recent bid-alot.com emailing spam

Scrub · #1 10-24-06, 01:43 AM

Quote:

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY TO
or May Have Applied For Is Fraudulent.
A LEGITIMATE COMPANY IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED
These job postings are an attempt to lure you into cashing counterfeit checks
and have you wire funds via Western Union or MoneyGram -
Essentially You Become A MoneyMule
MoneyMule - Explained
(Tips for Recognizing and Avoiding Fake Check Scams)Tips for Recognizing and Avoiding Fake Check Scams

We are happy to introduce our new project.

Our Online Bargain Association, Bid-alot.Inc has begun successful cooperation with Australian auction customers. Due to the importance and security measures required for the entire processes to be legitimate and successful, different Australian Financial institutions assist Bid-alot.Inc during the initial bargain
process.

Our international bargain association is very popular with those willing to sell or purchase from different parts of the world. That's when we are happy to offer different vacancies to those interested in becoming a part of the Online Bargain Company.

Available jobs:
Client manager
Schedule: 8 hours per day.
Salary: 2500 AUD per month.
Requirements: PC, mobile phone, online access.

Job description:
Assist customers from Your regions with full time Internet and personal support.

Remote manager
Schedule: 3-5 hours per day.
Salary: From 4000 AUD per month + commissions for successful completion of weekly duties with no delays.

Requirements: online access,
mobile and land line number,
bank account with one of Australian Banks to process initial funds transfers from Australian clients to worldwide customers of Bid-alot.Inc

Job description:
Assist customers from Your region with funds processing from the initial bidder to the seller himself. Become the initial third party between the seller and the bidder from Australian region.

Carting manager
Schedule: 6-10 hours per day.
Salary: 3000 AUD per month.
Requirements: car, online access, cell and home phone, punctuality and responsibility.
Job description: Transport the initial wares to the post office and International postal service companies. Maximum carrying capacity of 3 tons.

Obligatory for everyone applying:
Age limit from 18y.o to 65.y.o
Check email correspondence daily
Contact customers from one's region by the email and by the phone

Benefits:
1. Individual career growth variety
2. Work successfully and get weekly commission besides monthly salary
for outstanding performance of one's duties.

If You wish to apply for any of the positions above or would like to
get more info, please confirm Your interest and reply to this email.

Sincerely Yours

Victor Moritz
Senior Staff manager

ideceive · #2 10-25-06, 07:50 AM

I've seen Bid-alot spam too. Please be aware that there is a real "Bid-alot" company, and these goons are just using its name as a cover story. In my experience so far, these scammers keep supplying an invalid reply-to address, so they can't be terribly effective.

Also, note how these guys advertise three positions: "client manager", "remote manager", and "carting manager". The "remote manager" offers the highest wage for the smallest effort. It's the bait: the other two jobs are just decoys. And yes, it's a blatant money mule job.

ideceive · #3 10-30-06, 04:26 PM

I have three copies, but I can't necessarily share them because they were user-contributed rather than delivered to my own address. Anonymity is important because many spammers are vindictive, and don't like their scams exposed. However, I can give you a useful piece of information: the original IP source was the same for all three instances. Time zones have been converted to UTC.

Received: from duron (20178031078.user.veloxzone.com.br [201.78.31.78])
by [redacted] with SMTP id k9NNxe324752
for <[redacted]>; Tue, 23 Oct 2006 23:59:40 -0000 (UTC)

Received: from duron (20178031078.user.veloxzone.com.br [201.78.31.78])
by [redacted] with SMTP id k9NNxOUL011974
for <[redacted]>; Tue, 23 Oct 2006 23:59:26 -0000 (UTC)

Received: from duron (20178031078.user.veloxzone.com.br [201.78.31.78])
by [redacted] with SMTP id k9O06c329161
for <[redacted]>; Tue, 24 Oct 2006 00:06:39 -0000 (UTC)

Bid-Alot-Admin · #4 02-05-08, 11:19 PM

The last 2 days has seen a spammer sending out fraudulent emails like the one below.

As CEO of Bid-Alot.com I assure you we do not send out spam emails like this. Please disregard the email as it is fraudulent. We will never send out email like this.

The email does not originate from our servers.

thank you.

here is the Fraudulant email below.

Quote:

Australian Internet Auction Organisation is looking for new employees in Australian Region.

Our Internet Auction Community unites buyers and sellers not only from Australian region, but also from Europe and North America. Not only have we given peace of mind to everyone in that they are safe in the knowledge of legitimate auction sellers and bidders, but also offer best possible auction purchase and reselling opportunities to all of our members.

We are an Independent Department of Bid-Alot.Int
(Bid-Alot Online Auction) and generally cooperate with Europe and North-America based buyers/sellers.

We offer you the vacancy of a bidding manager.

The vacancy includes both part and full-time employment.

You do not need to sell or purchase anything online. You do not need to invest anything as well.

Bidding manager processes auction payments from buyers to sellers and vice-versa. Bidding manager also transports auction merchandise to nearest post office and ships the package to its final destination in Europe or North America.

A monthly salary of 4000 AUD is transferred on a regular basis to bidding manager?s bank account + you get 4% from every auction deal you participate in.

Our Organization makes the entire Internet Auction process more flexible for people from different regions.

If you are interested and would like to get more info, please reply back to this email margaret.workinaustralia@yahoo.com.au

Thank you for your time

Sincerely,
Ronald Mandstein

Bid-Alot-Admin · #5 02-06-08, 04:11 PM

another one.

Quote:

Your reply is most appreciated.

I really don't know what happened as well.

Anyway, thank you very much for getting back to us.

We are an Independent Department of Bid-Alot.Int
(Bid-Alot Online Auction) in Europe and North America.
Our Customer Support Centre is in Rapid City, Michigan, US and most of our non-Australia based customers get maximum support and assistance during their Internet Auction deals with Bid-Alot.Int Australian buyers/sellers.

Our goal is to guarantee that most of the auction deals between international buyers/sellers of our Online Community are processed securely.

Due to an increasing number of illegal deals on the Internet today, our Payment Processing Department is looking for motivated applicants in Australia ready to guarantee safety of wares and payment delivery to our abroad customers.

Legitimate purchase and reselling opportunities have been among our top priorities from the very beginning of our work.

"Bidding manager" vacancy is a part-time employment during the first 2 weeks of our cooperation. If the applicant succeeds in completing one's duties successfully, it is possible to start a full-time employment immediately after the first 2 weeks (a 14-days trial period).
Unlike other Companies with free of charge trial periods, we pay fixed salary of 4000/2 AUD even during the first 2 weeks of our collaboration as well.

4000 AUD per month salary:

Salary is wired transferred into bidding manager's bank account in the end of every working month or in the end of every working period. Salary is paid in Australian currency.

Duties and Commission:

An additional 4% of commission is paid for every successful auction deal bidding manager participates in.
Bidding manager receives and forwards payments from buyers to sellers.
Bidding manager receives and forwards auction merchandise from sellers to buyers.
Bidding manager regularly visits the bank, local post office and sometimes meets Bid-Alot.Int Australia-based customers in person.

We also arrange regular meetings of our employees from every particular region once in 2 months and that's when the bidding managers get together to discuss their work, Internet auction innovations and etc.

It is the duty of a Bidding manager after the initial merchandise/payment receipt, to deliver/ship/transfer it to its final destination in Europe or North America with no holds and delays. Bidding manager keeps in touch with one of our assisting managers from Customer Support Centre (personally/by phone/by email) and will follow his instructions after bidding manager receives the merchandise/payment.

Bidding manager also works together with one of our senior bidding managers in your region after the first 30 days of our cooperation. Personal meetings are obligatory.

Vacancy status:

Available from February 2008. 27 more employees needed.
Vacancy is available for Australian residents only

Work schedule:

Weekly employment of 5-15 hours.

Promotion opportunity:

Apply for a full-time employment after first 14 days of successful cooperation.

Requirements:

PC either at home or at work, primary and secondary phone numbers (home and mobile, work), account in any financial institution/Bank

Please reply if you are interested in the vacancy and would like to receive more info

Send your resume or CV (if you have one) as well.
We will reply to you as soon as possible

Thank You very much for your time and attention

Sincerely,
Recruiting chief manager
Ronald Mandstein

Bid-Alot-Admin · #6 02-07-08, 08:40 PM

some more info

Quote:

Return-Path: <starfire@iinet.net.au>
Received: from whois.whoisguard.com (mail.whoisguard.com [69.72.244.98])
by mail18.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id m181Ma1M002261
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <removed-my-email>; Fri, 8 Feb 2008 12:22:39 +1100
Received: from [208.116.62.210] (helo=mailfoundry1.namecheaphosting.com)
by whois.whoisguard.com with esmtp (Exim 4.63)
(envelope-from <starfire@iinet.net.au>)
id 1JNHvx-0000jM-5i
for cc0f782fed7240498a45bbbc64a8abd1.protect@whoisguard.com; Thu, 07 Feb 2008 20:21:41 -0500
X-MailFoundry: spam
X-Rule-ID: 47a775be0018 (1202156990.24)
X-Envelope-From: starfire@iinet.net.au
X-Envelope-To: cc0f782fed7240498a45bbbc64a8abd1.protect@whoisguard.com
Received: From outbound.icp-qv1-irony-out4.iinet.net.au (203.59.1.150) by mailfoundry1.namecheaphosting.com (MAILFOUNDRY) id MDafdtXZEdy0rAAw for cc0f782fed7240498a45bbbc64a8abd1.protect@whoisguard.com; Fri, 8 Feb 2008 00:02:55 -0000 (GMT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhPuAJk9q0fSVC5q/2dsb2JhbAAIBIIvNooWhD4BPoRilUQ
X-IronPort-AV: E=Sophos;i="4.25,318,1199631600";
d="scan'208,217";a="177971675"
Received: from unknown (HELO [192.168.1.2]) ([210.84.46.106])
by outbound.icp-qv1-irony-out4.iinet.net.au with ESMTP; 08 Feb 2008 10:22:19 +0900
Message-ID: <47ABAEB7.9050105@iinet.net.au>
Date: Fri, 08 Feb 2008 12:21:59 +1100
From: Scott McLauchlan <starfire@iinet.net.au>
User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
MIME-Version: 1.0
To: cc0f782fed7240498a45bbbc64a8abd1.protect@whoisguard.com
CC: webmaster@bid-alot.com, contact@bid-alot.com
Subject: Great Deals
Content-Type: multipart/alternative;
boundary="------------070607090609040600040807"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - whois.whoisguard.com
X-AntiAbuse: Original Domain - whoisguard.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - iinet.net.au

Scott McLauchlan · #7 05-07-08, 02:38 AM

Quote:

Originally Posted by Bid-Alot-Admin

some more info

Actually, in this case I sent the email that you've quoted the header from. I just googled my own name and found this thread with my email header displayed to the whole world.

The email was sent to you to inform you that someone was claiming to be you and sending out spam in your name (assuming it wasn't actually Bid-a-lot doing the spamming). I didn't annotate it because I thought it would be obvious and to be honest I don't have the time to waste on spam. I sent it to "abuse@yahoo.com" (which is where my bid-a-lot spam was served from) and also back to the people who seemed to send it (webmaster@bid-alot.com, contact@bid-alot.com).

Incidentally, I remember this one quite well. I traced back details of Bid-a-lot from google -> the shonky looking website (www.bid-alot.com.au (server's down now, but was similar or identical to www.bid-alot.com; no physical address, "contact form" instead of email address, etc) -> WHOIS (shows: AUSSIECOMMUNITY PTY LTD / ABN 68116167894 / Contact Person: Russell Bailey / email: music@optusnet.com.au ) -> Australian Business Register (which shows GARDENAUCTIONS, AUSSIEDVD, AUSSIEPANELBEATERS & MUSICAUCTIONS as alternate trading names all based in QLD 4170) -> Whitepages.com.au (which should be a trivial excercise from here) -> a physical address. I wanted to know if they were based somewhere nearby because it's not everyday that you get spam (apparently) coming from somewhere nearby. It was only after this investigation of public information provided by government websites (ASIC, Sensis, ABR, etc) and *before* I discovered Russel's personal email address ( music@optusnet.com.au ) was only available from whois.ausregistry.com.au that I sent the email. So I guess sometimes I really do have time to waste on spam

In any case, in trying to make a defence against spamming you've now published my email address and full email headers to the whole world which explains the dramatic uptake in spam in my account in the last couple of months. Thanks heaps.

LinkBacks (?) LinkBack to this Thread: http://www.scamfraudalert.com/f76/recent-bid-alot-com-emailing-spam-11737/
Posted By	For	Type	Date
Spam Warning! - Forums	This thread	Refback	02-25-08 07:42 PM
Spam Warning! - Forums	This thread	Refback	02-16-08 03:41 PM

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread: