Job scam quick guide: it's a scam if...

  • they want you to collect and forward money in any way (a "money mule" job). You'll wind up engaged in money laundering, personally defrauded via expertly forged cheques, money orders, etc, or defrauding someone else who pays for goods that never arrive.
  • they want you to receive packages and reship them somewhere else. The goods will have been obtained fraudulently, and they're just using you to make the shipping address appear local. You will be aiding fraud.
  • they want up-front payment (either to them or someone else) of any sort for anything before you can get the job. This is advance fee fraud: there is no job -- it's just a big con to extract money from you.
  • they want you to buy any kind of "membership" or "kit" in order to start. Forget it -- it's not a real job at all: they're trying to sell you something, and they're probably making a bunch of other false claims about it if they're pitching it as a "job".
  • it's a job offer, and it's spam. There are LOTS of these scams about, as you can see.

Monday, October 30, 2006

seekjobdeals.com

This is money mule recruitment.

Domain Name: SEEKJOBDEALS.COM
Registrar: YESNIC CO. LTD.
Whois Server: whois.yesnic.com
Referral URL: http://www.yesnic.com

Name Server: NS2.DNSHOST4ALL.BIZ
Name Server: NS1.DNSHOST4ALL.BIZ
Status: ACTIVE
EPP Status: ok
Updated Date: 23-Oct-2006
Creation Date: 23-Oct-2006
Expiration Date: 23-Oct-2007

A brief glance at DNS records for www.seekjobdeals.com shows that the
website is being proxy-hosted by a botnet. This is hard-core organised
crime -- not that organised crime is an unusual thing to report here.

---------- Forwarded message ----------
From: Antoine Mcfadden <[redacted]@luckysearching.com>
Date: 30-Oct-2006 05:13
Subject: Easy Job Goo dMoney
To: [redacted]@gmail.com


Dear Sir/Madam!

Our company are trying to find as many people as possible, people who
are trying to find a job are perfect for us. We are a reasonable compnay
and you will make good money with us. We are offering a job for
everyone and everywhere, any country. Anybody can handle this job. You don't
have to have any education degree, you don't have to have any past
experience. Even if you are just a student an dlooking for additional money
- this job is for you. You will not spend a lot of time for doing this
job since it is a part-time job. The only one requirement is you have
to be 18+ years old.

A little bit about job:

A position is called "Bank Courrier". Your goal will be very simple.
You get money from our clients and you pass the omney to our agents to
another country where our main Western Union office is located, or Money
Gram. You work 1-3 hours a day. Saturday and Sunday areyour weekend
days and you willnot work on these. We will pay you daily, depends on
what sum you are working with. For examlpe: You recieved 2000 USD. You
get your 200 USD which is 10% and the rest of money you send to our
agent,
we will provide you with details for every transaction. Job is very easy
and money you will get paid are good, thus you will be able to make
1000 USD and more a week.

If you are ready to start working with us you have to make a
registration on our website http://www.seekjobdeals.com Click "Register" . After
you make a registration on our website and within 24 hours we will start
working with you. If you are ready - go ahead and make registration and
work with us. We guarantee a stable high pay outs. {.W_SL}

Best Regards
Best Job Life Comapny

Saturday, October 28, 2006

Wujiang Wanlida Textile Co (Impostors)

I last saw this name used in July this year. I'm guessing that there is a real company by this name, but the sender has just chosen it as a cover story and bears no actual relation to the company.

http://suckerswanted.blogspot.com/2006/07/investement-trustee.html

This looks like a money mule job. The source IP of the email was 85.92.140.16, which is delegated to Flexwebhosting in the Netherlands.

---------- Forwarded message ----------
From: WUJIANG WANLIDA <shao_kyu2000@yahoo.com.cn>
Date: 28-Oct-2006 12:33
Subject: BE OUR REPRESENTATIVE
To: ideceive@gmail.com

Dear  Sir/Madam,

It is my pleasure to write you in respect of our Company Wujiang Wanlida Textile Co., Ltd.

Based No.6 The Third District Nanshan Road, Shengze, Wujiang City, Jiangsu Province. China. We are experts in the sale of Textile  materials; we export into the Canada/America and parts Europe.

We are searching for representatives who can help us establish a medium of getting our funds from our costumers in these areas as well as making payments through you to us.

Please if interested in transacting business in view helpings us, so our clients could make payment to you being a representative for us we will be very glad and compensations will be given and as well as other benefits.

Subject to your satisfaction you will be given the opportunity to negotiate your mode of which we will pay for your services as our representative/agent in Canada, America, and Europe.

Selected Products

Jacquard Fabric
Cotton Satin
Printed Satin
Twisted Satin

If intrested,write us through this email below.
To this   I look forward to your prompt respond via:

EMAIL: shao_kyu2000@yahoo.com.cn

Note that no form of payment will be requested upfront in this endeavor.
On our receipt of the above details we shall forward to our customer/clients to immediately contact you with the mode of payment.

Kindest Regards,
Mr. Shao

EFIAS


I don't know whether there is a real organisation called "Electronic Foreign Investment Advisory Service", although I certainly doubt it. There is a real "Foreign Investment Advisory Service" (sans the "Electronic" part), and they've had impostors impersonate them with sufficient regularity that they have a caveat to that effect on their front page.

In the first instance this scam came to my attention via email, but a web search shows that there are more clones out there. The supplied image shows the website at http://www.kevintrinh.ca/jobinfo.htm, but there are others like it -- variations on a theme. The theme is "money mule", by the way. Note that the scammers have compromised someone's web-hosting account to post this page: the actual owner of the domain "kevintrinh.ca" has nothing to do with it directly, and there's no point trying to get his domain pulled. http://www.efias.net/, on the other hand, is a different story...

Thursday, October 26, 2006

Cambrige Suite Hotel Canada (Impostors)

The last time I saw a job like this, the scam was Advance Fee Fraud.
They bait you with a dream job, and then ask you to pay a bunch of
incidental costs. But there is NO JOB -- it's just bait in the scam
trap. If a potential employer wants any money from you, it's a scam.

---------- Forwarded message ----------
From: James Cole <canadiacambrigesuitehotel@hotmail.com>
Date: 26-Oct-2006 09:07
Subject: THIS IS CAMBRIGESUITEHOTELS CANADA.
To: ideceive@gmail.com


Cambrige Suite Hotel Canada
The aboved named hotel, under the managemnt of Mr James Cole, the
manager of cambrige suite hotels canada, wants suitable personal in
which our hotel need about 10 men and women who can work and live in
suite hotels here in canada. The hotel will be responsible for the
payment for his/her air ticket, and as well his/her visa in there
Nationality countries.
If you are interest, you can contact us at the below e-mail adress link
canadiancambrigesuitehotel@yahoo.ca
we look forward for your prompt reply.

James Cole

---------- Forwarded message ----------
From: Paul Gill
Date: 28-Oct-2006 04:08
Subject: THIS IS CAMBRIGESUITE HOTEL CANADA
To: ideceive@gmail.com


Cambrige Suite Hotel Canada
The aboved named hotel, under the managemnt of Mr.Paul Gill, the Manager Of Cambrige Suite Hotels Canada, wants suitable personal in which our hotel need about 10 men and women who can work and live in suite hotels here in canada. The hotel will be responsible for the payment for his/her air ticket, and as well his/her visa in there Nationality countries.
If you are interest, you can contact us at the below e-mail adress link
canadiancambrigesuitehotelottwa@yahoo.ca
we look forward for your prompt reply.

Paul Gill


---------- Forwarded message ----------
From: grandy
Date: 29-Oct-2006 08:42
Subject: THIS IS CAMBRIGESUITE HOTEL CANADA
To: ideceive@gmail.com



Hotel Omni Mont-Royal
1050 Sherbrooke Street West
Montreal, H3A 2R6 CA
Omni City Hotels Montreal Canada Celebrity Hotel Lines Training and Employing For Greater Tommorow
Hotel Services
This is from the omni hotel management board. The omni hotel management needs workers, whom are to be employed to work for the hotel in montreal quebec canada atleast for 1 year or more.
The hotel management will take care of your accomodation visa and air ticket. If you are interested to work in the hotel with us , please write to us back as soon as possible
with this mail address hotelommicity@yahoo.ca
Thanks,
Management. Omni City Hotels Canada. Rose grandy ( Hotel Manager).

hotelommicity@yahoo.ca

Wednesday, October 25, 2006

TrustPartners Company

Utterly blatant money mule job: see "job description" section.

Domain Name: TRUSTPARTNERSINC.COM
Registrar: ONLINENIC, INC.
Whois Server: whois.OnlineNIC.com
Referral URL: http://www.OnlineNIC.com

Name Server: NS2.DNSHOST4ALL.BIZ
Name Server: NS1.DNSHOST4ALL.BIZ
Status: ACTIVE
EPP Status: ok
Updated Date: 12-Oct-2006
Creation Date: 12-Oct-2006
Expiration Date: 12-Oct-2007

---------- Forwarded message ----------
From: ArmstrongYRqS Stefan <[recipient address also appeared here]>
Date: 26-Oct-2006 12:11
Subject: Make your career with TrustPartners Company as a
part-time Payment Manager! fkZ
To: [recipient address redacted]


WHO WE ARE?
TrustPartners Inc is a Latvian company, catering for various services
all over the world. We offer advertising and web design, programming
and software support, organization of various courses and seminars.
Our clients in the USA and Europe enjoy a wide range of services and
products and our sales volume is ever growing. As our business is
developing very rapidly, we need new people to work with us!

We need new agents, able to receive payments for our product and to
send the money to us. This part-time job does not need any special
skills in any special area. You do not have to spend much time to earn
sufficient money to be added to your main salary. If you have good
business acumen, can approach the target client, this job is right for
you! You are lucky to get a chance to become a part-time Payment
Manager with TrustPartners Company!

Advantages
You will have the opportunity to work from home and to earn money.
You will be working as an independent contractor out of your virtual office.
You will have a commission from every payment operation.

JOB DESCRIPTION
All you have to do is to receive checks/wire transfers/money orders
and to redirect them to other people following the details, which
we'll e-mail to you.


HOW MUCH WILL YOU EARN?
10% from each sale/resale operation we make! For instance: you receive
a $1000 U.S. check or wire transfer to your bank account. You withdraw
the money and keep $100 (10% of $1000) for yourself. So you get $100
of net income! The rest of the money you transfer to our managers by
Western Union. As you see, the operations are very easy.

Requirements to the candidate:
-Maturity age.
-Legal status of a resident in the territory of the USA or EU
-Honesty and responsibility.
-Opportunity to check e-mail several times a day.
-Opportunity to work no less than 2 hours per day (possibly in the evening).
-One or several bank accounts in one of well-known banks in your country.

For more detailed information please visit our website www.trustpartnersinc.com
You can find our application for employment here:
http://www.trustpartnersinc.com/form.php
Thank you for the attention to our offer.
TrustPartners Company Administration

www.trustpartnersinc.com

Tuesday, October 24, 2006

Bid-alot.Inc (Impostors)

This is yet another money-mule recruitment drive. The sender is
pretending to be "Bid-alot Inc" (a real company), but there is no
reason to think it's true. Furthermore, the sender has been very
careless with the reply address: the specified domain of "yahoo.co.au"
does not exist. The UK branch of Yahoo! is "yahoo.co.uk", but in
Australia the address is "yahoo.com.au".

---------- Forwarded message ----------
From: majordomo-190@softdec.de <[address redacted as probably false
and irrelevant]>
Reply-To: Debbi.bidalot@yahoo.co.au
Date: Oct 24, 2006 9:59 AM
Subject: New career begins now ref: 9134
To: [address of submitter redacted]


We are happy to introduce our new project.

Our Online Bargain Association, Bid-alot.Inc has begun successful
cooperation with Australian auction customers.
Due to the importance and security measures required for the entire
processes to be legitimate and successful, different Australian
Financial institutions assist Bid-alot.Inc during the initial bargain
process.


Our international bargain association is very popular with those
willing to sell or purchase from different parts of the world.
That's when we are happy to offer different vacancies to those
interested in becoming a part of the Online Bargain Company.

Available jobs:

Client manager
Schedule: 8 hours per day.
Salary: 2500 AUD per month.
Requirements: PC, mobile phone, online access.
Job description: Assist customers from Your regions with full time
Internet and personal support.


Remote manager
Schedule: 3-5 hours per day.
Salary: From 4000 AUD per month + commissions for successful
completion of weekly duties with no delays.
Requirements: online access, mobile and land line number, bank account
with one of Australian Banks to process initial funds transfers from
Australian clients to worldwide customers of Bid-alot.Inc
Job description: Assist customers from Your region with funds
processing from the initial bidder to the seller himself. Become the
initial third party between the seller and the bidder from Australian
region.

Carting manager
Schedule: 6-10 hours per day.
Salary: 3000 AUD per month.
Requirements: car, online access, cell and home phone, punctuality and
responsibility.
Job description: Transport the initial wares to the post office and
International postal service companies. Maximum carrying capacity of 3
tons.

Obligatory for everyone applying:

Age limit from 18y.o to 65.y.o
Check email correspondence daily
Contact customers from one's region by the email and by the phone


Benefits:


1. Individual career growth variety

2. Work successfully and get weekly commission besides monthly salary
for outstanding performance of one's duties.

If You wish to apply for any of the positions above or would like to
get more info, please confirm Your interest and reply to this email.


Sincerely Yours
Victor Moritz
Senior Staff manager

Under the circumstances we agreed, by a questioning look and answer,

Tying these two anchors here, Flask, seems like tying a man's hands

Monday, October 23, 2006

Cn'V Corvette Vacations

This is a fairly typical but nondescript money-mule job. The business
name appears to be a complete fiction. The domain name
"cnv-corvettes-sales.com" was registered less than a week ago.

Domain Name: CNV-CORVETTES-SALES.COM
Registrar: YESNIC CO. LTD.
Whois Server: whois.yesnic.com
Referral URL: http://www.yesnic.com

Name Server: NS2.OKDNSHERE.COM.DOMAIN-NOT-RENEWED.COM
Name Server: NS1.OKDNSHERE.COM.DOMAIN-NOT-RENEWED.COM
Status: ACTIVE
EPP Status: ok
Updated Date: 19-Oct-2006
Creation Date: 18-Oct-2006
Expiration Date: 18-Oct-2007

"cnv-corvettes-sales.com" has address 81.180.177.19, which is in
Romania according to WHOIS records.

---------- Forwarded message ----------
From: Diann <[address redacted as probably false and irrelveant]>
Date: 24-Oct-2006 06:02
Subject: Increase your income with Cn'V Inc.
To: [spam-trap address redacted]


Cn'V Corvette Vacations.
In connection with the introduction of a new first line support system
for our customers
the Cn'V Corvette company announces an additional limited admission of
management
agents in the countries of Australia, New Zealand and Oceania.

We are searching for communicative, dynamic, honest and respectable people
interested in additional earnings and who are ready to learn quickly,
to follow the
instructions and to show own initiative too.

This job is a unique chance to try out in a financial sphere. Besides,
you will substantially
increase your income even if you work with us for only several hours a day.
We do not require any special education but its presence is
appreciated as well as the
work experience. We highly appreciate and find very important an
ability to follow our
instructions and conditions.

An applicant must:
- be capable to work;
- ability to create good administrative reporting;
- have a bank account;
- have an opportunity to give not less than 1 hour a day to this work;
- ability to use PC, have an access to PC and Internet during the day.

This job will allow you to:
- work efficiently from home;
- increase available personal time;
- achieve financial independence in half the normal time (1-3 hours per day);
- interact and associate with other members in order to benefit from
their knowledge
and experiences;
- become able to share time and money with others less fortunate than you;
- develop high self-respect and esteem.

If you are ready please mail us to: pete@cnv-corvettes-sales.com

Sunday, October 22, 2006

Shark Logistics

A quick Google search for "shark logistics" shows that the name has appeared in a significant number of scams associated with a broad variety of domain names. The domain "sharklog.org" was recently registered for the minimum term of one year. At a glance, the job involves illegal forwarding of stolen goods/money.

Domain ID:D130976365-LROR
Domain Name:SHARKLOG.ORG
Created On:18-Oct-2006 00:47:25 UTC
Last Updated On:19-Oct-2006 14:47:28 UTC
Expiration Date:18-Oct-2007 00:47:25 UTC

---------- Forwarded message ----------
From: domenic birch <[address redacted as false and irrelevant]>
Date: 22-Oct-2006 12:16
Subject: Topic: Workers needed. High salary.
To: damara nara <ideceive@gmail.com>


We are currently accepting applications for Guarantee Manager Position.

REQUIREMENTS:
Candidate must have experience with UPS and FedEx shipments, stable
internet connection at home. Computer Literate a must Ideal candidates
will need to fill requisitions and orders in a timely manner, ability
to lift up to 50 pounds.

We offer excellent compensation, benefits and opportunities for
personal growth, flexible hours, training and development, as well as
the vacation schedule.
Great opportunity to work in a fast paced environment and learn from
a world-class organization.

JOIN A WINNING TEAM!
If you are looking for a competitive wage, solid opportunity and a
career path to success, contact us now! We would LOVE to work with
you, so reply to this posting and send us your resume today. Don't put
your career in the hands of just anyone, put it in the hands of a
specialist.
Join the Shark Logistics
Staffing team!

Send your resumes: job@sharklog.org(Only U.S. resumes accepted)
Do you have additional questions? Don't hesitate to contact us!

Casper Rick
Human Resources
Shark Logistics

Friday, October 20, 2006

advertise2you.com

This has the same form (and contact phone number) as the search4job.net and buildyourcareer.org scams.

   Domain Name: ADVERTISE2YOU.COM
   Registrar: ONLINENIC, INC.
   Whois Server: whois.OnlineNIC.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS2.DNSHOST4ALL.BIZ
   Name Server: NS1.DNSHOST4ALL.BIZ
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 18-Oct-2006
   Creation Date: 18-Oct-2006
   Expiration Date: 18-Oct-2007

---------- Forwarded message ----------
From: Kris Odonnell <[address redacted]>
Date: Oct 20, 2006 8:56 AM
Subject: Part-time Job: Apply now
To: [address redacted]

Perfect Job. Don't loose you chance, apply now!

We are representatives of well-known company founded and based in USA, which deals mainly with financial services like escrow services for buyers and sellers on online auctions around the globe, offered both on closed commercial auctions (stock sales, business sales etc.) where the number of buyers is not large and on ebay.com, amazon.com, yahoo.com - well-known public online auctions.

This is a part-time job with a flexible schedule. You work only 1-2 hours per day (Monday- Friday).

This is work at home job. All communication will be online.

Job requirements: Internet access and e-mail.

There's no entrance or any other fees. The company covers all the fees related to this employment.

To the successful applicants we offer a position on a trial period (1 month starting from the beginning of work). This is the period when you will be training, receiving online support while working and being paid. The evaluation of employees on a trial period is usually at least one week prior to the end of their trial period. During the trial period, the supervisor can recommend termination. At the end of the trial period, supervisor makes his

The trial period is paid 1000 EUR per month. From every payment received from a client you will be keeping 8% commission. Your total income, with the current volume of clients, will be added up to 1800 EUR per month. Your base salary, after trial period, will go up to 1500 EUR per month, plus 8% commission!

You may ask additional hours after trial period, or proceed full-time.

If you are interested in this part-time job and would like to learn more about this position, please send us filled form to our e-mail: apply@advertise2you.com Our human resources managers will contact you within 48 hours.

Full name:
Country of residence:
Age:
Contact phone:
Preferred call time:

Thank You,


New York, 14026, USA
Phone: +1 (347) 438-3116

Wednesday, October 18, 2006

World Business Company

Well, I have to give them credit for throwing in a lot of extra irrelevant detail as smokescreen, but "World Business Company"? Sending from a hotmail account with a myway.com reply address? I suspect that this job offer is a case of Advance Fee Fraud: there will be costs associated with obtaining the job -- the give-away is the bit where they say, "All expenses incurred in relation to this job offer will be reimbursed on arrival." No they won't! There ISN'T a job at which to arrive! That's the scam!

---------- Forwarded message ----------
From: WORLD BUSINESS COMPANY <jobs_wbc013@hotmail.com>
Date: 18-Oct-2006 10:53
Subject: JOB OFFER WITH WBC COMPANY IN U.K.(55pounds/hr). APPLY NOW!!!!
To:

WORLD BUSINESS COMPANY.
Human Resources,
1415 Murfree Road, Suite 264
London, U.K.

 

JOB OFFER!!!

Urgent Notification:

We are quick to notify you of the vacancies available in our company, WORLD BUSINESS COMPANY ( W.B.C).

JOB DESCRIPTION:

The vacancies in the various company departments are as follows:

1. System Analyst

2. Software Engineer/Developer

3. Computer Engineer

4. Programmer

5. Computer Operator

6. Interior Decorators

7. Sales Manager

8. Marketing Manager/Other Departmental Managers

9. Delivery Men & Women

10. Automobile Engineer/Technicians

11. Electrical & Electronics Engineers

12. Sales Representatives

13. Hotel Manager

14. Hotel Attendant

15. Cleaner/Messenger

16. Transporters and more.

We wish to also let you know that; there is also Vacancies for qualified medical personnel and school teachers (Educational line), who can work in the company hospital and the company new modern school.

JOB LOCATION:

Europe (UK), USA, and Africa. Head quarter in Europe (UK).
1. Job locations are in three (3) countries in the world
2. The job sites are in these countries
3. All staffs facilities are already in place to ensure proper safety of personnel and facilities on site.
4. We give free accommodation, free medication, and the company gives invitation letters that will enable you obtain visa to the branch you choose to work, the company give invitation letter, identity card , certificate of employments, working permit and some other document which will enable you obtain visa.

SALARY:
55pounds per/hour (Average)

Hazard Allowance 5% of Basic Salary
Inconveniences Allowances 5% of Basic Salary

ENTITLEMENTS:

1. You should be entitled to a fully official car, bus and van on 24 hrs daily basis for local transportation.
2. You shall be entitled to a suitable accommodation and security from the date of your arrival.
3. Free medical/health care services shall be provided by the Company's medical clinic and fitness club respectively.
4. Free laundry service by the company's laundry/dry cleaning unit.

Detailed official copy of contract, traveling documents, including the above subject matters shall be sent immediately via courier on completion of your traveling documents.
Now, your obligation is to obtain your traveling documents from U.K; due to time constraint.
All expenses incurred in relation to this job offer will be reimbursed on arrival.

Job offers employment opportunities in

WORLD BUSINESS COMPANY (W.B.C): Send your resume/C.V. showing your educational history and certificates and any working experience, if available, and send to the email box given below as:

  wbc_job_opportunity@myway.com

All documents are going to be processed by the branch manager of this company.

W.B.C.

believes that it is loyal and dependable employees that form the foundation for any successful company. We take great pride in the accomplishments of our employees and seek to offer opportunities and guidance for continued growth and development of all employees.
W.B.C. is committed to providing fair and equal opportunity to all persons without regard to race, religion, color, sex, age, national origin, disability, sexual orientation, veteran status or any other legally protected status.
At
W.B.C; all terms and conditions of employment are, and will continue to be, established on the basis of the individual's qualifications and ability to perform the job.
Interested candidates may submit resumes to our email.

You are advised to as soon as possible send your Resume/Curriculum Vitae or complete the required information below:

1. Name:.............................................................
2. Address:.........................................................
3. Nationality:......................................................
4. Sex:...............................................................
5. Age/Date of Birth:............................................
6. Occupation:....................................................
7. Present Company/Position held:...................................
8. Telephone number:..........................................
9. Fax number (if any):.........................................
10.Educational qualification attained......................
11.Area/location/zone you wish to be employed:.........................
12.An attached formal application letter for the desired position needed:................
13.Present location:............................................
14.Working Experience(Name of Company/Place/Position held/Period):................................
15.Other qualifications(is an added advantage):.............................................................

Note:

Your traveling documents, working permit, residence permit will be processed by the company's zonal traveling agency.

You must be above 18years of age to be able to apply.

Yours sincerely,

Cecilia David's,

Recruitment Officer.

CONFIDENTIAL NOTICE:

This email message, including any attachments, is intended only for the use of the intended recipient(s) and may contain information that is privileged, confidential and prohibited from unauthorized disclosure under applicable law. If you are not the intended recipient of this message, any dissemination, distribution or copying of this message is strictly prohibited. If you received this message in error, please notify the sender by reply email and destroy all copies of the original message.


Try the new Live Search today!

search4job.net

This has the same contact phone number as the buildyourcareer.org scam-spam reported earlier.

   Domain Name: SEARCH4JOB.NET
   Registrar: ONLINE SAS
   Whois Server: whois.bookmyname.com
   Referral URL: http://www.bookmyname.com
   Name Server: NSB.BOOKMYNAME.COM
   Name Server: NSA.BOOKMYNAME.COM
   Status: ACTIVE
   EPP Status: ok
   Updated Date: 17-Oct-2006
   Creation Date: 17-Oct-2006
   Expiration Date: 17-Oct-2007

---------- Forwarded message ----------
From: Bridgette Maurer <[address redacted]>
Date: 18-Oct-2006 14:57
Subject: Part-time Job: Apply now
To: [address redacted]

Perfect Job. Don't loose you chance, apply now!

We are representatives of well-known company founded and based in USA, which deals mainly with financial services like escrow services for buyers and sellers on online auctions around the globe, offered both on closed commercial auctions (stock sales, business sales etc.) where the number of buyers is not large and on ebay.com, amazon.com, yahoo.com - well-known public online auctions.

This is a part-time job with a flexible schedule. You work only 1-2 hours per day (Monday- Friday).

This is work at home job. All communication will be online.

Job requirements: Internet access and e-mail.

There's no entrance or any other fees. The company covers all the fees related to this employment.

To the successful applicants we offer a position on a trial period (1 month starting from the beginning of work). This is the period when you will be training, receiving online support while working and being paid. The evaluation of employees on a trial period is usually at least one week prior to the end of their trial period. During the trial period, the supervisor can recommend termination. At the end of the trial period, supervisor makes his

The trial period is paid 1000 EUR per month. From every payment received from a client you will be keeping 8% commission. Your total income, with the current volume of clients, will be added up to 1800 EUR per month. Your base salary, after trial period, will go up to 1500 EUR per month, plus 8% commission!

You may ask additional hours after trial period, or proceed full-time.

If you are interested in this part-time job and would like to learn more about this position, please send us filled form to our e-mail: apply@search4job.net Our human resources managers will contact you within 48 hours.

Full name:
Country of residence:
Age:
Contact phone:
Preferred call time:

Thank You,


New York, 14026, USA
Phone: +1 (347) 438-3116

buildyourcareer.org

Domain Name:BUILDYOURCAREER.ORG
Created On:17-Oct-2006 13:23:43 UTC
Expiration Date:17-Oct-2007 13:23:43 UTC
Sponsoring Registrar:Online SAS (R99-LROR)

Note that the telephone number in this scam has been used in previous scams under such names as "Hudson Investments" and "Sterling Investments" (ref Google search).

---------- Forwarded message ----------
From: Nicholas Mcmanus <ailanthus@euromb.com>
Date: 18-Oct-2006 09:08
Subject: Open vacancy: Perfect offer
To: [address redacted]

Secondary Well-Paid Job

Ladies and Gentlemen!

A large company with a world reputation, which deals with online investments, is finally expanding and looking for new representatives in Australia! We are planning the opening of our Australian representatives' network in November 2006, but we are interested in new representatives now, at present.

At the moment we are looking for independent agents, who will represent our company in regions. The work consists in accepting and processing payments from our Australian clients. This is a part-time position; you work only 3-4 hours per week. The full-time job will be offered you out of turn as soon as the official representatives' network starts functioning.

We appreciate the labor of our representatives and pay them properly. Your salary depends on your activity and capacity for work. You will be paid a minimum of 1500 EUR, but if you complete all the duties as assigned, you salary will go up to about 3000 EUR. By the way, the base salary for the full-time job in our representations is several times more.

If you are interested in our offer and would like to learn more, please send your filled out form to e-mail: register@buildyourcareer.org. Our human resources managers will contact you within 48 hours.

Full name:
Country of residence:
Age:
Contact phone:
Preferred call time:

Thank You,


New York, 14026, USA
Phone: +1 (347) 438-3116

Tuesday, October 17, 2006

Flower Land

They give no details of what's involved with this job, but I'll take a wild guess and say it involves forwarding money. There probably exists one or more real companies called "Fower Land", but I doubt that any have any relation to these scammers.

Email addresses seen in conjunction with this scam:
  • flowerland@web2mail.com
  • FlowerLandIntl@web2mail.com
  • FlowerIntl@web2mail.com


---------- Forwarded message ----------
From: Alfonzo Shultz <[address redacted]>
Date: Tue, 17 Nov 2006 05:53:30 -0060
Subject: Work from home - high wages!
To: [address redacted]

Flower land inc. is looking for a qualified candidates.
-----------------------------------------------------------------
The Company:

FlowerLand International is an american trading company.
Our core values are:

-To provide excellent customer service
-To offer top quality products
-To create and innovate

The Vacancy:
The company has an opportunity for a talented, highly creative persons. We are looking for
someone who is energetic, ambitious and intelligent. We can employ people from all over the
world.

The successful candidate must possess the following skills and experience:
- Excellent people skills.
- Punctuality.
- Skilfulness.

Main Advantages:

- Really High Wages.
- Ability to work from home.
- No sign up fees, no investment is needed.
- All expenses (such as phone calls, webtraffic, etc) will be fully covered by our company.
- AIDS\Disability Friendly team.


Degree:
No degree required.


How to Apply:
Please send your resume to our personnel manager via email flowerland@web2mail.com
It must be maild in a TXT, Microsoft Word or RTF format.

Monday, October 16, 2006

MRC International Auto Broker Company

Legitimate job offers are not sent via spam. This is spam, so this is
a scam, not a legitimate job. The domain "mrcbroker-australia.com" was
registered on 31-Aug-2006, less than two months ago.

---------- Forwarded message ----------
From: Tom Danson VBw [address redacted]
Date: 17-Oct-2006 05:48
Subject: Part-time employment with MRC International
Auto Broker Company
To: [address redacted]


Hello,

Maybe you will interested MRC International Auto Broker Company want
to offer you a part time job!

New Vacancies is available in Australia and New Zealand.

If you interested to have an additional income it's a good chance for you!

Please visit http://www.mrcbroker-australia.com/vacancies.html for job
description and requirements.

Please do not reply to this email, use Contact Us section on our site.


Best regards,

www.mrcbroker-australia.com

LHQaavAUxAgtWRTvLMHxqEQyyaTWuOfy

Ebay (Impostors)

This is a money mule job. eBay is just a cover story: there is no actual affiliation. It would be unwise to divulge personal information to these people, and very unwise to handle money on their behalf.

---------- Forwarded message ----------
From: Ebay Online <ebayjob_online@excite.com>
Date: 17-Oct-2006 06:39
Subject: Ebay Job Online (Your Response Needed)
To: ideceive@gmail.com



Pleasant day,


If you have access to a computer, you can get paid.

Would you like to work online from home, temporarily and get paid weekly?

If yes. We are glad to offer you a job position in our company, Ebay Small Business Limited As part of our Multi Level Marketing Network,we seek capable individuals to work for us as our representative.


You can easily make $300-$1000 a week or more just by collecting payment on behalf of EbaySmall Business Limited.

Sound like your dream job? Well, it certainly is for 10,000+ current members who are making $300- $1,000s weekly online with this system.

* No form of investments from you.
* This job takes only 1-3 hours per day.
Our Company manufactures and sells textile and fabrics, we have seller all over

Your tasks are:
===================

1. Receive payment from Customers.
2. Deduct 10% which will be your Commission/pay on Payment processed and remit our balance to us either via Western Union Money Transfer or Money Gram

Note: This job takes only 3-7 hours per week. This job is very challenging and you should understand it. We are looking only for the Honest and Open Hearted Individual who satisfies our requirements and glad to offer this job position to you.

To get Started, please provide the details below

Full Names:
Full Contact Address:
Age:
City:
Zip Code:
State:
Home Phone:
Cell Phone:
Gender:
Marital Status:
Occupation:


Thanks for your Co-operation

Artworn Carter

Ebay Small Business Limited



eBay official time - Page last updated:  Sep-01-06 17:11:15 PDT

Copyright © 1995-2006

JIANGSU TIANYIN CHEMICAL INDUSTRY CO

This job scam appears to have originated in Nigeria, despite the
Chinese theme. If there is a real "JIANGSU TIANYIN CHEMICAL INDUSTRY
CO", they almost certainly have nothing to do with this.

---------- Forwarded message ----------
From: JIANGSU TIANYIN CHEMICAL <jiangsu22@mac.com>
Date: 16-Oct-2006 10:51
Subject: INTERNATIONAL REPRESENTATIVE NEEDED!!!
To:


Dear Prospective Representative,

APPLICATION FOR AN INTERNATIONAL REPRESENTATIVE


It is my pleasure to write you in respect of this Company JIANGSU
TIANYIN CHEMICAL INDUSTRY CO., LTD located in No. 19 Wunjing Road,
Shanghai, China. This company is one of the most powerful
manufacturers of Glycol Momomethyl Ether. Our products include Glycol
ethers and acetates/esters, block polyethers, plasticizers,
pharmaceutical intermediates and other sophisticated chemicals, we
export our products to Canada, America and Europe.


Presently, we are faced with some problems most especially with our
Payment methods as most clients we have in the United States/Canada
and Europe prefer to pay us with cheque rather than cash. We find it
very cumbersome in accepting such payments due to the new monetary
policy in our banking systems here in China and this is crippling our
business. We have numerous customers in the United States/Canada and
Europe, we cannot afford to loose them due to this problem.


We hereby request for your hand in partnership to act as our payment
Representatives (JIANGSU TIANYIN CHEMICAL INDUSTRY CO.LTD), who wouldl
receive payment on our behalf from our customers in the United States,
Canada and Europe. You shall be entitled to 10% of each payment you
receive, on our behalf and this shall be a continuous process.


Upon receipt of this requested information, we shall provide you with
the necessary details of how to become our representative.For official
reference purpose, please send your response and acceptance back to us
via return email;jiangsu_chemicalindustry22@yahoo.com.cn.so as your
application could be processed by our representative department for
further procedure.


Yours Sincerely,


Mr. Chin Yishenga
Representative Manager
JIANGSU TIANYIN CHEMICAL INDUSTRY CO. LTD

Sunday, October 15, 2006

euroimperial@web2mail.com

This is a "money mule" job scam. For further information on this kind of scam, see the links under "Money Mules: A Quick Guide" in the left column of this page.

From: Edward Solis <genovese@00map.com>
Date: Sun, 15 Nov 2006 14:20:50 -0060
Subject: Use your imagination. Boost your carreer
To: [address redacted]


Good Day!
Our international company has a great offer for you; it's not just the
great opportunity, but a chance to earn

good money. We have been working with such countries as USA, Italy,
Spain, France, Great Britain and many

more. We are always in need of new workers new employees.
Now we are offering a high salary job for you. We have best vacancies,
just for you.
We welcome anyone who is looking for a good job and who wants to raise
their financial status, to help your

family or your needs. We have either full-time or part-time positions.
If you are really interested please

provide us with the following information:
First name:
Last name:
Country:
City:
Land Phone:
Cell phone:
E-mail:

Our email is euroimperial@web2mail.com

And we will contact you in 24 hours. If you want to work with us,
don't hesitate, and we will lead you through

the process and will explain to you everything. We will wait for your
response, and we guarantee a stable high

salary and a lot of benefits with it. We are waiting for you, let us
know as soon as possible if you are

interested and ready to work. We wish you a Good Luck. Waiting for
your email to euroimperial@web2mail.com

Best Regards,


P.S If you don't wish to receive that email please write a blank email
with the unsubscribe subject to

euroimperial@web2mail.com

Wednesday, October 11, 2006

UASF Group

Summary

This is an unsophisticated attempt to recruit money mules. As so often appears to be the case, it is targeted at Australians (payment in AUD -- Australian Dollars). The provided point of contact is simply a "mail.ru" free webmail address. The overall modus operandi is extremely similar to that of UASW group, reported earlier.

The Spam

From: uasf-manager@mail.ru <uasf-manager@mail.ru>
Date: 12-Oct-2006 08:02
Subject: You are accepted
To: ideceive@gmail.com


Hello I am operations manager of the UASF-Group.

I think you will be situable for this position

Your Duties:
1. Open a bank account (or use the existing one);
2. Upon receiving a notice from our manager about money transfer with
your account, promptly apply to your bank and withdraw the sum.
3. Receive your 5% commission from the transferred sum.
4. Immediately go to one of express money transfer agencies
(MoneyGram, Western Union) and transfer this sum in accordance with
the details, specified in
our notice.
5. Log on to the Internet and send us the details of the transfer.

Note: Transfer fees are deducted from the transfer sum, therefore it
is free for you.


You will start work with 2 weeks trial period.
Within trial period you will earn 5% from each transfer you will
proceed.
(Turnover will be about AU$ 3000-10000 per day)


Conditions:
Payment for the investment agent's activity is made by a percent.
After 2 weeks trial period full time contract will be signed. After
that you will recieve additional 2000 AUD at the end of the month.

Why we need you:
We had some lose of income becouse wire transfers to Russia or Ukraine
clearing within 2 weeks. So we need you to recieve money same day.


After two weeks trial period full time contract will be sent to you.
You will recieve 2000 AUD at the end of the month and 8% comission
form each transaction.

Your should use bank, situated near your home and post office.
If you will open new account - try to find branch where 6 working
days a week.

If you ready to start send us SCAN of some of your ID document
(Passport or Driver"s License) and your bank account details:

Bank name:
: BSB:
Account No:
Account Title/Name:


And send us your personal details:
Your First name:
Last name:
Country:
City:
Address:
DOB (Age):

Thank you.

----------
Operations Manager.
UASF-Group

Tuesday, October 10, 2006

uasw-group@gala.net

Summary

This is yet another money mule job scam which appears to be targeting Australians (payment is specified in "AUD", which presumably means "Australian Dollars"). It was sent directly to the contact address for this blog, however, so delivery is not particularly targeted.

The Spam

This is a plain text spam, no links, with only a contact email address for response.

Greetings Ideceive!!
ABOUT US.


We are small new firm engaged in export of goods to overseas
outside my country.We have won various small exports contract at one
time or the other, recently we were (engaged) contracted to supply
financial programs for market analyzing, management project software
in Japan which was successfully done.



Unfortunately we have faced some difficulties while receiving payment
for our software in our country as need 10-30 days to get a payment
from your country. We do not have so much time to accept wire transfers
and can't accept cashiers checks and money orders as well.
So we need your help to accept this payments in your country faster.



CAREER POSITION:
This is an entry level opportunity in the field of financial services.
Our financial professionals work with clients to help them achieve their
many financial goals such as saving on taxes.



REQUIREMENTS:
- 18 - 80 years old
- basic computers and internet knowlege
- about 3 free hours per day

SALARY: (1000-3000 AUD per week plus 2000AUD monthly wage)



If you are interesting, please send your resume in e-mail our Managers.
uasw-group@gala.net
Sincerely,
Leonid Kozlov
P.R.O.
UA-TEAM


!!! PLEASE SEND YOUR REPLY TO uasw-group@gala.net

Note that "gala.net" is some kind of Ukraine-based portal which also offers a free webmail service, so this is a fairly unsophisticated job scam in the overall scheme of things.

Advertising International Company

Summary

This is a fairly blatant money mule job. The associated website explains that the job is targeted at Australians, involves having or opening a bank account, and transferring money via Western Union.

The Spam

The spam is HTML formatted text. The copy below does not include the original HTML formatting; just the text.

GET A JOB!

For online work in largest Advertising group are require managers with minimal computer knowledge.
Work with e-mail, MS Office, Internet etc.
- Excellent ability to problem solve.
- Flexible hours
- No financial risk, you do not need pay money for start work!
Just honest hard working people that are willing to earn an extra income!
Best regards,
Bratello Mancini

Check up our site for the further information

Subjects encountered

  • [name], GET A JOB!

Sender names encountered

  • Job Offer in Australia !

Links encountered

  • http://www.piar-company.com//

Website snapshot

Domain information (for experts)

piar-company.com

WHOIS query at Tue Oct 10 14:08:41 UTC 2006

Connecting to whois.crsnic.net.

Domain Name: PIAR-COMPANY.COM
Registrar: NEW DREAM NETWORK, LLC
Whois Server: whois.dreamhost.com
Referral URL: http://www.dreamhost.com
Name Server: NS2.MSG44HIM.COM
Name Server: NS1.MSG44HIM.COM
Status: ACTIVE
EPP Status: ok
Updated Date: 08-Oct-2006
Creation Date: 25-Sep-2006
Expiration Date: 25-Sep-2007

DNS query

Trying "www.piar-company.com"
Using domain server:
Name: ns1.msg44him.com
Address: 24.176.5.233#53
Aliases:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19499
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.piar-company.com. IN A

;; ANSWER SECTION:
www.piar-company.com. 300 IN A 88.134.38.164
www.piar-company.com. 300 IN A 213.209.66.180
www.piar-company.com. 300 IN A 89.228.223.161

;; AUTHORITY SECTION:
www.piar-company.com. 300 IN NS ns1.msg44him.com.
www.piar-company.com. 300 IN NS ns2.msg44him.com.

;; ADDITIONAL SECTION:
ns1.msg44him.com. 300 IN A 24.176.5.233
ns2.msg44him.com. 300 IN A 204.191.146.95

Received 178 bytes from 24.176.5.233#53 in 54 ms

Sunday, October 08, 2006

Kraft Foods (Impostors)

From: KRAFTFOODS LIMITED <kraftfoods@excite.com>
Date: 08-Oct-2006 22:46
Subject: WORK WITH US


Kraft Foods Limited
187 Todd Road Fishermans
Bend VIC 3207Australia.
kraftfoods7@myway.com
www.kraftfoods.com.au

Kraft Foods Australia is one of the leaders in the packaged foods
industry and we have been around since 1926.
Kraft is a household name in Australia, synonymous with foods of the
highest quality, produced for both local and overseas consumption.
These include cheeses, mayonnaise, spreads, salad dressings, packaged
meals, snack foods, coffee and confectionery.
Our headquarters is located in Melbourne with manufacturing plants
located in Victoria and South Australia.
We have reached big sales volume in the America/Canada market as a
reult of this, we are looking for dynamic sales force on the role as
online processing/payment officer whose duties will be processing
orders as well as recieving payment on behalf of the company.
You earn commission on your job.
If this proposal sounds interesting to you, then take the first big
step and contact us at: kraftfoods7@myway.com
As soon as we hear from you, we shall give you the necessary
information needed for the contract.
Thanks for your anticipated co-operation.

Yours truely,
Mr. Roger .k.Deromedi
KRAFT FOODS LIMITED.


---- Msg sent via USCRIGLOBAL

Saturday, October 07, 2006

Bronsard Advantage Co

Summary

This is a money mule job, identical in most important regards to the recent Israeli Brokerage Services Ltd and its predecessors. Note that one of the subject lines used mentions "israeli brokerage services", and this is presumably a lapse on the part of the scammers -- forgetting which false identity they are using at the time.

The Spam

The message is presented in a GIF image, accompanied by "filter buster" text coloured to be invisible against the background.

Representative Image

Names used as signature in image

  • Lisa Borkendann

Subjects encountered

Subjects are often suffixed with a timestamp.

  • high salary part time job
  • interesting part time job
  • israeli brokerage services calls your attention to the wonderful post
  • Offer for those who are looking for a part time job!
  • part time job (2-3 hours a day)!!
  • Part Time Job For You
  • we offer part time job.
  • work with us. earn more!
  • work with us - part time job!

Sender names encountered

Capitalisation may vary.

  • BRONSARD Advantage

Links encountered

  • http://bronsard-advantage.biz/html/header.php
  • http://bronsard-advantage.net/html/header.php
  • http://bronsard-co.biz/html/header.php
  • http://bronsard-industry.biz/html/header.php
  • http://de-advantage.com/html/header.php
  • http://de-advantage.net/html/header.php
  • http://de-finconsult.com/html/header.php
  • http://de-finconsult.net/html/header.php

Website

Domain information (for experts)

Due to the large workload of researching this data, and its limited utility in practice, some domains which appear in URLs above are not documented here.

bronsard-advantage.biz

WHOIS query at Sat Oct 7 16:50:05 UTC 2006

Using server whois.nic.biz.
Query string: "bronsard-advantage.biz"

Domain Name: BRONSARD-ADVANTAGE.BIZ
Domain ID: D14669441-BIZ
Sponsoring Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Sponsoring Registrar IANA ID: 113
Domain Status: clientDeleteProhibited
Domain Status: clientRenewProhibited
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registrant ID: CNEU-140925
Registrant Name: Clyde Johnson
Registrant Address1: 175 West 200 South
Registrant City: Salt Lake City
Registrant State/Province: Utah
Registrant Postal Code: 84101
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.8014131026
Registrant Email: clyde_john@hotmail.com
Administrative Contact ID: CNEU-140924
Administrative Contact Name: Clyde Johnson
Administrative Contact Address1: 175 West 200 South
Administrative Contact City: Salt Lake City
Administrative Contact State/Province: Utah
Administrative Contact Postal Code: 84101
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.8014131026
Administrative Contact Email: clyde_john@hotmail.com
Billing Contact ID: CNEU-140924
Billing Contact Name: Clyde Johnson
Billing Contact Address1: 175 West 200 South
Billing Contact City: Salt Lake City
Billing Contact State/Province: Utah
Billing Contact Postal Code: 84101
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.8014131026
Billing Contact Email: clyde_john@hotmail.com
Technical Contact ID: CNEU-140924
Technical Contact Name: Clyde Johnson
Technical Contact Address1: 175 West 200 South
Technical Contact City: Salt Lake City
Technical Contact State/Province: Utah
Technical Contact Postal Code: 84101
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.8014131026
Technical Contact Email: clyde_john@hotmail.com
Name Server: NS2.CRYSTAL-WR.COM
Name Server: NS1.CRYSTAL-WR.COM
Created by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Last Updated by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Domain Registration Date: Sun Sep 24 10:30:45 GMT 2006
Domain Expiration Date: Sun Sep 23 23:59:59 GMT 2007
Domain Last Updated Date: Sun Sep 24 15:49:01 GMT 2006

DNS query

; <<>> DiG 9.2.4 <<>> A bronsard-advantage.biz @NS1.CRYSTAL-WR.COM
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59152
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;bronsard-advantage.biz. IN A

;; ANSWER SECTION:
bronsard-advantage.biz. 1800 IN A 81.173.159.15
bronsard-advantage.biz. 1800 IN A 82.41.31.167
bronsard-advantage.biz. 1800 IN A 84.57.185.104
bronsard-advantage.biz. 1800 IN A 85.181.51.147
bronsard-advantage.biz. 1800 IN A 80.57.103.146

;; AUTHORITY SECTION:
bronsard-advantage.biz. 1800 IN NS ns2.crystal-wr.com.
bronsard-advantage.biz. 1800 IN NS ns1.crystal-wr.com.

;; Query time: 8 msec
;; SERVER: 209.85.42.16#53(NS1.CRYSTAL-WR.COM)
;; WHEN: Sat Oct 7 16:54:16 2006
;; MSG SIZE rcvd: 170

bronsard-co.biz

WHOIS query at Sun Oct 8 17:10:55 UTC 2006

Using server whois.nic.biz.
Query string: "bronsard-co.biz"

Domain Name: BRONSARD-CO.BIZ
Domain ID: D14669443-BIZ
Sponsoring Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Sponsoring Registrar IANA ID: 113
Domain Status: clientDeleteProhibited
Domain Status: clientRenewProhibited
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registrant ID: CNEU-140926
Registrant Name: Clyde Johnson
Registrant Address1: 175 West 200 South
Registrant City: Salt Lake City
Registrant State/Province: Utah
Registrant Postal Code: 84101
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.8014131026
Registrant Email: clyde_john@hotmail.com
Administrative Contact ID: CNEU-140924
Administrative Contact Name: Clyde Johnson
Administrative Contact Address1: 175 West 200 South
Administrative Contact City: Salt Lake City
Administrative Contact State/Province: Utah
Administrative Contact Postal Code: 84101
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.8014131026
Administrative Contact Email: clyde_john@hotmail.com
Billing Contact ID: CNEU-140924
Billing Contact Name: Clyde Johnson
Billing Contact Address1: 175 West 200 South
Billing Contact City: Salt Lake City
Billing Contact State/Province: Utah
Billing Contact Postal Code: 84101
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.8014131026
Billing Contact Email: clyde_john@hotmail.com
Technical Contact ID: CNEU-140924
Technical Contact Name: Clyde Johnson
Technical Contact Address1: 175 West 200 South
Technical Contact City: Salt Lake City
Technical Contact State/Province: Utah
Technical Contact Postal Code: 84101
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.8014131026
Technical Contact Email: clyde_john@hotmail.com
Name Server: NS2.CRYSTAL-WR.COM
Name Server: NS1.CRYSTAL-WR.COM
Created by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Last Updated by Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM)
Domain Registration Date: Sun Sep 24 10:31:01 GMT 2006
Domain Expiration Date: Sun Sep 23 23:59:59 GMT 2007
Domain Last Updated Date: Sun Sep 24 15:50:09 GMT 2006

DNS query

Trying "bronsard-co.biz"
Using domain server:
Name: ns1.crystal-wr.com
Address: 209.85.42.16#53
Aliases:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41037
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;bronsard-co.biz. IN A

;; ANSWER SECTION:
bronsard-co.biz. 1800 IN A 82.157.239.55
bronsard-co.biz. 1800 IN A 84.172.82.49
bronsard-co.biz. 1800 IN A 217.136.116.128
bronsard-co.biz. 1800 IN A 80.98.111.24
bronsard-co.biz. 1800 IN A 82.34.242.223

;; AUTHORITY SECTION:
bronsard-co.biz. 1800 IN NS ns2.crystal-wr.com.
bronsard-co.biz. 1800 IN NS ns1.crystal-wr.com.

Received 163 bytes from 209.85.42.16#53 in 8 ms

Debt Chamber Inc

From: Lee [address redacted]
Date: Oct 7, 2006 8:40 PM
Subject: urban job
To: [address redacted]

Good day,
Debt Chamber Inc. is an established player within the insurance
industry of UK who is currently looking for a part-time Regional
Manager to join our team.
We need Regional Managers who are Results Orientated, with Strong
Communication Skills for Established Organization.
This role will see you making financial operations, as well as
developing other business opportunities through the promotion of
insurance retail and other products to new clients.
The ideal candidate must have an understanding of managing accounts
and developing business or a knowledge of the motor dealer network;
excellent communication skills and the ability to work in an
autonomous capacity.
We offer good salary plus commission.
For further information, please e-mail to fbomb01@comcast.net
There are no entrance fees.
--
Only people with the right to work in Australia or New Zealand may
apply for this position.
For advice on obtaining an Australian visa visit http://www.australia.com

Wednesday, October 04, 2006

interested@jobcenter-online.org

Description

This appears to be only a slight variation on a recent scam under the name of apply@online-carrer.com. In fact, it includes the same phone number as that spam.

The Spam

JOB: Start earning right now!


Highly Paid Secondary Job

We are writing you on behalf well-known company founded in USA which main field of operation is financial services such as escrow services for buyers and sellers on online auctions worldwide, offered both on the closed commercial auctions (stock sales, business sale, etc) with the limited number of buyers and public online auctions such as ebay.com, amazon.com, yahoo.com etc.

This is a part time position. Your schedule will be flexible. You will need to spend on average 1-2 hours per day, Monday-Friday.

This is a work at home position. All communication will be online.

Requirements: You need to have Internet access and email.

No entrance fees or any fees at all are required. All fees related to this employment are covered by the company.

A position within our company on a trial period for one month starting from the beginning of the work will be offered to the successful applicants. During this trial period you will be receiving training and online support while working and being paid. Employees on a one month trial period are evaluated at least one week prior to the end of their trial period. The supervisor can recommend termination, during the trial period. At the completion of the trial period, the supervisor can recommend continued employment, extension of trial period, or termination.

During the trial period you will be paid 1000 EUR per month. You will also be keeping 8% commission from every payment received from a client. With the current volume of clients on average your overall income will add up to 1,800EUR per month. After the trial period your base salary will go up to 1,500 EUR per month, plus 8% commission.

After the trial period you may ask for additional hours or proceed full-time.

If you are interested in our offer and would like to know more please send the filled form to our email : interested@jobcenter-online.org Our human resources managers will contact you in 48 hours.

Full Name:
Country:
Age (or DOB):
Primary phone number:
Best time to call you:

Thank You,

Permission Settings

If you feel you received this message in error or do not wish to receive future messages, please reply to this message with remove in the subject heading. We will immediately update accordingly. We apologize for any inconvenience.

New York, 14026, USA
Phone: +1 (917) 591-7848

Domain information (for experts)

jobcenter-online.org

WHOIS query at Wed Oct 4 19:17:30 UTC 2006

Connecting to whois.publicinterestregistry.net.

Domain ID:D129713821-LROR
Domain Name:JOBCENTER-ONLINE.ORG
Created On:29-Sep-2006 01:48:44 UTC
Expiration Date:29-Sep-2007 01:48:44 UTC
Sponsoring Registrar:Online SAS (R99-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:BMN-152379
Registrant Name:Ricky DUROSEAU
Registrant Street1:2255 e 14 st
Registrant Street2:
Registrant Street3:
Registrant City:brooklyn
Registrant State/Province:NY
Registrant Postal Code:11229
Registrant Country:US
Registrant Phone:+1.3474383116
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:duroseau38@yahoo.com
Admin ID:BMN-152379
Admin Name:Ricky DUROSEAU
Admin Street1:2255 e 14 st
Admin Street2:
Admin Street3:
Admin City:brooklyn
Admin State/Province:NY
Admin Postal Code:11229
Admin Country:US
Admin Phone:+1.3474383116
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:duroseau38@yahoo.com
Tech ID:BMN-152379
Tech Name:Ricky DUROSEAU
Tech Street1:2255 e 14 st
Tech Street2:
Tech Street3:
Tech City:brooklyn
Tech State/Province:NY
Tech Postal Code:11229
Tech Country:US
Tech Phone:+1.3474383116
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:duroseau38@yahoo.com
Name Server:NSA.BOOKMYNAME.COM
Name Server:NSB.BOOKMYNAME.COM

DNS query

; <<>> DiG 9.2.4 <<>> A jobcenter-online.org @NSA.BOOKMYNAME.COM
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41663
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;jobcenter-online.org. IN A

;; ANSWER SECTION:
jobcenter-online.org. 1728 IN A 213.228.0.18

;; AUTHORITY SECTION:
jobcenter-online.org. 1728 IN NS nsa.bookmyname.com.
jobcenter-online.org. 1728 IN NS nsb.bookmyname.com.

;; ADDITIONAL SECTION:
nsa.bookmyname.com. 28800 IN A 213.228.62.20
nsb.bookmyname.com. 28800 IN A 213.228.62.30

;; Query time: 128 msec
;; SERVER: 213.228.62.20#53(NSA.BOOKMYNAME.COM)
;; WHEN: Wed Oct 4 19:22:41 2006
;; MSG SIZE rcvd: 136

Israeli Brokerage Services Ltd

Summary

This month is my first sighting of this new name. The scam itself is the same in all important respects as the Norway Consulting Group scam, and I see no reason to think that this is anything but the same phishing/jobscam gang operating under a new name. The name change may be motivated by the fact that "Norway Consulting Group" was becoming too easily uncovered as a scam, and the fact that all of their ".cn" domain names for Norway Consulting were recently suspended. The job is a money mule position.

The Spam

As usual, the message is presented in a GIF image, accompanied by "filter buster" text coloured to be invisible against the background.

Representative Images

Early instance.

Instance received on 2006-10-09, which (unlike its predecessors) was not hyperlinked to the website.

Names used as signature in image

  • Tal Alkobi

Subjects encountered

Subjects are often suffixed with a timestamp.

  • A real chance to raise much money
  • Good offer for those who are looking for a part time job
  • good part time job.
  • High salary part time job.
  • interesting part time job.
  • israeli brokerage calls your attention to the wonderful post!
  • offer for those who are looking for a part time job!!
  • part time job (2-3 hours a day)!!
  • part time job for you!!
  • Part time job with immediate payments.
  • Part time job with immediate salary payments!!
  • the best offer for those who are looking for a part time job!
  • very interesting part time job.
  • We Offer Part Time Job!
  • Work With Us! Earn More.
  • Work with us - part time job
  • Work With Us!

There may be others, but these are getting too tedious to document. I'm sure you get the idea.

Sender names encountered

Capitalisation may vary.

  • ISRAELI BROKERAGE services
  • ISRAELI BROKERAGE SERVICES Ltd

Links encountered

  • http://ibltd.biz
  • http://ibltd.hk
  • http://ibltd.org
  • http://ibsl.hk
  • http://ibsl.org
  • http://isbro.net
  • http://israelibrokeragelimiredservices.com/index.php?sect_id=6&lang=en
  • http://israelibrokerageservices.cn/index.php?sect_id=6
  • http://israelibrokerageserviceslimired.biz/index.php?sect_id=6&lang=en
  • http://israelibrokerageserviceslimired.com/index.php?sect_id=6&lang=en
  • http://israelibrokerageserviceslimired.net/index.php?sect_id=6&lang=en
  • http://israelibrokerageserviceslimired.org/index.php?sect_id=6&lang=en
  • http://israelibrokservices.hk/index.php?sect_id=6
  • http://israelibrokservicesltd.hk/index.php?sect_id=6
  • http://israelilimiredbrokerageservices.com/index.php?sect_id=6&lang=en
  • http://israelilimiredbrokerageservices.net/index.php?sect_id=6&lang=en
  • http://israelilimiredbrokerageservices.org/index.php?sect_id=6&lang=en
  • http://israeliltdbrokerageservices.cn/index.php?sect_id=6
  • http://israeliservicesbrokerage.cn/index.php?sect_id=6
  • http://israeliservicesbrokerageltd.cn/index.php?sect_id=6
  • http://ltdisraelibrokerageservices.cn/index.php?sect_id=6

Website

Domain information (for experts)

Due to the very large number and constantly changing nature of domains associated with this spam, not all domains are listed here. The sample presented should be taken as indicative of the modus operandi of the spammers; little more.

ibsl.org

WHOIS query at Mon Oct 9 15:48:38 UTC 2006

Connecting to whois.publicinterestregistry.net.

Domain ID:D130222226-LROR
Domain Name:IBSL.ORG
Created On:07-Oct-2006 10:46:34 UTC
Last Updated On:07-Oct-2006 10:49:37 UTC
Expiration Date:07-Oct-2007 10:46:34 UTC
Sponsoring Registrar:Register.com Inc. (R71-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:0695129619b87810
Registrant Name:George Gwaltney
Registrant Street1:522 Shin Oak
Registrant Street2:
Registrant Street3:
Registrant City:San Antonio
Registrant State/Province:TX
Registrant Postal Code:78233
Registrant Country:US
Registrant Phone:+1.2106566654
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:georgegwaltneyuu@yahoo.com
Admin ID:7267727618458145
Admin Name:George Gwaltney
Admin Street1:522 Shin Oak
Admin Street2:
Admin Street3:
Admin City:San Antonio
Admin State/Province:TX
Admin Postal Code:78233
Admin Country:US
Admin Phone:+1.2106566654
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:georgegwaltneyuu@yahoo.com
Tech ID:4390988619c35255
Tech Name:Domain Registrar
Tech Organization:Registercom
Tech Street1:575 8th Avenue
Tech Street2:
Tech Street3:
Tech City:New York
Tech State/Province:NY
Tech Postal Code:10018
Tech Country:US
Tech Phone:+1.9027492701
Tech Phone Ext.:
Tech FAX:+1.9027492701
Tech FAX Ext.:
Tech Email:domainregistrar@register.com
Name Server:NS1.TEAMS-CS.COM
Name Server:NS2.TEAMS-CS.COM

DNS query

Trying "ibsl.org"
host: Couldn't find server 'NS1.TEAMS-CS.COM': Name or service not known

Trying "ibsl.org"
host: Couldn't find server 'NS2.TEAMS-CS.COM': Name or service not known

WHOIS query for nameserver domain "teams-cs.com" at Mon Oct 9 15:54:56 UTC 2006

Connecting to whois.crsnic.net.

Domain Name: TEAMS-CS.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS2.TEAMS-CS.COM
Name Server: NS1.TEAMS-CS.COM
Status: REGISTRAR-HOLD
Status: REGISTRAR-LOCK
EPP Status: clientHold
EPP Status: clientDeleteProhibited
EPP Status: clientTransferProhibited
EPP Status: clientUpdateProhibited
Updated Date: 25-Sep-2006
Creation Date: 30-Jul-2006
Expiration Date: 30-Jul-2008

israelibrokeragelimiredservices.com

WHOIS query at Tue Oct 10 12:50:05 UTC 2006

Connecting to whois.crsnic.net.

Domain Name: ISRAELIBROKERAGELIMIREDSERVICES.COM
Registrar: REGISTER.COM, INC.
Whois Server: whois.register.com
Referral URL: http://www.register.com
Name Server: NS2.MB2GB.COM
Name Server: NS1.MB2GB.COM
Status: REGISTRAR-LOCK
EPP Status: clientTransferProhibited
Updated Date: 08-Oct-2006
Creation Date: 08-Oct-2006
Expiration Date: 08-Oct-2007

DNS query

Trying "israelibrokeragelimiredservices.com"
Using domain server:
Name: NS1.MB2GB.COM
Address: 72.29.93.95#53
Aliases:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41727
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;israelibrokeragelimiredservices.com. IN A

;; ANSWER SECTION:
israelibrokeragelimiredservices.com. 1800 IN A 84.254.20.235
israelibrokeragelimiredservices.com. 1800 IN A 85.176.81.251
israelibrokeragelimiredservices.com. 1800 IN A 88.72.214.124
israelibrokeragelimiredservices.com. 1800 IN A 62.227.236.32
israelibrokeragelimiredservices.com. 1800 IN A 82.83.123.156

;; AUTHORITY SECTION:
israelibrokeragelimiredservices.com. 1800 IN NS ns2.mb2gb.com.
israelibrokeragelimiredservices.com. 1800 IN NS ns1.mb2gb.com.

Received 175 bytes from 72.29.93.95#53 in 91 ms

israelibrokerageservices.cn

WHOIS query at Sat Oct 7 08:05:57 UTC 2006

Using server whois.cnnic.net.cn.
Query string: "israelibrokerageservices.cn"

Domain Name: israelibrokerageservices.cn
ROID: 20060908s10001s79119686-cn
Domain Status: clientHold
Domain Status: clientDeleteProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientTransferProhibited
Domain Status: clientRenewProhibited
Registrant Organization: LOWRIE
Registrant Name: NATHAN
Administrative Email: nathanlowrie@mail.com
Sponsoring Registrar: CSL Computer Service (d.b.a. Joker.com)
Name Server:ns1.fopen-ph.com
Name Server:ns2.fopen-ph.com
Registration Date: 2006-09-08 20:22
Expiration Date: 2007-09-08 20:22

DNS query

dig: Couldn't find server 'ns1.fopen-ph.com': Name or service not known

DNS query for nameserver

; <<>> DiG 9.2.4 <<>> NS fopen-ph.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6676
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;fopen-ph.com. IN NS

;; Query time: 142 msec
;; SERVER: 207.99.0.2#53(207.99.0.2)
;; WHEN: Sat Oct 7 08:11:59 2006
;; MSG SIZE rcvd: 30

Summary: this domain refers to nameservers which do not exist, and therefore will not work at this time.

israelibrokerageserviceslimired.biz

WHOIS query at Tue Oct 10 13:02:34 UTC 2006

Using server whois.nic.biz.
Query string: "israelibrokerageserviceslimired.biz"

Domain Name: ISRAELIBROKERAGESERVICESLIMIRED.BIZ
Domain ID: D14799278-BIZ
Sponsoring Registrar: REGISTER.COM
Sponsoring Registrar IANA ID: 9
Domain Status: clientTransferProhibited
Registrant ID: 0163074592D33616
Registrant Name: David DeBoer
Registrant Address1: 3489 West Minster Way
Registrant City: Napa
Registrant State/Province: CA
Registrant Postal Code: 94558
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.7072544910
Registrant Email: daviddeboerrr@yahoo.com
Administrative Contact ID: 4984917592AB5044
Administrative Contact Name: David DeBoer
Administrative Contact Address1: 3489 West Minster Way
Administrative Contact City: Napa
Administrative Contact State/Province: CA
Administrative Contact Postal Code: 94558
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.7072544910
Administrative Contact Email: daviddeboerrr@yahoo.com
Billing Contact ID: 6760068592C33115
Billing Contact Name: Domain Registrar
Billing Contact Organization: Registercom
Billing Contact Address1: 575 8th Avenue
Billing Contact City: New York
Billing Contact State/Province: NY
Billing Contact Postal Code: 10018
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.9027492701
Billing Contact Facsimile Number: +1.9027492701
Billing Contact Email: domainregistrar@register.com
Technical Contact ID: 9869455592E3D119
Technical Contact Name: Domain Registrar
Technical Contact Organization: Registercom
Technical Contact Address1: 575 8th Avenue
Technical Contact City: New York
Technical Contact State/Province: NY
Technical Contact Postal Code: 10018
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.9027492701
Technical Contact Facsimile Number: +1.9027492701
Technical Contact Email: domainregistrar@register.com
Name Server: NS1.MB2GB.COM
Name Server: NS2.MB2GB.COM
Created by Registrar: REGISTER.COM
Last Updated by Registrar: REGISTER.COM
Domain Registration Date: Sun Oct 08 14:35:04 GMT 2006
Domain Expiration Date: Sun Oct 07 23:59:59 GMT 2007
Domain Last Updated Date: Sun Oct 08 14:37:34 GMT 2006

DNS query

Trying "israelibrokerageserviceslimired.biz"
Using domain server:
Name: NS1.MB2GB.COM
Address: 72.29.93.95#53
Aliases:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11242
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;israelibrokerageserviceslimired.biz. IN A

;; ANSWER SECTION:
israelibrokerageserviceslimired.biz. 1800 IN A 84.176.206.81
israelibrokerageserviceslimired.biz. 1800 IN A 84.254.20.235
israelibrokerageserviceslimired.biz. 1800 IN A 62.227.236.32
israelibrokerageserviceslimired.biz. 1800 IN A 68.53.173.12
israelibrokerageserviceslimired.biz. 1800 IN A 82.49.126.12

;; AUTHORITY SECTION:
israelibrokerageserviceslimired.biz. 1800 IN NS ns2.mb2gb.com.
israelibrokerageserviceslimired.biz. 1800 IN NS ns1.mb2gb.com.

Received 178 bytes from 72.29.93.95#53 in 36 ms

israeliltdbrokerageservices.cn

WHOIS query at Wed Oct 4 17:54:22 UTC 2006

Using server whois.cnnic.net.cn.
Query string: "israeliltdbrokerageservices.cn"

Domain Name: israeliltdbrokerageservices.cn
ROID: 20060908s10001s79119933-cn
Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited
Domain Status: clientRenewProhibited
Domain Status: clientUpdateProhibited
Registrant Name: Bridgette T. Rodgers
Administrative Email: bridgettetrodgers@yahoo.co.uk
Sponsoring Registrar: CSL Computer Service (d.b.a. Joker.com)
Name Server:ns1.gwjirr.com
Name Server:ns2.gwjirr.com
Registration Date: 2006-09-08 20:56
Expiration Date: 2007-09-08 20:56

DNS Query

; <<>> DiG 9.2.4 <<>> A israeliltdbrokerageservices.cn @ns1.gwjirr.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49643
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;israeliltdbrokerageservices.cn. IN A

;; ANSWER SECTION:
israeliltdbrokerageservices.cn. 1800 IN A 85.181.6.194
israeliltdbrokerageservices.cn. 1800 IN A 172.186.187.219
israeliltdbrokerageservices.cn. 1800 IN A 69.37.180.207
israeliltdbrokerageservices.cn. 1800 IN A 82.240.104.190
israeliltdbrokerageservices.cn. 1800 IN A 85.176.17.33

;; AUTHORITY SECTION:
israeliltdbrokerageservices.cn. 1800 IN NS ns2.gwjirr.com.
israeliltdbrokerageservices.cn. 1800 IN NS ns1.gwjirr.com.

;; ADDITIONAL SECTION:
ns1.gwjirr.com. 1800 IN A 195.170.173.8
ns2.gwjirr.com. 1800 IN A 66.78.51.10

;; Query time: 110 msec
;; SERVER: 195.170.173.8#53(ns1.gwjirr.com)
;; WHEN: Wed Oct 4 18:02:13 2006
;; MSG SIZE rcvd: 206

israeliservicesbrokerage.cn

WHOIS query at Thu Oct 5 09:31:29 UTC 2006

Using server whois.cnnic.net.cn.
Query string: "israeliservicesbrokerage.cn"

Domain Name: israeliservicesbrokerage.cn
ROID: 20060908s10001s79120051-cn
Domain Status: clientRenewProhibited
Domain Status: clientDeleteProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientTransferProhibited
Registrant Name: Debra Salerno
Administrative Email: debrasalerno@usa.com
Sponsoring Registrar: CSL Computer Service (d.b.a. Joker.com)
Name Server:ns1.gwjirr.com
Name Server:ns2.gwjirr.com
Registration Date: 2006-09-08 21:13
Expiration Date: 2007-09-08 21:13

DNS query

; <<>> DiG 9.2.4 <<>> A israeliservicesbrokerage.cn @ns1.gwjirr.com
;; global options: printcmd
;; connection timed out; no servers could be reached

; <<>> DiG 9.2.4 <<>> A israeliservicesbrokerage.cn @ns2.gwjirr.com
;; global options: printcmd
;; connection timed out; no servers could be reached

israeliservicesbrokerageltd.cn

WHOIS query at Wed Oct 4 18:53:56 UTC 2006

Using server whois.cnnic.net.cn.
Query string: "israeliservicesbrokerageltd.cn"

Domain Name: israeliservicesbrokerageltd.cn
ROID: 20060908s10001s79120148-cn
Domain Status: clientDeleteProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientTransferProhibited
Domain Status: clientRenewProhibited
Registrant Name: Joseph Fix
Administrative Email: josephfixxx@yahoo.com
Sponsoring Registrar: CSL Computer Service (d.b.a. Joker.com)
Name Server:ns1.gwjirr.com
Name Server:ns2.gwjirr.com
Registration Date: 2006-09-08 21:26
Expiration Date: 2007-09-08 21:26

DNS query

; <<>> DiG 9.2.4 <<>> A israeliservicesbrokerageltd.cn @ns1.gwjirr.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11621
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;israeliservicesbrokerageltd.cn. IN A

;; ANSWER SECTION:
israeliservicesbrokerageltd.cn. 1800 IN A 84.171.84.224
israeliservicesbrokerageltd.cn. 1800 IN A 85.181.6.194
israeliservicesbrokerageltd.cn. 1800 IN A 172.174.230.56
israeliservicesbrokerageltd.cn. 1800 IN A 69.37.180.207
israeliservicesbrokerageltd.cn. 1800 IN A 82.240.104.190

;; AUTHORITY SECTION:
israeliservicesbrokerageltd.cn. 1800 IN NS ns1.gwjirr.com.
israeliservicesbrokerageltd.cn. 1800 IN NS ns2.gwjirr.com.

;; ADDITIONAL SECTION:
ns1.gwjirr.com. 1800 IN A 195.170.173.8
ns2.gwjirr.com. 1800 IN A 66.78.51.10

;; Query time: 110 msec
;; SERVER: 195.170.173.8#53(ns1.gwjirr.com)
;; WHEN: Wed Oct 4 18:55:28 2006
;; MSG SIZE rcvd: 206

ltdisraelibrokerageservices.cn

WHOIS query at Thu Oct 5 23:21:54 UTC 2006

Using server whois.cnnic.net.cn.
Query string: "ltdisraelibrokerageservices.cn"

Domain Name: ltdisraelibrokerageservices.cn
ROID: 20060908s10001s79119801-cn
Domain Status: clientUpdateProhibited
Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited
Domain Status: clientRenewProhibited
Registrant Name: DAVID STONE
Administrative Email: davidstoneee@yahoo.com
Sponsoring Registrar: CSL Computer Service (d.b.a. Joker.com)
Name Server:ns1.fopen-ph.com
Name Server:ns2.fopen-ph.com
Registration Date: 2006-09-08 20:37
Expiration Date: 2007-09-08 20:37

DNS Query

; <<>> DiG 9.2.4 <<>> A ltdisraelibrokerageservices.cn @ns1.fopen-ph.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3186
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;ltdisraelibrokerageservices.cn. IN A

;; ANSWER SECTION:
ltdisraelibrokerageservices.cn. 1800 IN A 68.249.103.227
ltdisraelibrokerageservices.cn. 1800 IN A 83.93.28.2
ltdisraelibrokerageservices.cn. 1800 IN A 84.56.61.26
ltdisraelibrokerageservices.cn. 1800 IN A 84.162.251.108
ltdisraelibrokerageservices.cn. 1800 IN A 172.164.182.69

;; AUTHORITY SECTION:
ltdisraelibrokerageservices.cn. 1800 IN NS ns1.fopen-ph.com.
ltdisraelibrokerageservices.cn. 1800 IN NS ns2.fopen-ph.com.

;; Query time: 36 msec
;; SERVER: 72.29.93.95#53(ns1.fopen-ph.com)
;; WHEN: Thu Oct 5 23:24:32 2006
;; MSG SIZE rcvd: 176