They may post on legitimate job sites like CareerBuilder ... an email address that’s too familiar can also be a warning sign.
Regardless of the reason, there are some signs candidates can look for that ... If you saw the role advertised on a job site like LinkedIn or Indeed, double-check it's still posted and active ...