RSS

Tag Archives: 24.97.23.218

“Graybar Electric®”

EMPLOYMENT SCAM – JOB OFFER – FRAUD

Graybar Electric Company, Inc.
34 N. Meramec Ave.
St. Louis, MO 63105

Pleasant Day,

Can you be online for at least 3hrs in a day?
Can you work from home?
Do you think fast?
Can you asses and undertake assigned duties carefully and comfortably? Then you have a chance to work with us Online at Graybar Electric Company, Inc.

JOB POSITION
We are currently seeking part time employees for our ever-growing Accounts Receivable Department.Through extensive demographic research, we have discovered a wealth of untapped human resources that, for one reason or another, need the freedom to work from home.

JOB SPECIFICATION
Your primary task for now ,as an interested applicant is to coordinate payment processes. From customers they pay for the products but in most cases we make our clients prepay for orders or items they order for.

About 70 percent of our customers prefer to pay through Money Orders or Certified Checks drawn from the United State.Because of the increasing number of clients.We have decided to open this new contract -to-hire job position

Your Primary task(Collection of Payments):
1. Receive payment from our Customers Through Courier delivery service.
2. Cash Payment Only at your Bank
3. Deduct 10 % which will be your percentage/pay on Every Payment processed.
4. Forward balance after deduction of percentage/pay to any of the offices you will be Directed to send payment to.

JOB OFFER REQUIREMENTS
Get back to us with information below information , so that we can add your mailing address to our Regional database and forward it to our customers for them to send payments.

Full Name: (As Should Appear on Payment )
Street Address: (NOT P.O BOX)
City :
State :
Zip/Postal code :
Home phone :
Cell phone :
Alternative Email:
Occupation:
Age:
Gender:
Marital Status:

Thanks for your anticipated co-operation in order to start work soon.

Regards,
MR COSBIN MARK.
HUMAN RESOURCES & ACCOUNTS RECEIVEABLE DEPT.

HEADER INFORMATION:

Return-Path: <careerjob@info.net>
X-YahooFilteredBulk: 195.56.146.124
Received-SPF: none (domain of info.net does not designate permitted sender hosts)
X-YMailISG: 4QKA78EWLDsr4AN0pBkNTUo6Kgh.BvNXZqSApu2EBqDmYyB8 fO9RRXts02ysZVyFqkZfydF3JCvYYPzjimydPN0vEgldyWqN5CBI7uK4Xd9M NTXTR9wtVoNCLWBY_JNPVcXk20hz7ije0haNDYETtR6roDEj4WIcOtK4kFPE 9TVXIs2YmXOnqD84I3qZEzWR5AA7hO9_PnJAB5GaE8SdohHC0DSBMO5_udON sIWkePIKmfA2LzbIuzWZqO4_cqMu8JcMIL6zLIaJSzHxmc70ood.O1Tb2bbn RzVKg1MVFqfMREOweqlAsjrtUgc0eZxY1fTt3wUWGscjsfBiR2OWwOwoLbFW Uv9_GRF4OxmXaG2LiY.51L1sWeVBLmo2zKVA7sHvNOh6VXNe5C136MQAuW6o QBkvTp.Au6XR8uAVNjKlzyyBaZsuw57yWavszf6oFqVCmDlaYyGpC.XdB.vT E8dBKP8hya7f72U8JEP7JBJyyg3vKjes5aUrOrsVnbYAa6sH0NDXN998BzrL NCb1HgPfUEnBbx7QXGKkzS3tSkdrziKMHav6RiLNHH8iZUlUwoAVghGlgGy3 80yFx711pZamC2DRU3rlOlort2DekJPh7PE8NHWtpLRvkR5aCYGCzln_XRvN YZEHSvl5MvxsQ_GezShB7FArCEfrcXpnb.OJMydaa7AG_n7QTXBpzs6J_p2D Flgt42fEjos995EzyPg7rRlvg5Tx8a5C8sl.KKJxBfDC8IJU.l5Tzl1_s3gq 87ZFUFPqlsbTTH99a4xNOftFVWLePbz92GMGEJvJwYDzxK6HtBSynBZ8rnAB vtsIf09m8E1WIMY2S_hddjw3geuXCfzS4Or8MJZgd0ijVzLEW9M6pceDg4Bn 04x7R8fgin3GwDLPis4Da4p4eagfy3LJRCzjhvv7AqN9xcMAngZ2Hix7hJR5 V6tm3DIeKoSH11BS02Egveo86NYoCoVBPb25WjpzCfNJhJzkYPIKr754QPUS Fyh4wJ.s.U.7GpLSdJTJi4IvnA04JUUsVcwEJjKa8Dp0d1tlcXLLUujSB15o Iz5VjzM6dhJAnoRIFDMrDAD1IHzWqSxo5IufsiiDESfFAh5V0N7ORDde4LGA 8cT3jJbituvtcT3VaRSuK.y6VyARNOEntSzU8isqWoqJMzdcQo6.6jdUYp.i 7nZMOMGy1GMvd8ZV6tzFBSx9xApo0WfP752pMjLREdDmkAWynnuq48owFjnA 1X2yeCudea_ncw.4qQQFvlJuLnpHYNga4qG1_ntDzabJUDCbMf2Kr_tPpBgu yGtGWqHYkVXHUq9GwFBh9s1DOKoQr7ByUYaj0J5EZORAqPCI7SyoxKpAhtW2 tR3wRlGYo1ybcIrbBEaah0Oh2XByaU2F4Nf2k22J9d0HgdgEMJ3l4Cuyqbse S4k9UQPyps25ihFWyOW8PiOZ0ZR4r0zqDEas0_1uaobdkJXXWWUJkOTGxVIq gvzJNmlSIAaIasqAaRcsaa_JRrc_FH_6hFbrM4KLPD964yHfhJIuu9o.JkhD v6NOI1Q7fHmoRzqF1clH7sMsYCc7M5oFA1PD0gkgaX7Wrk3_Y57Lb9wquiU1 QnkCgfJ_w2SIVFJIoKOpzb6XRW7M_2mI5MFceDwaFTxmF3BkLINvqc7fJyWP VPrqMtQsd096wI6SSL76L.uemcaupvrnSEt9vke8ArrABFPoHd4OlusiGeUE QhUfNthVvLI19HiMMO1lArL3aEU6zm2Lah.lQYxVptnNRkCi.meZr6CL5E71 XsdOuvaRYouOK8E7oOK12bADsWgy6LASHbOm740OETbsib_akGcx_ep5H_7Z 0zoT4wxrIfYjjeejsuaeip5tJpVWNCb2pIwjm.DTMbgWOyu_Th3LS_HdJbPR Rwrh3CF7Tif8krclS2JvzwB_ZwX_tdu9OACy3OjkbxmtHL3aPiGpp6mYIOK5 LbRuHpjk.BjPnvPedPtNESRCANJ71Hs-
X-Originating-IP: [195.56.146.124]
Authentication-Results: mta1286.mail.ac4.yahoo.com from=; domainkeys=neutral (no sig); from=info.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ns1.arendszergazda.hu) (195.56.146.124) by mta1286.mail.ac4.yahoo.com with SMTP; Sat, 12 Jan 2013 23:14:38 -0800
Received: from User (rrcs-24-97-23-218.nys.biz.rr.com [24.97.23.218]) by ns1.arendszergazda.hu (Postfix) with ESMTPA id 0376CA4D9A9; Sat, 12 Jan 2013 19:42:57 +0100 (CET)
Reply-To: <grayhumanresources@gmail.com>
From: “Graybar Electric<AE>”<careerjob@info.net>
Subject: EMPLOYMENT OFFER…APPLY NOW (Get Paid Weekly)
Date: Sat, 12 Jan 2013 13:36:02 -0500

FROM: Graybar Electric® careerjob@info.net REPLY_ADDRESS: grayhumanresources@gmail.com COSBIN MARK O_IP: 195.56.146.124 R_IP: 24.97.23.218 — rrcs-24-97-23-218.nys.biz.rr.com

 
 

Tags: , , , , , , , , ,

“UK LOTTERY ORGANIZATION”

LOTTERY SCAM – ADVANCE FEE FRAUD

freemoney

FROM: UK LOTTERY ORGANIZATION,
OUR REF: UKLO/BT/111830
SPONSORSHIP NUMBER: 447968. GAMING APPROVAL NUMBER: 129398164.

We happily announce to you the results of UK LOTTERY ORGANIZATION’S FREE TICKET ONLINE DRAWS of January, 2013 held in MALAYSIA. We wish to congratulate you on the success of your email address which came out in the first winnings category and won you the total sum of US$4,600,000 in our free ticket, online and email address computer balloting.

Your e-mail address attached to ticket number UKLP-66-53-203-13 with serial number 5030398064452100 drew this lucky numbers 2-23-29-30-39-45-42 which subsequently won the Lottery and qualified you as an International Winner. You have therefore been approved to claim a total sum of US$4,600,000 (Four Million, Six Hundred Thousand USA dollars) through any of our available payment methods.

Your email address was Reference Numbered to: 56475600545188 and your winnings and payment Batch Number is 074/05/ZY369. For your US$4,600,000 payment process to begin, you will be expected to REPLY with the below listed winnings and personal claims information:

* Your complete official names
* Full address & country name
* Telephone & mobile numbers
AGE, GENDER, OCCUPATION AND JOB TITLE.
* Free ticket and Lucky numbers
* Reference, Serial and Batch numbers
* Date and venue of draw

After you have replied with the above winnings and personal claims information, our APPOINTED CLAIMS AGENT Mr. Robert Chan will get back to you with further details on how you will be paid your won prize of US$4,600,000.00 and you will proceed with him from there on to the end. Congratulations on your winnings.
Please contact Mr. Robert Chan roberttchan7251@yahoo.com

Good luck from me and all staff members of the UK LOTTERY ORGANIZATION.

YOURS FAITHFULLY,
MRS. ROSEMARY LARRY.
NOTIFICATION MANAGER.

Return-Path: <Luckywinner@info.net>
X-YahooFilteredBulk: 195.19.158.45
Received-SPF: none (domain of info.net does not designate permitted sender hosts)
X-YMailISG: S6v9G6gWLDssU5PUIl8LR7YdL.Z4UTCobC5K_ULoBxHHD4uV E33zTa2i13V3JsUJq6tm8DWD16x7gJY9jDrBkpsypb5hwUVngVd9s.QouMPf HCgMuHicGZd4KcZH2EYe_eaQQKItBLJuR9KkjuGTbQzIG5NpMGA7cBXTvZ8h y8v6UJwMEG2aRcEU9pgnYB5HWLKQc3Tugsk2PvpACjEq8Md4OAkArn7hzrI6 ZrwE6lsoRbwGScyGZr.9jfvx7w.wtONAVhGJrtNuSV2_i3O_MDDeiPIYGA14 _nkiGRsuFhBld.r0OHLwozZs8V87H5TMOGlgxciHRmVMQ8Nbs2L.NmqLKJ67 FUzHehqn.bSibXdVt5taW2SudXSXC_fWMgRYR0bFeECUhuk9x4fi1N3VoU1y rXG993r00ylivNcs03DUAUcdwMb212yf5vgVAenvyQdNkwh1f7uJEdhULDJY jA50YnQ5FwCEjKuwK_zx4pzL6yX01PcYBRLnweJ1Lhvv5HkgfX8heZDLQZJI KQLQwBaGD77c6dxQ2Y2gNZkBlvTNjvKLmUBbw9EBTO4gaf.2gUP68C0hmwO. O6Bw9Wc3SNMy0R9TKHgrx_kcq4MmmtXgRTCh1_zkar14F78XVMQnko7pRrlv F9S_Agp7rdO0SRmnPg2ePBy0YY4ApLoa1BqtTOmgAB616y7mvJkyjuSOA6st .cox6P.OZKTUIRuTeEv9a10829QPD5TUISS3_0J9ti1xq1wlLzbPeQo.Sp9v etn8wE.VddAp6MPvTzPKjGVjtKmFu5wrKt40XfGM1yN015KBZHFyEsrHmwLk 9lenPS1qDxVRLhY.NdEMIGerMDRtPsePU5OMqVmWph7jkm8mEmJg38kwacL2 fUsHBstiLwmDInMi3HSGSTo9Lo.DDgz5HUopuvdY0AODCXhMoCF9kEmJQ7x8 ydgPAkr2O83aOwh6pzys6OPYoPDgaTr_TI_Qkvc4qrkHHZNO62ZaBLBB0u1o 28KIPHrW4YQ_fNVkJ2b4XWP1c0Mxn0LsZldkOb6ftg82uEFgCaqItzrBVwR8 TwCpe_7AsvCLysvmz5AnOo.6OfeCWoLkMTWr6H1OzOsSdKZEsSgl59TUYEif uTM3OGkQFISxOzp6zLKnO39L5g5txz_Dz0FkXkVIhAh0.miTbnfP9vyHKDF4 5V2KYqD04pXaNZK85CS7e.e9ISnDaQl3KN60vZ1X1LmttAbEvYuCQC3qiPDc 7ms4SEingdjWlo5yGqpa1u7jwhdvCfJpfGcPyzo24nDnpD9lQYKBNFD5ai24 KaDwBnq_vnPHufHVofUR7_NIMAOQhvAAepCM870mKp69VcLNm7Rem2wwvV1W OVvS2IdPk5oo5hDFOGDQ1dknaLdglvxagf8nHIPvWMjetERbD8OfP2_tWFxf FMlyCjnwMIrHXwhXENfGsRANyuxFyuymObuii5NHZy4YE8gvLI2zjATr6HQQ 5Qq2ZH1qWjBO1Yfhb11f312gBHAxu3YGjvPbCYdS4dx2gpmPmTv6ar9kI7fA Dl6rpuaBQG3xcE2UOWRa5r01BR4bh2VhKEM3XB2zq2gb9zrO7vpuygwtZRHK 4wAHRdvSUQAF_iCcqsQqIWbI5TyrD5dZKK6JBO1cEQeNtdhMxqKGgNjxnp3z 0a8ZtorFTh4o2wgwd8lwxcUq
X-Originating-IP: [195.19.158.45]
Authentication-Results: mta1456.mail.mud.yahoo.com from=info.net; domainkeys=neutral (no sig); from=info.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO cardio) (195.19.158.45) by mta1456.mail.mud.yahoo.com with SMTP; Sat, 12 Jan 2013 22:49:29 -0800
Received: from User (rrcs-24-97-23-218.nys.biz.rr.com [24.97.23.218]) (Authenticated sender: rrr) by cardio (Postfix) with ESMTPA id 6B785AE29E2; Sat, 12 Jan 2013 02:55:14 +0300 (MSK)
Reply-To: <roberttchan7251@yahoo.com>
From: “UK LOTTERY ORGANIZATION”<Luckywinner@info.net>
Subject: WINNING NOTIFICATION!!!
Date: Fri, 11 Jan 2013 19:19:15 -0500
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <20130111235514.6B785AE29E2@cardio>

UK LOTTERY ORGANIZATION Luckywinner@info.net <> roberttchan7251@yahoo.com ( Robert T Chan ) <> Luckywinner@info.net

195.19.158.45 – The ip 195.19.158.45 has sent a high ratio of spam (over 51 percent).

IP Address 24.97.23.218 is listed in the CBL. It appears to be infected with a spam sending trojan, proxy or some other form of botnet. It was last detected at 2013-01-14 10:00 GMT (+/- 30 minutes), approximately 23 hours ago. This IP is operating (or NATting for a computer that is operating) the “sendsafe” or similar (such as Advanced Mass Sender – AMS) bulk emailing malware. This software is almost exclusively used for sending “Nigerian 419″/”advance fee” frauds or phishing attempts. It is also used occasionally to send pharmaceutical spam. rrcs-24-97-23-218.nys.biz.rr.com

 
Leave a comment

Posted by on 01/15/2013 in Lottery Scam

 

Tags: , , , , , , , ,

“John Smith” a.k.a “Norman Williams”

WARNING – JOB SCAM / NIGERIAN SCAMMER

John Smith also uses the names;
Norman Williams
Norman Williey
John Smith
Luis Williamson
Luis Williams
Smithson Smith

The newest name is Norman Williams and he is roaming job sites http://www.seek.com.au  www.buyandsell.ie  www.adlists.net — I’ve posted all the emails in order from newest to oldest received.

Date: Sun, 10 Mar 2013 06:07:45 +0000
Subject: Re: Personal Assistant posting http://www.glengarriff.ie
From: normanwilliey1@gmail.com

Hello,

Am still expecting your response regarding the email below, please advise.

Thank you

On Saturday, March 9, 2013, norman william <normanwilliey1@gmail.com> wrote:

Dear J,

Thanks for the feed back to my message concerning the PA i need. Do take time to go through this introductory mail and feel free to pass any questions on my profile briefly:

I’m Norman Williams, 53 years old and a father of 2 wonderful kids, a successful entrepreneur and investor and co owner of Norman Williams & associates. I’m also a research journalist and I travel every now and then within and outside the United Kingdom and Europe working on various independent projects, this is why I need someone who can help keep up to date with all of my activities especially when I’m away and a midst my busy schedule.

I have had a previous Personal Assistant who has been very commendable in her activities and who has been part of my life for the past 6 months, she has since moved on with her personal life and it has affected me in a way. I found her previously on the craigslist website and I sincerely hope I will be able to find someone again who will be as efficient as she has been. Please note that you are being hired only on a personal level. All correspondences would be made and promptly reported to me personally. The position is part time and home-based meaning you can work most times from your home as long as you have a regular internet access. You are also hired on a trial basis for now until we are able to see how well we fit in, this however does not affect your weekly wage.Most of your activities will be carried out locally and most official packages will be delivered via posts. You will be actively involved in my personal, business and financial life. In summary, your activities as my assistant among other things will include;

Acting as an alternative telephone correspondence;
Running personal errands, supervisions and monitoring;
Organizing and maintaining diaries, memos and making appointments;
Dealing with incoming email, faxes and post;
Carrying out background research and presenting findings;
A personal reminder for Schedules, programs, flights and keeping me up to date with them as they come up;
Arranging travel and accommodation
Carrying out specific projects and research;
Taking on some of the my responsibilities and working more closely with management and other staff related to me;
Making regular contacts and drop-offs on my behalf.
Handling and monitoring financial activities.
Processing and taking charge of weekly payments and purchases.
You will also be a part of my household and a helping hand to issues as they arise.
General clerical activities.
Basic wage is 500 euro per week.
>
Any extra personal expenses (transport, gas, etc) incurred by you while on an errand or otherwise will also be reimbursed by me at the end of each working week.This position is very flexible and it is difficult judging the exact number of hours you will be doing, just bear it in mind that there will be busier weeks than others with a steady pay. Working with me is basically about instructions and following them, my only fear is that I may come at you impromptu sometimes, so I need someone who can be able to meet up with my irregular timings. There is also a very sensitive issue on trust, dedication and accountability which I believe will resolve itself as time goes on.
>
>
> This is only an introductory e-mail, as time goes on we should be able to arrange a proper meeting to get things started officially. I’m currently in England now for a project, however, I do have a number of things you could help me with immediately, prior to my arrival.Due to the excessive number of responses to my Ad, do provide the following details about yourself for my personal record update and to filter applicants;

> Full Names:
> Full Contact Address ( Not P.O BOX)
> City
> State
> Zip Code
> Phone Number (H)
> Phone Number (M)
> Occupation (if any)
> Age

I hope you can be available for me immediately before I arrive, it certainly can act as a stable foundation to our impending working relationship.I will be waiting in anticipation of a good response from you soon.
>
>
> Regards,
> Norman William
>
> On Friday, March 8, 2013, <@hotmail.com> wrote:
>> Dear Norman
>>
>> Further to viewing your posting for a Personal Assistant on the Glengarriff website, I would like to request any further detail regarding this vacancy that you are happy to provide at this time. I would welcome the opportunity to submit a tailored response to your advert and look forward to hearing from you in due course.
>>
>> Yours sincerely,
J

Nov. 23, 2012 EMAIL: Hello,

I’m John smith, 52yrs, and a father of 2 wonderful kids, a successful entrepreneur and investor. I’m also a research journalist and I travel every now and then within and outside the US working on various independent projects ( Artwork ), this is why I need someone who can help keep up to date with all of my activities especially when I’m away and amidst my busy schedule.

I would love to meet up with you to talk about this job but I am currently away on business in Australia , so there will be no interview.I will be back by the end of January . I will prepay you in advance to do my shopping. I will also have my mails and packages forwarded to your address. If you will be unable to stay at your house to get my mails, I can have it shipped to a post office near you and then you can pick it up at your convenience. When you get my mails/packages you are required to mail them to addresses that I will send you, and don’t worry, all expenses and taxes will be covered by me. I will be paying you $300 weekly. I need your service because I am constantly out of town.If you don’t mind I will meet up with you when I return and then we can talk about the possibility of making this long term.

I will email you the list and pictures of what to shop for when I am ready,no heavy packages is involved.You can do the shopping at Sears, Wal-Mart, Kmart and Best buy or any other stores. I will provide you my UPS account number for shipping. I will provide clear set of instructions for each task I need to be done as well as the funds to cover them. I will mail you money to do my shopping plus upfront payment for your service.

This position is home-based and flexible part time job,you can be in any location you will be working from your home doing all the activities.All you need do is to check your emails twice daily and keep your phone on most times in case I might need to call you from anywhere I may be.I do have a number of things you could help me with next week if you will be available to start.This can act as a stable foundation to our working relationship.

For proper review(since i am not available now to set up a face-to-face interview) supply out correctly the information below:
Full Name:
Full Address:
P.O.BOX:
City:
State:
Zip Code:
Phone Number:
Email:
Country: US
Age:
Salary: $300 weekly($1,200 monthly)
Also,there will be compensation for efficiency and hard working.

HEADER:

Return-Path: <johnsmith141984@southfloridaexplorers.org>
X-YahooFilteredBulk: 195.173.77.134
Received-SPF: none (domain of southfloridaexplorers.org does not designate permitted sender hosts)
X-YMailISG: RsIvlGAWLDv6WzES.OVpYvmh9kBT3ofYMJ5kYPDwH1nc5RZ8 6zpsBJGS5WpEXpWkcDMtW30am9n2Ky0GaKL2X74GJScVkZ1NED9iJ2knokdf bO9jpVhGCw9d3TjoMiRW0iO_Jk2zSFzuodBh2p0W6DyP5BAJMFnwveUb5CJP t3qk9zr1wI7sEZVnBQdC3gGy0b4y0fmO1.sh1.6NkIFM_BxFCVBzq1HpUdzs NKvhOadbGWpTaI223FxJznkMzk2IjqcsCj4fLmyMg03Et3XvL727mPh0IrZa Z2Tdz03isz6ggN46qxKmkgLrKCEpS4o0PvFjc3zVDvoIWrd2_BBwro8aTsWt 1k5UM3dlkC7HS7j.C.50czgHLbLhVHozjkYInMUNdTctSwqClACPMWqRl0tR n_QVx24y75zXLj7Qx_Q3vFFtVADbWCUEPNORbEKPSJjV42UCujs0LHeLE3x9 1KzoYJfR8RijQVy118uwNxQv9hDq.ANuUAfL2uZevBpD87158bvxMw2W7hlY DoOTJfsO.5UKR2vUNcV_vtSL622LRyZ9WQYGeLCzyce5yLwSV2xEQnq0oI2C nVd5SS1RPovRslSmidX_fSNT1LJ0xnjRF.gMMGpDrZAgRbNJe0qy9y.GZFjo W8lhN4GpLxEsWMWyeOSEONyxtqbg4O0g19fsI0r0uoSUFg4Bls0tIMEOz9m6 f_s_JEA3oYfeFovXxnmX10jnNifhZSpq7JOghhcIBGyMayJbBTOqYDg7g.i5 YdD_K2WptA7gRBmeknDbqKjiKiZcVekqjhb0ZKVKwDFHk_3kFQhnLLG1PblU tszT1QW39hVaDlv9bGPzPn4vKqnYHm5YpPW1vrsOV8mWRaHM0tvkZDKPelei E0GYT.RSHWTG5l8_FQAYSRaEYxHFOfe0BdropDVlsa5ofhoLR5tHBppiS9G4 lQJmiEnB.NRf5KJuF3l8CKOkxPap9uHAuXagQqaeiRgc.Sm1AN1qZ1w_ccs5 hih0zWBECpWskt36uzVn92_0UuEFXKlPbzzjbB_tk9J._Ud1TmATJbYjMNRN pQyvG9n8Vxx_5oIr2e5jTD.zbADU4uwlrIF4bxdaivw4wSLftAL_cK3AhKLW E5JGFvA_qMqKa9NipI9SxADWoKRjaHfmfQsFWZ0UvcoFqlr4fon_h9HNf_XN caW2Dwkh2cQgkJheLC4yojaLFB8P1ojCY.bwGQOcKjQeHHz7KFUuGoTajVNd riZiRYqrRxOGjIsGATrdB9b1Jb2L2xwPgnhh.mojn8abSW68Dj_KeUwjG.xX lJigVEXn5Vy5UfUqn9Uu9ht4UplxpasFYH_fRR0PZwN77sF7KTW98F.cSVDv R7WQ0JsDGI7lbSSMHWT7NfY8uqZDdvERbANY5Sz6W_C.N3OTNxvXpYU2CIs2 Yo8-
X-Originating-IP: [195.173.77.134]
Authentication-Results: mta1267.mail.sk1.yahoo.com from=southfloridaexplorers.org; domainkeys=neutral (no sig); from=southfloridaexplorers.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO anchor-post-3.mail.demon.net) (195.173.77.134) by mta1267.mail.sk1.yahoo.com with SMTP; Fri, 23 Nov 2012 11:24:28 -0800
Received: from [80.177.76.243] (helo=geemarc.com) by anchor-post-3.mail.demon.net with esmtp (Exim 4.69) id 1TbyrT-000362-nK; Fri, 23 Nov 2012 19:24:27 +0000
Received: from User ([24.97.23.218]) by geemarc.com with Microsoft SMTPSVC(6.0.3790.4675); Fri, 23 Nov 2012 19:24:25 +0000
Reply-To: <johnsmith141984@yahoo.com>
From:
“John Smith”<johnsmith141984@southfloridaexplorers.org>
Subject: Personal Assistant!! $300 weekly ($1,200 monthly)
Date: Fri, 23 Nov 2012 14:19:01 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset=”Windows-1251″
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Bcc:
Message-ID: <GDC01BHksQ6KLV47ozI00001290@geemarc.com>
X-OriginalArrivalTime: 23 Nov 2012 19:24:25.0312 (UTC) FILETIME=[26085600:01CDC9B0]
Content-Length: 2415

SEPTEMBER 2012 EMAIL – 

Subject Line: Personal Assistant!! $300 Weekly
From: “Smithson Smith” <johnsmith010218@me.com>

I would love to meet up with you to talk about this job but i am currently away
on business. I am presently in Madrid Spain for a short business trip so there
will be no interview. I will pre-pay you in advance to do my shopping. I will
also have my mails and packages forwarded to your address. If you will be unable
to stay at your house to get my mails, I can have it shipped to a post office
near you and then you can pick it up at your convenience. When you get my
mails/packages; you are required to mail them to where I want them mailed to.
You don’t have to put money out of your pocket, all you have to do is have
packages shipped to your house and do my shopping. You are allowed to open the
packages to reveal its content.

The content of the packages are computer,electronics,clothing, bibles business
and personal letters. All expenses and taxes will be covered by me. You will
work between 10 and 15hrs a month. How much will you charge per week? I will pay
$300.00 weekly for this position.That is not a bad offer is it? I need your
service because I am constantly out of town. I work in real estate and i own an
Art Gallery in Madrid. I will return to USA November, 2012 so this process will
be going on till i get back in November. If you don’t mind, I will meet up with
you when i return and then we can talk about the possibility of making this long
term.

Well, let me know if you are able to handle the position. Hope to hear from you,
i will email you the list and pictures of what to shop for when i am ready. No
heavy packages is involved, You can do the shopping at any nearest stores. You
will be shopping for Electronics and clothing’s. I will provide you my personal
UPS account number for Shipping. All you have to do is provide my account number
to UPS and shipping charges will be applied into the account. I will provide
clear set of instructions for each task i need done as well the funds to cover
them.

If I were to mail you money to do my shopping plus upfront payment for your
service, where would you want it mailed to? How should your name appear on the
money order/Cashier’s check Maybe you can provide me with the following details
below :

Full Name:
Full Address:
P.O.BOX:
City:
State:
Country: US
Zip Code:
Phone Number:
Age:

Thanks and please get back to me asap and
confirm this mail asap.

Sincerely

HEADER DETAILS:

Return-Path: <johnsmith010218@me.com>
X-YahooFilteredBulk: 69.61.100.40
Received-SPF: softfail (transitioning domain of me.com does not designate 69.61.100.40 as permitted sender)
X-Originating-IP: [69.61.100.40]
Authentication-Results: mta1183.mail.gq1.yahoo.com
Received: from 127.0.0.1 (EHLO vES2k301.AAILive.pri) (69.61.100.40) by mta1183.mail.gq1.yahoo.com
Received: from User ([66.15.126.19]) by vES2k301.AAILive.pri with Microsoft SMTPSVC(6.0.3790.3959);
Reply-To: johnsmith010218@yahoo.com
From: “Smithson Smith”<johnsmith010218@me.com>
Subject: Personal Assistant!! $300 Weekly
Return-Path: johnsmith010218@me.com
Message-ID: <VES2K301RNpggkzpB8J00005f7d@vES2k301.AAILive.pri>

John Smith <> johnsmith141984@southfloridaexplorers.org <> johnsmith141984@yahoo.com

This scammer is also using the IP address 82.128.39.179 Location: Lagos Nigeria – FROM THE INTERNATIONAL POLICE AUTHORITY UNITED STATES SECTION (INTERPOL)
Name: Luis Williamson
Email: luisiwilliams@gmail.com
Phone: +234-8059523125

62.49.15.17 – Leeds, Liverpool (UK)

MYSTERY SHOPPER (SECRET SHOPPER) – 195.173.77.134 and 41.155.42.70 which is a Lagos Nigeria IP location with a VERY bad IP that’s been black-listed on multiple anti-scam sites. Name: John Taylor – jtaylorcode@aol.com> Message ID: ATHENAxnIVgEkzyTwrk00000521@athena.shepherdeurope.local (and) 229e.efd194f.3c53d999@aol.com

41.155.42.70 also lists starcomms which is a telecom operator company in Nigeria

According to Project Honey Pot the IP address of 195.173.77.134 (which isn’t the scammers real life location but is used to confuse potential victims.) is a dictionary attacker, spam sender and mail server – believe is list of spam/scam sent by the same IP address. If you get an unknown email from this IP, stay away!

Example Messages Sent From 195.173.77.134
From:  Western Union info@westernunion.ch
Subject: Notification
From:  Hajia Zainab Hassan zhassan00@mail.com
Subject: Business Proposal  Response Required
From:  Hajia Zainab Hassan  zhassan00@mail.com
Subject: Business Proposal  Allah Afiz
From:  Hajia Zainab Hassan – zhassan00@mail.com
Subject: Business Proposal – Allah Afiz
From: “FHCD”<emersovest000@mail.com>
Subject: Security Alert .. Read Carefully And Respond ..
From:  Enquiry Notice  williamshaha@freenet.de
Subject: Answer This Questions.
From:  ANDY LAU  andylauboa@gmail.com
Subject: URGENT; DID YOU AUTHORISE LEE FUI FUI
From:  ANDY LAU  andylauboa@gmail.com
Subject: URGENT; DID YOU AUTHORISE LEE FUI FUI
From:  Dean Harry Associates – info@noreply.com
Subject: Will Execution
From:  Mrs. Grace Spencer  mrs_gracespencer@yahoo.co.uk
Subject: MESSAGE FROM GRACE SPENCER
From: Alain Othman  alainothman@ecotermo.ru
Subject: Inquiry for Investment
Below are usernames used by spammer/scammers using this same IP address
Example User Names Used By 195.173.77.134
User-namehui_winney
User-namemaisha.czysz
User-namefortnightguiltless3
User-namecharita_gahr
User-namejewel.f.dayley
User-namejosefina.t.alvorez
User-namekimberly_c_wehrmann
User-namemayola_bozzo
User-nameedakwong
User-namegrims2889
User-namelessig4902
User-namecloukidis4
User-namenella.s.stopp
User-namesheldon.ferell
User-namebranda.amour
User-nameroderick.keister
User-nameloan.forro
User-namekatharyn_seckler
User-nameknowingnoella
User-namelulu.w.eggert
User-nameywe3369
User-nameogbochner3
User-namepointlesspossibility4
User-namebrigitte_mouzas
User-nameaogan001
User-nameesotericphilbrook
User-namemsk2958
User-nameyuonne3910
User-namegerry.cromer
User-nameservopearlie

Visit Project Honey Pot if you would like to check out a particular IP address. If there is no information on that address and you believe it’s from a scammer then report him and let PHP do the rest! 🙂

When I look up information from this scammers email header (which is a Nigerian location) – a previous phishing scam I’ve added on October 10, 2012 pops up. To view the phishing scam click: hanscgroot@aim.com FYI, this phishing scam emailed under 41.138.187.80 by webmail-d041.sysops.aol.com ( 205.188.181.84 ) – Additional email addresses and scams in the comment box of that post as well.

 
1 Comment

Posted by on 11/23/2012 in Employment (Job) Scam

 

Tags: , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: