|
Money Transfer Job Scams: June 2006Please be aware that:
Any job offer that involves any of the above activities is a fraud! Job offers on the internet such as the ones listed here involve stolen money and stolen goods. If you participate in these scams, even without criminal intent, you could be held liable and face criminal charges. If you have been recruited, contact the police and notify your bank. Do not withdraw any cash wired to your account! Do not forward any parcels mailed to your home! Talk to the bank and the police first!
theantiqueworld.net is a rip-off of www.sanjugems.com, a legitimate gem dealer site in India.
Swiss Invest Ltd (swiss-invest-ltd.cn) This money transfer scam domain is hosted on a botnet and is linked to the EcoSwiss series of scams, part of which used the Greentok botnet.
WHOIS details for domain: Domain Name: swiss-invest-ltd.cn ROID: 20060618s10001s55170031-cn Domain Status: clientDeleteProhibited Domain Status: clientTransferProhibited Domain Status: clientRenewProhibited Domain Status: clientUpdateProhibited Registrant Name: Bonnie Yearly Administrative Email: tfantasyy5@hotmail.com Sponsoring Registrar: CSL Computer Service (d.b.a. Joker.com) Name Server:ns2.the-sven.com Name Server:ns1.the-sven.com Registration Date: 2006-06-18 23:48 Expiration Date: 2007-06-18 23:48
Steinberg Investments Ltd. (jobs-bank.org) The money transfer scam domain jobs-bank.org is hosted on the lowpriceshosting.biz botnet. Same gang as au-fastjob.com. Sehr geehrte Damen und Herren! WHOIS details for domain: Domain ID:D124800024-LROR Domain Name:JOBS-BANK.ORG Created On:19-Jun-2006 21:17:21 UTC Last Updated On:20-Jun-2006 11:10:59 UTC Expiration Date:19-Jun-2007 21:17:21 UTC Sponsoring Registrar:OnlineNIC Inc. (R64-LROR) Status:CLIENT TRANSFER PROHIBITED Status:TRANSFER PROHIBITED Registrant ID:ONLC-2199243-4 Registrant Name:Graig Wilson Registrant Organization:Graig Wilson Registrant Street1:Davindsstreet 20 Registrant Street2: Registrant Street3: Registrant City:Bloomington Registrant State/Province:Illinois Registrant Postal Code:61704 Registrant Country:US Registrant Phone:+1.3096650422 Registrant Phone Ext.: Registrant FAX:+1.0000000000 Registrant FAX Ext.: Registrant Email:qjeremyim@hotpop.com Admin ID:ONLC-2199243-1 Admin Name:Graig Wilson Admin Organization:Graig Wilson Admin Street1:Davindsstreet 20 Admin Street2: Admin Street3: Admin City:Bloomington Admin State/Province:Illinois Admin Postal Code:61704 Admin Country:US Admin Phone:+1.3096650422 Admin Phone Ext.: Admin FAX:+1.0000000000 Admin FAX Ext.: Admin Email:qjeremyim@hotpop.com Tech ID:ONLC-2199243-2 Tech Name:Graig Wilson Tech Organization:Graig Wilson Tech Street1:Davindsstreet 20 Tech Street2: Tech Street3: Tech City:Bloomington Tech State/Province:Illinois Tech Postal Code:61704 Tech Country:US Tech Phone:+1.3096650422 Tech Phone Ext.: Tech FAX:+1.0000000000 Tech FAX Ext.: Tech Email:qjeremyim@hotpop.com Name Server:NS1.LOWPRICESHOSTING.BIZ Name Server:NS2.LOWPRICESHOSTING.BIZ
The LowPricesHosting.biz botnet
Domain Name: LOWPRICESHOSTING.BIZ Domain ID: D13742616-BIZ Sponsoring Registrar: ONLINENIC, INC. D/B/A CHINA-CHANNEL.COM Sponsoring Registrar IANA ID: 82 Domain Status: clientTransferProhibited Registrant ID: OLNIC29492089 Registrant Name: Damian Jeffrey Registrant Organization: Damian Jeffrey Registrant Address1: grand street 43 Registrant City: Somerville Registrant State/Province: MA Registrant Postal Code: 02144 Registrant Country: United States Registrant Country Code: US Registrant Phone Number: +1.6036452261 Registrant Facsimile Number: +1.0000000000 Registrant Email: ucomputex@inbox.com Administrative Contact ID: OLNIC29492089 Administrative Contact Name: Damian Jeffrey Administrative Contact Organization: Damian Jeffrey Administrative Contact Address1: grand street 43 Administrative Contact City: Somerville Administrative Contact State/Province: MA Administrative Contact Postal Code: 02144 Administrative Contact Country: United States Administrative Contact Country Code: US Administrative Contact Phone Number: +1.6036452261 Administrative Contact Facsimile Number: +1.0000000000 Administrative Contact Email: ucomputex@inbox.com Billing Contact ID: OLNIC29492089 Billing Contact Name: Damian Jeffrey Billing Contact Organization: Damian Jeffrey Billing Contact Address1: grand street 43 Billing Contact City: Somerville Billing Contact State/Province: MA Billing Contact Postal Code: 02144 Billing Contact Country: United States Billing Contact Country Code: US Billing Contact Phone Number: +1.6036452261 Billing Contact Facsimile Number: +1.0000000000 Billing Contact Email: ucomputex@inbox.com Technical Contact ID: OLNIC29492089 Technical Contact Name: Damian Jeffrey Technical Contact Organization: Damian Jeffrey Technical Contact Address1: grand street 43 Technical Contact City: Somerville Technical Contact State/Province: MA Technical Contact Postal Code: 02144 Technical Contact Country: United States Technical Contact Country Code: US Technical Contact Phone Number: +1.6036452261 Technical Contact Facsimile Number: +1.0000000000 Technical Contact Email: ucomputex@inbox.com Name Server: NS1.SERVERSANDFREEDNS.BIZ Name Server: NS2.SERVERSANDFREEDNS.BIZ Created by Registrar: ONLINENIC, INC. D/B/A CHINA-CHANNEL.COM Last Updated by Registrar: ONLINENIC, INC. D/B/A CHINA-CHANNEL.COM Domain Registration Date: Sun Jun 18 10:57:38 GMT 2006 Domain Expiration Date: Sun Jun 17 23:59:59 GMT 2007 Domain Last Updated Date: Mon Jun 19 07:17:07 GMT 2006
Francesco Carusi (antsoftinc@aol.com)
Dear Ladies and gentlemen! Draw attention to our job offer in Germany and
Sirenis Tours Inc. (SirenisToursInc@aol.com) One clue that this is no regular travel job is the fact that the email was sent with a fake sender address and was encoded using a Russian code page (charset=windows-1251) even though the company claims to be based in France and Spain.
JOB POST #10023: manager Message headers: Received: from cxn130.internetdsl.tpnet.pl (cxn130.internetdsl.tpnet.pl [83.19.147.130]) by kelvin.pobox.com (Postfix) with SMTP id 5F3B413D185 for <jwspamspy@pobox.com>; Fri, 16 Jun 2006 02:32:48 -0400 (EDT) Message-ID: <AD9BEC1B.6542805@netcabo.pt> Date: Fri, 16 Jun 2006 08:32:27 +0200 From: Stephen <Stephen@netcabo.pt> User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: jwspamspy@pobox.com Subject: Content-Type: text/plain; charset=windows-1251; format=flowed
au-fastjob.com Same scam as gold-job.biz.
From: "au-fastjob" <fakeaddress> WHOIS details for domain: Domain Name: AU-FASTJOB.COM Registrar: ONLINENIC, INC. Whois Server: whois.OnlineNIC.com Referral URL: http://www.OnlineNIC.com Name Server: NS2.PROFDNSPROVIDER.BIZ Name Server: NS1.PROFDNSPROVIDER.BIZ Status: REGISTRAR-LOCK EPP Status: clientDeleteProhibited EPP Status: clientTransferProhibited EPP Status: clientUpdateProhibited Updated Date: 13-Jun-2006 Creation Date: 12-Jun-2006 Expiration Date: 12-Jun-2007 Registrant: Dan Jameson acfCdhta23@yahoo.com +1.3237372427 Dan Jameson Mainstr 77 Huntington Beach,CA,UNITED STATES 92605 Domain Name:au-fastjob.com Record last updated at 2006-06-12 15:01:11 Record created on 2006/6/12 Record expired on 2007/6/12 Domain servers in listed order: ns1.profdnsprovider.biz ns2.profdnsprovider.biz Administrator: Dan Jameson acfCdhta23@yahoo.com +1.3237372427 Dan Jameson Mainstr 77 Huntington Beach,CA,UNITED STATES 92605 Technical Contactor: Dan Jameson acfCdhta23@yahoo.com +1.3237372427 Dan Jameson Mainstr 77 Huntington Beach,CA,UNITED STATES 92605 Billing Contactor: Dan Jameson acfCdhta23@yahoo.com +1.3237372427 Dan Jameson Mainstr 77 Huntington Beach,CA,UNITED STATES 92605 Registration Service Provider: name: servera.info tel: +7.9262349216 fax: +7.9262349216 web:http://servera.info Domains connected to PROFDNSPROVIDER.BIZ:
Funders Online (funders-ger-online.net)
Hello VICTIMNAME. My name is Elizabeth Huber and I work for a WHOIS details for domain: Domain Name: FUNDERS-GER-ONLINE.NET Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE Whois Server: whois.melbourneit.com Referral URL: http://www.melbourneit.com Name Server: YNS2.YAHOO.COM Name Server: YNS1.YAHOO.COM Status: ACTIVE EPP Status: ok Updated Date: 02-Jun-2006 Creation Date: 14-May-2006 Expiration Date: 14-May-2007 Domain Name.......... funders-ger-online.net Creation Date........ 2006-05-15 Registration Date.... 2006-05-15 Expiry Date.......... 2007-05-15 Organisation Name.... victim name Organisation Address. victim street address Organisation Address. Organisation Address. Lubbock Organisation Address. 79424 Organisation Address. TX Organisation Address. UNITED STATES Admin Name........... victim name Admin Address........ victim street address Admin Address........ Admin Address........ Lubbock Admin Address........ 79424 Admin Address........ TX Admin Address........ UNITED STATES Admin Email.......... karenrbecton@yahoo.com Admin Phone.......... victim phone number Admin Fax............ Tech Name............ YahooDomains TechContact Tech Address......... 701 First Ave. Tech Address......... Tech Address......... Sunnyvale Tech Address......... 94089 Tech Address......... CA Tech Address......... UNITED STATES Tech Email........... domain.tech@YAHOO-INC.COM Tech Phone........... +1.6198813096 Tech Fax............. Name Server.......... yns1.yahoo.com Name Server.......... yns2.yahoo.com
Expert Bid Company (exprtbid.biz)
Part-time Position: Correspondence manager vacancies. WHOIS details for domain: Domain Name: EXPRTBID.BIZ Domain ID: D13651648-BIZ Sponsoring Registrar: MELBOURNE IT LTD Sponsoring Registrar IANA ID: 13 Domain Status: clientTransferProhibited Registrant ID: C11499496249513 Registrant Name: Matthew Grizzard Registrant Organization: Private Registration US Registrant Address1: P O Box 99800 Registrant City: EmeryVille Registrant State/Province: CA Registrant Postal Code: 94662 Registrant Country: United States Registrant Country Code: US Registrant Phone Number: +1.5105952002 Registrant Email: contact@myprivateregistration.com Administrative Contact ID: A11499496196186 Administrative Contact Name: Admin PrivateRegContact Administrative Contact Organization: Private Reg US Administrative Contact Address1: P O Box 99800 Administrative Contact City: EmeryVille Administrative Contact State/Province: CA Administrative Contact Postal Code: 94662 Administrative Contact Country: United States Administrative Contact Country Code: US Administrative Contact Phone Number: +1.5105952002 Administrative Contact Email: contact@myprivateregistration.com Billing Contact ID: A11499496196187 Billing Contact Name: Bill PrivateRegContact Billing Contact Organization: Private Reg US Billing Contact Address1: P O Box 99800 Billing Contact City: EmeryVille Billing Contact State/Province: CA Billing Contact Postal Code: 94662 Billing Contact Country: United States Billing Contact Country Code: US Billing Contact Phone Number: +1.5105952002 Billing Contact Email: contact@myprivateregistration.com Technical Contact ID: C11499496249512 Technical Contact Name: TECH PrivateRegContact Technical Contact Organization: Private Reg US Technical Contact Address1: P O Box 99800 Technical Contact City: EmeryVille Technical Contact State/Province: CA Technical Contact Postal Code: 94662 Technical Contact Country: United States Technical Contact Country Code: US Technical Contact Phone Number: +1.5105952002 Technical Contact Email: contact@myprivateregistration.com Name Server: YNS1.YAHOO.COM Name Server: YNS2.YAHOO.COM Created by Registrar: MELBOURNE IT LTD Last Updated by Registrar: MELBOURNE IT LTD Domain Registration Date: Sat Jun 10 14:27:07 GMT 2006 Domain Expiration Date: Sat Jun 09 23:59:59 GMT 2007 Domain Last Updated Date: Sat Jun 10 14:27:12 GMT 2006
Hello everyone! WHOIS details for domain: Domain Name: GOLD-JOB.BIZ Domain ID: D13476366-BIZ Sponsoring Registrar: MELBOURNE IT LTD Sponsoring Registrar IANA ID: 13 Domain Status: clientTransferProhibited Registrant ID: B114847559407856 Registrant Name: Michael DeGraf Registrant Organization: Private Registration US Registrant Address1: P O Box 99800 Registrant City: EmeryVille Registrant State/Province: CA Registrant Postal Code: 94662 Registrant Country: United States Registrant Country Code: US Registrant Phone Number: +1.5105952002 Registrant Email: contact@myprivateregistration.com Administrative Contact ID: B114847559407854 Administrative Contact Name: Admin PrivateRegContact Administrative Contact Organization: Private Reg US Administrative Contact Address1: P O Box 99800 Administrative Contact City: EmeryVille Administrative Contact State/Province: CA Administrative Contact Postal Code: 94662 Administrative Contact Country: United States Administrative Contact Country Code: US Administrative Contact Phone Number: +1.5105952002 Administrative Contact Email: contact@myprivateregistration.com Billing Contact ID: B114847559407855 Billing Contact Name: Bill PrivateRegContact Billing Contact Organization: Private Reg US Billing Contact Address1: P O Box 99800 Billing Contact City: EmeryVille Billing Contact State/Province: CA Billing Contact Postal Code: 94662 Billing Contact Country: United States Billing Contact Country Code: US Billing Contact Phone Number: +1.5105952002 Billing Contact Email: contact@myprivateregistration.com Technical Contact ID: D11484756830092 Technical Contact Name: TECH PrivateRegContact Technical Contact Organization: Private Reg US Technical Contact Address1: P O Box 99800 Technical Contact City: EmeryVille Technical Contact State/Province: CA Technical Contact Postal Code: 94662 Technical Contact Country: United States Technical Contact Country Code: US Technical Contact Phone Number: +1.5105952002 Technical Contact Email: contact@myprivateregistration.com Name Server: YNS1.YAHOO.COM Name Server: YNS2.YAHOO.COM Created by Registrar: MELBOURNE IT LTD Last Updated by Registrar: MELBOURNE IT LTD Domain Registration Date: Wed May 24 13:01:26 GMT 2006 Domain Expiration Date: Wed May 23 23:59:59 GMT 2007 Domain Last Updated Date: Wed May 24 13:01:31 GMT 2006
From: pservs@ukr.net Message headers: Domain Name: PSERVS.NET Registrar: OMNIS NETWORK, LLC Whois Server: whois.omnis.com Referral URL: http://domains.omnis.com Name Server: NS2.OMNIS.COM Name Server: NS1.OMNIS.COM Status: REGISTRAR-HOLD EPP Status: clientHold Updated Date: 07-Jun-2006 Creation Date: 28-May-2006 Expiration Date: 28-May-2007 Whois Output for: pservs.net This domain name is Administratively Suspended. Domain Name Owner: Wilson, Harold 15456 Silvan Glen Drive Dumfries, VA 22026-1012 US Administrative Contact: Wilson, Harold [HW-75] 15456 Silvan Glen Drive Dumfries, VA 22026-1012, US Phone: 7038782404 Fax: 7038782404 Email: postservs@aol.com Technical Contact: Omnis Network Network, Omnis [ON-1] 3655 Torrance Blvd Suite 230 Torrance, CA 90503, US Phone: (310)316-2744 Fax: (310)316-4991 Email: nicreg@omnis.com Billing Contact: Wilson, Harold [HW-75] 15456 Silvan Glen Drive Dumfries, VA 22026-1012, US Phone: 7038782404 Fax: 7038782404 Email: postservs@aol.com Record Information: Domain Record Created: May 28, 2006 00:00 Domain Record Updated: June 07, 2006 11:00 Domain Record Expires: May 28, 2007 00:00 DNS Information: Name Server: ns1.omnis.com Name Server: ns2.omnis.com
Dear friends!
WestPay Inc. (westpay-inc.com)
Yo Recipientname WHOIS details for domain: Domain Name: WESTPAY-INC.COM Registrar: BULKREGISTER, LLC. Whois Server: whois.bulkregister.com Referral URL: http://www.bulkregister.com Name Server: DNS2.HRNOC.NET Name Server: DNS1.HRNOC.NET Status: ACTIVE EPP Status: ok Updated Date: 03-Jun-2006 Creation Date: 02-Jun-2005 Expiration Date: 02-Jun-2007 Brian Miller Annapolis Annapolis, MD 20701 US Domain Name: WESTPAY-INC.COM Administrative Contact Brian Miller: vvitex@yahoo.com Brian Miller Annapolis Annapolis, MD 20701 US Phone 443-569-4265 Fax Technical Contact Brian Miller: vvitex@yahoo.com Brian Miller Annapolis Annapolis, MD 20701 US Phone 443-569-4265 Fax Billing Contact Brian Miller: vvitex@yahoo.com Brian Miller Annapolis Annapolis, MD 20701 US Phone 443-569-4265 Fax Record updated date: 2005-06-03 01:21:36 Record created date: 2005-06-03 Record expires on date: 2006-06-03 Database last updated on: 2006-06-07 01:55:14 EST Domain servers in listed order: DNS1.HRNOC.NET 216.120.225.19 DNS2.HRNOC.NET 216.120.238.254 TransferGuard LOCK Status => ENABLED |