From: Rock Cruit Management 3dhgubesch@hochrather.at
Reply-To: 3dhgubesch@hochrather.at
date 21 November 2011 18:03
subject Rock Zone Management: Your Job Application is Pending
Give the time of day [redacted]
Thank you for submitting your information for potential employment opportunities.
We look forward to reviewing your application,
but can not do so until you complete our internal application.
The pay range for available positions range from $35.77 per hour to $57.62 per hour.
Prior to begin able to be considered, you will first need you to formally apply.
Please go here to begin the process:
http://widg.me/VocOw
Also, the following perks are potentially available:
- Paid Time Off
- Health Benefits Package
- Higher than average salaries
- Tuition Reimbursement
- Extensive 401(k)program
Please take the time to follow the directions and complete the entire application process.
--------------------------------------------------------------------------------
Best Regards,
Rock Cruit Management
In this case, the email originated from 200.74.5.198 in Chile. A second sample was from 31.175.175.182 in Poland.
Clicking through the "widg.me" shortcut leads to a site called rockcruitmanagement.com which looks like a recruitment site at first glance, but in fact is just an entry doorway to a very dubious work-at-home scheme. The domain is WhoisGuard protected, but there are several other crappy sites also hosted on 216.38.13.210 of a similar theme.
A tip - if you get a spam email like this, forward it to the web hosts at abuse -at- gigenet.com and perhaps this will be shut down.
All the sites try to hide their identity, but we can trace them back through their Google Analytics ID of UA-1504952 and AdSense ID of pub-286423930919881 to websitedesignbrisbane.org ("Jetstream Web Design + SEO") in Brisbane, Australia. I haven't been able to trace who is behind this company, and in fact it seems doubtful that there is a company at all.. but still, this seems to be the origin of the spam. The registration details for that domain are:
Registrant ID:6050DF1BFA437FB2 Registrant Name:Jetstream Online Registrant Organization:Jetstream Registrant Street1:4/11 Emperor st Registrant Street2: Registrant Street3: Registrant City:Annerley Registrant State/Province:QL Registrant Postal Code:4103 Registrant Country:AU Registrant Phone:+61.431714098 Registrant Phone Ext.: Registrant FAX: Registrant FAX Ext.: Registrant Email:jetstream2@gmail.com
All the following domains are connected, most are work-at-home or survey sites that are deceptive in their pitch. I would recommend avoiding them.
123tickets.info
1insuranceauto.info
1insurancelife.info
2airticket.info
2airtickets.info
2freejb.info
2freesw.info
2insuranceauto.info
2insurancelife.info
3insuranceauto.info
3insurancelife.info
4insuranceauto.info
4insurancelife.info
5insuranceauto.info
5insurancelife.info
6insuranceauto.info
7insuranceauto.info
adultversionyoutube.com
air340.info
air747.info
aircomp747.info
airdelta.info
airfly380.info
airfly747.info
auctionsbrisbane.com
bagsflyfree.info
bagsflysw.info
bornmarketer.com
buyyourhouse.com.au
claimair380.info
claimair747.info
claimairticket.info
claimfly.info
claimfly747.info
claimjetticket.info
claimprize.org
claimprizenow.com
claimprizenow.com
claimtickets.info
comp747.info
dailyhotlocal.com
dealcomparisons.com
delta747.info
deltafly.info
deltawin.info
facescams.com
fastwebs.com.au
fly380.info
flybagsfree.info
flyfreenow.info
flyfreesw.info
flyjet747.info
flysw.info
flyswtoday.info
flyticket747.info
flytickets747.info
godsofrain.com
gojb.info
gojblue.info
gojetblue.info
healthcrooks.com
homesaleconnect.com
ifly380.info
ifly747.info
ilovesw.info
ispycpv.com
ispyhq.com
ispyppv.com
jb747.info
jettickets.info
locallunchbreak.com
mydoorhandles.com
myebizprofits.com
myusgrant.com
news8daily.info
news9daily.info
newsdailyreport.com
newsdailyreport.info
officialdeals.info
officialpromos.info
officialrooibostea.com
outsourcing.cm
perfectposturenow.com
rockcrownmanagement.com
rockcruitmanagement.com
rockcruitmanagement.com
rockdimemanagement.com
rockfacemanagement.com
rockfishmanagement.com
rockgrademanagement.com
rockgradereview.com
rockgrandmanagement.com
rockgroupmanagement.com
rockheartmanagement.com
rockhopemanagement.com
rockhousemanagement.com
rockkingmanagement.com
rockmountmanagement.com
rockmountreview.com
rockroundmanagement.com
rockshiftmanagement.com
rockshoremanagement.com
rocksmithmanagement.com
rocktapmanagement.com
rocktowermanagement.com
rockviewmanagement.com
rockworthmanagement.com
rockzonemanagement.com
shippingcontaineraustralia.com
subwayrocks.info
swfly.info
swflyfree.info
swflyfree.info
swisgreat.info
swrocks.info
termitecontrolbrisbane.com
ticket747.info
tickets365.info
tickets380.info
tickets747.info
top3workfromhome.com
torrent4cash.com
tpass.info
tripsreservation.info
turbopottytraining.info
turbotoilettraining.com
utube-com.com
utubevideoclip.net
utube-videos.org
utubevideosite.com
utubezz.com
vacationinus.info
websitedesignbrisbane.org
windelta.info
winflyfree.info
winflytickets.info
winswfree.info
winticketsnow.info
wu-longforlife.com
zbuyerhomes.com
7 comments:
Thanks a lot. Yours was the information i´ve been looking for.
In my case the mail seemed to originate from a swiss company.
Since I am german the Mail started with "Hail! Frank" (witty...).
But here is the difference to all those other mail-bastards:
They did call my yesterday in advance to ask stupid questions!
That's an new one, isn't it?
Soundquality was pathetic. Where did you write they come from? Peru?
@Schollescholle they are Australian as far as I can tell, but in the sample I had the email came from Chile. Could have been a spam bot though.
Contry-Code was 001, that would be
north-america. But I wouldn't trust my phone with that, because it sometimes doesn't display properly.
It's a residential address, and the phone number provided is a mobile phone number. Tempting to find out if the number is legit.
I have reported this to the Australian Government, although because I have not been a victim and there is no clear indication that the Brisbane group is behind the activity (if you look at their website it doesn't even work properly and has a copyright date from four years ago) I don't think it is a police matter, so I have not bothered reporting it to the centralised online fraud squad.
I am also being inundated with these emails, I have forwarded to The ACMA, you can also forward scam texts to these people. Here is the website for anyone interested www.acma.gov.au. If enough people forward we might at least stop this one coming.
Thanks for this info when it asked me for my credit report and to email it it was too suspicious then when I called the number it went to google voice.
I got this email, except this was my list of benefits:
- Paid Time Off
- Health Benefits Package
- Higher than average wage
- Hi, Bob, I was working under pressure trying to cope with stress every day for over 10 years. So that’s when my problems in bed began. Then I found this link and my life started changing for the better. My wife is very happy too now and we’ve been married for 15 years already! Tom Reimbursement
- Full 401(k)program
Post a Comment