#352647 by LSBARTHELEMY
Tue Jan 16, 2018 3:20 am
New employment scam similar to the BHP one, but this time using EXXONMOBIL:
MESSAGE:
From:[email protected]
To: [my e-mail]
Date: 19/08/2017 16:06
SUBJECT:“ Job Offer From ExxonMobil UAE!
MESSAGE PROPERTIES -> MESSAGE DETAILS:
MESSAGE:
From:[email protected]
To: [my e-mail]
Date: 19/08/2017 16:06
SUBJECT:“ Job Offer From ExxonMobil UAE!
Bluesky Energy Consultant
Address: 111 Shaik Zayed Road, Office No : 910,
Liberty House, DIFC, Dubai, AE - Dubai
Email: [email protected]
All responses must be sent to this email:
[email protected]
Attn: Sir/Madam,
We are currently recruiting for ExxonMobil UAE for different oil and gas positions.
Interested and qualified candidates should send their CV/Resume for screening.
Further details will also be relevant for the screening.
Total Years of Experience in Oil and Gas:
Last Salary Earned in USD$:
Yours Sincerely,
Steven Vincent Gordner
Recruitment Coordinator
MESSAGE PROPERTIES -> MESSAGE DETAILS:
Received: from DB5PR0101MB2053.eurprd01.prod.exchangelabs.com
(2603:10a6:0:5::32) by HE1PR0101MB2060.eurprd01.prod.exchangelabs.com with
HTTPS via DB5PR0201CA0022.EURPRD02.PROD.OUTLOOK.COM; Sat, 19 Aug 2017
14:06:25 +0000
Received: from DB5PR0101CA0016.eurprd01.prod.exchangelabs.com
(2603:10a6:0:6::26) by DB5PR0101MB2053.eurprd01.prod.exchangelabs.com
(2603:10a6:0:31::9) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1362.18; Sat, 19
Aug 2017 14:06:22 +0000
Received: from AM5EUR02FT017.eop-EUR02.prod.protection.outlook.com
(2a01:111:f400:7e1e::202) by DB5PR0101CA0016.outlook.office365.com
(2603:10a6:0:6::26) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1362.18 via
Frontend Transport; Sat, 19 Aug 2017 14:06:17 +0000
Authentication-Results: spf=pass (sender IP is 128.84.13.244)
smtp.mailfrom=cornell.edu; audencia.net; dkim=pass (signature was verified)
header.d=cornellprod.onmicrosoft.com;audencia.net; dmarc=bestguesspass
action=none header.from=cornell.edu;
Received-SPF: Pass (protection.outlook.com: domain of cornell.edu designates
128.84.13.244 as permitted sender) receiver=protection.outlook.com;
client-ip=128.84.13.244; helo=limerock04.mail.cornell.edu;
Received: from limerock04.mail.cornell.edu (128.84.13.244) by
AM5EUR02FT017.mail.protection.outlook.com (10.152.8.111) with Microsoft SMTP
Server id 15.1.1341.15 via Frontend Transport; Sat, 19 Aug 2017 14:06:15
+0000
X-CornellRouted: This message has been Routed already.
Received: from exchange.cornell.edu (sf-e2013-05.exchange.cornell.edu [10.22.40.52])
by limerock04.mail.cornell.edu (8.14.4/8.14.4_cu) with ESMTP id v7JE62Ue011934;
Sat, 19 Aug 2017 10:06:06 -0400
Received: from sf-e2013-05.exchange.cornell.edu (10.22.40.52) by
sf-e2013-05.exchange.cornell.edu (10.22.40.52) with Microsoft SMTP Server
(TLS) id 15.0.1210.3; Sat, 19 Aug 2017 10:05:45 -0400
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (216.32.181.19)
by sf-e2013-05.exchange.cornell.edu (10.22.40.52) with Microsoft SMTP Server
(TLS) id 15.0.1210.3 via Frontend Transport; Sat, 19 Aug 2017 10:05:45 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=cornellprod.onmicrosoft.com; s=selector1-cornell-edu;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=Eb83Vw3pMg+KYTNBK39mnFpJ8um8TOs5WCw742LRkM0=;
Received: from BN6PR04MB0549.namprd04.prod.outlook.com (10.173.201.138) by
BN6PR04MB0914.namprd04.prod.outlook.com (10.174.95.20) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
15.1.1362.18; Sat, 19 Aug 2017 14:05:40 +0000
Received: from BN6PR04MB0549.namprd04.prod.outlook.com ([10.173.201.138]) by
BN6PR04MB0549.namprd04.prod.outlook.com ([10.173.201.138]) with mapi id
15.01.1362.019; Sat, 19 Aug 2017 14:05:40 +0000
From: Steven Vincent Gordner <[email protected]>
Subject: Job Offer From ExxonMobil UAE!
Thread-Topic: Job Offer From ExxonMobil UAE!
Thread-Index: AQHTGPQ9d62NMmUhEU+8EkIzs+HNBg==
Date: Sat, 19 Aug 2017 14:05:40 +0000
Message-ID: <BN6PR04MB054904E447053E8C1965771286810@BN6PR04MB0549.namprd04.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Authentication-Results-Original: spf=none (sender IP is )
[email protected];
x-originating-ip: [192.198.80.140]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-Correlation-Id: 19291aa1-9b87-4948-3ae4-08d4e70b754a
X-Microsoft-Antispam-Untrusted: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:BN6PR04MB0914;
X-MS-TrafficTypeDiagnostic: BN6PR04MB0914:|DB5PR0101MB2053:
x-org-on-prem-outbound: True
x-microsoft-antispam-prvs: <BN6PR04MB0914D2C3E906F3989661E8FB86810@BN6PR04MB0914.namprd04.prod.outlook.com>
x-forefront-prvs: 04041A2886
received-spf: None (protection.outlook.com: cornell.edu does not designate
permitted sender hosts)
SpamDiagnosticOutput: 1:22
Content-Type: multipart/alternative;
boundary="_000_BN6PR04MB054904E447053E8C1965771286810BN6PR04MB0549namp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR04MB0914
To: Undisclosed recipients:;
X-ORG-RouteOnPrem: False
X-ORG-MsgSource: exchange
X-PMX-CORNELL-AUTH-RESULTS: dkim-out=pass;
Return-Path: [email protected]
X-MS-Exchange-Organization-Network-Message-Id: 19291aa1-9b87-4948-3ae4-08d4e70b754a
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 04675859-f78e-4fd9-9630-a83e46ab5aea:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR02FT017.eop-EUR02.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:128.84.13.244;IPV:NLI;CTRY:US;EFV:NLI;SFV:SPM;SFS:(6009001)(8156002)(2980300002)(438002)(189002)(199003)(252514010)(33656002)(25786009)(61614004)(53336002)(66066001)(54356999)(7596002)(626005)(8676002)(14454004)(6506006)(77096006)(226693001)(2900100001)(1096003)(881003)(7636002)(7736002)(50986999)(356003)(7696004)(106466001)(246002)(75432002)(1671002)(102836003)(6116002)(19627405001)(5660300001)(3846002)(74316002)(84326002)(956001)(16003)(109986005)(110136004)(86362001)(9686003)(8666007)(189998001)(55016002)(512934002)(88552002)(99286003)(54896002)(11040200002)(90420200001)(471984002);DIR:INB;SFP:;SCL:5;SRVR:DB5PR0101MB2053;H:limerock04.mail.cornell.edu;FPR:;SPF:Pass;PTR:limerock04.mail.cornell.edu;MX:1;A:1;CAT:SPM;LANG:en;
X-Microsoft-Exchange-Diagnostics: 1;AM5EUR02FT017;1:SEcE3CTEyUsXi8kP/z1xoJ9/00VZw9cc7uwiRfqFrCRzC5RglB9k4b0bnRWGMwI8wx5ntANgeFfMcsvUj6y55lU0wD5kWrpGxvGnuHUia3nFZhrD1ndijKaepCi2a5xA
X-MS-Exchange-Organization-AuthSource: AM5EUR02FT017.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-DkimResult-Test: Passed
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(23075)(22001)(300000502095)(300135100095)(8251501002)(3001016)(300000503095)(300135400095)(71702078)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:DB5PR0101MB2053;
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(601004)(2401047)(13018025)(13016025)(8121501046)(9101536074)(3002001)(10201501046)(100000703101)(100105400095)(93006095)(93004095)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:DB5PR0101MB2053;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:DB5PR0101MB2053;
X-MS-Exchange-Organization-SCL: 5
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;DB5PR0101MB2053;23:o5ezvy9IjL8h2sFbmakiaFAReMT9YBxE+pr0vPe?=
=?us-ascii?Q?ZtFTMwqRnQzag79eDn6tykLt0LC6laga+RIQlB0ql5/FR5b8NlstkC8VahMr?=
=?us-ascii?Q?d2GLua4QHEcW+01NuHeDbZ38QTS0g0xMMuq/bmeWN85IH9/6XMl8XAjy1cOu?=
=?us-ascii?Q?yJM9dQB4gN9BaF8viI+Wl/NcSrHrtf6WrSj5TvTDZWyTkOx4paDo82sh/FeV?=
=?us-ascii?Q?vknSypppgzXV9tyABy0banCvqyi8f/Gj6AI+j+flyFjeHAFMzWSFwaF1sGyC?=
=?us-ascii?Q?1JLdLO/t8PdHqpVihIYprIZvLN1ukUUrTRJC9I08EGgHgH6h3GGZWJnH6Nsi?=
=?us-ascii?Q?3asu3nisNGeb9q8VsB2fyuSeOGSH967f61xAQ+ZUa2lZl08aAghlhHff78XW?=
=?us-ascii?Q?oqTqh1AUb6UeDRwYFpr8xnDrO4QsIbjcs+dSNA50cr1PsE94ASp/mnb8sIcd?=
=?us-ascii?Q?nrf1b5VPc7VXskkHUs0PnJH5UHPCorrslHzIzaqCVmtcWe9yuqYfJBzTv7lC?=
=?us-ascii?Q?RK+uxpRrnsEUDc1FS1wdi2kaVHHolHEXMdQ5iYEYwu3bFVlN5DTenoPAlLC+?=
=?us-ascii?Q?9nNfTGohbg/ZkO4tDNls5gNzu3pnH17wobqWj0vPlIY3LZw+23GYlK546412?=
=?us-ascii?Q?TN9knv0owwI5Em4O71A0EoIubeJp+qkC1RqQCNUXc7k9Qktz2ktKNNdpVK+T?=
=?us-ascii?Q?lX9c4ddRghOCw4VEOe6yDMG8G+/yOoRwJHE4bruqy8HD3110u/ZlxqjDegDr?=
=?us-ascii?Q?xMX9Qqbz/JoMt5hSRCiIfMT0ETq4qP/EUAhqkL1S8etqDgmD2TSmrmBh3YSF?=
=?us-ascii?Q?Drti5CVfkpOfscBIx+3a+mJQTwVvGPXp5+Y2Td6goyK9UgR9x41XEPfYvDIT?=
=?us-ascii?Q?JtCir3l0WNbSKKUBZfjgahZXmOM+1KWsgc5sHimeahbgwsnPsqYfeIZJv2Lw?=
=?us-ascii?Q?Hz/xIV57t/o+TmosDK32sUjs4406mrAar5KsYdtqQixuhdhPD6HCwS5n19by?=
=?us-ascii?Q?uo/P8NOr8YwByinZ8Xn000iwc7GePXEHstI3Fx9l+6FI/6l6NfNgXidUEDfa?=
=?us-ascii?Q?do/m2+hwTVtm58RD8rFvwW3em4wlEAHLUvm9swCC9QqS+gTQek7HCILixnq7?=
=?us-ascii?Q?Lvg6MKzTTMBKh9Nfp2BHJhhWGNPLInN5/aR2qY28MgbGpFAnl420uOL6CH3H?=
=?us-ascii?Q?WeIfwgwam0++J9qczPcsCueenQNQ9FWBWYVBAUHhT8Q+z3BUjRTQO+5/sy0T?=
=?us-ascii?Q?mKpeVG3Mo6uKmPXMk4qNf7KUTRnQ4uPqYiXnrnHQ0Lrh24eh2pWF3sf0Qvng?=
=?us-ascii?Q?QHQ=3D=3D?=
SpamDiagnosticMetadata: Default
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Aug 2017 14:06:15.7821
(UTC)
X-MS-Exchange-CrossTenant-Id: 04675859-f78e-4fd9-9630-a83e46ab5aea
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR0101MB2053
X-MS-Exchange-Transport-EndToEndLatency: 00:00:09.3586459
X-MS-Exchange-Processed-By-BccFoldering: 15.01.1362.006
Last edited by AlanJones on Tue Jan 16, 2018 6:01 am, edited 1 time in total.
Reason: Split from unrelated topic and added quotes for clarity
