The world's premier anti internet scam, anti fraud information website 

  • [email protected]

  • Exposed employment scams: fake job offers, payment processing fraud, reshipping scams, and work-from-home cons. 10,500+ documented cases with evidence.
Who are you really talking to? Check their location - InfoSniper
Exposed employment scams: fake job offers, payment processing fraud, reshipping scams, and work-from-home cons. 10,500+ documented cases with evidence.
  Been Targeted by This Scam?

Here's how to report a scam to the FBI, FTC, and other agencies. Read our guides on fake check scams, sugar daddy scams, and sextortion. Not sure? Try our free Scam Checker Tool.

  by LSBARTHELEMY
 
New employment scam similar to the BHP one, but this time using EXXONMOBIL:

MESSAGE:

From:[email protected]
To: [my e-mail]
Date: 19/08/2017 16:06
SUBJECT:“ Job Offer From ExxonMobil UAE!
Bluesky Energy Consultant
Address: 111 Shaik Zayed Road, Office No : 910,
Liberty House, DIFC, Dubai, AE - Dubai
Email: [email protected]


All responses must be sent to this email:
[email protected]

Attn: Sir/Madam,


We are currently recruiting for ExxonMobil UAE for different oil and gas positions.
Interested and qualified candidates should send their CV/Resume for screening.

Further details will also be relevant for the screening.

Total Years of Experience in Oil and Gas:
Last Salary Earned in USD$:


Yours Sincerely,
Steven Vincent Gordner
Recruitment Coordinator
MESSAGE PROPERTIES -> MESSAGE DETAILS:
Received: from DB5PR0101MB2053.eurprd01.prod.exchangelabs.com
(2603:10a6:0:5::32) by HE1PR0101MB2060.eurprd01.prod.exchangelabs.com with
HTTPS via DB5PR0201CA0022.EURPRD02.PROD.OUTLOOK.COM; Sat, 19 Aug 2017
14:06:25 +0000
Received: from DB5PR0101CA0016.eurprd01.prod.exchangelabs.com
(2603:10a6:0:6::26) by DB5PR0101MB2053.eurprd01.prod.exchangelabs.com
(2603:10a6:0:31::9) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1362.18; Sat, 19
Aug 2017 14:06:22 +0000
Received: from AM5EUR02FT017.eop-EUR02.prod.protection.outlook.com
(2a01:111:f400:7e1e::202) by DB5PR0101CA0016.outlook.office365.com
(2603:10a6:0:6::26) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1362.18 via
Frontend Transport; Sat, 19 Aug 2017 14:06:17 +0000
Authentication-Results: spf=pass (sender IP is 128.84.13.244)
smtp.mailfrom=cornell.edu; audencia.net; dkim=pass (signature was verified)
header.d=cornellprod.onmicrosoft.com;audencia.net; dmarc=bestguesspass
action=none header.from=cornell.edu;
Received-SPF: Pass (protection.outlook.com: domain of cornell.edu designates
128.84.13.244 as permitted sender) receiver=protection.outlook.com;
client-ip=128.84.13.244; helo=limerock04.mail.cornell.edu;
Received: from limerock04.mail.cornell.edu (128.84.13.244) by
AM5EUR02FT017.mail.protection.outlook.com (10.152.8.111) with Microsoft SMTP
Server id 15.1.1341.15 via Frontend Transport; Sat, 19 Aug 2017 14:06:15
+0000
X-CornellRouted: This message has been Routed already.
Received: from exchange.cornell.edu (sf-e2013-05.exchange.cornell.edu [10.22.40.52])
by limerock04.mail.cornell.edu (8.14.4/8.14.4_cu) with ESMTP id v7JE62Ue011934;
Sat, 19 Aug 2017 10:06:06 -0400
Received: from sf-e2013-05.exchange.cornell.edu (10.22.40.52) by
sf-e2013-05.exchange.cornell.edu (10.22.40.52) with Microsoft SMTP Server
(TLS) id 15.0.1210.3; Sat, 19 Aug 2017 10:05:45 -0400
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (216.32.181.19)
by sf-e2013-05.exchange.cornell.edu (10.22.40.52) with Microsoft SMTP Server
(TLS) id 15.0.1210.3 via Frontend Transport; Sat, 19 Aug 2017 10:05:45 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=cornellprod.onmicrosoft.com; s=selector1-cornell-edu;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=Eb83Vw3pMg+KYTNBK39mnFpJ8um8TOs5WCw742LRkM0=;
Received: from BN6PR04MB0549.namprd04.prod.outlook.com (10.173.201.138) by
BN6PR04MB0914.namprd04.prod.outlook.com (10.174.95.20) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
15.1.1362.18; Sat, 19 Aug 2017 14:05:40 +0000
Received: from BN6PR04MB0549.namprd04.prod.outlook.com ([10.173.201.138]) by
BN6PR04MB0549.namprd04.prod.outlook.com ([10.173.201.138]) with mapi id
15.01.1362.019; Sat, 19 Aug 2017 14:05:40 +0000
From: Steven Vincent Gordner <[email protected]>
Subject: Job Offer From ExxonMobil UAE!
Thread-Topic: Job Offer From ExxonMobil UAE!
Thread-Index: AQHTGPQ9d62NMmUhEU+8EkIzs+HNBg==
Date: Sat, 19 Aug 2017 14:05:40 +0000
Message-ID: <BN6PR04MB054904E447053E8C1965771286810@BN6PR04MB0549.namprd04.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Authentication-Results-Original: spf=none (sender IP is )
smtp.mailfrom=[email protected];
x-originating-ip: [192.198.80.140]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-Correlation-Id: 19291aa1-9b87-4948-3ae4-08d4e70b754a
X-Microsoft-Antispam-Untrusted: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:BN6PR04MB0914;
X-MS-TrafficTypeDiagnostic: BN6PR04MB0914:|DB5PR0101MB2053:
x-org-on-prem-outbound: True
x-microsoft-antispam-prvs: <BN6PR04MB0914D2C3E906F3989661E8FB86810@BN6PR04MB0914.namprd04.prod.outlook.com>
x-forefront-prvs: 04041A2886
received-spf: None (protection.outlook.com: cornell.edu does not designate
permitted sender hosts)
SpamDiagnosticOutput: 1:22
Content-Type: multipart/alternative;
boundary="_000_BN6PR04MB054904E447053E8C1965771286810BN6PR04MB0549namp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR04MB0914
To: Undisclosed recipients:;
X-ORG-RouteOnPrem: False
X-ORG-MsgSource: exchange
X-PMX-CORNELL-AUTH-RESULTS: dkim-out=pass;
Return-Path: [email protected]
X-MS-Exchange-Organization-Network-Message-Id: 19291aa1-9b87-4948-3ae4-08d4e70b754a
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 04675859-f78e-4fd9-9630-a83e46ab5aea:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR02FT017.eop-EUR02.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:128.84.13.244;IPV:NLI;CTRY:US;EFV:NLI;SFV:SPM;SFS:(6009001)(8156002)(2980300002)(438002)(189002)(199003)(252514010)(33656002)(25786009)(61614004)(53336002)(66066001)(54356999)(7596002)(626005)(8676002)(14454004)(6506006)(77096006)(226693001)(2900100001)(1096003)(881003)(7636002)(7736002)(50986999)(356003)(7696004)(106466001)(246002)(75432002)(1671002)(102836003)(6116002)(19627405001)(5660300001)(3846002)(74316002)(84326002)(956001)(16003)(109986005)(110136004)(86362001)(9686003)(8666007)(189998001)(55016002)(512934002)(88552002)(99286003)(54896002)(11040200002)(90420200001)(471984002);DIR:INB;SFP:;SCL:5;SRVR:DB5PR0101MB2053;H:limerock04.mail.cornell.edu;FPR:;SPF:Pass;PTR:limerock04.mail.cornell.edu;MX:1;A:1;CAT:SPM;LANG:en;
X-Microsoft-Exchange-Diagnostics: 1;AM5EUR02FT017;1:SEcE3CTEyUsXi8kP/z1xoJ9/00VZw9cc7uwiRfqFrCRzC5RglB9k4b0bnRWGMwI8wx5ntANgeFfMcsvUj6y55lU0wD5kWrpGxvGnuHUia3nFZhrD1ndijKaepCi2a5xA
X-MS-Exchange-Organization-AuthSource: AM5EUR02FT017.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-DkimResult-Test: Passed
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(23075)(22001)(300000502095)(300135100095)(8251501002)(3001016)(300000503095)(300135400095)(71702078)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:DB5PR0101MB2053;
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(601004)(2401047)(13018025)(13016025)(8121501046)(9101536074)(3002001)(10201501046)(100000703101)(100105400095)(93006095)(93004095)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:DB5PR0101MB2053;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:DB5PR0101MB2053;
X-MS-Exchange-Organization-SCL: 5
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;DB5PR0101MB2053;23:o5ezvy9IjL8h2sFbmakiaFAReMT9YBxE+pr0vPe?=
=?us-ascii?Q?ZtFTMwqRnQzag79eDn6tykLt0LC6laga+RIQlB0ql5/FR5b8NlstkC8VahMr?=
=?us-ascii?Q?d2GLua4QHEcW+01NuHeDbZ38QTS0g0xMMuq/bmeWN85IH9/6XMl8XAjy1cOu?=
=?us-ascii?Q?yJM9dQB4gN9BaF8viI+Wl/NcSrHrtf6WrSj5TvTDZWyTkOx4paDo82sh/FeV?=
=?us-ascii?Q?vknSypppgzXV9tyABy0banCvqyi8f/Gj6AI+j+flyFjeHAFMzWSFwaF1sGyC?=
=?us-ascii?Q?1JLdLO/t8PdHqpVihIYprIZvLN1ukUUrTRJC9I08EGgHgH6h3GGZWJnH6Nsi?=
=?us-ascii?Q?3asu3nisNGeb9q8VsB2fyuSeOGSH967f61xAQ+ZUa2lZl08aAghlhHff78XW?=
=?us-ascii?Q?oqTqh1AUb6UeDRwYFpr8xnDrO4QsIbjcs+dSNA50cr1PsE94ASp/mnb8sIcd?=
=?us-ascii?Q?nrf1b5VPc7VXskkHUs0PnJH5UHPCorrslHzIzaqCVmtcWe9yuqYfJBzTv7lC?=
=?us-ascii?Q?RK+uxpRrnsEUDc1FS1wdi2kaVHHolHEXMdQ5iYEYwu3bFVlN5DTenoPAlLC+?=
=?us-ascii?Q?9nNfTGohbg/ZkO4tDNls5gNzu3pnH17wobqWj0vPlIY3LZw+23GYlK546412?=
=?us-ascii?Q?TN9knv0owwI5Em4O71A0EoIubeJp+qkC1RqQCNUXc7k9Qktz2ktKNNdpVK+T?=
=?us-ascii?Q?lX9c4ddRghOCw4VEOe6yDMG8G+/yOoRwJHE4bruqy8HD3110u/ZlxqjDegDr?=
=?us-ascii?Q?xMX9Qqbz/JoMt5hSRCiIfMT0ETq4qP/EUAhqkL1S8etqDgmD2TSmrmBh3YSF?=
=?us-ascii?Q?Drti5CVfkpOfscBIx+3a+mJQTwVvGPXp5+Y2Td6goyK9UgR9x41XEPfYvDIT?=
=?us-ascii?Q?JtCir3l0WNbSKKUBZfjgahZXmOM+1KWsgc5sHimeahbgwsnPsqYfeIZJv2Lw?=
=?us-ascii?Q?Hz/xIV57t/o+TmosDK32sUjs4406mrAar5KsYdtqQixuhdhPD6HCwS5n19by?=
=?us-ascii?Q?uo/P8NOr8YwByinZ8Xn000iwc7GePXEHstI3Fx9l+6FI/6l6NfNgXidUEDfa?=
=?us-ascii?Q?do/m2+hwTVtm58RD8rFvwW3em4wlEAHLUvm9swCC9QqS+gTQek7HCILixnq7?=
=?us-ascii?Q?Lvg6MKzTTMBKh9Nfp2BHJhhWGNPLInN5/aR2qY28MgbGpFAnl420uOL6CH3H?=
=?us-ascii?Q?WeIfwgwam0++J9qczPcsCueenQNQ9FWBWYVBAUHhT8Q+z3BUjRTQO+5/sy0T?=
=?us-ascii?Q?mKpeVG3Mo6uKmPXMk4qNf7KUTRnQ4uPqYiXnrnHQ0Lrh24eh2pWF3sf0Qvng?=
=?us-ascii?Q?QHQ=3D=3D?=
SpamDiagnosticMetadata: Default
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Aug 2017 14:06:15.7821
(UTC)
X-MS-Exchange-CrossTenant-Id: 04675859-f78e-4fd9-9630-a83e46ab5aea
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR0101MB2053
X-MS-Exchange-Transport-EndToEndLatency: 00:00:09.3586459
X-MS-Exchange-Processed-By-BccFoldering: 15.01.1362.006
Last edited by AlanJones on Tue Jan 16, 2018 6:01 am, edited 1 time in total. Reason: Split from unrelated topic and added quotes for clarity
  by Mike Wilson