by Terminator5
Wed Dec 11, 2013 10:01 am
Employment Scam Email with fake domain .
The source host name is "fl-207-30-5-76.sta.embarqhsd.net" and the source IP address is 207.30.5.76.
Geo-Location Information
Country United States
State/Region FL
City Monticello
Begin Scam Email
Dear Applicant,
Hope you're having a pleasant day today? You contacted me applying for the position i advertised on Craigslist.Do take time to go through this introductory mail and feel free to pass any questions on. I am in need of a personal/Admin assistant that can handle my official and personal needs when I am not around. I'm looking for someone that can be trusted,reliable, efficient, self motivated, organized, a good communicator,and IT literate. My Name is Kelvin Leuer, Married with 2 Wonderful children. I run my family's farm mainly; I also have a lot of investments and businesses of my own particularly in the real estate market and as a private lender. I'm also a Certified Payroll Specialist working for a number of companies within and outside United State as a private eye / analyst in their payroll activities. I travel very frequently trying to expand my business and sometimes there is a work overload for me, this is the more reason I'm looking to find someone back home who is efficient,self-motivated, organized, a good communicator with an ability to multi-task under pressure and who can help me keep up to date with all of my activities amidst my ever busy schedule.I am in a workshop in Baulkham Hills, NSW, 2153 Australia.I will be here for four weeks after which I will be in the United Kingdom for my aunt funeral and later attend my son's graduation two days after the funeral before i head to the Philippines for a Live-slide/talk show lectures with some students. And hopefully to be back to United State in Eight Weeks.
YOUR DUTIES AS MY ASSISTANT.
While I am out of the United State,I need some one who can stand in the gap for me.His/her duties will be the following
1.To receive letters and mails on my behalf.
2.Receive Outstanding payment and deposits from clients who want to attend the forth coming workshops or Live shows.
3.Schedule appointments for me.
4.Book my Flight tickets/Hotel Reservations.
5.Receive/Send letters and mails from and to my clients.
This position is Part-time and flexible hours job,you can be in any location to carry out any of the activities.All you need do is to check your Emails at least twice daily and keep your phone on most times in case i might need to call you from anywhere i may be.I do have a number of things you could help me with this week if you will be available to start.This can act as a stable foundation to our working relationship.Let me know if you have any of the office equipment (If not,I will make arrangements to send them to your address)
Printer:
Personal Laptop/Desktop:
Internet Access:
Scanner:
Fax machine:
Lamina tor (pouch type):
Paper Cutter: (up/down cutter type)
For proper review (since i am not available now to set up a face-to-face interview) supply out correctly the information below i also believe this details are stated on your resumes . Please do reconfirm below details for proper documentation.
FIRST NAME :-
SURNAME:-
ADDRESS:-
CITY :-
STATE:-
ZIP CODE:-
PHONE NUMBER (S) :-
PRESENT OCCUPATION:-
Salary:
$500 weekly($2,000 monthly)
Also,there will be compensation for efficiency and hard working.
Thanks,
Kelvin Leuer
[email protected]
Australia cell phone +61390058109
USA phone # (text only) +1 415-496-6580
End Scam Email
Scam Domain Registration Details:
Domain Name: LEUERSTUDIOS.COM
Registry Domain ID: 1831446137_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2013-10-17 09:04:24
Creation Date: 2013-10-17 09:04:24
Registrar Registration Expiration Date: 2014-10-17 09:04:24
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.480-624-2505
Reseller: Google Inc.
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientRenewProhibited
Domain Status: clientDeleteProhibited
Registry Registrant ID:
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant State/Province: Arizona
Registrant Postal Code: 85260
Registrant Country: United States
Registrant Phone: (480) 624-2599
Registrant Phone Ext:
Registrant Fax: (480) 624-2598
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Registration Private
Admin Organization: Domains By Proxy, LLC
Admin Street: DomainsByProxy.com
Admin Street: 14747 N Northsight Blvd Suite 111, PMB 309
Admin City: Scottsdale
Admin State/Province: Arizona
Admin Postal Code: 85260
Admin Country: United States
Admin Phone: (480) 624-2599
Admin Phone Ext:
Admin Fax: (480) 624-2598
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: Registration Private
Tech Organization: Domains By Proxy, LLC
Tech Street: DomainsByProxy.com
Tech Street: 14747 N Northsight Blvd Suite 111, PMB 309
Tech City: Scottsdale
Tech State/Province: Arizona
Tech Postal Code: 85260
Tech Country: United States
Tech Phone: (480) 624-2599
Tech Phone Ext:
Tech Fax: (480) 624-2598
Tech Fax Ext:
Tech Email: [email protected]
Name Server: NS63.DOMAINCONTROL.COM
Name Server: NS64.DOMAINCONTROL.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2013-12-11T13:00:00Z
Header Details:
Delivered-To: xxxxxx
Received: by 10.60.21.226 with SMTP id y2csp236772oee;
Wed, 11 Dec 2013 01:44:41 -0800 (PST)
X-Received: by 10.60.95.135 with SMTP id dk7mr341088oeb.11.1386755081514;
Wed, 11 Dec 2013 01:44:41 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-oa0-f54.google.com (mail-oa0-f54.google.com [209.85.219.54])
by mx.google.com with ESMTPS id kv3si12885511obb.110.2013.12.11.01.44.41
for <xxxxxx>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Wed, 11 Dec 2013 01:44:41 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.219.54 as permitted sender) client-ip=209.85.219.54;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 209.85.219.54 as permitted sender) [email protected]
Received: by mail-oa0-f54.google.com with SMTP id h16so7051238oag.27
for <xxxxxx>; Wed, 11 Dec 2013 01:44:41 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:in-reply-to:references:date
:message-id:subject:from:to:content-type;
bh=iIOoHuKwahWq+y9bCvx2sWU+tG/UyOj1Tysw/Axrs/A=;
b=Eno1zGmHmUa6QslSttxomlBC4bO9T6j/aEM+IFO+1v+KSwj3UqFgZvDEVTCy9orTGF
5Ujty1eCzjoCxR/4C+LYlsuJ9Er1NFN1JrhtwqFGJ7fPWJEqSdDCSOHuJAuEyYQSF+eT
urzB1YRD2Jf3NtlbVpBiTky2LOd69ZI9gMiVj10CBkZUFv9glAcW5YyqGtWrhkYJoObN
xyxJV0vfXfvLUzsm2iEZZ6kMH90+el5nT7aozwED6bseX/5gl+OiZqbQsNt0Z8Dcfzj1
pdnsaEHNIWtjo+/9Hcm0VmKUFVEUp6vu7OTmueF+QsNOD5nGGAgY5Nr8LykdK0HKF508
9CzA==
X-Gm-Message-State: ALoCoQmDyhOHhQW7WDf5V14SZ1iYSu2ZRzCNi09LWocd7lurv6gQkqkX8CdoeoY39oxTF5ZCvLnI
MIME-Version: 1.0
X-Received: by 10.60.39.169 with SMTP id q9mr72537oek.79.1386755081315; Wed,
11 Dec 2013 01:44:41 -0800 (PST)
Received: by 10.76.82.130 with HTTP; Wed, 11 Dec 2013 01:44:41 -0800 (PST)
X-Originating-IP: [207.30.5.76]
In-Reply-To: <CAMmFnJgPkDbj+6WUZafSv9-7XJpHf=s792m+Fmd+q5HNwrT9hQ@mail.gmail.com>
References: <CAMmFnJgPkDbj+6WUZafSv9-7XJpHf=s792m+Fmd+q5HNwrT9hQ@mail.gmail.com>
Date: Wed, 11 Dec 2013 04:44:41 -0500
Message-ID: <CAB40q+xgAzDhHEhmy1DNSdO6C5pE-jn_2hndjnvGStz1L=eBrQ@mail.gmail.com>
Subject: Re: Customer Service/Admin Assistant
From: Kelvin Leuer <[email protected]>
To: xxxxxx <xxxxxx>
Content-Type: multipart/alternative; boundary=089e013cc3a6032eea04ed3f1487
--089e013cc3a6032eea04ed3f1487
Content-Type: text/plain; charset=ISO-8859-1
The source host name is "fl-207-30-5-76.sta.embarqhsd.net" and the source IP address is 207.30.5.76.
Geo-Location Information
Country United States
State/Region FL
City Monticello
Begin Scam Email
Dear Applicant,
Hope you're having a pleasant day today? You contacted me applying for the position i advertised on Craigslist.Do take time to go through this introductory mail and feel free to pass any questions on. I am in need of a personal/Admin assistant that can handle my official and personal needs when I am not around. I'm looking for someone that can be trusted,reliable, efficient, self motivated, organized, a good communicator,and IT literate. My Name is Kelvin Leuer, Married with 2 Wonderful children. I run my family's farm mainly; I also have a lot of investments and businesses of my own particularly in the real estate market and as a private lender. I'm also a Certified Payroll Specialist working for a number of companies within and outside United State as a private eye / analyst in their payroll activities. I travel very frequently trying to expand my business and sometimes there is a work overload for me, this is the more reason I'm looking to find someone back home who is efficient,self-motivated, organized, a good communicator with an ability to multi-task under pressure and who can help me keep up to date with all of my activities amidst my ever busy schedule.I am in a workshop in Baulkham Hills, NSW, 2153 Australia.I will be here for four weeks after which I will be in the United Kingdom for my aunt funeral and later attend my son's graduation two days after the funeral before i head to the Philippines for a Live-slide/talk show lectures with some students. And hopefully to be back to United State in Eight Weeks.
YOUR DUTIES AS MY ASSISTANT.
While I am out of the United State,I need some one who can stand in the gap for me.His/her duties will be the following
1.To receive letters and mails on my behalf.
2.Receive Outstanding payment and deposits from clients who want to attend the forth coming workshops or Live shows.
3.Schedule appointments for me.
4.Book my Flight tickets/Hotel Reservations.
5.Receive/Send letters and mails from and to my clients.
This position is Part-time and flexible hours job,you can be in any location to carry out any of the activities.All you need do is to check your Emails at least twice daily and keep your phone on most times in case i might need to call you from anywhere i may be.I do have a number of things you could help me with this week if you will be available to start.This can act as a stable foundation to our working relationship.Let me know if you have any of the office equipment (If not,I will make arrangements to send them to your address)
Printer:
Personal Laptop/Desktop:
Internet Access:
Scanner:
Fax machine:
Lamina tor (pouch type):
Paper Cutter: (up/down cutter type)
For proper review (since i am not available now to set up a face-to-face interview) supply out correctly the information below i also believe this details are stated on your resumes . Please do reconfirm below details for proper documentation.
FIRST NAME :-
SURNAME:-
ADDRESS:-
CITY :-
STATE:-
ZIP CODE:-
PHONE NUMBER (S) :-
PRESENT OCCUPATION:-
Salary:
$500 weekly($2,000 monthly)
Also,there will be compensation for efficiency and hard working.
Thanks,
Kelvin Leuer
[email protected]
Australia cell phone +61390058109
USA phone # (text only) +1 415-496-6580
End Scam Email
Scam Domain Registration Details:
Domain Name: LEUERSTUDIOS.COM
Registry Domain ID: 1831446137_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2013-10-17 09:04:24
Creation Date: 2013-10-17 09:04:24
Registrar Registration Expiration Date: 2014-10-17 09:04:24
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.480-624-2505
Reseller: Google Inc.
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientRenewProhibited
Domain Status: clientDeleteProhibited
Registry Registrant ID:
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant State/Province: Arizona
Registrant Postal Code: 85260
Registrant Country: United States
Registrant Phone: (480) 624-2599
Registrant Phone Ext:
Registrant Fax: (480) 624-2598
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: Registration Private
Admin Organization: Domains By Proxy, LLC
Admin Street: DomainsByProxy.com
Admin Street: 14747 N Northsight Blvd Suite 111, PMB 309
Admin City: Scottsdale
Admin State/Province: Arizona
Admin Postal Code: 85260
Admin Country: United States
Admin Phone: (480) 624-2599
Admin Phone Ext:
Admin Fax: (480) 624-2598
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: Registration Private
Tech Organization: Domains By Proxy, LLC
Tech Street: DomainsByProxy.com
Tech Street: 14747 N Northsight Blvd Suite 111, PMB 309
Tech City: Scottsdale
Tech State/Province: Arizona
Tech Postal Code: 85260
Tech Country: United States
Tech Phone: (480) 624-2599
Tech Phone Ext:
Tech Fax: (480) 624-2598
Tech Fax Ext:
Tech Email: [email protected]
Name Server: NS63.DOMAINCONTROL.COM
Name Server: NS64.DOMAINCONTROL.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2013-12-11T13:00:00Z
Header Details:
Delivered-To: xxxxxx
Received: by 10.60.21.226 with SMTP id y2csp236772oee;
Wed, 11 Dec 2013 01:44:41 -0800 (PST)
X-Received: by 10.60.95.135 with SMTP id dk7mr341088oeb.11.1386755081514;
Wed, 11 Dec 2013 01:44:41 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-oa0-f54.google.com (mail-oa0-f54.google.com [209.85.219.54])
by mx.google.com with ESMTPS id kv3si12885511obb.110.2013.12.11.01.44.41
for <xxxxxx>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Wed, 11 Dec 2013 01:44:41 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.219.54 as permitted sender) client-ip=209.85.219.54;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 209.85.219.54 as permitted sender) [email protected]
Received: by mail-oa0-f54.google.com with SMTP id h16so7051238oag.27
for <xxxxxx>; Wed, 11 Dec 2013 01:44:41 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:in-reply-to:references:date
:message-id:subject:from:to:content-type;
bh=iIOoHuKwahWq+y9bCvx2sWU+tG/UyOj1Tysw/Axrs/A=;
b=Eno1zGmHmUa6QslSttxomlBC4bO9T6j/aEM+IFO+1v+KSwj3UqFgZvDEVTCy9orTGF
5Ujty1eCzjoCxR/4C+LYlsuJ9Er1NFN1JrhtwqFGJ7fPWJEqSdDCSOHuJAuEyYQSF+eT
urzB1YRD2Jf3NtlbVpBiTky2LOd69ZI9gMiVj10CBkZUFv9glAcW5YyqGtWrhkYJoObN
xyxJV0vfXfvLUzsm2iEZZ6kMH90+el5nT7aozwED6bseX/5gl+OiZqbQsNt0Z8Dcfzj1
pdnsaEHNIWtjo+/9Hcm0VmKUFVEUp6vu7OTmueF+QsNOD5nGGAgY5Nr8LykdK0HKF508
9CzA==
X-Gm-Message-State: ALoCoQmDyhOHhQW7WDf5V14SZ1iYSu2ZRzCNi09LWocd7lurv6gQkqkX8CdoeoY39oxTF5ZCvLnI
MIME-Version: 1.0
X-Received: by 10.60.39.169 with SMTP id q9mr72537oek.79.1386755081315; Wed,
11 Dec 2013 01:44:41 -0800 (PST)
Received: by 10.76.82.130 with HTTP; Wed, 11 Dec 2013 01:44:41 -0800 (PST)
X-Originating-IP: [207.30.5.76]
In-Reply-To: <CAMmFnJgPkDbj+6WUZafSv9-7XJpHf=s792m+Fmd+q5HNwrT9hQ@mail.gmail.com>
References: <CAMmFnJgPkDbj+6WUZafSv9-7XJpHf=s792m+Fmd+q5HNwrT9hQ@mail.gmail.com>
Date: Wed, 11 Dec 2013 04:44:41 -0500
Message-ID: <CAB40q+xgAzDhHEhmy1DNSdO6C5pE-jn_2hndjnvGStz1L=eBrQ@mail.gmail.com>
Subject: Re: Customer Service/Admin Assistant
From: Kelvin Leuer <[email protected]>
To: xxxxxx <xxxxxx>
Content-Type: multipart/alternative; boundary=089e013cc3a6032eea04ed3f1487
--089e013cc3a6032eea04ed3f1487
Content-Type: text/plain; charset=ISO-8859-1
Daniel 8 :25
