Received this, suspicious.

Hi all,

I've recently applied for numerous jobs, including many online where the website has given me the opportunity to share my details with other recruiters so I can understand that this guy might have my details. That said, it ended up in my Spam folder, and I am a little wary of it. What do you think?
----------------------------------------------------------------------------------------------------------------------------------
Role: Financial Controller - No Experience Required
Location: UK
Salary: FULL-TIME £18.7K + ; PART-TIME £15.2K +

The successful person will be given the tools they need to succeed and the chance to develop and progress. If this sounds like the role for, please e-mail your CV.


HR Manager
Jayne R. Jahnke
Kugler Assistance LTD
--------------------------------------------------------------------------------------------------------------------------------
Looks as though this company does exist, although it could easily be someone impersonating them. The IP traces to either Phoenix, Arizona, and something to do with the US Dept. Defence, or Brighton in the UK. The email address is [email protected].

Many thanks for your help!

Hello paddlesnap,
This is a money mule scam and not a real offer of employment. The domain was registered on 23-July for the minimum period of one year. This is a sure sign of a scam.

The website http://www.kuglerpartners.com is in the process of being reported for fraud.

Pleaser post the email header information so that it can be included in the report.

If you have any additional questions about this scam please ask.

Hi Mike

Thanks for getting back to me so quickly. Looks like my suspicions were right, although I was on the fence about this one, possibly one of the more convincing seeing as the domain name isn't a free webmail service and the English isn't terrible. Nonetheless, especially nowadays, nobody is going to offer me a job I didn't apply for.

The email header is:

Return-Path: [email protected]
Received: from smtp104.biz.mail.ne1.yahoo.com ([98.138.207.11]) by
mx-ha.gmx.net (mxgmxus001) with ESMTP (Nemesis) id 0MOxf7-1V7qYQ3tQ7-006Qss
for <[email protected]>; Mon, 19 Aug 2013 16:50:18 +0200
Received: (qmail 93029 invoked from network); 19 Aug 2013 14:50:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1376923817; bh=YEo64/9/3R7dTEMBcgP/YVweAw+oiQOlTTkA8VZhZ44=; h=X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-Received:Date:From:Organization:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding; b=6B6DVKffLOpA40zlAqKAbqBYoJE2L04dIrL/lBpgJV3cYUmeOxMh9ZS3MzIMqIEjdJ8FGhNzqtTbi2yfh1koxMZpUmI29cjmlbMm/SSQNGachI3vrK3gxVTn9E8/vUW9bGsV7apHfQC5Ju0uhN/te6S6q1IRJmrYRpWvwjX8rQE=
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: sgeJlT4VM1nBfzURb4dDKkojqzBLCpt0Shn4nJUfAcG8fOd
bkAs35NoGA64exYCNQHNd_bwQ1jb8Xd8nNlwQmDh9ZcviiLeJszKIJqbwu0K
gfy1gZk.bWV1G7iJKpycrEVHgpccKkpOwIpF9mZ7HsuVjuW73CRvQk4t7YVE
ge.xtT1MFj9oHOkHHQcZqRCIKT3zUbLSUIntB2vPowfard.ZloSERIjoCkxx
sTH8yIyEJB5chTZGQ_wT0B3Au56vv1yIdQbT_Uynt9MMstf2FQzwf1mmLIjS
cP8IjoYNHzfsNeY5dgMY382f6nuuTuArs9eBMYT6JE3gqg2cKanPAiDhiY03
V2pbfN20jVeaZlxrXrjSrpYSnQys7OhpAxCF.OTdvecRvLN2LLY4Ymd3zkGy
aNpI_yjANlsO9pR1eutzq8iUpdbNZI0XsJwgdfqnlRKHNZ6woqk9f5zWc2Dk
sNEeUY6kGx0MGKGYPyBde2LDAwnsAwCb56V_cJBfJmlYAUBDaqkmbcNaRb2l
JpRIEh.Q29Xq3FlJM_DLF0d2JHeI-
X-Yahoo-SMTP: .jTqYeuswBBVNEBt4RaYa8L037nA9vHi5Cis
X-Rocket-Received: from [98.138.105.25] ([email protected] with )
by smtp104.biz.mail.ne1.yahoo.com with SMTP; 19 Aug 2013 07:50:17 -0700 PDT
Date: Mon, 19 Aug 2013 09:15:32 +0000
From: "Jayne R. Jahnke" <[email protected]>
Organization: Kugler Assistance LTD
To: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Message-ID: <[email protected]>
Subject: Career info for Mr xxxxxxxxxxxx 19/08
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-15"
Content-Transfer-Encoding: quoted-printable
Envelope-To: <[email protected]>
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: -3 (not scanned, virus check failed)
X-UI-Filterresults: junk:10;V01:K0:OppXmSwPjVs=:DfX4WI/VC/PsH2Az8E+r56r1T5YD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==
X-GMX-UID: SXQncztnF2UgSK14YXVImyYnc/B+nJ4n
X-Flags: 1401



MailID: SXQncztnF2UgSK14YXVImyYnc/B+nJ4n


------------------------------------------------------------------------
message opened by mailclient 6.71.3.0 (6.71.4.0)

Thanks very much.

kuglerpartners.com uses the same template as wilkeslimited.com, heavenerinc.com, higginscorporation.com, cormierassistance.com, braxtonmg.com, ftigroupltd.com, gladdenadjustments.com, riggsinvestment.com, and wallermanagement.com. Somewhere in there they changed the image from "4X" (foreign exchange) in a circle to the current box of parallel sticks, but the layout is the same. The gang of scammers has another template used on other sites. Also they have been short on time and are putting up slipshod sites with things obviously wrong with them.

Financial Controller - No Experience Required

Scam.

Financial Controller isn't even a UK job description and, as the post would give you ultimate financial control of the company possibly as a member of the board, to state that no experience is required is ridiculous. You wouldn't even be considered without a face to face interview, which goes for most jobs nowadays, even as a shop assistant or cashier.

I'm not saying this to criticise you paddlesnap, but pointing out the scammer's errors so that others can spot them more easily. Being trusting isn't a bad character trait, but it can cost you money.

And also, no legitimate employer would offer you a job without an eye-to-eye interview in person.

Financial Controller - No Experience Required

Scam.

Financial Controller isn't even a UK job description and, as the post would give you ultimate financial control of the company possibly as a member of the board, to state that no experience is required is ridiculous. You wouldn't even be considered without a face to face interview, which goes for most jobs nowadays, even as a shop assistant or cashier.

I'm not saying this to criticise you paddlesnap, but pointing out the scammer's errors so that others can spot them more easily. Being trusting isn't a bad character trait, but it can cost you money.

I understand - I was inherently suspicious of this email and wasn't interested in the job anyway, but I thought it would be worth posting here as now the domain can be taken down by someone who knows how and anyone else who receives this email can be aware of it.

The domain has been reported and will probably be dead in a few hours.

ETA: Just checked. The site is dead.

Currently scammers post very open and bland job offers, basically to generate the most replies.

They'll then reply to all the contacts, often under a different name, telling you that you've been awarded the job relying on the fact that you've probably applied for a lot of jobs and won't recall whether you applied for it or not. It's therefore a good idea to make a note of who you've applied to for jobs because, if you get replies you aren't expecting, it's a good pointer to it being a scam.

The scammer will use different names in their replies to the advert so that it's harder to seek out and detect them. When we know what names and wordings they're using on their offers we can highlight them and make them useless.