Reshipping Scam

Dear XXXXXXX,

We sincerely appreciate your interest in our company.

FIVE EASY STEPS TO START:
Please see the "Job Description" file for more details about the position. If you have any questions – ask me. Also see our FAQ.
Fill out "Application Form" electronically.
To verify your identity you have to send us a scan of your ID, passport or DL. (You may use scanner/digital camera/web camera. Your documents will only be used for verification purposes and will be stored in a secure area.)
Fill out "Employment Agreement" electronically, then print and sign it.
Just send everything back to me.



IF YOU HAVE NO SCANNER, YOU CAN SEND ALL THE DOCUMENTS USING FAX TO: +1 (855) 373-9747 (TOLL FREE)

We wish you every success.

Note:
Please visit our website for additional information about company and services.

Please contact me with any questions you may have regarding the Employment Agreement or any of the attached materials or information.


Regards,
Michael Barden

Cargo Enterprises, LLC.
TEL: +1 678 800-1146
FAX: +1 (855) 373-9747 (TOLL FREE)

Please post something that identifies the website involved,
for example where the online application is.

Also post the email address, or better yet post the complete headers. People may be searching for the address.

No online application. They send it attached.

Here is a link to the site they claim your going to be working for
http://www.cargoenterprises.com/?p=about

The scam used two email addys
[email protected]

[email protected]

[AlanJones]

Please can you post emails (including headers), showing how these 2 domains were involved in the scam - particularly the staticpaint.com one.

from: Michael Barden <[email protected]>

Delivered-To: [email protected]
Received: by 10.194.94.42 with SMTP id cz10csp398733wjb;
Wed, 20 Nov 2013 08:51:55 -0800 (PST)
X-Received: by 10.224.11.68 with SMTP id s4mr3231681qas.88.1384966315073;
Wed, 20 Nov 2013 08:51:55 -0800 (PST)
Return-Path: <AI2JBak3UQQ6SKeLdwKSNow==_1115717656903_ir9FUFICEeOGbtSuUqLLUg==@in.constantcontact.com>
Received: from ccm23.constantcontact.com (ccm23.constantcontact.com. [208.75.123.131])
by mx.google.com with ESMTP id ka7si16887928qeb.41.2013.11.20.08.51.54
for <[email protected]>;
Wed, 20 Nov 2013 08:51:55 -0800 (PST)
Received-SPF: pass (google.com: domain of AI2JBak3UQQ6SKeLdwKSNow==_1115717656903 ... ontact.com designates 208.75.123.131 as permitted sender) client-ip=208.75.123.131;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of AI2JBak3UQQ6SKeLdwKSNow==_1115717656903 ... ontact.com designates 208.75.123.131 as permitted sender) smtp.mail=AI2JBak3UQQ6SKeLdwKSNow==_111 ... ontact.com;
dkim=pass [email protected]
Received: from p2-jbsvcs5176.ad.prodcc.net (p2-pen5.ad.prodcc.net [10.252.0.105])
by p2-mail219.ccm23.constantcontact.com (Postfix) with ESMTP id 9A0F6546E6E
for <[email protected]>; Wed, 20 Nov 2013 11:51:54 -0500 (EST)
DKIM-Signature: v=1; q=dns/txt; a=rsa-sha256; c=relaxed/relaxed; s=1000073432; d=auth.ccsend.com; h=to:X-Feedback-ID:subject:mime-version:message-id:from:date:sender:list-unsubscribe:reply-to; bh=IVYLFJm0fntmkp+Yu1zR3c5jwUUx36nD8GoMifY+woQ=; b=c+BiOeAjOB6y3EGAbcX3+7mpChXTfpDAyo22ZJZ3AzKavYceUk40Z6mONItbW+Vd5Wcygr/RLZnPV6CkGghNh+hRxJiS1xXrWM+jK22CrxT05YPPpoKpwzwlqExBd0KqxxIHOMWixOPmPVzS3Ari217ZxLvV9F1N4IdtB4exrMU=
Message-ID: <1115731275555.1115717656903.1211368488.0.61150JL.1002@scheduler.constantcontact.com>
Date: Wed, 20 Nov 2013 11:51:54 -0500 (EST)
From: Michael Barden <[email protected]>
Reply-To: [email protected]
Sender: [email protected]
To: [email protected]
Subject: New Message for You!
Cc:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_10028788_1780037793.1384966314600"
List-Unsubscribe: http://visitor.constantcontact.com/do?p ... =hkyi4cpab
X-Campaign-Activity-ID: 2362416a-4dd4-410e-9229-e2ddc0a48da3
X-Channel-ID: 8abf4550-5202-11e3-866e-d4ae52a2cb52
X-Mailer: Roving Constant Contact 2012 (http://www.constantcontact.com)
X-Return-Path-Hint: AI2JBak3UQQ6SKeLdwKSNow==_1115717656903 ... ontact.com
X-Roving-Campaignid: 1115731275555
X-Roving-Id: 1115717656903.1211368488
X-Feedback-ID: 8abf4550-5202-11e3-866e-d4ae52a2cb52:2362416a-4dd4-410e-9229-e2ddc0a48da3:1115717656903:CTCT

------=_Part_10028788_1780037793.1384966314600
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Dear Applicant,
We are pleased to inform that you have passed the preliminary selection for a Logistics
Manager position with Cargo Enterprises, LLC. We have reviewed your resume on www.careerbuilder.com
and believe that your knowledge, skills and experience will add value to our organization.
Job Title: Logistics Manager
Company: Cargo Enterprises, LLC
Salary: $2800/Month
Responsibilities:
- Manage incoming and outgoing shipments;
- Manage regular correspondence with company's representatives;
- Manage online tracking program.
If you are interested in this position, please respond to our email as an acceptance
to our offer.
Yours truly,
Michael Barden
HR Coordinator

from: Michael Barden <[email protected]>

Delivered-To: [email protected]
Received: by 10.194.94.42 with SMTP id cz10csp160469wjb;
Mon, 25 Nov 2013 15:06:34 -0800 (PST)
X-Received: by 10.15.52.73 with SMTP id o49mr397938eew.60.1385420793928;
Mon, 25 Nov 2013 15:06:33 -0800 (PST)
Return-Path: <[email protected]>
Received: from server.example.com (luna214.startdedicated.com. [85.25.95.118])
by mx.google.com with ESMTPS id c3si11344185eeo.114.2013.11.25.15.06.33
for <[email protected]>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 25 Nov 2013 15:06:33 -0800 (PST)
Received-SPF: neutral (google.com: 85.25.95.118 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=85.25.95.118;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 85.25.95.118 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from [109.163.239.216] (helo=[10.8.0.22])
by server.example.com with esmtpa (Exim 4.76)
(envelope-from <[email protected]>)
id 1Vl5EU-0003SP-W3
for [email protected]; Tue, 26 Nov 2013 00:06:33 +0100
Message-ID: <[email protected]>
Date: Mon, 25 Nov 2013 23:17:44 +0300
From: Michael Barden <[email protected]>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version: 1.0
To: [email protected]
Subject: job reply: XXXXXXXX
Content-Type: multipart/mixed;
boundary="------------030007080006090405050007"

This is a multi-part message in MIME format.
--------------030007080006090405050007
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
<head>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
</head>

Cargo Enterprises LLC Reshipping Scam

Also at http://overseaforwarding.com

ADDRESS: 5570 Tulane Dr SW, Atlanta, GA 30336-2341
TEL: +1 (678) 800-1146
FAX: +1 (855) 373-9747 (TOLL FREE)

what am i supposed to do with the merchandise that i have I don't want these Items in my house...

^^^Also posted here >> viewtopic.php?f=4&t=78932

[AlanJones]

what am i supposed to do with the merchandise that i have I don't want these Items in my house...

They will have been bought using stolen credit cards, so ring your local police and explain the situation to them and they should collect them.

thank you alan and will do that first thing in the morning

okay so i'm dealing with the FBI agents now and i need help finding this Information from the 2 companies that scammed me... can someone help me

IP Address:
IRC Server:
Chat Room Name:
Usenet Newsgroup:
Other

[AlanJones]

I'm guessing you've received a standard FBI request that asks for anything that could possibly have been provided.

Unless you have been communictaing with the scammer through newsgroups, chat rooms or IRC then all you have a chance of getting is an IP address from the email you received (and even that is not certain if they were using hotmail or gmail).

The best thing to do is get the headers for one of the emails you received and forward that to the FBI.

Thank you Alan...