by Terminator5
Sat Nov 23, 2013 10:47 am
Urolift Job Application Results From Indeed dot com .
Scam Job URL
http://www.indeed.com/cmp/UroLift/jobs/ ... 882c831819
[email protected] .
The source host name is "8ta-151-139-228.telkomadsl.co.za" and the source IP address is 41.151.139.228.
Geo-Location Information
Country South Africa
State/Region 06
City Johannesburg
Begin Scam Email:
Dear Applicant,
Your resume has been reviewed on http://www.indeed.com and the Human Resources of the company has decided the position offered. You are required to set up a yahoo mail (http://www.yahoomail.com) and download yahoo messenger (http://messenger.yahoo.com). After this process, you are to add Mrs Brittney Christman on Yahoo IM, her yahoo ID is ([email protected]) to your yahoo buddy list ASAP for the job briefing and comprehensive details. She will be online waiting to talk to you ASAP.
• Salary: $25-$35 per hour
• Benefits : Health, Dental, Life and AD&D Insurance, Employee Wellness and 401k plans.Paid Time Off and Holidays with Generous Company Discounts
Interview Scheduled : ASAP
Position available. Administrative Assistant
Training is Available
Regards : ( UroLift System )
End Scam Email
Note the Emails are originating from a scam domain
Header Details:
Delivered-To: xxxxxx
Received: by 10.60.124.131 with SMTP id mi3csp4473oeb;
Sat, 23 Nov 2013 01:37:05 -0800 (PST)
X-Received: by 10.66.121.68 with SMTP id li4mr16409327pab.33.1385199424960;
Sat, 23 Nov 2013 01:37:04 -0800 (PST)
Return-Path: <[email protected]>
Received: from smtprelay.b.hostedemail.com (smtprelay0200.b.hostedemail.com. [64.98.42.200])
by mx.google.com with ESMTP id n5si22082823pav.156.2013.11.23.01.37.03
for <xxxxxx>;
Sat, 23 Nov 2013 01:37:03 -0800 (PST)
Received-SPF: temperror (google.com: error in processing during lookup of [email protected]: DNS timeout) client-ip=64.98.42.200;
Authentication-Results: mx.google.com;
spf=temperror (google.com: error in processing during lookup of [email protected]: DNS timeout) [email protected]
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254])
by smtprelay04.b.hostedemail.com (Postfix) with ESMTP id 092657B613
for <xxxxxx>; Sat, 23 Nov 2013 09:37:03 +0000 (UTC)
X-Session-Marker: 656D706C6F7965654075726F6C6966742E6F7267
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,[email protected],:,RULES_HIT:41:152:355:375:379:408:541:582:599:800:967:969:973:988:989:1152:1224:1260:1311:1313:1314:1345:1437:1515:1516:1517:1534:1540:1593:1594:1699:1711:1730:1747:1777:1792:1963:2194:2197:2199:2200:2393:2525:2559:2562:2682:2685:2693:2741:2829:2839:2859:2933:2937:2939:2942:2945:2947:2951:2954:3022:3138:3139:3140:3141:3142:3352:3865:3866:3867:3868:3871:3873:3934:3936:3938:3941:3944:3947:3950:3953:3956:3959:4250:4416:4643:5007:6119:6261:7754:7901:8829:8957:9010:9025:10004:10376:10400:10848:11658:11914:12043:12049:12050:12051:12213:12219:12360:12362:12484:12517:12519:13095:13134:13139:13141:13156:13228:13230:13231:13311:13357:14040,0,RBL:none,CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0,MSF:not bulk,SPF:fn,MSBL:0,DNSBL:none,Custom_rules:0:0:0
X-HE-Tag: show25_3d7d49d466428
X-Filterd-Recvd-Size: 1791
Received: from webmail05 (imap-ext [64.98.36.5])
(Authenticated sender: [email protected])
by omf01.b.hostedemail.com (Postfix) with ESMTPA
for <xxxxxx>; Sat, 23 Nov 2013 09:37:02 +0000 (UTC)
Received: from 41.151.139.228 ([41.151.139.228]) by webmail05 (Webmail) with HTTP; Sat, 23 Nov 2013 09:37:02 +0000 (UTC)
Date: Sat, 23 Nov 2013 09:37:02 +0000 (UTC)
From: Cortney Mays <[email protected]>
To: xxxxxx
Message-ID: <989206708.54023.1385199422528.JavaMail.mail@webmail05>
References: <[email protected]>
Subject: Re: Admin Assitant Full Time MD candidate
on Indeed
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Webmail
X-Originating-IP: [41.151.139.228]
End Header Details
Scam Domain Registration Details:
Domain ID:D170187188-LROR
Domain Name:UROLIFT.ORG
Created On:16-Nov-2013 10:57:34 UTC
Last Updated On:16-Nov-2013 10:57:35 UTC
Expiration Date:16-Nov-2014 10:57:34 UTC
Sponsoring Registrar:Tucows Inc. (R11-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:tuxAy8suEyHFpthh
Registrant Name:VistaPrint Technologies Ltd
Registrant Organization:VistaPrint Technologies Ltd
Registrant Street1:Canon's Court
Registrant Street2:22 Victoria Street
Registrant Street3:
Registrant City:Hamilton
Registrant State/Province:
Registrant Postal Code:HM12
Registrant Country:BM
Registrant Phone:+1.7816526199
Registrant Phone Ext.:
Registrant FAX:+1.7816526096
Registrant FAX Ext.:
Registrant Email:[email protected]
Admin ID:tu8dNtlcSfHqMI5K
Admin Name:Domain Administrator
Admin Organization:VistaPrint
Admin Street1:95 Hayden Avenue
Admin Street2:
Admin Street3:
Admin City:Lexington
Admin State/Province:MA
Admin Postal Code:02421
Admin Country:US
Admin Phone:+1.7816526199
Admin Phone Ext.:
Admin FAX:+1.7816526096
Admin FAX Ext.:
Admin Email:[email protected]
Tech ID:tue8VA9OOgBCP9lp
Tech Name:Domain Administrator
Tech Organization:VistaPrint
Tech Street1:95 Hayden Ave.
Tech Street2:
Tech Street3:
Tech City:Lexington
Tech State/Province:MA
Tech Postal Code:02421
Tech Country:US
Tech Phone:+1.7816526199
Tech Phone Ext.:
Tech FAX:+1.7816526096
Tech FAX Ext.:
Tech Email:[email protected]
Name Server:NS2.VPWEB.COM
Name Server:NS3.VPWEB.COM
Name Server:NS4.VPWEB.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned
Scam Job URL
http://www.indeed.com/cmp/UroLift/jobs/ ... 882c831819
[email protected] .
The source host name is "8ta-151-139-228.telkomadsl.co.za" and the source IP address is 41.151.139.228.
Geo-Location Information
Country South Africa
State/Region 06
City Johannesburg
Begin Scam Email:
Dear Applicant,
Your resume has been reviewed on http://www.indeed.com and the Human Resources of the company has decided the position offered. You are required to set up a yahoo mail (http://www.yahoomail.com) and download yahoo messenger (http://messenger.yahoo.com). After this process, you are to add Mrs Brittney Christman on Yahoo IM, her yahoo ID is ([email protected]) to your yahoo buddy list ASAP for the job briefing and comprehensive details. She will be online waiting to talk to you ASAP.
• Salary: $25-$35 per hour
• Benefits : Health, Dental, Life and AD&D Insurance, Employee Wellness and 401k plans.Paid Time Off and Holidays with Generous Company Discounts
Interview Scheduled : ASAP
Position available. Administrative Assistant
Training is Available
Regards : ( UroLift System )
End Scam Email
Note the Emails are originating from a scam domain
Header Details:
Delivered-To: xxxxxx
Received: by 10.60.124.131 with SMTP id mi3csp4473oeb;
Sat, 23 Nov 2013 01:37:05 -0800 (PST)
X-Received: by 10.66.121.68 with SMTP id li4mr16409327pab.33.1385199424960;
Sat, 23 Nov 2013 01:37:04 -0800 (PST)
Return-Path: <[email protected]>
Received: from smtprelay.b.hostedemail.com (smtprelay0200.b.hostedemail.com. [64.98.42.200])
by mx.google.com with ESMTP id n5si22082823pav.156.2013.11.23.01.37.03
for <xxxxxx>;
Sat, 23 Nov 2013 01:37:03 -0800 (PST)
Received-SPF: temperror (google.com: error in processing during lookup of [email protected]: DNS timeout) client-ip=64.98.42.200;
Authentication-Results: mx.google.com;
spf=temperror (google.com: error in processing during lookup of [email protected]: DNS timeout) [email protected]
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254])
by smtprelay04.b.hostedemail.com (Postfix) with ESMTP id 092657B613
for <xxxxxx>; Sat, 23 Nov 2013 09:37:03 +0000 (UTC)
X-Session-Marker: 656D706C6F7965654075726F6C6966742E6F7267
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,[email protected],:,RULES_HIT:41:152:355:375:379:408:541:582:599:800:967:969:973:988:989:1152:1224:1260:1311:1313:1314:1345:1437:1515:1516:1517:1534:1540:1593:1594:1699:1711:1730:1747:1777:1792:1963:2194:2197:2199:2200:2393:2525:2559:2562:2682:2685:2693:2741:2829:2839:2859:2933:2937:2939:2942:2945:2947:2951:2954:3022:3138:3139:3140:3141:3142:3352:3865:3866:3867:3868:3871:3873:3934:3936:3938:3941:3944:3947:3950:3953:3956:3959:4250:4416:4643:5007:6119:6261:7754:7901:8829:8957:9010:9025:10004:10376:10400:10848:11658:11914:12043:12049:12050:12051:12213:12219:12360:12362:12484:12517:12519:13095:13134:13139:13141:13156:13228:13230:13231:13311:13357:14040,0,RBL:none,CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0,MSF:not bulk,SPF:fn,MSBL:0,DNSBL:none,Custom_rules:0:0:0
X-HE-Tag: show25_3d7d49d466428
X-Filterd-Recvd-Size: 1791
Received: from webmail05 (imap-ext [64.98.36.5])
(Authenticated sender: [email protected])
by omf01.b.hostedemail.com (Postfix) with ESMTPA
for <xxxxxx>; Sat, 23 Nov 2013 09:37:02 +0000 (UTC)
Received: from 41.151.139.228 ([41.151.139.228]) by webmail05 (Webmail) with HTTP; Sat, 23 Nov 2013 09:37:02 +0000 (UTC)
Date: Sat, 23 Nov 2013 09:37:02 +0000 (UTC)
From: Cortney Mays <[email protected]>
To: xxxxxx
Message-ID: <989206708.54023.1385199422528.JavaMail.mail@webmail05>
References: <[email protected]>
Subject: Re: Admin Assitant Full Time MD candidate
on Indeed
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Webmail
X-Originating-IP: [41.151.139.228]
End Header Details
Scam Domain Registration Details:
Domain ID:D170187188-LROR
Domain Name:UROLIFT.ORG
Created On:16-Nov-2013 10:57:34 UTC
Last Updated On:16-Nov-2013 10:57:35 UTC
Expiration Date:16-Nov-2014 10:57:34 UTC
Sponsoring Registrar:Tucows Inc. (R11-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:tuxAy8suEyHFpthh
Registrant Name:VistaPrint Technologies Ltd
Registrant Organization:VistaPrint Technologies Ltd
Registrant Street1:Canon's Court
Registrant Street2:22 Victoria Street
Registrant Street3:
Registrant City:Hamilton
Registrant State/Province:
Registrant Postal Code:HM12
Registrant Country:BM
Registrant Phone:+1.7816526199
Registrant Phone Ext.:
Registrant FAX:+1.7816526096
Registrant FAX Ext.:
Registrant Email:[email protected]
Admin ID:tu8dNtlcSfHqMI5K
Admin Name:Domain Administrator
Admin Organization:VistaPrint
Admin Street1:95 Hayden Avenue
Admin Street2:
Admin Street3:
Admin City:Lexington
Admin State/Province:MA
Admin Postal Code:02421
Admin Country:US
Admin Phone:+1.7816526199
Admin Phone Ext.:
Admin FAX:+1.7816526096
Admin FAX Ext.:
Admin Email:[email protected]
Tech ID:tue8VA9OOgBCP9lp
Tech Name:Domain Administrator
Tech Organization:VistaPrint
Tech Street1:95 Hayden Ave.
Tech Street2:
Tech Street3:
Tech City:Lexington
Tech State/Province:MA
Tech Postal Code:02421
Tech Country:US
Tech Phone:+1.7816526199
Tech Phone Ext.:
Tech FAX:+1.7816526096
Tech FAX Ext.:
Tech Email:[email protected]
Name Server:NS2.VPWEB.COM
Name Server:NS3.VPWEB.COM
Name Server:NS4.VPWEB.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned
Daniel 8 :25
