They may post on legitimate job sites like CareerBuilder ... an email address that’s too familiar can also be a warning sign.