Not sure If this is one....

Hey there I have just received today an e-mail that looks very dodgy at first I thought it was scam but none of the lines come up on google (or e-mails) however the 'To' does not state my e-mail, so since there is years of experirence here could you shed some light on this please.

Greetings.

Our company ELT is pleased to offer you a well-paid part-time job.

Location : UK

If you are interested, please reply to : [email protected] with your short resume.

Best wishes,
ELT Team

Return-Path: <[email protected]>
X-Original-To: (removed)
Delivered-To: (removed)
Received: from mxen9.enta.net (mxen9.enta.net [78.33.48.12])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id 8341D1996DD
for <(removed)>; Thu, 17 Mar 2011 04:12:02 +0000 (GMT)
Received: from localhost (localhost [127.0.0.1])
by mxen9.enta.net (Postfix) with ESMTP id 58C2E205856
for <(removed)>; Thu, 17 Mar 2011 04:12:02 +0000 (GMT)
Received: from mxen9.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 17423-05 for <(removed)>;
Thu, 17 Mar 2011 04:12:00 +0000 (GMT)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from nm1-vm1.bullet.mail.ne1.yahoo.com (nm1-vm1.bullet.mail.ne1.yahoo.com [98.138.91.36])
by mxen9.enta.net (Postfix) with SMTP id 3776B205854
for <(removed)>; Thu, 17 Mar 2011 04:12:00 +0000 (GMT)
Received: from [98.138.90.52] by nm1.bullet.mail.ne1.yahoo.com with NNFMP; 17 Mar 2011 04:11:59 -0000
Received: from [98.138.89.252] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 17 Mar 2011 04:11:59 -0000
Received: from [127.0.0.1] by omp1044.mail.ne1.yahoo.com with NNFMP; 17 Mar 2011 04:11:59 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 5079 invoked by uid 60001); 17 Mar 2011 04:11:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1300335119; bh=rhFwdoK3+qlMXKmf3EMdwZdcP2+HvR8su6BShmA4WAg=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=pCXDS+i3la5hMTjhxlq0wZZouvU7CTSH2PxVWjGKXllOlOEqMx4sIvkyydcPe+BEV5oGYSQUvvIRUtzVmlstmOusdjUZJKyRici3szMUPiQ7KFq351SE8c0ELfOtr3Z7UntIRVI9SCu33lQSUpvLGMOsQYNspv8new1hsgDSU7U=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
b=t7Kw+xPIso3QbafamMhQvXKSL0MXLppetH3xgdiJfmaXYB7vvpP7GbMBMSkZSEMwFijfH0TvExo6pzDDwnsCYiLiXCtzmoYgvxzDrMJa/jzyKOJftU9Gu/kbuK/PYBgiZsm9Owsf/8j83BKyBX6jTTQ3/pxRm8dQa/deyReYG8Y=;
Message-ID: <[email protected]>
X-YMail-OSG: 8AbPxnYVM1m_9tQO7CC91jWRN4aLboMBlpwbsGz6XHTmfRD
0WNW72ZvotcMqt3PIknKM1g4rMGIRgHQaIqDVXk7isOSQSphFM.XRYZ.zfpl
sN0PV9wz1uYbmdmcpphIT.VusEfQHClDm9AKlpllOvbLnoPxHN2i7Bpll3zs
8i2s5FOfnHPsZC8U6ShRvaJe5bzZJF6p3Nxbe.MKQTXoMMiVUqz_QyjNaON1
WZ8vkXhG_Yc5xsC3K7L53SQx2U57fJjrO3TMJjtKCyoeq3_nuYCcQJR2NhAA
JpyNj.K2MPpc0yn9ewJORZ26dYurJ_SEUqWvfEkBJPhXI5gzKAp6kDWNoTRh
xx1hchMTIJIg0Ctcf46wEdFpPhtF1mNPC0lM8NxVNZ1YvnL0rZ.jiHtk5Bwq
.8ACQnagOmroS7jV6sTd5zJk.ACK_3p7gJubqkGlTJ3y1E.5sK9uOROTVifm
tLv0mPWN4__hzcbXatKmMI7gd5l7RnBMriKNDWBbFVgGgcPfaBGbFyQhrLVj
4PH6xRVSjPzBAx3enCHbvLddZyFW6sl1jRvBQVHeIc3fmSg0CeJ5QAy7gVT8
zYA3pP__4UXCA8gy4.WzftT.r6En69FnZNnWGPDxxbc8xiyCSrauUUQhXgKB
hP4HtdTidd5OzGSAlPlJwF6_u_iSz_LzBn9mQAa4nFgBKcoaHCA_lnzbToB8
94lcI.usNgt1gZ.VEYFDCI51qtUC9nmJ4wxirrGu4oggAdbG4sPNoRJ2oyFv
CxRb283EzkFLcToVrNdMcPmBUCjnd0ju9fl.faASqUJMPKbaGLUlWZYzY11D
T3uffpwxvE6c7Vk75k36Igffvynt4UCspnFqH3uLAnrMuTn5osBRP3d4HrVb
gTuIUhPIb_YGNHtV0BH3gK09Vb_jKDroBgAViH6fOKxGRFNmROTwJ5iP.zNa
ki_UJAZcYMZB3wGKJ819VDaMLeyYV.LRX08lynz4YMIkTMoOb3Y1qFMWrFPi
FInfhpPDSEoXYMftXDMrAIFXODzrgzu4qLzLSnkiFikmJZ06MGxxYeKpb7ya
QYdGXh7PGkYkhk0R_AD1w7k6VDg0OFMhrRN0LCYEO6nufG0.rVNgyLIj31zj
_klbTaS25qwGAqPWYhecAr20hiVarCGkMZm3as3bR1YfbRJHv79al3nJqjYU
SfCObX5qSg8TehiasOTLIt0DOShKylvNCaO8EZ3MhwjqCs7kaIPmGHaU16mV
XPE3cczeCFGG6V1ATpUTLcj_Wi8_rwfM21JLBctEJkRDYmSKzkjFxVHlvhjR
fvchIGRtjvqt0cYx.VMDW63xjJYSOoG6k2bI8hcobq3rUluOosgIdQHPwIaU
9A_w3pK0guZE4EWfw8fWcKVpoV9ZZ8mMT6anKhIPKh4A0LJSP.gjGQkb4dV8
c81NDwKhbZrS6IkUZJNhdbOM7b5xXuJSZFn6_f7KvRjjPrMegZShEAsVkECY
oFXZaeURuWAOyOKd0zG3povN_f0WUV2TG.XiPnphG2EEcdk1XqxWV8LrNDIX
2NnWIFnw8lr9VEM38Ep4yVNSMTgdqN6uir966ONfS4Epr7jXOArZKZzVmPnW
E.USNW1LAAm3R1di8HE9rcFkLKVA89SoGZCgQkLyR9AIqkiwzmKdbT4_sRTB
NeUdjQ8hd8RzQVsbD9aj5Neq4UMSSjBnkjv7EUSk5i4snyu5NbXtlwskonJ4
SeAT7zoLk_W9M7ZVd_Jo4wUm8Ygd66r9fqa2H2PLuKAttK5G5R4Pd.UAZaVv
KSx7FTmlhXD62EzWt4GIbGsebX8ff.Edz55eaYLEvDc29zWmfIYTZZMQkCyn
g.o2A4m1cZpS5kqXGP7OI7skxoHlnI8_GDb56qbjBZXDnS3SnPT4GC7Og10W
KCNOFuXry3i1oiN2m7ndNdkRUWD6dgG1vTdcV0vq91Acap1OaYAYxzchOWJb
cGHzhG84cjue3MsYp7_i6AB8cLsRjuS1sjtqEoWoiTB_bcIi9Z1TAub07.PK
alF0pSEHNMR5pM8GVaYKV__ejmk0pK_a0ULQFeFDKpaAm7wQGMBPtGBsYnQl
ecervzav_gvJGs27TOcxvB5yZr6CfhnGCPp53CrFo_v1SiarogrphRuQoFro
pstIQ0zsZfbiSaGSSUKs3XGMvDjafv5vdz_2IlKzR1sbAbh7bkihrabinVIg
_tRxr_uRoJafzfcFeSZ9e2L3YeBTSXet449.V4.4IZYG5MxBR7oy13UP2l8e
bRlcmKYXUkak1P0WmPgry2kq_f7BzbyC4apGEKiGO6Q9x3PylouuA6YvEn3s
vmqyLExZPNuhOfhI8IhK6Ta2pmpcY4hirtzyYNYFuGRZPn9g6xBQr9.irm4B
jSr.tjt6gT2qroHppmOT.YluWa9JhbwlLeHs0lOjiE6ly4Ohrt0__32xoFdp
keJRFmC1BGuxuwBGFLwto5ongrGwWM4jzPuSSUO5Mw3p3sjcvIdAQ7wY6Pqy
87gTU6YfQPt9bGfPfBbpuk4XxNiqjfDpYdCxt1z0MadrkqS..CC9XaJKRUk8
zi79hVZ.btbm17PEX.bAJcOfbEDae6degzpQSoF_W1JtmrAKinjiDbyjzaZ3
iJgWv8mUbyKLh3DQaqKmqnR1JvWbnTAEgbVsi9Xq02LobyFy8MDsJLSHNk5T
6fgIxDFofV2xVmpEUJCSQMq3B6CKJVldBY5A3rn_Oawj2.nZXbVpbicoDQxS
ZxDD9il.7lBNKVp5EK5opMyTuDVixD16E0xB38.MxCaY3Ci19T2_S5K4L4Tt
cWwMwrEvMXBL8rmhmrk2XuozVrxhG8BS0bQSFEA3LMVgQMfmiVCvJrrU_t2p
CKQMajzrD1EMfjE.vVg4o8AN8cSCTS3TORaGmO5vy_nUO6aGBF5z4aWPdF.j
xaBzpttpJag2gnnYD_pFc9zojMA9XEzRS6PrvJQuyc9iqirCV020DB.e.nm1
gF.gTOjIgAlZYi9SrNjgEqyDl30ewYpi4LJrFZ8eEGiLG3QI9DhKogeT1vmP
Pv2vhfLjjQ4VjOCWwZxs0u24cyKfGt2kWLAWTDqeZwqtb1H4xQ1DvXwnZpX5
jnWXZZZ9g7PwGb.wsO374XE8giDZGdgHuZVnrIirsMtLjmlGVYVXLZg2r_nk
eAO1FEC6zSiruTEQLu8LhO3CDJciUuRhQEcxHpKwIizw4n4nHViRsIhHBMdS
Kx1IsKey4WweD.LejQtgaJBVd8iq9ewddE.v8uxfMbfSg0UJnjuG5AXpSsfq
YJELoTzbuarfV5cPu69rtgQTOsj0YikSLRe3_5bjFOQ_pmy8fUPGn6fQBXbB
FmJ1eq64uwtVPz.VnqVn.ZFTAHr3b011LIr0libfYHRxVab71KEGBQlHDW.0
37Xx_I_6kkeqFER_cr3BjbBDyBSG_pATX4VRgePSnhWmhI87246yXBXJ3oQn
aNslprjRgt72t.DNh5Ind_x_CnmQ81I2QjmZtPDAAHT5MS76c9kY8jKID1VV
0kW5XI9U4DDweh5dTY1SqBfh0sRPk5edCy.31iCulimwnDP0njST7_tbX1yy
o9VtVjRL1p7FupmXd9xCsBfLq.LNArvlpDQTeHFZNF9whiuEe.sArBy2aKPs
CITfY6IVkisrWbb4qx9HVxiomA6pMhpHCMHZMWpUvUQ2cgOyzC5ruu2s2Ccm
XxUWG4oseSH4DtmCYs0EvWlPP3Q27szBw7_XzF4qAXHwWjDoAtElegdh1nVa
ZDt7Jn0MhcVzno5yoREKooCXbmiF9205mAYITeES0O8VowdfLGjxGnT4G1o9
SsWTPqYKgW9C5lyas5Ag8qhRKY69laYAXRJE4PVWx_3P0J0bV.np80gVVvKe
l9SB15UkfL_JZD75pQQUxrmOCP2JqKHVXpap18FklOkCIOUqPz0fbBRJ65hP
mir_e7zJlaTl2MYfCszLiJTzppO6iF4jgr0t9p.M0gNniMHIT5FG3vHynAA4
OqAE6FcJ85kwqr.oPBpkdzA_ESilxZOQvLdEThr9DDlGDGOs4ZXOntDtQbmq
mb5GPnXJpzqLb7Ej790j91jwzmGBUvn4JqZG_A8unPJ6f_y1MFQv75d4nH1a
EtW.XjI2o54_gGgEv.1lqsuvFmhpUyp7Bqv.XCmWh3HHLoCBE7_KDzMPWcGl
R3A5zUc4hdSLzqyD.v5AS4qwCeZFe9uqdyRfjs8.RoxGGEQSsXH2VFFqEX79
26ENN9Am7_TjnCpJFCoU3G7HUsfCDNwSNEHpQPegk4FAqF.kytTFoFKSHpbY
Hfow2kv782k7e0kT0WprkGzudPdxI5IDvxr4vIGsoeKioDfgtv5PsnwhnA7f
hjofFps403I5Xyfp6ft40StiLDZL7NqowRcrVtKo8kFu67jOCoG0bHr.Dw5Q
PTHLPKsrTC_Ni9TAnhUsa7mpjP_zgumUitOIuwyjU
Received: from [123.236.68.68] by web120407.mail.ne1.yahoo.com via HTTP; Wed, 16 Mar 2011 21:11:58 PDT
X-Mailer: YahooMailRC/553 YahooMailWebService/0.8.109.295617
Date: Wed, 16 Mar 2011 21:11:58 -0700 (PDT)
From: Quail Johnston <[email protected]>
Subject: ***SPAM*** Vacancies available - id / (N01300334770375)..
To: Snipped - Michael@yahoo.com <-(Not my e-mail)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=3.603 tagged_above=-999 required=3
tests=FREEMAIL_FROM=0.001, FREEMAIL_REPLY=2.499, RCVD_IN_DNSWL_NONE=-0.0001,
RFC_ABUSE_POST=0.001, TRACKER_ID=1.102, T_RP_MATCHES_RCVD=-0.01,
T_TO_NO_BRKTS_FREEMAIL=0.01
X-Spam-Level: ***
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAAReeXxs=
X-Brightmail-Tracker: AAAAAA==

ELT Team phrase pops up on a Google search as a scam job.

viewtopic.php?f=34&t=8796&start=180
http://suckerswanted.blogspot.com/2008/01/elt.html

The IP of the sender is Indian.

Avoid. You will be asked to pay money upfront. There is no job.

I'd be interested to see the mail you received from these people Koraxbear - with your name and e-mail addie removed, of course.

They used to use the name of ELM, and ELT is the more recent name being used. They usually claim to be a company selling luxury goods and ask you to receive cheques from customers for them, then they ask you to pay the money on to them by Western Union.

The 'kicker' is why don't they ask their customers to pay them by Western Union in the first place ?

The answer is simple - the cheques are counterfeit and by getting you to bank the dud cheques and pay them cash, they're actually stealing your money and getting you into serious trouble with your bank.

When I last checked they operate from Los Angeles.

that was the entire e-mail they sent me GomerPyle but I did reply back to them just to see what they say.

the address in the header (above) that was in the 'To' line I'll highlight in blue to make it clearer to see.

oh and thanks by the way Mac Ramses

I have deleted the email as it most likely belongs to another innocent victim, and I'm sure they don't want their email adresses posted everywhere Seeing the 'to' email adress being different from yours is a certain sign that it is sent to hundreds of people using BCC.

ok got the followup letter here

Dear (removed),

We would like to consider you for the position of administrative assistant/sales support. You'll work at the convenience of your home, part-time.

ELT, a luxury goods company, presents the best off-season luxury finds from the most prestigious international designers and collectibles from the rarest collections at irresistible prices.

Candidates for the job should possess excellent organizational skills as well as the ability to efficiently multi-task. Ideal candidates have a strong focus on day-to-day operational excellence, and a personal style that builds trust, and inspires loyalty. The candidate should be motivated, proactive, be able to learn and adapt quickly.

Other duties of the Administrative Assistant/Sales Support include, but are not limited to:

. Incorporating effective priorities for the virtual office function
. Administer day-to-day financial responsibilities for clients
. Reporting online daily
. Preparing brief summary reports, and weekly financial reports

Salary part-time: 1,800GBP/month, plus commission.

In the attachments you will find the agreement with a detailed job description. If you are interested in this trial period, which will last for one month, during which you will receive training, salary, and commission, please see the attached agreement. Upon successful completion of the trial period you will receive a contract to continue working with ELT, have an option to change from part-time to full-time or continue working part-time.

Please read carefully the trial period agreement, complete, sign, and
forward back to us either via email or by fax +1-323-843-9625. If you have any questions please email.

Thank You,
Susan Milam

The attached agreement after careful screening is very big but i do have a web host if i could send one of the mods here the link (cos it kinda gives away my real name ) But the short version is that they pay you and your job is in wire transfers.

When I last checked they operate from Los Angeles.

They still do according to the agreement, it is a very lengthy read.

Return-Path: <[email protected]>
X-Original-To: (removed)
Delivered-To: (removed)
Received: from mxen9.enta.net (mxen9.enta.net [78.33.48.12])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id 02B5C19978B
for <(removed)>; Fri, 18 Mar 2011 15:17:15 +0000 (GMT)
Received: from localhost (localhost [127.0.0.1])
by mxen9.enta.net (Postfix) with ESMTP id BAFE7205860
for <(removed)>; Fri, 18 Mar 2011 15:17:15 +0000 (GMT)
Received: from mxen9.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 67285-10 for <(removed)>;
Fri, 18 Mar 2011 15:17:15 +0000 (GMT)
X-Greylist: delayed 00:18:20 by SQLgrey-1.7.6
Received: from vps-s.philstil.org (unknown [67.220.201.66])
by mxen9.enta.net (Postfix) with ESMTP id 0B007205856
for <(removed)>; Fri, 18 Mar 2011 15:17:13 +0000 (GMT)
Received: from [192.168.3.146] (localhost.localdomain [127.0.0.1])
by vps-s.philstil.org (8.13.8/8.13. with ESMTP id p2IEwQJM013947
for <(removed)>; Fri, 18 Mar 2011 07:58:29 -0700
Date: Fri, 18 Mar 2011 09:58:17 -0500
From: Susan Milam <[email protected]>
X-Mailer: The Bat! (v3.71.03) Professional
Reply-To: Susan Milam <[email protected]>
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: (removed)
Subject: Re[2]: ***SPAM*** Vacancies available - id / (N01300334770375)..
In-Reply-To: <(removed)>
References: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------79A1C11553C328"
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Tracker: AAAAAA==

The email is being sent from a server hosted in Los Angeles, nothing more.
67.220.201.66 (vps-s.philstil.org) WebNX, United States, Los Angeles, 530 W. 6th St Suite 701

The server is part of Geek Storage ( geekstorage.com ) a web hosting company.

If the scammers are using 'Los Angeles' as a location, it is only to cover their own tracks as it matches the location on an IP lookup. At first glance an inexperienced researcher would say "yup it's valid".

Salary part-time: 1,800GBP/month, plus commission.

That's almost as musch as my full-time take-home pay in the IT job I have, so utterly ludicrous for 'part-time' anything.

But the short version is that they pay you and your job is in wire transfers.

Any 'job' where you are asked to facilitate the transfer of funds through your own bank account, is a fraud. Typically you get an amount of money paid in, you cash it/wait for it to clear, you keep part of it, and transmit the rest elsewhere. It's illegal, technically Money Laundering, and you would be liable for prosecution when the bank fraud investigators trace it back to you. You would have to pay it all back, and you'd likely end up in jail (depending on what country you are in).

Ok thanks for the heads up, I sent a link with the so called 'agreement' to GomerPyle since he showed an interest and you never know it might either to prove these people are scammers or they might actually be caught (doubt that one but there is a small possibility they might not be in africa).