PhishBucket.org

Home

Suspicious/Fraudulent Offers

Mystery Phish

Ijonn

Tuesday, 23 October 2007

Date: Sat, 6 Oct 2007 05:45:03 +0800
From: JOBS
To: Victim
Subject: Open Positions

Dear Job Applicant:

Our clients have new job openings in your area and would like to know if you are still available.

If so, please let us know by clicking on the following link, or copy/paste the link into your web browser:

http :// www .ijonn.com/rc.html

-------------------------------------
Job Hunting Tips of The Day:
--------------------------------------

Switching jobs: What to do with your retirement plan

When changing jobs there are always a million things to take care of - dealing with your insurance, notifying people in your Rolodex and getting ready for some new challenges.

Although this can be a busy time, one important item that should be on your list is what to do with your employer-sponsored retirement plan.

While there are several things you can do with your plan, it is important to look at the benefits and consequences of each of your alternatives.
-------
If you have already found a job, you may click above link to stop your job hunting tips.

Header info:

Message and header copied below (Spamcop mentions it is a possible forgery
i.e., Parsing header:0: Received: from fatcow.com ([125.83.64.68]) by
mx.google.com with ESMTP id b23si4594843ana.2007.10.05.14.33.24; Fri, 05 Oct
2007 14:33:26 -0700 (PDT) No unique hostname found for source: 125.83.64.68
Possible forgery. Supposed receiving system not associated with any of your
mailhosts Will not trust anything beyond this header No source IP address
found, cannot proceed.)

  Delivered-To: victim
Return-Path:
Received: from fatcow.com ([125.83.64.68])
          by mx.google.com with ESMTP id [removed for privacy];
          Fri, 05 Oct 2007 14:33:26 -0700 (PDT)
Received-SPF: neutral (google.com: 125.83.64.68 is neither permitted nor
denied by best guess record for domain of jsa @ fatcow.com)
client-ip=125.83.64.68;
Authentication-Results: mx.google.com; spf=neutral (google.com: domain of
job2 @ ijonn.com does not designate 125.83.64.68 as permitted sender)
smtp.mail=jsa @ fatcow.com
Received: from fatcow.com (localhost.localdomain [127.0.0.1])
          by fatcow.com (8.12.8/8.12.8) with ESMTP id l95Lj3Ue017773
          for ; Sat, 6 Oct 2007 05:45:04 +0800
Received: (from jsa@localhost)
          by fatcow.com (8.12.8/8.12.8/Submit) id l95Lj3NN017771;
          Sat, 6 Oct 2007 05:45:03 +0800

Comments

Add New

RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

Tag it: