Joe Wein
Fighting spam and scams
on the Internet

Home / Blog / About us
Spam
419/Nigeria
Online fraud
jwSpamSpy
Contact

Email Spam Filter:
jwSpamSpy
Try it for free!

Google
 

Fraudulent Job offer: lionder.org

The lionder.org job offer is part of a series of scams designed to trick third parties into assisting the criminal laundering of stolen money. See more about this type of scam here:

Here is the message:
Good day, my name is Evaldas Vytautas.
I'm Sales Manager of Lionder Web Design Agency. We are situated in Vilnius, Lithuania. Lionder Web Design Agency is pleased to offer you the position of Exchange Manager for our organization. We are excited about the potential that you bring to our company. We work with corporate clients and some of them prefer to do wire transfers, however we cannot receive international wire transfers because of heavy taxes. Tax for international wire transfer is 25% In Lithuania. There is no sense for us to work in such a way, however we don't want to lose our clients. You need to have Paypal/bank account. System is completely automated. You will work only 1-2 hours a day, receive, process payments from our clients through your Paypal/bank account. Report about all new payments, act only within the limits of law - earn minimum $1500-$2000 per month.
Your salary will be 5-15% from every processed amount (you begin fr om5%.
To join the minimum requirements include :
-MINIMUM QUALIFICATIONS (Skills, Knowledge, Ability, etc.)
-The minimum qualifications are diploma or equivalent.
-Must be able to multi-task and have good communication skills.
-Knowledge of MS Word and other basic computer programs.
-This being a new field there is NO experience needed.
HOW TO APPLY:
If you would like to pursue this opportunity simply send Your Resume(CV) to resume@lionder.net OR Download Job Application Form (www.lionder.net/Job_Application_Form.doc), fill it in and send us to resume@lionder.net (No phone calls please. Callers will not be considered for the position).We will respond promptly.
Please don't feel shy to contact our Online Support and ask any questions you will have:
Contact Name: Julie Jakulyte
ICQ- 257235542,
AOL IM Screen Name- Jakulyte,
Yahoo! ID: JJakuJ,
MSN- Jakulyte@hotmail.com (not e-mail).
No agencies, please.
Lionder Web Design Agency is an equal opportunity/affirmative action employer.
For more information about who we are and what we do, please visit our webiste --- www.lionder.net It is necessary that we know your decision by December 1st, 2004, so that we can plan accordingly.
Regards,
Evaldas Vytautas
Lionder Web Design Agency

Here is the full message source with headers:

Received: from [61.109.49.221] (helo=61.109.49.221)
by #####.###########.### with esmtp (Exim 4.43)
id 1CNrPx-0007aZ-Kt
for #########@############.###; Sat, 30 Oct 2004 13:29:11 +0200
Received: from unknown (HELO localhost) (127.0.0.1)
by localhost.efn.com with SMTP; Sat, 30 Oct 2004 11:35:34 +0000
Received: from 3.192.173.188 (3.192.173.188[3.192.173.188])
by 61.109.49.221 (IMP) with HTTP
for <#########@############.###>;
Message-ID: <5776931099136134@61.109.49.221>
From: "Bel" <uretug@dwgifts.com>
To: "Neville" <#########@############.###>
Subject: Job Offer
Date: Sat, 30 Oct 2004 11:35:34 +0000
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 3.2.2
X-Originating-IP: 3.192.173.188

<HTML><html>
<body>
<P>Good day, my name is Evaldas Vytautas. </P>
<P>I'm Sales Manager of Lionder Web Design Agency. <BR>We are situated in Vilnius, Lithuania. </P>
<P>Lionder Web Design Agency is pleased to offer you the position of Exchange Manager for our organization. We are excited about the potential that you bring to our company.</P>
<P>We work with corporate clients and some of them prefer to do wire transfers, however we cannot receive international wire transfers because of heavy taxes. Tax for international wire transfer is 25% In Lithuania. There is no sense for us to work in such a way, however we don't want to lose our clients.  You need to have Paypal/bank account. System is completely automated. You will work only 1-2 hours a day, receive, process payments<BR>from our clients through your Paypal/bank account. Report about all new payments, act only within the limits of law - earn minimum $1500-$2000 per month.</P>
<P>Your salary will be 5-15% from every processed amount (you begin from 5%).  </P>
<P>To join the minimum requirements include :</P>
<P>-MINIMUM QUALIFICATIONS (Skills, Knowledge, Ability, etc.)<BR>-The minimum qualifications are high school diploma or equivalent. <BR>-Must be able to multi-task and have good communication skills.<BR>-Knowledge of MS Word and other basic computer programs.<BR>-This being a new field there is NO experience needed.</P> <P>HOW TO APPLY:</P>
<P>If you would like to pursue this opportunity simply send Your Resume(CV) to <A href="mailto:resume@lionder.org">resume@lionder.org</A> OR Download Job Application Form (<A href="http://www.lionder.org/Job_Application_Form.doc">www.lionder.org/Job_Application_Form.doc</A>), fill it in and send us to <A href="mailto:resume@lionder.org">resume@lionder.org</A> (No phone calls please. Callers will not be considered for the position).</P> <P>We will respond promptly.</P>
<P>Please don't feel shy to contact our Online Support and ask any questions you will have:</P>
<P>Contact Name: Julie Jakulyte</P>
<P>ICQ- 257235542, </P>
<P>AOL IM Screen Name- Jakulyte, </P>
<P>Yahoo! ID: Jakulyte, </P>
<P>MSN- <A href="mailto:Jakulyte@hotmail.com">Jakulyte@hotmail.com</A>.</P>
<P>No agencies, please. </P>
<P>Lionder Web Design Agency is an equal opportunity/affirmative action employer.</P>
<P>For more information about who we are and what we do, please visit our webiste --- <A href="http://www.lionder.org">www.lionder.org</A></P>
<P>It is necessary that we know your decision by November 20, 2004, so that we can plan accordingly.</P>
<P>Regards,</P>
<P>Evaldas Vytautas</P>
<P>Lionder Web Design Agency</P><BR>
</body>
</html>
</HTML>

Notes:

  • Why is this job offer sent to a total stranger about whom the company knows nothing?
  • Why does a European company send its email from a computer in Korea?
         inetnum:      61.109.0.0 - 61.109.63.255
         netname:      HANVITINB-INFRA-KR
         descr: 	      Hanvitinb
         descr: 	      519-1,gojan-dong,ansan-city
         descr: 	      KYONGGI
         descr: 	      425-020
         country:      KR
  • Why is there no postal address, telephone number of fax number?
  • Both lionder.org and the domain lionder.com mentioned on the website were only created three days ago (2004-10-28).
  • If you send email to a Lithuanion web design company, you would expect the email to be picked via a provider in Lithuania, wouldn't you? Not in this case. According to our research, email communications with lionder.org involves an individual based in California. He or she may be British.

Lionder.org is a fraud!

This is a similar scam to the "Alpen-Antique GmbH" and "Plasma project, Inc." job scams.


WHOIS record for lionder.org

     Domain ID:D105059720-LROR
     Domain Name:LIONDER.ORG
     Created On:28-Oct-2004 18:52:03 UTC
     Expiration Date:28-Oct-2005 18:52:03 UTC
     Sponsoring Registrar:Omnis Network LLC (R101-LROR)
     Status:TRANSFER PROHIBITED
     Registrant ID:OMNIS-1098989522
     Registrant Name:Carol McQuilkin
     Registrant Organization:Lionder
     Registrant Street1:104 Hunters Court
     Registrant Street2:
     Registrant Street3:
     Registrant City:Crossett
     Registrant State/Province:ar
     Registrant Postal Code:71635
     Registrant Country:US
     Registrant Phone:+1.8703649725
     Registrant Phone Ext.:
     Registrant FAX:
     Registrant FAX Ext.:
     Registrant Email:josieian@samerica.com
     Admin ID:OMNIS-CM-1517
     Admin Name:Carol McQuilkin
     Admin Organization:Lionder
     Admin Street1:104 Hunters Court
     Admin Street2:
     Admin Street3:
     Admin City:Crossett
     Admin State/Province:ar
     Admin Postal Code:71635
     Admin Country:US
     Admin Phone:+1.8703649725
     Admin Phone Ext.:
     Admin FAX:
     Admin FAX Ext.:
     Admin Email:josieian@samerica.com
     Tech ID:OMNIS-ON-1
     Tech Name:Omnis Network
     Tech Organization:Omnis Network
     Tech Street1:3655 Torrance Blvd Suite 440
     Tech Street2:
     Tech Street3:
     Tech City:Torrance
     Tech State/Province:CA
     Tech Postal Code:90503
     Tech Country:US
     Tech Phone:+1.3103162744
     Tech Phone Ext.:
     Tech FAX:+1.3103164991
     Tech FAX Ext.:
     Tech Email:nicreg@omnis.com
     Name Server:NS1.OMNIS.COM
     Name Server:NS2.OMNIS.COM
     Name Server: 
     Name Server: 
     Name Server: 
     Name Server: 
     Name Server: 
     Name Server: 
     Name Server: 
     Name Server: 
     Name Server: 
     Name Server: 
     Name Server:


Anti-Spam Resources:
jwSpamSpy is our spam filter (free evaluation version available for download)
Anti-spam domain blacklist – list of domains that I refuse to receive mail from
Recent additions to domain blacklist (with whois details)
"419" scam sender/contact addresses ("Nigeria connection" address book)
DNS-based IP and domain name blacklists
IP address ranges
Dynamic IP addresses (700 KB!)
Name server / Registrar combinations
Free email providers
AOL dial-up address ranges and mail servers
How to trace senders of spam
Frequently asked questions (FAQ)
Lookup an IP address on blacklists (http://dnsbl.net.au/lookup/)

Clueless virus filters spam innocent third parties
Challenge and Response spam filters: A selfish idea for selfish times

ShareYourExperiences.com spammers
Smyrnagroup spammers (in German)
Kaplan College spam
Stock Price Manipulation Spam ("Pump & Dump")
What's the deal with "OEM software"?
'Phishing' for your wallet
Job spam for payment processors
Spam phone numbers ("diploma" spam, etc.)
"Joe job" information

Link exchange offer spam
Getting creative with spam
Link exchange spam: allcarpictures.com

Xenophobia, Spam and Viruses: The "German Spam" (Sober.H)
Sober.H – Racist German email spam spread by virus (in German)

"Joe job" against joewein.de
Porn spam: watchsound.com
Porn spam: hotsalza.com
Name servers used by spammers: joker.com
Rogue name servers: mediadreamland.com
Rogue name servers: airmaramba.biz
Rogue name servers: bonafidecash.com
Rogue name servers: maileasy.biz

Browser hijacking: heretofind.com

Computer Viruses