Canadian Pharmacy Spam – easyonlinerxmedz.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act


Order All your Favorite RxMedications Online!
Browse Our Selection Today –> http://easyonlinerxmedz.com

Address lookup

canonical name easyonlinerxmedz.com.
aliases
addresses 60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom easyonlinerxmedz.com“…

Domain Name: EASYONLINERXMEDZ.COM
Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
Whois Server: whois.hupo.com
Referral URL: http://www.hupo.com
Name Server: NS1.ACTCTICNS.COM
Name Server: NS2.ACTCTICNS.COM
Name Server: NS3.BRIILOVENS.COM
Name Server: NS4.BRIILOVENS.COM
Name Server: NS5.84GNK.COM
Name Server: NS6.84GNK.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 02-sep-2009
Creation Date: 22-aug-2009
Expiration Date: 22-aug-2010

Last update of whois database: Thu, 03 Sep 2009 03:00:02 UTC

Queried whois.hupo.com with “easyonlinerxmedz.com“…

Domain Name: easyonlinerxmedz.com

Registrant Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Administrative Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Technical Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Billing Contact:
CAI JIASHAN
CAI JIASHAN
Email:chouren_n@yeah.net
Tel:+86.051283254915
Fax:+86.051283254915
HUAXINLU24
KunShan, JiangSu, CN 215309

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
ns1.actcticns.com
ns2.actcticns.com
ns3.briilovens.com
ns4.briilovens.com
ns5.84gnk.com
ns6.84gnk.com

Registration Date:2009-08-22 14:51:44
Expireation Date:2010-08-22 14:51:44

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum: 60.12.0.0 – 60.12.255.255
netname: UNICOM-ZJ
descr: China Unicom Zhejiang province network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: JQ16-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-ZJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040629
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20090507
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 60.12.0.0/16
descr: CNC Group CHINA169 Zhejiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: Jianhuaq Qian
nic-hdl: JQ16-AP
e-mail: chenrenhai@china-netcom.com
address: No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone: +86-571-28868063
fax-no: +86-571-28868069
country: CN
changed: wuhong@china-netcom.com 20050421
mnt-by: MAINT-CNCGROUP-ZJ
source: APNIC

DNS records

DNS query for easyonlinerxmedz.com returned an error from the server: ServerFailure

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

No records to display

— end —

Canadian Pharmacy Spam – ng-systems.net

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.169 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
67.195.14.109 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
207.115.20.132 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
75.213.113.93 United States (Los Angeles)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:
From Robert Sexton Wed Sep 2 09:16:46 2009
X-Apparently-Wed, 02 Sep 2009 09:17:11 -0700
Return-Path:
X-YahooFilteredBulk: 67.195.14.109
X-YMailISG: TBYRKD8WLDtrypfO6NxNXGP0yDAzrz3CdYN4uNyB8zdkhJygyME2AhOzjHKhRrUpZq._NUInKsP.EyiIliCb157CnYhB0BqaezKzuUp53Qiu9w1Ljzy0zv3rJhK5JqUEngfcMKEaQiOlPYusfPPFQNkIjgjQV1yX3poFuPqlw1ZVyf0YPmnOOoAmpd5Ks8lY0n3Erej6ctnbMy1U8NtEpWaiL7oIBA5W5Q8XzWGYudFTGG5Ees2iLR9HSjvwZTwsimeHnMAI8y0e9q.BpsyFwVw0OvYAXKdqkNTqaKXEdLp8WNBeamfQbhhP2gak5mTnjKNACj0Skf1P4L9iyBIPRjskRx4Mnd78YLfNHkQL_tjdrZd4juoFvgSGlm5d9EDxq_CR3dnJlN8Q7uqANIL0zO8SZ2SC5klu.HC983GsCBDV
X-Originating-IP: [67.195.14.109]
Authentication-Results: mta124.sbc.mail.re3.yahoo.com from=ng-systems.net; domainkeys=neutral (no sig); from=ng-systems.net; dkim=neutral (no sig)
Received: from 207.115.20.132 (EHLO flpd122.prodigy.net) (207.115.20.132)
by mta124.sbc.mail.re3.yahoo.com with SMTP; Wed, 02 Sep 2009 09:17:11 -0700
X-Originating-IP: [67.195.14.109]
Received: from smtp106.sbc.mail.gq1.yahoo.com (smtp106.sbc.mail.gq1.yahoo.com [67.195.14.109])
by flpd122.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with SMTP id n82GHA2X021427
for ; Wed, 2 Sep 2009 09:17:10 -0700
Message-Id: <200909021617.n82GHA2X021427@flpd122.prodigy.net>
Received: (qmail 53401 invoked from network); 2 Sep 2009 16:17:10 -0000
Received: from unknown (HELO 13.sub-70-213-117.myvzw.com) (bob@75.213.113.93 with login)
by smtp106.sbc.mail.gq1.yahoo.com with SMTP; 2 Sep 2009 16:17:09 -0000
X-Yahoo-SMTP: 9I.gPjKswBDDpZ74lhf2pkNv37iwyZQ3CbOW
X-YMail-OSG: oUhrznUVM1m0i7c_kQUv33Cnb7rJoF.P1fFuiaoKzRi8KB0dRejSrtUR4IWuStPzGEB3UdtW6IkkTv4A9iT_8EMnu54dGGZlg38LsYrtSE7mFs.culAKmpimV3LbxXx.QLjcbmTEeZSqqqAz7DeIb9PTuMvIVAetjNSBXaQDPxqbrX4Vduu_t1LnL_tVwCoLase2jJzB53Jc7vU-
X-Yahoo-Newman-Property: ymail-3
From: “Robert Sexton” <bob@ng-systems.net>
To:
Subject: Online pharmacies (9/2/2009)
Date: Wed, 2 Sep 2009 09:16:46 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset=”utf-8″
Content-Transfer-Encoding: 8bit
Content-Length: 783

Hello,

I represent a company called SPN Solutions, a company that does what’s known as advanced search engine placement. We reach a Network of over 35 million people who are predominantly US based. Our Network is entirely opt-in, and the users on our Network allow us to present them with a preferred choice whenever they are looking for anything on the top sixteen search engines. (GOOGLE, YAHOO, MSN and thirteen others.)

I seek one source to send the users on our Network, from the major search engines, for online pharmacies in various Canadian markets.

Please contact me at your earliest convenience. I am in the office daily from 9:00 AM to 5:00 PM Pacific time.

Best regards,

Robert Sexton
Dir/Business Development, SPN Solutions
Phone: 800.481.2979, ext 2001

Address lookup

canonical name myvzw.com.
aliases
addresses 207.68.174.238

Domain Whois record

Queried whois.internic.net with “dom myvzw.com“…

   Domain Name: MYVZW.COM
   Registrar: MARKMONITOR INC.
   Whois Server: whois.markmonitor.com
   Referral URL: http://www.markmonitor.com
   Name Server: CARKDNS.VZWDOMAIN.COM
   Name Server: NJBRDNS.VZWDOMAIN.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 21-jan-2009
   Creation Date: 31-may-2000
   Expiration Date: 31-may-2012

>>> Last update of whois database: Thu, 03 Sep 2009 02:55:26 UTC <<<

Queried whois.markmonitor.com with “myvzw.com“…

Registrant:
        Verizon Trademark Services LLC
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669

    Domain Name: myvzw.com

        Registrar Name: Markmonitor.com
        Registrar Whois: whois.markmonitor.com
        Registrar Homepage: http://www.markmonitor.com

    Administrative Contact:
        Domain Administrator
        Verizon Trademark Services LLC
        1320 North Court House Road
         Arlington VA 22201
        US
        domainlegalcontact@verizon.com +1.7033513164 Fax: +1.7033513669
    Technical Contact, Zone Contact:
        Domain Technician
        Verizon
        1320 North Court House Road
         Arlington VA 22201
        US
        sysmgr@verizon.com +1.7033513164 Fax: +1.7033513669

    Created on..............: 2000-05-31.
    Expires on..............: 2012-05-31.
    Record last updated on..: 2009-05-30.

    Domain servers in listed order:

    njbrdns.vzwdomain.com
    carkdns.vzwdomain.com

MarkMonitor is the Global Leader in Enterprise Brand Protection.

Domain Management
MarkMonitor Brand Protection™
AntiFraud Solutions
Corporate Consulting Services

Visit MarkMonitor at www.markmonitor.com
Contact us at 1 800 745 9229
In Europe, at +44 (0) 20 7840 1300

Network Whois record

Queried whois.arin.net with “207.68.174.238“…

OrgName:    Microsoft Corp 
OrgID:      MSFT
Address:    One Microsoft Way
City:       Redmond
StateProv:  WA
PostalCode: 98052
Country:    US

NetRange:   207.68.128.0 - 207.68.207.255 
CIDR:       207.68.128.0/18, 207.68.192.0/20 
NetName:    MICROSOFT-CORP-MSN-BLK
NetHandle:  NET-207-68-128-0-1
Parent:     NET-207-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
Comment:    
RegDate:    1996-03-26
Updated:    2005-06-29

RTechHandle: ZM39-ARIN
RTechName:   Microsoft 
RTechPhone:  +1-425-882-8080
RTechEmail:  noc@microsoft.com 

OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseName:   Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: HOTMA-ARIN
OrgAbuseName:   Hotmail Abuse 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@hotmail.com

OrgAbuseHandle: MSNAB-ARIN
OrgAbuseName:   MSN ABUSE 
OrgAbusePhone:  +1-425-882-8080
OrgAbuseEmail:  abuse@msn.com

OrgNOCHandle: ZM23-ARIN
OrgNOCName:   Microsoft Corporation 
OrgNOCPhone:  +1-425-882-8080
OrgNOCEmail:  noc@microsoft.com

OrgTechHandle: MSFTP-ARIN
OrgTechName:   MSFT-POC 
OrgTechPhone:  +1-425-882-8080
OrgTechEmail:  iprrms@microsoft.com

# ARIN WHOIS database, last updated 2009-09-02 20:00

DNS records

DNS query for 238.174.68.207.in-addr.arpa returned an error from the server: NameError

name class type data time to live
myvzw.com IN SOA
server: njbrnsmgr.vzwdomain.com
email: cdsdns.verizonwireless.com
serial: 2009073100
refresh: 43200
retry: 7200
expire: 1209600
minimum ttl: 10800
7200s (02:00:00)
myvzw.com IN NS njbrdns.vzwdomain.com 7200s (02:00:00)
myvzw.com IN NS carkdns.vzwdomain.com 7200s (02:00:00)
myvzw.com IN A 207.68.174.238 7200s (02:00:00)

— end —


donations manager

Date: 2009-09-02, 7:40AM PDT
Reply to: job-x5zjp-1354737637@craigslist.org

This position is responsible for processing of donations.
Enjoy flexibility in working location and hours.

* What we need from you?
We need the responsible and punctual person who will be taking care of regional donations. “Taking care” means to make these donations reach the destination point as fast as possible. No delays. This is so because the donations are coming to a place where they are really needed this time. If donation is late, the charity action may not be performed at the proper time. That’s why we require the punctuality from our applicants.
* How does it work?
You will be receiving tasks daily (in mornings) by e-mail. The task should be completed during the day. You shall dedicate 2-3 hours/day to complete it. The task will contain information on current donation passing through your hands. You will receive all details about where this donation is coming from, how to handle it, where it’s going, and how to make the transfer of it.
* Your salary and employment.
Depending if you work 20 hours or 30 hours per week it is paid $12,400 per year (52 weeks) and $20,600

If you are interested in job offered and willing to help children, send your resume to mark.donations.manager@gmail.com

  • Location:
  • This is a part-time job.
  • This is a contract job.
  • Principals only. Recruiters, please don’t contact this job poster.
  • Please, no phone calls about this job!
  • Please do not contact job poster about other services, products or commercial interests.

Canadian Pharmacy Spam – theeasyreliablesource.com

Buying Precription Drugs Online May Be Dangerous
– Consumer Alert –
Drug Enforcement Administration Says

warning1

National Association of Boards of Pharmacy (NABP)

Warning


“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
68.142.207.168 United States (Sunnyvale)* Whois Google DNSStuff Urgentmessage.org
168.131.150.115 Korea, Republic of* Whois Google DNSStuff Urgentmessage.org
207.115.36.135 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Get your Favorite RxMedications Online!
Browse Our Selection Today! –> http://theeasyreliablesource.com

easyreliablesource

Address lookup

canonical name theeasyreliablesource.com.
aliases
addresses 60.12.166.135

Domain Whois record

Queried whois.internic.net with “dom theeasyreliablesource.com“…

   Domain Name: THEEASYRELIABLESOURCE.COM
   Registrar: GUANGZHOU MING YANG INFORMATION TECHNOLOGY CO., LTD
   Whois Server: whois.hupo.com
   Referral URL: http://www.hupo.com
   Name Server: NS1.ACTCTICNS.COM
   Name Server: NS2.ACTCTICNS.COM
   Name Server: NS3.BRIILOVENS.COM
   Name Server: NS4.BRIILOVENS.COM
   Name Server: NS5.SYSTERNS.COM
   Name Server: NS6.SYSTERNS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 22-aug-2009
   Creation Date: 22-aug-2009
   Expiration Date: 22-aug-2010

>>> Last update of whois database: Wed, 02 Sep 2009 09:24:57 UTC <<<

Queried whois.hupo.com with “theeasyreliablesource.com“…

Domain Name: theeasyreliablesource.com

Registrant Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Administrative Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Technical Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Billing Contact:
  LIN FAHU
  LIN FAHU
  Email:sjbngopp@yeah.net
  Tel:+86.02589255471
  Fax:+86.02589255471
  GANGWANLU46
  NanJing, JiangSu, CN 210038

Domain Status:clientTransferProhibited,clientDeleteProhibited

Domain servers in listed order:
  ns1.actcticns.com
  ns2.actcticns.com
  ns3.briilovens.com
  ns4.briilovens.com
  ns5.systerns.com
  ns6.systerns.com

Registration Date:2009-08-22 14:50:08
Expireation Date:2010-08-22 14:50:08

Network Whois record

Queried whois.apnic.net with “60.12.166.135“…

inetnum:      60.12.0.0 - 60.12.255.255
netname:      UNICOM-ZJ
descr:        China Unicom Zhejiang province network
descr:        China Unicom
country:      CN
admin-c:      CH1302-AP
tech-c:       JQ16-AP
remarks:      service provider
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-ZJ
mnt-routes:   MAINT-CNCGROUP-RR
status:       ALLOCATED PORTABLE
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20040629
changed:      hm-changed@apnic.net 20060124
changed:      hm-changed@apnic.net 20090507
changed:      hm-changed@apnic.net 20090508
source:       APNIC

route:        60.12.0.0/16
descr:        CNC Group CHINA169 Zhejiang Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@cnc-noc.net 20060118
source:       APNIC

person:       ChinaUnicom Hostmaster
nic-hdl:      CH1302-AP
e-mail:       abuse@chinaunicom.cn
address:      No.21,Jin-Rong Street
address:      Beijing,100140
address:      P.R.China
phone:        +86-10-66259940
fax-no:       +86-10-66259764
country:      CN
changed:      abuse@chinaunicom.cn 20090408
mnt-by:       MAINT-CNCGROUP
source:       APNIC

person:       Jianhuaq Qian
nic-hdl:      JQ16-AP
e-mail:       chenrenhai@china-netcom.com
address:      No 1,Hangzhou University Road,Hangzhou, Zhejiang,China
phone:        +86-571-28868063
fax-no:       +86-571-28868069
country:      CN
changed:      wuhong@china-netcom.com 20050421
mnt-by:       MAINT-CNCGROUP-ZJ
source:       APNIC

DNS records

DNS query for 135.166.12.60.in-addr.arpa returned an error from the server: NameError

name class type data time to live
theeasyreliablesource.com IN SOA
server: ns.theeasyreliablesource.com
email: admin.theeasyreliablesource.com
serial: 2006123101
refresh: 300
retry: 300
expire: 86400
minimum ttl: 300
300s (00:05:00)
theeasyreliablesource.com IN A 60.12.166.135 300s (00:05:00)

— end —

Industrial & Commercial Bank of China – www.icbcchinabk.cn (Stolen)

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY TO or May Have Applied For or is CONSIDERING APPLYING FOR Is Fraudulent. A LEGITIMATE COMPANY IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Read All About This at Symantec Corp.

industrial bank of china

Address lookup

canonical name www.icbcchinabk.cn.
aliases
addresses 174.139.10.155

Domain Whois record

Queried whois.cnnic.net.cn with “icbcchinabk.cn“…

Domain Name: icbcchinabk.cn
ROID: 20090826s10001s00221486-cn
Domain Status: ok
Registrant Organization: 陈宝
Registrant Name: 陈宝
Administrative Email: 80561718@163.com
Sponsoring Registrar: 广东金万邦科技投资有限公司
Name Server:ns5.gzidc.com
Name Server:ns6.gzidc.com
Registration Date: 2009-08-26 16:28
Expiration Date: 2010-08-26 16:28

Network Whois record

Queried whois.arin.net with “174.139.10.155“…

OrgName:    VPLS Inc. d/b/a Krypt Technologies
OrgID:      VPLSI
Address:    1744 W. Katella Avenue.
Address:    Suite 200
City:       Orange
StateProv:  CA
PostalCode: 92867
Country:    US

ReferralServer: rwhois://rwhois.vpls.net:4321

NetRange:   174.139.0.0 - 174.139.255.255
CIDR:       174.139.0.0/16
NetName:    VPLSNET
NetHandle:  NET-174-139-0-0-1
Parent:     NET-174-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.VPLS.NET
NameServer: NS2.VPLS.NET
Comment:    For abuse or complaints please contact
Comment:    abuse@vpls.net. NO PHONE CALLS WILL BE ACCEPTED.
RegDate:    2008-11-11
Updated:    2008-11-11

RAbuseHandle: KRYPT-ARIN
RAbuseName:   Krypt Keeper
RAbusePhone:  +1-714-993-9997
RAbuseEmail:  hostmaster@krypt.com

RNOCHandle: NETWO813-ARIN
RNOCName:   Network Engineering
RNOCPhone:  +1-213-406-9000
RNOCEmail:  admin-arin@vpls.net

RTechHandle: KRYPT-ARIN
RTechName:   Krypt Keeper
RTechPhone:  +1-714-993-9997
RTechEmail:  hostmaster@krypt.com

OrgAbuseHandle: KRYPT-ARIN
OrgAbuseName:   Krypt Keeper
OrgAbusePhone:  +1-714-993-9997
OrgAbuseEmail:  hostmaster@krypt.com

OrgNOCHandle: NETWO813-ARIN
OrgNOCName:   Network Engineering
OrgNOCPhone:  +1-213-406-9000
OrgNOCEmail:  admin-arin@vpls.net

OrgTechHandle: KRYPT-ARIN
OrgTechName:   Krypt Keeper
OrgTechPhone:  +1-714-993-9997
OrgTechEmail:  hostmaster@krypt.com

# ARIN WHOIS database, last updated 2009-09-01 20:00

DNS records

name class type data time to live
http://www.icbcchinabk.cn IN A 174.139.10.155 7199s (01:59:59)
icbcchinabk.cn IN SOA
server: ns5.gzidc.com
email: root.ns5.gzidc.com
serial: 2009072700
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 86400
7200s (02:00:00)
icbcchinabk.cn IN A 174.139.10.155 7200s (02:00:00)
icbcchinabk.cn IN MX
preference: 0
exchange: mail.icbcchinabk.cn
7200s (02:00:00)
icbcchinabk.cn IN NS ns5.gzidc.com 7200s (02:00:00)
icbcchinabk.cn IN NS ns6.gzidc.com 7200s (02:00:00)
155.10.139.174.in-addr.arpa IN PTR customer.krypt.com 38400s (10:40:00)

— end —

WESTERN UNION INTERNATIONAL – Stolen Identity

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY TO or May Have Applied For or is CONSIDERING APPLYING FOR Is Fraudulent. A LEGITIMATE COMPANY IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Read All About This at Symantec Corp.

WESTERN UNION INTERNATIONAL
OFFICIAL SPONSOR:MERCEDES BENZ COPERATION(UK)
C/ CRYDON 28089, LONDON.
FROM: THE PROMOTIONS DIRECTOR
INTERNATIONAL PROMOTIONS DEPT.

The message is under. I am very anxious to know that i have won 700000 pounds, It is true ?
]

LOTTERY AWARD FINAL NOTIFICATION:

You have emerged the 2008 WESTERN UNION promotions award winner of our yearly car give away promotions.Your email which drew the winning number, was selected via our E-games Random Selection System (ERSS) We hereby wish to inform you that your attached with 700.000
POUNDS incash are pending your collection.

You have been approved for a payment of 700.000 POUNDS (SEVEN HUNDRED
THOUSAND POUNDS.) in cash credited to file reference number… which is deposited with a Finance & Security Company
in
your favour as beneficiary and covered with HIGH INSURANCE POLICY.
To begin your claim, you are to contact our accredited claims agent
with
your following informations:

To begin your claim, you are to contact our accredited claims agent with your following informations:

1.Full Names…etc

You are advice to contact this email for your winning claim
================================================
MR.ADAMS MARTINS.(Foreign Transfer Manager)
TRUST MANAGEMENT AND FINANCE BV.
WESTERN UNION CLAIMING SECURITY AGENCY.
C/ CRYDON 28089, UK
Tel:+4470457 95524
Email:westernunionmoneytransferonline@yahoo.co.uk

Ref: GB01/678/3951FINZL
Tel:+44 (0) 792 566 8467

From: Carly Osbourne (Sir)
To: Okan Turan
Date: 14/03/2008

YOUR ACCOUNT OPENING INQUIRY

We acknowledge receipt of your email. You will find our Non residential account opening Form attached to this e-mail.

An online account will be setup in your favor upon our receipt of your completed Non residential Account opening form:

You are therefore expected to fill and submit the attached Non residential account opening Form as an official application.

You would be required to make an initial opening deposit based on the type of account you wish to hold with FINANZIEL BANK & SECURITIES; this deposit will be credited into your new account.

The Personal Account is a regular account and the initial opening deposit is £ 750.00 (Seven Hundred and Fifty British Pounds), this amount is required to activate your new account to a fully operational account. The maximum transfer possible within a month with this Account is £ 350,000.00 or the equivalent amount in another currency (Three hundred and fifty thousand British Pounds); and with this account you can apply for a gold membership credit card after a good business relationship of one year minimum.

The Business Account is a daily business account and the initial opening deposit is £ 1,000.00 (One Thousand British Pounds), this amount is required to activate your new account to a fully operational account. The maximum transfer possible within a month with this Account is £ 500,000.00 or the equivalent amount in another currency (Five hundred thousand British Pounds); and with this account you can apply for a gold membership credit card after a good business relationship of five months minimum.

The Checking Account is a daily personal and business account and the initial opening deposit is £ 2,000.00 (Two Thousand British Pounds) this amount is required is to activate your new account to a fully operational account. The maximum transfer possible within a month is unlimited; and with this account you can apply for a gold membership credit card after a good business relationship of three months minimum.

The purpose of the Numbered Account is to reduce to a bare minimum, the bank employees who have access to the name of the account holders, it can be both personal and business or either of the two accounts; the initial opening deposit is £ 5,500.00 or the equivalent amount in another currency (Five Thousand Five Hundred British Pounds), this amount is required to activate your new account to a fully operational account; the maximum transfer possible within a month is unlimited and the minimum balance for this account is £ 15,000.00 (Fifteen Thousand British Pounds); and With this account you can apply for a gold membership credit card after a good business relationship of thirty days. Furthermore we will like you to know that with the Numbered Account you can apply for a loan; and however to be eligible for such benefit with other types of account you must have banked with us for a significant period of time; the time is determined by the type of account you operate with us and the status of your account must not be in RED.

COMPULSORY REQUIREMENT:

Applicants must have the initial opening deposit to activate the type of account that he/she desires to operate; activation must take effect not later then nine working days after after the submission of the completed Non residential form, otherwise the application will be turned down; thus the account would be terminated.

Also a scanned copy of your Identification is highly required.

PAYMENT OPTION:

We will like you to make a choice on the medium of paying the initial opening deposit to us; be informed that the opening deposit can be sent to us via telegraphic (wire) transfer, the wire transfer would be confirmed and credited into your new account within 3-7 banking days, but however on several occasions our new customers from overseas preferred using faster services such as Money Gram/Western Union Money Transfer which is received and credited on the same day. The services like Money Gram/Western Union Money Transfer apparently is faster for the remittance of such initial opening deposits if an immediate activation of the account is required by the new customer, and such services are still generally accepted in the financial sector by various financial institutions not only in Europe; hence if you decide to use any of the above mentioned services it will be up to you.

Download, Complete and sign the Non Residential Account application form here with attached and forward it copies (together with any other relevant documents) to the fax or email address shown at the end of the application form. Please include a photocopy of the pages in your passport showing your photo and signature, or a photocopy of your national identity card. For the verification of residency, please also enclose a copy of your utility bill. When you fill out the client profile you allow us to develop a customized investment strategy, and to assign you the adviser best suited to your needs.

When we receive the application form, we will find the right match for you and make sure you are assigned an adviser who will address your goals and generate the best possible results for you. We will also provide you details of your temporary account for your access/demo.

Sincerely,
Carly Osbourne (Sir)
FINANZIEL BANK & SECURITIES

NOTICE:

Please note that our emails may come a few hours later due to the fact that email correspondences to our numerous customers are queued up and later delivered by our server, we hope you bear with the slight delays whenever they occur.

REPRESENTATIVE NEEDED – michael_javine@mac.com

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY TO or May Have Applied For or is CONSIDERING APPLYING FOR Is Fraudulent. A LEGITIMATE COMPANY IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Read All About This at Symantec Corp.

Job Description

Dear Sir/Ma

BABT Limited Based in Republic of Benin, is in search of a book-keeper/company representative in the United States and Canada. This project has been developed in a way not to affect your present job nor bring you any form of stress but in order to help take care of those extra costs while you work for us. BABT deals in whole sales of Sculpture. We offer exceptional customer service and quality at discounted prices! Everything is priced in US funds.

Recently it came to our knowledge that there are a lot of lapses in handling funds coming from our clients based in United States and Canada which come in form of Cashiers checks and Money Orders which cannot be cashable outside the United States. So we need someone in United States and Canada to work as our Representative and assist us in processing the Payments from our various clients which come in on a weekly, monthly and annual basis. This is why we decided to employ a representative over in the States to help us receive our payments at your contact address you shall be providing us, in order to process our payment from our clients.

All you need to do is receive payments from our clients in Canada and U.S.A, get it cashed at your bank. You are entitled to (10% of each payment) that you process. After payment has been cashed, deduct your working fee. You will send the remaining fund to us via Western Union. Our payments will be issued out in your name as we will inform our clients to do.

If you are interested, do email me the following information below: on: michael_javine@mac.com

FULL NAME:
CONTACT ADDRESS:(NO P O BOX)
CITY:
STATE:
ZIP-CODE:
TELEPHONE NUMBER:
MOBILE NUMBER:
AGE:
SEX:
OCCUPATION:
EMAIL:

We would forward these information to one of our clients and they will start making payments to you as the company’s representative in the states. Once we have all your details in our records. We would notify you as soon we confirm that one of our clients is mailing payment across to you.

I await your urgent response.

Michael Javine
Head Of Human Resources
Michael_javine@mac.com