Fake banks, couriers, law firms, escrow and other fake sites used in scams.
#52727 by A.B. Fri May 06, 2011 7:39 pm
Following on from member Koraxbear's post in the employment scam forum, I decided to bait this one. Scammer's have a very professional looking fraudulent website: http://www.distributewood.com

Site under investigation - Michael

Domain: distributewood.com
Created 21-apr-2011
Updated 21-apr-2011
Expires 21-apr-2012



Good Evening Dear *removed*!


Respond on your inquiry.

The purpose of this letter is to formally invite you to join our team today.

Requested position: Regional Executive - Please complete the registration form on http://distributewood.com


Explore the requirements of the position on our Careers page and contact your on-line manager to find out how to get started.

Promo: May 2011 - Ask your manager how to get quick 50GBP bonus on getting started!


Join our team today! Don't forget to use Progress Bar after the registration at our web site.


Yours sincerely,


Mrs. Dina Halvorsen,

Australian HR Department,

Okernveien 145,

0580 Oslo, Norway

Distribute Wood Ltd.

http://www.distributewood.com


********************************************************************

This email and any attachments are confidential to the intended

recipient and may also be privileged. If you are not the intended

recipient please delete it from your system and notify the sender.

********************************************************************


Email header details;
Delivered-To: *removed*
Received: by 10.151.85.8 with SMTP id n8cs150498ybl;
Fri, 6 May 2011 11:57:25 -0700 (PDT)
Received: by 10.205.82.193 with SMTP id ad1mr1702101bkc.95.1304708244691;
Fri, 06 May 2011 11:57:24 -0700 (PDT)
Return-Path: <[email protected]>
Received: from biz20bl.bizhosting.ru (biz20bl.bizhosting.ru [92.243.94.21])
by mx.google.com with ESMTP id n9si13565216bkd.95.2011.05.06.11.57.23;
Fri, 06 May 2011 11:57:24 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 92.243.94.21 as permitted sender) client-ip=92.243.94.21;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 92.243.94.21 as permitted sender) [email protected]
Received: from [85.13.197.26] (port=54220 helo=TT)
by biz20bl.bizhosting.ru with esmtpa (Exim 4.72)
(envelope-from <[email protected]>)
id 1QIQDK-00064X-RO
for *removed*; Fri, 06 May 2011 22:57:23 +0400
Date: Fri, 6 May 2011 21:57:29 +0300
From: " Distribute Wood Ltd." <[email protected]>
X-Mailer: The Bat! (v4.0.28.1) Professional
Reply-To: "[email protected]" <DistributeWoodLtd.>
X-Priority: 3 (Normal)
Message-ID: <288283679.20110506215729@Distribute Wood Ltd.>
To: *removed* <*removed*>
Subject: Re[2]: ***SPAM*** Fresh job ; (ID \ 891304582721192549)...
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable




I submitted a bogus registration and received this message next;



Dear *removed*


Thank you for registering with the Distribute Wood Ltd.
Your login information:
-----------------------------------------------
Login: *removed*
Password: *removed*
-----------------------------------------------


To start the work you have to be in touch with your personal manager in the Members Area.
Usually it takes 24-48 hours to complete a registration process and start the job. Please, be patient and visit Members Area everyday!

(c) 2010 Distribute Wood Ltd.. http://www.distributewood.com


Email header details;
Delivered-To: *removed*
Received: by 10.151.85.8 with SMTP id n8cs156833ybl;
Fri, 6 May 2011 16:19:41 -0700 (PDT)
Received: by 10.204.74.21 with SMTP id s21mr1434583bkj.62.1304723980376;
Fri, 06 May 2011 16:19:40 -0700 (PDT)
Return-Path: <[email protected]>
Received: from biz20bl.bizhosting.ru (biz20bl.bizhosting.ru [92.243.94.21])
by mx.google.com with ESMTP id a6si14361448bka.44.2011.05.06.16.19.38;
Fri, 06 May 2011 16:19:39 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 92.243.94.21 as permitted sender) client-ip=92.243.94.21;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 92.243.94.21 as permitted sender) [email protected]
Received: from fedellac by biz20bl.bizhosting.ru with local (Exim 4.72)
(envelope-from <[email protected]>)
id 1QIUJ8-000GMM-9c
for *removed*; Sat, 07 May 2011 03:19:38 +0400
Date: Sat, 07 May 2011 03:19:38 +0400
Message-Id: <[email protected]>
To: *removed*
Subject: Welcome to Distribute Wood Ltd.!
X-PHP-Script: distributewood.com/index.php for 174.133.99.74
From: [email protected]
Sender: User Fedellac <[email protected]>
Advertisement

#52759 by jolly_roger Sat May 07, 2011 6:11 am
This may come as no surprise to people.
Site Value:
Visits/day 0
Income per day $0
Income per month $0
Income per year $0
Site value $0
Hosting Country Russian Federation

Who is online

Users browsing this forum: No registered users and 17 guests