Confirm if this is a spam and help.

Dear all,
Thanks for your great work here. Kindly confirm if this is a scam and add it to employment scam alerts to help other users (I am new to this forum).
I am relocating and looking for a new job and send lots of job applications. Today I have received this email but there seems something fishy about it. I have searched for the contact name and found it was a real person in USA and the email was supposed to be sent from the UK. The email was sent from ([email protected]) without a hyphen, while the signature and the website had the hyphen (www.russells-construction.co.uk). The website itself didn't have the same vacancy, and when I checked it no sufficient information were available about it.
The email goes below:
---------------------------------------------------------------------------------------------------------------------

We have received your submitted CV/RESUME and we sincerely appreciate
your interest in our company, in line with this, we have reviewed your
CV/RESUME for employment consideration as your education back ground,
previous experience meets up with the required qualifications for the
post of Freelance Translator & Editor with the salary amount of 9,500
GB Pounds per month.

We are desirous of having you work with us after this assessment by
us, as we see your skills as value addition to our company and our
clients respectively.

Benefit:
The company will provide free accommodation ,Insurance (NIN) ,Flight
Ticket,Tax Free,salary allowance , Free Medical Expenses , Vacation
paid leave Allowance and many more benefit you will see in your
Appointment Letter

Working Schedule:
•Working Days & time: Monday to Friday: 8:00 AM - 6:00PM (GMT) with
break period of 2hrs hours only,beginning from 12.00noon to 2.00pm

• Employees shall also be entitled to over-time allowance if their
work time exceeds the official stipulated hours. Salary shall be
liable to increments with time and employees' official promotions and
position in service.

• Saturday & Sunday: Off Day

•Shift Time: Morning and Night.

•Contract Period: 2 Years contract and it can be extended if only you
wish to remain with our company

We are offering you 3month vacation interval and during this period..
You have the chance to visit your love ones and family. The company
will take care of your Vacation flight ticket (Return Ticket to and
fro).

As a notice of acceptance of job offer, we shall send you appointment
and invitation letter for you to sign and return the sign copy back to
us for record purpose. So therefore kindly let us know if you are
satisfied with the salary rate above in order for us to proceed
further.

Please keep this job reference number (JUL/2014/UK/JOB/AV43) important
as it will be needed from time to time in respect of your job
application and Interview. For more information and enquires kindly
add the I.D below in your Skype ( employer26 )

We await to hear from you ASAP.

Andrew & Gareth Russell
Russells Construction Limited
13 Westpoint Enterprise Park
Clarence Avenue
Trafford Park
Manchester
M17 1QS
http://www.russells-construction.co.uk

its a scam. The domain the email originated from is only days old and registered only for 1 year.
Queried whois.nic.uk with "russellsconstruction.co.uk"...

Domain name:
russellsconstruction.co.uk

Registrant:
Russell Construction

Registrant type:
Unknown

Registrant's address:
205 Rio Oaks
Ln Llano
TX
78643
United States

Data validation:
Registrant contact details awaiting validation

Registered through:
domaindiscount24
URL: http://www.domaindiscount24.net

Registrar:
Key-Systems GmbH [Tag = KEY-SYSTEMS-DE]
URL: http://www.Key-Systems.net

Relevant dates:
Registered on: 10-Jul-2014
Expiry date: 10-Jul-2015
Last updated: 10-Jul-2014

While the domain with the hyphen in it appears to be a legitimate website and the scammers are impersonating the legitimate company.

You did a great job at spotting the difference in domain names!!

Most people won't notice it which is why the scammers tend to try impersonating real companies.

Here is a good article to help you spot these scams easier. http://www.scam-job-emails.tk/

On top of that, the email was written by an African, not a Texan or a Brit.

Please post the complete headers of the email you got, minus your name and address. The domain is email-only and we need headers to kill it.

Thanks a million for your help. Here is the source of the email:

x-store-info:sbevkl2QZR7OXo7WID5ZcVBK1Phj2jX/
Authentication-Results: hotmail.com; spf=pass (sender IP is 209.85.217.194) [email protected]; dkim=none header.d=russellsconstruction.co.uk; x-hmca=pass [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: PASS
X-SID-Result: PASS
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0y
X-Message-Info: gamVN+8Ez8V+RHg+F+brASAvcKqWrSSXxv3u1PYliMWGdH2cG429Tv951djoRM90pFeDu5AqGon7YeDJaZMMHZvOdbE1mPPYjshOYkyBYLCxtE1dliKIAjG+3XJFzPl5b9SO/zkxFhxbqoSLmAl4W7Lhu5uh68YeL0COGij7EkFp7VFU9VYyN1Ym+QfXIqqTtCkLw3yLwcYd+PZtXDzazBrK4whiU7Dc
Received: from mail-lb0-f194.google.com ([209.85.217.194]) by BAY004-MC6F12.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22712);
Sun, 27 Jul 2014 06:56:50 -0700
Received: by mail-lb0-f194.google.com with SMTP id s7so1592222lbd.1
for <XXXXXXXXXXXXXXXX>; Sun, 27 Jul 2014 06:56:48 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:date:message-id:subject:from:to
:content-type:content-transfer-encoding;
bh=7m4tMM1+mqMaN1qp2ZPwqnfwIfY9tzC/fFa2dRb4yvQ=;
b=UKemfNhlfSVo6xkZy65Zw0b+Q5xskKylRL7Xmgb86r6a9/45fRt5etQa7+WwiY9bpo
rW4fFabPAhkMRarnbHRe/UdX11j+s9I6mrU5SgxmbcxxH2KnQ+jmpIOzDBW6B5ghrqM3
8UIgLT4LabGu+zOv8H8WeBNkUEEer2/ePU1vkNqHB90qM2mJv+39hmOPfuAQEFRrHelU
Z5DmEpzBXO2gqq4/0YOZGapmv44eU8wiQNu18miMHoj9dJkm8ck89c666kWwZVFgQVwC
MpL9edtslL1bwdQZ/iKYXfKlfq0y2/hRKfCRQHT3VfAoX5GY14TJPUPAuFXWxdewXimm
wtDw==
X-Gm-Message-State: ALoCoQlrV0wSw380V76HmCRyhQ/jjBNVYk44z5TVEZDkP8RqFRGQIL/GLqJavvSkkkylMItVrmxs
MIME-Version: 1.0
X-Received: by 10.152.22.103 with SMTP id c7mr15308427laf.33.1406469408564;
Sun, 27 Jul 2014 06:56:48 -0700 (PDT)
Received: by 10.152.87.203 with HTTP; Sun, 27 Jul 2014 06:56:48 -0700 (PDT)
X-Originating-IP: [197.242.104.253]
Date: Sun, 27 Jul 2014 14:56:48 +0100
Message-ID: <CA+kVDpUHq3tNqP5VP9zLxa69oW6Qig4mfuz0R_-PBLMUWnJQNg@mail.gmail.com>
Subject: post of Freelance Translator & Editor
From: Jaime Chailland <[email protected]>
To: XXXXXXXXXXXXX
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Return-Path: [email protected]
X-OriginalArrivalTime: 27 Jul 2014 13:56:50.0728 (UTC) FILETIME=[9D621280:01CFA9A2]

originating IP 197.242.104.253 = Lagos, Nigeria, Africa.

X-Originating-IP: [197.242.104.253]

For once it's not in Mountain View!

inetnum: 197.242.104.0 - 197.242.105.255
netname: SPECTRANET-INET-LG-LTE_DYN_ALLOC
descr: Dynamically Allocated to LAGOS LTE Customers
country: NG
admin-c: ACS1-AFRINIC
tech-c: TCS1-AFRINIC
status: ASSIGNED PA
mnt-by: SNL-MNT
remarks: Please Report Any Abuse incident to [email protected]
source: AFRINIC # Filtered
parent: 197.242.96.0 - 197.242.127.255

person: Admin Contact SN
nic-hdl: ACS1-AFRINIC
address: 9 B Kwara Street
address: Osborne Estate
address: Lagos
address: Ikoyi
address: Nigeria
e-mail: [email protected]
phone: +23417601130
source: AFRINIC # Filtered

The domain is in the process of being reported for fraud.

Thanks a million! You are all doing a great job in this forum. I am an active job seeker and face many scams that I will report from now on, do you think that I should keep my user name in the forum transparent or should I use a nickname to protect myself from being spammed or something?

On Scamwarners and Eater, always use an alias that you don't use anywhere unconnected to scambaiting or scamwarning, unless you are posting to say that you are the real person impersonated by a scammer. If you signed up with your real name, PM a moderator.

I have done that. Thanks and best wishes.

Good day all! I am presently looking to relocate to another country to work so I have been applying to companies. However, yesterday I received an email that look rather odd. the email was sent from ([email protected]) without a hyphen, while the signature and the website had the hyphen (www.russells-construction.co.uk). The website itself didn't have the same vacancy, and when I checked it no sufficient information were available about it. Also the was no contact number and the grammar of the email seems rather odd for a company of that size.I became suspicious with the post vs the salary range and benefits.
The email goes below:

We have received your submitted CV/RESUME and we sincerely appreciate
your interest in our company, in line with this, we have reviewed your
CV/RESUME for employment consideration as your education back ground,
previous experience meets up with the required qualifications for the
post of Assistant, Clerk with the salary amount of 6,500 GB Pounds per
month.

We are desirous of having you work with us after this assessment by
us, as we see your skills as value addition to our company and our
clients respectively.

Benefit:
The company will provide free accommodation ,Insurance (NIN) ,Flight
Ticket,Tax Free,salary allowance , Free Medical Expenses , Vacation
paid leave Allowance and many more benefit you will see in your
Appointment Letter

Working Schedule:
•Working Days & time: Monday to Friday: 8:00 AM - 6:00PM (GMT) with
break period of 2hrs hours only,beginning from 12.00noon to 2.00pm

• Employees shall also be entitled to over-time allowance if their
work time exceeds the official stipulated hours. Salary shall be
liable to increments with time and employees' official promotions and
position in service.

• Saturday & Sunday: Off Day

•Shift Time: Morning and Night.

•Contract Period: 2 Years contract and it can be extended if only you
wish to remain with our company

We are offering you 3month vacation interval and during this period..
You have the chance to visit your love ones and family. The company
will take care of your Vacation flight ticket (Return Ticket to and
fro).

As a notice of acceptance of job offer, we shall send you appointment
and invitation letter for you to sign and return the sign copy back to
us for record purpose. So therefore kindly let us know if you are
satisfied with the salary rate above in order for us to proceed
further.

Please keep this job reference number (AUG/2014/UK/JOB/SQ144)
important as it will be needed from time to time in respect of your
job application and Interview. For more information and enquires
kindly add the I.D below in your Skype ( skypeinterview68 )


Andrew & Gareth Russell
Russells Construction Limited
13 Westpoint Enterprise Park
Clarence Avenue
Trafford Park
Manchester
M17 1QS
http://www.russells-construction.co.uk

Can you please post the complete header from your email message ? Find how to see it in the footer of my post.

If the "from" address is not a forgery, then it certainly appears to be a scam.

Domain name:
russellsconstruction.co.uk

Registrant:
Russell Construction

Registrant type:
Unknown

Registrant's address:
205 Rio Oaks
Ln Llano
TX
78643
United States

Data validation:
Registrant contact details validated by registrar on 10-Jul-2014

Registered through:
domaindiscount24
URL: http://www.domaindiscount24.net

Registrar:
Key-Systems GmbH [Tag = KEY-SYSTEMS-DE]
URL: http://www.Key-Systems.net

Relevant dates:
Registered on: 10-Jul-2014
Expiry date: 10-Jul-2015
Last updated: 10-Jul-2014

You have a good eye noticing the hyphen was missing from one address.

I just did it at this is what i got:
Email IP: 74.125.29.26
Name: Get Report
Country: US
Address: Mountain View
ISP:
Full Background Report: Get Report

yet its suppose to be a UK company in UK!!!!!!

Mountain View is Google's headquarters. All that will tell you is that the email was sent through gmail's servers--it could have come from anywhere in the world, including UK.

With that said, this one is a definite bog-standard scam even without an IP.

The email the earlier poster got came from Africa. The domain is still being reported for fraud.