CONSAFE ENGINEERING LTD JOB INTERVIEW QUESTIONNAIRE - SCAM

[AlanJones]

Hello!

I received the following Job offer through linkedin and I think it might be a scam, since the domain where it came from is very recent and is not hosted in UK, also the contact email on the website has once less "i" that the domain of the email I received:

Received: by 10.64.19.205 with HTTP; Mon, 22 Feb 2016 07:37:19 -0800 (PST)
X-Originating-IP: [208.123.223.7]
Date: Mon, 22 Feb 2016 16:37:19 +0100
Message-ID: <CALr_u4EVB40w32qytV=r4vY3g6nUePiSOZYwBjJFgmPkCa2xEA@mail.gmail.com>
Subject: CONSAFE ENGINEERING LTD JOB INTERVIEW QUESTIONNAIRE
From: CONSAFE ENGINEERING LTD <[email protected]>
To: Removed AJ
Content-Type: multipart/mixed; boundary=001a113ec2acb340a7052c5d9b3e

--001a113ec2acb340a7052c5d9b3e
Content-Type: multipart/alternative; boundary=001a113ec2acb340a1052c5d9b3c

--001a113ec2acb340a1052c5d9b3c
Content-Type: text/plain; charset=UTF-8

Attn: Removed AJ

In response to your Job Application with us at Consafe Engineering LTD
United Kingdom, You are to download the Job Interview Questionnaire form
attach to this mail, fill in your answers and send it back to us via email.



Please keep note of your job Reference Number: *(**JOB REF:
UKVI/HO/20161119 - FADF/01**)* because we shall use it from time to time to
complete the processing of your job application.



We are looking forward in receiving the job interview questionnaire fill
form so that we can email your Appointment Letter to you.



Awaiting your urgent reply



Thank you for your cooperation and interest in our company





Kind regards


*Mr. Baker Ayres - Bsc*

CONSAFE ENGINEERING LTD
East Tullos Ind. Estate
AB12 3AX, Aberdeen SCOTLAND

Tel: +44 703 194 9514
Tel: +44 703 192 3933
Tel: +44 770 9128 593
Fax: +44 732 233 003

E: [email protected]
Web: http://consafe.co.uk/

VAT No: 732 4476 36 / Company no: 2714555

--001a113ec2acb340a1052c5d9b3c
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

What do you think?

Thank you.

[AlanJones]

*Mr. Baker Ayres - Bsc*
CONSAFE ENGINEERING LTD
East Tullos Ind. Estate
AB12 3AX, Aberdeen SCOTLAND

Tel: +44 703 194 9514
Tel: +44 703 192 3933
Tel: +44 770 9128 593
Fax: +44 732 233 003

E: [email protected]
Web: http://consafe.co.uk/

It is a definite scam. The phone numbers starting +4470 are personal redirect numbers that can be forwarded anywhere in the world and the other 2 are mobile phone numbers. A legitimate company would use proper landline phone numbers.

There's no job, so just block the scammers and don't respond to them.

Your reasoning is correct.

Domain Name: navitias-group.com
Registry Domain ID: 1990806514_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2015-12-31T16:22:54Z
Creation Date: 2015-12-31T16:22:53Z
Registrar Registration Expiration Date: 2016-12-31T16:22:53Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.4806242505
Reseller: Google Inc.
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Domain Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant State/Province: Arizona
Registrant Postal Code: 85260
Registrant Country: US
Registrant Phone: +1.4806242599
Registrant Phone Ext:
Registrant Fax: +1.4806242598
Registrant Fax Ext:
Registrant Email: [email protected]
Name Server: NS09.DOMAINCONTROL.COM
Name Server: NS10.DOMAINCONTROL.COM

The email address on the Consafe website is [email protected]. navitas-group.com has been registered for over four years, has more than a year to live, and was registered by the Navitas company giving its address, all signs of legitimacy.

navitias-group.com is a fake email-only domain. Please post the complete headers of the email from navitias-group.com so that we can kill it.

Is this what you need to block it?

elivered-To: [email protected]
Received: by 10.202.48.129 with SMTP id w123csp2801969oiw;
Wed, 24 Feb 2016 21:57:14 -0800 (PST)
X-Received: by 10.50.60.65 with SMTP id f1mr506213igr.97.1456379834539;
Wed, 24 Feb 2016 21:57:14 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-ig0-x243.google.com (mail-ig0-x243.google.com. [2607:f8b0:4001:c05::243])
by mx.google.com with ESMTPS id 64si7770247ioc.33.2016.02.24.21.57.14
for <[email protected]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 24 Feb 2016 21:57:14 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::243 as permitted sender) client-ip=2607:f8b0:4001:c05::243;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c05::243 as permitted sender) [email protected];
dkim=pass [email protected]
Received: by mail-ig0-x243.google.com with SMTP id sv7so146125igc.1
for <[email protected]>; Wed, 24 Feb 2016 21:57:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=navitias-group-com.20150623.gappssmtp.com; s=20150623;
h=mime-version:date:message-id:subject:from:to;
bh=YufgyiFNkXlW1CsGYDz8dACTfHWSvDr/LWOeN2P3f7k=;
b=N4hGriHmTunmnWDcNMGozuSPyHvZmOXdGkIoCIOZUiISsEOdGCt5mA6MrAfLKVy/Ge
hvIItxmIQTVweiKom/UYGW1e7YKWcCSjOG0lr27zWOKGVi92iL9zg74flIKwn75B/qx1
QZf0m+iuLDbP2vtjrd+h9IvViXv0xAosrvx2eHTcyqS4G9OlciKjm1yKBoXMLTvNrW0j
/vdZMy3YwB6GUFNFsdgsjq2xcl28K7Id0bgGJFU0+Pl7LZxqPQeJjIfohfb9AOdudSap
p2zR5VvoVkypdlJNS1zpQiDZ7LqC6ooIJGpm4PYixQnSSequ8aUTi7NLHFT4zMGrcA/K
Wpsg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:date:message-id:subject:from:to;
bh=YufgyiFNkXlW1CsGYDz8dACTfHWSvDr/LWOeN2P3f7k=;
b=CPBJGM6urg/Bf53XZfcSUp5Zm1QyJ6er6F9EqsrbWwSeXOKmm9nLwmK715bklgAN+w
8XKNmoYl5PQKIcn3cRoI1SegFjyLdFoqk4leJKP5QG0/7a71zRy8wi0rPNjMTqkDtxex
xQQ0TxSiE2/v9IXVbtGfwUwDf2afhtAW07rh3YUnms8umZP/u8yfP13bR2Ws+xOSBnxU
AQFE+UlPaKm+aFl+1KlsyTpxmqoPcJ7IjY0XGQ1cpMWRGvI7UmwmWQlNSSiyFhRbwsmR
xGojdaQxr/cbhnTwKXNvfX1ndHDXSJHhlHjzJKOLb92+kq52JC6uagPlhnQ3ICgDUSQ6
YU2g==
X-Gm-Message-State: AG10YOTnereATw/LCSvpnE9tUeb72M3+sZN0Bo5KjcwADXRgIjTrPIfB13g9VxIRbkJj5AY8y6Gv4lyZdvc8wA==
MIME-Version: 1.0
X-Received: by 10.50.150.8 with SMTP id ue8mr536881igb.86.1456379834000; Wed,
24 Feb 2016 21:57:14 -0800 (PST)
Received: by 10.64.19.205 with HTTP; Wed, 24 Feb 2016 21:57:13 -0800 (PST)
X-Originating-IP: [193.109.196.46]
Date: Thu, 25 Feb 2016 06:57:13 +0100
Message-ID: <CALr_u4GH=ubxJeGkhCPiAEa4JJDj-KJDjdtKB82eNMxqoSXY7g@mail.gmail.com>
Subject: APPOINTMENT AND CONFIRMATION LETTER
From: CONSAFE ENGINEERING LTD <[email protected]>
To: <[email protected]>
Content-Type: multipart/mixed; boundary=001a11383ed4aa429f052c91daff

--001a11383ed4aa429f052c91daff
Content-Type: multipart/alternative; boundary=001a11383ed4aa4299052c91dafd

--001a11383ed4aa4299052c91dafd
Content-Type: text/plain; charset=UTF-8

Thanks! Could you post the body also? Those headers don't match the body you posted above.

navitias-group.com is in the process of being reported for fraud.

Here you are:

Delivered-To: [email protected]
Received: by 10.202.48.129 with SMTP id w123csp1311859oiw;
Mon, 22 Feb 2016 07:37:19 -0800 (PST)
X-Received: by 10.50.79.137 with SMTP id j9mr12380111igx.65.1456155439908;
Mon, 22 Feb 2016 07:37:19 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-io0-x235.google.com (mail-io0-x235.google.com. [2607:f8b0:4001:c06::235])
by mx.google.com with ESMTPS id f13si41567982ioj.131.2016.02.22.07.37.19
for <[email protected]>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 22 Feb 2016 07:37:19 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c06::235 as permitted sender) client-ip=2607:f8b0:4001:c06::235;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c06::235 as permitted sender) [email protected];
dkim=pass [email protected]
Received: by mail-io0-x235.google.com with SMTP id 9so181942747iom.1
for <[email protected]>; Mon, 22 Feb 2016 07:37:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=navitias-group-com.20150623.gappssmtp.com; s=20150623;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=hGsINZ/eLTdnFUAqMfNH7ySmzPwnnbz53FJXNSuLP24=;
b=RMz4xTs8LGgiNpDueNZO8QryJ8VAOZK4CXNY1si7l89aZeEVZggWhHMRntvheP1fgs
dIt3juap61zFpw7fs5vKbfUFbrPAeBboAj2wFn26rPD4SEfq4n0YH1OVATsMSuI68DCQ
Md/HaJtVQBj07MV9hxPMlj+6cZabh8Finz6QuyoO8uLXsV3ajniFOjRKDfuFWLY5oPI6
ctz1Pw1cF5WD0J0miZBfY99HkIok7SEYx3oo3pt9JoLIYNPIKiws85L/721Krx0beM5J
3wMpDa2V7oRvZpVorv6jnTTyaqe+1lLxBFGWa602EdKws99LG6LMCTSuOwKCnASQ2Qda
gV2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:date:message-id:subject:from:to
:content-type;
bh=hGsINZ/eLTdnFUAqMfNH7ySmzPwnnbz53FJXNSuLP24=;
b=NHHEy8dzTLfTvWAmcgg361n4fuDeI3ecDFbdno+cmk1ulsHCAh/nJVzt+s98KVsChm
XZSev/171a3KyYUHaU0/aiF9GOxqAPHLdYgfEFPosuTTWfpmqRxeelJQ5NSIoeDJ8q+M
Zf4algCsVYsnn9U0l5yxTyNJOrGeo5xjjmxYD0+sXYp3ZkmlAWH78Uo8fpCVE0XaE1gQ
PpK2S4juwmLGtxgPNy9VWkeaRHIeywaGxMNHJXxHW+6bncnFUioa3GYvZiSa2aFLPpiq
6vgbUGUihzXY9aMOLmu6OX91e1UxoIg/o2ikK+66uGYKVlI0YD4eg3a0xQW+Cnj+A9Ba
lAzw==
X-Gm-Message-State: AG10YOTXg6ZQDzaQ9XBFfebHX+nUYQeKpuhXHfCewF+jhyI38V60aw4AOgaSMRueud1EzNenO/cX/dhIq/tWSQ==
MIME-Version: 1.0
X-Received: by 10.107.133.151 with SMTP id p23mr28612403ioi.16.1456155439304;
Mon, 22 Feb 2016 07:37:19 -0800 (PST)
Received: by 10.64.19.205 with HTTP; Mon, 22 Feb 2016 07:37:19 -0800 (PST)
X-Originating-IP: [208.123.223.7]
Date: Mon, 22 Feb 2016 16:37:19 +0100
Message-ID: <CALr_u4EVB40w32qytV=r4vY3g6nUePiSOZYwBjJFgmPkCa2xEA@mail.gmail.com>
Subject: CONSAFE ENGINEERING LTD JOB INTERVIEW QUESTIONNAIRE
From: CONSAFE ENGINEERING LTD <[email protected]>
To: xxxxx ernesto xxxxx salazar <[email protected]>
Content-Type: multipart/mixed; boundary=001a113ec2acb340a7052c5d9b3e

--001a113ec2acb340a7052c5d9b3e
Content-Type: multipart/alternative; boundary=001a113ec2acb340a1052c5d9b3c

--001a113ec2acb340a1052c5d9b3c
Content-Type: text/plain; charset=UTF-8

Attn: xxxxx xxxxx



In response to your Job Application with us at Consafe Engineering LTD
United Kingdom, You are to download the Job Interview Questionnaire form
attach to this mail, fill in your answers and send it back to us via email.



Please keep note of your job Reference Number: *(**JOB REF:
UKVI/HO/20161119 - FADF/01**)* because we shall use it from time to time to
complete the processing of your job application.



We are looking forward in receiving the job interview questionnaire fill
form so that we can email your Appointment Letter to you.



Awaiting your urgent reply



Thank you for your cooperation and interest in our company





Kind regards


*Mr. Baker Ayres - Bsc*

CONSAFE ENGINEERING LTD
East Tullos Ind. Estate
AB12 3AX, Aberdeen SCOTLAND

Tel: +44 703 194 9514
Tel: +44 703 192 3933
Tel: +44 770 9128 593
Fax: +44 732 233 003

E: [email protected]
Web: http://consafe.co.uk/

VAT No: 732 4476 36 / Company no: 2714555

--001a113ec2acb340a1052c5d9b3c
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:tahoma,s=
ans-serif">

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">Attn:<span style=3D"mso-spacerun:yes"=
> xxxxx xxxxx</span></span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">=C2=A0</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">In response to your Job Application w=
ith us
at Consafe Engineering LTD United Kingdom,<span style=3D"mso-spacerun:yes">=
=C2=A0
</span>You are to download the Job Interview Questionnaire form attach to t=
his
mail, fill in your answers and send it back to us via email.</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">=C2=A0</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">Please keep note of your job Referenc=
e
Number: <b style=3D"mso-bidi-font-weight:normal">(</b></span><b style=3D"ms=
o-bidi-font-weight:
normal"><span style=3D"font-size:10pt;font-family:&quot;Verdana&quot;,sans-=
serif;color:black;background:white none repeat scroll 0% 0%">JOB REF: UKVI/=
HO/20161119 - FADF/01</span></b><b style=3D"mso-bidi-font-weight:normal"><s=
pan style=3D"font-size:13pt;font-family:&quot;Tw Cen MT&quot;,sans-serif">)=
</span></b><span style=3D"font-size:13pt;font-family:&quot;Tw Cen MT&quot;,=
sans-serif"> because we shall use it from time to time to complete
the processing of your job application.</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">=C2=A0</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">We are looking forward in receiving t=
he job
interview questionnaire fill form so that we can email your Appointment Let=
ter
to you.</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">=C2=A0</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">Awaiting your urgent reply</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">=C2=A0</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">Thank you for your cooperation and in=
terest
in our company</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">=C2=A0</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">=C2=A0</span></p>

<p style=3D"margin:0in 0in 0.0001pt"><span style=3D"font-size:13pt;font-fam=
ily:&quot;Tw Cen MT&quot;,sans-serif">Kind regards</span></p>

<br><br></div><div><div class=3D"gmail_signature">*Mr. Baker Ayres - Bsc*<b=
r><br>CONSAFE ENGINEERING LTD<br>East Tullos Ind. Estate<br>AB12 3AX, Aberd=
een SCOTLAND<br><br>Tel: +44 703 194 9514<br>Tel: +44 703 192 3933<br>Tel: =
+44 770 9128 593<br>Fax: +44 732 233 003<br><br>E: <a href=3D"mailto:info@n=
avitias-group.com" target=3D"_blank">[email protected]</a><br>Web: <a=
href=3D"http://consafe.co.uk/" target=3D"_blank">http://consafe.co.uk/</a>=
<br><br>VAT No: 732 4476 36 / Company no: 2714555<br><br></div></div>
</div>