Company Representative scams, Payment Processing scams and other Employment scams.
by scottrosado Wed Jul 11, 2018 7:45 am
[email protected]
Tue 7/10/2018, 2:34 PM
Good Morning

We are contacting you in regards to your resume, The positions available are Call Center Representative / Receptionist / Administrative Assistant /Data Entry. Kindly contact Mr Steven Penal

via Google Hangout ([email protected]). Add Him to your buddy list and send him an IM, He will be online waiting for you ASAP to conduct the interview with you.and if you don't have an account with gmail you can create one then download the Google Hangout Application on your phone or computer.

Your verification code is ( S800T ) this would serve as your identification number throughout the on-line hiring process. Your timely response matters a lot,Working hours are flexible.

Interview Scheduled : Online.
Time: ASAP
Venue: On Google Hangout
Training is Available

Human Resources

Your swift and timely response matters a lot in this beneficial position.

We look forward to having you on the team. Please if you do need an assistance or need a reschedule on the interview do not hesitate to contact me at
[email protected]

Received: from BY2NAM05HT229.eop-nam05.prod.protection.outlook.com
(2603:10b6:406:ee::46) by BN7PR11MB2657.namprd11.prod.outlook.com with HTTPS
via BN7PR05CA0033.NAMPRD05.PROD.OUTLOOK.COM; Tue, 10 Jul 2018 18:34:05 +0000
Received: from BY2NAM05FT030.eop-nam05.prod.protection.outlook.com
(10.152.100.60) by BY2NAM05HT229.eop-nam05.prod.protection.outlook.com
(10.152.101.174) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.952.10; Tue, 10
Jul 2018 18:34:05 +0000
Authentication-Results: spf=none (sender IP is 173.201.193.192)
smtp.mailfrom=koshermotors.com; outlook.com; dkim=none (message not signed)
header.d=none;outlook.com; dmarc=none action=none
header.from=koshermotors.com;
Received-SPF: None (protection.outlook.com: koshermotors.com does not
designate permitted sender hosts)
Received: from p3plwbeout18-06.prod.phx3.secureserver.net (173.201.193.192) by
BY2NAM05FT030.mail.protection.outlook.com (10.152.100.167) with Microsoft
SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.952.10 via
Frontend Transport; Tue, 10 Jul 2018 18:34:05 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:7DEACA631E3715DBE23EB9FDA9E5A95204A20F243134814438B5476462019D40;UpperCasedChecksum:11779E62EC75D2D4E463ED77EC28A122786BDFE6F2273C9F05BE3B894C8AF8BB;SizeAsReceived:944;Count:14
Received: from p3plgemwbe18-05.prod.phx3.secureserver.net ([173.201.193.154])
by :WBEOUT: with SMTP
id cxSAfy5iUwuUecxSAfCyzR; Tue, 10 Jul 2018 11:33:34 -0700
X-SID: cxSAfy5iUwuUe
Received: (qmail 32144 invoked by uid 99); 10 Jul 2018 18:33:34 -0000
Content-Type: multipart/alternative;
boundary="=_046efbb539b0988c5a323ffd3c52fbc7"
To:
Date: Tue, 10 Jul 2018 11:33:34 -0700
Message-ID: <20180710113334.9370be341b70d0a9fe19c8d2f51f1be9.9d71c2f679.mailapi@email18.godaddy.com>
X-Originating-IP: 105.112.35.202
User-Agent: MailAPI
X-Sender: [email protected]
From: <[email protected]>
Subject: Administrative Assistant Resume Approved
X-CMAE-Envelope: MS4wfH5fezzC7zpiLbbE5+6dOqIE/i2FM8giVHX1vClUdc0l/oAFL2eucn3Uv870C1YOenTfY4npfFfsXMHZua83vKit+ZNSK3Y9t0Z7ffVhyCsyetwzufdR
HepdAjuIlYcaDzK07pj3E8dY8ShKlh23sgtQw3P29lmeqfe2x3sjbv8ztj4cCCRs/ddrQjDV7D5xXpuLnHEdBQRS5fFutPBxDNE6j7ozT6Yb8BdHeXBzG9FA
X-IncomingHeaderCount: 14
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 10 Jul 2018 18:34:05.2599
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: Original Submit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: Original Submit
X-MS-Exchange-Organization-Network-Message-Id: fc6fbb5b-2ea8-442d-36dc-08d5e693b74c
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Microsoft-Exchange-Diagnostics: 1;BY2NAM05FT030;1:NCowEHFcrieF20vrnQMC7RqXhm3UMTIWJXMQ2j1VEE8w0lmEPbPpDxx++ASm5P1kJMhiK52hOeejJkiit9mWe8T8sDIw2Cfu9iwF8GH5pDFsAYOUX0n9PF9Gu6xaNGl/
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource: BY2NAM05FT030.eop-nam05.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 7/10/2018 6:21:27 PM
X-MS-Office365-Filtering-Correlation-Id: fc6fbb5b-2ea8-442d-36dc-08d5e693b74c
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(5000109)(711020)(4605076)(610169)(8291501071);SRVR:BY2NAM05HT229;
X-Microsoft-Exchange-Diagnostics: 1;BY2NAM05HT229;3:9wiFAtXURwNeZQEKTsG3oQvoqCT868hhu9EtEwrNa0Th+mlLYA70pQ/XC5CcytMrOkKZyS7Bmvv/mA2zdlFhbj6JsM2LvTWPfhaJEczUDRwQ3Oxs/jD0jDj2uoNHnz+yAvNeJSOLy/dtsoIC+nwkJhqPfpNm+Ygr9OSmhQ83BlyT+N3jh0edSnnciMg0JWmsl1koJ/to3XElxyyFzE6vdYKmqkAhua3hWl60BruSB98K7k1OTNR0XjH8T/gL8/g/QFsuiJ336GLMBOAb2CcvB53B0nEAYRBLg1wHmz1yVsJQYspkGNDpdp2rtNuMYrVd;25:tyb+UPYUosvQuqKoI/jhGSB2vhuzCyvgVcsfMXIdsgX26WyqVrD+UbIcrWPsupCGBEZzTkGWDuajLzpZG5MmZ9NevJVMQN93Muoj48mghS/o1JUBMTg6o5tikoJJz521nEh+UdmrDukUcXhqz3Cj1HGXV7Lo6wGxjOFr3AtvOkfVjr0q6zcQiZA9aE2oQ9XPED9hek+5VXBdyAf/PKYRFwbqah0AuVKL1P71/phpQKrW6fCdW6cgGYgiMBZdU2L8x1mrqjFIe+dZ2GG5FNeYsa7aw2Of5Dj0UW0d/s1lDUW+wC6BKvJkG5d1tQuVe06J/HD/s07RH7NNL326gR+qNg==;31:d9dgPWQB21p3M/i3JLpik3S8hWYFRk8PI0HAwrxxbUosOIw7JgaHTsifVJvT4yF18nXJ9SEl8QYGvbHrh8GthUx3kivr/OT117dt1lknVdT+sv1RGkBfIkx/gRxjke6ZuesVuYt4buhdlEMYRDkayDaz+gyUdtzxYHpXLUsvRTLEDZma294hXG1m0y5bh7qaJFdB2sYGTB+icBU87VKMjy1w7HuicUdovgmNjAoxznc=
X-MS-TrafficTypeDiagnostic: BY2NAM05HT229:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 173.201.193.192
X-SID-PRA: [email protected]
X-SID-Result: NONE
X-MS-Exchange-Organization-PCL: 2
X-Exchange-Antispam-Report-Test: UriScan:(209352067349851)(85827821059158);
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(444111676)(52401190)(52601095)(52505095)(52406095)(82015058);SRVR:BY2NAM05HT229;BCL:0;PCL:0;RULEID:;SRVR:BY2NAM05HT229;
X-Microsoft-Exchange-Diagnostics: 1;BY2NAM05HT229;4:nF0j678stoHzYiZXElCbajbVJM/4I+IYHIkCagYdNBCCGfixZNAMqwl3bY0y6otSu6sh/CxT0IVPhXM2DX+G7pReiunwgFtsK4muwLf/IMsCml4JuIN9Q84FmmxT/Erouxw/Ky9eyHvs5UPdtg7ngN4b7rLBJm76m7zUzT1agSpy9YHxAL9993iKT7Uaw3gxu/eK/93e/UgXI+4ecfRkbOMIWKyIxVHrq+dco4cTEtVSGqGHhHGao7asgjNbE0YhsT511qhHDniB7rT6hCG4zahqSlKW/BUnxmezLOcNpaWMTy3PDg2mlOdkMersWZ+kODysfPZxaHw5DDw0YxauPF/v0I+lZnD09OJ2kcyxGi4=;6:upZlEJbup1bguuqyb6pPP9ZDajpg6hj1XwJj+MUaVzthrFKX+kOFi8IAms0pg8s7m1HXIGX5W7+XXKAbWiA70PlAroBCsNZ17qeiTYjlP8xHI/T5BRP6e/flqHhS/2RcJKgoWKTVkQKBrYd5d75/LANK6f2AFJ1aIuA3cx51R7VMX4/I99uv9n9SWORhmrq1MkIFZLP3j+pQjtbLDWNzHO0s0OZhNSa26XouiMYyAy/KGY6VqnokB0lx79GoDURTJ5q5YvHfzOF4HNbjhJln2mLJ1UkmbvQlqEJqf1RP67fEPIEQbBmhoMAAJaD2LjLkua3y1OU4el3fm+Ugl2jfXhY8AEx9PURbwrNl0Y/uzvQviWIviPJMl7ty0XkHw12KawqvSpKBTueltIwLhDpMgtZy4z3zaFiqTVz6Y6M46oCDobilFlvIlKY2nN110oLDMUzOBAnQeSbXRboztunCxw==
X-Microsoft-Antispam-Message-Info: WksBCTaDolxLKEnUGs8NWiLRTgTf1wWBSL/zB+0YRqg7CSyTu84ut/TxMv409tdmZvgwAxBjxv0hxeygMOb1H7Uw57qLeaKjiJ96KD6bfC/QrSFDglehsAoxipkRqv9AAzqptsbK0ZTJXlwtOYhPXVh1qDloOtLjVGKyGOcr36cdVF3/vDVzO12K2pEku4O2Gumf/U+rNFuu1sR0dh3lo+x6bEP7no/Ikk/l4nbL4VtubVw65FVxbFwbub4oRx+ztY/mH6WafUXU8QOw+zKGB33ueO+beInkSFEG4Uz0N/WaNnRzgRamtvmfbaweUOg9j/a3qmWR+o8Vsa+zh4gVlA==
X-Microsoft-Exchange-Diagnostics: 1;BY2NAM05HT229;5:CivHDMQ4kaNXlVPeEbhysgBGVA2R6Mlng5zrhozr67EK0CG+xeiZG2ZXNyIhy2RgN3DqzJ7lKiuewRQ/iXDOGagIj5I6rZ1Egm+1p23UC7A4TS0T87LI8Y6+lY3bZvLAGB4eo4r+JCckc+KrcSn0V1nF02UF/omX4aKghFjpxDI=;7:WiXxbZEN9EHyO4gZDgNSONNnQgLhhV6swXVqTLUB19+rW+g/SraBPu8ehX1M3YJcU0Mcagfu2umlg69FcHgzwJI1acKZhpjpZrtUEvQeXzMartV8cKLr1fQG2my/9LYYJk9sW6+kfpGt8MSFnKNN99QOKIXWfSJzmNeRBYTXv7/zr1JGAPFEvM9Q54nOXCrLmDor90DR0QcBjA66jFIb4f8B3MD2ys7USFczLlSVe1gmFWeUWwY+TQmLX8NbNqeF
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Jul 2018 18:34:05.1505
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: fc6fbb5b-2ea8-442d-36dc-08d5e693b74c
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 9a4e3081-9524-43cf-bfc3-dcaef82d5da1
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2NAM05HT229
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.6629302
X-MS-Exchange-Processed-By-BccFoldering: 15.20.0930.000
X-Microsoft-Exchange-Diagnostics:
1;BN7PR11MB2657;27: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
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(4900095)(4920089)(6375004)(4950130)(4990090)(9140004);RF:JunkEmail;
X-Message-Info:
qoGN4b5S4yrE/J//kwcC8nwHGmS7imKlKonrKXcGCji/mV3bKfvZZFWaTJmPHnyIiH03VWl0k0J8GoCZXVuR7TkcVY/FCENc3DVj91EZZAJrC+Qz5cQ4i/xuTGAgYApDAwVTqGFBsBBbRGzBmOQCEsaLQtSXiUjhQe17SEOWrzLzGRM7X/o42hr46wMp5PJa9neUfuUSwXRnAE6IPlsJcA==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Microsoft-Antispam-Message-Info:
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
MIME-Version: 1.0

--=_046efbb539b0988c5a323ffd3c52fbc7
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

Good Morning
We are contacting you in regards to your resume, The positions available a=
re Call Center Representative / Receptionist / Administrative Assistant /Da=
ta Entry. Kindly contact Mr Steven Penal
=20
via Google Hangout ([email protected]). Add Him to your buddy list a=
nd send him an IM, He will be online waiting for you ASAP to conduct the in=
terview with you.and if you don't have an account with gmail you can create=
one then download the Google Hangout Application on your phone or computer=
=2E
Your verification code is ( S800T ) this would serve as your identificatio=
n number throughout the on-line hiring process. Your timely response matter=
s a lot,Working hours are flexible.
Interview Scheduled : Online.=20
Time: ASAP=20
Venue: On Google Hangout=20
Training is Available
Human Resources
Your swift and timely response matters a lot in this beneficial position=
=2E
We look forward to having you on the team. Please if you do need an assist=
ance or need a reschedule on the interview do not hesitate to contact me at=
=20
[email protected]

--=_046efbb539b0988c5a323ffd3c52fbc7
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"><d=
iv>
<p>Good Morning</p>
<p>We are contacting you in regards to your resume, The positions available=
are Call Center Representative / Receptionist / Administrative Assistant /=
Data Entry. Kindly contact Mr Steven Penal<br> <br>via Google Hangout (pena=
[email protected]). Add Him to your buddy list and send him an IM, He wi=
ll be online waiting for you ASAP to conduct the interview with you.and if =
you don't have an account with gmail you can create one then download the G=
oogle Hangout Application on your phone or computer.</p>
<p>Your verification code is ( S800T ) this would serve as your identificat=
ion number throughout the on-line hiring process. Your timely response matt=
ers a lot,Working hours are flexible.</p>
<p>Interview Scheduled : Online. <br>Time: ASAP <br>Venue: On Google Hangou=
t <br>Training is Available</p>
<p>Human Resources</p>
<p>Your swift and timely response matters a lot in this beneficial position=
.</p>
<p>We look forward to having you on the team. Please if you do need an assi=
stance or need a reschedule on the interview do not hesitate to contact me =
at <br>[email protected]</p>
<p>&nbsp;</p>
</div>

--=_046efbb539b0988c5a323ffd3c52fbc7--


Email header analysis report
All valid IP Addresses found in the header.
Ip Address 3rd Party Info Provider City Flag Country
* 105.112.35.202 Check 105.112.35.202 at Senderbase.org Check 105.112.35.202 at Reputationauthority.org Lagos Nigeria
173.201.193.154 Check 173.201.193.154 at Senderbase.org Check 173.201.193.154 at Reputationauthority.org Ãøh Scottsdale United States
173.201.193.192 Check 173.201.193.192 at Senderbase.org Check 173.201.193.192 at Reputationauthority.org Ãøh Scottsdale United States
*Probable originating IP address


Header Analysis
Originating Info

Originating IP address

105.112.35.202

Originating hostname

105.112.35.202

Originating Organization

Celtel Nigeria Limited T.a Zain

Originating Country

Nigeria

Originating City

Lagos


Email info

From

<[email protected]>

Originating Email address

[email protected]

Subject

Administrative Assistant Resume Approved

Date Sent

Tue, 10 Jul 2018 11:33:34 -0700

Message ID



Geographical Info

Continent

Africa

Latitude

6.4531

Longitude

3.3958

Time zone

Africa/Lagos

GMT offset

1

Google Map for 105.112.35.202
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 8 guests