DOLETAJOB.COM IS NOT www.doleta.gov

scamFRAUDalert see it appropriate to issue this ALERT as scammer are impersonating UNITED STATES scamalert4DEPARTMENT OF LABOR Employment and Training Administration (ETA) site.

The WhoIs appears to be someone identity STOLEN for the website is listed below:

Address lookup

lookup failed doletajob.com
Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom doletajob.com”

Domain Name: DOLETAJOB.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.SECOITALY.NET
Name Server: NS2.SECOITALY.NET
Status: clientDeleteProhibited
Status: clientTransferProhibited

Updated Date: 28-sep-2014
Creation Date: 28-sep-2014
Expiration Date: 28-sep-2015

Last update of whois database: Tue, 30 Sep 2014 00:50:39 GMT
Queried whois.bizcn.com with “doletajob.com”

Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com
Updated Date: 2014-09-28T13:35:26Z
Creation Date: 2014-09-28T13:35:26Z

Registrar Registration Expiration Date: 2015-09-28T13:35:26Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: abuse@bizcn.com
Registrar Abuse Contact Phone: +86.5922577888

Reseller: Cnobin Technology HK Limited

Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited

Registry Registrant ID:
Registrant Name: Nicholas Rivera
Registrant Organization: Nicholas M. Rivera
Registrant Street: 4942 Alexander Avenue
Registrant City: San Jose
Registrant State/Province: CA
Registrant Postal Code: 95131
Registrant Country: us
Registrant Phone: +1.925-695-2678
Registrant Fax: +1.9256952678
Registrant Email: info@doletajob.com
Registry Admin ID:

Admin Name: Nicholas Rivera
Admin Organization: Nicholas M. Rivera
Admin Street: 4942 Alexander Avenue
Admin City: San Jose
Admin State/Province: CA
Admin Postal Code: 95131
Admin Country: us
Admin Phone: +1.925-695-2678
Admin Fax: +1.9256952678
Admin Email: info@doletajob.com

Registry Tech ID:
Tech Name: Nicholas Rivera
Tech Organization: Nicholas M. Rivera
Tech Street: 4942 Alexander Avenue
Tech City: San Jose
Tech State/Province: CA
Tech Postal Code: 95131
Tech Country: us
Tech Phone: +1.925-695-2678
Tech Fax: +1.9256952678
Tech Email: info@doletajob.com

Name Server: ns1.secoitaly.net
Name Server: ns2.secoitaly.net

DNSSEC: NotsignedDelegation
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

Last update of WHOIS database: 2014-09-30T00:50:48Z
Network Whois record

Don’t have an IP address for which to get a record

DNS records

name class type data time to live
doletajob.com IN SOA
server: ns1.secoitaly.net
email:
serial: 1412097002
refresh: 60
retry: 120
expire: 1048576
minimum ttl: 900
900s (00:15:00)
doletajob.com IN NS ns1.secoitaly.net 900s (00:15:00)
doletajob.com IN NS ns2.secoitaly.net 900s (00:15:00)
doletajob.com IN MX
preference: 10
exchange: mx.doletajob.com

Advertisement

humfrid@doletajob.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

You will be responsible for shipping goods from multiple shops through our company to different places.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on humfrid@doletajob.com, and we will send you an extensive information as soon as possible.

Attention! Accept applications only on this and next week.

Respectively submitted
Personnel department

Annoying Telemarketer Calls 855-278-1381

scamFRAUDalert see it appropriate to issue this ALERT as scammers/spammers deploy an arsenal of scam scamalert4tactics. They reinvent themselves. They all have a store which they operate that appears to be legitimate but the bulk of their business practices are scams.

Below are some of they annoying harassing telemarketing call numbers that have been reported online. These scammers are trying to sell you anything from a debt collector payday loan, or “you are a prize winner” or “job website masquerading as legitimate” job search engine. They use names like Asset Recovery Group, Home Affordable Direct, etc. etc. etc..

Consumers and job seekers need to exercise care and caution when filling out online job applications and other requirement at these sites.

  1. 855-278-1381
  2. 855-637-9571
  3. 845-501-5004
  4. 480-444-7660
  5. 610-750-8342
  6. 844-702-0087
  7. 786-235-9483
  8. 647-493-2355
  9. 410-767-6774
  10. 888-314-7891
  11. 914-555-9876
  12. 414-395-5055
  13. 870-568-5585
  14. 855-278-1381
  15. 855-233-8081
  16. 855-699-2867
  17. 855-699-2911
  18. 866-930-0847
  19. 206-466-8262
  20. 844-811-3905
  21. 909-999-8841
  22. 855-977-2128
  23. 408-740-9556
  24. 215-589-6839
  25. 215-589-6839
  26. 714-776-9521
  27. 562-595-9548
  28. 312-572-6990
  29. 201-351-7742
  30. 855-257-0385
  31. 855-283-6143
  32. 855-283-6144
  33. 855-283-5484
  34. 866-930-0847
  35. Rewardsflow.com
  36. RewardZone USA, LLC
  37. Rewardzoneusa.com
  38. http://www.rewardzoneusa.com/

Package Manager – belboltkytoa@dropmail.me

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

from: scamFRAUDalert
to: Postmaster scamFRAUDalert
cc: Administrator ,
AOL Users
date: Sat, Sep 20, 2014 at 4:14 AM
subject: Well paid home job available

Our company is happy to feature this new great vacancy of “Package Manager”.

This position is designed exclusively for caretakers. If you are able to be
home from 9am through 5pm, this job is offering you the best opportunity to
earn money.

You will have to work with parcels. You will have to receive parcels,
repack them and send them to the end addressee. This job is extremely
convenient and it is ideally suited for housewives, retirees and others who
either work from home or are at home during daytime hours.

There will be no heavy packages. Most packages contain toys and clothes.

You need no money to apply.. You will not have to spend any of your money
earning money with us. All work-related expenses are on us.

To work for our company you will have to have a Internet ready PC, a cell
phone and means to print necessary documents.

The amount of money you will be earning depends on the quantity of parcels
you will be processing.

During the probationary period our employees make up to $150/week.

Contact us now belboltkytoa@dropmail.me

P.S. To qualify, all you have to do is to be home from 9am to 5pm. You must
meet this condition or, this job is not for you.

jocko@usajobsnow.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

In their duties will be included the document and payment control of our clients.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on jocko@usajobsnow.com and we will send you an extensive information as soon as possible.

Respectively submitted
Personnel department
_________________________________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

You will be responsible for shipping goods from multiple shops through our company to different places.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on maxim@usacareersorg.com, and we will send you an extensive information as soon as possible.
________________________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

In their duties will be included the document and payment control of our clients. Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on nev@usajobsnow.com and we will send you an extensive information as soon as possible.

Respectively submitted
Personnel department
______________________________

Address lookup

lookup failed: usajobsnow.com
Could not find an IP address for this domain name
Domain Whois record

Queried whois.internic.net with “dom usajobsnow.com

Domain Name: USAJOBSNOW.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.MERCURY-LDO.NET
Name Server: NS2.MERCURY-LDO.NET
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 13-sep-2014
Creation Date: 13-sep-2014
Expiration Date: 13-sep-2015

Last update of whois database: Mon, 15 Sep 2014 16:16:51 UTC
Queried whois.bizcn.com with “usajobsnow.com”…

Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com
Updated Date: 2014-09-13T09:57:23Z
Creation Date: 2014-09-13T09:57:23Z

Registrar Registration Expiration Date: 2015-09-13T09:57:23Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: abuse@bizcn.com
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited

Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited

Registry Registrant ID:
Registrant Name: Teri Werner
Registrant Organization: Teri N. Werner
Registrant Street: 3330 Bird Street
Registrant City: Trementina
Registrant State/Province: NM
Registrant Postal Code: 88439
Registrant Country: us
Registrant Phone: +1.5056415379
Registrant Phone Ext:
Registrant Fax: +1.5056415379
Registrant Email: info@usajobsnow.com

Registry Admin ID:
Admin Name: Teri Werner
Admin Organization: Teri N. Werner
Admin Street: 3330 Bird Street
Admin City: Trementina
Admin State/Province: NM
Admin Postal Code: 88439
Admin Country: us
Admin Phone: +1.5056415379
Admin Phone Ext:
Admin Fax: +1.5056415379
Admin Email: info@usajobsnow.com

Registry Tech ID:
Tech Name: Teri Werner
Tech Organization: Teri N. Werner
Tech Street: 3330 Bird Street
Tech City: Trementina
Tech State/Province: NM
Tech Postal Code: 88439
Tech Country: us
Tech Phone: +1.5056415379
Tech Phone Ext:
Tech Fax: +1.5056415379
Tech Fax Ext: Tech Email: info@usajobsnow.com

Name Server: ns1.mercury-ldo.net
Name Server: ns2.mercury-ldo.net

DNSSEC: NotsignedDelegation
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2014-09-15T16:17:06Z
Network Whois record

Don’t have an IP address for which to get a record

DNS records

name class type data time to live
usajobsnow.com IN SOA
server: ns1.mercury-ldo.net
email:
serial: 1410797102
refresh: 60
retry: 120
expire: 1048576
minimum ttl: 900
900s (00:15:00)
usajobsnow.com IN NS ns1.mercury-ldo.net 900s (00:15:00)
usajobsnow.com IN NS ns2.mercury-ldo.net 900s (00:15:00)
usajobsnow.com IN MX
preference: 10
exchange: mx.usajobsnow.com

USACAREERSORG.COM – duffie@usacareersorg.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

You will be responsible for shipping goods from multiple shops through our company to different places.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on duffie@usacareersorg.com, and we will send you an extensive information as soon as possible.

Attention! Accept applications only on this and next week.

Respectively submitted
Personnel department
___________________________________

Address lookup
lookup failed usacareersorg.com
Could not find an IP address for this domain name
Domain Whois record

Queried whois.internic.net with “dom usacareersorg.com”…

Domain Name: USACAREERSORG.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.IPROTECHSUPPORT.NET
Name Server: NS2.IPROTECHSUPPORT.NET
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 08-sep-2014
Creation Date: 08-sep-2014
Expiration Date: 08-sep-2015

Last update of whois database: Thu, 11 Sep 2014 17:04:20 UTC
Queried whois.bizcn.com with “usacareersorg.com”…

Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com
Updated Date: 2014-09-08T18:13:42Z
Creation Date: 2014-09-08T18:13:41Z
Registrar Registration Expiration Date: 2015-09-08T18:13:41Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: abuse@bizcn.com
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited

Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited

Registry Registrant ID:
Registrant Name: Edward Dale
Registrant Organization: Edward C. Dale
Registrant Street: 1507 Ritter Street
Registrant City: Section
Registrant State/Province: AL
Registrant Postal Code: 35771
Registrant Country: us
Registrant Phone: +1.2562284851
Registrant Phone Ext:
Registrant Fax: +1.2562284851
Registrant Email: info@usacareersorg.com

Registry Admin ID:
Admin Name: Edward Dale
Admin Organization: Edward C. Dale
Admin Street: 1507 Ritter Street
Admin City: Section
Admin State/Province: AL
Admin Postal Code: 35771
Admin Country: us
Admin Phone: +1.2562284851
Admin Phone Ext:
Admin Fax: +1.2562284851
Admin Email: info@usacareersorg.com

Registry Tech ID:
Tech Name: Edward Dale
Tech Organization: Edward C. Dale
Tech Street: 1507 Ritter Street
Tech City: Section
Tech State/Province: AL
Tech Postal Code: 35771
Tech Country: us
Tech Phone: +1.2562284851
Tech Phone Ext:
Tech Fax: +1.2562284851
Tech Email: info@usacareersorg.com

Name Server: ns1.iprotechsupport.net
Name Server: ns2.iprotechsupport.net

DNSSEC: NotsignedDelegation
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2014-09-11T17:04:26Z

WhoIs www.safedrugstore.net

Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies 

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

safedrugstore

94.242.221.173 resolves to ip-static-94-242-221-173.as5577.net
The following A records are set to 94.242.221.173:

  • approvedmeds.net
  • dutyfree24h.com
  • expressdrugstore.net
  • linksboard.net
  • safedrugstore.net

Address lookup
canonical name:www.safedrugstore.net

aliases
addresses:94.242.221.173
Domain Whois record

Queried whois.internic.net with “dom safedrugstore.net”…

Domain Name: SAFEDRUGSTORE.NET
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN

Name Server: NS1.HE.NET
Name Server: NS2.HE.NET

Status: clientTransferProhibited

Updated Date: 18-aug-2014
Creation Date: 16-jun-2014
Expiration Date: 16-jun-2016

Last update of whois database: Sat, 06 Sep 2014 23:12:33 UTC
Queried whois.todaynic.com with “safedrugstore.net”…

Domain name: safedrugstore.net
Registry Domain ID:
Registrar WHOIS Server: whois.todaynic.com
Registrar URL: http://www.now.cn/
Update Date: 2014-08-18
Creation Date: 2014-06-16 09:27:42
Registrar Registration Expiration Date: 2016-06-16
Registrar: Todaynic.com, Inc.
Registrar IANA ID: 697
Registrar Abuse Contact Email: cs@now.cn
Registrar Abuse Contact Phone: +86.7563810552
Domain Status:ok
Domain Status: clientTransferProhibited
spget contacts:

Registry Registrant ID:
Registrant Name: Whois Agent
Registrant Organization: Whois Privacy Protection Service
Registrant Address: Xiamen
Registrant City: Xiamen
Registrant Province/state: FUJIAN
Registrant Country: CN
Registrant Postal Code: 361000
Registrant Phone: +57.59222577844
Registrant Phone EXT: +57.59222577844
Registrant Fax: +57.59222577844
Registrant Fax EXT: +57.59222577844
Registrant Email: jadafeb@gmail.com
Registrant Email EXT: jadafeb@gmail.com

Registry Admin ID: 43801284
Admin Name: Whois Agent
Admin Organization: Whois Privacy Protection Service
Admin Address: Xiamen
Admin City: Xiamen
Admin Province/state: FUJIAN
Admin Country: CN
Admin Postal Code: 361000
Admin Phone: +57.59222577844
Admin Phone EXT: +57.59222577844
Admin Fax: +57.59222577844
Admin Fax EXT: +57.59222577844
Admin Email: jadafeb@gmail.com
Admin Email EXT: jadafeb@gmail.com
Registry Tech ID: 43801284

Tech Name: Whois Agent
Tech Organization: Whois Privacy Protection Service
Tech Address: Xiamen
Tech City: Xiamen
Tech Province/state: FUJIAN
Tech Country: CN
Tech Postal Code: 361000
Tech Phone: +57.59222577844
Tech Phone EXT: +57.59222577844
Tech Fax: +57.59222577844
Tech Fax EXT: +57.59222577844
Tech Email: jadafeb@gmail.com
Tech Email EXT: jadafeb@gmail.com

Billing Contact:
Billing Name: Whois Agent
Billing Organization: Whois Privacy Protection Service
Billing Address: Xiamen
Billing City: Xiamen
Billing Province/state: FUJIAN
Billing Country: CN
Billing Postal Code: 361000
Billing Phone: +57.59222577844
Billing Phone EXT: +57.59222577844
Billing Fax: +57.59222577844
Billing Fax EXT: +57.59222577844
Billing Email: jadafeb@gmail.com
Billing Email EXT: jadafeb@gmail.com

DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of whois database: 2014-08-18 <<<

Important Reminder: Per ICANN 2013RAA`s request, Todaynic.com,Inc. has modified domain names`whois format of dot com/net
Network Whois record

Queried whois.ripe.net with “-B 94.242.221.173″…

% Information related to ‘94.242.192.0 – 94.242.255.255’

% Abuse contact for ‘94.242.192.0 – 94.242.255.255’ is ‘abuse@as5577.net’

inetnum: 94.242.192.0 – 94.242.255.255
netname: LU-ROOT-20081021
descr: root SA
country: LU
org: ORG-re8-RIPE
admin-c: AB99-RIPE
tech-c: RE655-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: ROOT-MNT
mnt-routes: ROOT-MNT
mnt-domains: ROOT-MNT
notify: admin@root.lu
changed: hostmaster@ripe.net 20081021
changed: hostmaster@ripe.net 20100216
source: RIPE

organisation: ORG-RE8-RIPE
org-name: root SA
org-type: LIR
address: root SA
address: Andy BIERLAIR
address: 3, op der Poukewiss
address: 7795
address: Roost – Bissen
address: LUXEMBOURG
phone: +35220500
fax-no: +35220500500
e-mail: ab@root.lu
admin-c: AB99-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: ROOT-MNT
notify: admin@root.lu
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20071105
changed: bitbucket@ripe.net 20071105
changed: bitbucket@ripe.net 20071105
changed: bitbucket@ripe.net 20071105
changed: bitbucket@ripe.net 20071105
changed: bitbucket@ripe.net 20080606
changed: bitbucket@ripe.net 20081018
changed: bitbucket@ripe.net 20100203
changed: bitbucket@ripe.net 20100224
changed: bitbucket@ripe.net 20130911
changed: bit-bucket@ripe.net 20131119
abuse-c: RE655-RIPE
source: RIPE

role: root eSolutions
address: 3, op der Poukewiss
address: 7795 Roost – Bissen
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
e-mail: info@root.lu
abuse-mailbox: abuse@as5577.net
remarks: For operational issues please contact to noc@as5577.net
admin-c: AB99-RIPE
tech-c: AB99-RIPE
nic-hdl: RE655-RIPE
mnt-by: ROOT-MNT
changed: noc@as5577.net 20140116
source: RIPE

person: Andy BIERLAIR
address: root SA
address: 35, rue John F. Kennedy
address: 7327 Steinsel
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
nic-hdl: AB99-RIPE
mnt-by: ROOT-MNT
remarks:
remarks: +————————————+
remarks: | I did *NOT* spam your mailbox! |
remarks: | I will *NOT* reply to abuse mails! |
remarks: | |
remarks: | Please contact abuse@as5577.net ! |
remarks: +————————————+
remarks:
e-mail: ab@root.lu
notify: ab@root.lu
changed: ab@root.lu 20110207
source: RIPE

% Information related to ‘94.242.192.0/18AS5577’

route: 94.242.192.0/18
descr: root SA
origin: AS5577
mnt-by: ROOT-MNT
notify: noc@as5577.net
changed: noc@as5577.net 20091126
source: RIPE

% This query was served by the RIPE Database Query Service version 1.75 (DB-1)
DNS records

name class type data time to live
http://www.safedrugstore.net IN A 94.242.221.173 86400s (1.00:00:00)
safedrugstore.net IN SOA
server: ns1.he.net
email: hostmaster@he.net
serial: 2014062708
refresh: 10800
retry: 1800
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
safedrugstore.net IN NS ns3.he.net 86400s (1.00:00:00)
safedrugstore.net IN NS ns4.he.net 86400s (1.00:00:00)
safedrugstore.net IN NS ns2.he.net 86400s (1.00:00:00)
safedrugstore.net IN A 94.242.221.173 86400s (1.00:00:00)
safedrugstore.net IN NS ns5.he.net 86400s (1.00:00:00)
safedrugstore.net IN NS ns1.he.net 86400s (1.00:00:00)
173.221.242.94.in-addr.arpa IN PTR ip-static-94-242-221-173.as5577.net 3600s (01:00:00)
221.242.94.in-addr.arpa IN SOA
server: a.root.lu
email: noc@as5577.net
serial: 1409996553
refresh: 10800
retry: 1800
expire: 3024000
minimum ttl: 3600
3600s (01:00:00)
221.242.94.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2014-10-06 10:01:11Z
signature inception: 2014-09-06 09:01:11Z
key tag: 26032
signer’s name: 94.in-addr.arpa
signature:
(1024 bits)
1D72B8FB0BC7203BD04A1E41991CFF13
9B9E16F6862B6198341267B33BD30D4A
E03DD99D6D45B8E9D19F60138BCC6214
C3B7F3D7915BEE1C69F8D260C65E9930
3F631F95AA74438101A6DEF04E5C74EC
D5793583CC609ED2F693CDD9A63B5971
CA1A69B6A80C6E5406A3FD3B01A82886
DA7E1D67E0C096E3957AF44478B77126
7199s (01:59:59)
221.242.94.in-addr.arpa IN NSEC
next domain name: 222.242.94.in-addr.arpa
record types: NS RRSIG NSEC
7199s (01:59:59)
221.242.94.in-addr.arpa IN NS a.root.lu 3600s (01:00:00)
221.242.94.in-addr.arpa IN NS c.root.lu 3600s (01:00:00)
221.242.94.in-addr.arpa IN NS b.root.lu 3600s (01:00:00)
— end —

WhoIs ~ fraudscamalert.com

Address lookup
canonical name fraudscamalert.com

aliases
addresses:199.189.250.99
Domain Whois record

Queried whois.internic.net with “dom fraudscamalert.com”…

Domain Name: FRAUDSCAMALERT.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.SEOADMEDIA.COM
Name Server: NS2.SEOADMEDIA.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 16-apr-2014
Creation Date: 21-apr-2002
Expiration Date: 21-apr-2015

Last update of whois database: Sat, 06 Sep 2014 21:11:43 UTC
Queried whois.godaddy.com with “fraudscamalert.com”…

Domain Name: FRAUDSCAMALERT.COM
Registry Domain ID: 85825096_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Update Date: 2014-04-16 11:25:49
Creation Date: 2002-04-21 19:14:34

Registrar Registration Expiration Date: 2015-04-21 19:14:34
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.480-624-2505

Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientRenewProhibited
Domain Status: clientDeleteProhibited

Registry Registrant ID:
Registrant Name: Michael Roman
Registrant Organization:
Registrant Street: 33 Ivan Road
Registrant City: Toronto
Registrant State/Province: Ontario
Registrant Postal Code: M1C 1V1
Registrant Country: Canada
Registrant Phone: (416) 282-4111
Registrant Fax: (416) 282-7353
Registrant Email: maroman@ihac.com

Registry Admin ID:
Admin Name: Michael Roman
Admin Organization: Michael A. Roman
Admin Street: 33 Ivan Road
Admin City: Toronto
Admin State/Province: ON
Admin Postal Code: M1C 1V1
Admin Country: Canada
Admin Phone: (416) 282-4111
Admin Fax: (416) 282-7353
Admin Email: maroman@ihac.com

Registry Tech ID:
Tech Name: Michael Roman
Tech Organization: Michael A. Roman
Tech Street: 33 Ivan Road
Tech City: Toronto
Tech State/Province: ON
Tech Postal Code: M1C 1V1
Tech Country: Canada
Tech Phone: (416) 282-4111
Tech Fax: (416) 282-7353

Tech Email: maroman@ihac.com
Name Server: NS1.SEOADMEDIA.COM
Name Server: NS2.SEOADMEDIA.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2014-09-06T21:00:00Z
Network Whois record

Queried rwhois.micfo.com with “199.189.250.99”…

%rwhois V-1.5:001eff:00 rwhois.micfo.com (by Network Solutions, Inc. V-1.5.9.5)
%referral rwhois://rwhois.micfo.com:4321
%ok
Queried whois.arin.net with “n 199.189.250.99″…

NetRange: 199.189.248.0 – 199.189.255.255
CIDR: 199.189.248.0/21
OriginAS: AS53889
NetName: MICFO
NetHandle: NET-199-189-248-0-1
Parent: NET-199-0-0-0-0
NetType: Direct Allocation
RegDate: 2011-08-19
Updated: 2012-03-20
Ref: http://whois.arin.net/rest/net/NET-199-189-248-0-1

OrgName: Micfo, LLC.
OrgId: MICFO-2
Address: 400 Galleria Pkwy, Suite 1500
City: Atlanta
StateProv: GA
PostalCode: 30339
Country: US
RegDate: 2009-12-04
Updated: 2014-05-30
Ref: http://whois.arin.net/rest/org/MICFO-2

ReferralServer: rwhois://rwhois.micfo.com:4321

OrgTechHandle: CT374-ARIN
OrgTechName: Terry, Carter
OrgTechPhone: +1-646-688-5268
OrgTechEmail: carter.terry@micfo.com
OrgTechRef: http://whois.arin.net/rest/poc/CT374-ARIN

OrgAbuseHandle: ABUSE3115-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-800-900-7744
OrgAbuseEmail: abuse@micfo.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3115-ARIN

OrgTechHandle: RADEM-ARIN
OrgTechName: Rademacher, Russell
OrgTechPhone: +1-800-900-7744
OrgTechEmail: russell.rademacher@micfo.com
OrgTechRef: http://whois.arin.net/rest/poc/RADEM-ARIN
DNS records

name class type data time to live
fraudscamalert.com IN TXT v=spf1 +a +mx +ip4:199.189.255.55 ?all 14400s (04:00:00)
fraudscamalert.com IN MX
preference: 0
exchange: fraudscamalert.com
14400s (04:00:00)
fraudscamalert.com IN SOA
server: ns1.seoadmedia.com
email: maroman@ihac.com
serial: 2013051400
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
fraudscamalert.com IN NS ns1.appraiserchat.com 86400s (1.00:00:00)
fraudscamalert.com IN NS ns2.appraiserchat.com 86400s (1.00:00:00)
fraudscamalert.com IN A 199.189.250.99 14400s (04:00:00)
99.250.189.199.in-addr.arpa IN PTR janky.gr8modelling.com 14400s (04:00:00)
250.189.199.in-addr.arpa IN SOA
server: ns1.micfo.com
email: support@micfo.com
serial: 2012102801
refresh: 86400
retry: 7200
expire: 36000
minimum ttl: 3600
14400s (04:00:00)
250.189.199.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2014-09-16 16:01:52Z
signature inception: 2014-09-06 16:01:52Z
key tag: 15047
signer’s name: 199.in-addr.arpa
signature:
(1024 bits)
0F42FABBD7F3FE3B590DE010FC7D7B6D
B48AFD3EC0AC2C6E37F078728148A5D3
3167D41A4B5764A5DFAA36036089230D
9555FDB922E37E8EA917F5EF289180C2
1CDA1E0C1643C815F1135C5055EBA7CE
335762EC4B177B20E02702457CE34064
5E960402B378D99F918791A336FDC3C7
569A41DA91B737AE3748DCBB27298BA2
10800s (03:00:00)
250.189.199.in-addr.arpa IN NSEC
next domain name: 251.189.199.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
250.189.199.in-addr.arpa IN NS ns1.micfo.com 14400s (04:00:00)
250.189.199.in-addr.arpa IN NS ns2.micfo.com 14400s (04:00:00)
— end —

WhoIs www.autosweblog.com

Address lookupscamalert4
canonical name autosweblog.com

aliases http://www.autosweblog.com
addresses: 162.243.30.135
Domain Whois record

Queried whois.internic.net with “dom autosweblog.com

Domain Name: AUTOSWEBLOG.COM
Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Whois Server: whois.melbourneit.com
Referral URL: http://www.melbourneit.com
Name Server: NS1.DIGITALOCEAN.COM
Name Server: NS2.DIGITALOCEAN.COM
Name Server: NS3.DIGITALOCEAN.COM
Status: ok
Updated Date: 06-jun-2014
Creation Date: 31-oct-2012
Expiration Date: 31-oct-2014

Last update of whois database: Sat, 06 Sep 2014 20:25:05 UTC
Queried whois.melbourneit.com with “autosweblog.com”…

Domain Name: autosweblog.com
Registry Domain ID: 1756124948_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.melbourneit.com
Registrar URL: http://www.melbourneit.com.au
Updated Date: 2014-06-07T03:22:24Z
Creation Date: 2012-10-31T18:01:05Z
Registrar Registration Expiration Date: 2014-10-31T18:01:05Z
Registrar: Melbourne IT Ltd
Registrar IANA ID: 13
Registrar Abuse Contact Email: abuse@melbourneit.com.au
Registrar Abuse Contact Phone: +61.386242300
Domain Status: ok

Registry Registrant ID:
Registrant Name: Fadli Idris
Registrant Organization: autosweblog
Registrant Street: Jl. Sultan Salahuddin No,32 Bitai Jaya Baru
Registrant City: Banda Aceh
Registrant State/Province: NAD
Registrant Postal Code: 23235
Registrant Country: ID
Registrant Phone: +1.6208126970717
Registrant Email: buzekhosting@yahoo.com

Registry Admin ID:
Admin Name: Fadli Idris
Admin Organization: autosweblog
Admin Street: Jl. Sultan Salahuddin No,32 Bitai Jaya Baru
Admin City: Banda Aceh
Admin State/Province: NAD
Admin Postal Code: 23235
Admin Country: ID
Admin Phone: +1.6208126970717
Admin Email: buzekhosting@yahoo.com

Registry Tech ID:
Tech Name: YahooDomains TechContact
Tech Organization: Yahoo! Inc
Tech Street: 701 First Ave.
Tech City: Sunnyvale
Tech State/Province: CA
Tech Postal Code: 94089
Tech Country: US
Tech Phone: +1.4089162124
Tech Email: domain.tech@yahoo-inc.com

Name Server: NS3.DIGITALOCEAN.COM
Name Server: NS1.DIGITALOCEAN.COM
Name Server: NS2.DIGITALOCEAN.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdrprs.internic.net

Last update of WHOIS database: 2014-09-06T20:12:28Z
Network Whois record

Queried whois.arin.net with “n 162.243.30.135″…

NetRange: 162.243.0.0 – 162.243.255.255
CIDR: 162.243.0.0/16
OriginAS: AS14061, AS62567, AS46652
NetName: DIGITALOCEAN-7
NetHandle: NET-162-243-0-0-1
Parent: NET-162-0-0-0-0
NetType: Direct Allocation
Comment: http://www.digitalocean.com
Comment: Simple Cloud Hosting
RegDate: 2013-09-06
Updated: 2013-09-06
Ref: http://whois.arin.net/rest/net/NET-162-243-0-0-1

OrgName: Digital Ocean, Inc.
OrgId: DO-13
Address: 101 Ave of the Americas
Address: 10th Floor
City: New York
StateProv: NY
PostalCode: 10013
Country: US
RegDate: 2012-05-14
Updated: 2014-09-03
Comment: http://www.digitalocean.com
Comment: Simple Cloud Hosting
Ref: http://whois.arin.net/rest/org/DO-13

OrgNOCHandle: NOC32014-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-347-875-6044
OrgNOCEmail: noc@digitalocean.com
OrgNOCRef: http://whois.arin.net/rest/poc/NOC32014-ARIN

OrgTechHandle: URETS-ARIN
OrgTechName: Uretsky, Ben
OrgTechPhone: +1-646-397-8051
OrgTechEmail: abuse@digitalocean.com
OrgTechRef: http://whois.arin.net/rest/poc/URETS-ARIN

OrgAbuseHandle: URETS-ARIN
OrgAbuseName: Uretsky, Ben
OrgAbusePhone: +1-646-397-8051
OrgAbuseEmail: abuse@digitalocean.com
OrgAbuseRef: http://whois.arin.net/rest/poc/URETS-ARIN
DNS records

name class type data time to live
http://www.autosweblog.com IN CNAME autosweblog.com 1800s (00:30:00)
autosweblog.com IN SOA
server: ns1.digitalocean.com
email: hostmaster@autosweblog.com
serial: 1400433387
refresh: 3600
retry: 900
expire: 1209600
minimum ttl: 1800
1800s (00:30:00)
autosweblog.com IN NS ns2.digitalocean.com 1800s (00:30:00)
autosweblog.com IN NS ns1.digitalocean.com 1800s (00:30:00)
autosweblog.com IN NS ns3.digitalocean.com 1800s (00:30:00)
autosweblog.com IN A 162.243.30.135 1800s (00:30:00)
135.30.243.162.in-addr.arpa IN PTR autosweblog.com 86400s (1.00:00:00)
30.243.162.in-addr.arpa IN SOA
server: ns1.digitalocean.com
email: root@ns1.digitalocean.com
serial: 43
refresh: 10800
retry: 900
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
30.243.162.in-addr.arpa IN NS ns2.digitalocean.com 86400s (1.00:00:00)
30.243.162.in-addr.arpa IN NS ns3.digitalocean.com 86400s (1.00:00:00)
30.243.162.in-addr.arpa IN NS ns1.digitalocean.com 86400s (1.00:00:00)
— end —

aliciachad@yahoo.com – Receptionist/Admin Assistant/Customer Service/Data Entry

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

MessageId
CA+=_vodHSNDhwZEKk7oozzpS1T0+LcmtqXOzYRYhekDzmHXzFA@mail.gmail.com
Created at: 9/3/2014 4:30:27 AM ( Delivered after 1 sec )
From: desktop bright
To: undisclosed-recipients:;
Subject: Re: Receptionist / Admin Assistant/Customer Service/Data Entry Position
SPF: pass
DKIM: pass

# Delay From* To* Protocol Time received
0 → 10.107.167.9 Web 9/3/2014 4:30:27 AM
1 → [Google] 10.42.83.131 SMTP 9/3/2014 4:30:27 AM Originated at Gmail
2 1 sec mr.google.com → [Google] 10.42.83.131 SMTP 9/3/2014 4:30:28 AM
3 → [Google] 10.217.87.132 SMTP 9/3/2014 4:30:28 AM

Good Morning,

Dear applicant, we apologize for the delay in response, as in regards to your resume that was forwarded to our head department for the Receptionist / Admin Assistant/Customer Service/Data Entry Position, The Hiring Desk have reviewed your resume for the Receptionist / Admin Assistant/Customer Service/Data Entry Position and we believe you have the required qualifications to proceed.

This is a Receptionist / Admin Assistant/Customer Service/Data Entry Position Working hours are from 8am-3pm,Monday-Friday.The starting pay is $24.75 /hr for this Receptionist / Admin Assistant/Customer Service/Data Entry Position you are also expected to come on-line through Yahoo Messenger during working hours.

I want you to set-up a yahoo messenger and if you got one already use it, Add Mrs Alicia Chad the Hiring Manager and IM her on this ID aliciachad@yahoo.com asap for the interview/briefing and comprehensive job details.This is our first step to proceed further. she will be on online waiting for you. Interview Schedule date/time is on Wednesday 3rd of Sept 2014, @8am to 5pm..

Best Regards
Human Resources

WhoIs domain-kb.com

Address lookup

canonical name domain-kb.com.
aliases
addresses 192.95.22.46
Domain Whois record

Queried whois.internic.net with “dom domain-kb.com”…

Domain Name: DOMAIN-KB.COM
Registrar: OVH
Whois Server: whois.ovh.com
Referral URL: http://www.ovh.com
Name Server: DNS200.ANYCAST.ME
Name Server: NS200.ANYCAST.ME
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 26-may-2014
Creation Date: 29-jun-2013
Expiration Date: 29-jun-2021

>>> Last update of whois database: Tue, 02 Sep 2014 00:24:33 UTC <<>> Last update of WHOIS database: 2014-08-30T09:11:28.0Z <<<
Network Whois record

Queried whois.arin.net with "n ! NET-192-95-22-0-1"…

NetRange: 192.95.22.0 – 192.95.22.255
CIDR: 192.95.22.0/24
OriginAS: AS16276
NetName: OVH-DEDICATED-8
NetHandle: NET-192-95-22-0-1
Parent: NET-192-95-0-0-1
NetType: Reassigned
RegDate: 2013-01-14
Updated: 2013-01-14
Ref: http://whois.arin.net/rest/net/NET-192-95-22-0-1

OrgName: OVH (NWK)
OrgId: ON-6
Address: 165 Halsey Street
City: Newark
StateProv: NJ
PostalCode: 07102
Country: US
RegDate: 2012-07-11
Updated: 2012-07-11
Ref: http://whois.arin.net/rest/org/ON-6

OrgTechHandle: NOC11876-ARIN
OrgTechName: NOC
OrgTechPhone: +1-855-684-5463
OrgTechEmail: noc@ovh.net
OrgTechRef: http://whois.arin.net/rest/poc/NOC11876-ARIN

OrgAbuseHandle: NOC11876-ARIN
OrgAbuseName: NOC
OrgAbusePhone: +1-855-684-5463
OrgAbuseEmail: noc@ovh.net
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC11876-ARIN