Category Archives: SCAM alert__

WhoIs thereferralpay.com

scamFRAUDalert see it appropriate to issue this ALERT as this is a fraudulent website.

TRUST ME ..THIS IS A VERY EASY WAY TO MAKE MONEY IF YOUR GREAT WITH COMPUTER SKILLS THEN YOU HAVE NOTHING TO WORRY ABOUT. YOULL DO GREAT. THE MORE PEOPLE YOU GET TO VIEW YOUR PROFILE THE MORE MONEY YOU MAKE. FOR MORE INFO VISIT THIS LINK. http://www.thereferralpay.com/?REF=23501
Principals only. Recruiters, please don’t contact this job poster.
do NOT contact us with unsolicited services or offers
post id: 4809644099 posted: 6 hours ago
money money

money money-craigslist

About these ads

WhoIs BUY-EFFEXOR.COM

Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies 

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

buy-effexor2

Address lookup
canonical name buy-effexor.com
aliases
addresses 5.45.64.138
Domain Whois record

Queried whois.internic.net with “dom buy-effexor.com”…

Domain Name: BUY-EFFEXOR.COM
Registrar: NET 4 INDIA LIMITED
Whois Server: whois.net4domains.com
Referral URL: http://www.net4.in
Name Server: NS3.BUY-EFFEXOR.COM
Name Server: NS4.BUY-EFFEXOR.COM
Status: ok
Updated Date: 01-may-2014
Creation Date: 30-apr-2013
Expiration Date: 30-apr-2015

Last update of whois database: Thu, 18 Dec 2014 02:01:04 GMT
Queried whois.net4domains.com with “buy-effexor.com

Domain : buy-effexor.com
Registrar : Net 4 India Limited
Registrar IANA ID: 1007
Registrar URL: http://www.net4.in/
Registrar Abuse Contact Email: abuse@net4.com
Registrar Abuse Contact Phone: +91.120-4323500

Registrant :
Name: Alex
Address: Dennenlaan 78
City: Zwanenburg
State: Noordholland
Postal Code: 1161 CS
Country: NL
Phone: +91.31622569224
Email: medicalinc@hotmail.com

Administrative Contact :
Name: Alex
Address: Dennenlaan 78
City: Zwanenburg
State: Noordholland
Postal Code: 1161 CS
Country: NL
Phone: +91.31622569224
Email: medicalinc@hotmail.com

Technical Contact :
Name: Alex
Address: Dennenlaan 78
City: Zwanenburg
State: Noordholland
Postal Code: 1161 CS
Country: NL
Phone: +91.31622569224
Email: medicalinc@hotmail.com

Network Whois record
country: NL
admin-c: TNTS-RIPE
tech-c: TNTS-RIPE
status: ASSIGNED PA
mnt-by: MNT-3NT
mnt-routes: SERVERIUS-MNT
remarks: 3NT Hosting Network
remarks: Technical issues…………..: support@3nt.com
remarks: Services request…………..: sales@3nt.com
remarks: Abuse departament………….: abuse@3nt.com
remarks: Corporate web site…………: http://www.3nt.com
changed: snoop@linkbeat.net 20130701
source: RIPE

person: Neil Young
address: 3NT SOLUTIONS LLP
address: DALTON HOUSE 60, WINDSOR AVENUE
address: LONDON, UK
phone: +442081333030
e-mail: info@3nt.com
abuse-mailbox: abuse@3nt.com
nic-hdl: TNTS-RIPE
mnt-by: MNT-3NT
changed: noc@3nt.com 20111020
source: RIPE

% Information related to ‘5.45.64.0/21AS50673′

route: 5.45.64.0/21
descr: 3NT Hosting Network
origin: AS50673
mnt-by: SERVERIUS-MNT
changed: noc@serverius.net 20141122
source: RIPE

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-2)
DNS records

DNS query for 138.64.45.5.in-addr.arpa returned an error from the server: NameError

name class type data time to live
buy-effexor.com IN MX
preference: 10
exchange: mail.buy-effexor.com
14400s (04:00:00)
buy-effexor.com IN TXT v=spf1 a mx ip4:37.1.205.34 ~all 14400s (04:00:00)
buy-effexor.com IN SOA
server: ns1.buy-effexor.com
email: hostmaster@buy-effexor.com
serial: 2013030903
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
buy-effexor.com IN NS ns1.buy-effexor.com 14400s (04:00:00)
buy-effexor.com IN NS ns3.buy-effexor.com 14400s (04:00:00)
buy-effexor.com IN NS ns2.buy-effexor.com 14400s (04:00:00)
buy-effexor.com IN NS ns4.buy-effexor.com 14400s (04:00:00)
buy-effexor.com IN A 5.45.64.138 14400s (04:00:00)
— end –

WhoIs mycanadian-pharmacy.com?

Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies 

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

mycanadian-pharmacy

The following A records are set to 5.45.64.138:

  1. buy-effexor.com
  2. mycanadian-pharmacy.com
  3. ns1.mycanadian-pharmacy.com
  4. ns2.mycanadian-pharmacy.com
  5. ns3.buy-effexor.com
  6. ns4.buy-effexor.com

Address lookup
canonical name mycanadian-pharmacy.com
aliases
addresses 5.45.64.138
Domain Whois record

Queried whois.internic.net with “dom mycanadian-pharmacy.com

Domain Name: MYCANADIAN-PHARMACY.COM
Registrar: NANJING IMPERIOSUS TECHNOLOGY CO. LTD.
Whois Server: whois.communigal.net
Referral URL: http://www.DomainersChoice.com
Name Server: NS1.MYCANADIAN-PHARMACY.COM
Name Server: NS2.MYCANADIAN-PHARMACY.COM
Status: ok
Updated Date: 20-dec-2013
Creation Date: 25-may-2012
Expiration Date: 25-may-2016
Last update of whois database: Thu, 18 Dec 2014 01:42:12 GMT
Queried whois.communigal.net with “mycanadian-pharmacy.com

Domain Name: mycanadian-pharmacy.com
Registry Domain ID: D400015290
Registrar WHOIS Server: Whois.communigal.net
Updated date: 2013-12-20T00:39:44.000Z
Creation date: 2012-05-25T08:37:54.000Z
Registrar Registration Expiration date: 2016-05-25 12:00:00
Registrar: Nanjing Imperiosus Technology Co. Ltd
Registrar IANA ID: 953

Reseller: Galcomm.com

Domain Status: ok

Registry Registrant ID: 400024751
Registrant Name: Private Registration
Registrant Organization: WhoisGuardService.com
Registrant Street: Tian Hong Shan Zhuang, BLd. 7, Office 104
Registrant City: Nanjing
Registrant State/Province : Jiangsu
Registrant Postal Code: 210049
Registrant Country: CHINA
Registrant Phone: 86.2584752362
Registrant Fax: 86.2584752360
Registrant Email: mycanadian-pharmacy.com@noiddomains.com

Registry Admin ID: 400024749
Admin Name: Private Registration
Admin Organization: WhoisGuardService.com
Admin Street: Tian Hong Shan Zhuang, BLd. 7, Office 104
Admin City: Nanjing
Admin State/Province : Jiangsu
Admin Postal Code : 210049
Admin Country: CHINA
Admin Phone: 86.2584752362
Admin Fax: 86.2584752360
Admin Email: mycanadian-pharmacy.com@noiddomains.com

Registry Tech ID: 400024752
Tech Name: Private Registration
Tech Organization: WhoisGuardService.com
Tech Street: Tian Hong Shan Zhuang, BLd. 7, Office 104
Tech City: Nanjing
Tech State/Province: Jiangsu
Tech Postal Code: 210049
Tech Country: CHINA
Tech Phone: 86.2584752362
Tech Fax: 86.2584752360
Tech Email: mycanadian-pharmacy.com@noiddomains.com

Name Server: NS1.MYCANADIAN-PHARMACY.COM
Name Server: NS2.MYCANADIAN-PHARMACY.COM
DNSSEC: UnSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2013-12-20T00:39:44.000Z <<<
Network Whois record

Queried whois.ripe.net with “-B 5.45.64.138″…

% Information related to ‘5.45.64.0 – 5.45.71.255′

% Abuse contact for ‘5.45.64.0 – 5.45.71.255′ is ‘abuse@3nt.com’

inetnum: 5.45.64.0 – 5.45.71.255
netname: INFERNO-NL-DE
descr: ********************************************************
descr: * We provide virtual and dedicated servers on this Subnet.
descr: *
descr: * Those services are self managed by our customers
descr: * therefore, we are not using this IP space ourselves
descr: * and it could be assigned to various end customers.
descr: *
descr: * In case of issues related with SPAM, Fraud,
descr: * Phishing, DDoS, portscans or others,
descr: * feel free to contact us with relevant info
descr: * and we will shut down this server: abuse@3nt.com
descr: ********************************************************
country: NL
admin-c: TNTS-RIPE
tech-c: TNTS-RIPE
status: ASSIGNED PA
mnt-by: MNT-3NT
mnt-routes: SERVERIUS-MNT
remarks: 3NT Hosting Network
remarks: Technical issues…………..: support@3nt.com
remarks: Services request…………..: sales@3nt.com
remarks: Abuse departament………….: abuse@3nt.com
remarks: Corporate web site…………: http://www.3nt.com
changed: snoop@linkbeat.net 20130701
source: RIPE

person: Neil Young
address: 3NT SOLUTIONS LLP
address: DALTON HOUSE 60, WINDSOR AVENUE
address: LONDON, UK
phone: +442081333030
e-mail: info@3nt.com
abuse-mailbox: abuse@3nt.com
nic-hdl: TNTS-RIPE
mnt-by: MNT-3NT
changed: noc@3nt.com 20111020
source: RIPE

% Information related to ‘5.45.64.0/21AS50673′

route: 5.45.64.0/21
descr: 3NT Hosting Network
origin: AS50673
mnt-by: SERVERIUS-MNT
changed: noc@serverius.net 20141122
source: RIPE

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-2)
DNS records

DNS query for 138.64.45.5.in-addr.arpa returned an error from the server: NameError

name class type data time to live
mycanadian-pharmacy.com IN MX
preference: 10
exchange: mail.mycanadian-pharmacy.com
14400s (04:00:00)
mycanadian-pharmacy.com IN TXT v=spf1 a mx ip4:37.1.205.34 ~all 14400s (04:00:00)
mycanadian-pharmacy.com IN A 5.45.64.138 14400s (04:00:00)
mycanadian-pharmacy.com IN SOA
server: ns1.mycanadian-pharmacy.com
email: hostmaster@mycanadian-pharmacy.com
serial: 2013022501
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
mycanadian-pharmacy.com IN NS ns2.mycanadian-pharmacy.com 14400s (04:00:00)
mycanadian-pharmacy.com IN NS ns1.mycanadian-pharmacy.com 14400s (04:00:00)

Spamhaus Top 10 – Spammers

According to Spamhaus, these are the worst spammers out there

  1. Canadian Pharmacy – Ukraine
  2. yair Shalev / Kobeni Solutions – United States
  3. Century Infotech – India
  4. Jagger Babuin / BHSI – Canada
  5. Dante Jimenez / Aiming Invest – United States
  6. Yambo Financials – Ukraine
  7. Vincent Chan gang – Hong Kong
  8. First Place SEO & financial fraud spam gang – United States
  9. Michael Lindsay / iMedia Networks – United States
  10. Josh Henderson or Nicholson – bulletproofvps.com – Canada

Top 10 spammer

Source: The Spamhaus Project

peadar@supercareerusa.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

In their duties will be included the document and payment control of our clients.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on peadar@supercareerusa.com, and we will send you an extensive information as soon as possible.

Respectively submitted
Personnel department

http://FORUMSREVIEWS.IN

supercareerusa

WhoIs Spamcaution.com

A 2013 WHOIS showed the domain belows to Mediolex Ltd./ The WhoIs today is private.
Whois Record

[Querying whois.verisign-grs.com]
[Redirected to whois.name.com]
[Querying whois.name.com]
[whois.name.com]

on:a first name basis with the rest of the world.
Get your at Name.com
Domain Name: spamcaution.com
Registrar: Name.com LLC

Expiration Date: 2014-08-02 13:55:21
Creation Date: 2011-08-02 13:55:21

Name Servers:
ns1hwy.name.com
ns2cvx.name.com
ns3gmv.name.com
ns4lqx.name.com

REGISTRANT CONTACT INFO
Mediolex Ltd.
Mediolex Ltd.
Hipokrata 45-49
Riga, LV-1079
LV
Phone: +1.2407644863
Email Address: bnetworksinc@gmail.com

ADMINISTRATIVE CONTACT INFO
Mediolex Ltd.
Mediolex Ltd.
Hipokrata 45-49
Riga, LV-1079
LV
Phone: +1.2407644863
Email Address: bnetworksinc@gmail.com

TECHNICAL CONTACT INFO
Mediolex Ltd.
Mediolex Ltd.
Hipokrata 45-49
Riga, LV-1079
LV
Phone: +1.2407644863
Email Address: bnetworksinc@gmail.com

BILLING CONTACT INFO
Mediolex Ltd.
Mediolex Ltd.
Hipokrata 45-49
Riga, LV-1079
LV
Phone: +1.2407644863
Email Address: bnetworksinc@gmail.com

Timestamp: 1371311278.7361
Cached on: 2013-06-15T09:47:58-06:00
__________________________________________________

Address lookup

canonical name spamcaution.com
aliases
addresses 162.144.67.60
Domain Whois record

Queried whois.internic.net with “dom spamcaution.com

Domain Name: SPAMCAUTION.COM
Registrar: NAME.COM, INC.
Whois Server: whois.name.com
Referral URL: http://www.name.com
Name Server: NS1HWY.NAME.COM
Name Server: NS2CVX.NAME.COM
Name Server: NS3GMV.NAME.COM
Name Server: NS4LQX.NAME.COM
Status: clientTransferProhibited
Updated Date: 27-jul-2014
Creation Date: 02-aug-2011
Expiration Date: 02-aug-2015

Last update of whois database: Sat, 06 Dec 2014 21:46:38 GMT
Queried whois.name.com with “spamcaution.com”…

Domain Name: SPAMCAUTION.COM
Registry Domain ID: 1670051109_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.name.com
Registrar URL: http://www.name.com
Updated Date: 2014-07-27T20:38:18-06:00Z
Creation Date: 2011-08-02T13:55:21-06:00Z
Registrar Registration Expiration Date: 2015-08-02T13:55:21-06:00Z
Registrar: Name.com, Inc.
Registrar IANA ID: 625
Registrar Abuse Contact Email: abuse@name.com
Registrar Abuse Contact Phone: +1.17203101849

Domain Status: clientTransferProhibited

Registry Registrant ID:
Registrant Name: Whois Agent
Registrant Organization: Whois Privacy Protection Service, Inc.
Registrant Street: PO Box 639
Registrant City: Kirkland
Registrant State/Province: WA
Registrant Postal Code: 98083
Registrant Country: US
Registrant Phone: +1.425-274-0657
Registrant Fax: +1.4259744730
Registrant Email: spamcaution.com@protecteddomainservices.com

Registry Admin ID:
Admin Name: Whois Agent
Admin Organization: Whois Privacy Protection Service, Inc.
Admin Street: PO Box 639
Admin City: Kirkland
Admin State/Province: WA
Admin Postal Code: 98083
Admin Country: US
Admin Phone: +1.4252740657
Admin Fax: +1.4259744730
Admin Email: spamcaution.com@protecteddomainservices.com

Registry Tech ID:
Tech Name: Whois Agent
Tech Organization: Whois Privacy Protection Service, Inc.
Tech Street: PO Box 639
Tech City: Kirkland
Tech State/Province: WA
Tech Postal Code: 98083
Tech Country: US
Tech Phone: +1.425-274-0657
Tech Fax: +1.4259744730
Tech Email: spamcaution.com@protecteddomainservices.com
Name Server: ns1hwy.name.com
Name Server: ns2cvx.name.com
Name Server: ns3gmv.name.com
Name Server: ns4lqx.name.com
DNSSEC: Unsigned Delegation

URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

Last update of WHOIS database: 2014-12-06T14:46:53-07:00 <<<
Network Whois record

Queried rwhois.unifiedlayer.com with "162.144.67.60"…

%rwhois V-1.5:000080:00 rwhois.unifiedlayer.com (by Unified Layer, V-1.0.0)
network:Class-Name:network
network:ID: NETBLK-UL.162.144.0.0/16
network:Auth-Area: 162.144.0.0/16
network:Network-Name: UL-162.144.0.0/16
network:IP-Network: 162.144.0.0/16
network:Organization: Unified Layer
network:Tech-Contact: netops@unifiedlayer.com
network:Admin-Contact: netops@unifiedlayer.com
network:Abuse-Contact: abuse@unifiedlayer.com
network:Created: 20121119
network:Updated: 20121119
network:Updated-By: netops@unifiedlayer.com

%ok
Queried whois.arin.net with "n 162.144.67.60"…

NetRange: 162.144.0.0 – 162.144.255.255
CIDR: 162.144.0.0/16
NetName: UNIFIEDLAYER-NETWORK-14
NetHandle: NET-162-144-0-0-1
Parent: NET162 (NET-162-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS46606
Organization: Unified Layer (BLUEH-2)
RegDate: 2013-03-01
Updated: 2013-03-01
Ref: http://whois.arin.net/rest/net/NET-162-144-0-0-1

OrgName: Unified Layer
OrgId: BLUEH-2
Address: 1958 South 950 East
City: Provo
StateProv: UT
PostalCode: 84606
Country: US
RegDate: 2006-08-08
Updated: 2012-11-26
Ref: http://whois.arin.net/rest/org/BLUEH-2

ReferralServer: rwhois://rwhois.unifiedlayer.com:4321

OrgNOCHandle: NETWO5508-ARIN
OrgNOCName: Network Operations
OrgNOCPhone: +1-888-401-4678
OrgNOCEmail: netops@unifiedlayer.com
OrgNOCRef: http://whois.arin.net/rest/poc/NETWO5508-ARIN

OrgTechHandle: NETWO5508-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-888-401-4678
OrgTechEmail: netops@unifiedlayer.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO5508-ARIN

OrgAbuseHandle: ABUSE3581-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-888-401-4678
OrgAbuseEmail: abuse@unifiedlayer.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE3581-ARIN

Zarvad III S.A. d/b/a Mypaydayloan.com

Unlicensed Payday Loans

Posted: December 02, 2014

The Washington State Department of Financial Institutions (DFI) received a report that Mypaydayloan.com may be providing consumers’ personal information to a third-party who appears to be running an advanced fee loan scam.

A Washington State consumer reported that, after she applied for a loan at Mypaydayloan.com, she received a phone call from a third-party. The third-party offered her a loan in exchange for an advanced fee. The consumer paid the advanced fee using a prepaid card, but did not receive the promised loan. When the consumer attempted to cancel the loan, the third-party demanded another advanced fee. The third-party did not refund any of the fees to the consumer.

Mypaydayloan.com list’s its phone number as 888-269-2303. It appears that Mypaydayloan.com may be operating outside of the United States. A possible address associated with Mypaydayloan.com is Centro Colon, 8 Avo Piso Oficina 8-4, San Jose, Costa Rica. Mypaydayloan.com is not licensed by the Washington State Department of Financial Institutions. It is not registered to do business in Washington by either the Department of Revenue or the Secretary of State.

Verify Licenses

DFI strongly recommends that consumers deal only with those lenders that are properly licensed to conduct business. Consumers can determine whether lenders are properly licensed using the “Verify a License” feature on the DFI’s website at www.dfi.wa.gov/consumers/findcompany.htm.
Payday Loan Debt Collection Laws

Col4lection activities are subject to the federal Fair Debt Collection Practices Act. Therefore, if you have questions regarding debt collection laws please contact the Federal Trade Commission at 382-4357 (1-877-FTC HELP), or online at www.ftc.gov.

Report Fraud

If you are suspicious of unlicensed activity by a payday lender please contact the DFI at 1-877-RING-DFI (746-4334), or online at www.dfi.wa.gov.

If you feel you have been the victim of a loan scam please contact the Federal Trade Commission at 1-877-FTC-HELP (382-4357), or online at http://www.ftc.gov or contact the Consumer Financial Protection Bureau (855) 411-CFPB (2372), or online at www.consumerfinance.gov.

If you feel you have been the victim of a loan scam involving the Internet please contact the Internet Crime Complaint Center online at www.ic3.gov.