from me to me?? what??

by HillBilly Fri Jun 24, 2016 7:14 pm

We are looking for employees working remotely. 
 
My name is Enid, I am the personnel manager of a large International =
company. 
Most of the work you can do from home, that is, at a distance. 
Salary is $2500-$5000. 
 
If you are interested in this offer, please visit <a =
href=3D"http:/ /ratecoinxra.com/wp-content/plugins/redux-framework/ReduxCore/assets/css/vendor/elusive-icons/fonts/">Our Site</a> 
 
Best regards! <o:p></o:p></div></body></html>
------=_NextPart_000_002C_01D1CE1E.0219ECEF--

Hello!

We are looking for employees working remotely.

My name is Enid, I am the personnel manager of a large International company.
Most of the work you can do from home, that is, at a distance.
Salary is $2500-$5000.

If you are interested in this offer, please visit Our Site

Best regards!

Received: from 179-96-139-173.life.com.br ([179.96.139.173]) by BLU004-MC1F28.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
Fri, 24 Jun 2016 09:42:53 -0700
From: <me?>
To: <me?>
Subject: Flexible schedule
Date: 24 Jun 2016 09:30:02 -0400
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_002C_01D1CE1E.0219ECEF"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: Aco62bw10o62bw10o62bw10o62bw10==
Content-Language: en
Return-Path: me?
X-OriginalArrivalTime: 24 Jun 2016 16:42:53.0199 (UTC) FILETIME=[73D001F0:01D1CE37]

* 179.96.139.173 Life Serviços De Comunicação Multimidia Ltda. Marília Brazil

Find complete email headers here : http://www.ip-adress.com/faq/view_email_header/
or http://whatismyipaddress.com/find-headers

How to post photos in the forum here : http://www.scamwarners.com/forum/viewto ... =28&t=3219

Username

HillBilly

Rank

Anti-Fraud Ally

Posts

1562

Joined

Tue Feb 11, 2014 7:22 pm

Location

The U. S. of A.

Re: from me to me?? what??

by Terminator5 Fri Jun 24, 2016 8:52 pm

Forged email headers .

Daniel 8 :25

Username

Terminator5

Rank

Registered Member

Posts

8317

Joined

Fri Mar 18, 2011 6:17 am

Location

Habentes autem donationes secundum gratiam, quæ data est nobis differentes sive prophetiam

Re: from me to me?? what??

by HillBilly Fri Jun 24, 2016 11:40 pm

Good thing, T5.... I was hoping I couldn't be in Brazil and the USA at the same time.... but some of those things I did when I was younger could come back to haunt me ( i am told)... LMAO!!!

Aside from that, this was emailed to my Microsoft address. I don't think they have a substation in Brazil, do they??

Username

HillBilly

Rank

Anti-Fraud Ally

Posts

1562

Joined

Tue Feb 11, 2014 7:22 pm

Location

The U. S. of A.

Re: from me to me?? what??

by Terminator5 Sat Jun 25, 2016 12:59 am

Are you sure you weren't vacationing in RIO . :laugh-s:

Daniel 8 :25

Username

Terminator5

Rank

Registered Member

Posts

8317

Joined

Fri Mar 18, 2011 6:17 am

Location

Habentes autem donationes secundum gratiam, quæ data est nobis differentes sive prophetiam

Re: from me to me?? what??

by HillBilly Mon Jun 27, 2016 9:41 am

Identical scam letter except the name he calls himself, and the scam site to sign up on is different. but this time from Turkey, not Brazil....

Hello!

We are looking for employees working remotely.

My name is Wilmer, am the personnel manager of a large International =
company.
Most of the work you can do from home, that is, at a distance.

Salary is $2500-$5000.

If you are interested in this offer, please visit=20
Our Site

Best regards!
------=_NextPart_000_004C_01D1D038.04C41509
Content-Type: text/html;
charset="cp-850"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dcp-850">
<META content=3D"MSHTML 6.00.2900.3087" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
Hello! 
 
We are looking for employees working remotely. 
 
My name is Wilmer, am the personnel manager of a large International =
company. 
Most of the work you can do from home, that is, at a distance. 
Salary is $2500-$5000. 
 
If you are interested in this offer, please visit <a =
href=3D"http:/ /easylaunchjacking.com/wp-content/plugins/wpleadplus-1/them=
es/popups/themes/8/8/assets/imgs/">Our Site</a> 
 
Best regards! </BODY></HTML>
------=_NextPart_000_004C_01D1D038.04C41509--

Received: from 78.189.172.76.static.ttnet.com.tr ([78.189.172.76]) by BLU004-MC1F32.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
Sun, 26 Jun 2016 19:52:19 -0700
Message-ID: <E059545F05ED520EB7BAB1EB03BCE059@316AOAKW5I>
From: <me>
To: <me>
Subject: Cooperation with the great company
Date: 27 Jun 2016 07:15:17 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_004C_01D1D038.04C41509"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3087
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3087
Return-Path: me
X-OriginalArrivalTime: 27 Jun 2016 02:52:19.0766 (UTC) FILETIME=[EC02D560:01D1D01E]

* 78.189.172.76 Turk Telekom Istanbul Turkey

Username

HillBilly

Rank

Anti-Fraud Ally

Posts

1562

Joined

Tue Feb 11, 2014 7:22 pm

Location

The U. S. of A.

Re: from me to me?? what??

by HillBilly Tue Jun 28, 2016 12:09 am

another one, different name, different scam website, different IP origin.... everything else identical

Hello!

We are looking for employees working remotely.

My name is Ladonna, am the personnel manager of a large International =
company.
Most of the work you can do from home, that is, at a distance.

Salary is $2500-$5000.

If you are interested in this offer, please visit=20
Our Site

Best regards!
------=_NextPart_000_003D_01D1D089.02BF7190
Content-Type: text/html;
charset="cp-850"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dcp-850">
<META content=3D"MSHTML 6.00.2600.0000" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
Hello! 
 
We are looking for employees working remotely. 
 
My name is Ladonna, am the personnel manager of a large International =
company. 
Most of the work you can do from home, that is, at a distance. 
Salary is $2500-$5000. 
 
If you are interested in this offer, please visit <a =
href=3D"http:/ /kanglawyers.com/blog/wp-includes/js/tinymce/themes/advanced/skins/default/img/">Our Site</a> 
 
Best regards! </BODY></HTML>
------=_NextPart_000_003D_01D1D089.02BF7190--

Received: from [201.192.10.226] ([201.192.10.226]) by BLU004-MC1F26.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
Mon, 27 Jun 2016 14:39:22 -0700
Message-ID: <004001d1d089$02c23f93$972a118a@xwfoh>
Subject: We offer new vacancy
Date: 27 Jun 2016 08:15:02 -0700

IP: 201.192.10.226
Decimal: 3384806114
Hostname: 201.192.10.226
ASN: 11830
ISP: SAN JOSE
Organization: SAN JOSE
Services: None detected

Username

HillBilly

Rank

Anti-Fraud Ally

Posts

1562

Joined

Tue Feb 11, 2014 7:22 pm

Location

The U. S. of A.

Re: from me to me?? what??

by Terminator5 Tue Jun 28, 2016 2:59 am

I need to apply for that job . :beer:

http://www.yellowpages.ca/bus/British-C ... iewsHeader

Your first potential employer seems to be under fire .

http://www.data321.net/AnnouncementsAlt ... atecoinxra

Address lookup

canonical name ratecoinxra.com.
aliases
addresses 162.253.151.131

Domain Whois record

Queried whois.internic.net with "dom ratecoinxra.com"...
Domain Name: RATECOINXRA.COM
Registrar: GODADDY.COM, LLC
Sponsoring Registrar IANA ID: 146
Whois Server: whois.godaddy.com
Referral URL: http://www.godaddy.com
Name Server: NS1.SALMON.ARVIXE.COM
Name Server: NS2.SALMON.ARVIXE.COM
Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Updated Date: 05-jun-2016
Creation Date: 01-apr-2016
Expiration Date: 01-apr-2017

>>> Last update of whois database: Tue, 28 Jun 2016 07:25:08 GMT <<<

For more information on Whois status codes, please visit https://icann.org/epp

Queried whois.godaddy.com with "ratecoinxra.com"...
Domain Name: ratecoinxra.com
Registry Domain ID: 2017972017_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2016-04-01T12:36:10Z
Creation Date: 2016-04-01T12:36:10Z
Registrar Registration Expiration Date: 2017-04-01T12:36:10Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.4806242505
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Domain Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: Michael Zinck
Registrant Organization:
Registrant Street: 10 Fernwood Ave
Registrant City: Moncton
Registrant State/Province: New Brunswick
Registrant Postal Code: E1A 2W4
Registrant Country: CA
Registrant Phone: +1.5062048758
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]

Daniel 8 :25

Username

Terminator5

Rank

Registered Member

Posts

8317

Joined

Fri Mar 18, 2011 6:17 am

Location

Habentes autem donationes secundum gratiam, quæ data est nobis differentes sive prophetiam

Options
7 posts
Page 1 of 1

7 posts
Page 1 of 1

Jump to:

Return to Employment scams

Who is online

Users browsing this forum: ClaudeBot and 12 guests