strategic-inc.net ~ premier-group-ltd.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

The following A records are set to 185.9.159.59:

  1. bestway-solutions.com
  2. bestway-solutions.net
  3. capital-business-systems.biz
  4. capitalbusiness-systems.com
  5. fbf-services.net
  6. fbf-services.org
  7. finacial-futures.net
  8. finmarint-ltd.net
  9. global-techsolution.biz
  10. global-techsolution.net
  11. it-genies-limited.com
  12. it-genies.net
  13. itprofessionals-group.com
  14. leveauxgroupinc.biz
  15. mabcomuk.com
  16. personaltouch-us.com
  17. personaltouch-us.net
  18. premier-group-ltd.com
  19. premier-group-ltd.org
  20. transaction-innovations.net
  21. transaction-innovations.org
  22. us-capital-business.net
  23. strategic-inc.net
  24. stroutsourcing.biz
  25. tradeglobe-ltd.biz
  26. interprolimited.biz

Financial Agent Position ~ support@olivesgreen.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Email header analysis report
All valid IP Addresses found in the header.
Ip Address 3rd Party Info Provider City Flag Country
* 65.55.111.72 Check 65.55.111.72 at Senderbase.org Check 65.55.111.72 at Reputationauthority.org Microsoft Hosting Redmond United States
14.05.15.07 Check 14.05.15.07 at Senderbase.org Check 14.05.15.07 at Reputationauthority.org n/a n/a
65.55.111.100 Check 65.55.111.100 at Senderbase.org Check 65.55.111.100 at Reputationauthority.org Microsoft Hosting Redmond United States

*Probable originating IP address

Delivered-To: scamFRAUDalert
Received: by 10.216.180.198 with SMTP id j48csp341352wem;
Thu, 15 May 2014 07:38:33 -0700 (PDT)
X-Received: by 10.68.200.10 with SMTP id jo10mr12686179pbc.143.1400164712722;
Thu, 15 May 2014 07:38:32 -0700 (PDT)
Return-Path: <gary.benton@outlook.com>
Received: from blu0-omc2-s25.blu0.hotmail.com (blu0-omc2-s25.blu0.hotmail.com. [65.55.111.100])
by mx.google.com with ESMTP id bc5si2765128pbb.461.2014.05.15.07.38.32
for ;
Thu, 15 May 2014 07:38:32 -0700 (PDT)
Received-SPF: pass (google.com: domain of gary.benton@outlook.com designates 65.55.111.100 as permitted sender) client-ip=65.55.111.100;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of gary.benton@outlook.com designates 65.55.111.100 as permitted sender) smtp.mail=gary.benton@outlook.com
Received: from BLU185-W10 ([65.55.111.72]) by blu0-omc2-s25.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 15 May 2014 07:38:30 -0700
X-TMN: [Qq/dPNH62w/GGXwN2M6PswJQ0cAcf53f]
X-Originating-Email:gary.benton@outlook.com
Message-ID: <BLU185-W1045822EFBA89AB2A26F12E3360@phx.gbl>
Return-Path: gary.benton@outlook.com
Content-Type: multipart/alternative;
boundary=”_3cf84f14-b71c-4d7d-81ea-f19f2cad3ae4_”
From: Green Olives – support@olivesgreen.com
Sender: <gary.benton@outlook.com>
To: “scamFRAUDalert
Subject: Re: Hello
Date: Thu, 15 May 2014 10:38:30 -0400
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 15 May 2014 14:38:30.0651 (UTC) FILETIME=[574C4CB0:01CF704B]

Dear scamFRAUDalert
We are glad to see you are interested in hearing more. The only position we currently have available is the Financial Agent position, a job that you can do from home, no previous experience need, low working hours and you can work full or part time.
Your duties will be to receive and process the payments coming from our clients via bank wire transfer.
You will receive a salary of $4,200 / month plus commissions and you can work from home, you don`t have to relocate.

If you are interested in taking the job or receiving more information please reply with your phone number and one of our agents will call you right away.

Sincerely,
Green Olives , 6710 Capitol St, Houston, TX 77011