We don't know of a single legitimate employer who'd be stupid enough to shorten the URL to their site in an email to a prospective job candidate. We also noticed the email was relayed through several mail servers before reaching its destination, something that normally shouldn't happen.

We've filed it under mystery phish because we don't know what they mean by "processing" emails. A real employer would have sent a proper list of responsibilities along with the skills that would be required, and would have given you a link to their corporate Web site, which you'd be able to research before visiting to ensure they're who they say they are.

We suspect this will lead to money muling, which will lead to you getting in all kinds of trouble financially and with law enforcement, so we'd caution against it. Looks to us like it was sent in bulk, and since there's no opt-out (not that you could trust it if there was), it's spam, and the sender is in violation of the CAN-SPAM act.

Instead of clicking the URL, have a look at our PDF dump of the site, but don't click any of the links you find inside, since we don't want you to compromise yourself. As you'll see, they continue to be ambiguous about who THEY are (we couldn't find a single reference to a company name), so we don't think you should go giving them YOUR info or let them deposit anything to your PayPal account. They're strangers. Don't play with them!

Message text:
From: Jennifer Jones <july @ padatu10.co.cc>
To: [removed]
Sent: Fri, July 2, 2010 7:29:11 PM
Subject: IF YOU CAN PROCESS 30 EMAILS PER DAY, THEN YOU'LL EARN $750 EVERYDAY!

Below, You Can Earn Online!!!

How many emails can you process a day?
If you can process 30 a day you'll
 
earn $750.00 everyday straight in your Paypal Account!
You Are Guarant'eedto be Paid Instantly for Each Email You Process!
This is an easy,profitable opp0rtunity to earn $1000's every week.

SPECIAL PROMO: 50% DISCOUNT ON THE FIRST 50 SUBSCRIBER
CLICK Below ON THE PROMO CODE TO AVAIL 50LESS
 
This is your Link:
http :// p1.fr/maker123

Headers:
From Jennifer Jones Sat Jul  3 00:29:11 2010
X-Apparently-To: [removed] via 209.191.69.34; Fri, 02 Jul 2010 17:29:16 -0700
Return-Path: <july @ padatu10.co.cc>
X-YahooFilteredBulk: 67.18.22.81
Received-SPF: pass (mta1073.mail.mud.yahoo.com: domain of july @ padatu10.co.cc
designates 67.18.22.81 as permitted sender)
X-Originating-IP: [67.18.22.81]
Authentication-Results: mta1073.mail.mud.yahoo.com  from=padatu10.co.cc;
domainkeys=neutral (no sig);  from=padatu10.co.cc; dkim=neutral (no sig)
Received: from 127.0.0.1  (HELO gateway04.websitewelcome.com) (67.18.22.81)
  by mta1073.mail.mud.yahoo.com with SMTP; Fri, 02 Jul 2010 17:29:16 -0700
Received: (qmail 29794 invoked from network); 3 Jul 2010 00:36:23 -0000
Received: from gator1106.hostgator.com (174.120.188.66)
  by gateway04.websitewelcome.com with SMTP; 3 Jul 2010 00:36:23 -0000
Received: from [112.207.159.74] (port=58519 helo=padatu10.co.cc)
    by gator1106.hostgator.com with esmtpa (Exim 4.69)
    (envelope-from <july @ padatu10.co.cc>)
    id 1OUqbc-0007Qc-IA
    for [removed]; Fri, 02 Jul 2010 19:29:17 -0500
From: Jennifer Jones<july @ padatu10.co.cc>
To: [removed]
Subject: IF YOU CAN PROCESS 30 EMAILS PER DAY, THEN YOU'LL EARN $750 EVERYDAY!
Date: 03 Jul 2010 08:29:11 +0800
Message-ID: <20100703082829.B8FA4A28EE101E28 @ padatu10.co.cc>
X-AntiAbuse: Primary Hostname - gator1106.hostgator.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - padatu10.co.cc
Content-Length: 2238

Comments

Add New Search RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

---

Tag it: