by Terminator5
Fri Feb 26, 2016 11:07 pm
Money Mule Scam , Email Recruitment
Begin Scam Email:
Hello,
We are differ from most consulting organizations. While others offer services in usual
spheres like cost reduction, building or re-engineering systems, or mergers and acquisitions, we
assistance companies with organic growth - increase income from lasting operation.
Responsibilities and Duties: we are looking for people who can control the correspondence,
accept and send parcels, checking goods, compiling monthly reports, sending documents on each parcel.
You can combine this employment with your current employment and get monthly pay rate
of $2,150 plus bonuses for good work.
Conditions:
- High School Diploma or equivalent
- Must be at least 21 years of age
- Must have good customer service skills
- Must be a team player
- Valid Driver's license with clean driving record
- Must be able to lift at least 30lbs
- Computer skilled
To apply for this opening or get more details, please email to [email protected]
Your resume will be a plus.
End Scam Email
Scam Email Headers
Delivered-To: xxxxxx
Received: by 10.31.98.193 with SMTP id w184csp264331vkb;
Wed, 27 Jan 2016 22:04:36 -0800 (PST)
X-Received: by 10.28.129.139 with SMTP id c133mr1044258wmd.30.1453961076606;
Wed, 27 Jan 2016 22:04:36 -0800 (PST)
Return-Path: <[email protected]>
Received: from hr-recruitments.com (hr-recruitments.com. [109.234.36.100])
by mx.google.com with ESMTP id 201si2000746wml.102.2016.01.27.22.04.36
for <xxxxxx>;
Wed, 27 Jan 2016 22:04:36 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 109.234.36.100 as permitted sender) client-ip=109.234.36.100;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of [email protected] designates 109.234.36.100 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=hr-recruitments.com
Received: from hr-recruitments.com (79-170-250-198.cust.avonet.cz [79.170.250.198])
(Authenticated sender: [email protected])
by hr-recruitments.com (Postfix) with ESMTPA id 2F8933AF66
for <xxxxxx>; Thu, 28 Jan 2016 08:46:11 +0300 (MSK)
DMARC-Filter: OpenDMARC Filter v1.3.0 hr-recruitments.com 2F8933AF66
Authentication-Results: hr-recruitments.com; dmarc=none header.from=hr-recruitments.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=hr-recruitments.com;
s=mail; t=1453959971;
bh=QPpQl1tK/oeuhGl5skqHdESYLaiS+EfUkeyIHztSrZ4=;
h=Reply-To:From:To:Subject:Date;
b=i8ucSQR/GXl/NGvis3Xb5lACAVNnA82IXk16xPHJCEFA0LaQc5PXXvVs8TMAzWiKM
VR9rUbvXG74+bzsfIdl+FOeA1LhGhN1rb7pA2kZ7i0sylv2+h37CfhEoHZ8/5CgSpZ
Zm4b1uSMEpOb5CEDni3IfQtrBnaal8RD6h8YJRg4=
Message-ID: <[email protected]>
Reply-To: "[email protected]" <[email protected]>
From: "[email protected]" <[email protected]>
To: <xxxxxx>
Subject: Employment
Date: Thu, 28 Jan 2016 06:45:47 +0100
Organization: hr-recruitments
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="windows-1251";
reply-type=original
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 15.4.3538.513
X-MimeOLE: Produced By Microsoft MimeOLE V15.4.3538.513
Address lookup
canonical name recruiters-online.com.
aliases
addresses 51.255.146.81
Domain Whois record
Queried whois.internic.net with "dom recruiters-online.com"...
Domain Name: RECRUITERS-ONLINE.COM
Registrar: BIZCN.COM, INC.
Sponsoring Registrar IANA ID: 471
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.AWS-AMAZON.XYZ
Name Server: NS2.AWS-AMAZON.XYZ
Status: clientDeleteProhibited https://www.icann.org/epp#clientDeleteProhibited
Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Updated Date: 27-jan-2016
Creation Date: 19-may-2015
Expiration Date: 19-may-2016
>>> Last update of whois database: Sat, 27 Feb 2016 02:55:42 GMT <<<
For more information on Whois status codes, please visit https://icann.org/epp
Queried whois.bizcn.com with "recruiters-online.com"...
Domain name: recruiters-online.com
Registry Domain ID: 1930319722_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com
Updated Date: 2015-05-19T06:33:55Z
Creation Date: 2015-05-19T06:33:57Z
Registrar Registration Expiration Date: 2016-05-19T06:33:57Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited
Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
Registry Registrant ID:
Registrant Name: Wuxi Yilian LLC
Registrant Organization: Wuxi Yilian LLC
Registrant Street: No.1001 Anling Road
Registrant City: Xiamen
Registrant State/Province: Fujian
Registrant Postal Code: 361008
Registrant Country: cn
Registrant Phone: +86.5922577888
Registrant Phone Ext:
Registrant Fax: +86.5922179606
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Begin Scam Email:
Hello,
We are differ from most consulting organizations. While others offer services in usual
spheres like cost reduction, building or re-engineering systems, or mergers and acquisitions, we
assistance companies with organic growth - increase income from lasting operation.
Responsibilities and Duties: we are looking for people who can control the correspondence,
accept and send parcels, checking goods, compiling monthly reports, sending documents on each parcel.
You can combine this employment with your current employment and get monthly pay rate
of $2,150 plus bonuses for good work.
Conditions:
- High School Diploma or equivalent
- Must be at least 21 years of age
- Must have good customer service skills
- Must be a team player
- Valid Driver's license with clean driving record
- Must be able to lift at least 30lbs
- Computer skilled
To apply for this opening or get more details, please email to [email protected]
Your resume will be a plus.
End Scam Email
Scam Email Headers
Delivered-To: xxxxxx
Received: by 10.31.98.193 with SMTP id w184csp264331vkb;
Wed, 27 Jan 2016 22:04:36 -0800 (PST)
X-Received: by 10.28.129.139 with SMTP id c133mr1044258wmd.30.1453961076606;
Wed, 27 Jan 2016 22:04:36 -0800 (PST)
Return-Path: <[email protected]>
Received: from hr-recruitments.com (hr-recruitments.com. [109.234.36.100])
by mx.google.com with ESMTP id 201si2000746wml.102.2016.01.27.22.04.36
for <xxxxxx>;
Wed, 27 Jan 2016 22:04:36 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 109.234.36.100 as permitted sender) client-ip=109.234.36.100;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of [email protected] designates 109.234.36.100 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=hr-recruitments.com
Received: from hr-recruitments.com (79-170-250-198.cust.avonet.cz [79.170.250.198])
(Authenticated sender: [email protected])
by hr-recruitments.com (Postfix) with ESMTPA id 2F8933AF66
for <xxxxxx>; Thu, 28 Jan 2016 08:46:11 +0300 (MSK)
DMARC-Filter: OpenDMARC Filter v1.3.0 hr-recruitments.com 2F8933AF66
Authentication-Results: hr-recruitments.com; dmarc=none header.from=hr-recruitments.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=hr-recruitments.com;
s=mail; t=1453959971;
bh=QPpQl1tK/oeuhGl5skqHdESYLaiS+EfUkeyIHztSrZ4=;
h=Reply-To:From:To:Subject:Date;
b=i8ucSQR/GXl/NGvis3Xb5lACAVNnA82IXk16xPHJCEFA0LaQc5PXXvVs8TMAzWiKM
VR9rUbvXG74+bzsfIdl+FOeA1LhGhN1rb7pA2kZ7i0sylv2+h37CfhEoHZ8/5CgSpZ
Zm4b1uSMEpOb5CEDni3IfQtrBnaal8RD6h8YJRg4=
Message-ID: <[email protected]>
Reply-To: "[email protected]" <[email protected]>
From: "[email protected]" <[email protected]>
To: <xxxxxx>
Subject: Employment
Date: Thu, 28 Jan 2016 06:45:47 +0100
Organization: hr-recruitments
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="windows-1251";
reply-type=original
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 15.4.3538.513
X-MimeOLE: Produced By Microsoft MimeOLE V15.4.3538.513
Address lookup
canonical name recruiters-online.com.
aliases
addresses 51.255.146.81
Domain Whois record
Queried whois.internic.net with "dom recruiters-online.com"...
Domain Name: RECRUITERS-ONLINE.COM
Registrar: BIZCN.COM, INC.
Sponsoring Registrar IANA ID: 471
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.AWS-AMAZON.XYZ
Name Server: NS2.AWS-AMAZON.XYZ
Status: clientDeleteProhibited https://www.icann.org/epp#clientDeleteProhibited
Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Updated Date: 27-jan-2016
Creation Date: 19-may-2015
Expiration Date: 19-may-2016
>>> Last update of whois database: Sat, 27 Feb 2016 02:55:42 GMT <<<
For more information on Whois status codes, please visit https://icann.org/epp
Queried whois.bizcn.com with "recruiters-online.com"...
Domain name: recruiters-online.com
Registry Domain ID: 1930319722_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com
Updated Date: 2015-05-19T06:33:55Z
Creation Date: 2015-05-19T06:33:57Z
Registrar Registration Expiration Date: 2016-05-19T06:33:57Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited
Domain Status: clientDeleteProhibited (http://www.icann.org/epp#clientDeleteProhibited)
Domain Status: clientTransferProhibited (http://www.icann.org/epp#clientTransferProhibited)
Registry Registrant ID:
Registrant Name: Wuxi Yilian LLC
Registrant Organization: Wuxi Yilian LLC
Registrant Street: No.1001 Anling Road
Registrant City: Xiamen
Registrant State/Province: Fujian
Registrant Postal Code: 361008
Registrant Country: cn
Registrant Phone: +86.5922577888
Registrant Phone Ext:
Registrant Fax: +86.5922179606
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Daniel 8 :25