Company Representative scams, Payment Processing scams and other Employment scams.
by blanky78 Tue Feb 04, 2014 11:13 am
Hi all,

I can usually tell which emails are scams and which are not, but I'm not too sure about this one. It does seem a little suspicious to me, as it doesnt sound official even and it is very short. Here is the header:

From Stephen Turner Mon Feb 3 16:44:47 2014
X-Apparently-To: [email protected] via 188.125.83.172; Mon, 03 Feb 2014 08:44:49 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 72.167.180.18
Received-SPF: none (domain of stephenturner.biz does not designate permitted sender hosts)
X-YMailISG: c2iLF64WLDtMafvLMgNhuDYnCawop53vFsiV286hJzhSDBSf
LyjKGRCpdDaq0CYC9OoPCC4FenKp39SJCXyYkEXKdz5aJS61cw6gKSYpIN82
Z6wDLbsEXa.c5Rf7VJF_1CGdhvfCH_thDQY42BhAlVraOKpVW.aYE_qzfPHi
0hndd2hN59G.Z5yfecW0iXD9kCAYfsxMLdwt1F_zU3qtMlV6idXwTNpfXjVV
ogRTbGX0XYJhAgZlPN1jgEAw6Sep4YdVy7AI.gx5matm16whi1koLxigh9wL
2TDt4MSvpjew2_qRoyRx4aU.NE1yCoP2tQjssFuUuj9DYsmVmRrFW3eWWy6a
FWzx0Nf3Mk0ZUeERjnZ.GOaNn5wfDm.KPpK..MwaTwGTOXxztj2Uxgysk0lU
iTI30C4IcCOX.LZ4CwuZO0rpn5VHyR3LY5MHKCAwYkkAf43HvztQC6Z.zTEi
ZKISUCtrefsXc3JJSgxWker2P00SLBvdt69YTXfIrfkeVO9uKhalVvu.J79.
lmO77KNDxG4ybz47NyPivpHAa0SvXvApVF7_Ls8WZKIB7ylc2aC2kpWB4ZXh
659IZkRh4deAzakg_38zoZupyUCdNSWz6TZuIpPoG38wmnmw2SlATFoji3e0
9mBWpHktYvM698Z2MG_2SYK9pHQ.q_NyzYnXLEwZK.EuKlA791IBZOfHsEKg
m9CsDqE8cZ_hy1k7b_ddNGRZa6SOnBkBHExncTjgMrnjDn7SM250kH6npv45
2jAYWxzjxEQitIb438etQG1t8pBCytRfvTCrAQuSc02aQQ8HrhwFzOK9mGga
HNWL9OvbyIqL11ratcxkBOmLFH8BjwlklwlJ3Dsyqh8sKjjaWSt9LoVtZmeT
fQG5ctGBJ9zS.Uy2w7NkPRMnDwPZq92AkdXlZYRPrkpkTUbS5qfopK5xb5JF
RrHFo9900tz.1zfy4OCJRyOWk9OJevejVEYiWXek8l2RwZNkn0nb77a0OG3X
m07worIIm4knLwGnw6ew.WwKd0t82zXj2nKHcp9rGIfm43ubmKO5Eh88JrPE
BM.p5X7KyGWikTR_QvxblnM8po_xOj2cCYSSvbnhWteQmNVuyztZElK5kzJM
1qOQHLHx8oBbVFk3kcZbrAVY4us_usfjA2T.3NpqA8_Us3Tl4JpLYoFS9dpy
AAJP_XcZ.Drcbwbi5wbPMVCDiyADZaiSFIeER16Utu6Jzp2tAUlD2vUeIIyT
hb9eLkOo7JQetPe1bdoNEYOVYVR_0Yk2Ou5qN2tyuq3xljkBttn0_sAHHvua
HQNx9FIDKHv_RPC5Qcs4EayUJdXePvrItBJrizRmVPGCEc6JWFl0FIiS7bEI
EM5VdjbcyXD6SCFe6Ol9Gv0bwFRiKkx6mlc8sHNXAijLfnkAOnmjtx6ENKDZ
qyvcLDhG26IBgCURfsIGoHF59aLiTyhzJ9vLbz.izr4koYhqLTTZy0Am
X-Originating-IP: [72.167.180.18]
Authentication-Results: mta1316.mail.bf1.yahoo.com from=stephenturner.biz; domainkeys=neutral (no sig); from=stephenturner.biz; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO p3plex1out02.prod.phx3.secureserver.net) (EHLO mta1316.mail.bf1.yahoo.com) (72.167.180.18)
by mta1316.mail.bf1.yahoo.com with SMTP; Mon, 03 Feb 2014 08:44:48 -0800
Received: (qmail 12896 invoked from network); 3 Feb 2014 16:44:48 -0000
Received: from unknown (HELO p3plex2out03.prod.phx3.secureserver.net) (184.168.131.16)
by p3plex1out02.prod.phx3.secureserver.net with SMTP; 3 Feb 2014 16:44:48 -0000
Received: from P3PWEX4HT001.ex4.secureserver.net ([72.167.83.21])
by p3plex2out03.prod.phx3.secureserver.net with secureserver.net
id Msko1n0010TcVxU01skoNL; Mon, 03 Feb 2014 09:44:48 -0700
Received: from P3PWEX4MB002.ex4.secureserver.net ([169.254.9.97]) by
P3PWEX4HT001.ex4.secureserver.net ([72.167.83.21]) with mapi id
14.03.0123.003; Mon, 3 Feb 2014 09:44:48 -0700
From: Stephen Turner <[email protected]>
To: "[email protected]" <[email protected]>
Subject: Your CV
Thread-Topic: Your CV
Thread-Index: Ac8gLbYOdf9+PkqgQ5a9IYhr/pvCdQ==
Date: Mon, 3 Feb 2014 16:44:47 +0000
Message-ID: <1623D2969278A34AAED38BC7AE8AF21E3A88A5@P3PWEX4MB002.ex4.secureserver.net>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [176.254.61.201]
Content-Type: multipart/alternative;
boundary="_000_1623D2969278A34AAED38BC7AE8AF21E3A88A5P3PWEX4MB002ex4se_"
MIME-Version: 1.0
Content-Length: 26759


And the message:

Good Afternoon,
Re: Your CV Details,

Having seen your CV details, you might be interested in a Career Opportunity with our Company.

Please request us to email our information letter and an invitation to meet the Company.

Please include the best number to contact you, and times available.

Regards
Stephen Turner
www.StephenTurner.Biz
If you don't want to receive any more emails from us, you can click here to unsubscribe

It most likely probably is a scam, something about the way its worded sounds odd...
Advertisement

by AlanJones Tue Feb 04, 2014 11:30 am
It's not the type of scam that we deal with here - the website StephenTurner.Biz auto redirects to a network marketing spammer looking to sign unsuspecting victims up to their latest "get rich" scheme.

A total waste of time unless you want to alienate all your friends and family and even then you probably wouldn't make any money out of it.

You'll notice that he doesn't give any details of who the "career" is with - because if he did, anyone with any sense would run a mile.

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
by jolly_roger Tue Feb 04, 2014 11:50 am
And the e-mail header is looking sus. The P3PWEX4MB002.ex4.secureserver.net host does not exist as far as I know and a good chance part of the header has been forged.

Who is online

Users browsing this forum: ClaudeBot and 13 guests