Continental-Transit.com Phishing-Reshipping Scam
A suspected reshipping job scam email claiming to be from Careerbuilder for Continental Transit Inc is making it’s rounds to jobseekers who has resumes posted online. They actually address the email recipient by their name this time, Here’s a copy of the email I received:
[#CB45120069-551014] CareerBuilder : Position DISTRIBUTION-MANAGER
from: firstname.lastname@example.org to me
Dear (addressed to me),
After viewing your resume on careerbuilder, we have decided to contact you.
We have an excellent opportunity for you.
Company Name: Continental Transit
Salary: starts $1,875 monthly + bonus program
Apply Now: http://ct-webappl.org
– Get business parcels at your homeplace
– Process forwarding shipments to it’s assigned destination
– Coordinate with your supervisor
– Close work with UPS, USPS, FedEx
– Work with a user-friendly control panel (online workplace)
UPDATED 6/15/15! Continental-transit.com is now redirecting visitors to http://ct-comp.com!
They have gone to some great lengths to make this job offer appear legitimate unlike others we have seen in the past. This scam actually sends potential interested employees to a website at http://ct-webappl.org to “apply” for the position. Notice it has a .org extension to make it appear more on the up and up. Here’s where it get’s really interesting. Here’s a screenshot of this site:
First of all, the top part of this page is actually a “frame” which visitors see a different website address below it. The actual website that the potential employee will be entering their details on is http://ct-application-form.com/Distribution-Manager and the frame above it in grey is http://webhosting.yahoo.com/forward.html. Therefore to the unsuspecting applicant, this website appears to be http://ct-webappl.org.
According to the whois information, http://ct-webappl.org is registered to someone named Tim Davis under the organization name: ctwebapplication and the address given is a residence at 232 KRISTI LN SYLACAUGA, AL 35150 in the U.S. The domain is registered through Melbourne IT, Ltd (R52-LROR) in Australia and the Tech Organization (web host) is Yahoo! Inc.
However, both http://ct-application-form.com (registered 05/07/2015) and http://continental-transit.com (registered 04/07/2015) , the actual real websites used in this scam is registered with Bizcn.com,Inc located in Xiamen, Fujian China on IP address 18.104.22.168 which is hosted with Petersburg Internet Network ltd. in Russia. The actual registrants is using domain privacy on these domains to keep their identity hidden. Below is the screenshots of these 2 websites:
Red Flags Galore On Both continental-transit.com and ct-application-form.com
If you’ll notice on the “Contact Us” page screenshot above found on continental-transit.com, the business address shown is Suite 12 Prague 1-Mala Strana, Vsehrdova, Czech Republic but the phone number listed is a US number +1 (585) 326-0400 which is located in Rochester New York! Also the website was just registered in April 2015, however on their “Testimonials” page they have 6 so-called testimonials from all over the world with one “person” in the U.S. claiming to have happily worked from home shipping packages for Continental Transit Inc for the last YEAR and A HALF!
On the ct-application-form.com page, if you look at the the page description included as meta tags etc in the html source code they are trying to fool potential victims by inserting an obviously fake association with Adecco Employment Agency! The meta description (that gets picked up and shown in the listing by the search engines) says “Search for jobs and apply online with Adecco USA. Fill your company’s hiring needs and post openings with us today!”
Also they have inserted the words “Submit Your Resume-Apply For Jobs Online- Adecco USA files” in all the css styles throughout the entire page! But keep in mind that they are using a frame source page initially using the website http://ct-webappl.org hosted on Yahoo in the US as a decoy for the actual website that is registered in China with an IP address hosted in Russia!
DO NOT ENTER YOUR PERSONAL DETAILS OR APPLY!
http://ct-webappl.org is clearly a phishing website that redirects the personal details entered to possible criminals who are more than likely running a package forwarding/shipping scam through Continental-Transit.com. You can read more about how this scam works at one of our previous posts at Parcelal.com Scam Alert or Premium-Delivery.com Scam Alert.
REPORT MAIL FRAUD!
If you believe you’re a victim of a re-shipping/forwarding scam, file a complaint with Postal Inspectors online or call Postal Inspectors at 1-877-876-2455 (option 4, Mail Fraud).
Also report the scam at http://ic3.gov which is the official site working in conjunction with the FBI to help stop internet crime.
Have you received a suspicious email offering you a “job” you never applied for? Feel free to copy and paste the email in the comments so we can help alert and prevent others from becoming victims.
Share This Post To Help Warn Others about the Continental-Transit.com Scam!
Disclosure** We get paid a commission when you purchase from LifeLock using one of our links.