Sponsored by..

Wednesday, 21 April 2010

nettempsin.co.uk / NetTemps Inc scam

There are probably plenty of legitimate companies with names like "NetTemps Inc", but this money mule scam email soliciting replies to nettempsin.co.uk is not from one of them.

From: "Polly Richardson"
Subject: representatives wanted

Looking for a job? My name is Juliette Barnes, I am a recruiting manager of NetTemps Inc, a recruiting agency for direct-hire, contract, and freelance professionals within various professions.

Today I would like introduce some part-time and virtual office vacancies in the spheres of Advertising, Education, Engineering, Finance, Health care, Information technology, Media, Real estate and Transportation.

If you are interested to learn more about the jobs offered, please get back to me, providing your name and contact number.

We are eager to help you find a better job and improve your career!

If you have questions, please do not hesitate to e-mail me on:

c v @ n e t t e m p s i n . c o . u k [please delete spaces in the email address before sending it to us]

Yours sincerely,
Juliette Barnes
NetTemps Inc


==================================

Unusually, the mail server that deals with replies is multihomed:
  • 79.125.134.191 [ADSL subscriber, Macedonia]
  • 91.41.145.247 [Deutsche Telekom dial-up subscriber, Germany]
  • 83.132.68.62 [TVCABO cable modem, Portugal]
  • 87.116.150.117 [Broadband customer, Serbia]
  • 186.137.3.195 [Cablevision customer, Argentina]
Nameservers are ns1.santroperz.net (domain suspended by registrar for fraud) and ns1.seerdanee.com hosted on 204.12.237.52 at WholeSale Internet, Inc. in Kansas City.

In any case, this is just a Money Mule scam and it should be avoided.

2 comments:

Sue Booth said...

I work at Net-Temps, Inc. in the US. Unfortunately this is the second time in 3 months that they have used our name in the body of scam emails. We haven't been able to track them down to put a stop to it. We are a reputable job board, and have no connection with these scam artists.

Unknown said...

Conrad,

I don't know if you've heard or not but bobbear.co.uk is shutting down at the end of April due to health reasons.

He is looking for someone to pick up his domains and continue his work...or at least host his database. Just a thought, I have referred him to leads in your blog many times in the past, so I think you might be a good fit.