Owen Group Inc – OWEN-GROUPSVC.NET [Stolen Identity]

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Scam Alert 1Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Understanding The Cyber Theft Ring
Money Mule Explained

Washingtonpost.com by Brian Kerbs

Interview With A Money Mule


 

Date: Wed, 6 Oct 2010 18:50:44 +0200
To:
Subject: Part-Time Job -hotjobs- For
From: owen.group.hr.dept@gmail.com

Dear ScamFraudAlert,

Please allow me to introduce myself. My name is James Wakefield and I represent Owen Group Company.

I’ve found your resume at hotjobs.com and it appears that you have met our basic requirements for initial consideration, and would be a strong candidate to offer our final career positions.

Our company is well-known not only in the USA but all over the world. We deal mainly with the international outsourcing of Information Technology, bringing consumers together with the best-equipped specialists from all over the world.

Two to three hours a day performing your duties over the Internet is sufficient for this position.

There are no start-up or any other fees. The company covers all the fees related to the hiring process.

We provide one month paid training period, during which you will receive online training and support as well as a regular paycheck. A personal supervisor guides your training. At the end of your training, the personal supervisor will make the final decision whether or not to extend a permanent offer. Your training is critical to your success!

Your starting salary will be $2,300 per month plus 8% commission from each transaction during the training period. Total income, given the current volume of clients, should be about $4,500 per month. After the training period, base salary will be $3,000 per month plus 8% commission.

My goal is to spark your interest. Given the present economy, our position offers training, support and a pay scale comparable to an entry-level position requiring 40 hours per week. I hope you will explore, compare, and then contact me with your questions. Please complete a form below as a part of your return email.

===================FORM==================
First name:_____________________
Last name:________________________
Country of residence:______________________
Contact phone:________________________
Preferred call time:_____________________
==================FORM====================

We have found your resume at http://www.hotjobs.com. This letter confirms that your resume has been duly processed and your skills meet our basic requirements for the Payment Processing Vacancy.

Yours faithfully,

James Wakefield
Owen Group Inc.

EASY-TRANSFERLLC-ADV.NET (eTransfer LLC)
FIVE-CORNERSGROUPLTD.NET
HTTP://77.221.153.165/ (Five Corners Group LLC)
Tel 44-208-144-9469
Fax 44-208-099-7381
admin@five-cornersgroupltd.net,
support@five-cornersgroupltd.net,
job@five-cornersgroupltd.net, webmaster@five-cornersgroupltd.net

FREE-LIVEGROUPLTD.NET,
FREE-LIVEGROUPLTD-ADV.NET (Free Live Group LTD)

Tel 44-208-144-9469,
Fax 44-208-099-7381
admin@free-livegroupltd.net,
support@free-livegroupltd.net,
job@free-livegroupltd.net,
webmaster@free-livegroupltd.net

GALAXY-GROUPINC.NET (not live yet)

ITPS-NETGROUP-ADV.NET (ITPS Group LTD)
MAJESTIC-GROUPINC.NET (Majestic Group Inc)

Tel 1-347-269-0659
Fax 1-877-350-5448
admin@majestic-groupinc.net
support@majestic-groupinc.net
job@majestic-groupinc.net
webmaster@majestic-groupinc.net

OWEN-GROUPSVC.NET (Owen Group Inc)
Tel 1-585-542-4508,
Fax 1-877-350-3478
admin@owen-groupsvc.net
support@owen-groupsvc.net
job@owen-groupsvc.net
webmaster@owen-groupsvc.net

TITANIUM-GROUPINC.NET (Titanium Group Inc)
Tel 1-585-542-4508
Fax 1-877-350-5448
admin@titanium-groupinc.net
support@titanium-groupinc.net
job@titanium-groupinc.net
webmaster@titanium-groupinc.net

UK-PROFIGROUP-ADV.NET (Profi Group LTD)
UK-TOPAZ-LTD.NET
UK-TOPAZGROUP-ADV.NET (Topaz Group LTD)

Tel 44-207-193-9318
Fax 44-208-082-5686
admin@uk-topaz-ltd.net
support@uk-topaz-ltd.net
job@uk-topaz-ltd.net
webmaster@uk-topaz-ltd.net

Here are some more scam sites, registered on the 27th and 28th, and not live yet:
US-BURGESSGROUP.NET
US-CIELGROUP.NET
US-LOGESTYGROUP.NET
LLOYDGROUPLTD.NET

Here is another batch of sites, registered on the 6th, also not live yet:
ATG-GROUPCOMP.COM
DESERT-GOLDGROUP.COM
EASYTRANSFERLLC.COM
FINCONSULTUK-LTD.COM
FIVECORNERSGROUPUK.COM
FREE-LIVEGROUPUK.COM
KRYPTON-GROUPINC.COM
LLOYDGROUPLTDUK.COM
MAJESTIC-GROUPSVC.COM
STAFFORDSGROUPINC.COM
US-LEAPROFGROUP.COM
VERITASGROUP-LLC.COM
VIRTUE-MAINGROUP.COM

Here are the new name servers registered on the 6th:
NS1.LIBUKERTY.CC (also NS1 and NS2)
NS1.NSDOOMED.CC (also NS1 and NS2)
NS1.SIPNSDOM2.CC (also NS1 and NS2)

Advertisements

One thought on “Owen Group Inc – OWEN-GROUPSVC.NET [Stolen Identity]

  1. Scrub says:

    Address lookup
    canonical name owen-groupsvc.net.
    aliases
    addresses 62.122.73.145
    Domain Whois record

    Queried whois.internic.net with “dom owen-groupsvc.net”…

    Domain Name: OWEN-GROUPSVC.NET
    Registrar: WEB COMMERCE COMMUNICATIONS LIMITED DBA WEBNIC.CC
    Whois Server: whois.webnic.cc
    Referral URL: http://www.webnic.cc
    Name Server: NS1.URLNAMED.CC
    Name Server: NS2.URL-NAME.CC
    Name Server: NS3.URLNAMED.CC
    Status: ok
    Updated Date: 06-oct-2010
    Creation Date: 22-sep-2010
    Expiration Date: 22-sep-2011

    >>> Last update of whois database: Sun, 10 Oct 2010 19:29:35 UTC <<<
    Queried whois.webnic.cc with "owen-groupsvc.net"…

    The Data in Web Commerce Communications Limited
    Domain: owen-groupsvc.net
    Status: Active

    DNS:
    ns1.urlnamed.cc
    ns2.url-name.cc
    ns3.urlnamed.cc

    Created: 2010-09-23 00:37:52
    Expires: 2011-09-23 00:37:52
    Last Modified: 2010-09-22 12:37:51

    Registrant Contact:
    Alexey Rastov
    Alexey Rastov jz@maillife.ru
    kvartal Aviagorodok d.3 kv.64
    Bataysk, Rostovskaya oblast, RU 346880
    P: +7.8632904000 F: +7.8632904000

    Administrative Contact:
    Alexey Rastov
    Alexey Rastov jz@maillife.ru
    kvartal Aviagorodok d.3 kv.64
    Bataysk, Rostovskaya oblast, RU 346880
    P: +7.8632904000 F: +7.8632904000

    Technical Contact:
    Alexey Rastov
    Alexey Rastov (jz@maillife.ru)
    kvartal Aviagorodok d.3 kv.64
    Bataysk, Rostovskaya oblast, RU 346880
    P: +7.8632904000 F: +7.8632904000

    Billing Contact:
    Alexey Rastov
    Alexey Rastov (jz@maillife.ru)
    kvartal Aviagorodok d.3 kv.64
    Bataysk, Rostovskaya oblast, RU 346880
    P: +7.8632904000 F: +7.8632904000

    Network Whois record

    Queried whois.ripe.net with "-B 62.122.73.145
    Information related to 62.122.72.0 – 62.122.79.255

    inetnum: 62.122.72.0 – 62.122.79.255
    netname: RELNET-NET
    descr: quot;Leksim" Ltd.
    country: EU
    remarks: trouble: spam/scam/abuse issues send *ONLY* to: abuse@rel-net.eu
    org: ORG-TA388-RIPE
    admin-c: JT384-RIPE
    tech-c: BS594-RIPE
    tech-c: MR10655-RIPE
    status: ASSIGNED PI
    mnt-by: RELNET
    mnt-by: RIPE-NCC-HM-PI-MNT
    mnt-lower: RIPE-NCC-HM-PI-MNT
    mnt-routes: RELNET
    mnt-domains: RELNET
    changed: info@rel-net.eu 20100130
    changed: info@rel-net.eu 20100203
    changed: info@rel-net.eu 20100218
    source: RIPE
    mnt-routes: ROOT-MNT

    organisation: ORG-TA388-RIPE
    org-name: "Leksim" Ltd.
    org-type: OTHER
    address: Stationsplein 30, 2910 MJ Capelle aan den IJssel, The Netherlands
    phone: +31 10 2391391
    fax-no: +31 10 2391392
    e-mail: ripe@rel-net.eu
    admin-c: JT384-RIPE
    tech-c: BS594-RIPE
    mnt-ref: RELNET
    mnt-by: RELNET
    changed: ripe@rel-net.eu 20100130
    source: RIPE

    person: Justin Thomson
    address: Stationsplein 30
    address: 2910 MJ Capelle aan den IJssel
    address: THE NETHERLANDS
    abuse-mailbox: abuse@rel-net.eu
    e-mail: jt@rel-net.eu
    mnt-by: RELNET
    phone: +31 10 2391391
    nic-hdl: JT384-RIPE
    changed: jt@rel-net.eu 20100130
    source: RIPE

    person: Bernd Spiess
    address: Gabelsberger Strasse 15
    address: 9021 Klagenfurt
    address: AUSTRIA
    e-mail: bs@rel-net.eu
    mnt-by: RELNET
    phone: +43 46 3223501
    nic-hdl: BS594-RIPE
    changed: bs@rel-net.eu 20100130
    source: RIPE

    person: Marcel Russo
    address: 31, z.a. am Bann
    address: L-3375 Leudelange
    address: LUXEMBURG
    e-mail: mr@rel-net.eu
    mnt-by: RELNET
    phone: + 352 2551301
    nic-hdl: MR10655-RIPE
    changed: mr@rel-net.eu 20100103
    source: RIPE

    Information related to '62.122.72.0/23AS49236'

    route: 62.122.72.0/23
    descr: RELNET #1 route point
    origin: AS49236
    mnt-by: RELNET
    changed: ripe@relnet.eu 20100131
    source: RIPE
    DNS records

    DNS query for 145.73.122.62.in-addr.arpa returned an error from the server: NameError

    name class type data time to live
    owen-groupsvc.net IN SOA
    server: ns1.urlname.cc
    email: root.ns1.urlname.cc
    serial: 1010101800
    refresh: 300
    retry: 120
    expire: 86400
    minimum ttl: 60
    120s (00:02:00)
    owen-groupsvc.net IN A 62.122.73.145 120s (00:02:00)
    owen-groupsvc.net IN NS ns2.url-name.cc 120s (00:02:00)
    owen-groupsvc.net IN NS ns1.urlname.cc 120s (00:02:00)
    owen-groupsvc.net IN NS ns3.urlnamed.cc 120s (00:02:00)
    owen-groupsvc.net IN MX
    preference: 10
    exchange: mx.owen-groupsvc.net
    120s (00:02:00)
    Traceroute

    Tracing route to owen-groupsvc.net [62.122.73.145]…

    hop rtt rtt rtt ip address fully qualified domain name
    1 1 1 1 70.84.211.97 61.d3.5446.static.theplanet.com
    2 1 1 0 70.87.254.1 po101.dsr01.dllstx5.theplanet.com
    3 4 2 1 70.85.127.105 po51.dsr01.dllstx3.theplanet.com
    4 0 0 0 70.87.253.1 et3-1.ibr03.dllstx3.theplanet.com
    5 32 32 32 70.87.253.190 be.fd.5746.static.theplanet.com
    6 106 111 115 70.87.255.218 da.ff.5746.static.theplanet.com
    7 113 106 117 195.66.225.111 10ge-linx.r1.lon1.uk.as5580.net
    8 123 123 125 80.94.64.114 r1.ams1.nl.as5580.net
    9 113 113 113 78.152.62.66 asd1.nl.ecatel.net
    10 113 120 114 89.248.175.241 hosted-by.ecatel.net
    11 114 115 114 62.122.73.145

    Trace complete

    — end —

Leave A Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.