From: Rock Cruit Management email@example.com
date 21 November 2011 18:03
subject Rock Zone Management: Your Job Application is Pending
Give the time of day [redacted]
Thank you for submitting your information for potential employment opportunities.
We look forward to reviewing your application,
but can not do so until you complete our internal application.
The pay range for available positions range from $35.77 per hour to $57.62 per hour.
Prior to begin able to be considered, you will first need you to formally apply.
Please go here to begin the process:
Also, the following perks are potentially available:
- Paid Time Off
- Health Benefits Package
- Higher than average salaries
- Tuition Reimbursement
- Extensive 401(k)program
Please take the time to follow the directions and complete the entire application process.
Rock Cruit Management
In this case, the email originated from 220.127.116.11 in Chile. A second sample was from 18.104.22.168 in Poland.
Clicking through the "widg.me" shortcut leads to a site called rockcruitmanagement.com which looks like a recruitment site at first glance, but in fact is just an entry doorway to a very dubious work-at-home scheme. The domain is WhoisGuard protected, but there are several other crappy sites also hosted on 22.214.171.124 of a similar theme.
A tip - if you get a spam email like this, forward it to the web hosts at abuse -at- gigenet.com and perhaps this will be shut down.
All the sites try to hide their identity, but we can trace them back through their Google Analytics ID of UA-1504952 and AdSense ID of pub-286423930919881 to websitedesignbrisbane.org ("Jetstream Web Design + SEO") in Brisbane, Australia. I haven't been able to trace who is behind this company, and in fact it seems doubtful that there is a company at all.. but still, this seems to be the origin of the spam. The registration details for that domain are:
Registrant ID:6050DF1BFA437FB2 Registrant Name:Jetstream Online Registrant Organization:Jetstream Registrant Street1:4/11 Emperor st Registrant Street2: Registrant Street3: Registrant City:Annerley Registrant State/Province:QL Registrant Postal Code:4103 Registrant Country:AU Registrant Phone:+61.431714098 Registrant Phone Ext.: Registrant FAX: Registrant FAX Ext.: Registrant Email:firstname.lastname@example.org
All the following domains are connected, most are work-at-home or survey sites that are deceptive in their pitch. I would recommend avoiding them.