by awa
Sun Jun 09, 2013 8:21 pm
I received this email today from someone claiming to be a recruiter whose service I have used trying to get me to verify my personal information.
Things initially stood out as suspicious:
- The subject is a Forward
- The recruiter never identifies what firm they are referring to in the email.
- I have not applied for a job or submitted my resume anywhere in over 7 months, although the email claims that I have.
- The personal information they were trying to get me to confirm contained the fake phone number I provided when registering for a CareerBuilder account.
After doing some research, I found that trying to go to the domain suffix of the sender's email account, newdirection2013.com, redirects you to the Resume Rabbit website (which is in my opinion a scam company itself). I'm assuming the link to "Resume Launch" contained in the email would probably take me to the same place, but there is no way I am going to click on it to find out.
Apparently the good folks at Resume Rabbit bought/stole/were given my account profile from CareerBuilder. It doesn't appear they have access to my resume itself, which does contain a legitimate phone number. I don't know if there is anything illegal going on here, but it is suspicious to say the least.
I also found almost exactly the same email text being used by another email address ([email protected]).
Email 1 is the one I received, Email 2 is a copy of an email I found after googling the text used in Email 1.
----------------------------------------------------Email 1-----------------------------------------------------------------
x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; spf=softfail (sender IP is 74.91.94.240) [email protected]; dkim=none header.d=newdirection2013.com; x-hmca=fail [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: FAIL
X-SID-Result: FAIL
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: 11chDOWqoTkWgBhEEUdKrkW+jO8UqCQcgSmVnB9fXnIBUZdxojJek59rgLLYunlKDLT6rjf56HsOkTmK3li+9ZS+50sT4o7KsfN/5wlt6vxZTISPTdyvGACOURiobJU/A/Ep5eLJkXUdznOlqJwg+danAGA2fhMc
Received: from 240-94.rs.smtp.com ([74.91.94.240]) by SNT0-MC4-F17.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sun, 9 Jun 2013 13:25:36 -0700
Return-Path: <[email protected]>
X-MSFBL: cmlyb290c0Bob3RtYWlsLmNvbUA3NF85MV85NF8yNDBAY21pX2RlZGljYXRlX3Bv
b2xA
DKIM-Signature: v=1; a=rsa-sha256; d=smtp.com; s=smtpcomcustomers; c=relaxed/simple;
q=dns/txt; [email protected]; t=1370809536;
h=From:Subject:To:Date:MIME-Version:Content-Type;
bh=hG1lGWNdewUrGTdjnm41HZD5E7Ra45H3aQuu5EjdZ7o=;
b=iq+bYw2UPC7kcvH4Ywh61wkPH3pdQIZEWuNPPXpunvViujCRHxsFRaYdvR68OZQG
vP/+LX3QXPRkHZmnrO2zyn3sEcLWaoXyn4n7bZQSXEivEo4C3egtBsDdplt+0vTR
xmE1eUMtztCao8XvPCh68aIZugSiiYQlCs+cDemkE58=;
Received: from [173.188.200.129] ([173.188.200.129:60530] helo=Rick-Desktop.domain.invalid)
by rs-ord-mta01.smtp.com (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTPA
id 5B/09-16092-FB4E4B15; Sun, 09 Jun 2013 20:25:36 +0000
Content-Type: multipart/alternative; boundary="===============1032645163=="
MIME-Version: 1.0
From: "Recruiter - S. Bryant" <[email protected]>
To: *********************************************
Subject: FW: Your application for position
Reply-To: [email protected]
Sender: [email protected]
Date: Sun, 09 Jun 2013 16:25:19 -0400
Message-ID: <[email protected]>
X-SMTPCOM-Tracking-Number: 03e3de29-9b2d-495d-b3bc-4a898459ab2a
X-SMTPCOM-Sender-ID: 1000718
X-SMTPCOM-Spam-Policy: SMTP.com is a paid relay service. We do not tolerate UCE of any kind. Please report it ASAP to [email protected]
X-OriginalArrivalTime: 09 Jun 2013 20:25:36.0768 (UTC) FILETIME=[802E9000:01CE654F]
++++++,
I want to thank you for using our recruiting firm for your employment search. In the past month you have sent your resume in response to one of our current projects. We are currently updating our database and want to verify your information for our records. (see below)
Please verify the following:
Full Name: +++++++
Applied for: ID: 45358
City/State: ++++++
Email Address: +++++
Phone Number: ++++++
Last Compensation: $
Resume on File: YES
In the meantime, our firm highly suggests getting your resume out to as many employers and recruiters as possible. One such tool is Resume Launch which posts your resume to 85+ job boards. I would highly suggest using this to better your exposure. This tool alone can get you in front of millions of recruiters and hiring authorities.
If any of these details have changed, please let us know so we can better serve you in finding the right opportunity. If you have any questions, please don’t hesitate to reach out.
Thanks for trusting us with your career search.
Sincerely,
Stephanie Bryant
Executive Recruiter
-----------------------------------------------End Email 1---------------------------------------------------------------------
-----------------------------------------------Email 2--------------------------------------------------------------------------
from: Recruiter - S. Bryant <[email protected]> via smtp.com
reply-to: [email protected]
to: Christopher Green <[email protected]>
date: Mon, Apr 1, 2013 at 3:47 PM
subject: FW: application submittal
signed-by: smtp.com
++++++++,
I want to thank you for using our recruiting firm for your employment search. In the past month you have sent your resume in response to one of our current projects. We are currently updating our database and want to verify your information for our records. (see below)
Please verify the following:
Full Name: ++++++++
Applied for: ID: 32535
City/State: ++++++
Email Address: ++++++++++++++
Phone Number: ++++++++++
Current Compensation: $287000
Resume on File: YES
In the meantime, our firm highly suggests getting your resume out to as many employers and recruiters as possible. One such tool is Resume Launch which posts your resume to 85+ job boards. I would highly suggest using this to better your exposure. This tool alone can get you in front of millions of recruiters and hiring authorities.
If any of these details have changed, please let us know so we can better serve you in finding the right opportunity. If you have any questions, please don’t hesitate to reach out.
Thanks for trusting us with your career search.
Sincerely,
Stephanie Bryant
Executive Recruiter
This email is being sent because at some point in the past 6 months you have applied to a position that our recruiting firm represents. Although this is an infrequent mailing, you may remove yourself from this list by typing 'unsubscribe' in the subject line.
Things initially stood out as suspicious:
- The subject is a Forward
- The recruiter never identifies what firm they are referring to in the email.
- I have not applied for a job or submitted my resume anywhere in over 7 months, although the email claims that I have.
- The personal information they were trying to get me to confirm contained the fake phone number I provided when registering for a CareerBuilder account.
After doing some research, I found that trying to go to the domain suffix of the sender's email account, newdirection2013.com, redirects you to the Resume Rabbit website (which is in my opinion a scam company itself). I'm assuming the link to "Resume Launch" contained in the email would probably take me to the same place, but there is no way I am going to click on it to find out.
Apparently the good folks at Resume Rabbit bought/stole/were given my account profile from CareerBuilder. It doesn't appear they have access to my resume itself, which does contain a legitimate phone number. I don't know if there is anything illegal going on here, but it is suspicious to say the least.
I also found almost exactly the same email text being used by another email address ([email protected]).
Email 1 is the one I received, Email 2 is a copy of an email I found after googling the text used in Email 1.
----------------------------------------------------Email 1-----------------------------------------------------------------
x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; spf=softfail (sender IP is 74.91.94.240) [email protected]; dkim=none header.d=newdirection2013.com; x-hmca=fail [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: FAIL
X-SID-Result: FAIL
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: 11chDOWqoTkWgBhEEUdKrkW+jO8UqCQcgSmVnB9fXnIBUZdxojJek59rgLLYunlKDLT6rjf56HsOkTmK3li+9ZS+50sT4o7KsfN/5wlt6vxZTISPTdyvGACOURiobJU/A/Ep5eLJkXUdznOlqJwg+danAGA2fhMc
Received: from 240-94.rs.smtp.com ([74.91.94.240]) by SNT0-MC4-F17.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sun, 9 Jun 2013 13:25:36 -0700
Return-Path: <[email protected]>
X-MSFBL: cmlyb290c0Bob3RtYWlsLmNvbUA3NF85MV85NF8yNDBAY21pX2RlZGljYXRlX3Bv
b2xA
DKIM-Signature: v=1; a=rsa-sha256; d=smtp.com; s=smtpcomcustomers; c=relaxed/simple;
q=dns/txt; [email protected]; t=1370809536;
h=From:Subject:To:Date:MIME-Version:Content-Type;
bh=hG1lGWNdewUrGTdjnm41HZD5E7Ra45H3aQuu5EjdZ7o=;
b=iq+bYw2UPC7kcvH4Ywh61wkPH3pdQIZEWuNPPXpunvViujCRHxsFRaYdvR68OZQG
vP/+LX3QXPRkHZmnrO2zyn3sEcLWaoXyn4n7bZQSXEivEo4C3egtBsDdplt+0vTR
xmE1eUMtztCao8XvPCh68aIZugSiiYQlCs+cDemkE58=;
Received: from [173.188.200.129] ([173.188.200.129:60530] helo=Rick-Desktop.domain.invalid)
by rs-ord-mta01.smtp.com (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTPA
id 5B/09-16092-FB4E4B15; Sun, 09 Jun 2013 20:25:36 +0000
Content-Type: multipart/alternative; boundary="===============1032645163=="
MIME-Version: 1.0
From: "Recruiter - S. Bryant" <[email protected]>
To: *********************************************
Subject: FW: Your application for position
Reply-To: [email protected]
Sender: [email protected]
Date: Sun, 09 Jun 2013 16:25:19 -0400
Message-ID: <[email protected]>
X-SMTPCOM-Tracking-Number: 03e3de29-9b2d-495d-b3bc-4a898459ab2a
X-SMTPCOM-Sender-ID: 1000718
X-SMTPCOM-Spam-Policy: SMTP.com is a paid relay service. We do not tolerate UCE of any kind. Please report it ASAP to [email protected]
X-OriginalArrivalTime: 09 Jun 2013 20:25:36.0768 (UTC) FILETIME=[802E9000:01CE654F]
++++++,
I want to thank you for using our recruiting firm for your employment search. In the past month you have sent your resume in response to one of our current projects. We are currently updating our database and want to verify your information for our records. (see below)
Please verify the following:
Full Name: +++++++
Applied for: ID: 45358
City/State: ++++++
Email Address: +++++
Phone Number: ++++++
Last Compensation: $
Resume on File: YES
In the meantime, our firm highly suggests getting your resume out to as many employers and recruiters as possible. One such tool is Resume Launch which posts your resume to 85+ job boards. I would highly suggest using this to better your exposure. This tool alone can get you in front of millions of recruiters and hiring authorities.
If any of these details have changed, please let us know so we can better serve you in finding the right opportunity. If you have any questions, please don’t hesitate to reach out.
Thanks for trusting us with your career search.
Sincerely,
Stephanie Bryant
Executive Recruiter
-----------------------------------------------End Email 1---------------------------------------------------------------------
-----------------------------------------------Email 2--------------------------------------------------------------------------
from: Recruiter - S. Bryant <[email protected]> via smtp.com
reply-to: [email protected]
to: Christopher Green <[email protected]>
date: Mon, Apr 1, 2013 at 3:47 PM
subject: FW: application submittal
signed-by: smtp.com
++++++++,
I want to thank you for using our recruiting firm for your employment search. In the past month you have sent your resume in response to one of our current projects. We are currently updating our database and want to verify your information for our records. (see below)
Please verify the following:
Full Name: ++++++++
Applied for: ID: 32535
City/State: ++++++
Email Address: ++++++++++++++
Phone Number: ++++++++++
Current Compensation: $287000
Resume on File: YES
In the meantime, our firm highly suggests getting your resume out to as many employers and recruiters as possible. One such tool is Resume Launch which posts your resume to 85+ job boards. I would highly suggest using this to better your exposure. This tool alone can get you in front of millions of recruiters and hiring authorities.
If any of these details have changed, please let us know so we can better serve you in finding the right opportunity. If you have any questions, please don’t hesitate to reach out.
Thanks for trusting us with your career search.
Sincerely,
Stephanie Bryant
Executive Recruiter
This email is being sent because at some point in the past 6 months you have applied to a position that our recruiting firm represents. Although this is an infrequent mailing, you may remove yourself from this list by typing 'unsubscribe' in the subject line.