Fraud Trans. Kyra Cohen, [email protected]

Odds are better than even that this will be one of the more sophisticated employment scams involving fraudulent bank transfers and web domains. I'll update if so.



Good day.

Our firm "MondiTreo" has found your data in Careerbuilder database and believe you are a perfect candidate for this job which we offer.

Description:

Position name is: Correspondence Manager.

Job Location: United States
Citizenship or Work-Visa: US
Employee Type: Part-Time
Salary: $30.00/per task plus compensation of all costs.

QUALIFICATIONS & RESPONSIBILITIES

- Over 18
- Very organized
- Responsibility
- Providing of documents, catalogs and correspondence
- Have own vehicle and a valid driver's license


If you are interested, please reply back with your resume.



Email header details;

X-AOL-UID: 4171.184883516
X-AOL-DATE: Wed, 20 Jul 2011 7:03:59 AM Eastern Daylight Time
Return-Path: <[email protected]>
Received: from mtain-dk03.r1000.mx.aol.com (mtain-dk03.r1000.mx.aol.com [172.29.180.7]) by air-me01.mail.aol.com (v129.10) with ESMTP id MAILINME014-8ba34e26b61e2a8; Wed, 20 Jul 2011 07:03:58 -0400
Received: from mailout-us.gmx.com (mailout-us.gmx.com [74.208.5.67])
by mtain-dk03.r1000.mx.aol.com (Internet Inbound) with SMTP id A9C6138000042
for <*removed*>; Wed, 20 Jul 2011 07:03:58 -0400 (EDT)
Received: (qmail 15435 invoked by uid 0); 20 Jul 2011 10:57:17 -0000
Received: from 46.203.123.250 by rms-us010.v300.gmx.net with HTTP
Content-Type: text/plain; charset="utf-8"
Date: Wed, 20 Jul 2011 10:57:15 +0000
From: "Kyra Cohen" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Subject: Fresh job _ id : K66588331748.
To: [email protected]
X-Authenticated: #119899087
X-Flags: 0001
X-Mailer: GMX.com Web Mailer
x-registered: 0
X-GMX-UID: u4IVeoFw62mhL7znRGM5/bFCRzdyMoPe
x-aol-global-disposition: G
x-aol-sid: 3039ac1db4074e26b61e1c0a
X-AOL-IP: 74.208.5.67
X-AOL-SPF: domain : presidency.com SPF : none
Content-Transfer-Encoding: quoted-printable

Thank you for helping spread a word of caution about these types of messages! Based on the information listed within your original post, the message in question does appear to be a payment processing (shipping) scam. It also appears to be a spoof message designed to appear as if it came from a legitimate source or 3rd party company in order to lend it credibility.

We recommend such messages be disregarded and any current or future correspondence attempts related to the message be ignored.

For more information about Online Fraud, we do offer a Fraud Page for Jobseekers:

http://www.careerbuilder.com/JobSeeker/Info/Fraud.aspx

Thank you.

CareerBuilder’s Trust and Site Security Team
@CBSiteSecurity