Category Archives: SCAM alert__

WhoIs stanley@distjobs.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

In their duties will be included the document and payment control of our clients.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,000 per month.

If you are interested in our offer, mail to us your answer on stanley@distjobs.com and we will send you an extensive information as soon as possible.

Respectively submitted
Personnel department

WhoIs Drugstore24.co

Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies 

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

drugstore24

The following A records are set to 212.83.191.105:

  1. davayidinahuy.com
  2. ns1.davayidinahuy.com
  3. ns1.pharmacy-24h-online.com
  4. ns1.search7info.com
  5. ns2.davayidinahuy.com
  6. ns2.pharmacy-24h-online.com
  7. ns2.search7info.com
  8. pharmacy-24h-online.com
  9. privettds.com
  10. search7info.com

Address lookup
canonical name drugstore24.co
aliases
addresses 212.83.191.105
Domain Whois record

Queried whois.nic.co with “drugstore24.co”…

Domain Name: DRUGSTORE24.CO
Domain ID: D63117759-CO
Sponsoring Registrar: TODAYNIC.COM, INC.
Sponsoring Registrar IANA ID: 697
Registrar URL (registration services): http://www.now.cn
Domain Status: clientTransferProhibited
Variant: DRUGSTORE24.CO

Registrant ID: TOD-44057883

Registrant Name: Anatoliy A Kazancev
Registrant Organization: Private Person
Registrant Address1: ul. Komsomolskaya 31/24
Registrant City: Perm
Registrant State/Province: NA
Registrant Postal Code: 617407
Registrant Country: Russian Federation
Registrant Country Code: RU
Registrant Phone Number: +380.0663049899
Registrant Facsimile Number: +380.0663049899
Registrant Email: adultmas@yandex.ru

Administrative Contact ID: TOD-44057884
Administrative Contact Name: Anatoliy A Kazancev
Administrative Contact Organization: Private Person
Administrative Contact Address1: ul. Komsomolskaya 31/24
Administrative Contact City: Perm
Administrative Contact State/Province: NA
Administrative Contact Postal Code: 617407
Administrative Contact Country: Russian Federation
Administrative Contact Country Code: RU
Administrative Contact Phone Number: +380.0663049899
Administrative Contact Facsimile Number: +380.0663049899
Administrative Contact Email: adultmas@yandex.ru

Billing Contact ID: TOD-44057886
Billing Contact Name: Anatoliy A Kazancev
Billing Contact Organization: Private Person
Billing Contact Address1: ul. Komsomolskaya 31/24
Billing Contact City: Perm
Billing Contact State/Province: NA
Billing Contact Postal Code: 617407
Billing Contact Country: Russian Federation
Billing Contact Country Code: RU
Billing Contact Phone Number: +380.0663049899
Billing Contact Facsimile Number: +380.0663049899
Billing Contact Email: adultmas@yandex.ru

Technical Contact ID: TOD-44057885
Technical Contact Name: Anatoliy A Kazancev
Technical Contact Organization: Private Person
Technical Contact Address1: ul. Komsomolskaya 31/24
Technical Contact City: Perm
Technical Contact State/Province: NA
Technical Contact Postal Code: 617407
Technical Contact Country: Russian Federation
Technical Contact Country Code: RU
Technical Contact Phone Number: +380.0663049899
Technical Contact Facsimile Number: +380.0663049899
Technical Contact Email: adultmas@yandex.ru
Name Server: NS3.FASTVPS.RU
Name Server: NS4.FASTVPS.RU
Name Server: NS2.FASTVPS.RU
Name Server: DNS.FASTDNS24.COM
Created by Registrar: TODAYNIC.COM, INC.
Last Updated by Registrar: TODAYNIC.COM, INC.
Domain Registration Date: Fri Nov 21 19:48:34 GMT 2014
Domain Expiration Date: Fri Nov 20 23:59:59 GMT 2015
Domain Last Updated Date: Fri Dec 19 11:23:47 GMT 2014
DNSSEC: false

Whois database was last updated on: Sat Feb 21 21:07:44 GMT 2015 <<<<
Network Whois record

Queried whois.ripe.net with “-B 212.83.191.105
Information related to ‘212.83.160.0 – 212.83.191.255′
Abuse contact for ‘212.83.160.0 – 212.83.191.255′ is ‘abuse@proxad.net’

inetnum: 212.83.160.0 – 212.83.191.255
netname: FRWOL
descr: Iliad
country: FR
admin-c: NR1053-RIPE
admin-c: IENT-RIPE
tech-c: NR1053-RIPE
tech-c: IENT-RIPE
status: ASSIGNED PA
mnt-by: MNT-TISCALIFR
mnt-lower: MNT-TISCALIFR
changed: ripe-mnt@net.tiscali.fr 20030415
changed: ripe-mnt@net.tiscali.fr 20031217
changed: nlimage+ripe@online.net 20121102
remarks: Tag: Int
source: RIPE

role: Iliad Entreprises Admin and Tech Contact
remarks: Iliad Entreprises is an hosting and services provider
address: 8, rue de la ville l’eveque
address: 75008 Paris
address: France
phone: +33 1 73 50 20 00
fax-no: +33 1 73 50 29 01
e-mail: ripe@online.net
notify: ripe@online.net
abuse-mailbox: abuse@iliad-entreprises.fr
tech-c: NLI-RIPE
nic-hdl: IENT-RIPE
mnt-by: ONLINE-NET-MNT
changed: ripe@online.net 20140304
source: RIPE

person: Nicolas Rostagni
address: Free SAS
address: 8, rue de ville l’Eveque
address: 75008 Paris
address: France
phone: +33 1 73 50 20 00
fax-no: +33 1 73 92 25 69
e-mail: nrostagni@corp.free.fr
nic-hdl: NR1053-RIPE
mnt-by: MNT-TISCALIFR
source: RIPE
changed: nicolas.rostagni@alice-france.fr 20101006

% Information related to ‘212.83.160.0/19AS12876′

route: 212.83.160.0/19
descr: Online SAS
descr: Paris, France
origin: AS12876
mnt-by: MNT-TISCALIFR
source: RIPE
changed: fgander@corp.free.Fr 20130802

% This query was served by the RIPE Database Query Service version 1.76.1 (DB-2)
DNS records

name class type data time to live
drugstore24.co IN SOA
server: ns3.fastvps.ru
email: support@fastvps.ru
serial: 2014121901
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 86400
3600s (01:00:00)
drugstore24.co IN NS dns.fastdns24.com 3600s (01:00:00)
drugstore24.co IN NS ns2.fastvps.ru 3600s (01:00:00)
drugstore24.co IN NS ns3.fastvps.ru 3600s (01:00:00)
drugstore24.co IN NS ns4.fastvps.ru 3600s (01:00:00)
drugstore24.co IN MX
preference: 10
exchange: mail.drugstore24.co
3600s (01:00:00)
drugstore24.co IN A 212.83.191.105 3600s (01:00:00)
105.191.83.212.in-addr.arpa IN PTR 212-83-191-105.rev.poneytelecom.eu 86400s (1.00:00:00)
191.83.212.in-addr.arpa IN SOA
server: nsa.online.net
email: dnsmaster@te-dns.net
serial: 2015021701
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 86400

pedro@fastestrades.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

You will be responsible for shipping goods from multiple shops through our company to different places.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on pedro@fastestrades.com and we will send you an extensive information as soon as possible.

Attention! Accept applications only on this and next week.

Respectively submitted
Personnel department

nappy@bestjobhome.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

The nameserver ns1.brazil-partner.com manages the following domains :

1. 21thjob.com
2. bestjobhome.com
3. brazil-partner.com
4. canadsjob.com
5. perfectcanadas.com
6. searchusajob.com

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

You will be responsible for shipping goods from multiple shops through our company to different places.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on nappy@bestjobhome.com and we will send you an extensive information as soon as possible.

Attention! Accept applications only on this and next week.

Respectively submitted
Personnel department

canadsjob.com ~ perfectcanadas.com


Drug Enforcement Agency

United States of America

The Ryan Haight Act Known as
Online Pharmacy Consumer Protection Act of 2008
Sec. 2. Requirement of a valid prescription for
controlled substances dispensed by means of the Internet.

Who's Behind These Online Pharmacies 

SUMMARY: The Ryan Haight Online Pharmacy Consumer Protection Act,
which was enacted on October 15, 2008,amended the Controlled Substances Act and Controlled Substances Import and Export Act by adding several new provisions to prevent the illegal distribution and dispensing of controlled substances by means of the Internet.
_________________________________

:
The list below contains all domains that are mapped to the nameserver ns1.brazil-partner.com. This nameserver translates the domain name to the correct IP address. It implements the name-service protocol.

The nameserver ns1.brazil-partner.com manages the following domains :

1. 21thjob.com
2. bestjobhome.com
3. brazil-partner.com
4. canadsjob.com
5. perfectcanadas.com
6. searchusajob.com

Address lookup

lookup failed perfectcanadas.com
A temporary error occurred during the lookup. Trying again may succeed.
Domain Whois record

Queried whois.internic.net with “dom perfectcanadas.com”…

Domain Name: PERFECTCANADAS.COM
Registrar: BIZCN.COM, INC.
Sponsoring Registrar IANA ID: 471
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.BRAZIL-PARTNER.COM
Name Server: NS2.BRAZIL-PARTNER.COM
Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Updated Date: 20-jan-2015
Creation Date: 20-jan-2015
Expiration Date: 20-jan-2016

Last update of whois database: Fri, 06 Feb 2015 01:21:09 GMT
Queried whois.bizcn.com with “perfectcanadas.com”…

Domain name: perfectcanadas.com
Registry Domain ID: 1896981364_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.bizcn.com
Registrar URL: http://www.bizcn.com

Updated Date: 2015-01-20T07:41:35Z

Creation Date: 2015-01-20T07:41:37Z

Registrar Registration Expiration Date: 2016-01-20T07:41:37Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: abuse@bizcn.com
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited

Registry Registrant ID:
Registrant Name: Patsy Zink
Registrant Organization: Patsy W. Zink
Registrant Street: 4094 Robinson Court
Registrant City: Saginaw
Registrant State/Province: MI
Registrant Postal Code: 48601
Registrant Country: us
Registrant Phone: +1.9894810471
Registrant Fax: +1.9894810471

Registrant Email: info@perfectcanadas.com

Registry Admin ID:
Admin Name: Patsy Zink
Admin Organization: Patsy W. Zink
Admin Street: 4094 Robinson Court
Admin City: Saginaw
Admin State/Province: MI
Admin Postal Code: 48601
Admin Country: us
Admin Phone: +1.9894810471
Admin Fax: +1.9894810471
Admin Email: info@perfectcanadas.com

Registry Tech ID:
Tech Name: Patsy Zink
Tech Organization: Patsy W. Zink
Tech Street: 4094 Robinson Court
Tech City: Saginaw
Tech State/Province: MI
Tech Postal Code: 48601
Tech Country: us
Tech Phone: +1.9894810471
Tech Fax: +1.9894810471
Tech Email: info@perfectcanadas.com

Name Server: ns1.brazil-partner.com
Name Server: ns2.brazil-partner.com
DNSSEC: unsignedDelegation
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2015-02-06T01:21:18Z

Elliott Associates Paris|Tokyo – www.elliott-associates.com

This came to US via our contact US page. The WHOIS ADDRESS is below.

Email: anonymous@scamfraudalert.orgscamalert4
Website: http://www.elliott-associates.com
Comment: Broker warning! Found this on Youtube:
This is a boiler room broker on the phone, works for Elliott Associates Paris – Tokyo.
Stay away!

https://www.youtube.com/watch?v=0aJvrKS4om8

Address lookup
canonical name http://www.elliott-associates.com

aliases
addresses:200.63.44.31
Domain Whois record

Queried whois.internic.net with “dom elliott-associates.com”…

Domain Name: ELLIOTT-ASSOCIATES.COM
Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.PANAMASERVER.COM
Name Server: NS2.PANAMASERVER.COM
Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Updated Date: 21-oct-2014
Creation Date: 13-dec-2000
Expiration Date: 13-dec-2015

Last update of whois database: Wed, 04 Feb 2015 20:45:48 GMT
Queried whois.enom.com with “elliott-associates.com”…

Domain Name: ELLIOTT-ASSOCIATES.COM
Registry Domain ID: 47958264_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2013-05-21T02:09:52.00Z
Creation Date: 2000-12-13T15:49:00.00Z
Registrar Registration Expiration Date: 2015-12-13T15:49:00.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252982646
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited

Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Fax: +51.17057182
Registrant Email: 7D7541DD2C4A4EBDB343F47A32375FEC.PROTECT@WHOISGUARD.COM

Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Fax: +51.17057182
Admin Email: 7D7541DD2C4A4EBDB343F47A32375FEC.PROTECT@WHOISGUARD.COM

Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: 7D7541DD2C4A4EBDB343F47A32375FEC.PROTECT@WHOISGUARD.COM
Name Server: NS1.PANAMASERVER.COM
Name Server: NS2.PANAMASERVER.COM
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2013-05-21T02:09:52.00Z
Network Whois record

Queried whois.lacnic.net with “200.63.44.31”…

inetnum: 200.63.44.0/25
status: reallocated
owner: Panamaserver.com
ownerid: PA-PANA3-LACNIC
responsible: CH Group
address: Panama, Panama, 0,
address: 00000 – Panama – PA
country: PA
phone: +507 8322443 []
owner-c: MAC30
tech-c: MAC30
abuse-c: MAC30
created: 20081022
changed: 20081022
inetnum-up: 200.63.40/21

nic-hdl: MAC30
person: Manuel I. Cabrera Ch.
e-mail: ABUSE@PANAMASERVER.COM
address: Bella Vista Calle 39A y Ave Cuba, 0,
address: 0000 – Panama – PA
country: PA
phone: +507 8321932 []
created: 20071004
changed: 20140930

% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.

DNS records

DNS query for 31.44.63.200.in-addr.arpa returned an error from the server: NameError

name class type data time to live
http://www.elliott-associates.com IN A 200.63.44.31 86400s (1.00:00:00)
elliott-associates.com IN A 200.63.44.31 86400s (1.00:00:00)
elliott-associates.com IN MX
preference: 15
exchange: mail2.neomailbox.net
86400s (1.00:00:00)
elliott-associates.com IN MX
preference: 10
exchange: mail1.neomailbox.net
86400s (1.00:00:00)
elliott-associates.com IN SOA
server: ns1.panamaserver.com
email: dominios@panamaserver.com
serial: 2014082001
refresh: 3600
retry: 300
expire: 86400
minimum ttl: 86400
86400s (1.00:00:00)
elliott-associates.com IN NS ns1.panamaserver.com 86400s (1.00:00:00)
elliott-associates.com IN NS ns2.panamaserver.com 86400s (1.00:00:00)

ave@uhomejob.com

The Purpose of this post is to ALERT you that the job you are about to apply for scamalert4or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

Our firm specializes in consultation services in the matter of bookkeeping and business administration.
We cooperate with different countries and currently we have many clients in the US.
Due to this fact, we need to increase the number of our destination representatives’ regular staff.

In their duties will be included the document and payment control of our clients.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1000 up to $3,500 per month.

If you are interested in our offer, mail to us your answer on ave@uhomejob.com and we will send you an extensive information as soon as possible.

Respectively submitted
Personnel department