Fraudulent Payment. Paul Roland, [email protected]

Do you need extra income?

It does not matter if you have a job now or not.

If you are interested, respond immediately by sending:

1. Your full names

2. Complete Address with APT/Unit/Suite number where available, City, State & Zip Code (Not P.O. Box)

3. Telephone, cell phone and fax numbers

4. Occupation

5. Age (Must be 18 and above)

6. Email addresses (If you use more than 1):

Limited spaces available and no sign up fees required.

Upon receipt of the above details from you, one of our Human Resource Managers will establish contact you for an interview/Accreditation. Kindly specify the best way to contact you in your reply to this Ad

Signed
Management



Email header details;

X-AOL-UID: 4486.67073537
X-AOL-DATE: Fri, 5 Aug 2011 2:57:56 PM Eastern Daylight Time
Return-Path: <[email protected]>
Received: from mtain-mb04.r1000.mx.aol.com (mtain-mb04.r1000.mx.aol.com [172.29.96.24]) by air-de08.mail.aol.com (v129.10) with ESMTP id MAILINDE082-5ebf4e3c3d34174; Fri, 05 Aug 2011 14:57:56 -0400
Received: from mail.insightbb.com (smtp2.insight.synacor.com [208.47.185.24])
by mtain-mb04.r1000.mx.aol.com (Internet Inbound) with ESMTP id 99B933800008D
for <*removed*>; Fri, 5 Aug 2011 14:57:56 -0400 (EDT)
X-Spam-Rating: **
X-CLOUDMARK: SUSPECT
X_CMAE_Category: 0,0 Undefined,Undefined
X-CNFS-Analysis: v=1.1 cv=+y+JmLXu5GUZxqlh4pe5UrTv8YItFbqKU5HG/TjFd80= c=1 sm=0 p=oPuAeTrKHQgwUDly-c4A:9 a=p98v1LgsJ0EA:10 a=FKkrIqjQGGEA:10 a=jLN7EqiLvroA:10 a=8u6a-11WpOwA:10 a=QEXdDO2ut3YA:10 a=kLkxsJjS5nM1WTnG:21 a=RKD95z_WZ10eSpq6:21 a=W5kyNG2fYDne1vcHoFcA:9 a=PEL895gKHBTvofWgOH8A:7 a=_u895Rjq0l0iUj3j:21 a=Tx3R6kjh9EwMZWNH:21 a=6HS/Esr6SxOSn4gf+UdElA==:117
X-CM-Score: 96
X-Scanned-by: Cloudmark Authority Engine
Authentication-Results: smtp01.insight.synacor.com [email protected]; spf=softfail; sender-id=softfail
Authentication-Results: smtp01.insight.synacor.com [email protected]; sender-id=softfail
Received-SPF: softfail (smtp01.insight.synacor.com: transitional domain insightbb.com does not designate 10.51.1.65 as permitted sender)
Received: from [10.51.1.65] ([10.51.1.65:39551] helo=md08.insight.synacor.com)
by mail.insightbb.com (envelope-from <[email protected]>)
(ecelerity 2.2.2.40 r(29895/29896)) with ESMTP
id 9E/68-18724-33D3C3E4; Fri, 05 Aug 2011 14:57:56 -0400
Date: Fri, 5 Aug 2011 14:57:55 -0400 (EDT)
From: Paul Roland <[email protected]>
Reply-To: Paul Roland <[email protected]>
Message-ID: <786402293.342679.1312570675538.JavaMail.root@md08.insight.synacor.com>
Subject: Job Opening
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_342678_318713073.1312570675536"
X-Originating-IP: [172.130.204.199]
X-Mailer: Zimbra 6.0.8_GA_2685 (ZimbraWebClient - OPERA (Win)/6.0.8_GA_2685)
x-aol-global-disposition: G
x-aol-sid: 3039ac1d60184e3c3d341717
X-AOL-IP: 208.47.185.24
X-AOL-SPF: domain : insightbb.com SPF : pass

Further scam script plus details on the western union pick up contact.

Dear *removed*,

Welcome to working with us as our Representative. Sequel to the part-time Job we offered you, we are glad to notify you that our accreditation process as our Representative have been successfully concluded and by virtue of this, do note that you will be receiving payments from our clients henceforth as our Representative that you are. To this effect, the first payment you will receive is $997.73 in money order and this will be delivered to you by regular mail at your address we have on file when your mail runs today or tomorrow.

Kindly find instructions on what to do immediately with the money order below :

INSTRUCTIONS:

You are required to go deposit the money order at your bank immediately because the funds have to go to: CHIU MINGH who is our Regional Warehouse Manager. This is urgently required to pay for equipments and other raw materials for our factory which are scarce at this time of the year. Do note that we deal with banks ONLY, thus you have to go and deposit the money order at your bank only reason being that we make monthly reports of our transactions and financial activities to the government through the bank, so the records are required. So if your bank is closed weekends, you have to wait till Monday to go deposit it at your bank.

Once you have the money order deposited at your bank, the money will be available next day, then you are required to deduct 8% of the funds which is $79.81 only and keep to yourself as your commission/salary. Then send the remainder of the funds by Western Union to CHIU MINGH.

Please note:

1. Send the funds by Western Union to CHIU MINGH

The Western Union instructions of where you will send the money is:

Name of receiver: CHIU MINGH
Address: 275 NIARI TALLIE AVE
City: DAKAR
Country: SENEGAL

Zip codes are not used nor required to send money to Senegal.

After you western union the money, you are required to send us the following information by email:

1. The name of the sender
2. The amount sent
3. The 10-Digit Money Transfer Control Number (MTCN)
4. The test question & Answer (We suggest that you use the word "call" as the test question and the word "answer" as the answer to the test question).

We believe the above instructions are clear and simple enough to understand and we implore you to follow our instructions well to the letter. Upon impressive performance from you, your credit rating will be propagated by our members of staff and further incentives sent your way.

You are required to confirm receipt of this email as soon as possible and also that you understand the contents therein.

Thank you for your anticipated cooperation.

Yours sincerely,

Paul Roland
Rexton International
USA Field Office
Direct Line (570) 871-5622

London Office
Tower 42, Level 35
25 Old Broad Street
London EC2N 1HQ
DX: 557 London/City
United Kingdom
Tel: +44 703 183 5832
Fax: +44 703 183 5832



Email header details;

Delivered-To: *removed*
Received: by 10.52.158.227 with SMTP id wx3cs105586vdb;
Mon, 29 Aug 2011 10:43:17 -0700 (PDT)
Received: by 10.151.21.9 with SMTP id y9mr5033437ybi.344.1314639797083;
Mon, 29 Aug 2011 10:43:17 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-gw0-f67.google.com (mail-gw0-f67.google.com [74.125.83.67])
by mx.google.com with ESMTPS id g8si4363623yba.87.2011.08.29.10.43.16
(version=TLSv1/SSLv3 cipher=OTHER);
Mon, 29 Aug 2011 10:43:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 74.125.83.67 as permitted sender) client-ip=74.125.83.67;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 74.125.83.67 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: by mail-gw0-f67.google.com with SMTP id 11so1045251gwm.2
for <*removed*>; Mon, 29 Aug 2011 10:43:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=received-spf:dkim-signature:mime-version:reply-to:sender:date
-google-sender-auth:message-id:subject:from:to:content-type;
bh=tzHQKfulFSaLbwxHQMuCqkyejoejurdg1xT1477+kx0=;
b=j9oDjf50EvZltB4PcedXK0wEz5Uxxse7YpJhdVNK/6IG09ZeRQD2B8gPGX8nM4D6Gu
b8E+C8NImlZHwwYqE4UbMkjrVJ4mx15TrstEGo9gsge3BuCZEQBgckLjyglnJU8qAtMU
Hqq6bQRrisk/PNVfH02WYNmIOPkqXPd+Cgz1E=
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.100.202.5 as permitted sender) client-ip=10.100.202.5;
Received: from mr.google.com ([10.100.202.5])
by 10.100.202.5 with SMTP id z5mr4091818anf.86.1314639795886 (num_hops = 1);
Mon, 29 Aug 2011 10:43:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:reply-to:sender:date:x-google-sender-auth:message-id
:subject:from:to:content-type;
bh=tzHQKfulFSaLbwxHQMuCqkyejoejurdg1xT1477+kx0=;
b=b0miXT07nwRBlcploAWYO7lDvYzxc64Nxk1UqjxuDvg1WzeEtVPt0OTNu99zQTO22P
uTrZLy87sytKEH1OCXWtCNOjWx9a/N3Rn2Msi7MIwRy06zNi2defn9lzgLQAfww74A1u
QT+9LXMtu6LXlFivtt5yVTd/yryiR9OjZRK5g=
MIME-Version: 1.0
Received: by 10.100.202.5 with SMTP id z5mr4091818anf.86.1314639795879; Mon,
29 Aug 2011 10:43:15 -0700 (PDT)
Reply-To: [email protected]
Sender: [email protected]
Received: by 10.100.122.4 with HTTP; Mon, 29 Aug 2011 10:43:15 -0700 (PDT)
Date: Mon, 29 Aug 2011 10:43:15 -0700
X-Google-Sender-Auth: yhDCevpBOWN0jOFtcuu_-b8WZnw
Message-ID: <CACFT4Qghamyvh+yWUjtZNyrdDOJk1SBQcNgJ_NNvZY1m=-abRw@mail.gmail.com>
Subject: URGENT. You'll receive payment in the mail
From: Paul Roland <[email protected]>
To: *removed*
Content-Type: multipart/alternative; boundary=0016369204550a7f7e04aba86e0b