EMPLOYMENT SCAMS - [email protected]

It seems that the ExxonMobil Scam worked well... they did it with Chevron...

I m so pissed off I send them my resume and then i realise that it was a scam when they ask me to go to aberdeen with my diploma paying my plane ticket...

I feel stupid . As I send them my resume If anybody have advice to reduce the risk...

Below the email, I won't inform them. Please note that this is related to several Linkedin Account

Chevron House

Hill of Rubislaw, Aberdeen

AB15 6XL

United Kingdom

Telephone:+44 207 486 3000

Dated:5th of December 2018,

Attention: XXXXXXXXX

Good morning, this is to acknowledge the receipt of your message. Please as regards our chat on LinkedIn find the Job description in the attachment.

We urge that you to go through it properly and get back to us as soon as possible. If you are still interested in applying for the job position, send us your CV and a cover letter.

Regards,

Lucas Durham (Mr.)

Chevron House

Hill of Rubislaw, Aberdeen

AB15 6XL

United Kingdom

Orig IP: 198.54.127.54 | Orig ISP: Namecheap, Inc. | City: Los Angeles | Country: United States | More info: https://www.iptrackeronline.com?ip_addr ... .54.127.54

Thank you for posting. Would it be possible for you to post the header of the email you received? Make sure to remove your personal information when you post.

chevroncareerss.com is an email only domain registered for one year and is not associated with the real Chevron company in any way.

Domain Name: CHEVRONCAREERSS.COM
Registry Domain ID: 2313635999_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2018-09-24T14:44:14Z
Creation Date: 2018-09-24T14:44:11Z
Registry Expiry Date: 2019-09-24T14:44:11Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.6613102107
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
DNSSEC: unsigned

Delivered-To: Stupid Guy
Received: by 2002:a4a:146:0:0:0:0:0 with SMTP id 67csp9838327oor;
Wed, 5 Dec 2018 13:13:32 -0800 (PST)
X-Google-Smtp-Source: AFSGD/UsMULh3z24/uuLNbJ4PRsGuBUBxFhW4u4WOZagZvyIYdEIFNnRhBm3pccVrDzV1vG9YDKo
X-Received: by 2002:a63:4c6:: with SMTP id 189mr22068454pge.391.1544044412283;
Wed, 05 Dec 2018 13:13:32 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1544044412; cv=none;
d=google.com; s=arc-20160816;
b=GzURhPkWM9vSTzFTKCbMwpbv/ujT3ToUlZl4xiRfgYtvMvTq7xBJZKKKOOyJcnIJry
xacZHXWHOLKBcjXeaVmWfeb1bnszWqasrIEgfeR+/4pl1PTk2xM7Fkc0WPJL60LYjNY/
c+uccuNrIc7pEfBPyzhxy5C4LJhgsolOUQF4vVKGJqzP6vvfWPPsTx/9NtaEEbqRYSWs
N15MZNYXpSfvTCDsFyloKTase3DKdbXwkS5VgsUgOgNBfvHlcXVvEuxi7k+ZV436iB2K
GecQM7ARC8NCfKu1DszUE8Ul7STk9T6PPI/TMIm7M9PIY+26Y7VKGw0MuG/m4gYdqIbR
UcyQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=importance:mime-version:subject:message-id:to:reply-to:from:date;
bh=F9GwWcx2I6cckdmCP3cbc/RjZVXtUVbmAH1DuvjuXdg=;
b=ei4mvkhYUTlyj4b0fAxNRXvj1S9qbskx1CTidDQs/n0tZZ6VYTGBBiaX2yUL2c9RDK
9z9PQj95l93k4L9ybudMZZVMFFOayQORiKHVCM8IB5f71ChHKa4jpUCbPfn8RkKWbUWl
Q3V7T43MqCcDJYxw0N6q/CWtJ5M0hLXUGZJXPrqtBdagG2S5V8llZyURUEWrYnQi+a9Y
ZWopP3bAPCuXrvRwTIwPcWjjVFRhhO6qfoC19B+NRUa3q7SGyM42qFJazVel40XGaPb6
Hmomlt+OAMXsVSDqtEtJwJOYHB68RbTPu9CYbAn7EboMVt7nWi6Ld4htwaoOYuHgDOBj
yQtg==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of [email protected] designates 198.54.122.47 as permitted sender) [email protected]
Return-Path: <[email protected]>
Received: from NEW-01-3.privateemail.com (new-01-3.privateemail.com. [198.54.122.47])
by mx.google.com with ESMTPS id 9si22309857pfq.129.2018.12.05.13.13.31
for Stupigguy
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 05 Dec 2018 13:13:32 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 198.54.122.47 as permitted sender) client-ip=198.54.122.47;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 198.54.122.47 as permitted sender) [email protected]
Received: from MTA-07-1.privateemail.com (unknown [10.20.147.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by NEW-01.privateemail.com (Postfix) with ESMTPS id BA83E60433 for <stupidguy>; Wed,
5 Dec 2018 21:13:30 +0000 (UTC)
Received: from MTA-07.privateemail.com (localhost [127.0.0.1]) by MTA-07.privateemail.com (Postfix) with ESMTP id 6C53160047 for <stupidguy>; Wed,
5 Dec 2018 16:13:30 -0500 (EST)
Received: from APP-02 (unknown [10.20.147.152]) by MTA-07.privateemail.com (Postfix) with ESMTPA id 53FF160045 for <stupidguy>; Wed,
5 Dec 2018 21:13:30 +0000 (UTC)
Date: Wed, 5 Dec 2018 16:13:30 -0500 (EST)
From: "CHEVRON HUMAN RESOURCES DEPT." <[email protected]>
Reply-To: "CHEVRON HUMAN RESOURCES DEPT." <[email protected]>
To: thestupidguywho trust it!!!
Message-ID: <[email protected]>
Subject: Hello Stupid Guy
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_Part_69364_445929475.1544044410325"
X-Priority: 3
Importance: Medium
X-Mailer: Open-Xchange Mailer v7.8.1-Rev36
X-Originating-Client: open-xchange-appsuite
X-Virus-Scanned: ClamAV using ClamSMTP

I hope it s ok for you .. by the way why did you need the header is it to make it become spam?

Moreover, i identify following this case 2-3 potential scammer on internet because they are the ones who send me message on linkedin.

What should I do?
https://www.linkedin.com/in/ralph-jerome-91522a15b/
this guy send me request
https://www.linkedin.com/in/lucas-durham-00523015b/
this guy is the one who sign the email. (please note that they have all the same presentation... i knew i should be carreful of people using citation.

As i was so stupid I send them my resume... so now what should i do?

Set up Google Alerts

www.google.com/alerts