Is this a scam?

ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=198. ... xt=netref2
#

NetRange: 198.2.128.0 - 198.2.191.255
CIDR: 198.2.128.0/18
NetName: RSG-DELIVERY
NetHandle: NET-198-2-128-0-1
Parent: NET198 (NET-198-0-0-0-0)
NetType: Direct Assignment
OriginAS: AS14782
Organization: The Rocket Science Group, LLC (RSGL-3)
RegDate: 2013-04-17
Updated: 2014-03-03
Ref: https://whois.arin.net/rest/net/NET-198-2-128-0-1


OrgName: The Rocket Science Group, LLC
OrgId: RSGL-3
Address: 675 Ponce de Leon Ave NE
Address: Suite 5000
City: Atlanta
StateProv: GA
PostalCode: 30308
Country: US
RegDate: 2010-11-15
Updated: 2015-03-23
Ref: https://whois.arin.net/rest/org/RSGL-3


OrgNOCHandle: PRODU8-ARIN
OrgNOCName: Product Development
OrgNOCPhone: +1-678-999-0141
OrgNOCEmail: [email protected]
OrgNOCRef: https://whois.arin.net/rest/poc/PRODU8-ARIN

OrgAbuseHandle: ABUSE3411-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-678-999-0141
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE3411-ARIN

OrgTechHandle: CARLI3-ARIN
OrgTechName: Carlino, Chris
OrgTechPhone: +1-678-999-0141
OrgTechEmail: [email protected]
OrgTechRef: https://whois.arin.net/rest/poc/CARLI3-ARIN

OrgTechHandle: PRODU8-ARIN
OrgTechName: Product Development
OrgTechPhone: +1-678-999-0141
OrgTechEmail: [email protected]
OrgTechRef: https://whois.arin.net/rest/poc/PRODU8-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Received: from CY1PR12CA0007.namprd12.prod.outlook.com (10.160.137.17) by
MWHPR12MB1232.namprd12.prod.outlook.com (10.169.204.148) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.659.11 via Mailbox Transport; Sat, 8 Oct 2016 22:47:19 +0000
Received: from inbound.mail.protection.outlook.com (216.32.180.120) by
CY1PR12CA0007.outlook.office365.com (10.160.137.17) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.659.11 via Frontend Transport; Sat, 8 Oct 2016 22:47:19 +0000
Received: from BN3NAM04FT045.eop-NAM04.prod.protection.outlook.com
(10.152.92.59) by BN3NAM04HT072.eop-NAM04.prod.protection.outlook.com
(10.152.92.249) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.629.5; Sat, 8 Oct
2016 22:47:19 +0000
Received: from COL004-MC2F12.hotmail.com (10.152.92.53) by
BN3NAM04FT045.mail.protection.outlook.com (10.152.93.120) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.629.5 via Frontend Transport; Sat, 8 Oct 2016 22:47:18 +0000
Received: from mail178-15.suw51.mandrillapp.com ([198.2.178.15]) by COL004-MC2F12.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
Sat, 8 Oct 2016 15:47:17 -0700
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mandrill; d=gtp-sarl.com;
h=From:Subject:Reply-To:Message-Id:In-Reply-To:References:To:Date:MIME-Version:Content-Type; [email protected];
bh=lgbBUczLahkI/UgusUvSaLdJHxU=;
b=Yvqawl18I5YX6eAdSflI+iq+SsZJbyvGqVj8H1i2hq8+jaKR5H/QvlBHA1hHXy+IBLpfZEuJBb39
3HU4prtGgCuqb6J551WPYjjpbGjO1j9QWka68d3AlfhKYGXex3Xx8pKNPV+67ceOc0YwjUk8KCES
pyNfPQftbAr47Yq+nMg=
Received: from pmta05.mandrill.prod.suw01.rsglab.com (127.0.0.1) by mail178-15.suw51.mandrillapp.com id hv5rna22s10g for <[email protected]>; Sat, 8 Oct 2016 22:47:16 +0000 (envelope-from <bounce-md_30934997.57f97774.v1-7218fb194f09460e93dde747a18846c0@mandrillapp.com>)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mandrillapp.com;
[email protected]; q=dns/txt; s=mandrill; t=1475966836; h=From :
Subject : Reply-To : Message-Id : In-Reply-To : References : To : Date
: MIME-Version : Content-Type : From : Subject : Date : X-Mandrill-User
: List-Unsubscribe; bh=SJanMhLvNT9tK/UoamEEkyQOfebhRJewz2xEPPwl+Kk=;
b=qMAyhuGbq+9Ed4kyIHs58CCW/Hr7hR9WLj9BbM3V+ffFeT9j5SbtLcKgNlXbInN0lt9Hg6
UD/rIkEw3gj0xKX+Z0RKZzbYaxS3b3yIrMDXJrtRnIZ6YaljRSSGUBs5huqd5hZjmFRD6CqK
9nz2S7HnYvzVvmH7VcxnPlQ5esfVI=
From: Katrin Talis <[email protected]>
Subject: Re: Target gift cards 10816
Return-Path: bounce-md_30934997.57f97774.v1-7218fb19 ... illapp.com
Received: from [31.10.147.132] by mandrillapp.com id 7218fb194f09460e93dde747a18846c0; Sat, 08 Oct 2016 22:47:16 +0000
Reply-To: Katrin Talis <[email protected]>
Message-Id: <[email protected]>
In-Reply-To: <MWHPR12MB123206EE54EDEAA3C782C2C8CDD90@MWHPR12MB1232.namprd12.prod.outlook.com>
References: <MWHPR12MB123206EE54EDEAA3C782C2C8CDD90@MWHPR12MB1232.namprd12.prod.outlook.com>
To: xxxxxxx
X-Report-Abuse: Please forward a copy of this message, including all headers, to [email protected]
X-Report-Abuse: You can also report abuse here: http://mandrillapp.com/contact/abuse?id ... 47a18846c0
X-Mandrill-User: md_30934997
Date: Sat, 08 Oct 2016 22:47:16 +0000
Content-Type: multipart/alternative; boundary="_av-5Pcmx39k5BiL3mey_rRIKw"
X-OriginalArrivalTime: 08 Oct 2016 22:47:17.0624 (UTC) FILETIME=[EBCFFF80:01D221B5]
X-MS-Exchange-Organization-Network-Message-Id: f7785ed6-145e-47b1-70a2-08d3efcd0f1c
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 198.2.178.15
CMM-sending-ip: 198.2.178.15
CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is 198.2.178.15)
smtp.mailfrom=bounce-md_30934997.57f977 ... illapp.com;
dkim=pass header.d=gtp-sarl.com; x-hmca=pass [email protected]
CMM-X-SID-PRA: [email protected]
CMM-X-AUTH-Result: PASS
CMM-X-SID-Result: PASS
CMM-X-Message-Status: n:n
CMM-X-Message-Delivery: Vj0xLjE7dXM9MTtsPTE7YT0xO0Q9MDtHRD0wO1NDTD0w
CMM-X-Message-Info: wjTPN9XlLm47Nnsnbs3WH47vNhT91PFnPS9V2O5kVhdDkKaLm7mBLRAt2TbqnBqrI4lnNtzM4IJngHTJkCJzcKyP5zTYhXH6NI1z72wxfMq9D34N4+llJvpLsTuhG1lJBn0vGMeW+w2Kc1eM6M82Ozuh4nONmhSqWcpJtX51CwmyZnkNgCZuMwVtSHoNruiqRR5IYZU6Lx4Y/WZviGDsjTfxL4ykTu+s3p8t3qB8mldJt7EB7DLlHQ==
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Exchange-Diagnostics: 1;BN3NAM04FT045;1:MIRbA0ucA2+Xvn1tqeISh6IBcC3JETmdWLMPhIm6XEeVvn9kkvYiowagUTgWhKWnP+kQ85jZRW+SgBsmn1fDZPoqtutZ60kB3JpPdd9CrJ3mWG2+qN+qoDuflZURz0pVVkjGGKmQceGuVosacRLPqA==
X-Forefront-Antispam-Report: EFV:NLI;SFV:NSPM;SFS:(88900001);DIR:INB;SFP:;SCL:1;SRVR:BN3NAM04HT072;H:COL004-MC2F12.hotmail.com;FPR:;SPF:None;LANG:en;
X-MS-Office365-Filtering-Correlation-Id: f7785ed6-145e-47b1-70a2-08d3efcd0f1c
X-Microsoft-Exchange-Diagnostics: 1;BN3NAM04HT072;2:yZa+ZF2ezTl7pa9Ep+RYamtY4R30dbxgWykuYjXBF9ffhym0jGBW4ixfqj/YTUPwYXe/Hk+EBSDehiil331tNPVcpIX/IAcnNsGI6Xm78+zt3jkWRj/tK4j4ZN4hZ7RIMxPIrdwpW5a3Zhk7O2tSUbnhWKQDODAw79q83WxNUPhaoTJKphcf7MBwwFfytsbSkSWJm+owDStJ/mRta3KUow==;3:igLPXxEHVKbfXD9apkdzqtCa2qMFjss0AOas2NaHhVNkivWhXVynLdwVjm4AelMsfeojE82wMzXy5I9uzkRxpZ7PWTMSTmPONg06S7FV2T62a9oUxeled6VtZfmHUWad5AIkcbicWoONpeosxUC8xy5pxom1FLfbX2WVYrZKLEY=;25:3kUVHVK94YHMHdsnMogPdsM2ThSud9Jh2ERn4ZQCux4SQ/3FG3f/xMqOWPSEQyowb52reua5XSg+tTyHtI+/F0QTUxLDNXENzuxM/nhLMOFKaMZdIbsVFuOKVcSkv1333bpzTbk+5d0ELXM2rRetnL9zKZSOH1lhD/63VA80Gm8NnPIjcFfEWM1xUnIisNDgfHa1ymXv51H9cV+pwO/1um38Mw/qlAv3VZVw939Cq/8Orv3Y9PjWU2xSS01+2Vx8c+5bPGSqce7sFT+vpQ8Cqu3pMdX0LkDAcCEnXlZ9ekjGLU7HVH9JD+Z0xz5udq+GaoDgYRsKpLKvqFtSx9aObEw65tUX9/roD8BBi89ZVH9TCcdUCKjVRoHGnkOxHGnLsEQD9Qnf/zleLK5E4OYtTqlOPWUN7PVomdxeUtPy4nZN1AidEYuDtAitE/JPY7y0
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(8291501002);SRVR:BN3NAM04HT072;
X-Microsoft-Exchange-Diagnostics: 1;BN3NAM04HT072;31:2q7IkJ3KtfbwLhx8zfshWfzg0aSCSwCOetEty6nMLdiqvmrEAiMPagKf5zIIxUBjqNitFBHEz22MC6yEz1DBQMJzKXb9sjIEqaVCEm/TqaIDjt1HF7PkZK9T8T0xYNKKQa4nSW302YCze8yIQjniSBEDM/OOryE2bdZC+2wWyCphWz307xvluMfgRSVos9vbaObquYtnsvAOl+mRKSsVn/XkSG5IusA1IgC0ztxPX/4=;4:lZ59xGhQI76odglQLpVYtliWlvoEMKOaqwbHUS4P57NfNvczxXu8URuQnEyGkRu+Va3tGwt9Sh44Fn0ssCoezOfRcMpdOttArA6oPmQVpfkFDN+elhtSkfA3/Z76TFQaRAKsw1RcnCKucADXLYaZzcXcoeraspM2pzs+qGWI8h1/XIHtyF6mff53y9o0ACQeTjojS7yShOIPQ8sUQrbUVtLw6HCZ0DJMZZj67hZ5yH590ZwVzhcBEwQZ6pNSXI1GKRNSTcdOKW1+W8N0mZviCA==;23:fRSnqc0YEB9E4qiys0bdfedDSJRQo9G+kEXTnlQInLyJZMpTgOdltLVhMIz33kH0q7lrYRv8C+5dVcjiSJBWoWlG+bhyQzjtJ7FYpenm6/7vSq5mLhEPDGTaQRncYJKo2ACTlYTW3K/0FYciDrCJ6NgmJb9z3Wh7j9aseFiE62VIC6uAi1ejA5ZiH5efr4ypIhJqDjYDaxgV3OO+dwP6RA==
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(82015046);SRVR:BN3NAM04HT072;BCL:0;PCL:0;RULEID:(204819028);SRVR:BN3NAM04HT072;
X-MS-Exchange-Organization-SCL: 1
X-Microsoft-Exchange-Diagnostics:
1;BN3NAM04HT072;6:1xUKX3xKjMKLawtAIoLeI2RVMgj3+Sn/r+76ylQ9rUnWoGyRwNvLAe1cDg0CyJId02/WedILPToiwQG0EeqZdEcbGnNCnkKaHIyREK9K+rIhjr2zh+lhJcVmO4FBY5kjifddImMM7Rcq7YJDFwbBzyXutR1kO66KgRIW3AsqVwi39kdOLyjfaxWJo9gX/6jxFw635j4vfZSHKhXbYb9eZ7j2IoPifUKexyETbLvdjVDjaWWImkCDoWTaIFn2taoO0CwoGQCPfG0juQiTmb4GDfJh/TtXk6bK/C9WQ1wUqTXjXNf1csvUEQcBDH9y5uCO;5:YIFQE72kunPPGMjflScZUNf0FB1UgSOadjhQugZf3exNzQ6YyLVguMNIeKmwOTZvVDtygFad4RIJLUrdWYYgES7Hl7X15XrrdWfQ5NhQEJ7kpPjNlS8NBhodg4hvG8Rwo5vZnXOWflgbhcVOFrALcao2k0s0tZ45pSZCgs9qSBM=;24:+ilzrKnOpyVifN2LM1IacJAd5I/OcTxFM8jstXVYlCS5yy9+4Pfrp1t1NqkHIaY9Vsw8yEULwIavecoF2GiPMTz1PmwTfUsKalG4vYTH/6k=;7:y8Agl8EyXDc4OmeAWydlbZhsyhxM48vieXSSlQxZmojR6SSl1cct8+UK/eH3krMJ8o7P/m24hOnL2y4KD31eVzCrKK4RfVrxqjLUP0rrbPM9lpMZmcLrjiS5XAtCfIezoJFYf5dHeQ+7l/hnZVvNcPyZGkCDsUtAGsjaYO3WGPldqyWkrGXbiyXvvUXu2YJ7jFPz9uRwQ/1+bNm/MRlbmPgIeN/6ORcJ0qFqws8vmqN8Rg8kNPg8LroQPj0GPXTFjuBoM3xsHMGls0JYnyYMYDN+h9PpfHUQ+Ua53g2B256jxqJ71ncvk8rWi+5QFooCzRAB3XQZX0LYWdcsYHst28mFHxONTpzU32EFrTFHleg=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Oct 2016 22:47:18.5540
(UTC)
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3NAM04HT072
X-MS-Exchange-Organization-AuthSource: BN3NAM04FT045.eop-NAM04.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-OriginatorOrg: outlook.com
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.3027216
X-Microsoft-Exchange-Diagnostics:
1;MWHPR12MB1232;9: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
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:1;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:198.2.178.15;WIMS-SPF:mandrillapp%2ecom;WIMS-DKIM:gtp%2dsarl%2ecom;WIMS-822:us%40gtp%2dsarl%2ecom;WIMS-PRA:us%40gtp%2dsarl%2ecom;WIMS-AUTH:PASS;ENG:(102400050)(102408045);OFR:SenderInAddressBook;
MIME-Version: 1.0

--_av-5Pcmx39k5BiL3mey_rRIKw
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Microsoft-Exchange-Diagnostics:
1;MWHPR12MB1232;9:RlQA8lKKhzLKxL7XkjpuykFbOUoUO15/ETWINvKlBO2Qu5SMLb8eKgZj/OC+dMrgWkqNEkGsSgw1d1PURX4ozwEKqlvkjDRYW1ME9ywxEf74/4qtSu6aPwqnet/9UikpKcmiiBOJ/Vdra4FQnmapAWSQlBEUOBDwH5BDNX+6fICoqraGQsGkpGPfmPzdG16YW6UC7dmW/EiRru+EQs+C4al2LM8rE3DhO6x9T0wZqEUZ8TMPK+m0OR2ViHIjtm1FeSiLksoWHMFVpZloqVW6ueJNIZpy5q5WzHK/6IBQXvaYcnb3N5ahB+txd2Kl82os03701nBto94cBz6NjiULoivVDaKJ6DGunpZukzMQyankEnpPLOkCNxrSyMENMYegp1Ma6TxZDAl+3j22eFXz/7IzNlchnMpFIT9rTuTsouvNm4uTOahWzn0dGYjo6Fea9U4P4Kmw3EYO7oNcnfjbC+OpX22ZLnRMt4zwLByWTWwdP7c6JvcrppTM5YSfBBsYFQpEG5evb8c6teF0f/tuQNErqJv3Q/aOvamOaWjdbDb1riYgLpDaPivcpaXrv7CoRM7ab2CA1zn/rCnJu7CkY14CqTFvfOxkngpG2Y9sqoTD84j/XSpdLRGk3lFh6VbkBn+ifRAOwyw0CWy6NJf4TzaXRK0FlPzW/ffKPa5/9w1VQfMqddupPhZea9vCxPzBStGbocsFzKs//XtN2YpG1LVykIpud4GBvAVAUPXNpOD1dZgTyDtD8/Gu7i3e8tOeYV2O5ZcF7PIrV6wFrK73yT0NgXbVmqqVSO5B3L3VXdxFer8Y/D5BVg3IJ/hc+IPXPybj30d/OQb1VbQyNVx9umjn2ErBf/ZSugeMSZkYlU0fwCwqcOjFr32xDl5OWSAJK7vbVsjvjerPuyPoQ3y1tg==
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:1;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:198.2.178.15;WIMS-SPF:mandrillapp%2ecom;WIMS-DKIM:gtp%2dsarl%2ecom;WIMS-822:us%40gtp%2dsarl%2ecom;WIMS-PRA:us%40gtp%2dsarl%2ecom;WIMS-AUTH:PASS;ENG:(102400050)(102408045);OFR:SenderInAddressBook;


Thanks!

Warm regards,

Katrin

Saturday, October 8, 2016, 6:34:39 PM, you wrote:






--
Best regards,
Katrin Talis

Global Trade Products
chemin de la Florence 15, Geneva
Canton of Geneva 1208, Switzerland
USA Toll Free: 1-800-713-2849
Phone No: 41-445-860-756
mailto:[email protected]

--_av-5Pcmx39k5BiL3mey_rRIKw
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Microsoft-Exchange-Diagnostics:
1;MWHPR12MB1232;9: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
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:1;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:198.2.178.15;WIMS-SPF:mandrillapp%2ecom;WIMS-DKIM:gtp%2dsarl%2ecom;WIMS-822:us%40gtp%2dsarl%2ecom;WIMS-PRA:us%40gtp%2dsarl%2ecom;WIMS-AUTH:PASS;ENG:(102400050)(102408045);OFR:SenderInAddressBook;

<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>Re: Target gift cards 10816</title>
</head>
<body>
<span style=" font-family:'Courier New'; font-size: 14pt;">
Thanks!<br>
<br>
Warm regards,<br>
<br>
Katrin<br>
<br>
Saturday, October 8, 2016, 6:34:39 PM, you wrote:<br>
<br>
<br>
<br>
<br>
<br>
<br>
<span style=" font-family:'calibri'; font-size: 9pt; color: #c0c0c0;"><i>-- <br>
Best regards,<br>
Katrin Talis<br>
<br>
Global Trade Products<br>
chemin de la Florence 15, Geneva<br>
Canton of Geneva 1208, Switzerland<br>
USA Toll Free: 1-800-713-2849<br>
Phone No: 41-445-860-756 <br>
</i></span></span><a style=" font-family:'calibri'; font-size: 9pt;" href="mailto:[email protected]">mailto:[email protected]</a><img src="http://mandrillapp.com/track/open.php?u=30934997&amp;id=7218fb194f09460e93dde747a18846c0" height="1" width="1"></body></html>

--_av-5Pcmx39k5BiL3mey_rRIKw--

The scammer is using someone else's mailserver, namely Mandrillapp, to send mail. Please post, with complete headers, the message you sent, to which the above is the reply. Remove your name and address.

I also received a job offer from Tommy Hummel, HR Dept for the company below:

RFW & Partner AG
Basteiplatz 7 Zurich Switzerland 8001
Legal ID # CH-020.3.005.259-7
315 W 57th Street New York, NY 10019
EIN: 81-4134089
Phone/Fax: (718) 717-8065

Hi I also got the following letter and e-mails from

HR Department
mr T. Hummel

Dear XXX

We are reportage you that your candidacy was deliberate . Our employees only the most qualified persons in trade industry, and you were chosen from a group of peoples. We offer a generous salary package that includes health insurance coverage, vacation leave, good commissions, and great bonus packages. Please take a look at the attached file under your name and other documentation.

The job will begin from the test period which will last 15 days. In this period you can probe your abilities by working Supply Chain Specialist . Your main duties are consist in abiding by the instructions of your personal supervisor who will help you during the probation period. Other duties, work schedule, base salary and other detailed information we have sent as attached files at the bottom of this letter (Exhibit-A). You should read it attentively.

If you agree with our conditions of work and want to join our team you should send back email with accept a job offer .
We look forward to your answer and hope for your early joining to our department’s staff. We will be pleased to work with you.

Best regards,
HR Department
mr T. Hummel

Reshipping Scam . gtp-sarl.com is a fake site registered in China .

3 new email recruiters

Recruiting Department AG Hiring at http://aghiring.com
Recruiting Department AG Recruitings at http://agrecruitings.com
Recruiting Department a Global Mark at http://aglobalmark.com

New to this site. Pretty sure I have been contacted by a new company but similar scam.

I have been applying for jobs via ziprecruiter, and received an email for a seems too good to be true position, telling me that I am under consideration for a position as "Purchasing Manager". While I do show I saved the job for Purchasing Manager, I do not show, nor recall actually applying. The email indicated that they would make a final decision by the following Monday, and on that Monday, I received an official offer, all without even a phone interview. The offer is $4,300.00 every two weeks, to purchase and ship products to clients in Europe. For this one, they say that they will never ask to use my own money, and will provide the money in advance of the purchase, and eventually providing me with a company credit card. On the phone, I was told that after a 2 week probationary period, I would be flown out to the NYC office for additional training, and would receive a company laptop. A lot of the wording is the same as what has been presented in this thread, and this company also, is said to be headquartered in Switzerland. The person that contacted me from phone number of 646-583-0605, and a different phone number provided on the offer letter for the same person 347- 657-9532. There are also, 2 different addresses provided for their office in NYC. 225 W 34th St, New York, provided on the job description, and 250 W 34th St, New York provided on the actual job offer. Also, could not find any information when searching for Analytical Research, Supply and Trading, however in a follow up email that was sent after she called me, it indicates that the company goes by ARS Trading AG, which does seem to exist in Switzerland, but again, cannot find anything about this company in the U.S. As with the other posts on this thread, cannot find any of these people on LinkedIn.

In addition, I have sent 3 emails with questions and concerns, and all 3 came back as delivery failures (@arsagservice.com).

Analytical Research, Supply and Trading

EIN Assigned: 81-5475876

Retail trade/wholesale trade/sales
225 W 34 St New York, NY 10119
Headquarter Office:
Entry : 31.07.2007
Legal form : Company limited by shares (AG) Legal headquarters of the company : Wollerau Company status: active Commercial register number: CH-130.3.012.598-4

Appears to be a money mule and reshipping scam . I'll do more research later . Drop all communication with them .

Domain name: arsagservice.com
Registry Domain ID:
Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com
Updated Date: 2017-02-13T16:08:57Z
Creation Date: 2017-02-13T00:00:00Z
Registrar Registration Expiration Date: 2018-02-13T00:00:00Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited
Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
Registry Registrant ID:
Registrant Name: Larry Polh
Registrant Organization: ARST AG
Registrant Street: Wilenstrasse 17
Registrant City: Wollerau
Registrant State/Province: ZH
Registrant Postal Code: 8832
Registrant Country: ch
Registrant Phone: +41.446878051
Registrant Phone Ext:
Registrant Fax: +41.446878051
Registrant Fax Ext:
Registrant Email: [email protected]

It's an email-only domain. Please post the email you got with complete headers and the bounce message you got when you tried to reply.

Here is the email, the header and delivery failure message are below the email.

Dear Mr xxxxx xxxxx

We have received your Resume regarding employment opportunity at our company and reviewed your qualifications against our current requirements. We are looking for a specialist to support our Team in the field of component purchase and supply chain management in full- and part-time.

After considerable thought, we identified you as the best person whose skills and experience most closely match the organization's needs.
Following the HR Department instructions, I'm delighted to Offer you the position with the Company. An overview of Official Employment you will find attached hereto as pdf file with your full name. Employment with the Company is permanent, but various work schedule with flexible hours allows you to stay with your current job during the two weeks probationary.

By carefully managing, like all Company employees, your first two weeks of employment will be considered as a probationary period.
Everything you need to know about probation period is clearly described in our papers. Please refer to the attachments. We want to be certain that you have ability to meet certain performance levels.

An Employment Agreement: If you accept the company's offer, with respect to the terms and conditions of your employment, you need to complete, sign the Paycheck form to return it before your start date. As a condition of employment beginning, you will be required to complete and sign a copy of Confidential Paycheck form to verify the position acceptance. Simply return your completed Paycheck form via email back.
Before your first day, you will be given an orientation by supervisor which will include completing employment forms, reviewing fringe benefits, and touring the duties.

This offer, if not accepted, will expire at the close of business on 03/10/2017.
If you have any questions concerning the information contained in this letter, please contact me directly.

Yours sincerely,
ms D. River


Email header:
Return-Path: <[email protected]>
Received: from fed1rmimpo210.cox.net ([68.230.241.161])
by fed1rmfepo201.cox.net
(InterMail vM.8.01.05.28 201-2260-151-171-20160122) with ESMTP
id <20170227152733.XOET4048.fed1rmfepo201.cox.net@fed1rmimpo210.cox.net>
for <[email protected]>; Mon, 27 Feb 2017 10:27:33 -0500
Received: from [8.19.6.68] ([100.12.39.86])
by fed1rmimpo210.cox.net with cox
id prTU1u0041rXfuC01rTVqF; Mon, 27 Feb 2017 10:27:32 -0500
X-CT-Class: Clean
X-CT-Score: 0.00
X-CT-RefID: str=0001.0A090201.58B44564.011C,ss=1,re=0.000,recu=0.000,reip=0.000,vtr=str,vl=0,cl=1,cld=1,fgs=0
X-CT-Spam: 0
X-Authority-Analysis: v=2.1 cv=R7GjYYlX c=1 sm=1 tr=0
a=bkQR9BbGF2ogYgRCyNtHVA==:117 a=bkQR9BbGF2ogYgRCyNtHVA==:17
a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10
a=r77TgQKjGQsHNAKrUKIA:9 a=h0Mz7h8X15ReD-b9vTwA:9 a=6MfE6pCC1PesvmMB:21
a=StDI9brJSgX-EsSF:21 a=wPNLvfGTeEIA:10 a=GntOrqW3LoPnV5VZMiAA:9
a=n3BslyFRqc0A:10 a=zIL0oERP0ACMg5L6QHgA:9 a=fMZ_E1CIlfQA:10
a=ed9W8CXiMLxqcyYpWcEA:9 a=1IH9oiT-LzwRmIsQpp0A:9
X-CM-Score: 0.00
Authentication-Results: cox.net; auth=pass (PLAIN)
[email protected]
Message-ID: <[email protected]>
Date: Sun, 26 Feb 2017 22:02:35 +0300
From: "Ms River, Deysi, Analytical Research, Supply and Trading " <[email protected]>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.17) Gecko/20110414 Thunderbird/3.1.10
MIME-Version: 1.0
To: xxxxxx <[email protected]>
Subject: D. River to xxxxx xxxxxxx - JOB OFFER 02/27/17 - START ASAP
Content-Type: multipart/mixed;
boundary="------------080305000800010400080407"
X-BitdefenderWKS-SpamStamp: Build: [Engines: 2.15.8.1087, Stamp: 3],
Multi: [Enabled, t: (0.016459,0.016446)], BW: [Enabled, t:
(0.000012)], RTDA: [Enabled, t: (0.236808), Hit: No, Details: v2.4.3;
Id: 7.2m1ggn9.1ba8m7bbf.168i0], total: 0(775)
X-BitdefenderWKS-Spam: No - 0


Delivery Failure Message:
Reporting-MTA: dns; fed1rmfepi108.cox.net
Arrival-Date: Thu, 23 Feb 2017 12:49:25 -0500
Received-From-MTA: dns; fed1rmimpo110.cox.net (68.230.241.159)

Final-Recipient: RFC822; <[email protected]>
Action: failed
Status: 4.4.7
Remote-MTA: dns; arsagservice.com

The scammer is using a different mail server to send than to receive and has apparently set up his mail server to say that it's a valid email address but not accept mail for it. (The test we usually do stops short of actually sending an email.) In this situation, there's not much we can do except post up the domain as a scam warning.

I'm looking at the domain registration and the domain registration appears fake , although I'm not an expert on Swiss Postal Addresses . Possible fake / falsified Registration.

[AlanJones]

^^^The address has a small error, but probably not enough to get it suspended for being fake.

Probably true . So I guess I'll just post the other 2 scams they havent activated yet . Arag Service No Corporate Registrations in Switzerland .





http://www.zefix.ch/zfx-cgi/hrform.cgi/ ... 66&amt=007




Address lookup

canonical name arsagservice.com.
aliases
addresses 94.156.133.6


Domain Whois record

Queried whois.internic.net with "dom arsagservice.com"...
Domain Name: ARSAGSERVICE.COM
Registrar: BIZCN.COM, INC.
Sponsoring Registrar IANA ID: 471
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.ERISTANS.COM
Name Server: NS2.ERISTANS.COM
Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Updated Date: 13-feb-2017
Creation Date: 13-feb-2017
Expiration Date: 13-feb-2018

>>> Last update of whois database: Wed, 08 Mar 2017 07:42:09 GMT <<<

For more information on Whois status codes, please visit https://icann.org/epp


Queried whois.bizcn.com with "arsagservice.com"...
Domain name: arsagservice.com
Registry Domain ID:
Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com
Updated Date: 2017-02-13T16:08:57Z
Creation Date: 2017-02-13T00:00:00Z
Registrar Registration Expiration Date: 2018-02-13T00:00:00Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited
Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
Registry Registrant ID:
Registrant Name: Larry Polh
Registrant Organization: ARST AG
Registrant Street: Wilenstrasse 17
Registrant City: Wollerau
Registrant State/Province: ZH
Registrant Postal Code: 8832
Registrant Country: ch
Registrant Phone: +41.446878051
Registrant Phone Ext:
Registrant Fax: +41.446878051
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:






Address lookup

canonical name arstsupply.com.
aliases
addresses 94.156.133.6


Domain Whois record

Queried whois.internic.net with "dom arstsupply.com"...
Domain Name: ARSTSUPPLY.COM
Registrar: BIZCN.COM, INC.
Sponsoring Registrar IANA ID: 471
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.ERISTANS.COM
Name Server: NS2.ERISTANS.COM
Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Updated Date: 13-feb-2017
Creation Date: 13-feb-2017
Expiration Date: 13-feb-2018

>>> Last update of whois database: Wed, 08 Mar 2017 07:38:52 GMT <<<

For more information on Whois status codes, please visit https://icann.org/epp


Queried whois.bizcn.com with "arstsupply.com"...
Domain name: arstsupply.com
Registry Domain ID:
Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com
Updated Date: 2017-02-13T16:08:41Z
Creation Date: 2017-02-13T00:00:00Z
Registrar Registration Expiration Date: 2018-02-13T00:00:00Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited
Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
Registry Registrant ID:
Registrant Name: Larry Polh
Registrant Organization: ARST AG
Registrant Street: Wilenstrasse 17
Registrant City: Wollerau
Registrant State/Province: ZH
Registrant Postal Code: 8832
Registrant Country: ch
Registrant Phone: +41.446878051
Registrant Phone Ext:
Registrant Fax: +41.446878051
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:





Address lookup

canonical name advancears.com.
aliases
addresses 94.156.133.6


Domain Whois record

Queried whois.internic.net with "dom advancears.com"...
Domain Name: ADVANCEARS.COM
Registrar: BIZCN.COM, INC.
Sponsoring Registrar IANA ID: 471
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.ERISTANS.COM
Name Server: NS2.ERISTANS.COM
Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Updated Date: 13-feb-2017
Creation Date: 13-feb-2017
Expiration Date: 13-feb-2018

>>> Last update of whois database: Wed, 08 Mar 2017 07:40:54 GMT <<<

For more information on Whois status codes, please visit https://icann.org/epp


Queried whois.bizcn.com with "advancears.com"...
Domain name: advancears.com
Registry Domain ID:
Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com
Updated Date: 2017-02-13T16:08:48Z
Creation Date: 2017-02-13T00:00:00Z
Registrar Registration Expiration Date: 2018-02-13T00:00:00Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited
Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
Registry Registrant ID:
Registrant Name: Larry Polh
Registrant Organization: ARST AG
Registrant Street: Wilenstrasse 17
Registrant City: Wollerau
Registrant State/Province: ZH
Registrant Postal Code: 8832
Registrant Country: ch
Registrant Phone: +41.446878051
Registrant Phone Ext:
Registrant Fax: +41.446878051
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID: