Here's another moron who thinks by doing certain things in the job offer he'll convince you it's real. For example:

1.  He uses the name David O'Brien and pretends to be from the UK. He really wants you to believe he's really from there.

2.  He claims to be the CEO but spells his company name with a typo (missing the 'F' in Fabrics). He wants you to believe that you're important enough that he CEO himself is reaching out. But he can't properly spell the company name he supposedly created when recruiting?

3.  He claims he needs help in your region to cash payments and wire transfer all but a commission back to them. He's hoping you're too stupid to realize that companies in the UK are perfectly able to cash funds drawn on banks in North America.

4.  He offers a Live.com email address for you to reply about the job. No Web site address, no corporate email address. The phone number could very well be spoofed.

5.  They decided to be a fabrics company. We see a lot of fabric company spoofs. Search the word 'fabrics' on PhishBucket and you'll see what we mean.

We really could go on, but why bother? Obviously this person is acting in his/her own best interest and is perfectly ready to take from you to make that happen. In a way you should feel sorry for this scammer, who clearly got caught up in something illegal and probably doesn't know how to get out. If only phishers would get out of cybercrime and learn how to run legitimate companies and create real jobs. Bummer.

Message text:
Mend Fabrics Limited
25 Charter Street ,
Leicester , United kingdom
LE1 3UD
Tel: +44 (703) 193 0785

Hello ,

My name is David O'Brien i am the c.e.o to Mend abrics Limited. Mend Fabrics
is a textile agency established 1990 by David and Jeanne O'Brien
specializing in fashion fabrics for clothing manufactures and many designer
ranges. Our office is located in SW London , We are In search of a
Representative in Your region to Work for us as a Part Time worker and this
will not affect your current state of work.

The main scope of work for this Representative will be to accept payment via
Check or Wire Transfer and then deduct His/Her 10% working allowance and a
extra 5% for effectiveness and send down the rest to our Head Office In the
United Kingdom. If you are Interested, kindly get back to me with your full
name, phone number and residential address  .

Thanks

Please note that it wouldn't cost you anything to receive payment on our
company's behalf.Please reply only if you will like to work from home
part-time and get paid weekly without leaving or it affecting your present
job(PAY IS GOOD)

Kindly send your replies to (   mendfabrics2 @ live.com   )

Please Respond.
Regards,
David O'Brien
+44 (703) 193 0785

Headers:
Return-Path: <mendfabrics @ hr.com>
Received: from smtp-out3.blueyonder.co.uk
(smtp-out3.blueyonder.co.uk[195.188.213.6])
        by mx.google.com with ESMTP id 6si7968235fxm.38.2009.06.16.03.31.46;
        Tue, 16 Jun 2009 03:31:47 -0700 (PDT)
Received-SPF: fail (google.com: domain of mendfabrics @ hr.com does not
designate 195.188.213.6 as permitted sender) client-ip=195.188.213.6;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of
mendfabrics @ hr.com does not designate 195.188.213.6 as permitted sender)
smtp.mail=mendfabrics @ hr.com
Message-Id: <4a377493.060db80a.4048.2e7aSMTPIN_ADDED @ mx.google.com>
Received: from [172.23.170.138] (helo=anti-virus01-09)
 by smtp-out3.blueyonder.co.uk with smtp (Exim 4.52)
 id 1MGVx7-0005J7-Gm; Tue, 16 Jun 2009 11:31:41 +0100
Received: from [66.161.159.130] (helo=User)
 by asmtp-out6.blueyonder.co.uk with esmtpa (Exim 4.52)
 id 1MGVx3-0006k2-LF; Tue, 16 Jun 2009 11:31:38 +0100
Reply-To: <mendfabrics3 @ live.com>
From: "Mend Fabrics Limited"<mendfabrics @ hr.com>
Subject: Stress Free Job-Opportunity
Date: Tue, 16 Jun 2009 06:31:37 -0400
MIME-Version: 1.0
Content-Type: text/plain;
 charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Comments

Add New Search RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

---

Tag it: