gas.
Kindly email me for more details if interested.
Regards.
Helena.
HEADER INFORMATION:
Return-Path: <helennnudi@ymail.com>
X-YahooFilteredBulk: 27.115.15.21
X-Originating-IP: [27.115.15.21]
Authentication-Results: mta1144.mail.bf1.yahoo.com from=ymail.com; domainkeys=neutral (no sig); from=ymail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail1.ctssh.cn) (27.115.15.21) by mta1144.mail.bf1.yahoo.com with SMTP; Mon, 01 Oct 2012 08:48:21 -0700
Received: by mail1.ctssh.cn (Postfix, from userid 98) id 05FC720AAA; Mon, 1 Oct 2012 22:07:51 +0800 (CST)
Received: from mail.ctssh.cn (unknown [27.115.15.20]) by mail1.ctssh.cn (Postfix) with ESMTP id 7BCB11D145; Mon, 1 Oct 2012 22:07:50 +0800 (CST)
Received: from User ([196.27.113.22]) by mail.ctssh.cn (Lotus Domino Release 7.0) with ESMTP id 2012100122074258-59808 ; Mon, 1 Oct 2012 22:07:42 +0800
Reply-To: helenaudi@ymail.com
From:
“Helena Gordon”helennnudi@ymail.com
Subject: Personal Driver / Chauffeur Job..
Date: Mon, 1 Oct 2012 09:07:40 -0500
MIME-Version: 1.0
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-MIMETrack: Itemize by SMTP Server on mailserver/ctssh(Release 7.0|August 18, 2005) at 2012-10-01 22:07:43, Serialize by Router on mailserver/ctssh(Release 7.0|August 18, 2005) at 2012-10-01 22:07:43, Serialize complete at 2012-10-01 22:07:43
Message-ID: <OFE6D79170.7D962B4B-ON48257A8A.004D9C7D@ctssh.cn>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=”Windows-1251″
To: undisclosed-recipients:;
Content-Length: 412

Name: Helena Gordon Email Address: helennnudi@ymail.com (helennnudi) and helanaudi@ymail.com (helanaudi)

jcbieler@rbnavocats.com Robert Carlos

IP-Addresses (Recieved) – 196.27.113.22 IP – 82.145.211.1 (the location of this particular IP shows Iceland/Norway but alot of Nigerian activity on it.)

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: