by simpleone
Wed Sep 27, 2017 6:01 pm
I just wanted to warn everyone about a re-shipping job scam at efalogistics.com. Here is the emails I received from Susan Walker <[email protected]>!
Email header:
X-Google-Smtp-Source: ADKCNb5DJmHoefHC1MDRIjKnbsBC2KoH3ryHTQxKuuANxseLltlwc4bRHN6v2WMN6Xwhi7iuSC8Z
X-Received: by 10.84.210.171 with SMTP id a40mr779487pli.345.1504238079305;
Thu, 31 Aug 2017 20:54:39 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1504238079; cv=none;
d=google.com; s=arc-20160816;
b=OmLju9hOj2EIABCtvpKA+aYgFJZEbI+xJCVRZ2wczZ1K+Yu/gs4TqiUzr7/HLuB5dx
1a+0EqAhZvSBTBCFNmRs9LfcSKJ3kFFSJMuoGG/3qf6OFOd8IyCzFqkF724at4MkjIvk
2atjEr4tr10xpaBJHf/2oVD0SLm41EVMXY39uArvD8ALAlyET0fKxF5qyBbflecmsczl
cq9ekcjTVgBpW82naOYfC9WEdH7xdFdO/izMZ+Pi7ZydXIuc4jNal35uCn6FsbjDLv1R
7L69Yhg8ErssbMp+vrFlWA8kc1unVEHpVeYmrEsoOLMoq3MY/FrypNJ7l9zESAAO3GsJ
IoNQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:date:message-id:subject:reply-to:to:from
:dkim-signature:dkim-signature:arc-authentication-results;
bh=eX1/Z+Lx2g0HoMtPy2/7wb/Fz+Ae/iXOs0qX25bwgww=;
b=mXaiLSCo+Zbw6zuplD/68lpBfEUtY/uXB9DQBMFoFQaqRhdlGJjkV7b7WwOBnQhtUf
Reh81BGVvxasVCXCTy4dRqaO4C3LlcD4rINJXOuebbrCWnmXd+s04yVoRpS3oyI1BXia
rRpfF2hDJ6BvTzFDVdzhVLT9Bg0VJE9AqbyZqIkkL1K/T8fVnduQdXqaSB6EJXvlLT7T
Wo/lhXm7b4PFmvUsjVq9EgSsDTKmT7CCxe4QJCXy2tx/L/pRV2l0AhNui3S79hzvzFhQ
PoOAz3+mmUO8GFqdiD8DBV6JXvQiHWMR0o8ct1kELvH4nMMJegiXBVnPrSOzpNcsruK2
YnNw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=s1 header.b=WGqbMa3T;
dkim=pass [email protected] header.s=smtpapi header.b=X8wpWMaJ;
spf=pass (google.com: domain of bounces+6036531-ee12-(removed)[email protected] designates 167.89.106.6 as permitted sender) smtp.mailfrom=bounces+6036531-ee12-(removed)[email protected]
Return-Path: <bounces+6036531-ee12-(removed)[email protected]>
Received: from o2.0qt.s2shared.sendgrid.net (o2.0qt.s2shared.sendgrid.net. [167.89.106.6])
by mx.google.com with ESMTPS id b61si1060022pli.586.2017.08.31.20.54.38
for <(email address removed)>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 31 Aug 2017 20:54:39 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounces+6036531-ee12-(removed)[email protected] designates 167.89.106.6 as permitted sender) client-ip=167.89.106.6;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=s1 header.b=WGqbMa3T;
dkim=pass [email protected] header.s=smtpapi header.b=X8wpWMaJ;
spf=pass (google.com: domain of bounces+6036531-ee12-(removed)[email protected] designates 167.89.106.6 as permitted sender) smtp.mailfrom=bounces+6036531-ee12-(removed)[email protected]
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=efalogistics.com; h=content-type:from:to:reply-to:subject:mime-version; s=s1; bh=S8DHimyNXovXA0QF4Smk7SktyMY=; b=WGqbMa3T+jOp7tFYgS0tPXNzFs48L QjVdnwBuY2HNSXUlT5iOV/dPrB9+QfhhkO3FU+dPSE9NwNHdZlqnwndUPSUjMVD+ SWUtthYi9bC19aaD7xKLwzZD4oY8e7dmPENILqqN1IdvRomFv1X0KyPZjatGMkdP P/2DZMilXNg/EU=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=sendgrid.info; h=content-type:from:to:reply-to:subject:mime-version:x-feedback-id; s=smtpapi; bh=S8DHimyNXovXA0QF4Smk7SktyMY=; b=X8wpWMaJCP1NEQ8Ymu Vx9LhQc765doWIzQB1LkiSX4of8kFza+Jb1hLiXZru1toiEk7cp+apknGF0oGgZl 1OyK/2IuYhymmkl437x5jj5Nfv6GnC0VjGw7T1SkIHxJ2/1ft9IYrC0AIxth1rPk Kb3nicNKlBCP6VzMZ5JeuJBpU=
Received: by filter0017p3las1.sendgrid.net with SMTP id filter0017p3las1-5314-59A8D9FD-F
2017-09-01 03:54:37.699305024 +0000 UTC
Received: from condor2250.dedicatedpanel.com (condor2250.dedicatedpanel.com [209.126.102.176]) by ismtpd0006p1iad1.sendgrid.net (SG) with ESMTP id Cw61ovWaSdGXaSoTT_lG8A for <(email removed)>; Fri, 01 Sep 2017 03:54:37.037 +0000 (UTC)
Content-Type: multipart/mixed; boundary="----sinikael-?=_1-15042380767950.6245649474900685"
From: Susan Walker <[email protected]>
To:(removed)
Reply-To: Susan Walker <[email protected]>
Subject: Search for new employees
Message-Id: <[email protected]>
X-Mailer: nodemailer (2.4.2; +http://nodemailer.com/; SMTP/2.5.0[client:2.5.0])
Date: Fri, 01 Sep 2017 03:54:37 +0000 (UTC)
MIME-Version: 1.0
X-SG-EID: ChkMOA8Fy9WEBT9nWn5IVNr4Ry31ciQydXz5J80TBIpiSApkQtoDBX6iZU7piiTqUosrsXiOvI3WmD vAv8yJACNofPNoSHPxKJEOJs7S4+XjZDmgS7QbSiVbmFX11xePwHCBNWSutjNF1keRD+/psc5Pb52Q ono7iQogxmx1Js9mHAQX4TdjGUolYbVNV/ecABT6CyX+Y7/PC7C/PjiNfUpZ00KJ9GT5ox1NQQ22sg k=
X-Feedback-ID: 6036531:+i8f0ZXTRZVuQbyJC2AcFJFm4GO3i9pG02Hi6kiaF60=:+i8f0ZXTRZVuQbyJC2AcFJFm4GO3i9pG02Hi6kiaF60=:SG
Hello ,
EFA Logistics US is pleased to advise you employment with our Company. To start with our company
please check summary of terms and conditions of the employment which specified in Job Description,
file attached. If you accept this position, please complete an Application blank and our HR Representative
will contact you shortly.
Hope hearing from you soon.
----------------------------
How to apply for the position:
I affix 2 files to this message: Job Description and Process Application.
1. Please examine carefully the Job Description and write me back to ask your questions if you have any and to affirm your desire to work with us.
2. In case you would like to accept job offer, please follow the guideline from Process Application.
3. As soon as you send the documents back, your Application form will be directed to our HR Department.
We want to fill suggested position ASAP. Please provide us with your respond during next few days.
After getting your Application form, your contacts will be forwarded to your curator who will inverview you by phone.
Best Regards
Susan Walker, staff supervisor
Website: efalogistics.com
EFA Logistic
JOB DESCRIPTION
Position: Logistics Agent
Type: Home Based | Part Time | Online Office
DOT Code: 222.387-050
Basic Salary: $ 2900/month
OVERVIEW
Interview: Not required for part-time positions, but we can interview you by phone if we decided so.
Job Type: Home Office, Part-Time. Or you can easily combine it with any other job you have.
To become a Logistics Agent you must have good organizational skills and be able to work under deadline pressure. Logistics Agents must understand general shipping policies and regulations regarding freight and be familiar with rates and routes so that they can determine shipping methods. Logistics Agent also inspects incoming and outgoing materials, verify orders and prepare shipping packages and labels.
SCHEME OF WORK
Receive packages using your own address;
Unpack and examine incoming shipments;
Forward packages using FedEx Labels;
Maintain accurate records of items shipped and received.
JOB ACTIVITIES
Verify and keep records on incoming and outgoing shipments and prepare items for shipment.
Determine the method of shipment, using knowledge of shipping procedures, routes, and rates.
Compare the quantity and identification numbers of merchandise against orders.
Insert items into container/box.
Prepare records of merchandise shipped.
Post weight and ship charges.
Keep files of shipping records.
Trace missing or misplaced shipments.
Verify receipt of shipments against bills of lading, invoices or other records.
Aplication Process
We are the company – EFA Logistic
More detailed information about the company can be found on our website:
http://efalogistics.com/
To apply for a Senior Travel Tour Advisor position, please follow step by step HOW TO APPLY
instructions below:
1. Follow the link to go directly to our online Application Process under CAREER tab:
https://cp.efalogistics.com/application
2. Fill out the Application Process
3. You will be automatically registered in a dashboard on our website where you will be able
to check on a current status of your application and see an employment progress.
4. HR manager will be shortly assigned to your profile and contact you to provide further
details on the hiring process.
5. Please check your incoming email for any incoming messages or if you have any
questions, do not hesitate to contact us at any time.
6. Feel free to ask any questions directly in the dashboard to get a prompt reply from our HR
managers.
FYI, I did a little digging and found that efalogistics.com was registered on 8/8/2017 for 1 year only. There are also 3 identical websites to efalogistics.com hosted on the same IP address 95.215.47.129 : easylogistics-usa.com- registered for 1 year only on 7/26/2017, logi-us.com registered for 1 year only on 9/11/2017 and transcontainer.us registered for 1 year only also on 9/11/2017. I suspect these are all created by the same scammers. What can we do to get these sites shut down?
Email header:
X-Google-Smtp-Source: ADKCNb5DJmHoefHC1MDRIjKnbsBC2KoH3ryHTQxKuuANxseLltlwc4bRHN6v2WMN6Xwhi7iuSC8Z
X-Received: by 10.84.210.171 with SMTP id a40mr779487pli.345.1504238079305;
Thu, 31 Aug 2017 20:54:39 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1504238079; cv=none;
d=google.com; s=arc-20160816;
b=OmLju9hOj2EIABCtvpKA+aYgFJZEbI+xJCVRZ2wczZ1K+Yu/gs4TqiUzr7/HLuB5dx
1a+0EqAhZvSBTBCFNmRs9LfcSKJ3kFFSJMuoGG/3qf6OFOd8IyCzFqkF724at4MkjIvk
2atjEr4tr10xpaBJHf/2oVD0SLm41EVMXY39uArvD8ALAlyET0fKxF5qyBbflecmsczl
cq9ekcjTVgBpW82naOYfC9WEdH7xdFdO/izMZ+Pi7ZydXIuc4jNal35uCn6FsbjDLv1R
7L69Yhg8ErssbMp+vrFlWA8kc1unVEHpVeYmrEsoOLMoq3MY/FrypNJ7l9zESAAO3GsJ
IoNQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:date:message-id:subject:reply-to:to:from
:dkim-signature:dkim-signature:arc-authentication-results;
bh=eX1/Z+Lx2g0HoMtPy2/7wb/Fz+Ae/iXOs0qX25bwgww=;
b=mXaiLSCo+Zbw6zuplD/68lpBfEUtY/uXB9DQBMFoFQaqRhdlGJjkV7b7WwOBnQhtUf
Reh81BGVvxasVCXCTy4dRqaO4C3LlcD4rINJXOuebbrCWnmXd+s04yVoRpS3oyI1BXia
rRpfF2hDJ6BvTzFDVdzhVLT9Bg0VJE9AqbyZqIkkL1K/T8fVnduQdXqaSB6EJXvlLT7T
Wo/lhXm7b4PFmvUsjVq9EgSsDTKmT7CCxe4QJCXy2tx/L/pRV2l0AhNui3S79hzvzFhQ
PoOAz3+mmUO8GFqdiD8DBV6JXvQiHWMR0o8ct1kELvH4nMMJegiXBVnPrSOzpNcsruK2
YnNw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass [email protected] header.s=s1 header.b=WGqbMa3T;
dkim=pass [email protected] header.s=smtpapi header.b=X8wpWMaJ;
spf=pass (google.com: domain of bounces+6036531-ee12-(removed)[email protected] designates 167.89.106.6 as permitted sender) smtp.mailfrom=bounces+6036531-ee12-(removed)[email protected]
Return-Path: <bounces+6036531-ee12-(removed)[email protected]>
Received: from o2.0qt.s2shared.sendgrid.net (o2.0qt.s2shared.sendgrid.net. [167.89.106.6])
by mx.google.com with ESMTPS id b61si1060022pli.586.2017.08.31.20.54.38
for <(email address removed)>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 31 Aug 2017 20:54:39 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounces+6036531-ee12-(removed)[email protected] designates 167.89.106.6 as permitted sender) client-ip=167.89.106.6;
Authentication-Results: mx.google.com;
dkim=pass [email protected] header.s=s1 header.b=WGqbMa3T;
dkim=pass [email protected] header.s=smtpapi header.b=X8wpWMaJ;
spf=pass (google.com: domain of bounces+6036531-ee12-(removed)[email protected] designates 167.89.106.6 as permitted sender) smtp.mailfrom=bounces+6036531-ee12-(removed)[email protected]
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=efalogistics.com; h=content-type:from:to:reply-to:subject:mime-version; s=s1; bh=S8DHimyNXovXA0QF4Smk7SktyMY=; b=WGqbMa3T+jOp7tFYgS0tPXNzFs48L QjVdnwBuY2HNSXUlT5iOV/dPrB9+QfhhkO3FU+dPSE9NwNHdZlqnwndUPSUjMVD+ SWUtthYi9bC19aaD7xKLwzZD4oY8e7dmPENILqqN1IdvRomFv1X0KyPZjatGMkdP P/2DZMilXNg/EU=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=sendgrid.info; h=content-type:from:to:reply-to:subject:mime-version:x-feedback-id; s=smtpapi; bh=S8DHimyNXovXA0QF4Smk7SktyMY=; b=X8wpWMaJCP1NEQ8Ymu Vx9LhQc765doWIzQB1LkiSX4of8kFza+Jb1hLiXZru1toiEk7cp+apknGF0oGgZl 1OyK/2IuYhymmkl437x5jj5Nfv6GnC0VjGw7T1SkIHxJ2/1ft9IYrC0AIxth1rPk Kb3nicNKlBCP6VzMZ5JeuJBpU=
Received: by filter0017p3las1.sendgrid.net with SMTP id filter0017p3las1-5314-59A8D9FD-F
2017-09-01 03:54:37.699305024 +0000 UTC
Received: from condor2250.dedicatedpanel.com (condor2250.dedicatedpanel.com [209.126.102.176]) by ismtpd0006p1iad1.sendgrid.net (SG) with ESMTP id Cw61ovWaSdGXaSoTT_lG8A for <(email removed)>; Fri, 01 Sep 2017 03:54:37.037 +0000 (UTC)
Content-Type: multipart/mixed; boundary="----sinikael-?=_1-15042380767950.6245649474900685"
From: Susan Walker <[email protected]>
To:(removed)
Reply-To: Susan Walker <[email protected]>
Subject: Search for new employees
Message-Id: <[email protected]>
X-Mailer: nodemailer (2.4.2; +http://nodemailer.com/; SMTP/2.5.0[client:2.5.0])
Date: Fri, 01 Sep 2017 03:54:37 +0000 (UTC)
MIME-Version: 1.0
X-SG-EID: ChkMOA8Fy9WEBT9nWn5IVNr4Ry31ciQydXz5J80TBIpiSApkQtoDBX6iZU7piiTqUosrsXiOvI3WmD vAv8yJACNofPNoSHPxKJEOJs7S4+XjZDmgS7QbSiVbmFX11xePwHCBNWSutjNF1keRD+/psc5Pb52Q ono7iQogxmx1Js9mHAQX4TdjGUolYbVNV/ecABT6CyX+Y7/PC7C/PjiNfUpZ00KJ9GT5ox1NQQ22sg k=
X-Feedback-ID: 6036531:+i8f0ZXTRZVuQbyJC2AcFJFm4GO3i9pG02Hi6kiaF60=:+i8f0ZXTRZVuQbyJC2AcFJFm4GO3i9pG02Hi6kiaF60=:SG
Hello ,
EFA Logistics US is pleased to advise you employment with our Company. To start with our company
please check summary of terms and conditions of the employment which specified in Job Description,
file attached. If you accept this position, please complete an Application blank and our HR Representative
will contact you shortly.
Hope hearing from you soon.
----------------------------
How to apply for the position:
I affix 2 files to this message: Job Description and Process Application.
1. Please examine carefully the Job Description and write me back to ask your questions if you have any and to affirm your desire to work with us.
2. In case you would like to accept job offer, please follow the guideline from Process Application.
3. As soon as you send the documents back, your Application form will be directed to our HR Department.
We want to fill suggested position ASAP. Please provide us with your respond during next few days.
After getting your Application form, your contacts will be forwarded to your curator who will inverview you by phone.
Best Regards
Susan Walker, staff supervisor
Website: efalogistics.com
EFA Logistic
JOB DESCRIPTION
Position: Logistics Agent
Type: Home Based | Part Time | Online Office
DOT Code: 222.387-050
Basic Salary: $ 2900/month
OVERVIEW
Interview: Not required for part-time positions, but we can interview you by phone if we decided so.
Job Type: Home Office, Part-Time. Or you can easily combine it with any other job you have.
To become a Logistics Agent you must have good organizational skills and be able to work under deadline pressure. Logistics Agents must understand general shipping policies and regulations regarding freight and be familiar with rates and routes so that they can determine shipping methods. Logistics Agent also inspects incoming and outgoing materials, verify orders and prepare shipping packages and labels.
SCHEME OF WORK
Receive packages using your own address;
Unpack and examine incoming shipments;
Forward packages using FedEx Labels;
Maintain accurate records of items shipped and received.
JOB ACTIVITIES
Verify and keep records on incoming and outgoing shipments and prepare items for shipment.
Determine the method of shipment, using knowledge of shipping procedures, routes, and rates.
Compare the quantity and identification numbers of merchandise against orders.
Insert items into container/box.
Prepare records of merchandise shipped.
Post weight and ship charges.
Keep files of shipping records.
Trace missing or misplaced shipments.
Verify receipt of shipments against bills of lading, invoices or other records.
Aplication Process
We are the company – EFA Logistic
More detailed information about the company can be found on our website:
http://efalogistics.com/
To apply for a Senior Travel Tour Advisor position, please follow step by step HOW TO APPLY
instructions below:
1. Follow the link to go directly to our online Application Process under CAREER tab:
https://cp.efalogistics.com/application
2. Fill out the Application Process
3. You will be automatically registered in a dashboard on our website where you will be able
to check on a current status of your application and see an employment progress.
4. HR manager will be shortly assigned to your profile and contact you to provide further
details on the hiring process.
5. Please check your incoming email for any incoming messages or if you have any
questions, do not hesitate to contact us at any time.
6. Feel free to ask any questions directly in the dashboard to get a prompt reply from our HR
managers.
FYI, I did a little digging and found that efalogistics.com was registered on 8/8/2017 for 1 year only. There are also 3 identical websites to efalogistics.com hosted on the same IP address 95.215.47.129 : easylogistics-usa.com- registered for 1 year only on 7/26/2017, logi-us.com registered for 1 year only on 9/11/2017 and transcontainer.us registered for 1 year only also on 9/11/2017. I suspect these are all created by the same scammers. What can we do to get these sites shut down?