Urolift , UROLIFT.ORG , [email protected] .

[Terminator5]

Urolift Job Application Results From Indeed dot com .

Scam Job URL

http://www.indeed.com/cmp/UroLift/jobs/ ... 882c831819


[email protected] .


The source host name is "8ta-151-139-228.telkomadsl.co.za" and the source IP address is 41.151.139.228.

Geo-Location Information

Country South Africa
State/Region 06
City Johannesburg


Begin Scam Email:

Dear Applicant,

Your resume has been reviewed on http://www.indeed.com and the Human Resources of the company has decided the position offered. You are required to set up a yahoo mail (http://www.yahoomail.com) and download yahoo messenger (http://messenger.yahoo.com). After this process, you are to add Mrs Brittney Christman on Yahoo IM, her yahoo ID is ([email protected]) to your yahoo buddy list ASAP for the job briefing and comprehensive details. She will be online waiting to talk to you ASAP.

• Salary: $25-$35 per hour
• Benefits : Health, Dental, Life and AD&D Insurance, Employee Wellness and 401k plans.Paid Time Off and Holidays with Generous Company Discounts

Interview Scheduled : ASAP
Position available. Administrative Assistant
Training is Available
Regards : ( UroLift System )


End Scam Email




Note the Emails are originating from a scam domain

Header Details:

Delivered-To: xxxxxx
Received: by 10.60.124.131 with SMTP id mi3csp4473oeb;
Sat, 23 Nov 2013 01:37:05 -0800 (PST)
X-Received: by 10.66.121.68 with SMTP id li4mr16409327pab.33.1385199424960;
Sat, 23 Nov 2013 01:37:04 -0800 (PST)
Return-Path: <[email protected]>
Received: from smtprelay.b.hostedemail.com (smtprelay0200.b.hostedemail.com. [64.98.42.200])
by mx.google.com with ESMTP id n5si22082823pav.156.2013.11.23.01.37.03
for <xxxxxx>;
Sat, 23 Nov 2013 01:37:03 -0800 (PST)
Received-SPF: temperror (google.com: error in processing during lookup of [email protected]: DNS timeout) client-ip=64.98.42.200;
Authentication-Results: mx.google.com;
spf=temperror (google.com: error in processing during lookup of [email protected]: DNS timeout) smtp.mail=[email protected]
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254])
by smtprelay04.b.hostedemail.com (Postfix) with ESMTP id 092657B613
for <xxxxxx>; Sat, 23 Nov 2013 09:37:03 +0000 (UTC)
X-Session-Marker: 656D706C6F7965654075726F6C6966742E6F7267
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,[email protected],:,RULES_HIT:41:152:355:375:379:408:541:582:599:800:967:969:973:988:9891224131113141437151615341593169917301777196321972200252525622685274128392933293929452951302231393141335238663868387339363941394739533959:4250:4416:4643:5007:6119:6261:7754:7901:8829:8957:9010:90251037610848119141204912051122191236212517130951313913156132301331114040,0,RBL:none,CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0,MSF:not bulk,SPF:fn,MSBL:0,DNSBL:none,Custom_rules:0:0:0
X-HE-Tag: show25_3d7d49d466428
X-Filterd-Recvd-Size: 1791
Received: from webmail05 (imap-ext [64.98.36.5])
(Authenticated sender: [email protected])
by omf01.b.hostedemail.com (Postfix) with ESMTPA
for <xxxxxx>; Sat, 23 Nov 2013 09:37:02 +0000 (UTC)
Received: from 41.151.139.228 ([41.151.139.228]) by webmail05 (Webmail) with HTTP; Sat, 23 Nov 2013 09:37:02 +0000 (UTC)
Date: Sat, 23 Nov 2013 09:37:02 +0000 (UTC)
From: Cortney Mays <[email protected]>
To: xxxxxx
Message-ID: <989206708.54023.1385199422528.JavaMail.mail@webmail05>
References: <[email protected]>
Subject: Re: Admin Assitant Full Time MD candidate
on Indeed
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Webmail
X-Originating-IP: [41.151.139.228]


End Header Details




Scam Domain Registration Details:

Domain ID:D170187188-LROR
Domain Name:UROLIFT.ORG
Created On:16-Nov-2013 10:57:34 UTC
Last Updated On:16-Nov-2013 10:57:35 UTC
Expiration Date:16-Nov-2014 10:57:34 UTC
Sponsoring Registrar:Tucows Inc. (R11-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:tuxAy8suEyHFpthh
Registrant Name:VistaPrint Technologies Ltd
Registrant Organization:VistaPrint Technologies Ltd
Registrant Street1:Canon's Court
Registrant Street2:22 Victoria Street
Registrant Street3:
Registrant City:Hamilton
Registrant State/Province:
Registrant Postal Code:HM12
Registrant Country:BM
Registrant Phone:+1.7816526199
Registrant Phone Ext.:
Registrant FAX:+1.7816526096
Registrant FAX Ext.:
Registrant Email:[email protected]
Admin ID:tu8dNtlcSfHqMI5K
Admin Name:Domain Administrator
Admin Organization:VistaPrint
Admin Street1:95 Hayden Avenue
Admin Street2:
Admin Street3:
Admin City:Lexington
Admin State/Province:MA
Admin Postal Code:02421
Admin Country:US
Admin Phone:+1.7816526199
Admin Phone Ext.:
Admin FAX:+1.7816526096
Admin FAX Ext.:
Admin Email:[email protected]
Tech ID:tue8VA9OOgBCP9lp
Tech Name:Domain Administrator
Tech Organization:VistaPrint
Tech Street1:95 Hayden Ave.
Tech Street2:
Tech Street3:
Tech City:Lexington
Tech State/Province:MA
Tech Postal Code:02421
Tech Country:US
Tech Phone:+1.7816526199
Tech Phone Ext.:
Tech FAX:+1.7816526096
Tech FAX Ext.:
Tech Email:[email protected]
Name Server:NS2.VPWEB.COM
Name Server:NS3.VPWEB.COM
Name Server:NS4.VPWEB.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned

[Terminator5]