Company Representative scams, Payment Processing scams and other Employment scams.
by Faizan Docherty Wed Oct 22, 2014 10:22 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 197.149.195.119
Originating ISP: Orange-gn
City: n/a
Country of Origin: Guinea
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.78.147 with SMTP id l19csp35730vck;
Wed, 22 Oct 2014 01:11:46 -0700 (PDT)
X-Received: by 10.152.170.131 with SMTP id am3mr4811466lac.15.1413965506108;
Wed, 22 Oct 2014 01:11:46 -0700 (PDT)
Return-Path: <[email protected]>
Received: from f337.i.mail.ru (f337.i.mail.ru. [217.69.140.233])
by mx.google.com with ESMTPS id yg7si22267431lbb.133.2014.10.22.01.11.45
for <multiple recipients>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 22 Oct 2014 01:11:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 217.69.140.233 as permitted sender) client-ip=217.69.140.233;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 217.69.140.233 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=list.ru
DKIM-Signature: <snipped>;
Received: from [197.149.195.119] (ident=mail)
by f337.i.mail.ru with local (envelope-from <[email protected]>)
id 1Xgr1B-0001e8-VX; Wed, 22 Oct 2014 12:11:43 +0400
Received: from [197.149.195.119] by e.mail.ru with HTTP;
Wed, 22 Oct 2014 12:11:41 +0400
From:Administrative Department <[email protected]>
To: [email protected]
Cc: <snipped>
Subject: JOB EMPLOYMENT vacancy
MIME-Version: 1.0
X-Mailer: Mail.Ru Mailer 1.0
X-Originating-IP: [197.149.195.119]
Date: Wed, 22 Oct 2014 12:11:41 +0400
Reply-To: =?UTF-8?B?QWRtaW5pc3RyYXRpdmUgICBEZXBhcnRtZW50?= <[email protected]>
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="--ALT--Vz5di0u3wGBbQFsllERniT2bHDV2Pwkn1413965501"
X-Mras: Ok
X-Spam: undefined


JOB EMPLOYMENT vacancy

Dear Sir/Madam,


We need serious applicant that has team work experience and must agree to abide
We have 150 vacancies; monthly Salary ranges from 3600-USD and above. The minimum age requirements are 18 years. by the company rules and regulations. Will you like to be part of a multi-cultural team with co-workers from more than 100 different nationalities?
If you are interested; contact us direct via bellow emaillian.c: costaapplication@anaustraom

we will send the available positions and our Official Employment Form to you as soon as we received your application.

Note: Applicants can apply from any country. The management will provide official letter of Invitation to secure visa/working permit for any qualified applicant. TRAINING, ACCOMMODATION & FLIGHT TICKET will be paid also.



At Costa Cruise Line, that’s our idea of a great career!
Customer Service Office
Costa Cruise Line
Costa Kreuzfahrten Osterreich
Kraussstrasse 10/24020 Linz
Telephone: [61487701313]
Website: http://www.costaapplication.com

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

by Faizan Docherty Wed Oct 22, 2014 3:17 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 212.55.154.22
Originating ISP: Pt Comunicacoes
City: n/a
Country of Origin: Portugal
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.125.234 with SMTP id mt10csp100087pdb;
Wed, 22 Oct 2014 08:51:36 -0700 (PDT)
X-Received: by 10.68.111.161 with SMTP id ij1mr11502052pbb.10.1413993095883;
Wed, 22 Oct 2014 08:51:35 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (tkt-001-i389.relay.mailchannels.net. [72.249.144.204])
by mx.google.com with ESMTP id og2si14532460pbc.104.2014.10.22.08.51.33
for <snipped>;
Wed, 22 Oct 2014 08:51:35 -0700 (PDT)
Received-SPF: neutral (google.com: 72.249.144.204 is neither permitted nor denied by domain of [email protected]) client-ip=72.249.144.204;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 72.249.144.204 is neither permitted nor denied by domain of [email protected]) [email protected]
X-Sender-Id: _forwarded-from|197.149.195.119
Received: from r8-chicago.webserversystems.com (ip-10-237-13-110.us-west-2.compute.internal [10.237.13.110])
by relay.mailchannels.net (Postfix) with ESMTPA id AE140120510
for <snipped>; Wed, 22 Oct 2014 15:51:31 +0000 (UTC)
X-Sender-Id: _forwarded-from|197.149.195.119
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.245.44.250])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.3.1);
Wed, 22 Oct 2014 15:51:32 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|197.149.195.119
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1413993091911:2653011531
X-MC-Ingress-Time: 1413993091911
Received: from relay2.ptmail.sapo.pt ([212.55.154.22]:39859 helo=sapo.pt)
by r8-chicago.webserversystems.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XgxvS-000GWg-Pt
for <snipped>; Wed, 22 Oct 2014 10:34:20 -0500
Received: (qmail 17131 invoked by uid 0); 22 Oct 2014 15:34:09 -0000
Received: from unknown (HELO php09) (10.134.37.58)
by relay2 with SMTP; 22 Oct 2014 15:34:09 -0000
Received: (qmail 25148 invoked by uid 64140); 22 Oct 2014 15:34:09 -0000
Received: from 197.149.195.119 ([197.149.195.119]) by mail.sapo.pt (Horde
Framework) with HTTP; Wed, 22 Oct 2014 16:34:09 +0100
Date: Wed, 22 Oct 2014 16:34:09 +0100
Message-ID: <[email protected]>
From: [email protected]
To: [email protected]
Subject: Job employment vacancy
User-Agent: Dynamic Internet Messaging Program (DIMP) PTMail 5.2.46
X-Originating-IP: 197.149.195.119
X-PTMail-Version: PTMail 5.2.46
X-PTMail-User: eyJpdiI6IlVqaTJiTFJ1cEVscTlIblZyQzBxeFE9PSIsImQiOiJ5OVNFZ29jamlTT2h5cVR0d2ZyTm9PaHdVZXR1dVBDWThBR3hLVld6aWxzPSJ9
Content-Type: multipart/alternative; boundary="=_hweYEGkzxYO--RfJq3be3g2"
MIME-Version: 1.0
X-Spam-Status: No, score=3.5
X-Spam-Score: 35
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Â JOB EMPLOYMENT VACANCY DEAR SIR/MADAM, [...]

Content analysis details: (3.5 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(coc1[at]sapo.pt)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[212.55.154.22 listed in list.dnswl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (coc1[at]sapo.pt)
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
0.0 UPPERCASE_50_75 message body is 50-75% uppercase
X-Spam-Flag: NO
X-MC-Forward: <snipped>
X-AuthUser:


Job employment vacancy



Dear Sir/Madam,

We have 210 available vacancies; monthly Salary ranges from 4150-USD and above. The minimum age requirement is 18 years. Working onboard Costa Cruise Line ship does require hard work and discipline. It is common for employees to work 6 days a week and sometimes 10 hour days. We take great pride in respecting every employee as an individual and our objective is to foster an environment that is challenging, rewarding and provides an opportunity for both professional and personal growth.

This is the JOB ID: CCL/121AU/177554.

If you are interested in working onboard; Send your letter of application to HRD of CCL Cruise Line email address: [email protected]

As soon as we receive message indicating your interest in this employment program; we will send you Job application form and position available for you to apply immediately.

Costa Cruise Line
HR and Administrative Department
Email: [email protected]

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: ClaudeBot and 15 guests