Notice: Function register_block_script_handle was called incorrectly. The asset file for the "editorScript" defined in "contact-form-7/contact-form-selector" block definition is missing. Please see Debugging in WordPress for more information. (This message was added in version 5.5.0.) in /home/vol9_8/ on line 5835
Phishing Alert: Maruti Suzuki Recruitment – Rajib's Blog Rajib's Blog

Phishing Alert: Maruti Suzuki Recruitment

Here is an interesting message I received today morning: Maruti Suzuki sends me an interview notice in capitals and exclamations.

Attached to the email is a file “Interview Notice.rtf”, which impels me to deposit Rs. 15,200/- in Cash to an yet to be declared SBI account; apparently as a guarantee that I will attend the interview once they send me the air-tickets.

The English is atrocious. Here’s a sample:
“… the amount is just to prove that you will be coming for the interview in order for us not to run at lost after sending you the air ticket and you don’t show up on the day of interview. Upon your respoce,contact detials will be given to you. …”

Though I have reported this message to Google and I am publishing it on my blog, there will be those who will proceed to do as directed by these crooks.

Bloody crooks. Bloody victims.

Technical Analysis:
A quick lookup of the Source IP reveals that “ is from Nigeria(NG) in region Southern Africa”.
Nigerian 419 Scam ahoy!

The SMTP server used ( belongs to “Albert Einstein College of Medicine, Information Technology Services, 1300 Morris Park Avenue, B1107, Bronx, NY 10461, UNITED STATES”.
Pretty poor SMTP security configuration. Definitely not the place to study Information Technology. Medicine? Maybe.

Here are the full email headers for those wishing to delve deeper:


Received: by with SMTP id f10cs136841bko;

Thu, 10 Mar 2011 09:00:05 -0800 (PST)

Received: by with SMTP id a19mr5499999qcc.81.1299776404744;

Thu, 10 Mar 2011 09:00:04 -0800 (PST)


Received: from ( [])

by with ESMTP id p6si7006593qcu.187.2011.;

Thu, 10 Mar 2011 09:00:04 -0800 (PST)

Received-SPF: neutral ( is neither permitted nor denied by domain of client-ip=;

Authentication-Results:; spf=neutral ( is neither permitted nor denied by domain of

Received: from ( [])

by (Postfix) with ESMTP id 04F5F9F0589;

Thu, 10 Mar 2011 12:00:03 -0500 (EST)

X-AuditID: 816201a0-a336abb00000153e-a1-4d790392eef9

Received: from ( [])

by (Symantec Mail Security) with ESMTP id 44362718004;

Thu, 10 Mar 2011 12:00:02 -0500 (EST)

Received: from ( [])

by (Postfix) with ESMTP id C6012E2E5;

Thu, 10 Mar 2011 12:00:01 -0500 (EST)

Received: from

(SquirrelMail authenticated user dozhang)

by with HTTP;

Thu, 10 Mar 2011 12:00:02 -0500

Message-ID: <>

Date: Thu, 10 Mar 2011 12:00:02 -0500



User-Agent: SquirrelMail/1.4.18

MIME-Version: 1.0

Content-Type: multipart/mixed;boundary=”—-=_20110310120002_63107″

X-Priority: 3 (Normal)

Importance: Normal

To: undisclosed-recipients:;

X-Brightmail-Tracker: AAAAAA==


Content-Type: text/plain; charset=”iso-8859-1″

Content-Transfer-Encoding: 8bit


You may also like...

3 Responses

  1. ashish_646 says:

    hi rajib..
    really the sender of such emails seems to be technically dumb..
    even if their technical knowledge is good, they should now discover new ways to make fool out of us…these are old methods alive from past 5 yrs & now almost all of the vintage internet users are aawre of these…
    But thanks to your effort, it will definately help many of us to not to fall in these traps…
    will be watching the space for more……

  2. ssj4Gogeta says:

    There’s a website called 419eater
    There they bait the scammers and waste their time.

  3. says:

    good site

Leave a Reply to ssj4Gogeta Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.