Company Representative scams, Payment Processing scams and other Employment scams.
#81993 by A.B. Wed Jan 18, 2012 11:32 pm
Good day.

This is a request to your CV posted in CareerBuilder and we want you to try for
our open vacancy.
This is not a sales gimmick requiring you to pay setup fees or sign up to a
mailing list. This is a business requiring only limited amounts of your time.
You will earn money even without going out of your house or office. The job is
regular and the salary is solid.

Position name is: Manager of Accounting and forwarding of goods

Brief Overview:


- Work 10-12 hours per week;
- be US citizen
- Flexible
- 21 years old and older
- PC, Internet access
- Know MS Office
- You may combine this job with other activity
- Ability to pick up packages weighing up to 25lbs.
- correct and available shipping address


For more information, please reply back with your resume.

As soon as your information is checked and satisfies us, our job manager will
contact you by e-mail or phone.
Best regards.


Email header details;
Return-Path: <[email protected]>
Received: from nm31-vm9.bullet.mail.ne1.yahoo.com (nm31-vm9.bullet.mail.ne1.yahoo.com [98.138.229.35])
by mtain-me01.r1000.mx.aol.com (Internet Inbound) with SMTP id 426C5380000AB
for <*removed*@aol.com>; Wed, 18 Jan 2012 09:06:28 -0500 (EST)
Received: from [98.138.90.53] by nm31.bullet.mail.ne1.yahoo.com with NNFMP; 18 Jan 2012 14:06:27 -0000
Received: from [98.138.88.238] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 18 Jan 2012 14:06:27 -0000
Received: from [127.0.0.1] by omp1038.mail.ne1.yahoo.com with NNFMP; 18 Jan 2012 14:06:27 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 87042 invoked by uid 60001); 18 Jan 2012 14:06:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1326895587; bh=EoTuGCGaWUjmT4ElOgWYPP47+hBr2Lf6Vz+rMvuM+hk=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=H1dcy9JDUeQdl9Kq5HG67JL9B9nK+NQ2+uRM+sTSD8MDhx/A4/l1rw5rwJF1oY0LDnLmrBTxnHMzDEB30/mHFYmW5tolZHTO8Kc15P0Nf2lbid228Rol+wbzZvtQINeXPlRfJW7fS+8KSJkmj53if8DKSy1ah2HU3z0ZfftiRy8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=HKbwkrEwDOd2d6mF0SaJJT0d9O7fHOIbQwj0k7z2C20qcLBK7uW23u6Zxucb5lOsgQhxmQfijU6/ujLO90W++Rw2xcOgkDv8pXgv5tEPqIhiUoDAR5ZJoJJqheJptj8wA//SIzUadQL1lYdn7BJdl3zMZvCsv+41uWWxVauH0Do=;
X-YMail-OSG: xE6GtIQVM1kf49oSMB21p8vARdCMS8U0cUtwyk1DWkHcnfb
EQmdMIfXtb6uBaW.QYQZpiFmcWHMDpkD7YAQL5HV44NOp_skHzvr8anPJyVn
4uY6LrF9nmTF9yyGByMo0GCmPk2GvUaU71vLpRk7rXhMbpBfEmjRZlVONKgw
4K9NxDXgjjs_PHppfQr8YrRuC0ORvzKtuOJB0QCyUG6vgiYrxfw34BY6a4vL
tDanxT8oQIpTVYELz52c4oGQOEA4lYUOgaO.LDy6Al2qaWUZN8XKoxtNFtV1
WcsFKiMFsjjKJWi_ZSNLVjqDFLqjyg6beJxH3Y96CN2n9hHswiFjvbPeKRYM
wVMOFT9v3bm91fjvEZlwu.r.lfBrKb9Smz3pwyBn0Vj2zX22mmux.J.8dNWj
Q_0Ikyu3a2Dp1hysbKUgeUAPTdea1LSexxUuJWIiab47iQyV61qusDxk2Q8p
vlJVU7783y2MFo3IcltllvQC849p5KWMAt0fsD8v2JgFsQwGLCcw4a8Rw0eL
oUtscqkTP5l5O2tL6MCAbIV0XW.yTPQfbfSd7R0niBR9SA57pCTb3Mr2jggk
enTzwp8I3dZgQkkRqFXo-
Received: from [41.234.199.33] by web122506.mail.ne1.yahoo.com via HTTP; Wed, 18 Jan 2012 06:06:27 PST
X-Mailer: YahooMailWebService/0.8.115.331698
Message-ID: <[email protected]>
Date: Wed, 18 Jan 2012 06:06:27 -0800 (PST)
From: Isaiah House <[email protected]>
Reply-To: Keayuudi <[email protected]>
Subject: Well-paid job ; ID - (Y967JWZBY7Q30720177).
To: "*removed*@aol.com" <*removed*@aol.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:273867552:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-SCOLL-AUTHENTICATION: mail_rly_antispam_dkim-d021.2 ; domain : yahoo.com DKIM : pass
x-aol-sid: 3039ac1d60894f16d1e417e6
X-AOL-IP: 98.138.229.35
X-AOL-SPF: domain : yahoo.com SPF : none
Advertisement

#82117 by @CBSiteSecurity Thu Jan 19, 2012 4:20 pm
Thank you for helping spread a word of caution about these types of messages! Based on the information listed within your original post, the message in question does appear to be a payment processing (shipping) scam. It also appears to be a spoof message designed to appear as if it came from a legitimate source or 3rd party company in order to lend it credibility.

We recommend such messages be disregarded and any current or future correspondence attempts related to the message be ignored.

For more information about Online Fraud, we do offer a Fraud Page for Jobseekers:

http://www.careerbuilder.com/JobSeeker/Info/Fraud.aspx

Thank you.

CareerBuilder’s Trust and Site Security Team
@CBSiteSecurity

Who is online

Users browsing this forum: No registered users and 21 guests