Possible sophisticated reshipping scam

Here is the mail I received after applying for a position on CareerBuilder: The link leads to a site for USAhiring. I did a spy check and the company My Boxes (http://www.my-boxes.com/) is owned by Robinhoodfilms, a film redistribution company in NV. I'm desperate for work and I'm sick of these scammers. If this is a scam, it's the second one I encountered. The first one was easy to spot due to grammatical errors, etc. This one is tricky. Can someone please confirm for me that this is a scam? It's hard for me to tell.

RE: Position Of Branch Specialist Id #5-66-8 For You

Dear

My name is Darrel Bland. I work as a senior HR Manager at A One Transportation.

With this e-mail, I would like to invite you to consider our job offer.

We are proud to be a leading company in the shipping services market. We have a wide range of clients, who are located all around the world, more specifically in 145 different countries.

Our two main keys to success are: a very unique set of services accompanied by an unbeatable customer care. Our customers get their packages tested, checked and delivered to their home addresses. Since every day we receive more and more clients requiring our services, we are now expanding our personnel in order to be able to respond to the increasing workload in a timely manner.

If you are looking for an opportunity of additional income, please take a glance at our corporate brochure, which is attached to this e-mail. If this position is suitable for you, please do not hesitate to apply for it.

The application form is located here:
http://usahiringservices.com/?p=ee3af98 ... 30449f4f91

We will carefully screen every application and will get in touch with the selected participants.

We look forward to receiving your information and having you join our team!


---
Sincerely Yours,
Darrel Bland

A One Transportation
My Boxes / HR Department
Phone: (800) 951-2009 ext. 47
E-mail: [email protected]
Web: www.my-boxes.com

What I've found so far does not look promising. There are at least 2 companies claiming to use that phone #. One on the east coast, and the other on the west coast.

The addressing on the one on the west coast is erratic at best ( claiming 10 suites in the same shopping center).

Would you please post the complete headers from the email you received? ( remove your email address before you post them).

Here's the header. Thanks for your help!

from: [email protected]
reply-to: [email protected]
to: *removed*
date: Tue, Apr 22, 2014 at 10:39 AM
subject: position of Branch Specialist ID #5-66-8 for you
mailed-by: host251.hostmonster.com
: Important according to our magic sauce.

I would not trust www.my-boxes.com . The VeriSign seal is bogus and does not link to the proper location. The same for the TRUSTe and McAffe SECURE seals.

My advice is to drop this and move on.

You can't do international reshipping. There are very good reasons USA companies don't ship overseas, to places like Russia, Romania, Nigeria. Often, the purchase was paid with a stolen account and will be charged back. There is no easy way to collect money owed. If you get involved, it is you that will have to pay for the stolen goods and maybe get a visit from police. An arrest won't look good on your resume.

While those are not the complete headers I was hoping for, it is enough to say keep very clear of these people.

Domain ID:D8324235-AFIN
Domain Name:LIVEWORKHELP.IN
Created On:21-Apr-2014 16:51:25 UTC
Last Updated On:21-Apr-2014 16:51:26 UTC
Expiration Date:21-Apr-2015 16:51:25 UTC

The domain was created only days ago, and only registered for one year. These are hallmark signs of scammers.

Combined with all of the other information given that by itself could be seemingly insignificant, it is the straw that breaks the camel's back.

This just makes me mad though, that these thieves are there victimizing people like me. Should I do anything more with the info? Thanks for your help.

I would not trust http://www.my-boxes.com . The VeriSign seal is bogus and does not link to the proper location. The same for the TRUSTe and McAffe SECURE seals.

My advice is to drop this and move on.

I've asked the other site killers to check my-boxes.com and usahiringservices.com.

Please see Hillbilly's sig for how to view complete headers. We need Received, X-Originating-IP, and anything else with an IP address.

This just makes me mad though, that these thieves are there victimizing people like me. Should I do anything more with the info? Thanks for your help.

You are very smart to ask and avoid becoming a victim.

Unfortunately, Criminals steal from victims, and that is the way it is. Nothing will change that.

The best thing you can do is to educate yourself (and your doing good so far), and educate others by posting on boards like this so the criminals can be shown to the world.

Examples of good reading are here : viewtopic.php?f=34&t=44
and here : http://www.scam-job-emails.tk/
re-shipping goods is also part of what is known as money mules, even if you are not seeing the money end of it. As Mumbles said, there are reasons international shipping rules are the way they are. Legal reasons are the most important as far as most people should be concerned.

There are skilled site killers here that can take care of the websites used for fraud. It would be most helpful to them if you could find the complete headers of the email(s) and post them.

Delivered-To: XXXXXXX
Received: by 10.52.113.37 with SMTP id iv5csp25363vdb;
Tue, 22 Apr 2014 07:39:32 -0700 (PDT)
X-Received: by 10.67.4.169 with SMTP id cf9mr44363811pad.45.1398177571868;
Tue, 22 Apr 2014 07:39:31 -0700 (PDT)
Return-Path: <[email protected]>
Received: from outbound-ss-539.hostmonster.com (outbound-ss-539.hostmonster.com. [70.40.208.228])
by mx.google.com with SMTP id yl4si22959202pbc.212.2014.04.22.07.39.31
for <XXXXXXXX>;
Tue, 22 Apr 2014 07:39:31 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 70.40.208.228 as permitted sender) client-ip=70.40.208.228;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 70.40.208.228 as permitted sender) [email protected]
Message-Id: <53567f23.64f8440a.234b.ffffb914SMTPIN_ADDED_MISSING@mx.google.com>
Received: (qmail 886 invoked by uid 0); 22 Apr 2014 14:39:30 -0000
Received: from unknown (HELO CMOut01) (67.20.127.201)
by soproxy6.mail.unifiedlayer.com with SMTP; 22 Apr 2014 14:39:30 -0000
Received: from host251.hostmonster.com ([74.220.215.51])
by CMOut01 with
id t2fT1n00q176mqq012fWMU; Tue, 22 Apr 2014 08:39:30 -0600
X-Authority-Analysis: v=2.1 cv=EOmVjTpC c=1 sm=1 tr=0
a=mNCjTv5ThJV4txTeoz4RZQ==:117 a=mNCjTv5ThJV4txTeoz4RZQ==:17 a=DsvgjBjRAAAA:8
a=f5113yIGAAAA:8 a=haUp0orad0IA:10 a=jPJDawAOAc8A:10 a=wPDyFdB5xvgA:10
a=IkcTkHD0fZMA:10 a=Ml5fpBe82zsA:10 a=TeJQ-aZTwWUA:10
a=w2colZt6qaqbqKPlDJMA:9 a=QEXdDO2ut3YA:10
Received: from localhost ([127.0.0.1]:50363 helo=host251.hostmonster.com)
by host251.hostmonster.com with esmtp (Exim 4.82)
(envelope-from <[email protected]>)
id 1Wcbr5-0005sg-HS
for XXXXXXXXXX; Tue, 22 Apr 2014 08:39:27 -0600
Date: Tue, 22 Apr 2014 08:39:25 -0600
To: XXXXXXXXXXXX
Subject: =?UTF-8?B?cG9zaXRpb24gb2YgQnJhbmNoIFNwZWNpYWxpc3QgSUQgIzUtNjYtOCBmb3IgeW91?=
X-PHP-Originating-Script: 2273:wp.modules.php
From: [email protected]
Reply-To: [email protected]
Errors-To: [email protected]
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Identified-User: {:host251.hostmonster.com:piratet1:piratetattooreno.com} {sentby:program running on server}

The email was sent from Hostmonster, on a different network than liveworkhelp.in, my-boxes.com, and usahiringservices.com are. Real companies don't need to do this.

Another site killer has agreed that they are fraudulent. They will be reported.

You guys are awesome!

Okay folks,
I have been offered a position with http://www.my-boxes.com AKA: A One Transportation and have done some research which first lead me to this forum. The only thing other than their website which I cannot seem to bring up any longer is http://www.indeed.com/forum/cmp/Brandli ... am/t486185
Which to seems to be connected. Here's what I have gone through, After submitting my resume I recieved an email as follows:
Re: Career Builder ID P3D4UDTSB - Reply on your resume
To Me
Jun 4
Our company is currently looking for experienced, hard-working members to
join our friendly team. Upon reading your resume at Job.com, we found your
proficiency level to be sufficient to take over as our new Logistics
Manager. If you are still hoping for become part of our team, we would like
to schedule a meeting to discuss the details.

Before responding to us, please skip through the details below.

Candidate requirements:

* Basic PC skills
* Microsoft Office and Adobe Acrobat Reader experience
* Knowledge of house appliances
* USPS or FedEx experience highly sought

List of duties:

Full-time employment, 40 hour work week.
Daily tasks include basic customer support service and parcel cataloging.
More precisely, you’ll have to sort out parcels sent at your home address
and send the mail list to the client. Your physical shape must allow you to
carry 10-50 lbs packages (up to 40-50 packages per month).

Please make sure you clearly realize our terms and match the desired
parameters. If you are ready to discuss your future career in this company,
contact us at: [email protected] . Our manager will get in touch with
you within a week to pick the right time for an interview.

Then followed:

Darrel Bland
To Me
Jun 13 at 5:37 PM
RE:Career Builder ID P3D4UDTSB

Friday, June 13, 2014

Dear Don,

This e-mail is to inform you that your skills and qualifications meet our criteria. We would therefore like to move on with your application.

If you wish to proceed with the application process as well, your next step is to fill in the Employment Agreement, which is attached to this e-mail.

Please make sure you read it thoroughly and do not hesitate to contact us if you have any questions regarding the document. Once you have read it and understood all terms and conditions please sign it and send it back to us as soon as possible. You can e-mail or fax it back to us. This is the fax number you can send it to: (800) 413-7909.

Aside from the Employment Agreement, please make sure to file a W-4 and an I-9 forms. These documents will have to be mailed to us with your original Employment Agreement once your probation period is completed.

It is very important that you pay close attention when filling in these documents as even a minor error can cause delay in processing your application.


---
Sincerely Yours,
Darrel Bland

A One Transportation
My Boxes / HR Department
Phone: (800) 951-2009 ext. 47
E-mail: [email protected]
Web: http://www.my-boxes.com

Followed by A telephone interview with what showed up on my CID as Bob Kunal 951-817-7773
The area code matches The Corona Ca. area code, and is issued to Volant Realty Partners at 541 N Main St. Corona, Ca. 92880 a mere 2.9 miles from My Boxes. When you call Bob back it rings twice and then ringtone.
This got me looking closer and I discovered this area code is also used in Chelyabinsk, Russia.
I looked them up with the local BBB and found nothing on either.
I contacted the local police who informed me they do not show such businesses in their databank.
I found the name of the property management company which lead me to the realtor handling the Volant and he had never heard of them.
Bottom line... SCAM.

I too recieved an email from these guys. I went through the application process, I took a phone interview. Things seemed legit. Then I recieved a message that I was as good as hired, all I had to do was accept an employment verification email. So I waited, received nothing, tried calling back the number, Verizon informs me that the call cannot be completed. I try a couple times more throughout the week, nothing. They call again, leave me the same message. Yet again, nothing in my inbox. After waiting a couple more days I decide to see if I can email the original person who contacted me, scrolling through the message I see that there's an HR email at the bottom. I try contacting this email, I get a "Couldn't send email" reply. The email address doesn't exist. After reading through all this I am convinced this is a scam. So livid.

As an update...


I have gone through the process with them (www.my-boxes.com A One) , did some work for them. Items where shipped to my address in Colorado, i had to repackage and they sent pre-paid shipping labels for me to send to addresses around the world (Russia, Poland, etc.). I have since recently moved to California, notified them of my move and that's when things started to get funny. My "manager", also called from a 951 area code but always asked that I call the VoIP number provided. When it came time to pay me, I couldn't get any correspondence. I have been thinking about driving to the Corona address on the site but I have a feeling that there is nothing there.

Bottom line: I've been taken.