The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.
Understanding The Cyber Theft Ring Money Mule Explained
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule
craigslist warning
Scammers reinvent themselves. Today, these hard core career criminals have become affiliate marketers or just plain outright scammers
These affiliate scammers are posting bogus ads promising (nonexistent!) employment, paid research trials, or other compensation, but then notifying repliers that they’ll need to jump through a hoop first, directing job seekers to a host of deplorable tactics as listed below:
- To purchase prepaid cards which are then used to send money [Investigative Reporter Brian Kerbs Report
- background checking services
- credit checking or reporting sites
- sites where you are instructed to enter your resume or other personal information
- sites where you are asked to sign up for a “free” trial offer
- sites offering educational training or career education
- sites offering a “system” for making money
- survey or focus group sites
- sites designed to deliver malware or misuse your identifying information
all in hopes of earning affiliate marketing commissions or otherwise profiting at the expense of persons seeking employment.
There are lots of variations on these scams, but each generally involves dangling (nonexistent!) compensation, easy lazy employment opportunity, sit at home and do nothing i.e. work at home and then directing you to a website where you are asked to sign up for something, use your credit card, or input personal information such as your email address, open a bank account, become a secret shopper, or an award winnings which targets the elderly, worse of all a program that promises you riches……
One need to exercise good judgment when they encounter one of these bogus job opportunity. These scammers are pros…. professionals with army of Attorneys and accomplices i.e. helpers. They do not operate alone. Getting involve or associated with these criminals is getting yourself into a whole lots of headaches. They prey on your weakness of being unemployed and desperate. They are out there in search of vulnerable individuals.
What we at scamFRAUDalert have observed over the years is that the less education one has, the more likely they will get involve with these CROOKS – scammers. BE VILIGANT FOLKS, CAREFUL ONLINE…….
Disclaimer: The original source is from craigslist.org with some modifications based on years of scamFRAUDalert researched and warning job seekers against bogus job postings online.
PLEASE NOTE THAT not all affiliate marketers are scammers.
Address lookup
canonical name artco-uk.com
aliases
addresses 88.198.8.119
Domain Whois record
Queried whois.internic.net with “dom artco-uk.com”…
Domain Name: ARTCO-UK.COM
Registrar: PAKNIC (PRIVATE) LIMITED
Whois Server: whois.paknic.com
Referral URL: http://www.paknic.com
Name Server: NS1.MULL.SU
Name Server: NS2.MULNSS.SU
Name Server: NS3.NSMUL.SU
Status: ok
Updated Date: 12-mar-2012
Creation Date: 12-mar-2012
Expiration Date: 12-mar-2013
Last update of whois database: Sat, 12 May 2012 09:01:16 UTC
Queried whois.paknic.com with “artco-uk.com”…
WHOIS.PAKNIC.COM
================
Domain name: ARTCO-UK.COM
Created On: 3/12/2012 6:22:11 PM
Expires On: 3/12/2013 6:22:11 PM
Last Updated On: 3/12/2012 6:22:11 PM
Domain Status:
Registrant [PAK12031216633-1]:
Ciriaca Milani
Ciriaca Milani cast@mail13.com
Via Pasquale Scura 108
Montescaglioso, MT 75024
IT
Phone: 39.03694308 Ext:
Fax: 1.
Administrative Contact [PAK12031216633-2]:
Ciriaca Milani
Ciriaca Milani cast@mail13.com
Via Pasquale Scura 108
Montescaglioso, MT 75024
IT
Phone: 39.03694308 Ext:
Fax: 1.
Billing Contact [PAK12031216633-4]:
Ciriaca Milani
Ciriaca Milani cast@mail13.com
Via Pasquale Scura 108
Montescaglioso, MT 75024
IT
Phone: 39.03694308 Ext:
Fax: 1.
Technical Contact [PAK12031216633-3]:
Ciriaca Milani
Ciriaca Milani cast@mail13.com
Via Pasquale Scura 108
Montescaglioso, MT 75024
IT
Phone: 39.03694308 Ext:
Fax: 1.
Domain servers in listed order:
ns1.mull.su
ns2.mulnss.su
ns3.nsmul.su
———————————————————————
Promote your business to millions of viewers for only $1 a month
Contact us for an Enhanced Business Listing here for your domain name
Learn more at http://www.paknic.com
——————————————————————–
NOTICE: Domain WHOIS record is provided for information purpose ONLY
PAKNIC Whois Version 1.4 5/12/2012 10:01:41 AM
Network Whois record
Queried whois.ripe.net with “-B 88.198.8.119
Information related to ‘88.198.0.0 – 88.198.15.255’
inetnum: 88.198.0.0 – 88.198.15.255
netname: HETZNER-RZ-NBG-NET
descr: Hetzner Online AG
descr: Datacenter Nuernberg
country: DE
admin-c: HOAC1-RIPE
tech-c: HOAC1-RIPE
status: ASSIGNED PA
mnt-by: HOS-GUN
mnt-lower: HOS-GUN
mnt-routes: HOS-GUN
notify: ripe-mntner@hetzner.de
changed: ronny.biering@hetzner.de 20060112
source: RIPE
role: Hetzner Online AG – Contact Role
address: Hetzner Online AG
address: Stuttgarter Straße 1
address: D-91710 Gunzenhausen
address: Germany
phone: +49 9831 61 00 61
fax-no: +49 9831 61 00 62
e-mail: ripe@hetzner.de
abuse-mailbox: abuse@hetzner.de
remarks: *************************************************
remarks: * For spam/abuse/security issues please contact *
remarks: * abuse@hetzner.de , not this address *
remarks: *************************************************
remarks:
remarks: *************************************************
remarks: * Any questions on Peering please send to *
remarks: * peering@hetzner.de *
remarks: *************************************************
org: ORG-HOA1-RIPE
admin-c: MH375-RIPE
tech-c: GM834-RIPE
tech-c: RB1502-RIPE
tech-c: SK2374-RIPE
tech-c: ND762-RIPE
tech-c: TF2013-RIPE
tech-c: MF1400-RIPE
nic-hdl: HOAC1-RIPE
notify: ripe-mntner@hetzner.de
mnt-by: HOS-GUN
changed: ronny.biering@hetzner.de 20040812
changed: ronny.biering@hetzner.de 20050524
changed: ronny.biering@hetzner.de 20091215
source: RIPE
Information related to ‘88.198.0.0/16AS24940
route: 88.198.0.0/16
descr: HETZNER-RZ-NBG-BLK4
origin: AS24940
org: ORG-HOA1-RIPE
mnt-by: HOS-GUN
changed: ronny.biering@hetzner.de 20060102
source: RIPE
organisation: ORG-HOA1-RIPE
org-name: Hetzner Online AG
org-type: LIR
address: Hetzner Online AG
Attn. Martin Hetzner
Stuttgarter Str. 1
91710 Gunzenhausen
GERMANY
phone: +49 9831 610061
fax-no: +49 9831 610062
e-mail: info@hetzner.de
admin-c: DM93-RIPE
admin-c: GM834-RIPE
admin-c: HOAC1-RIPE
admin-c: MH375-RIPE
admin-c: RB1502-RIPE
admin-c: SK2374-RIPE
admin-c: TF2013-RIPE
admin-c: MF1400-RIPE
mnt-ref: HOS-GUN
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20041025
changed: bitbucket@ripe.net 20041216
changed: bitbucket@ripe.net 20041216
changed: bitbucket@ripe.net 20050201
changed: bitbucket@ripe.net 20050203
changed: bitbucket@ripe.net 20050204
changed: hostmaster@ripe.net 20050217
changed: hostmaster@ripe.net 20050217
changed: bitbucket@ripe.net 20050221
changed: bitbucket@ripe.net 20050321
changed: bitbucket@ripe.net 20050405
changed: bitbucket@ripe.net 20050706
changed: bitbucket@ripe.net 20050913
changed: bitbucket@ripe.net 20051220
changed: bitbucket@ripe.net 20051223
changed: bitbucket@ripe.net 20051227
changed: bitbucket@ripe.net 20060919
changed: bitbucket@ripe.net 20070328
changed: bitbucket@ripe.net 20070405
changed: bitbucket@ripe.net 20070411
changed: bitbucket@ripe.net 20070416
changed: bitbucket@ripe.net 20070416
changed: bitbucket@ripe.net 20070813
changed: bitbucket@ripe.net 20070829
changed: bitbucket@ripe.net 20080402
changed: bitbucket@ripe.net 20090519
changed: bitbucket@ripe.net 20091215
source: RIPE
% This query was served by the RIPE Database Query Service version 1.8.13 (WHOIS1)
DNS records
name class type data time to live
artco-uk.com IN NS ns2.mulnss.su 120s (00:02:00)
artco-uk.com IN TXT v=spf1 a mx ip4:55.11.65.20/2 ip4:90.2.123.112/2 ip4:176.33.87.19/2 ip4:212.63.89.33/2 ?all 120s (00:02:00)
artco-uk.com IN SOA
server: ns1.artco-uk.com
email: hostmaster@artco-uk.com
serial: 38
refresh: 300
retry: 120
expire: 86400
minimum ttl: 60
120s (00:02:00)
artco-uk.com IN NS ns3.nsmul.su 120s (00:02:00)
artco-uk.com IN MX
preference: 10
exchange: mx.artco-uk.com
120s (00:02:00)
artco-uk.com IN NS ns1.mull.su 120s (00:02:00)
artco-uk.com IN A 88.198.8.119 120s (00:02:00)
119.8.198.88.in-addr.arpa IN PTR static.88-198-8-119.clients.your-server.de 86400s (1.00:00:00)
8.198.88.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-06-10 10:32:09Z
signature inception: 2012-05-11 09:32:09Z
key tag: 55836
signer’s name: 88.in-addr.arpa
signature:
(1024 bits)
25cbd4b1b066afce141d11a9783c9d0f
b3c6247591bc745b3a04749ad57b19a9
6fc04b6c55c9c52f4009e22191a90b6c
a776c70d7bb4627f4fd484c727d195d9
3cdffab7ac01917f66705609eaa72f18
c912d54306d2ccd38d16f7815d26ac7d
01f6ef99f2d01d2d1107ad6a86a3c520
def421161dfa8b932db9ab148407c933
6620s (01:50:20)
8.198.88.in-addr.arpa IN NSEC
next domain name: 80.198.88.in-addr.arpa
record types: NS RRSIG NSEC
6620s (01:50:20)
8.198.88.in-addr.arpa IN NS ns.second-ns.com 85820s (23:50:20)
8.198.88.in-addr.arpa IN NS ns3.second-ns.de 85820s (23:50:20)
8.198.88.in-addr.arpa IN NS ns1.your-server.de 85820s (23:50:20)
— end —
Money Mule and similar
- absolutesale-ltd.net
- absolutesaleltd.com
- accomplice-us.net
- art-academyuk.com
- art-and-couk.net
- artco-uk.com
- artcoltd-uk.com
- comm-stateco.net
- comm-statellc.net
- correll-co.com
- correll-ltd.com
- correllco-ltd.net
- correllco.net
- correllltd.net
- createch-ltd.net
- createchltd.com
- cyberit-consultancy.net
- deexy-ltd.com
- deexyltd.net
- evolutes-group.com
- evolutes-group.net
- fortest-group.com
- fortest-group.net
- generalship-ltd.com
- generalshipltd.net
- group-fortest.com
- group-fortest.net
- hightechin-group.com
- hightechingroup.com
- hitechsource-ltd.net
- hitechsourceltd.com
- infotech-worldltd.net
- infotechworldltd.com
- infotechworldltd.net
- it-accompliceinc.com
- it-busines-solutions-uk.net
- it-busines-solutions.com
- it-cyber-consultancy.com
- it-globalinc.com
- itaccomplice-inc.com
- itechsmart-plus.net
- itglobal-inc.com
- itlogic-inc.com
- itlogic-inc.net
- ivy-llc.com
- ivyllc.net
- lamar-llc.com
- lamar-llc.net
- ltd-correll.com
- lystech-ltd.net
- outsourcedlimited.com
- outsourcedlimited.net
- prosourceltd.net
- provtechinc-us.net
- provtechinc.com
- ship-faster.net
- skytech-ltd.com
- skytechitlimited.net
- smart-techltd.com
- smartitech-plus.com
- smarttech-ltd.com
- smarttechltd.net
- stcomm-llc.com
- stcommunity-llc.com
- swardtech-group.com
- swardtech-group.net
- techadvise-uk.com
- techadvise-uk.net
- techamlimited.com
- techamlimited.net
- technod-groupltd.com
- technod-ltd.com
- technotltd.net
- techstrat-ltd.com
- techstrat-uk.com
- techstratlimited.com
- techstratlimited.net
- the-artacademy.net
- transsacltd.com
- ukartco-ltd.com
- us-itaccomplice.net
- 50.7.236.242
- hitechsource-ltd.net
- infinite-art-llc.com
- it-globalinc.com
- it-multiusa.com
- it-plus-ltd.com
also links to
88.198.8.119
Lys tech Ltd
Avenue of Americans
Midtown NY
New York City, NY 10019
Phone number: 718-593-4365
Fax number: 1-585-410-6049
Address lookup
canonical name group-fortest.com
aliases
addresses 88.198.8.119
Domain Whois record
Queried whois.internic.net with “dom group-fortest.com”…
Domain Name: GROUP-FORTEST.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.NSMUL.SU
Name Server: NS2.MULL.SU
Name Server: NS3.MULNSS.SU
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 22-mar-2012
Creation Date: 22-mar-2012
Expiration Date: 22-mar-2013
>>> Last update of whois database: Sat, 12 May 2012 09:10:06 UTC <<<
Queried whois.bizcn.com with "group-fortest.com"…
Domain name: group-fortest.com
Registrant Contact:
Fortesto Group Ltd
William Dwain admin@group-fortest.com
+1.5302261739 fax: +1.5302261739
2125 Francis Mine
Redding CA 96002
us
Administrative Contact:
William Dwain admin@group-fortest.com
+1.5302261739 fax: +1.5302261739
2125 Francis Mine
Redding CA 96002
us
Technical Contact:
William Dwain admin@group-fortest.com
+1.5302261739 fax: +1.5302261739
2125 Francis Mine
Redding CA 96002
us
Billing Contact:
William Dwain admin@group-fortest.com
+1.5302261739 fax: +1.5302261739
2125 Francis Mine
Redding CA 96002
us
DNS:
ns1.nsmul.su
ns2.mull.su
ns3.mulnss.su
Created: 2012-03-22
Expires: 2013-03-22
Network Whois record
Queried whois.ripe.net with "-B 88.198.8.119"…
% Information related to '88.198.0.0 – 88.198.15.255'
inetnum: 88.198.0.0 – 88.198.15.255
netname: HETZNER-RZ-NBG-NET
descr: Hetzner Online AG
descr: Datacenter Nuernberg
country: DE
admin-c: HOAC1-RIPE
tech-c: HOAC1-RIPE
status: ASSIGNED PA
mnt-by: HOS-GUN
mnt-lower: HOS-GUN
mnt-routes: HOS-GUN
notify: ripe-mntner@hetzner.de
changed: ronny.biering@hetzner.de 20060112
source: RIPE
role: Hetzner Online AG – Contact Role
address: Hetzner Online AG
address: Stuttgarter Straße 1
address: D-91710 Gunzenhausen
address: Germany
phone: +49 9831 61 00 61
fax-no: +49 9831 61 00 62
e-mail: ripe@hetzner.de
abuse-mailbox: abuse@hetzner.de
remarks: *************************************************
remarks: * For spam/abuse/security issues please contact *
remarks: * abuse@hetzner.de , not this address *
remarks: *************************************************
remarks:
remarks: *************************************************
remarks: * Any questions on Peering please send to *
remarks: * peering@hetzner.de *
remarks: *************************************************
org: ORG-HOA1-RIPE
admin-c: MH375-RIPE
tech-c: GM834-RIPE
tech-c: RB1502-RIPE
tech-c: SK2374-RIPE
tech-c: ND762-RIPE
tech-c: TF2013-RIPE
tech-c: MF1400-RIPE
nic-hdl: HOAC1-RIPE
notify: ripe-mntner@hetzner.de
mnt-by: HOS-GUN
changed: ronny.biering@hetzner.de 20040812
changed: ronny.biering@hetzner.de 20050524
changed: ronny.biering@hetzner.de 20091215
source: RIPE
% Information related to '88.198.0.0/16AS24940'
route: 88.198.0.0/16
descr: HETZNER-RZ-NBG-BLK4
origin: AS24940
org: ORG-HOA1-RIPE
mnt-by: HOS-GUN
changed: ronny.biering@hetzner.de 20060102
source: RIPE
organisation: ORG-HOA1-RIPE
org-name: Hetzner Online AG
org-type: LIR
address: Hetzner Online AG
Attn. Martin Hetzner
Stuttgarter Str. 1
91710 Gunzenhausen
GERMANY
phone: +49 9831 610061
fax-no: +49 9831 610062
e-mail: info@hetzner.de
admin-c: DM93-RIPE
admin-c: GM834-RIPE
admin-c: HOAC1-RIPE
admin-c: MH375-RIPE
admin-c: RB1502-RIPE
admin-c: SK2374-RIPE
admin-c: TF2013-RIPE
admin-c: MF1400-RIPE
mnt-ref: HOS-GUN
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20041025
changed: bitbucket@ripe.net 20041216
changed: bitbucket@ripe.net 20041216
changed: bitbucket@ripe.net 20050201
changed: bitbucket@ripe.net 20050203
changed: bitbucket@ripe.net 20050204
changed: hostmaster@ripe.net 20050217
changed: hostmaster@ripe.net 20050217
changed: bitbucket@ripe.net 20050221
changed: bitbucket@ripe.net 20050321
changed: bitbucket@ripe.net 20050405
changed: bitbucket@ripe.net 20050706
changed: bitbucket@ripe.net 20050913
changed: bitbucket@ripe.net 20051220
changed: bitbucket@ripe.net 20051223
changed: bitbucket@ripe.net 20051227
changed: bitbucket@ripe.net 20060919
changed: bitbucket@ripe.net 20070328
changed: bitbucket@ripe.net 20070405
changed: bitbucket@ripe.net 20070411
changed: bitbucket@ripe.net 20070416
changed: bitbucket@ripe.net 20070416
changed: bitbucket@ripe.net 20070813
changed: bitbucket@ripe.net 20070829
changed: bitbucket@ripe.net 20080402
changed: bitbucket@ripe.net 20090519
changed: bitbucket@ripe.net 20091215
source: RIPE
% This query was served by the RIPE Database Query Service version 1.8.13 (WHOIS1)
DNS records
name class type data time to live
group-fortest.com IN NS ns3.mulnss.su 120s (00:02:00)
group-fortest.com IN SOA
server: ns1.group-fortest.com
email: hostmaster@group-fortest.com
serial: 49
refresh: 300
retry: 120
expire: 86400
minimum ttl: 60
120s (00:02:00)
group-fortest.com IN NS ns2.mull.su 120s (00:02:00)
group-fortest.com IN MX
preference: 10
exchange: mx.group-fortest.com
120s (00:02:00)
group-fortest.com IN TXT v=spf1 a mx ip4:55.11.65.20/2 ip4:90.2.123.112/2 ip4:176.33.87.19/2 ip4:212.63.89.33/2 ?all 120s (00:02:00)
group-fortest.com IN NS ns1.nsmul.su 120s (00:02:00)
group-fortest.com IN A 88.198.8.119 120s (00:02:00)
119.8.198.88.in-addr.arpa IN PTR static.88-198-8-119.clients.your-server.de 86400s (1.00:00:00)
8.198.88.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-06-10 10:32:09Z
signature inception: 2012-05-11 09:32:09Z
key tag: 55836
signer's name: 88.in-addr.arpa
signature:
(1024 bits)
25cbd4b1b066afce141d11a9783c9d0f
b3c6247591bc745b3a04749ad57b19a9
6fc04b6c55c9c52f4009e22191a90b6c
a776c70d7bb4627f4fd484c727d195d9
3cdffab7ac01917f66705609eaa72f18
c912d54306d2ccd38d16f7815d26ac7d
01f6ef99f2d01d2d1107ad6a86a3c520
def421161dfa8b932db9ab148407c933
6086s (01:41:26)
8.198.88.in-addr.arpa IN NSEC
next domain name: 80.198.88.in-addr.arpa
record types: NS RRSIG NSEC
6086s (01:41:26)
8.198.88.in-addr.arpa IN NS ns.second-ns.com 85286s (23:41:26)
8.198.88.in-addr.arpa IN NS ns1.your-server.de 85286s (23:41:26)
8.198.88.in-addr.arpa IN NS ns3.second-ns.de 85286s (23:41:26)
— end —