Underwense - possible job scam

I received an e-mail today with a picture of an job offer and it sounds like a mule scheme.



Here's the e-mail header
Return-Path: <[email protected]>
Received: from mta205a.sparkpostmail.com ([52.38.191.255]) by mx-ha.gmx.net (mxgmx013) with ESMTPS (Nemesis) id 0M97AD-1bSiZr3jAb-00CS8b for <>; Thu, 18 Aug 2016 01:30:12 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=underwense.com; s=scph0816; t=1471476594; [email protected]; bh=YLO/R5FgbH0Ls2T8i25Qce7T2m6NSAbFdhlGtMbneU4=; h=From:To:Reply-To:Subject:Date:List-Unsubscribe:List-Id; b=UAXmIyPDDBk5SDszcPkYv6+xRpCba7qKcXXgEz4uvtWk9ziemKWSRJVD5oGelCBqy WBYovU0+D7FkZwOiXR09is1D1gEcgkJQb7PdQLhm94tTxPi7wa4lkVlRuKMBerjybx DWvy2msg7i3ZDwZUVp3v7cZhWkzerP4koxXaRFNI=
X-MSFBL: uwyV6b6vA0F0I5Px7QrVLMUZTnJx9v3Uytg8gU52+rU=|eyJiIjoiaXBfNTIuMzg uMTkxLjI1NSIsInRyYW5zbWlzc2lvbl9pZCI6Ijg0NDAwNDU1MzA0NzIzMjA3Iiw iaXBfcG9vbF9yYXciOiJyZWZvcm0iLCJjdXN0b21lcl9pZCI6Ijc3MjQxIiwiciI 6InRoZXN0b0BnbXgubmV0IiwiZyI6ImJnX3JlZm9ybSIsInN1YmFjY291bnRfaWQ iOiIwIiwidGVtcGxhdGVfdmVyc2lvbiI6IjAiLCJzZW5kaW5nX2lwIjoiNTIuMzg uMTkxLjI1NSIsIm1lc3NhZ2VfaWQiOiIwMDA0NzBmM2I0NTc1ZDI1YjczOCIsInJ jcHRfbWV0YSI6e30sImlwX3Bvb2wiOiJzaGFyZWQiLCJmcmllbmRseV9mcm9tIjo iZGFyZW5AdW5kZXJ3ZW5zZS5jb20iLCJyY3B0X3RhZ3MiOlsgXSwidGVtcGxhdGV faWQiOiJzbXRwXzg0NDAwNDU1MzA0NzIzMjA3IiwidGVuYW50X2lkIjoic3BjIn0 =
Received: from [24.155.115.62] ([24.155.115.62:61698] helo=[127.0.0.1]) by momentum4.platform1.us-west-2.aws.cl.messagesystems.com (envelope-from <[email protected]>) (ecelerity 4.2.24.56645 r(Core:4.2.24.3)) with ESMTPSA (cipher=ECDHE-RSA-AES128-GCM-SHA256) id 7B/83-09565-073F4B75; Wed, 17 Aug 2016 23:29:54 +0000
Content-Type: multipart/related; type="text/html"; boundary="----sinikael-?=_1-14714765887650.7253715910529044"
From: [email protected]
To:
Reply-To: [email protected]
Subject: Proposal of work for =. Open vacancy.
X-Mailer: Thunderbird, Build 129.6.5550
Date: Wed, 17 Aug 2016 23:29:48 +0000
Message-Id: <[email protected]>
MIME-Version: 1.0
List-Unsubscribe: <mailto:[email protected]?subject=unsubscribe:IVj6Tc9fHYAn-cZD0CIQb6YsEIbNWJurvzCdBWawkT4~|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>
List-Id: <spc-77241-0>
Envelope-To: <>
X-GMX-Antispam: 0 (Mail was not recognized as spam); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: notjunk:1;V01:K0:rNvZI4lbXiU=:xRFgQ9n0Te3em0987fYUPL4cua yH+ifKV1DyXAHEGXzlVjN4g5dT7whCZ8t4VnQCHfhfPY7m2AA7+FuAKAYhoLSvB+tPYHc3I4L /acRjmVR0ToIxtKffWGvXKJyumw7lVu6qmh0OuN3WLgLFb2DFk5SlMLpNEeQof1BIm8k/U8jv D2FdMvWQe2ALhtVu4klEC281pAsHKGu3+xzJ5sMpC2aYH3pJU2FlcydCd+2WUSCGxP5XSwvFE Z08dKomZHOou5m2BVE9q+GsQSYpY2SZQfvJ5d5foq8REssCsj3IbIeVxyXAXAy3pAINWT+c8j gLL8IGxQZbFHEU9wAVCGP38gccc1jZMSepg8+2sHJvo0Ctol5dIzGiW0DMfJYSNtmBHv+ySg5 j0Hq42Nut9TBlSE8O2DEc8oQyXG7zYtGxqL65vuDf5z1eJ3Dms0pMwS/9ouRbq4jDTvulTHFe Nrwi/h7g/J8ApUoxdEa1Gav/dhlRqI5/WOKti6J2HJt2aiIaXUjX1GGmTcqLemmFWs4gRu2ly 47kjH0MpEO2JCcnLzNKx7GaWBs0s3ZJysGPRXtekiERT78sXI0cXHKMmGsLGUTHulnIXHPBhz FrbN6iWqiuBLsIOHz6kOMsX0249jI9pE8JeBjsknbxlW0wAEivz+p6W/SxL0GoSm989fC+AEa z+fRu6+Zn+d1b31gwLd4g5t2SxqXJcdoBhaGrXgBWtt2ddnxfpPylrgX5ewcb2ZjraY2gY2yH fxEaQs4lSH/A4MkAFglzN/4W8psiAOUUQkbeCWHIq7T9/LUs6whjJR9IOzQyb02/5F8zwCt/2 Ws0SUlK6mRByyXRMujNV7yx2XyOWZS5E+pU8Iv69ajfXkuZg4juFxWTtYg/BitHRBeQ8XnxNR POGfN8gh/TxmM/MGrmKdd109sY9RtAALgMUP2gPTRTKkMppg3tAVgb98QYqaZ7MyI9sZTQkQW LYwGK6J6dQfsXudGlJID7usqBxyJBxpT5rx9aUPR3uxjUM79/aDf5k5TdRQk53yFvtqw7owHX ACRPSFxSpcxE/H32tFx0uY60wc0YH5uDFhubvq/UZ67xB56aRaQ/SvUkN2QErehGPIGQ2RWwQ X4XsMBwW0bNiAUgn9g53OkE8eigkVtW3FVczzaw2S/CqxfDqrYyfHT6rHUE0lhsQkoLdzl2Q+ 5Uf4NEsg4ngU3tjZGK4egGg1PO8UKBQWDugYCqXRD4Yj48uEfVyXMEVOlCOJx4pf1KWzYsdYM P0mDqfZUc31B9YdueUixf2ckyUEwKRI6qhS5eKYzcEHQnKbKIpeHCZoRgM6uePsGYTr63GLiX f+AkXji3urrwSRgZjAe4vCm2QETqA6iji7wnc7ilDhsuFIXZL8xqWvNQEGkcQF9T+DXylA3SH 25xZtZo6RBd2zOd0XhVcvfu04DsLFxaMBMSuBfQPFqlxGT2M7iZ274yuVEpF2NofgvDOaMBdj 3RRyY3MXmTuzcM3o3vber5IIfRNT7fR/VObKH8MhsXSkdOR9p5

Please post the body of the email as plain text.

The From header is spoofed. underwense.com does not exist.

thefedexsender.pw is email-only and the email was not sent through its mailserver. We will need an email sent to thefedexsender.pw and a reply thereto, both with body and headers.

I am sorry, I don't know how to post a picture I received as plain text......

If the picture contains text, type the text, being careful to keep the spacing between words and around punctuation marks as it is. I can't do it, as I can't see the picture.

I just received the same email with job offer as an image. it is a lot to type, but I will scan it latter today and try to use ocr to recreate the text.

-t

Dear Tony McClain, You added your resume on "Career Builder website.
We are thrilled to make an offer for you for the Logistics Supervisor position in our team. By joining N.L. Company, you will become a part of a fast-paced, team-oriented and dedicated group of specialists that works collectively to provide our clients and customers with the highest level of services and facilities. In exchange for your services, we are willing to provide you with lots of opportunities to grow, get new knowledge and reach the highest levels of your professional integrity. Please review this summary of terms and conditions for your probable employment with us.
Salary: - The first month will be the trial period with the salary of 2550$ paid after the completion of the probation. - After the first trial month, you will be eligible for bonuses depending on your performance, and your salary will be always 3250$ divided into four parts and paid every week (-800$/week).
Perks and privileges: - As a full-time employee of the Company, you will be given a full health coverage. - Health benefits and other incentives kick in after you successfully pass the probationary period (31 days).
The duties and responsibilities of the position: - To access the Control Panel on a daily basis and keep it updated; - To manage the receiving, quality control and shipping of packages and to send them to customers using our prepaid package labels; - Coordination with senior supervisor.
All you have to do is to confirm your interest by sending us the following details and our HR manager will give you a call: - Name and Surname - Phone number
We are looking forward for you to join the N L Company. We are have no doubts that this position will be an excellent fit for you, will offer you an excellent opportunity for personal growth and will be a great challenge for your future self-development. We believe you share our vision and fully expect that you will make a significant contribution into the fruitful success of the Company.
To get this place, please reply and we'll get in touch with you as soon as possible.
Sincerely yours.

This is a reshipping scam. Scammers buy things with stolen credit cards and have the package mule reship them overseas under the pretext that the manufacturer would not ship to their country or it would cost too much.

Please post the email address it was sent from and a website if any was mentioned.