Company Representative scams, Payment Processing scams and other Employment scams.
#336276 by wish4better Wed Aug 09, 2017 11:25 am
I received two different emails today offering jobs. One is more suspicious than the other, but both are making me question. As always, any assistance based on your expertise is greatly appreciated.

Thanks,
Wish4Better

First one: headers:
Return-Path: [email protected]
Received: from resimta-po-10v.sys.comcast.net (LHLO
resimta-po-10v.sys.comcast.net) (96.114.154.138) by
resmail-ch2-725v.sys.comcast.net with LMTP; Wed, 9 Aug 2017 01:16:32 +0000
(UTC)
Received: from p3plwbeout17-01.prod.phx3.secureserver.net ([173.201.193.162])
by resimta-po-10v.sys.comcast.net with SMTP
id fFbhd7fynPbXPfFbsdpmdx; Wed, 09 Aug 2017 01:16:32 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: v=2.2 cv=EPZ26xRC c=1 sm=1 tr=0
a=NLVQyh3mRdYdLWPAu7PxuA==:117 a=djkkRTjRx4GX1achkoLkmQ==:17
a=udqW9LXXZWYA:10 a=0myERiOcMXMA:10 a=BhWkENgqS5cA:10 a=IkcTkHD0fZMA:10
a=x7bEGLp0ZPQA:10 a=khwyK8DuSVkA:10 a=KeKAF7QvOSUA:10 a=b4KrJKo_AAAA:8
a=pGLkceISAAAA:8 a=Vy4bw2bSv6Nl9gePYFkA:9 a=ermx_WUFOIEOHRjd:21
a=w1xyFPbB5nn-bOgi:21 a=aARhI6AzCXG2vm-p:21 a=_W_S_7VecoQA:10
a=QEXdDO2ut3YA:10 a=6kGIvZw6iX1k4Y-7sg4_:22
X-Xfinity-Message-Heuristics: IPv6:N;TLS=1;SPF=0;DMARC=
Received: from localhost ([173.201.193.139])
by :WBEOUT: with SMTP
id fFYDdvxYZ3HPzfFYDdu2YT; Tue, 08 Aug 2017 18:12:45 -0700
X-SID: fFYDdvxYZ3HPz
Received: (qmail 25748 invoked by uid 99); 9 Aug 2017 01:12:45 -0000
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
X-Originating-IP: 207.244.83.106
User-Agent: Workspace Webmail 6.8.8
Message-Id: <20170808181244.f8e85b364e9df3304baed0e306122343.729c63b1a6.wbe@email17.godaddy.com>
From: "Stewart Schulte" <[email protected]>
X-Sender: [email protected]
Reply-To: "Stewart Schulte" <[email protected]>
To:
Subject: JOB OFFER/DESCRIPTION
Date: Tue, 08 Aug 2017 18:12:44 -0700
Mime-Version: 1.0
X-CMAE-Envelope: MS4wfIM5sobmrNct2R1+e0WceJJiZUv9igokwc++NaAzlLYnEbhFi+YvT8Eg+cMT5iNlBLBnyuKBEl206eIFVJk6G+YtwcwhPMV3zPnvOxthgwuzEUJgugBF
m0J8xPd6N8avjk7v+1GzLLVwn5NsiXKP8x9QUBdq8lIfDomHsekTvti6qVIX0vDJxAF6HHsOfho7323RYCOwPX2DeyvJRg177FU=

Message content:
Dear New Candidate Applicant,

Our HR Dept has reviewed your resume published on http://www.craigslist.org for a 'Customer Service/ Human Resources/ Project Manager/ Administrative Assistant/ Operations Manager/Management Trainee/Assistant Manager/Finance & Accounts... Your resume has been reviewed and you have been shortlisted for the next step.

We are pleased to invite you to an interview for the position. Your interview has been scheduled on the 8th or 9th of August. Your details has been forwarded to the Hiring Manager Mr. Jackson Jordy and he would like to conduct an online interview with you to discuss your duties and pay scale with our company...

This is an immediate hire. Therefore, the interview is 8th or 9th of August.You are required to create a Gmail account if you don't have one at http://www.gmail.com and download Google Hangouts on your PC or Phone and invite Mr. Jackson Jordy on Gmail Hangouts / Google Hangouts and also send Him a message via Gmail / Google Hangouts. His Gmail IM is([email protected] ).


I wish you all the best of Luck!

Regards,
Mr. James A. Martins
Human Resources Associate
==================
The second email:
Headers:
Return-Path: [email protected]
Received: from resimta-po-06v.sys.comcast.net (LHLO
resimta-po-06v.sys.comcast.net) (96.114.154.134) by
resmail-ch2-725v.sys.comcast.net with LMTP; Wed, 9 Aug 2017 12:09:01 +0000
(UTC)
Received: from mail-yw0-x241.google.com ([IPv6:2607:f8b0:4002:c05::241])
by resimta-po-06v.sys.comcast.net with SMTP
id fPlPdoD17ga0LfPnId7QRg; Wed, 09 Aug 2017 12:09:00 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: v=2.2 cv=NYKW7yL4 c=1 sm=1 tr=0 a=x7bEGLp0ZPQA:10
a=p5yRSIkGunYA:10 a=KeKAF7QvOSUA:10 a=pGLkceISAAAA:8 a=yQ0w6jTb-2SII3dEsPoA:9
a=it_v0n8SCGzpDPma:21 a=ZIXYtH7QDOGctvtJ:21 a=QEXdDO2ut3YA:10
a=7tZKD-n4to4A:10 a=_-WhG10oMs259dxal5MA:9 a=PXKaMBFKHNK2TyGj:21
a=NdeleFvbMMs8etU9:21 a=pWvRpFrSHqFvWhNR:21 a=HXpPmn0OsaT6mP0rGzGN:22
a=6kGIvZw6iX1k4Y-7sg4_:22
X-Xfinity-Message-Heuristics: IPv6:Y;TLS=1;SPF=1;DMARC=P
X-Comcast-SMTP-Spoor: http://gmail.com http://mail-yw0-x241.google.com
Authentication-Results: resimta-po-06v.sys.comcast.net;
dkim=pass header.d=gmail.com header.b=G1KePE32
Received: by mail-yw0-x241.google.com with SMTP id n83so4152811ywn.3
for <[email protected]>; Wed, 09 Aug 2017 05:09:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=i28TFnxrYu6/PXPcZURc72BjfYVrftX4k3iGcX2FEoA=;
b=G1KePE32UQ3Y04hx39QeOiGJ1/+ZVIcA4m+bgN0ufxN6nm8i04LMuhniiVorGUk+Ax
EvK28LHUP5IdF66q16Z65DvGKCFnDcqPnoPcnKjnfW3Vvj4l29Pd4xgBjTbvYfnAfXOY
duDAhLlq6MkroZ4H9QdAB+je/BSnaqgeYwgu2cvFml7SvC/2nPipeUmGTI+FnLzkRKcu
XG4YHXKtU1trMekCrl+mJbg/yFJFRq03cXHcAgWt7rZGfOH8JrwRMgMJZEqhdYdk+2u3
60CHu6igfbj1bDIgUWY7NajePkYI3EC2z9ZzH+ZLpQtxNKuK5s41sG39+N+tIxSBL2hs
PdEA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=i28TFnxrYu6/PXPcZURc72BjfYVrftX4k3iGcX2FEoA=;
b=nL4faP+W8WC65OikOt7N8Fxi7cPyoJwQZap0ac6urhO1WHKKQBO6YToOeCI+00y4D8
NKvtf9N8NzBozMeJ9HjJTD0AidTtfggiNoJ6l9u89cTGiFXKcudo19omFBP+Nh/jajjw
MG68/4iS59qLw060MQw9vnptzz0VlldQvbr8JKwTcRiRl7uCsTvg0MTH0GNldAr4qoWk
SNiLT77WfTBgA9p1e7ITPjHTFBN83T1vkgcyLAfGtwWRVHBS3fRr370ZXbyqAUOsVDQH
KJ/hnB0oloACjueooPlQJYj6hh0+9HW6YrRjYWv47pn9eqtWBW7F5NBcppqnY4tirr1S
2m4A==
X-Gm-Message-State: AHYfb5iGMQx6tRLzOzLeSVjrCmZJ+7XREkjU9CNhWsBLrjwcODwX/0+D
hsmDhD2c6rBoS9YC2gRgTB5EgBl8PA==
X-Received: by 10.37.17.4 with SMTP id 4mr6335513ybr.333.1502280539819; Wed,
09 Aug 2017 05:08:59 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.129.73.130 with HTTP; Wed, 9 Aug 2017 05:08:59 -0700 (PDT)
From: George Sohal <[email protected]>
Date: Wed, 9 Aug 2017 13:08:59 +0100
Message-ID: <CAOWRGs36CoP4mBj+TgBHd-_7nNezQd7e=d6N2W-Nt9dfxbNAZA@mail.gmail.com>
Subject: JOB INTERVIEW !!!
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="001a113e6bf4edd566055650f15d"
Bcc: (NOTE: my email address was listed here)
X-CMAE-Envelope: MS4wfD7tlaHF7ZJacS7/d6EEfaIny90qI8pb7isHiY2zEXmmtOkfoXPLQIaTy5VmWz8M0NO2oWLo+4OhbROv2wD/DZYMq074cshJryz1dTJw+TSZPNd4ZD1S
iKMHxyeoMX1DtHOqBZGntBF33YOa0qeSyn15HoONvBbEAM1eCQ0anAF+

Message:
Dear Applicant,

Our HR Dept has reviewed your resume published on Ziprecruiter Recruitment for an ( Administrative Assistant/ Customer Service Rep. Candidate. ). Your resume has been reviewed and you have been shortlisted for the next step.

We are pleased to invite you to an Online Interview for the position.. You are required to contact the Personnel Manager Mr.George Sohal .he will brief you more concerning the position and company.

This is an immediate hire. Therefore, The interview will be conducted Online via Google Hangouts. You are needed to install/download Google Hangouts APP on your PC or Phone . Once done, you are to invite her on Google Hangouts. His Gmail ID is ([email protected] ) You can as well send her an email address on( [email protected] ) in regards to the Online interview.

Your Verification/Hiring code is "HRP7KR5S", this would serve as your identification code through out the online hiring process.

Your swift response matters a lot in this position. Email [email protected] if you are having any problem adding him on Google Hangouts .

We look forward in working with you as a team. I wish you Good Luck on the interview...

Regards,
Mrs. Patience T. Knight
Advertisement

#336278 by AlanJones Wed Aug 09, 2017 11:33 am
They are both scams.

Legitimate companies do not use free email addresses or hold interviews using IM systems like Google Hanglouts.

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
#336321 by Bryon Williams Wed Aug 09, 2017 9:33 pm
If you wish to respond to this post. Start a new thread with the information. We will need the emails received, email address and websites.

This thread could get confusing with two different scammers.

Please contacta moferatorstor if you have a question or information about this post.



Please do not tell the scammer he is posted here.


Please remember the fallen. https://www.odmp.org/

Who is online

Users browsing this forum: No registered users and 65 guests