daryle@21thjob.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

You will be responsible for shipping goods from multiple shops through our company to different places.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on daryle@21thjob.com and we will send you an extensive information as soon as possible.

Attention! Accept applications only on this and next week.

Respectively submitted
Personnel department

Advertisement

Package Manager – belboltkytoa@dropmail.me

amdjlsv@ravemail.com
to:amdjlsv@ravemail.com
cc:waynensheri@sbcglobal.net
AOL Users bobkat731@sbcglobal.net
date: Sat, Sep 20, 2014 at 4:14 AM

Sep 20 (2 days ago)

to Postmaster, Administrator, AOL

Why is this message in Spam? It’s similar to messages that were detected by our spam filters.
_________________________________________________

Our company is happy to feature this new great vacancy of “Package Manager”.

This position is designed exclusively for caretakers. If you are able to be
home from 9am through 5pm, this job is offering you the best opportunity to
earn money.

You will have to work with parcels. You will have to receive parcels,
repack them and send them to the end addressee. This job is extremely
convenient and it is ideally suited for housewives, retirees and others who
either work from home or are at home during daytime hours.

There will be no heavy packages. Most packages contain toys and clothes.

You need no money to apply.. You will not have to spend any of your money
earning money with us. All work-related expenses are on us.

To work for our company you will have to have a Internet ready PC, a cell
phone and means to print necessary documents.

The amount of money you will be earning depends on the quantity of parcels
you will be processing.

During the probationary period our employees make up to $150/week.

Contact us now belboltkytoa@dropmail.me

P.S. To qualify, all you have to do is to be home from 9am to 5pm. You must
meet this condition or, this job is not for you.

American Restructuring

Loan Modification Scam

Posted: December 02, 2014

A Washington consumer reported an entity may be operating a loan modification scam under the name of American Restructuring. The consumer reported that he believed that he retained this entity to obtain a loan modification from the owner of his mortgage loan and authorized the lender to have all communications go directly through this entity American Restructuring. The consumer indicated that he received what appeared to be an approval letter for a trial loan modification from the entity American Restructuring which required six trial payments all of which were to be deposited directly into a bank account for American Restructuring.

After the consumer made his sixth and final payment, the entity American Restructuring discontinued communication with the consumer and shortly thereafter the consumer received notice of a forced sale from the lender for nonpayment of the mortgage. Subsequently, the consumer discovered none of his payments were ever paid to the lender and all correspondence from the lender went to American Restructuring, based on the consumer’s third party authorization.

The contact information for this entity provided by the consumer is:

American Restructuring
5348 Vegas Drive STE C
Las Vegas, NV 89108
Phone: (702) 490-9410
Email: americanrestructuring@lawyer.com

American Restructuring is not licensed to do conduct business in Washington State. The Washington State Department of Financial Institutions (DFI) strongly recommends that consumers deal only with those entities that are properly licensed to conduct business.

Verify Licenses

DFI strongly recommends that consumers deal only with those lenders that are properly licensed to conduct business. Consumers can determine whether lenders are properly licensed using the “Verify a License” feature on the DFI’s website at www.dfi.wa.gov/consumers/findcompany.htm.
Report Fraud
If you are suspicious of unlicensed activity by a payday lender please contact the DFI at 1-877-RING-DFI (746-4334), or online at www.dfi.wa.gov.

If you feel you have been the victim of a loan scam please contact the Federal Trade Commission at 1-877-FTC-HELP (382-4357), or online at http://www.ftc.gov or contact the Consumer Financial Protection Bureau (855) 411-CFPB (2372), or online at www.consumerfinance.gov.

If you feel you have been the victim of a loan scam involving the Internet please contact the Internet Crime Complaint Center online at www.ic3.gov

Canadian Pharmacy Spam – phamostermo32.com

Buying Prescription Drugs Online Scam Alert 1
May Be Dangerous
Says Drug Enforcement Administration

DEA Logo - Buying Proscription Drugs

Click Here
National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

Also See ThreatChaos

Department of Justice – Ryan Haight Act


http://phamostermo32.com

IP address: 195.88.226.2
Host name: phamostermo32.com
Alias:
phamostermo32.com
195.88.226.2 is from Moldova, Republic of(MD) in region Eastern Europe

TraceRoute to 195.88.226.2 [phamostermo32.com]
Hop (ms) (ms) (ms) IP Address Host name
1 77 55 35 72.249.128.105 –
2 128 99 103 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net
3 53 45 95 66.192.253.26 peer-02-xe-0-0-0.palo.twtelecom.net
4 70 99 135 4.69.132.77 ae-3-3.ebr2.losangeles1.level3.net
5 130 326 89 4.69.132.13 ae-2-2.ebr2.sanjose1.level3.net
6 283 305 155 4.69.134.218 ae-82-82.csw3.sanjose1.level3.net
7 270 102 310 195.88.226.2 –
Trace complete

Retrieving DNS records for phamostermo32.com…
DNS servers
ns1.namerich.com
ns2.namerich.com

Answer records
phamostermo32.com SOA
server: NS1.NAMERICH.com
email: guoliang@chinaspringboard.cn
serial: 2010030500
refresh: 10800
retry: 7200
expire: 3600000
minimum ttl: 3600
3600s
phamostermo32.com A 195.88.226.2 3600s
phamostermo32.com A 91.212.132.230 3600s
phamostermo32.com NS NS1.NAMERICH.com 3600s
phamostermo32.com NS ns2.NAMERICH.com 3600s

Authority records

Additional records

Whois query for phamostermo32.com…
Query error: Timed out
Network IP address lookup:

Whois query for 195.88.226.2…

Results returned from whois.arin.net:

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 195.0.0.0 – 195.255.255.255
CIDR: 195.0.0.0/8
NetName: RIPE-CBLK3
NetHandle: NET-195-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: SNS-PB.ISC.ORG
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 1996-03-25
Updated: 2009-03-25

RTechHandle: RIPE-NCC-ARIN
RTechName: RIPE NCC Hostmaster
RTechPhone: +31 20 535 4444
RTechEmail: search-ripe-ncc-not-arin@ripe.net

# ARIN WHOIS database, last updated 2010-03-08 20:00
# Enter ? for additional hints on searching ARIN’s WHOIS database.
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at https://www.arin.net/whois_tou.html

Results returned from whois.ripe.net:
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Information related to ‘195.88.226.0 – 195.88.227.255’

inetnum: 195.88.226.0 – 195.88.227.255
netname: Evpatur
descr: Evpatur LTD
country: MD
org: ORG-EL79-RIPE
admin-c: NK539-RIPE
tech-c: NK539-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: EVPATUR-MNT
mnt-routes: EVPATUR-MNT
mnt-domains: EVPATUR-MNT
changed: service@evpatour.md 20090804
source: RIPE

organisation: ORG-EL79-RIPE
org-name: Evpatur LTD
org-type: OTHER
address: Komsomolskaya 10a, 3200 Bendery, Moldova
admin-c: NK539-RIPE
tech-c: NK539-RIPE
e-mail: service@evpatour.md
mnt-ref: EVPATUR-MNT
mnt-by: EVPATUR-MNT
changed: service@evpatour.md 20090804
source: RIPE

person: Nikolay Kravchuk
address: Komsomolskaya 10a, 3200 Bendery, Moldova
mnt-by: EVPATUR-MNT
phone: +373-821-02184
nic-hdl: NK539-RIPE
changed: service@evpatour.md 20090804
source: RIPE

% Information related to ‘195.88.226.0/23AS49188’

route: 195.88.226.0/23
descr: route point
origin: AS49188
mnt-by: EVPATUR-MNT
changed: service@evpatour.md 20091215
source: RIPE

1st Class Recruitment – www.1stclassrecruitment.org

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT.

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

The identity of an individual or entity have been stolen along with fund from their bank accounts. You are being recruited to wire transfer  these funds either by WESTERN UNION, MONEYGRAM, into your  bank, a DOMESTIC BANK or FOREIGN BANK ACCOUNT

  1. Understanding The Cyber Theft Ring
  2. Money Mule Explained
  3. Protecting Yourself Against Money Mule
  4. Washingtonpost.com by Brian Kerbs
  5. Interview With A Money Mule
  6. Bobbear.co.UK ~  Historical Money Mule Sites

Dear ScamFraudAlert,

My name is Linda Caradonna, I am the Manager of First Class Recruitment, a leading recruiting agency for home based jobs. I email you with regard to the job seeking information you have posted. I have reviewed your resume and you seem to be an appropriate candidate for the position which is currently open within one of the companies we perform our recruiting campaigns
for.

Could you please confirm that you are still interested in employment? If
you are, please, let me know and I will get back to you with more information on the position.

Regards,
Linda Caradonna
First Class Recruitment


Address lookup

canonical name www.1stclassrecruitment.org.
aliases
addresses 205.178.145.65

Domain Whois record

Queried whois.publicinterestregistry.net with “1stclassrecruitment.org”…
Domain ID:D156963983-LROR
Domain Name:1STCLASSRECRUITMENT.ORG
Created On:26-Aug-2009 20:06:37 UTC
Last Updated On:26-Oct-2009 03:53:43 UTC
Expiration Date:26-Aug-2010 20:06:37 UTC

Sponsoring Registrar:Melbourne IT, Ltd (R52-LROR)
Status:OK

Registrant ID:C125130853280358
Registrant Name:Andrea Anderson
Registrant Organization:Private Registration US
Registrant Street1:PO Box 61359
Registrant City:Sunnyvale
Registrant State/Province:CA
Registrant Postal Code:94088
Registrant Country:US
Registrant Phone:+1.5105952002
Registrant Email:contact@myprivateregistration.com

Admin ID:C125130853280355
Admin Name:PrivateRegContact Admin
Admin Organization:Private Reg US
Admin Street1:PO Box 61359
Admin City:Sunnyvale
Admin State/Province:CA
Admin Postal Code:94088
Admin Country:US
Admin Phone:+1.5105952002
Admin Email:contact@myprivateregistration.com

Tech ID:C125130853280357
Tech Name:PrivateRegContact TECH
Tech Organization:Private Reg US
Tech Street1:PO Box 61359
Tech City:Sunnyvale
Tech State/Province:CA
Tech Postal Code:94088
Tech Country:US
Tech Phone:+1.4089162124

Tech Email:contact@myprivateregistration.com
Name Server:NS15.WORLDNIC.COM

DNSSEC:Unsigned

Network Whois record

Queried whois.arin.net with “!NET-205-178-145-0-1″…
OrgName: Network Solutions, LLC
OrgID: NSL-37
Address: 13861 Sunrise Valley Drive
Address: Suite 300
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US

NetRange: 205.178.145.0 – 205.178.145.255
CIDR: 205.178.145.0/24
NetName: NSLLC01
NetHandle: NET-205-178-145-0-1
Parent: NET-205-178-128-0-1
NetType: Reassigned
Comment: Please use the NOC contact for 24/7 emergencies andcopy the abuse contact on phishing and abuse issues
RegDate: 2006-05-19
Updated: 2009-05-15

RNOCHandle: NOC2042-ARIN
RNOCName: NOC
RNOCPhone: +1-703-668-4900
RNOCEmail: noc@networksolutions.com

RAbuseHandle: ABUSE2239-ARIN
RAbuseName: Abuse
RAbusePhone: +1-703-668-4665
RAbuseEmail: abuse@networksolutions.com

OrgTechHandle: NOC2042-ARIN
OrgTechName: NOC
OrgTechPhone: +1-703-668-4900
OrgTechEmail: noc@networksolutions.com

# ARIN WHOIS database, last updated 2010-01-27 20:00

DNS records

name class type data time to live
http://www.1stclassrecruitment.org IN A 205.178.145.65 7200s (02:00:00)
1stclassrecruitment.org IN SOA
server: ns15.worldnic.com
email: namehost.worldnic.com
serial: 110011414
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
7200s (02:00:00)
1stclassrecruitment.org IN NS ns16.worldnic.com 7200s (02:00:00)
1stclassrecruitment.org IN A 205.178.145.65 7200s (02:00:00)
1stclassrecruitment.org IN NS ns15.worldnic.com 7200s (02:00:00)
1stclassrecruitment.org IN MX
preference: 10
exchange: inbound.1stclassrecruitment.org.netsolmail.net
7200s (02:00:00)
65.145.178.205.in-addr.arpa IN PTR vux.bos.netsolhost.com 500s (00:08:20)

— end —

Christine Upton – christine.upton@optimalrecruiters.com

Be Be Careful on emails form Optimal Recruiters.com – Scammer email and Stolen Identity

Jobs Alert Newsletter…Mon. Dec. 7, 2009
From: Christine Upton                                                                                   

Dear ScamFraudAlert:

This link details your job matches, with today’s new jobs.

Search in your area.

Christine Upton

Take your free Customer Service Career Personality Test


Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country Additional Info
United States (Sunnyvale)*
70.38.64.243 Canada (Montreal)* Whois Google DNSStuff Urgentmessage.org
207.115.20.15 United States (Richardson)* Whois Google DNSStuff Urgentmessage.org

From Christine Upton Mon Dec 7 19:34:09 2009
X-Apparently-To:3; Mon, 07 Dec 2009 11:34:08 -0800
Return-Path: <2-942447-3188@email-jobsupdates.com>
X-YMailISG: JIpe5c8WLDtPwLocLEovgRBZQ7jcVMY6Lwy0UlHhFeL9g_iBfaxAfPHc0rNv7K9YpXkON2LRG.pWpCLPdCtuKQq66gbZuYmqNX7Tz0r0ue4a7yEJD1ix3HycgCKnVK_GXTsS4gn8.2.oCCEiMz5.x7xwoNTUU7gfCVZoHb1A4XMxN.ckn00l8W2n9WEMSLM01HZSP7e9GtsXBtCA3wm2otj3EDrmSIequ5ewtbEQrhkd8CGRcYD__iBAsp_Yn7YiBlvTxHGWLuMPpbXxz1PUuwjhIcBa6PpJJ1CRK0rW7UFH4rk.ouSR3EixJrvLITROY_ZaXyMN1jqnvqiPVWv4OB1Lh_CkWiLuoLtVOCLHbMoFgcoOqBriF14ZoLM3U08360cn_lhUQlOc56374x6IfgvVlL5lsqUjHfokYxUOis.464qrb5aJ7NXJ7I_1dbPPeTv9cBRic_uw_fJl1lWzhgUhi76.AfmcOtsT
X-Originating-IP: [70.38.64.243]
Authentication-Results: mta176.sbc.mail.mud.yahoo.com from=optimalrecruiters.com; domainkeys=pass (ok); from=optimalrecruiters.com; dkim=neutral (no sig)
Received: from 70.38.64.243 (EHLO flph256.prodigy.net) (207.115.20.15)
by mta176.sbc.mail.mud.yahoo.com with SMTP; Mon, 07 Dec 2009 11:34:08 -0800
X-Originating-IP: [70.38.64.243]
Received: from smtp.email-jobsupdates.com (email-jobsupdates.com [70.38.64.243])
by flph256.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with ESMTP id nB7JY2uu011854
for ; Mon, 7 Dec 2009 11:34:08 -0800
Received: from localhost (ms244 [70.38.64.243])
by smtp.email-jobsupdates.com (Postfix) with SMTP id 7AF623BBDD8
for ; Mon, 7 Dec 2009 14:34:09 -0500 (EST)
MIME-Version: 1.0
DomainKey-Signature: a=rsa-sha1;
h=From:Message-ID;
q=dns;
b=JMlqtpZWGfWoXu2QlYvTl93uF7muRxG1aNOPeQqJUlAkTr2wWu

rIazjNgxJnvUabrYemo
CNIbuFERuGEPCxuG7BdHJW5/Iv2Uz5w23y

OkkpTI3R9dotHy9wlHQeVXNyFDLNvsSU0XJ2
6D/1aM26dkk/xHWRJOHOvgwdWDQKmjA=;
c=nofws;
d=optimalrecruiters.com;
s=bm;
From: “Christine Upton”
Message-ID:
X-Mailer: ms244-mailer.php 2.1
X-List-Id: 942447
X-Sent-To:
List-Unsubscribe: http://email-jobsupdates.com/ms2444/2/3188/c29fa91f95c88a413125ee3c52dd0d50
Subject: Jobs Alert Newsletter…Mon. Dec. 7, 2009
Date: Mon, 07 Dec 09 14:34:09 -0500
Content-Type: multipart/alternative;
boundary=”=_d51fefd5e2557eb41ab59c206de9bae3″
To: ”
Content-Length: 2943

Canadian Pharmacy Spam – findthemmedsherenow.com

Buying Prescription Scam Alert 1Drugs Online May Be Dangerous Says Drug Enforcement Administration

DEA Logo - Buying Percription Drugs

National Association of Boards of Pharmacy (NABP)

Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Behind The Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Order your favorite RxMedications 0nline!
No doctor needed!
Browse our selection today! -> http://findthemmedsherenow.com

Address lookup

canonical name findthemmedsherenow.com.
aliases
addresses 222.170.127.122

Domain Whois record

Queried whois.internic.net with “dom findthemmedsherenow.com”…
Domain Name: FINDTHEMMEDSHERENOW.COM
Registrar: CHINA SPRINGBOARD INC.
Whois Server: whois.namerich.cn
Referral URL: http://www.namerich.cn
Name Server: NS1.91UKRAINE.COM
Name Server: NS2.91UKRAINE.COM
Name Server: NS3.LIKENS45.COM
Name Server: NS4.LIKENS45.COM
Name Server: NS5.ANTRASCRNS.COM
Name Server: NS6.ANTRASCRNS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 17-nov-2009
Creation Date: 30-sep-2009
Expiration Date: 30-sep-2010

Last update of whois database: Fri, 20 Nov 2009 21:02:39 UTC
Queried whois.namerich.cn with “findthemmedsherenow.com”…
DomainName : findthemmedsherenow.com

RSP: China Springboard Inc.
URL: http://www.namerich.cn

Name Server :NS2.91UKRAINE.COM
Name Server :NS4.LIKENS45.COM
Name Server :NS5.ANTRASCRNS.COM
Name Server :NS1.91UKRAINE.COM
Name Server :NS6.ANTRASCRNS.COM
Name Server :NS3.LIKENS45.COM
Status :clientTransferProhibited
Status :clientDeleteProhibited
Creation Date :2009-10-01
Expiration Date :2010-10-01
Last Update Date :2009-11-18

Registrant ID :V-X-63774-22022
Registrant Name :LIN YIXIA
Registrant Organization :LINYIXIA
Registrant Address :chongjiangxilu42
Registrant City :JN
Registrant Province/State :ShanDong
Registrant Country Code :CN
Registrant Postal Code :250069
Registrant Phone Number :+86.053181416841
Registrant Fax :+86.053181416841
Registrant Email :kuledeliu@126.com

Administrative ID :V-X-63774-22022
Administrative Name :LIN YIXIA
Administrative Organization :LINYIXIA
Administrative Address :chongjiangxilu42
Administrative City :JN
Administrative Province/State :ShanDong
Administrative Country Code :CN
Administrative Postal Code :250069
Administrative Phone Number :+86.053181416841
Administrative Fax :+86.053181416841
Administrative Email :kuledeliu@126.com

Billing ID :V-X-63774-22022
Billing Name :LIN YIXIA
Billing Organization :LINYIXIA
Billing Address :chongjiangxilu42
Billing City :JN
Billing Province/State :ShanDong
Billing Country Code :CN
Billing Postal Code :250069
Billing Phone Number :+86.053181416841
Billing Fax :+86.053181416841
Billing Email :kuledeliu@126.com

Technical ID :V-X-63774-22022
Technical Name :LIN YIXIA
Technical Organization :LINYIXIA
Technical Address :chongjiangxilu42
Technical City :JN
Technical Province/State :ShanDong
Technical Country Code :CN
Technical Postal Code :250069
Technical Phone Number :+86.053181416841
Technical Fax :+86.053181416841
Technical Email :kuledeliu@126.com

; Please register your domains at
; http://www.namerich.cn

Network Whois record

Queried whois.apnic.net with “222.170.127.122”…
inetnum: 222.170.0.0 – 222.172.127.255
netname: CHINANET-HL
descr: CHINANET HEILONGJIANG PROVINCE NETWORK
descr: Heilongjiang Telecom Corporation
descr: NO.178 Zhongshan Road,Haerbin,Heilongjiang 150040
country: CN
admin-c: LZ298-AP
tech-c: CH93-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HL
mnt-routes: MAINT-CHINANET-HL
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20040305
changed: hm-changed@apnic.net 20060605
source: APNIC

person: LIJUAN ZHENG
nic-hdl: LZ298-AP
e-mail: network@hljtele.com
address: Communication Corporation Internet Enterprise Division of HLJ
phone: +86-451-53902002
fax-no: +86-451-53900012
country: CN
changed: jxwx1234@163.com 20061229
mnt-by: MAINT-CHINANET-HLJTELE
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

DNS records

DNS query for 122.127.170.222.in-addr.arpa returned an error from the server: NameError

name class type data time to live
findthemmedsherenow.com IN SOA
server: ns.findthemmedsherenow.com
email: admin.findthemmedsherenow.com
serial: 2009100101
refresh: 300
retry: 300
expire: 14400
minimum ttl: 300
300s (00:05:00)
findthemmedsherenow.com IN A 222.170.127.122 300s (00:05:00)

— end —

WhoIs discuz.org

Return-Path:
Received: from 41.204.224.11 <- IP points to Nigeria
Date: Sun, 6 Sep 2009 01:36:00 +0300 (EEST)
Subject:
From: “Royal Investment Loan Firm”
Reply-To: royalloanfirm@discuz.org
To: undisclosed-recipients:;

Goodday,

We Offer Private, Commercial and Personal Loans with very Minimal
annual Interest Rates as Low as 0.5% within a 1 year to 50 years repayment duration period to any part of the world. We give out loans within the range of $5,000 to $100,000,000 US Dollars loans are well insured for maximum security is our priority ,Are you losing sleep at nights worrying how to get a Legit Loan Lender? Are you biting your finger nails? Instead of beating your self up, contact Royal Investment Loan Firm now, Loan specialists who help stop Bad Credit History, to discover a win solution which is Our Mission.

* Are you financially Squeezed?* Do you seek funds to pay off credits and debts?
* Do you seek finance to set up your own
business?
* Are you in need of private or business loans for various
purposes?
* Do you seek loans to carry out large projects?
* Do you seek funding for various other processes?
* If you have any of the above problems, I can be assistance to you.

If you are Interested to take a loan? contact me via
E-mail:royalloanfirm@discuz.org

Thanks for your understanding.

Rev David Chris
General Consultant
Royal Investment Loan Firm

Address lookup

canonical name discuz.org.
aliases
addresses 124.238.249.179

Domain Whois record

Queried whois.publicinterestregistry.net with “discuz.org”…
Domain ID:D106613667-LROR
Domain Name:DISCUZ.ORG
Created On:13-Jun-2005 14:21:12 UTC
Last Updated On:29-Jul-2009 03:45:01 UTC
Expiration Date:13-Jun-2012 14:21:12 UTC
Sponsoring Registrar:Beijing Innovative Linkage Technology Ltd. (R1292-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:CTR065RX5EADVOQ
Registrant Name:Xia yang
Registrant Organization:Xia yang
Registrant Street1:Beijing
Registrant City:Beijing
Registrant State/Province:BJ
Registrant Postal Code:100085
Registrant Country:CN
Registrant Phone:+86.1062969927
Registrant FAX:+86.1062969927
Registrant Email:grace@discuz.com

Admin ID:CTR8UXE7C5E08MO
Admin Name:Xia yang
Admin Organization:Xia yang
Admin Street1:Beijing
Admin City:Beijing
Admin State/Province:BJ
Admin Postal Code:100085
Admin Country:CN
Admin Phone:+86.1062969927
Admin Phone Ext.:
Admin FAX:+86.1062969927
Admin FAX Ext.:
Admin Email:grace@discuz.com

Tech ID:CTA6RLTYWFC4RX8
Tech Name:Dai Zhikang
Tech Organization:Comence Technology Ltd
Tech Street1:Shangdi, Haidian District
Tech City:Beijing
Tech State/Province:BJ
Tech Postal Code:100085
Tech Country:CN
Tech Phone:+86.1051657885
Tech Phone Ext.:800
Tech FAX:+86.1051657885
Tech FAX Ext.:
Tech Email:agent2783@agent.dns.com.cn

Name Server:NS1.DNS.COM.CN
Name Server:NS2.DNS.COM.CN

Network Whois record

Queried whois.apnic.net with “124.238.249.179”…
inetnum: 124.236.0.0 – 124.239.255.255
netname: CHINANET-HE
descr: CHINANET hebei province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: BR3-AP
tech-c: CH93-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-HE
mnt-routes: MAINT-CHINANET-HE
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation’s account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20060725
source: APNIC

person: Bin Ren
nic-hdl: BR3-AP
e-mail: hostmaster@hbtele.com
address: NO.69 KunLun avenue, Shijiazhuang 050000 China
phone: +86-311-85211612
fax-no: +86-311-85211616
country: CN
changed: renbin@hbtele.com 20060606
mnt-by: MAINT-CHINANET-HE
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

DNS records

DNS query for 179.249.238.124.in-addr.arpa returned an error from the server: NameError

name class type data time to live
discuz.org IN SOA
server: ns2.dns.com.cn
email: root.ns2.dns.com.cn
serial: 2008092215
refresh: 3600
retry: 3600
expire: 68400
minimum ttl: 180
3600s (01:00:00)
discuz.org IN NS ns1.dns.com.cn 3600s (01:00:00)
discuz.org IN NS ns2.dns.com.cn 3600s (01:00:00)
discuz.org IN MX
preference: 0
exchange: 910988361.pamx1.hotmail.com
3600s (01:00:00)
discuz.org IN TXT v=spf1 include:hotmail.com ~all 3600s (01:00:00)
discuz.org IN A 124.238.249.179 3600s (01:00:00)

— end —
discuz.org (40 addresses)

  1. ba1@discuz.org
  2. bananaclaims01@discuz.org
  3. bananaclaims03@discuz.org
  4. barr.l.millavic@discuz.org
  5. barr.rgilbertqc2009@discuz.org
  6. barrcharlesrussell111@discuz.org
  7. bmwautogroup@discuz.org
  8. c.d@discuz.org
  9. chevrontexacoawrd@discuz.org
  10. citicourierdelivery@discuz.org
  11. claims.uknl001@discuz.org
  12. claimsdept.walters@discuz.org
  13. comp.londonsecurity@discuz.org
  14. compensation.londonsecurity@discuz.org
  15. ddd511ben@discuz.org
  16. deplive@discuz.org
  17. discuzcourierservices@discuz.org
  18. eastlinkintexpress@discuz.org
  19. fedexworldwidedelivery@discuz.org
  20. hilltop@discuz.org
  21. hilltopfinance@discuz.org
  22. ibcdeliveries01@discuz.org
  23. jimbuffett_claims@discuz.org
  24. kenkellychamber@discuz.org
  25. lloydccare_stsb@discuz.org
  26. mrlarrypaul111@discuz.org
  27. mswclaimdept@discuz.org
  28. mswclaimsdepts@discuz.org
  29. netstarexpress@discuz.org
  30. orangemobile@discuz.org
  31. pet.thomas@discuz.org
  32. scarlet.slough@discuz.org
  33. scarletdispatchunit@discuz.org
  34. skynetcourier_customercare@discuz.org
  35. stevenromanoff@discuz.org
  36. t_armstrong6@discuz.org
  37. ukclaimsdepts@discuz.org
  38. uknl_verificationboard@discuz.org
  39. universalaircouriers01@discuz.org
  40. worldhelp-loan1@discuz.org
  41. toyota1@discuz.org

Instant IT Solutions – instantsolutions4it.com

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Scam Alert 1Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Washingtonpost.com by Brian Kerbs

_____________________________________

From: Julia Berkowitz
Sent: Tuesday, November 17, 2009 9:30 AM
Subject: Account Manager – Requested Details

Dear ScamFraudAlert

You receive this message, as you requested more information on the position of an Account Manager with Instant IT Solutions. Instant IT Solutions is a UK-based web services provider specializing in web design & programming and search engine marketing solutions. Having accumulated more than 5 years of IT experience, we have decided to move into a new direction and entered the North-American market this fall. We are currently looking for new members to join our US team and support the pool of our existing US customers.

Our company has consistently demonstrated that the best way to serve customers is to understand their business and their needs, and then to provide superior customer support – support that is personalized, thorough, and always there when our customers need it. As an Account Manager, you will be responsible for providing excellent support for our US customers, being the main communication link between the end users and our European developer groups. Your everyday duties will include:

– Responding to customer questions and requests over the email & phone;
– Participating in conference calls with customers and developer team members;
– Resolving complex support issues together with project managers;
– Monitoring and verifying customer billing processes;
– Ensuring that developers get paid on time;
– Maintaining project records, monitoring the development progress and updating the customers on it;
– Gathering additional information and/or materials from customers.

The Account Manager position is based out of your home; however, it is a full-time 1099 position. The working hours are 9 AM to 5 PM (your time zone), every business day (Monday through Friday). We offer a base salary of $3,000 per month paid in 2 parts every 2 weeks, along with incentive bonuses based on the number of projects you take for support, as well as on your evaluation score based on the customer feedback received upon completing each project. You are welcome to take multiple projects depending on your multitasking and time-management skills, however, the main requirement still is the customer satisfaction. All Account Managers receive free training materials prior to the start of work, along with a monthly training course performed remotely.

Please feel free to visit our website for additional information about Instant IT Solutions. To apply for the Account Manager position, I’ve attached a copy of our application form to this message, please fill in, and send back to me by email or fax (my fax
number is listed in my signature below).

Once I receive your application, our HR department will review and verify the submitted information. I will get back to you in 1-2 business days to inform you about the status of your application, and if everything is OK, you will receive an invitation to a phone interview.

Thank you for your interest in this position and our company!


Julia Berkowitz,
Hiring Manager
http://instantsolutions4it.com
Phone: (347) 404-5558
XXXXXXXXXXXXXXXXXXXXXXXXXXX

Address lookup

canonical name instantsolutions4it.com.
aliases
addresses 89.248.162.137

Domain Whois record

Queried whois.internic.net with “dom instantsolutions4it.com”…

   Domain Name: INSTANTSOLUTIONS4IT.COM
   Registrar: INTERNET.BS CORP.
   Whois Server: whois.internet.bs
   Referral URL: http://www.internet.bs
   Name Server: NS1.INSTANTSOLUTIONS4IT.COM
   Name Server: NS2.INSTANTSOLUTIONS4IT.COM
   Status: clientTransferProhibited
   Updated Date: 09-nov-2009
   Creation Date: 09-nov-2009
   Expiration Date: 09-nov-2010

Last update of whois database: Fri, 20 Nov 2009 01:06:36 UTC <<<

Queried whois.internet.bs with “instantsolutions4it.com”…

Domain instantsolutions4it.com

Date Registered: 2009-11-9
Date Modified: 2009-11-9
Expiry Date: 2010-11-9

DNS1: ns1.instantsolutions4it.com
DNS2: ns2.instantsolutions4it.com

Registrant
    INSTANT IT SOLUTIONS LTD
    6 LICHFIELD STREET
    DE14 3RD Burton-on-Trent
    United Kingdom

Administrative Contact
    INSTANT IT SOLUTIONS LTD
    Riley Donnelly  support (at) instantsolutions4it dot com
    6 LICHFIELD STREET
    DE14 3RD Burton-on-Trent
    United Kingdom
    Tel: +44.1212886858

Technical Contact
    INSTANT IT SOLUTIONS LTD
    Riley Donnelly  support (at) instantsolutions4it dot com
    6 LICHFIELD STREET
    DE14 3RD Burton-on-Trent
    United Kingdom
    Tel: +44.1212886858

Registrar: Internet.bs Corp.
Registrar's Website : <a href='http://www.internetbs.net/'>http://www.internetbs.net/</a>

Network Whois record

Queried whois.ripe.net with “-B 89.248.162.137″…

% Information related to '89.248.162.128 - 89.248.162.255'

inetnum:        89.248.162.128 - 89.248.162.255
netname:        NL-ECATEL
descr:          AS29073, Ecatel LTD
country:        NL
admin-c:        EL25-RIPE
tech-c:         EL25-RIPE
status:         ASSIGNED PA
mnt-by:         ECATEL-MNT
mnt-lower:      ECATEL-MNT
mnt-routes:     ECATEL-MNT
changed:        noc@ecatel.net 20080828
source:         RIPE

role:           Ecatel LTD
address:        P.O.Box  19533
address:        2521 CA The Hague
address:        Netherlands
abuse-mailbox:  abuse@ecatel.net
remarks:        ----------------------------------------------------
remarks:        ECATEL LTD
remarks:        Dedicated and Co-location hosting services
remarks:        ----------------------------------------------------
remarks:        for abuse complaints : abuse@ecatel.net
remarks:        for any other questions : info@ecatel.net
remarks:        ----------------------------------------------------
e-mail:         noc@ecatel.net
admin-c:        EL25-RIPE
tech-c:         EL25-RIPE
nic-hdl:        EL25-RIPE
mnt-by:         ECATEL-MNT
changed:        noc@ecatel.net 20090813
source:         RIPE

% Information related to '89.248.160.0/21AS29073'

route:          89.248.160.0/21
descr:          AS29073, Route object
origin:         AS29073
mnt-by:         ECATEL-MNT
changed:        noc@ecatel.net 20080508
source:         RIPE

DNS records

DNS query for 137.162.248.89.in-addr.arpa returned an error from the server: NameError

name class type data time to live
instantsolutions4it.com IN MX
preference: 10
exchange: mail.instantsolutions4it.com
14400s (04:00:00)
instantsolutions4it.com IN TXT v=spf1 a mx ip4:89.248.162.160 ?all 14400s (04:00:00)
instantsolutions4it.com IN SOA
server: ns1.instantsolutions4it.com
email: hostmaster.instantsolutions4it.com
serial: 2009110900
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
instantsolutions4it.com IN NS ns2.instantsolutions4it.com 14400s (04:00:00)
instantsolutions4it.com IN NS ns1.instantsolutions4it.com 14400s (04:00:00)
instantsolutions4it.com IN A 89.248.162.137 14400s (04:00:00)

— end —

MS Antivirus & ESafeBill Transaction

MS Antivirus & ESafeBill Transaction

so called http://222.73.37.203
Internet , U.S.A.

Antivirus ripoff.This company supposedly sells antivirus. I stupidly responded on the internet when I saw that I had some messages about viruses on my computer. Being naive and not very computer smart I saw this name MS Antivirus and thought of “Microsoft”!! How wrong I was. Not only was the amount that was debited to my credit card different to that advertised by them but I ended up with a complete mess of a computer and battled to get out. They actually infect your computer with all sorts of viruses that I have had to now send to an expert to have my hard drive reformatted with consequent loss of a lot of personal data etc.
The so called web address they sent on the payment confirmation from a crowd called eSafeBill is impossible to get hold of.
I would like companies like VISA & Mastercard to block payments to such unscrupolous operators.

Mike
Johannesburg
South Africa

ABC Web Design-ABCWebDesign – abc-webdesign.cn

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Scam Alert 1Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Washingtonpost.com by Brian Kerbs

_____________________________________

Financial Manager

Location: USA, statewide
Availability: currently available
Employment type: Part-time employment
Number of employees required: 5

CANDIDATE REQUIREMENTS

* not less than 21 years old
* internet access to reply emails promptly
* availability by phone (1-2 hours a day)
* a bank account to process payments
* good credit history with your bank (new bank account is an option)
* no criminal offense or convictions
* experience in the field of finance is preferred

DUTIES

We are searching for people to process payments coming from our clients. ABCWebDesign will provide an agent with detailed instructions as regards payment processing operations including sender full name and amount total for each separate case.

When funds enter employee’s bank account, Financial Agent’s duty is to withdraw cash and transfer the funds via Western Union/Money Gram money transfer systems. The main advantage of our services is the shortest possible time within which the seller can receive money for the services sold. If this operation is delayed, our clients are entitled to cancel their contract with us and we suffer financial loss. Therefore, successful applicant must be very responsible and careful!

TRIAL PERIOD POLICY

Successful applicants are offered the position on a probationary period basis (1 month). This is the period when a new employee will be trained and receive online support while working and being paid. A personal supervisor can recommend termination during/after the trial period depending on agent’s activity. New employee should be responsible and strictly follow supervisor’s recommendations to pass the Probationary Period successfully and be employed by us on a regular basis.

SALARY

During the probationary period we offer $500 monthly salary plus 5% commission for each payment processing operation. For example, an average $5,000 payment will entail $400 commission. A successful agent may ask for additional tasks and earn more Base salary ($500) will be transferred at the end of each month to employee’s bank account. Commission (5%) is to be deducted from the processed money.

IMPORTANT DETAILS

* Financial Agent is supposed to process received assets during one business day, i.e. from the moment of money entering his bank account to the moment of re-send to our client in accordance with contract terms. If money enters employee’s account on a day-off or holiday, all payment processing procedures have to be completed during the next working day.
* Financial Agent receives invoices for each transaction every 14 days. This document is a confirmation of transaction validity, and in case of any (if any at all) unforeseen circumstances it will evidence your personal non-participation. All invoices will contain detailed information on money sender and will be both sealed and certified with President’s signature.
*After the Probationary Period completion, invoices will be sent every business day.
* Since business transfers can be processed with delays, Financial Manager should specify each transfer as a private remittance. This provision is also applicable in case of a third party interest in the transfer.
* Our clients appreciate our operational efficiency and are ready to pay extra fee for shorter transaction terms.
* The fees for Western Union and MoneyGram transfers are paid by our company. Absolutely nothing is subtracted from your commission; you get exactly 5% from amount. The fees will be discounted from the money that you will send via Western Union or MoneyGram transfers.
* We don’t ask for any investment to start cooperating with our company.
* The company offers incentive bonus program based on work results with regard to several factors, i.e. total sum of money transferred, payment processing time, etc.

OUR BENEFITS

Probationary period imposes restrictions on the employment benefits of our corporation. Financial Manager will be able to receive ABCWebDesign employment benefits only after probationary period completion. Employment benefits will include:

* stock options
* child-care subsidies
* flex-time
* business casual attire
* free training and professional development programs

*Detailed information concerning the employment benefits will be provided after probationary period successful completion.

If you have a desire to work send us your CV (resume) to hr-usa@abc-webdesign.cn

You can send us this application form instead of CV also.

CURRENT/LAST JOB:
WORK EXPERIENCE (years):
MOBILE or HOME NUMBER:

As soon as we receive your CV (preferred) or application form we call you
with the result of accepting you to our job position and further details.

ABCWebDesign

A: Tarnow, ul. Wałowa 4 1B, 51-326 Poland
T: +48 22 389 7067

 

WhoIs Lookup performed by Karen’s WhoIs 222.73.37.203 http://www.karenware.com/

inetnum: 222.64.0.0 – 222.73.255.255
netname: CHINANET-SH
descr: CHINANET shanghai province network
descr: China Telecom
descr: No1,jin-rong Street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tech-c: XI5-AP
changed: hm-changed@apnic.net 20031024
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-SH
mnt-routes: MAINT-CHINANET-SH
remarks: This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your
remarks: organisation account name in the subject line.
status: ALLOCATED PORTABLE
source: APNIC

person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@ns.chinanet.cn.net
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
changed: dingsy@cndata.com 20070416
mnt-by: MAINT-CHINANET
source: APNIC

person: Wu Xiao Li
address: Room 805,61 North Si Chuan Road,Shanghai,200085,PRC
country: CN
phone: +86-21-63630562
fax-no: +86-21-63630566
e-mail: ip-admin@mail.online.sh.cn
nic-hdl: XI5-AP
mnt-by: MAINT-CHINANET-SH
changed: ip-admin@mail.online.sh.cn 20010510
source: APNIC

BRITISH NATIONAL LOTTERY – INTERNATIONAL BONDED COURIERS

THIS IS TO ALERT YOU THAT THE EMAIL YOU’VE RECEIVED IS FRAUDULENT
This Is A Money Mule Phishing or Identity Theft Ring
Do Not CASH THE CHECK OR WIRE ANY FUNDS
CONTACT YOUR LOCAL POLICE

Microsoft Corporation
Microsoft Campus, Thames Valley Park,
Reading RG6 1WG,
United Kingdom.
Ref: MS-35447XN
Batch: MS-09102XN

Microsoft E-mail Lottery Promotion:

We wish to congratulate you over your email success in our computer
balloting held on the 16th November, 2009. This is a scientific computer
game in which email addresses were used. It is a promotional program
aimed at encouraging internet users; Meaning, you do not need to buy
ticket to enter for it.

Your e-mail address attached to ticket number: 10144223 with serial
number: 567-66584 drew the lucky numbers: 5-21-23-34-61-72 (Bonus
ball) which subsequently won you the lottery in the 2nd category.
You have therefore been approved to claim a total sum of £916,778.00
(Nine hundred and sixteen thousand, seven hundred and seventy eight
pounds sterling only) and a compaq laptop.

All participants were selected through a computer balloting system
drawn from Eight hundred thousand E-mail addresses from Canada,
Australia, United States, Asia, Europe, Middle East, Africa and Oceania
as part of our international promotions program which is conducted
annually. This Lottery was promoted and sponsored by a conglomerate
of some multinational companies to promote the use of internet around
the world.

Please note that your laptop, original certificate and your certified bank
cheque has been forwarded to the courier company.

Find below the details of the courier company.

INTERNATIONAL BONDED COURIER (IBC)
ADDRESS: 363 Stockley Close, West Drayton, Middlesex,
UB7 9BL, England.

NAME: Mr. Joe Brooks (Dispatch Officer)
EMAIL: ibcdeliverydept@webpagethai.com

TEL1:+44-704-574-6919
FAX: +44-870-479-0792

You are advised to send the courier company a mail to their email
address for their courier cost.

When contacting them, you are to include this order number as your subject

ORDER NUMBER:IBC562725

Note: you are to furnished the courier company with the following
details so that they can honour your letter.

1.Full Names:
2.Contact Address:
3.Sex:
4.Age:
5.Marital Status:
6.Occupation:
7.Email Address:
8.Telephone Number:
9.Ref Number:
10.Batch Number:
11.Country:
12.Order Number:

We advice all winners to keep this information confidential from the
public until your claim is processed and your prize delivered to you.
This is part of our security protocol to avoid double claiming and
unwarranted taking advantage of this programme by non-participant
or unofficial personnel.

Once again congratulations…
Cordially,

Mrs. Katherine Carr,
Online Co-ordinator.

WhoIs Deven Electronics Inc – www.deven-inc.com

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Scam Alert 1Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Washingtonpost.com by Brian Kerbs

_____________________________________

Dear Applicant,Sorry for late reply, Thanks for applying in our company (Deven Electronics Inc),
we have discovered your resume that you sent us,

you are invited to documentation for “Part Time Customer Data Entry”
(home based) employment offer,

visit our website: http://www.deven-inc.com

This offer will be Valid after review of your Documents (eg.educational certificates etc),

Please check Duties Responsibilities and complete job package attached sheet with this
email .Doc format ( end of this email),

If interested please submit attach application form with required documents by Scan Email,
(Click to download application form and description files End of this Email, MS word format)

Last date of application form submission is 06 September 2009,

(Note: To avoid Disappointments submit form and documents as soon as possible)

with best regards
Egon G. Carl

Branch Manager
Deven Electronics Inc
Auf Den Sandbreiten 17HG
27739 Bremen
Germany.
URL: http://www.deven-inc.com
Email: admin@deven-inc.com
Attachments:
downloadlinkapplication form.doc (58K)
downloadlinkduties and job package.doc (59K)

Hello applicant,We have received your documents and already forwarded to HR,
in case of approval we will inform you,

so we will contact you back after getting any answer from Hr department,
it may take 3-4 days to complete process,

regards
Egon G. Carl
Deven Electronics Inc
http://www.deven-inc.com

3 EMAIL:

Hello applicant,

your application with Deven Electronics Inc was approved and
our head office just issued the confirmation letters and other employment
documents with Employment Agreement,

(Scan copies are attach with this email just for view) original you will get in 1 week
by courier,

kindly read and fill up the Only “Acceptance form” (attached with this email on Word file)
and after signing this from send us back by Scan email in maximum 2 working days,

After receiving this form you will get the all employment documents with agreement by
courier at your home address and you will be Deven Inc’s Part Time Permanent
Employee for 6 months and after this period you can extend agreement for more 6months,

(Note: FILL ONLY ACCEPTANCE FORM NOT AGREEMENT LETTER,
agreement letter you need to sign after getting by courier)

hope to hear from you soon,

regards
egon G. carl

Deven Electronics Inc
http://www.deven-inc.com
admin@deven-inc.com

1. the same email, but the company name is changed… notDachs Electronics Inc
http://www.dachs-inc.com
Damian Electronics Inc
http://www.damian-inc.com
Damon Electronics Inc.
http://www.damon-inc.com
Davey Electronics Inc.
http://www.davey-inc.com
Declan Electronics Inc
http://www.declan-inc.com
but… Denven Electronics…

2. the employment is in U.A.E…????

3. is about Egon G. Carl… not

Ebron G. Caden or Ebron Caden
Egner G. Carsten or Egner Carsten
Eldric G. Carl or Eldric Carl
Eladio G. Carlo
Edsel Carl
Marvin Carl
Edgar G. Carl and so on…

Address lookup

canonical name deven-inc.com.
aliases http://www.deven-inc.com
addresses 68.178.232.100

Domain Whois record

 whois.internic.net with “dom deven-inc.com”…
Domain Name: DEVEN-INC.COM
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS09.DOMAINCONTROL.COM
Name Server: NS10.DOMAINCONTROL.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 31-aug-2009
Creation Date: 31-aug-2009
Expiration Date: 31-aug-2010

Last update of whois database: Tue, 17 Nov 2009 13:07:17 UTC
Queried whois.godaddy.com with “deven-inc.com”…
Registrant:
Deven Inc

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: DEVEN-INC.COM

Domain servers in listed order:
NS09.DOMAINCONTROL.COM
NS10.DOMAINCONTROL.COM

For complete domain details go to:

Network Whois record

Queried whois.arin.net with “68.178.232.100”…
OrgName: GoDaddy.com, Inc.
OrgID: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US

NetRange: 68.178.128.0 – 68.178.255.255
CIDR: 68.178.128.0/17
NetName: GO-DADDY-SOFTWARE-INC
NetHandle: NET-68-178-128-0-1
Parent: NET-68-0-0-0-0
NetType: Direct Allocation
NameServer: CNS1.SECURESERVER.NET
NameServer: CNS2.SECURESERVER.NET
NameServer: CNS3.SECURESERVER.NET
Comment:
RegDate: 2005-04-12
Updated: 2007-06-14

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com

OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com

OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com

# ARIN WHOIS database, last updated 2009-11-16 20:00

DNS records

name class type data time to live
http://www.deven-inc.com IN CNAME deven-inc.com 3600s (01:00:00)
deven-inc.com IN SOA
server: ns09.domaincontrol.com
email: dns.jomax.net
serial: 2009091900
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
deven-inc.com IN A 68.178.232.100 3600s (01:00:00)
deven-inc.com IN NS ns09.domaincontrol.com 3600s (01:00:00)
deven-inc.com IN NS ns10.domaincontrol.com 3600s (01:00:00)
deven-inc.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
deven-inc.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
100.232.178.68.in-addr.arpa IN PTR parkwebwin-v01.prod.mesa1.secureserver.net 2630s (00:43:50)

— end —

Account & Finance – Cheap Fabric

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Scam Alert 1Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Washingtonpost.com by Brian Kerbs

_____________________________________

Full Job Description: Fabric cheap Company has a full-time / part time position open for an Accounting Clerk,Book Keeper and customer services. Experience with Microsoft Office, Excel and Peachtree required. Duties included entering, reviewing and processing invoices; reconciling job profitability;Accounts Payable:Accounts Receivable.reconciling vendor invoices to sent AR; receiving payments and processing deposits as required. Applicant should be highly motivated, able to multi-task and perform well under pressure.

Apply For More Information Now…

JOB REQUIREMENTS

*** Good business Skills
*** The Applicant must be 25Years old and above
*** Honest, responsible, industrious
*** PC, e-mail and the Internet skills
*** Applicant must be able to devote 30 mins for the above named Company dailly
*** Ability to check e-mail daily
*** No less than 1 working hours per day (possibly in the evening)
*** Applicant must have good typing Skills

Applicant should send his or her application to Mr Williams at [click on “Apply Online” button]

 

Position ID: 4139889

cheap Fabric

 

Shipping/Receiving Clerk: PostNParc

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Scam Alert 1Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Washingtonpost.com by Brian Kerbs

_____________________________________

Company Name PostNParc
Job Category Transportation/Logistics; Customer Service
Location Parker, CO
Position Type Full-Time, Employee
Experience 1-2 Years Experience
Date Posted November 14, 2009

Immediate need for shipping and receiving clerk for long term employment.
Good attitude, experience in UPS/FedEx shipping and computer skills will be
keys to success in this high tech organization. Will be responsible for
shipping, receiving and inventory for the company. Great benefits.
The responsibilities of this position will include but are not limited to:
Pulling orders to be shipped
· Receipt of incoming orders & fill outgoing orders
· Basic facilities / whse maintenance
· Data Entry in computer

The requirements for this position are:
· Must be able to use Excel, Word & Outlook.
· Excellent organizational skills
· Forklift exp. preferred
· Basic math skills
· Ability to take direction
· Run errands if needed (i.e. picking up materials from local vendors)
· Fluent English speaking required

We offer competitive compensation and excellent benefits including:
Medical, Dental, Vacation, Holiday, and Sick Pay
Send resume and salary requirements to jhadams@dewmail.net

PARC N SAVE