Wednesday, February 28, 2018

info@turkogcorp.com / Scammers Impersonating Turkish Oil and Gas Corporation / Fake Job Scam Fraud

This is a fake job scam! There is no job! Do not send documents or money! If you are not interviewed face to face, in person, the job offer is Always a scam! If you are asked to pay fees for a visa or work permit or anything else, the job offer is a scam! No real company or embassy ever uses a free email address! Read Why Most Emails Offering Jobs Are Scams! and Never Wire Money to Strangers! or click on the images below:
Image  Image
De: Turkish Oil and Gas Corporation <info@turkogcorp.com>
Enviado: martes, 27 de febrero de 2018 8:39 p. m.
Para:
Asunto: Appointment Letter



Attention:            

This is an affirmation that your qualifications and experiences which were found suitable for the requirements of Turkish Oil & Gas Corporation and after screening and verification we are happy to announce that you have emerged Successful and being appointed for the position stated in your appointment document.

On this note, we hereby congratulate you on the success and as such we have attached the Appointment Letter/Terms of Agreement that transcends any written document which you're required to forward the signed copy of your Agreement page as an attach mail.

We hereby instruct you to expedite all requirements as mentioned to enable you meet up before the deadline.

Print, Sign, scan and send back to us the appointment letter via email attachment as a proof of Acceptance.

Congratulations,

Dr. Mehmet Kadri
www.turkogcorp.tr.tn          
Human Resources Manager
Turkish Oil & Gas Corporation
Turkish Oil & Gas Corporation <gkarim@pec.org.pk>
Phone: +90 (534) 204 6247

Scam Domain 
    89.45.67.200
   Domain Name: TURKOGCORP.COM
   Registry Domain ID: 2220750241_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.namesilo.com
   Registrar URL: http://www.namesilo.com
   Updated Date: 2018-01-30T13:34:56Z
   Creation Date: 2018-01-30T13:34:56Z
   Registry Expiry Date: 2019-01-30T13:34:56Z
   Registrar: NameSilo, LLC
   Registrar IANA ID: 1479
   Registrar Abuse Contact Email: abuse@namesilo.com
   Registrar Abuse Contact Phone: +1.4805240066
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: NS1.QHOSTER.NET
   Name Server: NS2.QHOSTER.NET
   Name Server: NS3.QHOSTER.NET
   Name Server: NS4.QHOSTER.NET

terminal-m.ru (Russian oil scam)

For further information on the Russian Oil Scam, please Read the following:
http://419advancefeefraud.blogspot.com/2012/01/this-massive-scam-involves-setting-up.html
http://419advancefeefraud.blogspot.com/2012/05/identifying-obvious-scammers-and-their.html
http://www.gazprom-neft.com/company/contacts/feedback/warning/

The Port of Rotterdam Cyber Security posted details on the fake oil storage offers, Please Read...
https://ferm-rotterdam.nl/nl/nieuws/caution-storage-spoofing-part-2-too-good-be-true
http://ferm-rotterdam.nl/nl/blacklist

http://terminal-m.ru (Russian oil scam)
TERMINAL -M LIMITED
Booking Office: 125315, Chasovaya Street, Bldg. 19., Moscow City . Russia.:
  Contact Person:        1077746717267
  Telephone:        +7 (495) 688 4097
  Skype ID:         storage@terminal-m.ru
  E-mail:        storage@terminal-m.ru
  Fleet Operator:        Pavel Sidorov
  CEO / President:        Yuri Andreivich Phillipov
ROTTERDAM OFFICE
TERMINAL-M ROTTERDAM AGENCY TANK FARM-Zaltbommelstraat 10, 3089 JK Rotterdam, Netherlands.
Storage Tank GPS Location: , Vondelingenweg 2001, 3196 Vondelingenplaat, Netherlands.
  Telephone:        +31 10 892 9148
  Contact Person:        Xavier Fernandes
  Skype ID:        rotterdam@terminal-m.ru
  E-mail:         rotterdam@terminal-m.ru
HOUSTON OFFICE
 Telephone:        +1 832 450 0507
  Contact Person:        Thawani Anil K
  Skype ID:        houston@terminal-m.ru
  E-mail:         houston@terminal-m.ru
INN:        7714684126 

Impersonating this "terminated" machine tools company https://www.list-org.com/company/4784109 
As an example of what you could be dealing with, here are West African scammers that have been identified as doing oil scams from Russia:
Richard Addo (2010 president of The National Union of Ghanaian Students in Russia - NUGS-Russia) and Stanley Uzeh http://stop419scams.com/viewtopic.php?f=19&t=205
Mbega Steven Etienne, sentenced to 5 years in prison in Russia http://stop419scams.com/viewtopic.php?f=7&t=425
Adeniyi Akinnuwa http://stop419scams.com/viewtopic.php?f=20&t=175
Nelson Adesina Tosin and Olajumoke Mayaki http://stop419scams.com/viewtopic.php?f=20&t=180
Alain Blaise Atah Tcheguie http://stop419scams.com/viewtopic.php?f=7&t=250
Mbah Eugene Awah http://stop419scams.com/viewtopic.php?f=7&t=5
Chukwunagorom Richard Chijioke http://stop419scams.com/viewtopic.php?f=20&t=144
Dereak Graf Mela http://stop419scams.com/viewtopic.php?f=20&t=183
Otuvie Otuojano Patrick http://stop419scams.com/viewtopic.php?f=20&t=358
Momoh Jeffery Fidelis http://stop419scams.com/viewtopic.php?f=20&t=170
Adebola Olayeye http://stop419scams.com/viewtopic.php?f=20&t=147
Details: http://stop419scams.com/viewforum.php?f=8 and http://stop419scams.com/viewforum.php?f=20

212.192.193.2
domain:        TERMINAL-M.RU
nserver:       ns3.nic.ru.
nserver:       ns4.nic.ru.
nserver:       ns8.nic.ru.
state:         REGISTERED, DELEGATED, VERIFIED
org:           JSC "capitalsv"
registrar:     RU-CENTER-RU
admin-contact: https://www.nic.ru/whois
created:       2016-11-04T13:37:13Z
paid-till:     2018-11-04T13:37:13Z
free-date:     2018-12-05
source:        TCI

nik-ru.ru (Russian oil scam)

For further information on the Russian Oil Scam, please Read the following:
http://419advancefeefraud.blogspot.com/2012/01/this-massive-scam-involves-setting-up.html
http://419advancefeefraud.blogspot.com/2012/05/identifying-obvious-scammers-and-their.html
http://www.gazprom-neft.com/company/contacts/feedback/warning/

The Port of Rotterdam Cyber Security posted details on the fake oil storage offers, Please Read...
https://ferm-rotterdam.nl/nl/nieuws/caution-storage-spoofing-part-2-too-good-be-true
http://ferm-rotterdam.nl/nl/blacklist

http://www.nik-ru.ru (Russian oil scam)
Nizhnekamskaya Neftebaza, OOO *Fake*
23570, REPUBLIC TATARSTAN, NIZHNEKAMSK G, INDUSTRIAL AREA-2.
Phone: +7 (9267) 733 759
Fax: 31-98-96.
E-mail: nizhnekamskaya-neftebaza@nik-ru.ru 

This website had no content since it's registration in 2008 until current content was apparently uploaded 3 days ago.
As an example of what you could be dealing with, here are West African scammers that have been identified as doing oil scams from Russia:
Richard Addo (2010 president of The National Union of Ghanaian Students in Russia - NUGS-Russia) and Stanley Uzeh http://stop419scams.com/viewtopic.php?f=19&t=205
Mbega Steven Etienne, sentenced to 5 years in prison in Russia http://stop419scams.com/viewtopic.php?f=7&t=425
Adeniyi Akinnuwa http://stop419scams.com/viewtopic.php?f=20&t=175
Nelson Adesina Tosin and Olajumoke Mayaki http://stop419scams.com/viewtopic.php?f=20&t=180
Alain Blaise Atah Tcheguie http://stop419scams.com/viewtopic.php?f=7&t=250
Mbah Eugene Awah http://stop419scams.com/viewtopic.php?f=7&t=5
Chukwunagorom Richard Chijioke http://stop419scams.com/viewtopic.php?f=20&t=144
Dereak Graf Mela http://stop419scams.com/viewtopic.php?f=20&t=183
Otuvie Otuojano Patrick http://stop419scams.com/viewtopic.php?f=20&t=358
Momoh Jeffery Fidelis http://stop419scams.com/viewtopic.php?f=20&t=170
Adebola Olayeye http://stop419scams.com/viewtopic.php?f=20&t=147
Details: http://stop419scams.com/viewforum.php?f=8 and http://stop419scams.com/viewforum.php?f=20

37.140.192.213
domain:        NIK-RU.RU
nserver:       ns1.hosting.reg.ru.
nserver:       ns2.hosting.reg.ru.
state:         REGISTERED, DELEGATED, UNVERIFIED
org:           "Nizhnekamskaya Neftebaza" OOO
registrar:     REGRU-RU
admin-contact: http://www.reg.ru/whois/admin_contact
created:       2008-12-21T21:00:00Z
paid-till:     2018-12-21T21:00:00Z
free-date:     2019-01-22
source:        TCI
nik-ru.ru    IN    SOA    
server:    server126.hosting.reg.ru
email:    root@server126.hosting.reg.ru

Tuesday, February 27, 2018

info@abudhabicosmoae.com / Scammers Impersonating Abu Dhabi Cosmo Oil & Gas / Fake Job Scam Fraud

This is a fake job scam! There is no job! Do not send documents or money! If you are not interviewed face to face, in person, the job offer is Always a scam! If you are asked to pay fees for a visa or work permit or anything else, the job offer is a scam! No real company or embassy ever uses a free email address! Read Why Most Emails Offering Jobs Are Scams! and Never Wire Money to Strangers! or click on the images below:
Image  Image
Abu Dhabi Cosmo Oil & Gas
Al Masaood Tower, Sheikh Hamdan Bin Mohammed Street,
Al Markaziya, Abu Dhabi.
P.O Box 45700
Phone: +971 524 626868
Fax: +971 2 435 27834
Email: info@abudhabicosmoae.com
HR DIRECTOR: Eng- Radwan Osman Mustafa.
www.abudhabicosmoae.com

   217.107.34.122
   Domain Name: ABUDHABICOSMOAE.COM
   Registry Domain ID: 2228911207_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.onlinenic.com
   Registrar URL: http://www.onlinenic.com
   Updated Date: 2018-02-19T07:08:15Z
   Creation Date: 2018-02-17T20:39:19Z
   Registry Expiry Date: 2019-02-17T20:39:19Z
   Registrar: OnlineNIC, Inc.
   Registrar IANA ID: 82
   Registrar Abuse Contact Email: abuse@onlinenic.com
   Registrar Abuse Contact Phone: +1.5107698492
   Domain Status: ok https://icann.org/epp#ok
   Name Server: NS1.JINO.RU
   Name Server: NS2.JINO.RU
Registrant Name: Abudhabai
Registrant Organization: Abudhabai
Registrant Street: 5 Tun Road
Registrant City: Dubai
Registrant State/Province: Dubai
Registrant Postal Code: 6574
Registrant Country: AE
Registrant Phone: +971.5085699389
Registrant Fax: +971.5085699389
Registrant Email: victoros4iu@mail.com

info@raknp.com / Scammers Impersonating RAK Petroleum / Fake Job Scam Fraud

This is a fake job scam! There is no job! Do not send documents or money! If you are not interviewed face to face, in person, the job offer is Always a scam! If you are asked to pay fees for a visa or work permit or anything else, the job offer is a scam! No real company or embassy ever uses a free email address! Read Why Most Emails Offering Jobs Are Scams! and Never Wire Money to Strangers! or click on the images below:
Image  Image

RAK Petroleum
P.O. Box: 748 Ras al Khaimah, U. A. E.
Ras al Khaimah, U. A. E.
+971 7 222 2877
+971 7 222 2028
+971 56 835 0006
+971 7 123 4567
info@raknp.com


   160.153.32.164
   Domain Name: RAKNP.COM
   Registry Domain ID: 2131173618_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2017-08-08T18:21:10Z
   Creation Date: 2017-06-06T05:38:32Z
   Registry Expiry Date: 2019-06-06T05:38:32Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: abuse@godaddy.com
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS39.DOMAINCONTROL.COM
   Name Server: NS40.DOMAINCONTROL.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/

info@theoilandgascompany.com / Scammers Impersonating Polee Holding / Fake Job Scam Fraud

This is a fake job scam! There is no job! Do not send documents or money! If you are not interviewed face to face, in person, the job offer is Always a scam! If you are asked to pay fees for a visa or work permit or anything else, the job offer is a scam! No real company or embassy ever uses a free email address! Read Why Most Emails Offering Jobs Are Scams! and Never Wire Money to Strangers! or click on the images below:
Image  Image

Polee Holding
Bin Omran, Doha, Qatar
Phone: +974 1234 5678
Mobile: +974 1234 5678
Fax: +974 1234 5678
Email: info@theoilandgascompany.com
Web: theoilandgascompany.com

   104.28.26.128
   Domain Name: POLEEHOLDING.COM
   Registry Domain ID: 2198610071_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2017-12-17T10:20:06Z
   Creation Date: 2017-12-11T12:23:18Z
   Registry Expiry Date: 2019-12-11T12:23:18Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: abuse@godaddy.com
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: GREG.NS.CLOUDFLARE.COM
   Name Server: OLGA.NS.CLOUDFLARE.COM

info@royalpetroleumqa.com / Scammers Impersonating Royal Petroleum General Services / Fake Job Scam Fraud

This is a fake job scam! There is no job! Do not send documents or money! If you are not interviewed face to face, in person, the job offer is Always a scam! If you are asked to pay fees for a visa or work permit or anything else, the job offer is a scam! No real company or embassy ever uses a free email address! Read Why Most Emails Offering Jobs Are Scams! and Never Wire Money to Strangers! or click on the images below:
Image  Image
Royal Petroleum General Services 
Tel: 00974 - 4419 6756
info@royalpetroleumqa.com



   166.62.28.126
   Domain Name: ROYALPETROLEUMQA.COM
   Registry Domain ID: 2210239806_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2018-01-08T17:15:55Z
   Creation Date: 2018-01-08T17:15:54Z
   Registry Expiry Date: 2019-01-08T17:15:54Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: abuse@godaddy.com
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS71.DOMAINCONTROL.COM
   Name Server: NS72.DOMAINCONTROL.COM

HR@abraxaspetroluem.com / Scammers Impersonating Abraxas Petroleum / Fake Job Scam Fraud


This is a fake job scam! There is no job! Do not send documents or money! If you are not interviewed face to face, in person, the job offer is Always a scam! If you are asked to pay fees for a visa or work permit or anything else, the job offer is a scam! No real company or embassy ever uses a free email address! Read Why Most Emails Offering Jobs Are Scams! and Never Wire Money to Strangers! or click on the images below:
Image  Image
Scammers have registered a domain and are using it with the email address HR@abraxaspetroluem.com which redirects to the real website of the company which is abraxaspetroleum.com. Notice that the scam email address is very close to the real one but the scammers have switched the “e” and “u”. This is a fake job scam! Do not send money or documents! If you are not interviewed in person, face to face, the job offer is always a scam! Read http://www.scam-job-emails.tk and http://www.never-wire-money-to-strangers.tk

From: Abraxas Petroleum HR [mailto:career@abraxaspetroleum.com] (This is spoofed)
Sent: Monday, February 26, 2018 8:17 PM
To: "Abraxas Petroleum HR" 
Subject: Job Posting With Abraxas Petroleum Corporation

Dear Applicant,

Abraxas Petroleum Corporation is a publicly traded independent exploration and production company founded in 1977 and based in San Antonio, Texas.

With respect to Our mission to be the leading recruitment agents provider in the USA and the favorite among job seekers,while striving to deliver a professional service.

You are hereby notified that your qualifications and experiences were found suitable for the requirements of Abraxas Petroleum Corporation.

All interested candidates should submit their updated Resumes/CV Specifying position of interest (Attachment in MS Word Format Or PDF format). Qualify candidates, will be short-listed and contacted by electronic mail. All Resumes/CV should be directed only to the Recruitment Coordinator via the below e-mail.

Note: All applications Resumes/CV for employment are to be returned via mail to the Human Resource Management ONLY : HR@abraxaspetroluem.com

Best Regards..

Carol O'Brien.
Company Alternative Email: hr_abraxaspetroluem@gmx.us

Human Resources Coordinator And Department Head.
ABRAXAS PETROLEUM CORPORATION
HR Main Phone: +1210.547.3144, Operations Fax: 210.490.6837.
Website: http://www.abraxaspetroluem.com
Contact Address: Abraxas Petroleum Corporation
18803 Meisner Drive ,San Antonio, Texas 78258 USA.

Scam Domain

172.93.106.18
Domain Name: ABRAXASPETROLUEM.COM
Registry Domain ID: 2055869334_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2017-08-29T12:51:57Z
Creation Date: 2016-08-29T15:55:07Z
Registry Expiry Date: 2018-08-29T15:55:07Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com
Registrar Abuse Contact Phone: +1.2013775952
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NS5.HOSTNOWNOW.COM
Name Server: NS6.HOSTNOWNOW.COM