Employment -Schlumberger

Schlumberger UAE <[email protected]>

Schlumberger Technical Services, Inc.
Convention Towers, 4th Floor
PO Box 9261 Dubai, United Arab

Subject: SCHLUMBERGER Recruitment

As-salamu alaykum

Mr. Jafar Oshriyeh Ahmed
Head, Human Resources Dept.
SCHLUMBERGER UAE.
Tel:+971556437167

[AlanJones]

Please provide evidence of the scam, such as the emails where you were asked for money for visas or referred to a travel agency. Without proof, your post may be removed.

From the WhoIs:

Creation Date: 13-feb-2015
Expiration Date: 13-feb-2017

Registrant Name: Bob
Registrant Organization: BOB Services
Registrant Street: Rua do Crucifixo 4554
Registrant City: Lisboa
Registrant State/Province: Lisboa
Registrant Postal Code: 1100-184
Registrant Country: PT
Registrant Phone: +351.213466998664
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]

Telephone number +971556437167 is a mobile phone.

Please post emails from uae-slb.com with complete headers. It is an email-only domain; we need headers to kill it.

I am trying but so far have hit a brick wall.
I searched on-line how to expose the full header in yahoo email but the directions do not reflect what my screen shows.
How do I expose the full header?

[AlanJones]

Open the message that you want to view and then click on the down arrow next to "More" at the top of the screen and select View Full Header from the drop-down menu.

That option is not available.
It is with the email coming from you but not the schlumberger address.

Try the instructions here: http://www.iptrackeronline.com/how-to-e ... eaders.php

At least post the body of the email if you can. We need proof of scam.

[AlanJones]

From Schlumberger UAE Wed Mar 23 08:02:55 2016
X-Apparently-To: [Removed AJ]; Wed, 23 Mar 2016 08:02:56 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of uae-slb.com designates 162.210.70.56 as permitted sender)
Y2ggMjMsIDIwMTYgYXQgMToyNSBQTSBNYXJrIER1UHJpZXN0IDxtYXJrZHVw
cmllc3RAeWFob28uY29tPiB3cm90ZTogPiA.ID4gQ2FuIHlvdSB0ZWxlcGhv
bmUgbWU_VGhlIGludGVybmV0IGlzIGZ1bGwgb2Ygc2NhbXMuSSBhbSBob21l
LiBJIHdhbnQgdG8gPiBkaXNjdXNzIHRoaXMuID4gwqBQbGVhc2UgY29uZmly
bSBlbWFpbCByZWNlcHRpb24uID4gPiBCZXN0IFJlZ2FyZHMsIAEwAQEBAQ--
X-YMailISG: 8TA0WS0WLDvzEUtFpKqVc6brOrL5fjmAQZ.OeYmXHoWsuN9w
az1Jt.fgFB5PUjmJy1hhZKi4aHq59KMnrSv5ID23.1_ugs5JPd9SY5JtiDM0
2TAY2fxz464DdIO.zKwJzgwieAXXf6bGfFK2_lqK7YjQJDOx2iY63boQJREu
DCV6mtFyYb9rxG7_Ol.N3OJcgMX7_GAWN5I_06SroOEv_1jcCSj02Hv3IfNG
vwxZBNlF6o_X9cIrsiCtBT3hNkQdEYIsaEWwYXbCGMRGRtaZZlXOCAk_WPH3
o5lcrXxvpNf80ycbVTUxuQdEFNvoA9PRHkAcngExW4PCjwynamVaQyNtnLpg
YOzKQXqynXtII4pBFY0NiVinQR53r9aySMYzKDoZndDb7ZbtUCuW3Bsl6RUo
OADFAgXFljmCTm.yuonQssrU7rv4_lpP7piap_bYexrDeyXUxozzlMuA2oep
nW2hk9mdP0bkoHjTDF9zM7PYjdJB6pMNTR.gFE8Y7M4pRO.FcPHir_uAF08A
VFqpqu.VdxAcGQhTLvOieTFAFQiEMJlL_ny6ov58Uhf.IX_V4U5j0BDSbEaX
wUOjvMDPtfk.ChM.dC.1wl3D5tewXwtcUzB5ZvS.cRXKgxhcFRhZRAkzK9bG
6A9fcgiIqqEiIjpwWNqXRjUXEgpwVtR0zEKetqNdgeN06rCk4ANU68I_Y4Ox
4WTNQPwOG6kNmi5Y5vyjEN618D4tssvT5g_5Md8r1YGoNsshobukTB2BrooC
nvmVEiX9k.5KyTViwbiPyn_.hDx7PyjGww0AtzWDJj8E_A2sF1JLWfsZByUk
6CHS0i45UmVf8pEN2.f.yIfnhUlNncccmDbuPkpgoSft9xSsO2EMpEjTrG0E
FkTAbfllZOSZMj3S6dS0Uvy7GyhLkIWza4W1ZGE8vU5dpfbG14j3RjgsX6oV
WE_epI3JLF5wDUvbMmSqdL7McNpWYaerQ_VwjGOndwhjA7KmrEfhfx0xWqbU
6vOQO.0mDZuksUgZjytfOZ.EseVc7_Vxqct0srgppAoH6jAlHgSibUqlHido
Mh5Li2QUFCYvj6Eimahko8WKuHgy3yK_FFf77jlAX4XjCd.taw9U.1i4F_em
ddUHeyHbfv53gOD2BgU48XwwPEFGobFyKmLVuej_xA_4FndgRSdm4ZIfky5G
My6JxyUjwIPLXawxJvZsWjAP9nEg5AKUuMdIkvgcEbDPBPBt2xXN4CfewROJ
aYD_.8AHdKpA5kp.eckfYaxNy_aQUoiOjRzDMD_4xrXK_yK4vEuSQLd43gAP
wylc6Ci8iG0JATFl2l5j.4TmxQADXpu1uBHdLUlSpZDhYD1JDXz_8zRLnj4i
Xltkrorw1DUq7ULlTnRPQb.WGfQ0gzy4GGTUNjgApSBY82ZOoVuBE0oxNTi8
jATJ8DFvPdX_UK5jh3oZNoQcTB.6Zy_XVGApjctGrruixFL1T0pM
X-Originating-IP: [162.210.70.56]
Authentication-Results: mta1389.mail.gq1.yahoo.com from=uae-slb.com; domainkeys=neutral (no sig); from=uae-slb.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO us2.outbound.mailhostbox.com) (162.210.70.56)
by mta1389.mail.gq1.yahoo.com with SMTPS; Wed, 23 Mar 2016 08:02:56 +0000
Received: from 172.16.214.51 (unknown [199.79.63.242])
(using TLSv1 with cipher AES256-SHA (256/256 bits))
(No client certificate requested)
(Authenticated sender: [email protected])
by us2.outbound.mailhostbox.com (Postfix) with ESMTPSA id 3B1F5181702
for [Removed AJ]; Wed, 23 Mar 2016 08:02:55 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uae-slb.com;
s=20150213; t=1458720175;
bh=siigAmcoPUXUAhZFPYW6yoGceByWwxb7mm3X25siH/s=;
h=Date:From:Reply-To:To:In-Reply-To:References:Subject;
b=Rvj3yPQcmPfpshmiIKhog1NOwFdHsTrKiQ8yitdrTpur3TeIu5/Xt1YL4ApL7DdA1
HaNJ/3NSQZeqqyQzzK0/6y2HOHRsj4Zv1+mC3M8PJuWOeVXNGC18U9hTLhFRHrOkr6
pptF7qp4pKMCQ2vaM5TDNVazpiXiaxuESiumR7YI=
Date: Wed, 23 Mar 2016 13:32:55 +0530 (IST)
From: Schlumberger UAE <[email protected]>
Reply-To: Schlumberger UAE <[email protected]>
To: [Removed AJ]
Message-ID: <1285285394.44187.bd32d17b-58bf-4ce4-a4ae-aeaffc589957.open-xchange@webmail.uae-slb.com>
In-Reply-To: <[email protected]>
References: <1185352120.3061993.1458714523047.JavaMail.yahoo.ref@mail.yahoo.com>
<[email protected]>
<1336612321.42541.bd32d17b-58bf-4ce4-a4ae-aeaffc589957.open-xchange@webmail.uae-slb.com>
<[email protected]>
Subject: Re: Dear [Removed AJ]
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
Importance: Medium
X-Mailer: Open-Xchange Mailer v7.8.0-Rev26
X-Originating-Client: open-xchange-appsuite
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.1 cv=U5oydbfu c=1 sm=1 tr=0
a=V2oOSHMQU5vliqJq82dxgQ==:117 a=V2oOSHMQU5vliqJq82dxgQ==:17
a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10 a=IkcTkHD0fZMA:10
a=u1WCZVUItiaHnzESCbgA:9 a=X36JteQHjE9H6FLV:21 a=y6MVPr1NEUOd-I4i:21
a=QEXdDO2ut3YA:10
Content-Length: 2434


IP Trace:
Path IP Hostname Country City Latitude Longitude ISP
Sender 172.16.214.51 Local network computer
Path Point 127.0.0.1 Local network computer
Path Point 162.210.70.56 us2.outbound.mailhostbox.com Virgin Islands, British Road Town 18.4167 -64.6167 AS40034 Confluence Networks Inc
Destination 162.210.70.56 us2.outbound.mailhostbox.com Virgin Islands, British Road Town 18.4167 -64.6167 AS40034 Confluence Networks Inc

[AlanJones]

Thanks. Please can you post the body of the email that goes with those headers. It is only with the full mail, that we will have the evidence to show to the hosts that the domain is fraudulent.

Try the instructions here: http://www.iptrackeronline.com/how-to-e ... eaders.php

At least post the body of the email if you can. We need proof of scam.

The instructions you supplied did not apply to my case.
These did: https://answers.yahoo.com/question/inde ... 354AAqvvtb

thanx anyway.

Thank you for posting the headers. We also need the body of the email for proof of scam.

> On Wednesday, March 23, 2016 2:47 PM, Schlumberger UAE
> <[email protected]> wrote:
>
>
> Schlumberger Technical Services, Inc.
> Convention Towers, 4th Floor
> PO Box 9261 Dubai, United Arab EmiratesDear Mr. XXXXX
> You are welcome to the Schlumberger UAE, it is our pleasure to see and welcome
> you soon to UAE.
> About the International Working Certificate (IWC) as stated in Article 4 of
> your Contract Agreement/Appointment Letter,the Schlumberger UAE has this
> policy as reasonably stated in Article 4 of the Contract Agreement/Appointment
> Letter for every non UAE citizen. For this reason you shall obtain this IWC
> from the Ministry of Interior Affairs UAE through an accredited Immigration
> Consultant .Now all you need do is to obtain the compulsory INTERNATIONAL
> WORKING CERTIFICATE(IWC) which shall cost you US$599, This IWC shall be
> obtained from the United Arab Emirates ministry of interior affairs by an
> Immigration Consultant here. This INTERNATIONAL WORKING CERTIFICATE (IWC) will
> enable us to prepare your visa and other traveling documents which the company
> will do for you.Note that this US$599 for IWC shall be paid back to you once
> you arrive UAE to start work with us..Therefore, use this western union
> payment information below to send the fee.
> Receiver name: Abubakar KasimAddress:Dubai UAEOnce this done your IWC shall be
> obtained from UAE MINISTRY of INTERIOR AFFAIRS through accredited immigration
> consultant.Thanks as I wait to see and welcome you formally to Schlumberger
> UAE. Once again congratulations.
> As-salamu alaykumMr. Jafar Oshriyeh Ahmed
> Head, Human Resources Dept.
> SCHLUMBERGER UAE.
>

[AlanJones]

Thank you, the use of Western Union proves that it is a scam.

Agreed, I will not provide further details as I care not to aid them to modify their trap.
If you are reading this you scamming scumbags hope you befall bad luck during your time of breathing.

Thanks for your help Scamwarners.
Cheers....

Thanks for the email with headers. uae-slb.com is in the process of being reported for fraud.