Account analysis and reconciliation, eh? Limited to United States, eh? Financial errands, eh?

We don't think it's cool when someone from China sends a message making it look like it was sent through CareerBuilder. Fortunately, CareerBuilder's fraud team visits PhishBucket on a regular basis. In case you didn't know, there is no such email address as openings @ accts.careerbuilder.com.

This is a money transfer/mule scam, badly impersonating the well-known job board but seriously falling short. You shouldn't bother with any offer you receive via email that wants you to process payments, especially if accounting is really not part of your skillset. And if you are good with accounting, we hope you know better already.

Message text:
From: CareerBuilder.com <openings @ accts.careerbuilder.com>
Subject: Account Assistant Needed Ref ID : YVNHTIXNJM
To:
Date: Friday, May 29, 2009, 4:57 PM

A third party management company is seeking Account Receivables proccessing assistants.

Requirement: Booking Skills,Financial errands experience and Internet Access

Job Description: Account Receivables,Basic ledger statements entry,debt processing,
Good communication skills, Account analysis and reconciliation.                     

Salary: 3,500.00 Monthly plus Bonuses

Please attach your Curriculum Vitae/Resume and email for further screening and interview bookings.

NB: This offer is limited to United States only.

Contact: David McCain
Human Resource Dept
DRA Inc.
5706 Corsa Avenue
Westlake Village,
CA 91362

Headers:
Return-Path: <openings @ accts.careerbuilder.com>
Authentication-Results: mta223.mail.re3.yahoo.com from=accts.careerbuilder.com; domainkeys=neutral (no sig); from=accts.careerbuilder.com; dkim=neutral (no sig)
Received: from 200.196.230.34 (EHLO hercules-mx.netmicro.com.br) (200.196.230.34) by mta223.mail.re3.yahoo.com with SMTP; Fri, 29 May 2009 16:57:16 -0700
Received: from metaframe.corpflex.com.br (HELO mx.titoonline.com) ([200.196.230.230]) by hercules-mx.netmicro.com.br with ESMTP; 29 May 2009 20:40:12 +0000
Received: from User ([202.103.207.224]) by mx.titoonline.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 29 May 2009 20:57:09 -0300
Reply-To: <Drecoveryinc @ aol.com>
From: "CareerBuilder.com"<openings @ accts.careerbuilder.com> 
Subject: Account Assistant Needed Ref ID : YVNHTIXNJM
Date: Fri, 29 May 2009 17:57:09 -0600
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Return-Path: openings @ accts.careerbuilder.com
Message-ID: <TITOEX01GPlsru2k0DF000147ed @ mx.titoonline.com>
Content-Length: 651

WHOIS sender IP 202.103.207.224:
(Courtesy: http://whois.domaintools.com/202.103.207.224)
IP Location:       China  China Nanning Chinanet Guangxi Province Network
IP Address:     202.103.207.224
inetnum:      202.103.192.0 - 202.103.255.255
netname:      CHINANET-GX
descr:        CHINANET Guangxi province network
descr:        Data Communication Division
descr:        China Telecom
country:      CN
admin-c:      CH93-AP
tech-c:       CR766-AP
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CHINANET-GX
changed:      hostmaster @ ns.cninanet.cn.net 20000101
changed:      hm-changed @ apnic.net 20040906
status:       ALLOCATED PORTABLE
changed:      hm-changed @ apnic.net 20041210
source:       APNIC
role:         CHINANET GUANGXI
address:      No.35,Minzhu Road,Nanning 530015
country:      CN
phone:        +86-771-2815987
fax-no:       +86-771-2839278
e-mail:       hostmaster @ gx163.net
trouble:      send spam reports to hostmaster @ gx163.net
trouble:      send abuse reports to hostmaster @ gx163.net
trouble:      times in GMT+8
admin-c:      CR76-AP
tech-c:       BD37-AP
nic-hdl:      CR766-AP
remarks:      http://www.gx.cninfo.net
notify:       hostmaster @ gx163.net
mnt-by:       MAINT-CHINANET-GX
changed:      hostmaster @ gx163.net 20021024
source:       APNIC
person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam @ ns.chinanet.cn.net
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy @ cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

Comments

Add New Search RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

---

Tag it: