ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR 
is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.
Understanding The Cyber Theft Ring Money Mule Explained
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule
Scammers reinvent themselves. Today, these hard core career criminals have become affiliate marketers or just plain outright scammers
These affiliate scammers are posting bogus ads promising (nonexistent!) employment, paid research trials, or other compensation, but then notifying repliers that they’ll need to jump through a hoop first, directing job seekers to a host of deplorable tactics as listed below:
all in hopes of earning affiliate marketing commissions or otherwise profiting at the expense of persons seeking employment.
There are lots of variations on these scams, but each generally involves dangling (nonexistent!) compensation, easy lazy employment opportunity, sit at home and do nothing i.e. work at home and then directing you to a website where you are asked to sign up for something, use your credit card, or input personal information such as your email address, open a bank account, become a secret shopper, or an award winnings which targets the elderly, worse of all a program that promises you riches……
One need to exercise good judgment when they encounter one of these bogus job opportunity. These scammers are pros…. professionals with army of Attorneys and accomplices i.e. helpers. They do not operate alone. Getting involve or associated with these criminals is getting yourself into a whole lots of headaches. They prey on your weakness of being unemployed and desperate. They are out there in search of vulnerable individuals.
What we at scamFRAUDalert have observed over the years is that the less education one has, the more likely they will get involve with these CROOKS – scammers. BE VILIGANT FOLKS, CAREFUL ONLINE…….
Disclaimer: The original source is from craigslist.org with some modifications based on years of scamFRAUDalert researched and warning job seekers against bogus job postings online.
PLEASE NOTE THAT not all affiliate marketers are scammers.
Good day,
Your resume from http://kijiji.ca
The company actively enters the market of tourist services and extremely interested in staff expansion.
The scheme of work, especially the conditions and rules you can read in the “COAM.pdf”.
Best regards
Alex Curtis
HR manager,CorpTravel LTD
https://thecorptravel.com
with this e-mail : alex.curtis.hr@thecorptravel.com
Location of Serveur : Russia and IP adress: 193.106.94.154
Cheers ;
I hope to be useful for others people.
Yakine
Address lookup
canonical name thecorptravel.com
aliases
addresses 193.106.94.154
Domain Whois record
Queried whois.internic.net with “dom thecorptravel.com”…
Domain Name: THECORPTRAVEL.COM
Registrar: INTERNET.BS CORP.
Whois Server: whois.internet.bs
Referral URL: http://www.internet.bs
Name Server: NS1.CLOUDNS.NET
Name Server: NS2.CLOUDNS.NET
Name Server: NS3.CLOUDNS.NET
Name Server: NS4.CLOUDNS.NET
Status: clientTransferProhibited
Updated Date: 30-may-2012
Creation Date: 28-may-2011
Expiration Date: 28-may-2013
Last update of whois database: Tue, 19 Jun 2012 09:58:23 UTC
Queried whois.internet.bs with “thecorptravel.com
Domain registered RegNames
Domain thecorptravel.com
Date Registered: 2011-5-28
Date Modified: 2012-5-30
Expiry Date: 2013-5-28
DNS1: ns1.cloudns.net
DNS2: ns2.cloudns.net
DNS3: ns3.cloudns.net
DNS4: ns4.cloudns.net
Registrant
Fundacion Private Whois
Domain Administrator
Email:z8b1lhc4f851f9e2a571@t02cduv4f7f99a255f64.privatewhois.net
Attn: thecorptravel.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877
Administrative Contact
Fundacion Private Whois
Domain Administrator
Email:gufyk3e4f851f9e2d07f@t02cduv4f7f99a255f64.privatewhois.net
Attn: thecorptravel.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877
Technical Contact
Fundacion Private Whois
Domain Administrator
Email:xfy3a7u4f851f9e2bcf9@t02cduv4f7f99a255f64.privatewhois.net
Attn: thecorptravel.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877
Service registration: http://regnames.ua
Whois service: https://order.regnames.ua/whois.php
Network Whois record
Queried whois.ripe.net with “-B 193.106.94.154″…
Information related to ‘193.106.92.0 – 193.106.95.255’
inetnum: 193.106.92.0 – 193.106.95.255
netname: ITSoft-net
descr: ITSoft Ltd.
country: RU
org: ORG-IL118-RIPE
admin-c: PV160-RIPE
tech-c: PV160-RIPE
status: ASSIGNED PI
notify: itsoft@itsoft.ru
mnt-by: RIPE-NCC-END-MNT
mnt-by: MNT-ALFATELECOM
mnt-by: ITSOFT-MNT
mnt-by: MNT-ITSOFT
mnt-lower: RIPE-NCC-END-MNT
mnt-routes: PLUSINFO-MNT
mnt-routes: ITSOFT-MNT
mnt-domains: MNT-ALFATELECOM
mnt-domains: MNT-ITSOFT
changed: hostmaster@ripe.net 20091216
source: RIPE
organisation: ORG-IL118-RIPE
org-name: ITSoft Ltd.
org-type: OTHER
address: 3/12, B. Trekhsvyatiotilskiy per., Moscow, Russia
e-mail: itsoft@itsoft.ru
mnt-ref: ITSOFT-MNT
mnt-by: ITSOFT-MNT
changed: itsoft@itsoft.ru 20071126
source: RIPE
person: Pavel Vorotilin
address: B. Trekhsvatitelskiy, 2
address: Moscow, Russia
phone: +7 495 988 30 41
e-mail: itsoft@itsoft.ru
nic-hdl: PV160-RIPE
notify: itsoft@itsoft.ru
changed: mboyarsk@iki.rssi.ru 20011206
changed: mb@rssi.ru 20050606
changed: mb@rssi.ru 20050606
changed: diwo@uportal.ru 20050606
mnt-by: ITSOFT-MNT
source: RIPE
changed: ripe-dbm@ripe.net 20051216
changed: itsoft@itsoft.ru 20120102
Information related to ‘193.106.92.0/22AS48614’
route: 193.106.92.0/22
descr: ITSoft-net
origin: AS48614
mnt-by: PLUSINFO-MNT
changed: noc@plus.ru 20091217
source: RIPE
This query was served by the RIPE Database Query Service version 1.12.2 (WHOIS1)
DNS records
DNS query for 154.94.106.193.in-addr.arpa returned an error from the server: NameError
name class type data time to live
thecorptravel.com IN SOA
server: ns1.cloudns.net
email: support@cloudns.net
serial: 2012020509
refresh: 7200
retry: 1800
expire: 1209600
minimum ttl: 3600
3600s (01:00:00)
thecorptravel.com IN A 193.106.94.154 3600s (01:00:00)
thecorptravel.com IN NS ns2.cloudns.net 3600s (01:00:00)
thecorptravel.com IN NS ns1.cloudns.net 3600s (01:00:00)
thecorptravel.com IN NS ns3.cloudns.net 3600s (01:00:00)
thecorptravel.com IN NS ns4.cloudns.net 3600s (01:00:00)
thecorptravel.com IN MX
preference: 10
exchange: aspmx2.googlemail.com
3600s (01:00:00)
thecorptravel.com IN MX
preference: 10
exchange: aspmx3.googlemail.com
3600s (01:00:00)
thecorptravel.com IN MX
preference: 10
exchange: aspmx4.googlemail.com
3600s (01:00:00)
thecorptravel.com IN MX
preference: 1
exchange: aspmx.l.google.com
3600s (01:00:00)
thecorptravel.com IN MX
preference: 5
exchange: alt1.aspmx.l.google.com
3600s (01:00:00)
thecorptravel.com IN MX
preference: 5
exchange: alt2.aspmx.l.google.com
3600s (01:00:00)
thecorptravel.com IN MX
preference: 10
exchange: spmx5.googlemail.com
3600s (01:00:00)
— end —
Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
National Association of Boards of Pharmacy (NABP)
Warning
“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.
Who's Behind Online Pharmacy
Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.
Buying Medication Online Can Be Safe
There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.
Address lookup
canonical name onlinebuymedic.ru
aliases
addresses 62.141.32.11
Domain Whois record
Queried whois.ripn.net with “onlinebuymedic.ru”…
% By submitting a query to RIPN’s Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).
domain: ONLINEBUYMEDIC.RU
nserver: ns1.pillrxmedsfat.net.
nserver: ns2.fdjk.ru.
state: REGISTERED, DELEGATED, UNVERIFIED
person: Private Person
registrar: REGRU-REG-RIPN
admin-contact: http://www.reg.ru/whois/admin_contact
created: 2011.11.07
paid-till: 2012.11.07
free-date: 2012.12.08
source: TCI
Last updated on 2012.06.19 13:25:46 MSK
Network Whois record
Queried whois.ripe.net with “-B 62.141.32.11″…
% Information related to ‘62.141.32.0 – 62.141.33.255’
inetnum: 62.141.32.0 – 62.141.33.255
netname: FASTIT-DE-DUS1-COLO1
descr: fast IT Colocation
country: DE
admin-c: FIO-RIPE
tech-c: FONE-RIPE
status: ASSIGNED PA
mnt-by: FIBRE1-MNT
source: RIPE
changed: hostmaster@fibre1.net 20120314
role: fast IT Operations Team
address: myLoc managed IT AG
address: Am Gatherhof 44
address: 40472 Duesseldorf
address: DE
e-mail: info@fastIT.net
abuse-mailbox: abuse@fastIT.net
phone: +49 211 171659 0
fax-no: +49 211 171659 77
remarks: +—————————————————+
remarks: | Please see FONE-RIPE for operational contacts in |
remarks: | case of network related issues! |
remarks: +—————————————————+
admin-c: DTH
tech-c: DTH
nic-hdl: FIO-RIPE
mnt-by: FIBRE1-MNT
notify: hostmaster@fibre1.net
source: RIPE
changed: hostmaster@fibre1.net 20100811
role: fibre one NOC
address: fibre one networks GmbH
address: Network Operations & Services
address: Am Gatherhof 44
address: 40472 Duesseldorf
address: Germany
e-mail: noc@fibre1.net
abuse-mailbox: abuse@fibre1.net
phone: +49 211 171659 40
fax-no: +49 211 171659 49
remarks: +—————————————————+
remarks: | 24/7 NOC email: noc _at_ fibre1.net |
remarks: | 24/7 NOC phone: +49 700 00 327848 |
remarks: | Please direct absue issues ONLY |
remarks: | to abuse _at_ fibre1.net |
remarks: | Complaints to other adresses will be deemed |
remarks: | as spam and not further processed! |
remarks: +—————————————————+
admin-c: DTH
tech-c: MKA
tech-c: LPU
tech-c: CHR
tech-c: NMU
tech-c: DTH
nic-hdl: FONE-RIPE
mnt-by: FIBRE1-MNT
notify: hostmaster@fibre1.net
source: RIPE
changed: hostmaster@fibre1.net 20080116
changed: hostmaster@fibre1.net 20090729
% Information related to ‘62.141.32.0/20AS24961’
route: 62.141.32.0/20
descr: DE-FIBRE1-62-141-32-0—slash-20
origin: AS24961
mnt-by: FIBRE1-MNT
notify: hostmaster@fibre1.net
changed: hostmaster@fibre1.net 20080118
source: RIPE
% This query was served by the RIPE Database Query Service version 1.12.2 (WHOIS1)
DNS records
name class type data time to live
onlinebuymedic.ru IN SOA
server: ns1.onlinebuymedic.ru
email: admin@onlinebuymedic.ru
serial: 2009000000
refresh: 600
retry: 900
expire: 1209600
minimum ttl: 43200
600s (00:10:00)
onlinebuymedic.ru IN NS ns1.onlinebuymedic.ru 600s (00:10:00)
onlinebuymedic.ru IN NS ns2.onlinebuymedic.ru 600s (00:10:00)
onlinebuymedic.ru IN MX
preference: 10
exchange: mail.onlinebuymedic.ru
600s (00:10:00)
onlinebuymedic.ru IN A 62.141.32.11 600s (00:10:00)
11.32.141.62.in-addr.arpa IN PTR process-int.dus1.de-srv.fastit.net 3600s (01:00:00)
32.141.62.in-addr.arpa IN SOA
server: ns1.ntdns.de
email: hostmaster@fastit.net
serial: 0
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
32.141.62.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2012-07-18 11:44:27Z
signature inception: 2012-06-18 10:44:27Z
key tag: 6231
signer’s name: 62.in-addr.arpa
signature:
(1024 bits)
879FA25776DA85A9CE1F476ACC1CB5C4
FD59655CF7A103707C58C84B2B38F027
F6F997018F71EA37392BC0B5E1C45D08
70F5142CF6356587C3DB545544A7AF90
1C4212E366697E627910FAE98ED198F7
A042D4CC87FAC05C58B0284594142432
FB1CDBC82B394D8AF791A6D150A2275F
5076D95A45660DBAAA6F07575E0C3650
7200s (02:00:00)
32.141.62.in-addr.arpa IN NSEC
next domain name: 33.141.62.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
32.141.62.in-addr.arpa IN NS ns2.ntdns.de 3600s (01:00:00)
32.141.62.in-addr.arpa IN NS ns3.ntdns.de 3600s (01:00:00)
32.141.62.in-addr.arpa IN NS ns1.ntdns.de 3600s (01:00:00)
— end —
The following A records are set to 62.141.32.11:
The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.
Understanding The Cyber Theft Ring Money Mule Explained
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule
Scammers reinvent themselves. Today, these hard core career criminals have become affiliate marketers or just plain outright scammers
These affiliate scammers are posting bogus ads promising (nonexistent!) employment, paid research trials, or other compensation, but then notifying repliers that they’ll need to jump through a hoop first, directing job seekers to a host of deplorable tactics as listed below:
all in hopes of earning affiliate marketing commissions or otherwise profiting at the expense of persons seeking employment.
There are lots of variations on these scams, but each generally involves dangling (nonexistent!) compensation, easy lazy employment opportunity, sit at home and do nothing i.e. work at home and then directing you to a website where you are asked to sign up for something, use your credit card, or input personal information such as your email address, open a bank account, become a secret shopper, or an award winnings which targets the elderly, worse of all a program that promises you riches……
One need to exercise good judgment when they encounter one of these bogus job opportunity. These scammers are pros…. professionals with army of Attorneys and accomplices i.e. helpers. They do not operate alone. Getting involve or associated with these criminals is getting yourself into a whole lots of headaches. They prey on your weakness of being unemployed and desperate. They are out there in search of vulnerable individuals.
What we at scamFRAUDalert have observed over the years is that the less education one has, the more likely they will get involve with these CROOKS – scammers. BE VILIGANT FOLKS, CAREFUL ONLINE…….
Disclaimer: The original source is from craigslist.org with some modifications based on years of scamFRAUDalert researched and warning job seekers against bogus job postings online.
PLEASE NOTE THAT not all affiliate marketers are scammers.
Dear scamFRAUDalert,
My name is Victoria, I am the manager of Home Jobs Agency, a leading recruiting agency for home based and part-time jobs. I email you with regard to the job seeking information you have recently posted.
Your CV has been obtained on the Jobsite UK database.
I’d like to propose you the post of Administrative Assistant available for your consideration at your preferred Location.
In a view of our client’s, Japan Foreign Exchange Group, growth in the GB market, they are currently searching for new employees.
Specific education is not required to work at the Japan FX Group. Our client provides you with the part-time position, you are able work 2-3 hours a day at any convenient schedule mostly sitting in front of your PC.
The initial payrate varies within £1200-£3000 to be uplifted up to £8,000, and even higher bonuses for those ones making a good showing in some time.
Benefits :
-up to three employment hours per day ;
-commissions from business deals;
-social welfare;
-career growth ;
-interesting and exciting employment in the successfull company. -no charges and fees;
-no special skills needed ;
-flexible working hours – choose a convenient work schedule;
Please confirm your interest on the specified position or request additional information just by replying to this message.
JFX Group
a major Japanese financial corporation, the foreign exchange specialists operating within the Europe is a focused provider of global payments and processing. The company was founded in 1999 and has operations in Ireland, Malta, UAE, Spain, Scandinavia, United Kingdom, Australia and the USA.
See the company’s official site for additional information:
http://www.jfxg.biz
Consider visiting our website for additional information:
homejobsagency.co.uk
This is NOT a telesales position.
This email was sent by Jobsite UK (Worldwide) Ltd.
Registered office: Northcliffe House, 2 Derry Street, London, W8 5TT.
Registered in England and Wales with company number 3097157. VAT number 243 5711 74.
scamFRAUDalert™ Report 