jobresume.financial@gmail.com

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

Understanding The Cyber Theft Ring  
 Money Mule Explained 
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule 

Hello,

Google provides unique opportunities to work from home with flexible hours and schedule. Our company has expanded over the years to become a beacon for new technologies and information with the help of our employees we hope to achieve much more.

At this time we have an open position – Financial Agent. As a Financial Agent your duties will be receiving and processing payments from our customers.

Job Requirements:
– Responsibility;
– No Criminal Records;
– Excellent communication skills;
– Legal age;
– Access to Internet for reading e-mails regularly.

To apply for this post or just to learn more regarding specific job responsibilities, compensation and work locations, just reply to this e-mail.

Thank you,

Me-ok is this real how soon can i start and what is the pay like?

Hello,

Below you can find all the details regarding the Financial Agent position that Google would like to offer you:

Duties:

We are searching for people to help us in processing the payments coming from our clients. We have developed a new concept with Part Time Financial Agents to skip some costs. Your job will be to receive the payments coming from our clients via Bank Wire transfer. When funds enter employee’s bank account, Financial Agent’s duty is to withdraw the cash and transfer the funds to wherever the company will be needing the money.

Trial Period Policy:

Successful applicants are offered the position on a probationary period basis (1 month). This is the period when a new employee will be trained and receive online support while working and being paid. A personal supervisor can recommend termination during/after the trial period depending on agent’s activity. New employee should be responsible and strictly follow supervisor’s recommendations to pass the Probationary Period successfully and be employed by us on a regular basis.

Salary:

During the probationary period we offer US $2,500.00 monthly salary plus 5% commission for each payment processing operation. With the current number of clients, on average, your overall income will amount to up to US $5,000.00 per month. After the probationary period base salary will be US $5,000.00 per month plus 5% commission. The base salary will be transferred at the end of each month to the employee’s bank account. Commission (5%) is to be deducted from the processed money every time. You don’t have to pay any fees to take the job.

How to get started?

If you are interested in taking the job please reply with your cell phone number and one of our agents will call you for more information.

Looking forward to long-term and mutually beneficial cooperation.

Google Inc.
1600 Amphitheatre Parkway
Mountain View CA 94043 United States
Contact: Carl Lagger
Email: jobresume.financial@gmail.com
Website: http://www.google.com
Tel: +1 (650) 209-6468
Fax: +1 (877) 533-8995

Advertisements

online-saferx.ru

Drug Enforcement Agency

United States of America


The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.


DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor.

This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.


USPS – Fast Delivery Shipping 1-4 day USA
Best quality drugs
Fast Shipping USA
Professional packaging
100% guarantee on delivery
Best prices in the market
Discounts for returning customers
FDA approved productas
35000+ satisfied customers

Buy Cheap Viagra+Viagra Super Active(Free) – SUPER DISCOUNTS

This pack includes 90 pills of Viagra(generic) 100mg and 60 pills Viagra Super Acftive 100mg which you receive absolutely Free!
Due to technical problems at the bank all orders made from 21 August 2012 to 27 August 2012 will be processed on 1 September 2012. We will add 50% MORE PILLS to every product ordered. For example: for the order of 120 pills you will get 60 pills more, means 180 pills in the total. Please accept our apologize for the inconveniences.

http://vbscb.online-saferx.ru


The following A records are set to 91.236.121.130:

  1. healthrxmedshop.com
  2. myrxshipper.com
  3. newstuffone.com
  4. onlineshipper24.com
  5. pillrxsafe.com
  6. promedicalsave.com
  7. promedsave.com
  8. rx-4-men.com
  9. rxpillseller.com
  10. rxpillshipper.com
  11. safehealthstore.com
  12. saferx4u.com
  13. specialrx24.com
  14. tabs4health.com


Address lookup
canonical name online-saferx.ru

aliases
addresses 91.236.121.130
Domain Whois record

Queried whois.ripn.net with “online-saferx.ru

domain: ONLINE-SAFERX.RU
nserver: ns1.janesaked.ru.
nserver: ns2.pajutylas.ru.
state: REGISTERED, DELEGATED, UNVERIFIED
person: Private Person
registrar: NAUNET-REG-RIPN
admin-contact: https://client.naunet.ru/c/whoiscontact
created: 2012.08.25
paid-till: 2013.08.25
free-date: 2013.09.25
source: TCI

Last updated on 2012.08.30 21:31:34 MSK
Network Whois record

Queried whois.ripe.net with “-B 91.236.121.130
% Information related to ‘91.236.121.0 – 91.236.121.255’

inetnum: 91.236.121.0 – 91.236.121.255
netname: VAIBOPROJECT-NET
descr: VAIBO PROJECT ltd.
country: UA
org: ORG-VPl8-RIPE
admin-c: KTS16-RIPE
tech-c: KTS16-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: MNT-VAIBOPROJECT
mnt-routes: MNT-VAIBOPROJECT
mnt-domains: MNT-VAIBOPROJECT
notify: support@danle.ru
changed: hostmaster@ripe.net 20120531
source: RIPE

organisation: ORG-VPl8-RIPE
org-name: VAIBO PROJECT ltd.
org-type: OTHER
address: Ukraine, Donetsk, 50-letiya SSSR str., building 143Б, app.60
e-mail: support@danle.ru
mnt-ref: MNT-VAIBOPROJECT
mnt-by: MNT-VAIBOPROJECT
changed: support@danle.ru 20120601
source: RIPE

person: Korobov Taras Sergeevich
address: Ukraine, Donetsk, 50-letiya SSSR str., building 143Б, app.60
phone: +380 62 3110611
nic-hdl: KTS16-RIPE
mnt-by: MNT-VAIBOPROJECT
changed: support@danle.ru 20120601
source: RIPE

information related to ‘91.236.121.0/24AS58246’

route: 91.236.121.0/24
descr: VAIBOPROJECT-NET-2012
origin: AS58246
mnt-by: MNT-VAIBOPROJECT
changed: hostmaster@ripe.net 20120712
source: RIPE

This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS3)

DNS records

DNS query for 130.121.236.91.in-addr.arpa returned an error from the server: NameError
name class type data time to live
vbscb.online-saferx.ru IN CNAME online-saferx.ru 1798s (00:29:58)
online-saferx.ru IN A 121.127.11.247 1800s (00:30:00)
online-saferx.ru IN SOA
server: ns.online-saferx.ru
email: admin@online-saferx.ru
serial: 2012082501
refresh: 1800
retry: 1800
expire: 14400
minimum ttl: 1800
1800s (00:30:00)
online-saferx.ru IN NS ns1.janesaked.ru 345600s (4.00:00:00)
online-saferx.ru IN NS ns2.pajutylas.ru 345600s (4.00:00:00)

— end —

WhoIs 24hsmeds.net

Drug Enforcement Agency

United States of America


The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.


DEA Warning–Buying drugs online may be illegal and dangerous!

Federal law prohibits buying controlled substances such as narcotic pain relievers (e.g., OxyContin®, Vicodin®), sedatives (e.g., Valium®, Xanax®, Ambien®), stimulants (e.g., phentermine, phendimetrazine, Adderall®, Ritalin®) and anabolic steroids (e.g., Winstrol®, Equipoise®) without a valid prescription from your doctor.

This means there must be a real doctor-patient relationship, which by most state laws requires a physical examination. Prescriptions written by “cyber doctors” relying on online questionnaires are not legitimate under the law.


ites on IP 74.55.61.21

Displaying items 1 to 8, out of a total of 8

  1.   http://24hsmeds.com/
  2.   http://drugsale365.com/
  3.   http://pharmaweb24.com/
  4.   http://watch24hs.com/
  5.   http://www.24hsmeds.com/
  6.   http://www.drugsale365.com/
  7.   http://www.pharmaweb24.com/
  8.   http://www.watch24hs.com/

 

Address lookup
canonical name 24hsmeds.net

aliases
addresses 141.8.224.161
Domain Whois record

Queried whois.internic.net with “dom 24hsmeds.net

Domain Name: 24HSMEDS.NET
Registrar: INTERNET.BS CORP.
Whois Server: whois.internet.bs
Referral URL: http://www.internet.bs
Name Server: PARK1.TOPDNS.COM
Name Server: PARK2.TOPDNS.COM
Status: clientTransferProhibited
Updated Date: 26-aug-2012
Creation Date: 18-nov-2011
Expiration Date: 18-nov-2012

Last update of whois database: Thu, 30 Aug 2012 16:08:35 UTC
Queried whois.internet.bs with “24hsmeds.net
Domain 24hsmeds.net

Date Registered: 2011-11-18
Date Modified: 2012-8-26
Expiry Date: 2012-11-18

DNS1: park1.topdns.com
DNS2: park2.topdns.com

Registrant
Suspended by Registrar
Suspended Domain
Email:suspended.domain@topdns.com
98 Hampshire Street
Suspended domain
4892 Nassau
Bahamas
Tel: +1.23456789

Administrative Contact
Suspended by Registrar
Suspended Domain
Email:suspended.domain@topdns.com
98 Hampshire Street
Suspended domain
4892 Nassau
Bahamas
Tel: +1.23456789

Technical Contact
Suspended by Registrar
Suspended Domain
Email:suspended.domain@topdns.com
98 Hampshire Street
Suspended domain
4892 Nassau
Bahamas
Tel: +1.23456789

Registrar: Internet.bs Corp.
Registrar’s Website : http://www.internetbs.net/

Network Whois record

Queried whois.ripe.net with “-B 141.8.224.161″…

% Information related to ‘141.8.224.0 – 141.8.224.223’

inetnum: 141.8.224.0 – 141.8.224.223
netname: ROOKMEDIA
descr: Rook Media Gmb
country: CH
admin-c: ER3080-RIPE
tech-c: ER3080-RIPE
status: ASSIGNED PA
mnt-by: ER29788-MNT
changed: ed@rookmedia.net 20120321
source: RIPE

person: Ed Russell
address: Bà hnirainstrasse 13, 8800 Thalwil Zürich
phone: +41788905326
e-mail: ed@rookmedia.net
nic-hdl: ER3080-RIPE
mnt-by: ER29788-MNT
changed: ed@rookmedia.net 20110906
source: RIPE

This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS4)

DNS records

DNS query for 161.224.8.141.in-addr.arpa returned an error from the server: NameError
name class type data time to live
24hsmeds.net IN SOA
server: park1.topdns.com
email: rmgdns111@gmail.com
serial: 2011062801
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 86400
300s (00:05:00)
24hsmeds.net IN PTR park1.topdns.com 300s (00:05:00)
24hsmeds.net IN TXT v=spf1 a -all 300s (00:05:00)
24hsmeds.net IN A 141.8.224.161 300s (00:05:00)
24hsmeds.net IN NS park1.topdns.com 300s (00:05:00)
24hsmeds.net IN NS park2.topdns.com 300s (00:05:00)

— end —

advertisingbusinessshop.com

Adsense Troller

Address lookup
canonical name advertisingbusinessshop.com

aliases
addresses 66.147.244.92
Domain Whois record

Queried whois.internic.net with “dom advertisingbusinessshop.com

Domain Name: ADVERTISINGBUSINESSSHOP.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.BLUEHOST.COM
Name Server: NS2.BLUEHOST.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 02-nov-2011
Creation Date: 02-nov-2011
Expiration Date: 02-nov-2012

Last update of whois database: Thu, 30 Aug 2012 15:36:07 UTC
Queried whois.godaddy.com with “advertisingbusinessshop.com

Registrant:
LI CHIN WEN
13F.-12, No.26, Zhongyuan Rd.
Zhongli City, Taoyuan County 32069
Taiwan

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: ADVERTISINGBUSINESSSHOP.COM
Created on: 02-Nov-11
Expires on: 02-Nov-12
Last Updated on: 02-Nov-11

Administrative Contact:
WEN, LI CHIN kiki9261@yahoo.com.tw
13F.-12, No.26, Zhongyuan Rd.
Zhongli City, Taoyuan County 32069
Taiwan
+88-697-025-1129

Technical Contact:
WEN, LI CHIN kiki9261@yahoo.com.tw
13F.-12, No.26, Zhongyuan Rd.
Zhongli City, Taoyuan County 32069
Taiwan
+88-697-025-1129

Domain servers in listed order:
NS1.BLUEHOST.COM
NS2.BLUEHOST.COM

Network Whois record
Queried whois.arin.net with “n 66.147.244.92

NetRange: 66.147.240.0 – 66.147.255.255
CIDR: 66.147.240.0/20
OriginAS: AS46606
NetName: BLUEHOST-NETWORK-4
NetHandle: NET-66-147-240-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
RegDate: 2008-05-05
Updated: 2011-11-29
Ref: http://whois.arin.net/rest/net/NET-66-147-240-0-1

OrgName: Bluehost Inc.
OrgId: BLUEH-2
Address: 1958 South 950 East
City: Provo
StateProv: UT
PostalCode: 84606
Country: US
RegDate: 2006-08-08
Updated: 2011-09-27
Ref: http://whois.arin.net/rest/org/BLUEH-2

OrgTechHandle: NETWO2081-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-801-765-9400
OrgTechEmail: netops@bluehost.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

OrgAbuseHandle: NOC2320-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-801-765-9400
OrgAbuseEmail: abuse@bluehost.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

RAbuseHandle: NOC2320-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-801-765-9400
RAbuseEmail: abuse@bluehost.com
RAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

RTechHandle: NETWO2081-ARIN
RTechName: Network Operations
RTechPhone: +1-801-765-9400
RTechEmail: netops@bluehost.com
RTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

RNOCHandle: TECHN497-ARIN
RNOCName: Technical Operations
RNOCPhone: +1-801-765-9400
RNOCEmail: support@bluehost.com
RNOCRef: http://whois.arin.net/rest/poc/TECHN497-ARIN

DNS records
name class type data time to live
advertisingbusinessshop.com IN NS ns1.bluehost.com 86400s (1.00:00:00)
advertisingbusinessshop.com IN A 66.147.244.92 14400s (04:00:00)
advertisingbusinessshop.com IN SOA
server: ns1.bluehost.com
email: root@box792.bluehost.com
serial: 2011110212
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)
advertisingbusinessshop.com IN MX
preference: 0
exchange: mail.advertisingbusinessshop.com
14400s (04:00:00)
advertisingbusinessshop.com IN NS ns2.bluehost.com 86400s (1.00:00:00)
advertisingbusinessshop.com IN TXT v=spf1 a mx ptr include:bluehost.com ?all 14400s (04:00:00)
92.244.147.66.in-addr.arpa IN PTR box792.bluehost.com 86400s (1.00:00:00)
244.147.66.in-addr.arpa IN SOA
server: ns1.bluehost.com
email: abuse@bluehost.com
serial: 2009101601
refresh: 28800
retry: 14400
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)
244.147.66.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-09-09 12:02:19Z
signature inception: 2012-08-30 12:02:19Z
key tag: 25970
signer’s name: 66.in-addr.arpa
signature:
(1024 bits)

6681s (01:51:21)
244.147.66.in-addr.arpa IN NSEC
next domain name: 245.147.66.in-addr.arpa
record types: NS RRSIG NSEC
6681s (01:51:21)
244.147.66.in-addr.arpa IN NS ns2.bluehost.com 86400s (1.00:00:00)
244.147.66.in-addr.arpa IN NS ns1.bluehost.com 86400s (1.00:00:00)

— end —

Design Bureau Corporation – designbureaucorporation.com

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR is FRAUDULENT.These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

Understanding The Cyber Theft Ring  
 Money Mule Explained 
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule 

From: Design Bureau Corp.
staff-dept@designbureaucorporation.com
Sent: Mon, August 27, 2012 9:56:06 AM

As you know, I am personnel manager of Design Bureau Corp and I’ve reviewed your resume. At this time we have a free vacancy of financial manager. And I have already sent you an email with a short job description.
Could you confirm the receipt? Please check your all email folders if that email doesn’t arrive in your inbox. This position does not require special skills and we offered you that vacancy. Please email me back if you are interested and now have some questions or if you have not received that  message and need more information.

Sincerely,

M. Rice

Dear scamFRAUDalert,

How are you?

This is Melanie Rice again. I got your message, thank you for quick response. And thank you so much for your interest in our
vacancy of financial manager. I’ve reviewed your resume and I propose you to join our team! So right now you have successfully
completed the first step of recruiting process. And let me describe the employment procedure:

In order to perform these checks you should provide us the following information ASAP by completing the documents (see attached):

1)The Contractor Agreement(the signed copy)
2)The Application(the signed copy).

***Please note: All necessary documents are attached to this e-mail in MS Word. If you have trouble with the documents pening, please contact me by e-mail and I will send the documents in different format(PDF format).

Please fill out that documents, sign and send me the copies. You can send a copy of your signed Contractor Agreement and
Application by two ways:

1. To my Fax: 206-337-6985 (US inside fax) -OR- 2. You scan the documents and after that you should send to my e-mail.

And after that our HR department will carry out:
– your name, place of residing, contact phone numbers
– reliability of information you provided (your name, place of residing, contact phone)

This information will be totally secured and will not be shared with the third parts. Your candidacy will be approved after getting of your documents and verification of your personal information.  And you can begin your primary duties after this procedure.

***Please note: The signed documents give you the full right to represent our company in the USA, and the receiving and processing customer’s payments.

AS FINANCIAL MANAGER IS RESPONSIBLE FOR RECEIVING PAYMENTS FROM CUSTOMERS AND PROCESSING THE RECEIVED FUNDS TO OUR HEADQUARTER
IN RUSSIAN FEDERATION. YOU WILL START RECEIVING PAYMENTS BY FOLLOWING SERVICES:

1. Bank Checks
2. Wire transfers
3. Certified funds and Cash funds

– Salary and Compensation:

The Financial Manager will be entitled to 5 percent of all completed transactions.

The maximum turnover handled by a single manager is limited the by company’s policy and is set at $100,000 per month. Minimum salary- $3,000/monthly, plus income tax compensation (under the US tax form 1099).

– Type of Employment and Time Commitment:

Part-time.

You will work from home as an Independent Contractor. Approximately working schedule – 3-5 hours per week. You can combine this work with your current work, because you’ll spend no more than 5 hours per week.

To sum it up, your next step for getting the position with our company is submitting the requested information for verification purposes. We already have some applicants and the time limit is short, so please do your best to provide it ASAP.

Please let me know your final decision within 2 days. Feel free to contact me if you have any questions.
Have a nice day!

Sincerely,

Personnel Manager
Melanie Rice
Design Bureau Corporation
fax: 206-337-6985
tel: 206-666-2237

http://designbureaucorporation.com
http://www.1designbureaucorporation.biz

Address lookup
lookup failed :www.1designbureaucorporation.biz

Could not find an IP address for this domain name.
Domain Whois record

Queried whois.biz with “1designbureaucorporation.biz

Domain Name: 1DESIGNBUREAUCORPORATION.BIZ
Domain ID: D50855221-BIZ
Sponsoring Registrar: MELBOURNE IT LTD
Sponsoring Registrar IANA ID: 13
Registrar URL (registration services): whois.inww.com
Domain Status: ok

Registrant ID: D134330052631178
Registrant Name: Venkata Paruchuri
Registrant Organization: 1designbureaucorporation
Registrant Address1: 2220 W Mission Lane
Registrant City: Phoenix
Registrant State/Province: AZ
Registrant Postal Code: 85021
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.4102923005
Registrant Email: michaelvanecek@yahoo.com

Administrative Contact ID: B13433011410760
Administrative Contact Name: Venkata Paruchuri
Administrative Contact Organization: 1designbureaucorporation
Administrative Contact Address1: 2220 W Mission Lane
Administrative Contact City: Phoenix
Administrative Contact State/Province: AZ
Administrative Contact Postal Code: 85021
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.4102923005
Administrative Contact Email: michaelvanecek@yahoo.com

Billing Contact ID: B13433011410762
Billing Contact Name: YahooDomains BillingContact
Billing Contact Organization: Yahoo! Inc
Billing Contact Address1: 701 First Ave.
Billing Contact City: Sunnyvale
Billing Contact State/Province: CA
Billing Contact Postal Code: 94089
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.4089162124
Billing Contact Email: domain.billing@yahoo-inc.com

Technical Contact ID: B13433011410764
Technical Contact Name: YahooDomains TechContact
Technical Contact Organization: Yahoo! Inc
Technical Contact Address1: 701 First Ave.
Technical Contact City: Sunnyvale
Technical Contact State/Province: CA
Technical Contact Postal Code: 94089
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.4089162124
Technical Contact Email: domain.tech@yahoo-inc.com

Name Server: YNS1.YAHOO.COM
Name Server: YNS2.YAHOO.COM

Created by Registrar: MELBOURNE IT LTD
Last Updated by Registrar: MELBOURNE IT LTD
Domain Registration Date: Thu Jul 26 11:12:23 GMT 2012
Domain Expiration Date: Thu Jul 25 23:59:59 GMT 2013
Domain Last Updated Date: Wed Aug 29 09:52:40 GMT 2012

Whois database was last updated on: Thu Aug 30 15:07:52 GMT 2012
Network Whois record

Don’t have an IP address for which to get a record
DNS records

DNS query for http://www.1designbureaucorporation.biz returned an error from the server: ServerFailure

DNS query for 1designbureaucorporation.biz returned an error from the server: ServerFailure


Other Domains Being Used – Money Mule:

  1. uniforwarding.com
  2. thedesignbizllc.com
  3. createch-inc.com
  4. designbydesigninc.biz
  5. interiorplanning-inc.biz
  6. designbydesign-inc.com
  7. dbc-site.com
  8. project-i-i.com
  9. orientalxp.net
  10. ems-freight.com
  11. rockingdealmanagement.com
  12. turnerlw.net
  13. laperlegroup.com
  14. mayes-ed.com
  15. shipdirect.org
  16. eu-shipping.com
  17. documents-translations.com
  18. ambassadorhotelglasgow.co.uk
  19. groveerfininc.blogspot.com
  20. wtransports.wordpress.com
  21. thealphagroup.biz
  22. grazdata.com
  23. jdporiental.com
  24. manchester-career.com
  25. intercontinentalhotels-my.com
  26. build-career.com
  27. career-agency.com
  28. logisticsgroupint.com
  29. almcilroy.com
  30. h-l-g.uk.com
  31. logicgo.com
  32. photoshopdirect.com
  33. career-icao.org
  34. work-interview-sites.com
  35. london-vacancy.com
  36. buckinghamshire-jobs.com
  37. adeccouk.org
  38. wmartgroup.com
  39. bestjobsalary.co.uk
  40. erecruitmentagency.com

Whois – www.oppresearchprogram.com

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR is FRAUDULENT.These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

Understanding The Cyber Theft Ring  
 Money Mule Explained 
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule 

A few days ago I received a letter along with a deactivated check. They claim they are a home based job agency. Within the letter they include a phone number, website address, email address, fax number, days and work hours, and a physical address. Although they provide all of these details I am still very skeptical about an deactivated check and the fact that I would have to go to my bank deposit this check, and withdraw a large amount of money the next day so that I have to send it to the person they choose at this country or any other country via Western Union.

They claim in the letter that I keep $300 for me to use and additional $100 to shop what ever I want at the store the would tell me to go, and send $2,480 via Western Union. Is this another work at home scam?

http://www.oppresearchprogram.com?

Address lookup
canonical name http://www.oppresearchprogram.com

aliases
addresses 216.185.152.159
Domain Whois record

Queried whois.internic.net with “dom oppresearchprogram.com”…

Domain Name: OPPRESEARCHPROGRAM.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com/en_US/
Name Server: NS1.WIX.COM
Name Server: NS2.WIX.COM
Status: clientTransferProhibited
Updated Date: 13-aug-2012
Creation Date: 13-aug-2012
Expiration Date: 13-aug-2013

Last update of whois database: Thu, 30 Aug 2012 14:51:32 UTC
Queried whois.networksolutions.com with “oppresearchprogram.com

Registrant:
opp research program
ATTN OPPRESEARCHPROGRAM.COM
care of Network Solutions
PO Box 459
Drums, PA. US 18222

Domain Name: OPPRESEARCHPROGRAM.COM ———————————————————————
Promote your business to millions of viewers for only $1 a month
Learn how you can get an Enhanced Business Listing here for your domain name.
Learn more at http://www.NetworkSolutions.com/ ——————————————————————–
Administrative Contact, Technical Contact:
opp research program rs5m369w9ar@networksolutionsprivateregistration.com
ATTN OPPRESEARCHPROGRAM.COM
care of Network Solutions
PO Box 459
Drums, PA 18222
US
570-708-8780

Record expires on 13-Aug-2013.
Record created on 13-Aug-2012.
Database last updated on 30-Aug-2012 10:51:58 EDT.

Domain servers in listed order:

NS1.WIX.COM
NS2.WIX.COM

Network Whois record
Queried whois.arin.net with “n ! NET-216-185-152-0-1″…

NetRange: 216.185.152.0 – 216.185.152.255
CIDR: 216.185.152.0/24
OriginAS: AS32400, AS20401
NetName: HW-WIX-01
NetHandle: NET-216-185-152-0-1
Parent: NET-216-185-144-0-1
NetType: Reassigned
Comment: Send abuse complaints to abuse@wix.com
RegDate: 2011-09-12
Updated: 2011-09-12
Ref: http://whois.arin.net/rest/net/NET-216-185-152-0-1

CustName: Wix.com Inc.
Address: 10 West 18 Street
Address: Floor 6
City: New York
StateProv: NY
PostalCode: 10011
Country: US
RegDate: 2011-09-12
Updated: 2011-09-12
Ref: http://whois.arin.net/rest/customer/C02859989

OrgAbuseHandle: ABUSE548-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-512-469-9939
OrgAbuseEmail: abuse@southwebventures.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE548-ARIN

OrgTechHandle: NOC1501-ARIN
OrgTechName: NOC
OrgTechPhone: +1-512-469-9939
OrgTechEmail: noc@southwebventures.com
OrgTechRef: http://whois.arin.net/rest/poc/NOC1501-ARIN

RAbuseHandle: ABUSE548-ARIN
RAbuseName: Abuse
RAbusePhone: +1-512-469-9939
RAbuseEmail: abuse@southwebventures.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE548-ARIN

DNS records
name class type data time to live
http://www.oppresearchprogram.com IN A 216.185.152.159 3600s (01:00:00)
oppresearchprogram.com IN NS ns2.wix.com 3600s (01:00:00)
oppresearchprogram.com IN SOA
server: ns1.wix.com
email: support@wix.com
serial: 2012081315
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
oppresearchprogram.com IN NS ns1.wix.com 3600s (01:00:00)
oppresearchprogram.com IN A 216.185.152.159 3600s (01:00:00)
159.152.185.216.in-addr.arpa IN PTR 216-185-152-159.aus.us.siteprotect.com 3600s (01:00:00)
152.185.216.in-addr.arpa IN SOA
server: a.ns.hostwaydcs.com
email: hostmaster@152.185.216.in-addr.arpa
serial: 1346338201
refresh: 16384
retry: 2048
expire: 1048576
minimum ttl: 2560
2362s (00:39:22)
152.185.216.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-09-09 12:01:35Z
signature inception: 2012-08-30 12:01:35Z
key tag: 53729
signer’s name: 216.in-addr.arpa
signature:
(1024 bits)

10602s (02:56:42)
152.185.216.in-addr.arpa IN NSEC
next domain name: 153.185.216.in-addr.arpa
record types: NS RRSIG NSEC
10602s (02:56:42)
152.185.216.in-addr.arpa IN NS a.ns.hostwaydcs.com 86202s (23:56:42)
152.185.216.in-addr.arpa IN NS b.ns.hostwaydcs.com 86202s (23:56:42)

— end —

scamchasers.com aka scamfraudripoff.com

Newly Trending Network of so-called consumer advocacy sites-bogus

Address lookup
lookup failed scamfraudripoff.com

Queried whois.internic.net with “dom scamfraudripoff.com”…

Domain Name: SCAMFRAUDRIPOFF.COM
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS1.REG.RU
Name Server: NS2.REG.RU
Status: clientTransferProhibited
Updated Date: 13-sep-2011
Creation Date: 13-sep-2011
Expiration Date: 13-sep-2012

Last update of whois database: Thu, 30 Aug 2012 14:28:33 UTC
Queried whois.publicdomainregistry.com with “scamfraudripoff.com

Domain Name: SCAMFRAUDRIPOFF.COM

Registrant:
Nikolas Perlow
Nikolas Perlow scamchasers@yandex.ru
30 John Islip Street
London
Westminster,SW1P 4DD
GB
Tel. +44.20763015473

Creation Date: 13-Sep-2011
Expiration Date: 13-Sep-2012

Domain servers in listed order:
ns1.reg.ru
ns2.reg.ru

Administrative Contact:
Nikolas Perlow
Nikolas Perlow scamchasers@yandex.ru
30 John Islip Street
London
Westminster,SW1P 4DD
GB
Tel. +44.20763015473

Technical Contact:
Nikolas Perlow
Nikolas Perlow scamchasers@yandex.ru
30 John Islip Street
London
Westminster,SW1P 4DD
GB
Tel. +44.20763015473

Billing Contact:
Nikolas Perlow
Nikolas Perlow scamchasers@yandex.ru
30 John Islip Street
London
Westminster,SW1P 4DD
GB
Tel. +44.20763015473

Status:LOCKED

Network Whois record

Don’t have an IP address for which to get a record
DNS records
name class type data time to live
scamfraudripoff.com IN NS ns1.reg.ru 43200s (12:00:00)
scamfraudripoff.com IN NS ns2.reg.ru 43200s (12:00:00)
scamfraudripoff.com IN SOA
server: ns1.reg.ru
email: hostmaster@ns1.reg.ru
serial: 1315936471
refresh: 14400
retry: 3600
expire: 604800
minimum ttl: 21600
43200s (12:00:00)

— end —


Address lookup
canonical name scamtracers.com

aliases
addresses 178.159.249.188
Domain Whois record

Queried whois.internic.net with “dom scamtracers.com”…

Domain Name: SCAMTRACERS.COM
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS1.REG.RU
Name Server: NS2.REG.RU
Status: clientTransferProhibited
Updated Date: 07-jun-2012
Creation Date: 26-jul-2011
Expiration Date: 26-jul-2013

Last update of whois database: Thu, 30 Aug 2012 14:35:55 UTC <<<
Queried whois.publicdomainregistry.com with “scamtracers.com”…

Domain Name: SCAMTRACERS.COM

Registrant:
Privat Person
Stanislav Koval scamtracers@yandex.ru
Lutzowufer 1256
Berlin
Berlin,10785
CH
Tel. +49.30254536

Creation Date: 26-Jul-2011
Expiration Date: 26-Jul-2013

Domain servers in listed order:
ns1.reg.ru
ns2.reg.ru

Administrative Contact:
Privat Person
Stanislav Koval scamtracers@yandex.ru
Lutzowufer 1256
Berlin
Berlin,10785
CH
Tel. +49.30254536

Technical Contact:
Privat Person
Stanislav Koval scamtracers@yandex.ru
Lutzowufer 1256
Berlin
Berlin,10785
CH
Tel. +49.30254536

Billing Contact:
Privat Person
Stanislav Koval scamtracers@yandex.ru
Lutzowufer 1256
Berlin
Berlin,10785
CH
Tel. +49.30254536

Status:LOCKED

Network Whois record

Queried whois.ripe.net with “-B 178.159.249.188
Information related to ‘178.159.240.0 – 178.159.255.255

inetnum: 178.159.240.0 – 178.159.255.255
netname: ACTIVEHOST-RU-NET
tech-c: SR6636-RIPE
admin-c: SR6636-RIPE
tech-c: AG13638-RIPE
admin-c: AG13638-RIPE
descr: Activehost RU Ltd.
country: RU
country: BY
org: ORG-ARL5-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: MNT-ACTIVEHOST-RU
mnt-routes: AS6697-MNT
mnt-routes: MNT-ACTIVEHOST-RU
mnt-domains: MNT-ACTIVEHOST-RU
mnt-routes: softline-trade-mnt
changed: rommer@active.by 20120312
source: RIPE

organisation: ORG-ARL5-RIPE
org-name: Activehost RU Ltd.
org-type: OTHER
address: 119991, Moscow
address: 8, Gubkina str.
e-mail: ab@activecloud.ru
abuse-mailbox: abuse@active.by
mnt-ref: MNT-ACTIVEHOST-RU
mnt-by: MNT-ACTIVEHOST-RU
changed: rommer@active.by 20110427
source: RIPE

person: Alexey Galaev
address: 119991, Moscow
address: 8, Gubkina str.
address: Activehost RU Ltd.
phone: +74952320065 ext. 1272
nic-hdl: AG13638-RIPE
mnt-by: MNT-ACTIVEHOST-RU
changed: rommer@active.by 20120312
source: RIPE

person: Shishniou Raman
address: 220033, Minsk
address: 32-8, 2nd Velosipedniy str.
address: Active Technologies Ltd.
mnt-by: MNT-ACTIVEHOST-RU
phone: +375172911511 ext. 308
fax-no: +375172114470
e-mail: rommer@active.by
nic-hdl: SR6636-RIPE
changed: rommer@active.by 20110427
source: RIPE

Information related to ‘178.159.248.0/21AS49628’

route: 178.159.248.0/21
descr: Activehost RU Ltd.
origin: AS49628
mnt-by: softline-trade-mnt
changed: lexeresser@active.by 20101021
source: RIPE

Information related to ‘178.159.248.0/21AS51698’

route: 178.159.248.0/21
descr: Activehost RU Ltd.
origin: AS51698
mnt-by: MNT-ACTIVEHOST-RU
changed: rommer@active.by 20111014
source: RIPE

This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS2)

DNS records

DNS query for 188.249.159.178.in-addr.arpa returned an error from the server: NameError
name class type data time to live
scamtracers.com IN SOA
server: ns1.reg.ru
email: hostmaster@ns1.reg.ru
serial: 1312478293
refresh: 14400
retry: 3600
expire: 604800
minimum ttl: 43200
86400s (1.00:00:00)
scamtracers.com IN A 178.159.249.188 86400s (1.00:00:00)
scamtracers.com IN NS ns2.reg.ru 86400s (1.00:00:00)
scamtracers.com IN NS ns1.reg.ru 86400s (1.00:00:00)

— end —