tj-consulting.org

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT.

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

The identity of an individual or entity have been stolen along with fund from their bank accounts. You are being recruited to wire transfer these funds either by WESTERN UNION, MONEYGRAM, into your bank, a DOMESTIC BANK or FOREIGN BANK ACCOUNT

  1. Understanding The Cyber Theft Ring
  2. Money Mule Explained
  3. Protecting Yourself Against Money Mule
  4. Washingtonpost.com by Brian Kerbs
  5. Interview With A Money Mule
  6. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

The following A records are set to 27.124.127.50:

  1. abc-solutions-uk.org
  2. andromeda-ltd.org
  3. andromeda-uk.com
  4. best-n-saveltd.com
  5. best-n-saveltd.org
  6. bestsolutions-usa.org
  7. beyond-atlantis-ltd.org
  8. biz-software.org
  9. bmc-outsourcing-inc.com
  10. careerbestltd.org
  11. consult-compass-ltd.biz
  12. freelancersltd.com
  13. fundstransferalliance.biz
  14. infinityplus-one.org
  15. interbrite-solutions.biz
  16. marketsolutionlimited.org
  17. newway-usa.com
  18. outland-computing-us.biz
  19. outsourceial.com
  20. outsourcing-planet.org
  21. realit-solutions-inc.org
  22. soltuion-enterprisesuk.biz
  23. solution-inn-llc.org
  24. solutionbuild.org
  25. techit-ltd.org
  26. techit-uk.com
  27. titan-advisers-ltd.com
  28. titan-advisers-uk.org
  29. tj-consulting.biz
  30. tj-consulting.org
  31. triad-data-tech.biz
  32. uk-it-loungeltd.net
  33. ukachall-ltd.biz
  34. ukachall-ltd.org
  35. ukit-lounge-limited.org
  36. usa-itright.net
  37. usanewway.net

facebook notification messages

Facebook users need to become more vigilant and not click on e-mail notifications scamalertthey would normally get from facebook.com. Scammers are impersonating such emails as should below.

________________________

Email Header Analysis

IP Address: 216.109.71.2 (216.109.71.2)
IP Address Country: United States
IP Continent: North America
IP Address City Location: Chesterfield
IP Address Region: Missouri
IP Address Latitude: 38.65,
IP Address Longtitude: -90.5334
Organization: SAVVIS Communications Corporation
_____________________

From: Facebook
To:scamFRAUDalert@gmail.com

facebook: Notification message.

Here are some notifications you’ve missed.
3 information messages has been sent to you.

See All Notifications
This message was sent to scamFRAUDalert@gmail.com. If you don’t want to receive these emails in the future, please unsubscribe.
_______________________
2 messages notices
From Facebook Sat Jun 29 04:18:40 2013
X-Apparently-To: scamFRAUDalert via 98.138.213.179;
Sat, 29 Jun 2013 15:18:40 +0000
Return-Path: wlg@game-point.net
X-YahooFilteredBulk: 216.109.71.2
Received-SPF: none (domain of game-point.net does not designate
permitted sender hosts)
X-YMailISG: mos_M.0WLDu77ii4RANx9NsamQXmcjW6hJZtNppILsxKPWG8
9cZF1DbkCzs4IM5ZXqLRtc9wHA1MlYVH_3KhEr8ifZCK6KBDsnW8kfdpW8nl
p9KcJY6azoD4Ef20DeF_uNiN.1eQ95Ds.3eTIPxse0Hsvmsig0H_D9xblvBZ
WeKdlFQ050u47OgvTX_1s2v2duETMtoZPK.dP4Gri_eyqL2jXHMF0mR5N0wz
xL_BCMQb0gaQIV6za3ch0YKUP1gtFJzu5VfuqT.7y2XSC4bes19xzXqxoWDc
NBlFdnXMadvH5.ztOk5tQp1IZAhae8v7KSpqxm9AOs8lqvSVMDRL3.PujGvV
XxrxoM1X.ARbfYj2Py82Yj0vJMTSG4kVjGUD8qkMbyhIwFu7n.tE1Vghjcs_
7_H6GTR0fiETpBV0cbe.lASXHO1EJDncHP4X_W3m2w9jmqZlDefnI6TJT2HP
7RShTHkNVCGA6lPn27IrWO.cuDtgcicKJAYlHT8NpplepOrV06BwSSue.FxO
GLR.7La9cv5f_hLYYR7XKbmXSw1IA7WeWbzbzt43hg5d75uZkVq8AWrzATmi
KEfbt4fA_IHkUDlkGSpZULomD4EE0soClX0.sTAJotxq.UiHJXphbl1mhArg
IjnHsSYs1v5L3TuIwM2iGbYgZr9ujB60Lgq1O1L1UHxgPvUV8ZdvUEEeNg7b
XXc1r2DZiPZItCbAzJEgl1RatAnU91jHzQ4O0tRpIhV3ELIoFUly0cFTAVJt
uf4TOVKsCl4or2aYbXuqi6qkLFfBf.BFrYiPrmQEG2J90t9xIAPHzwHca_h_
XhYE1HYFH4GzZEUiAxaa0_eR_GnL6_HDycEaK5JJCiQU0bkreg9nA0t5ZkZ4
aljhM0wSqCbOzsnqtAU6kIBylw1w7yQa2eo0V5SXJVFTIb7DRa2Tj7rcn3gc
kbkMdAwgguUUuQd3PWEQo_kVbiysKTl0VeuSOgEQFd8DMTF_aV3jcdRYmvNH
XtVElCMeaXJf6qytGw7LyfGkI2gq7D5fmLHfyz6dRnNKrwBQO8EprB0z1zbC
e3epl23bi0fWqs_EqYh0fhAxDpotxLAevth4GK6oBqY_R74aykwt1Ji7oM8n
kIfJ.Z7TD6i12whvad6esa0Ywd7kNa.utIyJyAs1aRwYi79FSUC5G0Gegsyq
7T9U252Lwj3FgPd4yINMzIoabn12WIJIxTZUvWj5n3uvw_BQ5rkVw5_FIz6r
d8QQt4L0mgxxbgEf8htuV0VmA.afMnrUr4HEBMJkxY4y8XNAMmlTAGuiy1TP
2WEvqMUaf_C75RUdUSo7yhqlDkJ_m4GBs4UX
X-Originating-IP: [216.109.71.2]
Authentication-Results: mta1086.sbc.mail.ne1.yahoo.com
from=game-point.net; domainkeys=neutral (no sig);
from=game-point.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO localhost) (216.109.71.2)
by mta1086.sbc.mail.ne1.yahoo.com with
SMTP; Sat, 29 Jun 2013 15:18:40 +0000
Date: 29 Jun 2013 11:18:40 +0000
To: scamFRAUDalert@gmail.com
From: Facebook ~ wlg@game-point.net
Subject: 3 information messages has been sent to you
Message-ID: f514b.7e97f9f.874e@localhost
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Length: 4810

Customer Service Evaluator

Job seekers looking for part time work as Mystery Shoppers need to be on the look scamalertout for job advertisement posted online from scammers claiming to be from IWD Market Research offering you a Customer Service Evaluator or Store Evaluator job.

IWD Market Research whose address is below is a legitimate company in Germany with a subsidiary in the United States.

IWD market research GmbH

Lorenzweg 42
39124 Magdeburg
Deutschland

http://www.iwd-marketresearch.com/

WhoIs mvphiphop.com ~ Hiphoprp.com

scamalertBased on the whois information, scamFRAUDalert see it appropriate to issue this ALERT.

Hiphoprp.com is the same as mvphiphop.com

Domain Name: MVPHIPHOP.COM
Registrar: WEB COMMERCE COMMUNICATIONS LIMITED DBA WEBNIC.CC
Whois Server: whois.webnic.cc
Referral URL: http://www.webnic.cc
Name Server: NS1.ZNDNS.COM
Name Server: NS2.ZNDNS.COM
Name Server: NS3.ZNDNS.COM
Status: ok
Updated Date: 10-may-2013
Creation Date: 18-mar-2013
Expiration Date: 18-mar-2014

Last update of whois database: Sun, 30 Jun 2013 19:54:27 UTC

Domain: mvphiphop.com
Status: Active

DNS:
ns1.zndns.com
ns2.zndns.com
ns3.zndns.com

Created: 2013-03-19 10:51:39
Expires: 2014-03-19 02:51:39
Last Modified: 2013-05-10 11:06:56

Registrant Contact:
能否工号和
恒歆 高 hiphopxp2009@hotmail.com
秀洲经济开发区世通路
嘉兴, 浙江, cn 314000
P: +86.89970365 F: +86.89970365

Administrative Contact:
能否工号和
恒歆 高 hiphopxp2009@hotmail.com
秀洲经济开发区世通路
嘉兴, 浙江, cn 314000
P: +86.89970365 F: +86.89970365

Technical Contact:
能否工号和
恒歆 高 (hiphopxp2009@hotmail.com)
秀洲经济开发区世通路
嘉兴, 浙江, cn 314000
P: +86.89970365 F: +86.89970365

Billing Contact:
能否工号和
恒歆 高 hiphopxp2009@hotmail.com
秀洲经济开发区世通路
嘉兴, 浙江, cn 314000
P: +86.89970365 F: +86.89970365

Network IP address lookup:
Whois query for 172.245.216.231
Results returned from whois.arin.net:

mvphiphop

Facebook Update ~ 3 information messages has been sent to you

Email Header Analysis

IP Address:  216.109.71.2 (216.109.71.2)
IP Address Country:  United States
IP Continent:  North America
IP Address City Location:  Chesterfield
IP Address Region:  Missouri
IP Address Latitude:  38.65,
IP Address Longtitude:  -90.5334
Organization:  SAVVIS Communications Corporation
_____________________

From: Facebook
To:scamFRAUDalert@gmail.com

facebook: Notification message.

Here are some notifications you’ve missed.
3 information messages has been sent to you.

See All Notifications
This message was sent to scamFRAUDalert@gmail.com. If you don’t want to receive these emails in the future, please unsubscribe.
_______________________
2 messages notices
From Facebook Sat Jun 29 04:18:40 2013
X-Apparently-To: scamFRAUDalert via 98.138.213.179;
Sat, 29 Jun 2013 15:18:40 +0000
Return-Path: wlg@game-point.net
X-YahooFilteredBulk: 216.109.71.2
Received-SPF: none (domain of game-point.net does not designate
permitted sender hosts)
X-YMailISG: mos_M.0WLDu77ii4RANx9NsamQXmcjW6hJZtNppILsxKPWG8
9cZF1DbkCzs4IM5ZXqLRtc9wHA1MlYVH_3KhEr8ifZCK6KBDsnW8kfdpW8nl
p9KcJY6azoD4Ef20DeF_uNiN.1eQ95Ds.3eTIPxse0Hsvmsig0H_D9xblvBZ
WeKdlFQ050u47OgvTX_1s2v2duETMtoZPK.dP4Gri_eyqL2jXHMF0mR5N0wz
xL_BCMQb0gaQIV6za3ch0YKUP1gtFJzu5VfuqT.7y2XSC4bes19xzXqxoWDc
NBlFdnXMadvH5.ztOk5tQp1IZAhae8v7KSpqxm9AOs8lqvSVMDRL3.PujGvV
XxrxoM1X.ARbfYj2Py82Yj0vJMTSG4kVjGUD8qkMbyhIwFu7n.tE1Vghjcs_
7_H6GTR0fiETpBV0cbe.lASXHO1EJDncHP4X_W3m2w9jmqZlDefnI6TJT2HP
7RShTHkNVCGA6lPn27IrWO.cuDtgcicKJAYlHT8NpplepOrV06BwSSue.FxO
GLR.7La9cv5f_hLYYR7XKbmXSw1IA7WeWbzbzt43hg5d75uZkVq8AWrzATmi
KEfbt4fA_IHkUDlkGSpZULomD4EE0soClX0.sTAJotxq.UiHJXphbl1mhArg
IjnHsSYs1v5L3TuIwM2iGbYgZr9ujB60Lgq1O1L1UHxgPvUV8ZdvUEEeNg7b
XXc1r2DZiPZItCbAzJEgl1RatAnU91jHzQ4O0tRpIhV3ELIoFUly0cFTAVJt
uf4TOVKsCl4or2aYbXuqi6qkLFfBf.BFrYiPrmQEG2J90t9xIAPHzwHca_h_
XhYE1HYFH4GzZEUiAxaa0_eR_GnL6_HDycEaK5JJCiQU0bkreg9nA0t5ZkZ4
aljhM0wSqCbOzsnqtAU6kIBylw1w7yQa2eo0V5SXJVFTIb7DRa2Tj7rcn3gc
kbkMdAwgguUUuQd3PWEQo_kVbiysKTl0VeuSOgEQFd8DMTF_aV3jcdRYmvNH
XtVElCMeaXJf6qytGw7LyfGkI2gq7D5fmLHfyz6dRnNKrwBQO8EprB0z1zbC
e3epl23bi0fWqs_EqYh0fhAxDpotxLAevth4GK6oBqY_R74aykwt1Ji7oM8n
kIfJ.Z7TD6i12whvad6esa0Ywd7kNa.utIyJyAs1aRwYi79FSUC5G0Gegsyq
7T9U252Lwj3FgPd4yINMzIoabn12WIJIxTZUvWj5n3uvw_BQ5rkVw5_FIz6r
d8QQt4L0mgxxbgEf8htuV0VmA.afMnrUr4HEBMJkxY4y8XNAMmlTAGuiy1TP
2WEvqMUaf_C75RUdUSo7yhqlDkJ_m4GBs4UX
X-Originating-IP: [216.109.71.2]
Authentication-Results: mta1086.sbc.mail.ne1.yahoo.com
from=game-point.net; domainkeys=neutral (no sig);
from=game-point.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO localhost) (216.109.71.2)
by mta1086.sbc.mail.ne1.yahoo.com with
SMTP; Sat, 29 Jun 2013 15:18:40 +0000
Date: 29 Jun 2013 11:18:40 +0000
To: scamFRAUDalert@gmail.com
From: Facebook ~ wlg@game-point.net
Subject: 3 information messages has been sent to you
Message-ID: f514b.7e97f9f.874e@localhost
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Length: 4810