#261773 by scottrosado
Tue Jul 28, 2015 10:39 am
They had an add posted on Ziprecruiter which I responded to. This is the e-mail response I received:
Lawrence D. Kingsley
[email protected]
Dear Applicant,
Our HR Dept has reviewed your resume for a Data Entry, Administrative Assistant,Customer Service,Office Assistant,Program Manager positions Etc,that you are yet to occupy and we believe you would be capable of handling this position.
Your details has been forwarded to the Human Resources Department and the Head of Operations Mrs Kristen Miller will be available to discuss the job detail, pay scale, benefit and briefing about the opening in our company. Your verification code is HRP266, this would serve as your identification number throughout the online hiring process.
This is an immediate hire position, the interview will commence from 8 am to 7 pm today.
To participate, You are required to setup a yahoo mail account(mail.yahoo.com) and a yahoo instant messenger (http://messenger.yahoo.com) or you can also have a G mail account setup (mail.google.com) and also download a Google talk app/hangout installed.
After this process is done,you are to add up in your yahoo ID at ([email protected]) to your buddy list or add her up on your Google talk/hangout app at ([email protected]), She will be online waiting to proceed with you.
Time : 8 am-8 pm your time.
Venue : Online via Yahoo messenger Or Handout Messenger.
Regards
Lawrence D. Kingsley
Admin
This is eerily similar to another scam I posted several weeks back regarding Fidelity Investments in Australia and a Mr. Harold English. In that one I received the same instructions about Hangout Messenger.
IP address: 216.239.32.21
Registrar: Public Interest Registry (Sponsor: eNom, Inc. (R39-LROR))
Referrer: http://www.pir.org/
Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransferProhibited
Status: serverTransferProhibited -- http://www.icann.org/epp#serverTransferProhibited
Name Server: dns1.name-services.com
Name Server: dns2.name-services.com
Name Server: dns3.name-services.com
Name Server: dns4.name-services.com
Name Server: dns5.name-services.com
Domain whois record
Queried org.whois-servers.net with pallcorporation.org
Domain Name:PALLCORPORATION.ORG
Domain ID: D176907785-LROR
Creation Date: 2015-07-21T03:17:22Z
Updated Date: 2015-07-21T03:45:08Z
Registry Expiry Date: 2016-07-21T03:17:22Z
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Sponsoring Registrar IANA ID: 48
WHOIS Server:
Referral URL:
Domain Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransferProhibited
Domain Status: serverTransferProhibited -- http://www.icann.org/epp#serverTransferProhibited
Registrant ID:fcd7d8219444e06d
Registrant Name:Whois Agent
Registrant Organization:Whois Privacy Protection Service, Inc.
Registrant Street: PO Box 639
Registrant Street: C/O pallcorporation.org
Registrant City:Kirkland
Registrant State/Province:WA
Registrant Postal Code:98083
Registrant Country:US
Registrant Phone:+1.4252740657
Registrant Phone Ext:
Registrant Fax: +1.4259744730
Registrant Fax Ext:
Registrant Email:[email protected]
Admin ID:fcd7d8219444e06d
Admin Name:Whois Agent
Admin Organization:Whois Privacy Protection Service, Inc.
Admin Street: PO Box 639
Admin Street: C/O pallcorporation.org
Admin City:Kirkland
Admin State/Province:WA
Admin Postal Code:98083
Admin Country:US
Admin Phone:+1.4252740657
Admin Phone Ext:
Admin Fax: +1.4259744730
Admin Fax Ext:
Admin Email:[email protected]
Tech ID:fcd7d8219444e06d
Tech Name:Whois Agent
Tech Organization:Whois Privacy Protection Service, Inc.
Tech Street: PO Box 639
Tech Street: C/O pallcorporation.org
Tech City:Kirkland
Tech State/Province:WA
Tech Postal Code:98083
Tech Country:US
Tech Phone:+1.4252740657
Tech Phone Ext:
Tech Fax: +1.4259744730
Tech Fax Ext:
Tech Email:[email protected]
Name Server:DNS1.NAME-SERVICES.COM
Name Server:DNS2.NAME-SERVICES.COM
Name Server:DNS3.NAME-SERVICES.COM
Name Server:DNS4.NAME-SERVICES.COM
Name Server:DNS5.NAME-SERVICES.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned
Created on 7/21/2015 for 1 year only.
From "Lawrence D. Kingsley" Tue Jul 28 11:50:02 2015
X-Apparently-To: ; Tue, 28 Jul 2015 12:06:01 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of pallcorporation.org designates 209.85.217.193 as permitted sender)
ZCB5b3VyIHJlc3VtZSBmb3IgYSBEYXRhIEVudHJ5LCBBZG1pbmlzdHJhdGl2
ZSBBc3Npc3RhbnQsQ3VzdG9tZXIgU2VydmljZSxPZmZpY2UgQXNzaXN0YW50
LFByb2dyYW0gTWFuYWdlciBwb3NpdGlvbnMgRXRjLHRoYXQgeW91IGFyZSB5
ZXQgdG8gb2NjdXB5IGFuZCB3ZSBiZWxpZXZlIHlvdSB3b3VsZCBiZSBjYXBh
YmxlIG9mIGhhbmRsaW5nIHRoaXMgcG9zaXRpb24uIFlvdXIgZAEwAQEBAQN0
ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEy
X-YMailISG: wB88qgsWLDszFMXLGPW2faIDyoViMmY36Xeh5R82zeNaguGb
49Lk8H8CI9tO3P8cOcpGERO1XgNe2e3x.U_vjyr44UffZf.qENMxCnOBIzq0
UdGlA7f3jAloificLGMJcEKKXxwLRy4xJTBj.zR2Q40P1YU.EnbO..OVCgUa
8deAnM0j9Zy1z4fISTtd2.ajnfp.88._76DrYjtbsVhdcP7Ba6NWQo88InrP
FkMv64mtxJPU_U7Ok8Of.jxV9J.cecG9c0Nb1257yjQwouMHgbPM0YIfZorA
Rrieig7wbtApQ9hkvTAvIVtQaY.V.9AUgBOjvEpQfJP4DC0aiaK5IHlH8GyB
Nob9lZfuJ0iY4Qi0pQ2r7Urpp3K05NNESBufdaFxDlYv2nVdDUGXODYkkWLk
QfWoNnek9fegVP_OH8bgR2p0sNvMit9HJkteKp6pcmJ8OGupCGgjiMAibkMU
ctBhqBlSt3QIHjlIJ.kHpvYo9PWJN2ck0o31PjrlIdTVP9gx_yg14AvJbU2H
6Z8DdqXKbCAFedWeFb5m8.M6ZPpnA374vosb0DAP7a6deX8qY3yoV_Ia1A.m
kGHsSRBXH.rqAzwoYs7W21a7WuTfu1Kh4YtLvvtbALFz94IClOepn8AHB8E0
mIXxcXzEoPXMJI9t5ZPuKFmBUjDSLw4e.yp31q5IbP3jz5X741__DqpOEUXs
rMFRffjs4bsVyqyHkpFV9eTx8Au8ZG.t1gfPDyOaJb01UvtkbauQIypHARr.
0UKKHrPSbZK2OYTrVwlCR9TxoSj4MfZDjhW2RsLMGyxmrIHCptdB4Nc7Q03k
UdQveJT8vS0ol9Lj5B_EmkQLqSIid5AMrNii13uNPpBETB51DqmTsGigCvTC
.eQC7jXz.JRopHdiFUec09C6cvoNJzCeUqdmqJYvBghKDdS4NH8Cjq8BYjXu
yiQNBImwOduTHuPfbHYlZxov7r2xgAw9RBgKjCWuVXn0Whb.YeF27LebIuR6
RsrfKh8042BOaSiNQpKvMDs2dglQR10q8NwZOFweKexU2EFHDAjRQm5ERm9W
lSHmMCoXpaj9Vebm9jd8jMMxNxDlIswIEXc4kTxd_JsAOYcYN02QxmFXPLZd
.vKXd5gwDd1qTsJJxNSrhLUz4xRjuwcfmjDxS471ZXLygfqxPkxixP9s9n51
KO33wReEjzHNuDw5Uj.SX.q0K3zJHdCuXPI.cGVh.tELtCCB2VdZjg0BFMfQ
MutG6Uw0goWqgXwvLE3F6I9KJiwsjnsJZJAO.TyVgNEBO3Z5Sfc7Lo3AUcyj
MbLFYkRqjzoIXZUR81I0KCU4oUROc5mQ27gkEwHjp3k8dsF1lDTKafv5V4_i
KeqjeOH6weXwMDFKExve5sLCMeLIr_5tcQbHXgi6Khg2QWtOxu9ZsrZ2ZSTA
kE4WwxwxyOGOpgKO_IDFi0K666UdtweSjAE1UTdgJcZrGCIRmimq2tal0C0r
1hzZV9HwnfR_F17OzcQXpBXJVPNPRInFm5oLgcbqYRbQPBq.jIVOGQWntRTv
2J9Rv.HR2Rg3SEwl4wcTYo1JD.qPLasjlfB7qNCJqblpApWYqQQFp1I8fa4-
X-Originating-IP: [209.85.217.193]
Authentication-Results: mta1693.mail.gq1.yahoo.com from=pallcorporation.org; domainkeys=neutral (no sig); from=pallcorporation.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail-lb0-f193.google.com) (209.85.217.193)
by mta1693.mail.gq1.yahoo.com with SMTPS; Tue, 28 Jul 2015 12:06:01 +0000
Received: by lbvb1 with SMTP id b1so5312812lbv.2
for <[email protected]>; Tue, 28 Jul 2015 05:05:59 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:in-reply-to:references:date
:message-id:subject:from:to:content-type;
bh=R5RQCG4PLI3YVQD3cNGFRehbVdvtszZRfrSYWAhcLVM=;
b=Yy8lQDbX2Mw8K4yY1T+PfO0+wfqyXHJv/LVbg50vHL7/f1nHHowbVv36loyX3o7DZx
1iCutoAn6FzzGg1N0LyeDRVLbJp0AOCeyvw0pBfgrjUqd8YUp0ZEhdEXA+CLMQZBWhI9
F4VpV3p2fVrlq4yxYzoKR/lGfZOxd2gvKThVvGCH7dcO4pFNPdsrDmsbhmamlg/mY5sk
FFRj3cwBVF77ip8O3nFZ7xWF7v1zPvZZeitPobNZ2cyEIwHfFahbSFneq3yvutTY5R13
IrFclnqbBOPZSd71yLxU1X0NmKsWbsk7bEChntQi4VKW4+YWy+sTwS9K3dYGDN+kD325
Bx7g==
X-Gm-Message-State: ALoCoQnQyCWPIUh90XInWJYmf3KlfhKQ/LPyNGKo/qNnFJIiO2+u4aRpM1ySzVQBPlVgbSv3aUSg
MIME-Version: 1.0
X-Received: by 10.152.43.134 with SMTP id w6mr28709487lal.120.1438084202382;
Tue, 28 Jul 2015 04:50:02 -0700 (PDT)
Received: by 10.115.4.70 with HTTP; Tue, 28 Jul 2015 04:50:02 -0700 (PDT)
X-Originating-IP: [41.66.208.200]
In-Reply-To: <[email protected]>
References: <[email protected]>
Date: Tue, 28 Jul 2015 11:50:02 +0000
Message-ID: <CAD_8vaT5gCzSHs8cAzcHDHm=_XFN==q0JZiuarT=MsYZED9OpA@mail.gmail.com>
Subject: Re: New Candidate: for 'Data Entry / Customer
Service / Admin Assistant'
From: "Lawrence D. Kingsley" <[email protected]>
To:
Content-Type: multipart/alternative; boundary=001a11c1a8080a4a94051bee12e1
Content-Length: 13492
There is a legitimate company Pall Corporation Located in Port Washington, NY. Interestingly enough only about 20 minutes from where I currently live.
Lawrence D. Kingsley
[email protected]
Dear Applicant,
Our HR Dept has reviewed your resume for a Data Entry, Administrative Assistant,Customer Service,Office Assistant,Program Manager positions Etc,that you are yet to occupy and we believe you would be capable of handling this position.
Your details has been forwarded to the Human Resources Department and the Head of Operations Mrs Kristen Miller will be available to discuss the job detail, pay scale, benefit and briefing about the opening in our company. Your verification code is HRP266, this would serve as your identification number throughout the online hiring process.
This is an immediate hire position, the interview will commence from 8 am to 7 pm today.
To participate, You are required to setup a yahoo mail account(mail.yahoo.com) and a yahoo instant messenger (http://messenger.yahoo.com) or you can also have a G mail account setup (mail.google.com) and also download a Google talk app/hangout installed.
After this process is done,you are to add up in your yahoo ID at ([email protected]) to your buddy list or add her up on your Google talk/hangout app at ([email protected]), She will be online waiting to proceed with you.
Time : 8 am-8 pm your time.
Venue : Online via Yahoo messenger Or Handout Messenger.
Regards
Lawrence D. Kingsley
Admin
This is eerily similar to another scam I posted several weeks back regarding Fidelity Investments in Australia and a Mr. Harold English. In that one I received the same instructions about Hangout Messenger.
IP address: 216.239.32.21
Registrar: Public Interest Registry (Sponsor: eNom, Inc. (R39-LROR))
Referrer: http://www.pir.org/
Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransferProhibited
Status: serverTransferProhibited -- http://www.icann.org/epp#serverTransferProhibited
Name Server: dns1.name-services.com
Name Server: dns2.name-services.com
Name Server: dns3.name-services.com
Name Server: dns4.name-services.com
Name Server: dns5.name-services.com
Domain whois record
Queried org.whois-servers.net with pallcorporation.org
Domain Name:PALLCORPORATION.ORG
Domain ID: D176907785-LROR
Creation Date: 2015-07-21T03:17:22Z
Updated Date: 2015-07-21T03:45:08Z
Registry Expiry Date: 2016-07-21T03:17:22Z
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Sponsoring Registrar IANA ID: 48
WHOIS Server:
Referral URL:
Domain Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransferProhibited
Domain Status: serverTransferProhibited -- http://www.icann.org/epp#serverTransferProhibited
Registrant ID:fcd7d8219444e06d
Registrant Name:Whois Agent
Registrant Organization:Whois Privacy Protection Service, Inc.
Registrant Street: PO Box 639
Registrant Street: C/O pallcorporation.org
Registrant City:Kirkland
Registrant State/Province:WA
Registrant Postal Code:98083
Registrant Country:US
Registrant Phone:+1.4252740657
Registrant Phone Ext:
Registrant Fax: +1.4259744730
Registrant Fax Ext:
Registrant Email:[email protected]
Admin ID:fcd7d8219444e06d
Admin Name:Whois Agent
Admin Organization:Whois Privacy Protection Service, Inc.
Admin Street: PO Box 639
Admin Street: C/O pallcorporation.org
Admin City:Kirkland
Admin State/Province:WA
Admin Postal Code:98083
Admin Country:US
Admin Phone:+1.4252740657
Admin Phone Ext:
Admin Fax: +1.4259744730
Admin Fax Ext:
Admin Email:[email protected]
Tech ID:fcd7d8219444e06d
Tech Name:Whois Agent
Tech Organization:Whois Privacy Protection Service, Inc.
Tech Street: PO Box 639
Tech Street: C/O pallcorporation.org
Tech City:Kirkland
Tech State/Province:WA
Tech Postal Code:98083
Tech Country:US
Tech Phone:+1.4252740657
Tech Phone Ext:
Tech Fax: +1.4259744730
Tech Fax Ext:
Tech Email:[email protected]
Name Server:DNS1.NAME-SERVICES.COM
Name Server:DNS2.NAME-SERVICES.COM
Name Server:DNS3.NAME-SERVICES.COM
Name Server:DNS4.NAME-SERVICES.COM
Name Server:DNS5.NAME-SERVICES.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned
Created on 7/21/2015 for 1 year only.
From "Lawrence D. Kingsley" Tue Jul 28 11:50:02 2015
X-Apparently-To: ; Tue, 28 Jul 2015 12:06:01 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of pallcorporation.org designates 209.85.217.193 as permitted sender)
ZCB5b3VyIHJlc3VtZSBmb3IgYSBEYXRhIEVudHJ5LCBBZG1pbmlzdHJhdGl2
ZSBBc3Npc3RhbnQsQ3VzdG9tZXIgU2VydmljZSxPZmZpY2UgQXNzaXN0YW50
LFByb2dyYW0gTWFuYWdlciBwb3NpdGlvbnMgRXRjLHRoYXQgeW91IGFyZSB5
ZXQgdG8gb2NjdXB5IGFuZCB3ZSBiZWxpZXZlIHlvdSB3b3VsZCBiZSBjYXBh
YmxlIG9mIGhhbmRsaW5nIHRoaXMgcG9zaXRpb24uIFlvdXIgZAEwAQEBAQN0
ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEy
X-YMailISG: wB88qgsWLDszFMXLGPW2faIDyoViMmY36Xeh5R82zeNaguGb
49Lk8H8CI9tO3P8cOcpGERO1XgNe2e3x.U_vjyr44UffZf.qENMxCnOBIzq0
UdGlA7f3jAloificLGMJcEKKXxwLRy4xJTBj.zR2Q40P1YU.EnbO..OVCgUa
8deAnM0j9Zy1z4fISTtd2.ajnfp.88._76DrYjtbsVhdcP7Ba6NWQo88InrP
FkMv64mtxJPU_U7Ok8Of.jxV9J.cecG9c0Nb1257yjQwouMHgbPM0YIfZorA
Rrieig7wbtApQ9hkvTAvIVtQaY.V.9AUgBOjvEpQfJP4DC0aiaK5IHlH8GyB
Nob9lZfuJ0iY4Qi0pQ2r7Urpp3K05NNESBufdaFxDlYv2nVdDUGXODYkkWLk
QfWoNnek9fegVP_OH8bgR2p0sNvMit9HJkteKp6pcmJ8OGupCGgjiMAibkMU
ctBhqBlSt3QIHjlIJ.kHpvYo9PWJN2ck0o31PjrlIdTVP9gx_yg14AvJbU2H
6Z8DdqXKbCAFedWeFb5m8.M6ZPpnA374vosb0DAP7a6deX8qY3yoV_Ia1A.m
kGHsSRBXH.rqAzwoYs7W21a7WuTfu1Kh4YtLvvtbALFz94IClOepn8AHB8E0
mIXxcXzEoPXMJI9t5ZPuKFmBUjDSLw4e.yp31q5IbP3jz5X741__DqpOEUXs
rMFRffjs4bsVyqyHkpFV9eTx8Au8ZG.t1gfPDyOaJb01UvtkbauQIypHARr.
0UKKHrPSbZK2OYTrVwlCR9TxoSj4MfZDjhW2RsLMGyxmrIHCptdB4Nc7Q03k
UdQveJT8vS0ol9Lj5B_EmkQLqSIid5AMrNii13uNPpBETB51DqmTsGigCvTC
.eQC7jXz.JRopHdiFUec09C6cvoNJzCeUqdmqJYvBghKDdS4NH8Cjq8BYjXu
yiQNBImwOduTHuPfbHYlZxov7r2xgAw9RBgKjCWuVXn0Whb.YeF27LebIuR6
RsrfKh8042BOaSiNQpKvMDs2dglQR10q8NwZOFweKexU2EFHDAjRQm5ERm9W
lSHmMCoXpaj9Vebm9jd8jMMxNxDlIswIEXc4kTxd_JsAOYcYN02QxmFXPLZd
.vKXd5gwDd1qTsJJxNSrhLUz4xRjuwcfmjDxS471ZXLygfqxPkxixP9s9n51
KO33wReEjzHNuDw5Uj.SX.q0K3zJHdCuXPI.cGVh.tELtCCB2VdZjg0BFMfQ
MutG6Uw0goWqgXwvLE3F6I9KJiwsjnsJZJAO.TyVgNEBO3Z5Sfc7Lo3AUcyj
MbLFYkRqjzoIXZUR81I0KCU4oUROc5mQ27gkEwHjp3k8dsF1lDTKafv5V4_i
KeqjeOH6weXwMDFKExve5sLCMeLIr_5tcQbHXgi6Khg2QWtOxu9ZsrZ2ZSTA
kE4WwxwxyOGOpgKO_IDFi0K666UdtweSjAE1UTdgJcZrGCIRmimq2tal0C0r
1hzZV9HwnfR_F17OzcQXpBXJVPNPRInFm5oLgcbqYRbQPBq.jIVOGQWntRTv
2J9Rv.HR2Rg3SEwl4wcTYo1JD.qPLasjlfB7qNCJqblpApWYqQQFp1I8fa4-
X-Originating-IP: [209.85.217.193]
Authentication-Results: mta1693.mail.gq1.yahoo.com from=pallcorporation.org; domainkeys=neutral (no sig); from=pallcorporation.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail-lb0-f193.google.com) (209.85.217.193)
by mta1693.mail.gq1.yahoo.com with SMTPS; Tue, 28 Jul 2015 12:06:01 +0000
Received: by lbvb1 with SMTP id b1so5312812lbv.2
for <[email protected]>; Tue, 28 Jul 2015 05:05:59 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:in-reply-to:references:date
:message-id:subject:from:to:content-type;
bh=R5RQCG4PLI3YVQD3cNGFRehbVdvtszZRfrSYWAhcLVM=;
b=Yy8lQDbX2Mw8K4yY1T+PfO0+wfqyXHJv/LVbg50vHL7/f1nHHowbVv36loyX3o7DZx
1iCutoAn6FzzGg1N0LyeDRVLbJp0AOCeyvw0pBfgrjUqd8YUp0ZEhdEXA+CLMQZBWhI9
F4VpV3p2fVrlq4yxYzoKR/lGfZOxd2gvKThVvGCH7dcO4pFNPdsrDmsbhmamlg/mY5sk
FFRj3cwBVF77ip8O3nFZ7xWF7v1zPvZZeitPobNZ2cyEIwHfFahbSFneq3yvutTY5R13
IrFclnqbBOPZSd71yLxU1X0NmKsWbsk7bEChntQi4VKW4+YWy+sTwS9K3dYGDN+kD325
Bx7g==
X-Gm-Message-State: ALoCoQnQyCWPIUh90XInWJYmf3KlfhKQ/LPyNGKo/qNnFJIiO2+u4aRpM1ySzVQBPlVgbSv3aUSg
MIME-Version: 1.0
X-Received: by 10.152.43.134 with SMTP id w6mr28709487lal.120.1438084202382;
Tue, 28 Jul 2015 04:50:02 -0700 (PDT)
Received: by 10.115.4.70 with HTTP; Tue, 28 Jul 2015 04:50:02 -0700 (PDT)
X-Originating-IP: [41.66.208.200]
In-Reply-To: <[email protected]>
References: <[email protected]>
Date: Tue, 28 Jul 2015 11:50:02 +0000
Message-ID: <CAD_8vaT5gCzSHs8cAzcHDHm=_XFN==q0JZiuarT=MsYZED9OpA@mail.gmail.com>
Subject: Re: New Candidate: for 'Data Entry / Customer
Service / Admin Assistant'
From: "Lawrence D. Kingsley" <[email protected]>
To:
Content-Type: multipart/alternative; boundary=001a11c1a8080a4a94051bee12e1
Content-Length: 13492
There is a legitimate company Pall Corporation Located in Port Washington, NY. Interestingly enough only about 20 minutes from where I currently live.
Glad to be of service.