us-trades.com

The Purpose of this post is to ALERT you that the job you are about to apply for orscamalert may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of an individual or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK  or OFFSHORE BANK ACCOUNT.

 Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained 
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Email header analysis report
All valid IP Addresses found in the header.
Ip Address 3rd Party Info Provider City Flag Country
* 66.154.101.90 Check 66.154.101.90 at Senderbase.org Check 66.154.101.90 at Reputationauthority.org Assertivenet Vancouver Canada
190.239.193.199 Check 190.239.193.199 at Senderbase.org Check 190.239.193.199 at Reputationauthority.org Telefonica Del Peru Lima Peru
98.138.213.184 Check 98.138.213.184 at Senderbase.org Check 98.138.213.184 at Reputationauthority.org Yahoo Sunnyvale United States

*Probable originating IP address

From  Fri Aug 30 21:13:13 2013
X-Apparently-To:  via 98.138.213.184; Sat, 31 Aug 2013 04:13:05 +0000
Return-Path: <sitl3@google.com>
X-YahooFilteredBulk: 190.239.193.199
Received-SPF: softfail (transitioning domain of google.com does not designate 190.239.193.199 as permitted sender)
X-YMailISG: XxkYaIIWLDu0HCgHitGVwZS2wR_Z0zBmBtoJh2VTQfFFwKPK
_mhJvsb7OMTA4oKbxxGz7SSpeGLQpAVdJORDMlAZUV7RhObUnbQROT3jVIwN
iU71WT83p2VISwxbmOOsmoplniZTRknqCwUoH1.X7euNtOrUBJXsOs8eWVDC
nMusZfNFtlGi4GqYvLDTPu.wcsHHg91JlxNh9QP4bb8sa5gbiW3g7UTggBZ5
yRL_WTdN.0ijrLvDypZuu7P1R_vOA8u40lJ8SJq4gYKwjFZGnPgut51AzXoE
OyudBKxPytsWtULkkhIEXggBv0JvaWJPY4NDEZr9X7mqDMGCTgPF3jA7vywH
mSqqLZ5oZmaDAjO8mulKyqUljYrM1i5cYys5Y9g2qd9ZDRgXFE5LGLaq5kVc
AoL6A4n3MAzenn_V.u9hr268s3PV8.ydiy7TmbL5wIG_sTb19pzGBedbhrwY
EQOrRfvHDS7SeD5trSLit6Wl6Ut1grX3_JnCheqFsuYmdEjyP3t5jkyMOvfk
U5YRi8DdaePW7JihA4EETAoPOi6Gdsxf0ToOswGFbCS4XsKplUpyixnZrbc1
MDKCmqim7zZaDHlw5sIXognbfjUj.7ltUG1ZjfUu6KeSSlUOXjXJS3YFTUH9
Z1TDrnT1uEbQiMdhPYuot9OrVg2xuVptdJkMzkI8Qo5wP3kF.7PZrJKW837R
1A4sBeyB8DHwbMMx2TJOZHQqLZ7iG8Vhntm98kgMDRNXWk2svv5onpzCj3Uu
J20A8nMPlZxUWmrOa0Plqn0PL_OSbVkPw2BPC4kVhGjbwBj.67aYo0U1PzjY
.w5xn00ikOhJWa1onUWXlSX2XEj6znKyLNs4YEieNXRFhR_1NoMhDnKcyDmF
3rzvHty85J8T_ww6S9PfKhrB54llUbsFOPNZilKOPxfWtgLy7bsw1YkETxyZ
pVt1ICqqLT_U7KZ6KaNcjmM8I1SM7.fUPjIRZcIKhT3QXzoNM1UUlEpChPhu
ZvEzPZ826XV96h3UTJIvPR4WGFivzO7GeIPBAhI3qXDWHvQEEvrcb4meGsvc
dY5.AzXjQ8LwFnFNZlPLan_ALDUrM7p_kYgLCjdOZBI4B0AfqI0swAGP_TMm
wM_ccyPqcUq9Zd0qLlk4q.fMfkjFwJVIIycoZyTSrlC1ay1q4X3GjBAH.QYb
KrGjPDKCDaem07vl_KVVLU9Y.BwLICwuvYlDKURnx9OJLR7bhjKAF.1Mem1I
sDk-

  1. googleapp-consult.com
  2. googleapps-euro.com
  3. worlds-trade.com
  4. trades-consult.com
  5. worlds-diploms.com
  6. desyscabackup.com

IP Address – 108.160.154.114 – (10 domains)

  1. http://www.casaraiz.com
  2. http://www.josecuello.com
  3. http://www.misskathy.net
  4. http://www.fondoculturanarino.org
  5. http://www.grafikando.co
  6. http://www.inmobiliariagomezchaljubb.com
  7. http://www.misskathy.net
  8. http://www.sexyavisos.com
  9. http://www.sintesoft.com.co
  10. http://www.tropicoweb.com

X-Originating-IP: [190.239.193.199]
Authentication-Results: mta1043.sbc.mail.ne1.yahoo.com  from=sbcglobal.net; domainkeys=neutral (no sig);  from=sbcglobal.net; dkim=neutral (no sig)
Received: from 127.0.0.1  (EHLO google.com) (190.239.193.199)
by mta1043.sbc.mail.ne1.yahoo.com with SMTP; Sat, 31 Aug 2013 04:13:05 +0000
Received: from [66.154.101.90] (helo=qmzyoa.qknelofwagajnz.ru)
by  with esmtpa (Exim 4.69)
(envelope-from )
id 1MMYXV-5770jx-69
for  Fri, 30 Aug 2013 21:13:13 -0700
Date: Fri, 30 Aug 2013 21:13:13 -0700
From:
X-Mailer: The Bat! (v2.01) Educational
X-Priority: 3 (Normal)
Message-ID: <4177623093.P26EZICB889019@prvuzfqdh.ccwtgqle.biz>
To: scamFRAUDalert
Subject: New job vacancy – see details
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Content-Length: 725

While welcoming you to this hiring process, we would like to inform you about the job and the benefits in it for you.

You do not have to pay us or deposit any money to start working for us.
This is the perfect opportunity for people on maternity leave, recently retired individuals,
and people taking a break from their careers, or anyone looking for part-time work to augment their income.

You will be working for a minimum of 20 hours a week (2 to 8 hours a day) with flexible working hours
and drawing a monthly salary of US $2000 plus commissions.

We work from Monday 9 am to 5 pm and go home at 1 pm on Saturdays.
If you are interested in this position, please call or email us.

our contacts: Augustus@us-trades.com

Advertisements

One thought on “us-trades.com

  1. SFA Reporter says:

    Address lookup
    lookup failed us-trades.com
    Could not find an IP address for this domain name.
    Domain Whois record

    Queried whois.internic.net with “dom us-trades.com”…

    Domain Name: US-TRADES.COM
    Registrar: BIZCN.COM, INC.
    Whois Server: whois.bizcn.com
    Referral URL: http://www.bizcn.com
    Name Server: NS1.ELCACAREO.NET
    Name Server: NS2.ELCACAREO.NET
    Status: clientDeleteProhibited
    Status: clientTransferProhibited
    Updated Date: 30-aug-2013
    Creation Date: 30-aug-2013
    Expiration Date: 30-aug-2014

    >>> Last update of whois database: Sat, 31 Aug 2013 12:41:17 UTC <<<

    Queried whois.bizcn.com with "us-trades.com"…

    Domain name: us-trades.com

    Registrant Contact:
    Patricia M. Martucci
    Patricia Martucci info@us-trades.com
    719-489-3506 fax: 719-489-3434
    3491 River Road
    Rye CO 81069
    us

    Administrative Contact:
    Patricia Martucci info@us-trades.com
    719-489-3506 fax: 719-489-3434
    3491 River Road
    Rye CO 81069
    us

    Technical Contact:
    Patricia Martucci info@us-trades.com
    719-489-3506 fax: 719-489-3434
    3491 River Road
    Rye CO 81069
    us

    Billing Contact:
    Patricia Martucci info@us-trades.com
    719-489-3506 fax: 719-489-3434
    3491 River Road
    Rye CO 81069
    us

    DNS:
    ns1.elcacareo.net
    ns2.elcacareo.net

    Created: 2013-08-30
    Expires: 2014-08-30

    Network Whois record

    Don't have an IP address for which to get a record
    DNS records
    name class type data time to live
    us-trades.com IN SOA
    server: ns1.elcacareo.net
    email:
    serial: 1377952502
    refresh: 60
    retry: 120
    expire: 1048576
    minimum ttl: 900
    900s (00:15:00)
    us-trades.com IN NS ns1.elcacareo.net 900s (00:15:00)
    us-trades.com IN NS ns2.elcacareo.net 900s (00:15:00)
    us-trades.com IN MX
    preference: 10
    exchange: mx.us-trades.com

Leave A Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s