The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED
These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule
Money Mule Explained
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule
Here’s another batch of scam sites:
Highfive Group Inc (not live yet)
HIGH-FIVEGROUP.NET
HIGHFIVE-GROUP.NET
Indigo Group Llc (not live yet)
INDIGOUK-GROUP.NET
UK-INDIGOGROUP.NET
Invincible Group Llc
Tel: +44 020 3239 8035, Fax: +44 114 352 0064
INVINCIBLE-GROUP.NET
UK-INVINCIBLEGROUP.NET
Mercury Group Llc
Tel: +44 020 7193 9318, Fax: +44 208 099 7381
MERCURY-GROUPLLC.NET
UK-MERCURYGROUP.NET
Monet Group Llc (not live yet)
MONET-UKGROUP.NET
UK-MONETGROUP.NET
Pluto Group Llc (not live yet)
PLUTO-GROUPLTD.NET
UK-PLUTOGROUP.NET
Profi Group Llc (not live yet)
PROFIUK-GROUP.NET
UK-PROFIGROUP.NET
Topaz Group Llc (not live yet)
TOPAZUK-GROUP.NET
UK-TOPAZGROUP.NET
Address lookup
canonical name | high-fivegroup.net. |
aliases | |
addresses | 62.122.73.147 |
Domain Whois record
Queried whois.internic.net with “dom high-fivegroup.net”…
Domain Name: HIGH-FIVEGROUP.NET
Registrar: PAKNIC (PRIVATE) LIMITED
Whois Server: whois.paknic.com
Referral URL: http://www.paknic.com
Name Server: NS1.SHEETSHIP.CC
Name Server: NS2.QUIXSIMPLE.NET
Name Server: NS3.LEARBEER.COM
Status: ok
Updated Date: 23-aug-2010
Creation Date: 23-aug-2010
Expiration Date: 23-aug-2011
>>> Last update of whois database: Thu, 26 Aug 2010 06:43:25 UTC
Queried whois.paknic.com with “high-fivegroup.net”…
WHOIS.PAKNIC.COM
================
Domain name: HIGH-FIVEGROUP.NET
Created On: 8/23/2010 6:32:18 PM
Last Updated On: 8/23/2010 6:32:18 PM
Expiration Date: 8/23/2011 6:32:18 PM
Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:
For Customer Support Please Contact:
RV Ltd.
http://dnregistrar.ru/ [support@dnregistrar.ru]
Pyatnitskaya str. 28-12
Moscow, Moscow 115035, RU
Registrant Name: Pavel Eroshkin
Registrant Organization: NA
Registrant Street1: ul. 50 Let Oktyabrya d.69 kv.46
Registrant Street2:
Registrant City: Syzran
Registrant State/Province: Samarskaya oblast
Registrant Postal Code: 446000
Registrant Country: RU
Registrant Phone: 7.8332673321
Registrant Phone Ext.:
Registrant FAX: 7.8332673321
Registrant Email: plot@fastermail.ru
Admin Name: Pavel Eroshkin
Admin Organization: NA
Admin Street1: ul. 50 Let Oktyabrya d.69 kv.46
Admin Street2:
Admin City: Syzran
Admin State/Province: Samarskaya oblast
Admin Postal Code: 446000
Admin Country: RU
Admin Phone: 7.8332673321
Admin Phone Ext.:
Admin FAX: 7.8332673321
Admin Email: plot@fastermail.ru
Billing Name: Pavel Eroshkin
Billing Organization: NA
Billing Street1: ul. 50 Let Oktyabrya d.69 kv.46
Billing Street2:
Billing City: Syzran
Billing State/Province: Samarskaya oblast
Billing Postal Code: 446000
Billing Country: RU
Billing Phone: 7.8332673321
Billing Phone Ext.:
Billing FAX: 7.8332673321
Billing Email: plot@fastermail.ru
Tech Name: Pavel Eroshkin
Tech Organization: NA
Tech Street1: ul. 50 Let Oktyabrya d.69 kv.46
Tech Street2:
Tech City: Syzran
Tech State/Province: Samarskaya oblast
Tech Postal Code: 446000
Tech Country: RU
Tech Phone: 7.8332673321
Tech Phone Ext.:
Tech FAX: 7.8332673321
Tech Email: plot@fastermail.ru
Name Servers:
ns1.sheetship.cc
ns2.quixsimple.net
ns3.learbeer.com
PAKNIC Whois Version 1.3 8/26/2010 7:44:10 AM
Network Whois record
Queried whois.ripe.net with “-B 62.122.73.147″…
Information related to ‘62.122.72.0 – 62.122.79.255’
inetnum: 62.122.72.0 – 62.122.79.255
netname: RELNET-NET
descr: “Leksim” Ltd.
country: EU
remarks: trouble: spam/scam/abuse issues send *ONLY* to: abuse@rel-net.eu
org: ORG-TA388-RIPE
admin-c: JT384-RIPE
tech-c: BS594-RIPE
tech-c: MR10655-RIPE
status: ASSIGNED PI
mnt-by: RELNET
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: RELNET
mnt-domains: RELNET
changed: info@rel-net.eu 20100130
changed: info@rel-net.eu 20100203
changed: info@rel-net.eu 20100218
source: RIPE
mnt-routes: ROOT-MNT
organisation: ORG-TA388-RIPE
org-name: “Leksim” Ltd.
org-type: OTHER
address: Stationsplein 30, 2910 MJ Capelle aan den IJssel, The Netherlands
phone: +31 10 2391391
fax-no: +31 10 2391392
e-mail: ripe@rel-net.eu
admin-c: JT384-RIPE
tech-c: BS594-RIPE
mnt-ref: RELNET
mnt-by: RELNET
changed: ripe@rel-net.eu 20100130
source: RIPE
person: Justin Thomson
address: Stationsplein 30
address: 2910 MJ Capelle aan den IJssel
address: THE NETHERLANDS
abuse-mailbox: abuse@rel-net.eu
e-mail: jt@rel-net.eu
mnt-by: RELNET
phone: +31 10 2391391
nic-hdl: JT384-RIPE
changed: jt@rel-net.eu 20100130
source: RIPE
person: Bernd Spiess
address: Gabelsberger Strasse 15
address: 9021 Klagenfurt
address: AUSTRIA
e-mail: bs@rel-net.eu
mnt-by: RELNET
phone: +43 46 3223501
nic-hdl: BS594-RIPE
changed: bs@rel-net.eu 20100130
source: RIPE
person: Marcel Russo
address: 31, z.a. am Bann
address: L-3375 Leudelange
address: LUXEMBURG
e-mail: mr@rel-net.eu
mnt-by: RELNET
phone: + 352 2551301
nic-hdl: MR10655-RIPE
changed: mr@rel-net.eu 20100103
source: RIPE
% Information related to ‘62.122.72.0/23AS49236’
route: 62.122.72.0/23
descr: RELNET #1 route point
origin: AS49236
mnt-by: RELNET
changed: ripe@relnet.eu 20100131
source: RIPE
DNS records
DNS query for 147.73.122.62.in-addr.arpa returned an error from the server: NameError
name | class | type | data | time to live | |||||||||||||||
high-fivegroup.net | IN | SOA |
|
120s | (00:02:00) | ||||||||||||||
high-fivegroup.net | IN | A | 62.122.73.147 | 120s | (00:02:00) | ||||||||||||||
high-fivegroup.net | IN | NS | ns3.learbeer.com | 120s | (00:02:00) | ||||||||||||||
high-fivegroup.net | IN | NS | ns1.sheetship.cc | 120s | (00:02:00) | ||||||||||||||
high-fivegroup.net | IN | NS | ns2.quixsimple.net | 120s | (00:02:00) | ||||||||||||||
high-fivegroup.net | IN | MX |
|
120s | (00:02:00) |
— end —
Domains on Nameserver ns1.sheetship.cc
Entries 1 – 20 of 20
http://www.highfive-group.net
http://www.high-fivegroup.net
http://www.pluto-groupltd.net
http://www.indigouk-group.net
http://www.uk-invinciblegroup.net
http://www.uk-mercurygroup.net
http://www.uk-profigroup.net
http://www.invincible-group.net
http://www.uk-plutogroup.net
http://www.profiuk-group.net
http://www.uk-indigogroup.net
http://www.mercury-groupllc.net
http://www.us-fortisgroup.net
http://www.us-centrumgroup.net
http://www.us-venigroup.net
http://www.veniusa-group.net
http://www.centrumusa-group.net
http://www.forte-usagroup.net
http://www.fortisusa-group.net
http://www.us-fortegroup.net
IP: 173.208.131.53