Secret Shopper ~ CAREERCarlina@teleworkrecruiting.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

__________________________________________

Email header analysis report
All valid IP Addresses found in the header.
Ip Address 3rd Party Info Provider City Flag Country
* 172.162.30.69 Check 172.162.30.69 at Senderbase.org Check 172.162.30.69 at Reputationauthority.org America Online n/a United States
98.138.88.139 Check 98.138.88.139 at Senderbase.org Check 98.138.88.139 at Reputationauthority.org Yahoo Sunnyvale United States
209.86.89.61 Check 209.86.89.61 at Senderbase.org Check 209.86.89.61 at Reputationauthority.org Earthlink n/a United States
98.138.197.220 Check 98.138.197.220 at Senderbase.org Check 98.138.197.220 at Reputationauthority.org Yahoo Sunnyvale United States

*Probable originating IP address

From Doris Summers Sat May 10 04:38:16 2014
X-Apparently-To: via 98.138.197.220; Sat, 10 May 2014 01:29:46 +0000
Return-Path: CAREERCarlina@teleworkrecruiting.com
Received-SPF: neutral (209.86.89.61 is neither permitted nor denied
by domain of teleworkrecruiting.com)
IGxldCB5b3Uga25vdyBhYm91dCBzb21lIG5ldyBwb3NpdGlvbnMgdGhhdCBo
YXZlIGJlY29tZSBhdmFpbGFibGUuIElmIHlvdSBhcmUgbm90IHRoZSByaWdo
dCBtYXRjaCBmb3IgdGhlIGJlbG93IHBvc2l0aW9uIHBsZWFzZSBhY2NlcHQg
bXkgYXBvbG9naWVzICYgaWYgeW91IGtub3cgc29tZW9uZSB3aG8ncyBsb29r
aW5nIGZvciB0aGlzIGtpbmQgb2Ygd29yayBhbmQgdGhhdCB3bwEwAQEBAQN0
ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: DxC.BgUWLDsnVZIGGMKLLtiAqBdHS7LTe5.qYv9fRpOyDime
T03DCxz325V6Lr9jA1uct0owhiVabQQU0hzoA.ZsIZRldqwBy_B_EllxnH2F
4dTjF8WV6PqXs0ILvb2KhjWNDfZEHtlL2ZlyQvFVN2eWrWSKDjAXy6r3aHKN
AkBlcjg9fnEiRhii.ruyvPfE_D8lftX_PYs726HR8syymI796fOrbz.p.MC5
sVKqhPcXKdG_eBaTrMmATeEt58iW1166wmCC.Blc5N_hTicuynt8b1MtG5eT
XTdlbaRhV1zmASpI_XcfK53pQ..AjQTiwafyhYLXbdPW.FIbn_Liw.vlrYgz
4wg77BWKtCIfrSxe_KX6xrTZ8JSkmffOmVgUGVhGricKUXjBNbjNvghRnt2Z
QmUT.ULisUSIi9KGnEQQwo4MNpovRcb1KYCazyCemgwTsOUj5Wnm7j3kCU0x
WXbAm0ycQLLQB3kQvR5wtsH7WMXrqlWiNtFm.bbNOPnwW2qEql82ed7jyUqn
YOYtyEEa5vv634TkOvIgIj3Kta6gueyUFh8l3VcjdYqYbVz.bca8Z.Iyl1pC
Obsq3ET4sVve0tFvAoPz9OLtGuRijshc_i9rZTo5K_yy.GFSdc9lRh.gT9sZ
mVdXyb5HDcCEARXRdSIb_O6jnFQb0PUhHpK17ZWu5wEynOGpqJ3yKmeckFqj
PjBqDM5qKW6LTUjGL6v9lVRnpXlTJ_ZAyeVvwrUkhzspBunpbGehf9P01kZ_
fr84aORiDwNgUoJiz5EMDp1fKpLgkREQNt7W717qtIqo.dmasHx73xRhgQZO
ID8jRxBvkBbrOVK9qUTKD4T5PR.19PWmuOomgBdedNHh3SkjD7h_390dHpUa
9Hc_.MId7dclDY82Y5sK_ESkXuX1NXF1P.NgwtGjgEhL7cFYwUDe87h1wTPg
Df3D17810sOgO_CAADHTNILxt7ZTvI8b2NgXrIB0NaVkIlQp8XMAcOBANsyw
wTeqH03zogDdz5Fq2qnk3.TzEWyZszNp4HqE_dWnpqQLulFWbrLL1tX2fC.k
J.4r3ybwaCxEhcz4EsboJlJtT8AT42oQiWJfwSeNeglLDvKbP0xV5PljAtv.
3MfIifz_fmOXWPBwaxydM9RhOcZ8_G2dZ6rKoxkEW_DTS6Avg_j5.XtO2LgC
Sm0a96pWrGB93sERhUYkpe205QCCZxorrDDqUtWa25FsuYz_fWZt5nP2.KWq
QBjfRpm6RyseCPniHcTtAXCfA5xU9lq7z5OVcJIy3Qy5vmGytBUpVy6eyK1N
CISG0hoAT7rZlj8WkH88oDpzFf0vraXbo69EUceZvqfGafvgUN36oNudgsFb
HReiGYRVz6EfpI0UATG9
X-Originating-IP: [209.86.89.61]
Authentication-Results: mta1022.sbc.mail.ne1.yahoo.com from=teleworkrecruiting.com;
domainkeys=neutral (no sig);from=teleworkrecruiting.com; dkim=neutral (no sig)
Received: from 98.138.197.220 (98.138.197.220) by 98.138.88.139(98.138.88.139);
Sat, 10 May 2014 01:29:47 +0000
Received: from 127.0.0.1 (EHLO elasmtp-galgo.atl.sa.earthlink.net) (209.86.89.61)
by mta1022.sbc.mail.ne1.yahoo.com with SMTP; Sat, 10 May 2014 01:29:45 +0000
Received: from [172.162.30.69] (helo=WIN7VBUVUIOHLO)
by elasmtp-galgo.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <CAREERCarlina@teleworkrecruiting.com>)
id 1Wiw5w-0007I7-Rx; Fri, 09 May 2014 21:28:57 -0400
Reply-To: doris.summers@yandex.com
From: “Doris Summers” CAREERCarlina@teleworkrecruiting.com
To: “Doris Summers” CAREERCarlina@teleworkrecruiting.com
Subject: Your Job Application – SGS Ref #2402
Date: Sat, 10 May 2014 04:38:16 -0700
Message-ID: <19a001cf6c44$5fa21f30$1ee65d90$@com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=”—-=_NextPart_000_19A1_01CF6C09.B3434730″
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Ac9r5xIyqwton1poSEe87d0lkP07MA==
Hello,

I wanted to reach out to you and let you know about some new positions that have become available.

If you are not the right match for the below position please accept my apologies & if you know someone who’s looking for this kind of work and that would be a good fit and interested in this position please forward my contact information to them OR guide them to me.

Secret Shopper

Contract duration: Minimum 12 months

Skills/Experience:

The successful applicant should have a growth mindset, organizational skills for efficient time and stress management and the ability to communicate professionally in both written and verbal mediums with people at all levels of the organization. Excellent opportunity to work enjoy a tremendous support network and be part of one of the best teams worldwide.

Thanks & Regards,

SGS

Note: Please allow me to reiterate that I chose to contact you either because your resume had been posted to one of the internet job sites to which we subscribe, or you had previously submitted your resume to CareerBuilder. I assumed that you are either looking for a new employment opportunity, or you are interested in investigating the current job market.

If you are interested in this position, please email me back with the word Interested in the subject of the email and I will send you a complete description of the position we have open.

If you would like to unsubscribe, please email me back with the word Unsubscribe in the subject of the email.

Confidentiality/Prohibition for Disclosure: This communication is intended only for the use of the individual or whom it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. This information comes from records whose confidentiality may be protected by Federal and/or State Law. The authorization for release of information form does not authorize redisclosure of medical information beyond the limits of this consent. Federal Law prohibits information disclosed from records protected by these laws and from being redisclosed, even to a patient, without the specific written consent of the patient or as otherwise permitted by such laws and/or regulations. A general authorization for release of medical or other information is NOT sufficient for these purposes. Civil or criminal penalties may attach for unauthorized disclosure of health information.

Advertisement

2 thoughts on “Secret Shopper ~ CAREERCarlina@teleworkrecruiting.com”

  1. SFA Reporter says:
    Reply

    Spende von Schwester . Rebecca williams
    Bischof [ 38 rue des Martyrs cocody
    Abidjan, Elfenbeinküste.

    Liebste in christus

    Ich bin aus Kuwait. Ich bin mr verheiratet. David Williams, der mit Kuwait Botschaft in der Elfenbeinküstearbeitete neun Jahre, bevor er im Jahr 2004 starb. Wir waren elf Jahre ohne ein Kind verheiratet. Er starb nach einer kurzen Krankheit , die nur vier Tage dauerte.

    Vor seinem Tod , die beide wiedergeborener Christ . Seit seinem Tod habe ich beschlossen, nicht wieder zu heiraten oder ein Kind bekommen außerhalb meines ehelichen Wohnung , die gegen die Bibel . Als mein Mann noch am Leben war er hinterlegt die Summe von (2,5 Millionen Euro) in der Bank hier in Abidjan Zwischenkonto .

    Derzeit ist der Fonds noch in der Bank. Vor kurzem sagte mir mein Arzt , dass ich ernste Krankheit, die Krebs- Problem ist . Was mich am meisten stört, ist meine Krankheit Schlaganfall . Zu wissen, meinen Zustand habe ich beschlossen , diesen Fonds in die Kirche oder die, die dieses Geld den Weg würde ich hier empfehlen, nutzen spenden. Ich will eine Kirche, die diesen Fonds für Waisenhäuser, Witwen nutzen werden , um das Wort Gottes und die Anstrengungen, die das Haus Gottes aufrechterhalten zu fördern.

    Die Bibel ist für uns zu verstehen , dass gesegnet ist die Hand, die gibt . Ich traf diese Entscheidung , weil ich nicht jedes Kind, dass dieses Geld erben, und mein Mann Verwandten sind nicht Christen, und ich weiß nicht Bemühungen meines Mannes , die von Ungläubigen eingesetzt werden wollen. Ich will nicht eine Situation, wo dieses Geld wird in einer gottlosen Weise verwendet werden. Das ist, warum ich bei dieser Entscheidung . Ich habe keine Angst vor dem Tod, damit ich weiß, wohin ich gehe . Ich weiß, ich werde in den Schoß des Menschen sein. Exodus 14 vs 14 , sagt , dass der Herr meinem Fall zu kämpfen , und ich meine Ruhe zu halten.

    Ich brauche keine Telefon-Kommunikation in dieser Hinsicht wegen meiner Gesundheit damit die Anwesenheit von Verwandten meines Mannes immer um mich herum und ich weiß nicht, dass sie über diese Entwicklung kennen. In Gott sind alle Dinge möglich . Sobald ich eine Antwort erhalten werde ich Ihnen Kontakt der Bank hier in Abidjan zu geben. Ich möchte Sie und die Kirche, die immer für mich zu beten , denn der Herr ist mein Hirte . Mein Glück ist, dass ich lebte ein Leben wert christian . Wer will, dem Herrn zu dienen , müssen ihn im Geist und in der Wahrheit zu dienen . Immer beten für ihr ganzes Leben .

    Antwort mich für weitere Informationen zu , in Ihrer Antwort wird mir bei der Beschaffung einer anderen Kirche oder die Person für den gleichen Zweck Raum geben . Lassen Sie mich Ihnen versichern , dass sie entsprechend handeln , wie angegeben. Ich hoffe, eine Antwort zu bekommen .

    Senden Sie mir die folgenden Informationen , nach unten.

    Ihr voller Name ……….
    Adresse ………..
    Alter ……………
    Die Besetzung ……..
    Foto ……………

    Noch in dir sollen gesegnet .
    In Christus ,
    Schwester Rebecca Williams.

  2. SFA Reporter says:
    Reply

    Address lookup
    canonical name teleworkrecruiting.com.
    aliases
    addresses 67.225.165.30
    Domain Whois record

    Queried whois.internic.net with “dom teleworkrecruiting.com”…

    Domain Name: TELEWORKRECRUITING.COM
    Registrar: DOMAIN-IT, INC.
    Whois Server: whois.domainit.com
    Referral URL: http://www.domainit.com
    Name Server: NS.52601.COM
    Name Server: NS2.52601.COM
    Status: clientTransferProhibited
    Updated Date: 20-nov-2013
    Creation Date: 24-nov-2000
    Expiration Date: 24-nov-2015

    Last update of whois database: Mon, 12 May 2014 14:41:21 UTC
    Queried whois.domainit.com with “teleworkrecruiting.com

    Domain Name: teleworkrecruiting.com

    Created on…………..: 24-nov-2000
    Expires on…………..: 2015-11-24

    Registrar Name……….: Domain-it!
    Registrar Whois………: whois.domainit.com
    Registrar Homepage……: http://www.domainit.com

    Registrant
    Pamela La Gioia
    Pamela La Gioia
    909 Barbourville Street
    Corbin, KY 40701
    US
    Phone: 606-526-8880
    Fax..:
    Email: pam@teleworkrecruiting.com

    Administrative Contact
    Pamela La Gioia
    Pamela La Gioia
    909 Barbourville Street
    Corbin, KY 40701
    US
    Phone: 606-526-8880
    Fax..:
    Email: pam@teleworkrecruiting.com

    Technical Contact
    Pamela La Gioia
    Pamela La Gioia
    909 Barbourville Street
    Corbin, KY 40701
    US
    Phone: 606-526-8880
    Fax..:
    Email: pam@teleworkrecruiting.com

    Domain name servers listed in order:
    NS.52601.COM
    NS2.52601.COM

    Accesses today: 1 / 20
    Network Whois record

    Queried rwhois.liquidweb.com with “67.225.165.30”…

    rwhois V-1.5:003eff:00 rwhois.liquidweb.com (by Network Solutions, Inc. V-1.5.7.4)
    network:Class-Name:network
    network:ID:NETBLK-HOSTINGCONNE.67.225.165.30/31
    network:Auth-Area:67.225.128.0/17
    network:Network-Name:HOSTINGCONNE-67.225.165.30
    network:IP-Network:67.225.165.30/31
    network:IP-Network-Block:67.225.165.30-67.225.165.31
    network:Organization;I:HOSTINGCONNE
    network:Org-Name:Hosting Connecticut LLC
    network:Street-Address:180 Rainbow Rd
    network:City:Windsor
    network:State:CT
    network:Postal-Code:06095
    network:Country-Code:US
    network:Tech-Contact;I:support@hostingct.com
    network:Abuse:abuse@sourcedns.com
    network:Created:20140512
    network:Updated:20140512
    network:Updated-By:admin@sourcedns.com

    network:Class-Name:network
    network:ID:NETBLK-SOURCEDNS.67.225.128.0/17
    network:Auth-Area:67.225.128.0/17
    network:Network-Name:SOURCEDNS-67.225.128.0
    network:IP-Network:67.225.128.0/17
    network:IP-Network-Block:67.225.128.0 – 67.225.255.255
    network:Organization;I:SOURCEDNS
    network:Org-Name:SourceDNS
    network:Street-Address:4210 Creyts Rd.
    network:City:Lansing
    network:State:MI
    network:Postal-Code:48917
    network:Country-Code:US
    network:Tech-Contact;I:admin@sourcedns.com
    network:Created:20071126
    network:Updated:20071126
    network:Updated-By:admin@sourcedns.com
    network:Abuse:abuse@sourcedns.com

    %ok

    Queried whois.arin.net with “n 67.225.165.30″…

    NetRange: 67.225.128.0 – 67.225.255.255
    CIDR: 67.225.128.0/17
    OriginAS: AS32244
    NetName: LIQUIDWEB-8
    NetHandle: NET-67-225-128-0-1
    Parent: NET-67-0-0-0-0
    NetType: Direct Allocation
    RegDate: 2007-11-26
    Updated: 2012-02-24
    Ref: http://whois.arin.net/rest/net/NET-67-225-128-0-1

    OrgName: Liquid Web, Inc.
    OrgId: LQWB
    Address: 4210 Creyts Rd.
    City: Lansing
    StateProv: MI
    PostalCode: 48917
    Country: US
    RegDate: 2001-07-20
    Updated: 2011-07-18
    Ref: http://whois.arin.net/rest/org/LQWB

    ReferralServer: rwhois://rwhois.liquidweb.com:4321

    OrgAbuseHandle: ABUSE551-ARIN
    OrgAbuseName: Abuse
    OrgAbusePhone: +1-800-580-4985
    OrgAbuseEmail: abuse@liquidweb.com
    OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE551-ARIN

    OrgTechHandle: IPADM47-ARIN
    OrgTechName: IP Administrator
    OrgTechPhone: +1-800-580-4985
    OrgTechEmail: ipadmin@liquidweb.com
    OrgTechRef: http://whois.arin.net/rest/poc/IPADM47-ARIN

    DNS records
    name class type data time to live
    teleworkrecruiting.com IN TXT v=spf1 ip4:67.225.165.30 a mx ?all 300s (00:05:00)
    teleworkrecruiting.com IN MX
    preference: 0
    exchange: teleworkrecruiting.com
    300s (00:05:00)
    teleworkrecruiting.com IN SOA
    server: ns.52601.com
    email: support@hostingct.com
    serial: 2014050801
    refresh: 86400
    retry: 7200
    expire: 3600000
    minimum ttl: 86400
    86400s (1.00:00:00)
    teleworkrecruiting.com IN NS ns2.52601.com 86400s (1.00:00:00)
    teleworkrecruiting.com IN NS ns.52601.com 86400s (1.00:00:00)
    teleworkrecruiting.com IN A 67.225.165.30 300s (00:05:00)
    30.165.225.67.in-addr.arpa IN PTR host2.52601.com 43200s (12:00:00)
    165.225.67.in-addr.arpa IN SOA
    server: ns.sourcedns.com
    email: admin@sourcedns.com
    serial: 2013021460
    refresh: 3600
    retry: 3600
    expire: 3600
    minimum ttl: 3600
    43200s (12:00:00)
    165.225.67.in-addr.arpa IN RRSIG
    type covered: NSEC (47)
    algorithm: RSA/SHA-1 (5)
    labels: 5
    original ttl: 10800 (03:00:00)
    signature expiration: 2014-05-22 12:00:42Z
    signature inception: 2014-05-12 12:00:42Z
    key tag: 63803
    signer’s name: 67.in-addr.arpa
    signature:
    (1024 bits)

    AD0898B8CAE17201A52F4B62C1C6408A
    B1004A11BDD964E873BEFD9AD1A00DCE
    400593455B55179ED319B8B41C383B6C
    88610A0F6221D82CC0BF6B66CA22178D
    19294EFD2AFC419FF6D1FB3E4BA2B879
    F6CF0FAC77A8DE08C825BE856B7DA451
    3210970753174407D73E810156DC66D8
    8D0AA10AB8C61CC89D388849757FC087

    10800s (03:00:00)
    165.225.67.in-addr.arpa IN NSEC
    next domain name: 166.225.67.in-addr.arpa
    record types: NS RRSIG NSEC
    10800s (03:00:00)
    165.225.67.in-addr.arpa IN NS ns1.sourcedns.com 43200s (12:00:00)
    165.225.67.in-addr.arpa IN NS ns.sourcedns.com 43200s (12:00:00)

    — end —
    URL for this output | return to CentralOps.net,

Leave A Comment

Fill in your details below or click an icon to log in:

Gravatar
WordPress.com Logo

You are commenting using your WordPress.com account. ( Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. ( Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. ( Log Out /  Change )

Cancel

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.