Laperle Group - Job Offer

This looks like a real job but upon looking at the source on terms of email domains I'm not sure now.

What do you think?

Hi.

We have found your resume on Totaljobs website and thought you as a prospective employee.
Laperle Group is a consulting company operating in United Kingdom and offering business development and strategy support of technological applications and outsourcing solutions. Among the sectors in which our consulting firm operates, there are not only banking, financial, industrial, insurance areas, but also energy and utilities, public administration, health care, media and telecommunications sectors.

Position: Operations Clerk
Salary: 700 EUR/week

Requirements :

- Adult Age
- Location : United Kingdom
- High school diploma or GED (General Education Diploma)
- Work with MS Office documents
- Responsibility

APPLY NOW:
If you're interested in this job offer please contact our PR-Department. Simply reply to this email and one of our agents will contact you shorlty.


Have a nice day,
Laperle Group

Return-Path: <[email protected]>
Delivered-To: (removed)
Received: from mxen3.enta.net (mxen3.enta.net [78.33.48.6])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id 39B3B2161A12
for <(removed)>; Mon, 4 Jun 2012 14:14:37 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen3.enta.net (Postfix) with ESMTP id 13F6BB97020
for <(removed)>; Mon, 4 Jun 2012 14:14:37 +0100 (BST)
Received: from mxen3.enta.net ([127.0.0.1])
by localhost (host.domain.tld [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 49625-04 for <(removed)>;
Mon, 4 Jun 2012 14:14:35 +0100 (BST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from nm37-vm8.bullet.mail.bf1.yahoo.com (nm37-vm8.bullet.mail.bf1.yahoo.com [72.30.238.220])
by mxen3.enta.net (Postfix) with SMTP id 2D0B0B9701E
for <(removed)>; Mon, 4 Jun 2012 14:14:35 +0100 (BST)
Received: from [98.139.212.152] by nm37.bullet.mail.bf1.yahoo.com with NNFMP; 04 Jun 2012 13:14:34 -0000
Received: from [98.139.212.228] by tm9.bullet.mail.bf1.yahoo.com with NNFMP; 04 Jun 2012 13:14:34 -0000
Received: from [127.0.0.1] by omp1037.mail.bf1.yahoo.com with NNFMP; 04 Jun 2012 13:14:34 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 3659 invoked by uid 60001); 4 Jun 2012 13:14:34 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1338815674; bh=amhuAIuG12d68LN/FcReLkKLAJrLkQ0AF+G0i7Cf9EQ=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=UA6BLLNI4xTdA9MNtv2n0r+7HS28Qk3PUq821d95hTZotoo/gAC6cAmKcvm0roBppYuqDYQfEavEwwTicF4TWg4A345KaxWIrFlGwEUcoBeo+I1RfgNzT+3yrg5VXBz3k1HQkmRPlcPG1wmeBJUIvpp/uYw/sPenFv0NtaOV9ok=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=q97B2DvwDjcL939vA6Batmo8/E2jdJFG64Xbg5zob2+3ZC6pGhMaMy/LNybAGCAsiJtCYY+TCjMm8sVpuR2SKKP1+YUPa66S+eroEfK+tdFZckaSnSxkTV75VBBbQrycxaiu60bLt/N/WfkRvbGbBIMdEuYZ2bxqOs4fhlWgc9k=;
X-YMail-OSG: 0rihu00VM1n.WlSe6vvcLzpg5vIsDgq1N11gyfwHhrEm6Ok
ot_SFMN1Bq7RizH4YOPE7sWSwsrO46HyvqhxwLATC4Idxy7FrIoqShmTBVmp
cie_.PaIUWSc2LKMnTk0WRaIIkbAYlZvbeuSSMSZ.pOLxr08Cs0vz81ZhFgB
EFXIfplgirvKRbxIZtyD0HEhqV6X8V8gTbOmUx0uC0V7NtZUZCunddJa.nEm
09KNhgN4t5LcwRvfDFUcpgJ5BJvktTozvoc.59_vDKBWfq5Iime9VxaU6gbi
GMC16TyyO_.uUuDzW43GvsarouFvExLrvbh809fUpwlQ4KAt0JuIWzIQjIMO
4bEWSJZWMdYtg1698JBa1FHvoThb46k6rvIZfNY0jWCvGC59usD5QZMLt7gs
BVRtFN34zkhu7Vk9TDRLqkNg7H5jeNwc6K6iMZ.qhgGioVidBIMiC6wyOuSh
de4nm7.JdbQ74J8BlUgCvr2r5c7DxjQjEynKSkrb5GGT0bS5Pmlj1bobGBJT
fTsjrbp0bMshhK0dXR_QyqXNxIUFxl5TFj6zGRTUMJaOpqLYr922BvlRaOtL
V4i8EnE7ic8pyA_uYTWCN4QUvkBmeHgrltiD5Ck0cnTZxGnlIlTsICy97GEQ
wP7g9fUjqZw--
Received: from [46.35.79.38] by web140603.mail.bf1.yahoo.com via HTTP; Mon, 04 Jun 2012 06:14:34 PDT
X-Mailer: YahooMailWebService/0.8.118.349524
Message-ID: <[email protected]>
Date: Mon, 4 Jun 2012 06:14:34 -0700 (PDT)
From: Thomas Mason <[email protected]>
Reply-To: Thomas Mason <[email protected]>
Subject: Equal opportunity , (ID _ A1200T226865429).
To: "[email protected]" <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: No, hits=1.243 tagged_above=-999 required=3
tests=FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001,
FREEMAIL_REPLYTO=1, FSL_FREEMAIL_1=0.001, FSL_FREEMAIL_2=0.001,
RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01
X-Spam-Level: *
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Tracker: AAAAAA==

Here is the Web site for them (or what their supposed to be in any case):
http://www.laperlegroup.com/?p=index

The English contains too many errors for a supposedly UK company. The website is the new registration, 1 year only that is typical of scam websites, and the use of a free email address for supposed company business is another huge red flag.

The description is generic enough that it can (and probably will) turn into a money mule, check printing, or scam ad placement offer.

Domain Name: LAPERLEGROUP.COM
Registrar: ONLINENIC, INC.
Whois Server: whois.onlinenic.com
Referral URL: http://www.OnlineNIC.com
Name Server: NS.MASTERHOST.RU
Name Server: NS1.MASTERHOST.RU
Name Server: NS2.MASTERHOST.RU
Status: clientTransferProhibited
Updated Date: 26-sep-2011
Creation Date: 20-sep-2011
Expiration Date: 20-sep-2012

>>> Last update of whois database: Mon, 04 Jun 2012 15:32:02 UTC <<<

The email came from Yemen, the domain was registered with a Polish address, and the company claims to be in England. I smell a 44-70 scam.

I Asked for more details re: Job, see below their reply and make up your own mind.

Hello,

About the work process, step by step:

This is a home based job.

1. You will receive notification by email about upcoming money transfer from our client to your banking account.
2. You will receive a money transfer from our client to your banking account.
3. You will send an email message to your supervisor to confirm that the money transfer was received.
4. You will withdraw full amount of money which was transferred to your account.
5. You will keep your 5% comission of the received amount.
6. You will receive an email message with instructions from your supervisor.
7. You will send the amount of money withdrawn earlier( -5% comission) via Western Union. (Western Union commission will be subtracted from our part of the money.)
8. You will send an email message to your supervisor with the confirmation that you have sent the money.
9. After 2 weeks from your first received money transfer - your probationary period will be over. After probationary period your salary will be 700 EURO per week.

Why we do this?
Sometimes we have customers that owe us funds and pay us in financial instruments cashable only in the local area. Since we work all over the world, it is much easier for our customers to transfer money to our Operations Clerk who are in the same area.


Please let me know if you would like to continue.



Regards,
Robert Greer

Laperle Group
General: +48 22 389 5486
Int’l: +44 20 3286 8547

As predicted, it has turned into an attempt at recruiting money mules. Obviously, the only smart thing to do is to stay away from this.

Acting as a money mule can bring you lots of financial and legal trouble, since you are helping to commit a crime.

Thank you for posting the follow-up, crylance.

+48 is Poland, which matches the registration address. +44 is UK. Maybe the scammers broke into a Yemeni computer from Poland? Wherever they are, stay away from mule traders!

seems they have not given up on me yet

still they don't seem to get it

Greetings.

We have found your resume on Totaljobs website and thought you as a prospective employee.
Laperle Group is a consulting company operating in United Kingdom and offering business development and strategy support of technological applications and outsourcing solutions. Among the sectors in which our consulting firm operates, there are not only banking, financial, industrial, insurance areas, but also energy and utilities, public administration, health care, media and telecommunications sectors.

Position: Operations Clerk
Salary: 700 EUR/week

Requirements :

- Adult Age
- Location : UK
- High school diploma or GED (General Education Diploma)
- Work with MS Office documents
- Responsible

APPLY NOW:
If you're interested in this position offer please contact our PR-Department. Simply reply to this offer and one of our agents will contact you shorlty.


Have a nice day,
Laperle Group

Return-Path: <[email protected]>
Delivered-To: (removed)
Received: from mxen8.enta.net (mxen8.enta.net [78.33.48.11])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id 153A92161DE2
for <(removed)>; Tue, 26 Jun 2012 10:58:05 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen8.enta.net (Postfix) with ESMTP id DF972F854E8
for <(removed)>; Tue, 26 Jun 2012 10:58:04 +0100 (BST)
Received: from mxen8.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 84774-01-9 for <(removed)>;
Tue, 26 Jun 2012 10:58:03 +0100 (BST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from nm19-vm5.bullet.mail.ne1.yahoo.com (nm19-vm5.bullet.mail.ne1.yahoo.com [98.138.91.241])
by mxen8.enta.net (Postfix) with SMTP id 91E34F854F2
for <(removed)>; Tue, 26 Jun 2012 10:57:31 +0100 (BST)
Received: from [98.138.90.56] by nm19.bullet.mail.ne1.yahoo.com with NNFMP; 26 Jun 2012 09:57:30 -0000
Received: from [98.138.89.167] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 26 Jun 2012 09:57:30 -0000
Received: from [127.0.0.1] by omp1023.mail.ne1.yahoo.com with NNFMP; 26 Jun 2012 09:57:30 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 3513 invoked by uid 60001); 26 Jun 2012 09:57:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1340704650; bh=3uNalerTwOrNtUKZ3HuVtM/2EkMzihBgQc9sXJ6tAEA=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=59RYpB0TUkAhmynXI2rzHT8ZmzxuuxT2x6bMmlTThMuKal9CtHF1OViZTXHJrgeADJwkNC6W86rx2Zwdk9E/aGlM94jSYA0lf5W9s7SU+F/IZHFf6Lp8TDFMzJDXbMggtDluLhlyDWOjGrQEphASuXVVOMZgymfXYdMxfNODuVY=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=dLnoi18Lba0O40MqbgdweEEZ/egg3x3VzwXdPivgo42DTNg3NDRQIRUW5DLg9/8ONy2ue0DiOulJDNiTS/sna8LozCq/5KFPlnh4AbyI83IPeYMuZqbwreXrETzL1QZxqJ/csvUjhdF0E8attY+sxDVcvGfrakC9IvmfzfP/Ovk=;
X-YMail-OSG: GvHjL9QVM1nliZch70_ITV7vd7wcWEBYBiy.8GtiPXTAEm_
N0oFp45M1nZNAYDTEbXSyrHSW0XVsm2yxersYPwYFPN30nkeQtb6OjhEHEH1
jVUVy0GMSnMDXgG5svJTxLTXx1r05XUsiB08Lleq4imfz6CBYCJjHKxfvm4N
RCgi2GisHJC.r2EmQQKwQes80v6x__uHRhuIs.iJ8bEnocdUz8Y.tr3NR_bD
G8APfUdV.y1QzUtMUX7ifa4vIRKAlbGC2IrmHpShj36agTVDLrgOb7w0omUd
YwJ0JPWgq9G_Yn1q_vNCC933YQgiEMfy8y8Ea8tOz4SYoPT_u1ptLXQ4WATF
m0x5XRc.lwGXCsSr7_zBBMQnoRezihvbOD7nC5z4lfXe2XGnuI6tpbS.7Mww
GDmM4Bt3V_uPS4mqQEKXDB7mCoczQD78EmjS2KfTXY1hka4moKgmGwZu8T0w
8URu1vtqIRn2EAS7F7YabMIh.vHMd1Of2pRPHaCCwzZ7gbw9GDQZUDDpCci7
3zV1G.AaUh2uPyIx.GoxZmxdOUCFlvlvS7NTSjt85MsW5lXW34nbN.yMkT.t
zTQ0mxNxziDu8l1Q_ThXMah3XcQ--
Received: from [91.205.48.7] by web125101.mail.ne1.yahoo.com via HTTP; Tue, 26 Jun 2012 02:57:30 PDT
X-Mailer: YahooMailWebService/0.8.118.349524
Message-ID: <[email protected]>
Date: Tue, 26 Jun 2012 02:57:30 -0700 (PDT)
From: Ruth Howard <[email protected]>
Reply-To: Ruth Howard <[email protected]>
Subject: ***SPAM*** Employment opportunity ; (id : G2590T58689390235).
To: "someone completely unrelated to me so is also someone like me (email provided to mods on request)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=3.487 tagged_above=-999 required=3
tests=FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001,
FREEMAIL_REPLYTO=1, FSL_FREEMAIL_1=1, RCVD_IN_BL_SPAMCOP_NET=1.246,
RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01
X-Spam-Level: ***
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Tracker: AAAAAA==

I always find it funny when they say 'contact our HR department' yet they have yahoo & gmail domain instead of their own (indicating furthermore it is a scam.