24 Mar



Subect Line: Job Offer !

Message contains attachments1 File (38KB)

We have an open position in your area and we would like you to participate.
We are accepting applications for qualified individuals to become mystery shoppers.
If you are interested in working with us please complete the attached form.

Received-SPF: fail (domain of does not designate as permitted sender)
X-Originating-IP: []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=neutral (no sig)
Received: from (EHLO ( by with SMTP; Sat, 23 Mar 2013 05:46:19 -0700
Received: from ([]) by with Microsoft SMTPSVC(6.0.3790.3959); Sat, 23 Mar 2013 08:35:52 -0400
Message-ID: <ADC314EC286A407B81429A174839DF79@WIN-LREAI02I9GO>
Reply-To: “” <>
From: <>
Subject: Job Offer !
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049


Posted by on 03/24/2013 in Employment (Job) Scam


Tags: , , , , ,

2 responses to ““”

  1. cbsitesecurity

    04/01/2013 at 10:22

    Thank you for helping spread a word of caution about these types of messages! Based on the information listed within your original post, the message in question does appear to be a payment processing (shipping) scam. It also appears to be a spoof message designed to appear as if it came from a legitimate source or 3rd party company in order to lend its credibility. .

    We recommend such messages be disregarded and any current or future correspondence attempts related to the message be ignored.

    For more information about Online Fraud, we do offer a Fraud Page for Jobseekers:

    Thank you.
    CareerBuilder’s Trust and Site Security Team

    • Katie

      04/12/2013 at 14:29

      Thank you Career Builder security. I have one question however. Why do you use for a contact domain instead of the domain? That had raised additional suspicions and spured discusson here:


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: