VACANCY – montgomery4employ@hotmail.com

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Scam Alert 1Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Washingtonpost.com by Brian Kerbs

Interview With A Money Mule



Date: 2010-01-28, 7:03AM PST
Reply to: montgomery4employ@hotmail.com [Errors when replying to ads?]


VACANCY

Vacancy needed in our company for the post of a part-time worker,interested applicant should reply for more details.

  • Compensation: $350-$450
  • Telecommuting is ok.
  • This is a part-time job.
  • This is a contract job.
  • Principals only. Recruiters, please don’t contact this job poster.
  • Please, no phone calls about this job!
  • Please do not contact job poster about other services, products or commercial interests.
Advertisements

US National Payday Loan

I received a message on my cell phone from a man with a heavy Indian accent he called himself Brian. The message left stated that the minute I received the message I should call him back at 323-317-9727, this was a time sensitive issue and either my attorney or I should call back. If I did not call back they only thing he could do for me is wish me good luck to what would happen next.

Unaware of this scam, I did call back and the phone initially just rang then went directly to voice mail. I called again and this time the person that left the message answered, but not with any type of accent. When he asked for my name and I gave it to him, the accent was present. He then asked me to verify the last four digits of my SS number to which he read to me, in addition he read my e-mail address to me.

I started asking questions as to what this was about and how he received my information and what company he worked for. He told me this was in reference to a Pay Day loan that I had taken out. I told him that I had not taken such a loan out and what was the date he shows that I did so. He told me June 2006, that I would be sued for over $5,000.

Finding this very strange I continued to ask questions the whole time he was trying to talk over me. He then stated that he needed my attorney information because US National Payday loan no longer wanted me to repay them but they were suing me. I questioned again, who and what this was about. He went on to ask me if I’ve ever been involved in fraud? money laundering? or convicted? He made me aware that if I didn’t already have an attorney that one will be appointed to me. I asked more questions and he told me that it would be a conflict of interest if he answered my questions.

He then gave me a website address that I could go on to find out more information. http://www.usnationalpaydayloan.com; of course when I checked there was no such website. I told him that I did not want to speak to him but to someone higher that could answer my questions. He then said that an investigation will be done and they will come to my home and job.

I hung up and started googling this website and information only to find out that this is a SCAM that is going on. I then received another call from the same person two days later and the message he left on my cell phone was the exact message that was left the first time.

I then called back on a blocked number trying to receive more information. The person that answered first answered normally like it was a house phone and as I asked more questions like previously his accent became apparent again. I proceeded to continue calling blocking my number at which point my calls were not answered.

DD
Adelphi, Maryland
U.S.A.

WhoIs – www.citib-uk.com


Consumer & Business ALERT

THIS IS TO ALERT YOU THAT THE LOAN YOU ARE ABOUT TO APPLY FOR IS consumer alertBOGUS
This is a Fraudulent Operation engage in Identity Theif, Phishing and EMAIL Solicitation, and THEFT

DO NOT TRANSACT BUSINESS WITH THE GROUP
CONTACT YOUR LOCAL POLICE


Address lookup

canonical name citib-uk.com.
aliases http://www.citib-uk.com
addresses 93.185.104.27

Domain Whois record

Queried whois.internic.net with “dom citib-uk.com”…
Domain Name: CITIB-UK.COM
Registrar: GABIA, INC.
Whois Server: whois.gabia.com
Referral URL: http://www.gabia.com
Name Server: N2.PIPNI.CZ
Name Server: NS.PIPNI.CZ
Status: clientTransferProhibited
Updated Date: 27-jan-2010
Creation Date: 27-jan-2010
Expiration Date: 27-jan-2011

Last update of whois database: Thu, 28 Jan 2010 12:03:31 UTC
Queried whois.gabia.com with “citib-uk.com”…
Welcome to GABIA.COM’s WHOIS data service.

Registrant : Moesha
132 grinder court
(40356)

Domain Name: CITIB-UK.COM
Registrar: Gabia,Inc. (GABIA.COM)

Administrative, Technical, Billing Contact:
Moesha fursythe01@gmail.com
132 grinder court
(Tel) 5168745189 (fax)

Record created on january 27, 2010
Record expires on 2011-01-27
Record last updated on 2010-01-27

Domain servers in listed order:

ns.pipni.cz
n2.pipni.cz

Register a domain name at http://www.gabia.com

<a href=’http://www.gabia.com/ad.php?ad=AD-0013763&#8242; target=’_blank’><img src=’http://domain.gabia.com/images/domain_s.gif&#8217; border=’0′></a>

Network Whois record

Queried whois.ripe.net with “-B 93.185.104.27″…

% Information related to '93.185.104.0 - 93.185.109.255'

inetnum:        93.185.104.0 - 93.185.109.255
netname:        PIPNI-NET
descr:          PIPNI s.r.o.
country:        CZ
admin-c:        VS2641-RIPE
tech-c:         VS2641-RIPE
status:         ASSIGNED PA
mnt-by:         MNT-VSHOSTING
mnt-lower:      MNT-VSHOSTING
mnt-routes:     MNT-VSHOSTING
changed:        martinu@vshosting.cz 20091103
source:         RIPE

role:           VShosting Skupina
address:        Tiskarska 10
address:        Praha 10
address:        Czech Republic
phone:          +420246035835
e-mail:         lir@vshosting.cz
org:            ORG-Vs21-RIPE
admin-c:        DS6745-RIPE
admin-c:        RM3777-RIPE
admin-c:        JM6252-RIPE
admin-c:        TR1888-RIPE
tech-c:         DS6745-RIPE
tech-c:         RM3777-RIPE
tech-c:         JM6252-RIPE
notify:         lir@vshosting.cz
mnt-by:         MNT-VSHOSTING
nic-hdl:        VS2641-RIPE
changed:        martinu@vshosting.cz 20090514
source:         RIPE

% Information related to '93.185.96.0/20AS43541'

route:          93.185.96.0/20
descr:          VSHOSTING II.
notify:         lir@vshosting.cz
origin:         AS43541
mnt-by:         MNT-VSHOSTING
changed:        martinu@vshosting.cz 20080630
source:         RIPE

DNS records

name class type data time to live
http://www.citib-uk.com IN CNAME citib-uk.com 86400s (1.00:00:00)
citib-uk.com IN SOA
server: ns.pipni.cz
email: pipni.pipni.cz
serial: 4264586852
refresh: 10800
retry: 1800
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
citib-uk.com IN MX
preference: 10
exchange: mail.citib-uk.com
86400s (1.00:00:00)
citib-uk.com IN MX
preference: 20
exchange: ns3.pipni.cz
86400s (1.00:00:00)
citib-uk.com IN A 93.185.104.27 86400s (1.00:00:00)
citib-uk.com IN NS ns3.pipni.cz 86400s (1.00:00:00)
citib-uk.com IN NS ns.pipni.cz 86400s (1.00:00:00)
citib-uk.com IN NS ns2.pipni.cz 86400s (1.00:00:00)
27.104.185.93.in-addr.arpa IN PTR www17.pipni.cz 86400s (1.00:00:00)

— end —

1st Class Recruitment – www.1stclassrecruitment.org

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT.

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

The identity of an individual or entity have been stolen along with fund from their bank accounts. You are being recruited to wire transfer  these funds either by WESTERN UNION, MONEYGRAM, into your  bank, a DOMESTIC BANK or FOREIGN BANK ACCOUNT

  1. Understanding The Cyber Theft Ring
  2. Money Mule Explained
  3. Protecting Yourself Against Money Mule
  4. Washingtonpost.com by Brian Kerbs
  5. Interview With A Money Mule
  6. Bobbear.co.UK ~  Historical Money Mule Sites

Dear ScamFraudAlert,

My name is Linda Caradonna, I am the Manager of First Class Recruitment, a leading recruiting agency for home based jobs. I email you with regard to the job seeking information you have posted. I have reviewed your resume and you seem to be an appropriate candidate for the position which is currently open within one of the companies we perform our recruiting campaigns
for.

Could you please confirm that you are still interested in employment? If
you are, please, let me know and I will get back to you with more information on the position.

Regards,
Linda Caradonna
First Class Recruitment


Address lookup

canonical name www.1stclassrecruitment.org.
aliases
addresses 205.178.145.65

Domain Whois record

Queried whois.publicinterestregistry.net with “1stclassrecruitment.org”…
Domain ID:D156963983-LROR
Domain Name:1STCLASSRECRUITMENT.ORG
Created On:26-Aug-2009 20:06:37 UTC
Last Updated On:26-Oct-2009 03:53:43 UTC
Expiration Date:26-Aug-2010 20:06:37 UTC

Sponsoring Registrar:Melbourne IT, Ltd (R52-LROR)
Status:OK

Registrant ID:C125130853280358
Registrant Name:Andrea Anderson
Registrant Organization:Private Registration US
Registrant Street1:PO Box 61359
Registrant City:Sunnyvale
Registrant State/Province:CA
Registrant Postal Code:94088
Registrant Country:US
Registrant Phone:+1.5105952002
Registrant Email:contact@myprivateregistration.com

Admin ID:C125130853280355
Admin Name:PrivateRegContact Admin
Admin Organization:Private Reg US
Admin Street1:PO Box 61359
Admin City:Sunnyvale
Admin State/Province:CA
Admin Postal Code:94088
Admin Country:US
Admin Phone:+1.5105952002
Admin Email:contact@myprivateregistration.com

Tech ID:C125130853280357
Tech Name:PrivateRegContact TECH
Tech Organization:Private Reg US
Tech Street1:PO Box 61359
Tech City:Sunnyvale
Tech State/Province:CA
Tech Postal Code:94088
Tech Country:US
Tech Phone:+1.4089162124

Tech Email:contact@myprivateregistration.com
Name Server:NS15.WORLDNIC.COM

DNSSEC:Unsigned

Network Whois record

Queried whois.arin.net with “!NET-205-178-145-0-1″…
OrgName: Network Solutions, LLC
OrgID: NSL-37
Address: 13861 Sunrise Valley Drive
Address: Suite 300
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US

NetRange: 205.178.145.0 – 205.178.145.255
CIDR: 205.178.145.0/24
NetName: NSLLC01
NetHandle: NET-205-178-145-0-1
Parent: NET-205-178-128-0-1
NetType: Reassigned
Comment: Please use the NOC contact for 24/7 emergencies andcopy the abuse contact on phishing and abuse issues
RegDate: 2006-05-19
Updated: 2009-05-15

RNOCHandle: NOC2042-ARIN
RNOCName: NOC
RNOCPhone: +1-703-668-4900
RNOCEmail: noc@networksolutions.com

RAbuseHandle: ABUSE2239-ARIN
RAbuseName: Abuse
RAbusePhone: +1-703-668-4665
RAbuseEmail: abuse@networksolutions.com

OrgTechHandle: NOC2042-ARIN
OrgTechName: NOC
OrgTechPhone: +1-703-668-4900
OrgTechEmail: noc@networksolutions.com

# ARIN WHOIS database, last updated 2010-01-27 20:00

DNS records

name class type data time to live
http://www.1stclassrecruitment.org IN A 205.178.145.65 7200s (02:00:00)
1stclassrecruitment.org IN SOA
server: ns15.worldnic.com
email: namehost.worldnic.com
serial: 110011414
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
7200s (02:00:00)
1stclassrecruitment.org IN NS ns16.worldnic.com 7200s (02:00:00)
1stclassrecruitment.org IN A 205.178.145.65 7200s (02:00:00)
1stclassrecruitment.org IN NS ns15.worldnic.com 7200s (02:00:00)
1stclassrecruitment.org IN MX
preference: 10
exchange: inbound.1stclassrecruitment.org.netsolmail.net
7200s (02:00:00)
65.145.178.205.in-addr.arpa IN PTR vux.bos.netsolhost.com 500s (00:08:20)

— end —