Back to Fake Brand Recruitment Phishing Phishing

This is a version of Fake Brand Recruitment Phishing in Phishing.

UK jobs page that asks for your Gmail address and password to apply

A page at whitlockfinancials[.]com shows a picture that reads "NEW PLANS FOR UK JOBS", "JOB OPENING !!!" and "APPLY" next to a United Kingdom flag. Under the picture are only two boxes, "gmail address" and "gmail password", and a button that says "Apply now job". There is no company name, job title, job description or contact detail. A real job application never needs your email password. The page was reported from Kenya on October 2 and October 26, 2026.

UK jobs page that asks for your Gmail address and password to apply | Screenshot

What’s different in this version

These traits set this message apart from the usual pattern.

  1. No employer is copied. The Nike example in this family copied a company's careers page. This page has no company name, logo, job title or job description, only a picture about UK jobs.

  2. It asks for the password of an email account, Gmail, instead of a social media login. The page shows no Google logo or Google sign-in design. The word "gmail" appears only in the two boxes.

  3. The password box is an ordinary text box, so the password shows in plain view while it is typed.

  4. The October 2 reports used the path /gdenkbnjkcnblv and the October 26 report used /gsermzinmlkwod, both random-looking.

  5. On October 2, 2026 the site showed the checking service a Cloudflare "Sorry, you have been blocked" page instead of the form. The form was seen on October 26, 2026.

  6. The web address was first registered in 2009 and is not new. Its name suggests a finance business, not a job board or an employer.

Related scams

Other patterns in the same category, or that share a brand with this report.

How this scam works

  1. 1

    The visitor reaches a polished careers page on a domain that is not the company’s official website. The page copies familiar logos, images, navigation, and job-related language.

  2. 2

    The page presents a social-media login as the only way to continue an application, creating an opportunity to collect a password.

  3. 3

    The flow may then ask for a one-time SMS code. Never enter that code into an unexpected page: it may be used during an attempted account takeover.

✓ Do this

  • Open the employer’s official website yourself and find its careers page there.
  • Check the address bar before entering a password or verification code.
  • If you entered a reused password, change it through the real service and review recent sign-ins.
  • Report suspicious recruitment pages to the impersonated company and the relevant platform.

✗ Avoid this

  • Do not enter a social-media password into a job page reached through an unexpected link.
  • Do not enter or share a one-time verification code with a recruiter or website.
  • Do not assume a page is genuine because it uses a familiar logo, video, or professional design.

Verbatim excerpts from the scam

Exact lines from emails or messages—searchable text so you can compare wording.

  1. 1 Excerpt 1
    NEW PLANS FOR UK JOBS
  2. 2 Excerpt 2
    JOB OPENING !!!
  3. 3 Excerpt 3
    gmail address
  4. 4 Excerpt 4
    gmail password
  5. 5 Excerpt 5
    Apply now job