WhoIs – www.newcitymedz.com

The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is Scam Alert 1Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule

Money Mule Explained

Washingtonpost.com by Brian Kerbs

Interview With A Money Mule


Address lookup

canonical name newcitymedz.com.
aliases http://www.newcitymedz.com
addresses 85.17.161.106

Domain Whois record

Queried whois.internic.net with “dom newcitymedz.com”…
Domain Name: NEWCITYMEDZ.COM
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS01.NEWCITYMEDZ.COM
Name Server: NS02.NEWCITYMEDZ.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 02-jul-2010
Creation Date: 02-jul-2010
Expiration Date: 02-jul-2011

Last update of whois database: Fri, 20 Aug 2010 09:23:30 UTC
Queried whois.godaddy.com with “newcitymedz.com”…
Registrant:
European Hosting Agency
Industriepark 15 a
Haarlem, Noord Holland 2031BE
Netherlands

Registered through: GoDaddy.com, Inc. http://www.godaddy.com
Domain Name: NEWCITYMEDZ.COM
Created on: 02-Jul-10
Expires on: 02-Jul-11
Last Updated on: 02-Jul-10

Administrative Contact:
Sidorov, Ryan D. noreply@newcitymedz.com
European Hosting Agency
Industriepark 15 a
Haarlem, Noord Holland 2031BE
Netherlands
+31.0203125568 Fax — +31.0203125569

Technical Contact:
Sidorov, Ryan D. noreply@newcitymedz.com
European Hosting Agency
Industriepark 15 a
Haarlem, Noord Holland 2031BE
Netherlands
+31.0203125568 Fax — +31.0203125569

Domain servers in listed order:
NS01.NEWCITYMEDZ.COM
NS02.NEWCITYMEDZ.COM

Network Whois record

Queried whois.ripe.net with “-B 85.17.161.106″…
Information related to ‘85.17.161.0 – 85.17.161.255’

inetnum: 85.17.161.0 – 85.17.161.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: INFRA-AW
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: OCOM-MNT
changed: ripe@leaseweb.com 20070601
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE

Information related to ‘85.17.0.0/16AS16265’

route: 85.17.0.0/16
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050311
changed: ripe@ocom.com 20070610
source: RIPE

DNS records

name class type data time to live
http://www.newcitymedz.com IN CNAME newcitymedz.com 14400s (04:00:00)
newcitymedz.com IN MX
preference: 0
exchange: newcitymedz.com
14400s (04:00:00)
newcitymedz.com IN A 85.17.161.106 14400s (04:00:00)
newcitymedz.com IN SOA
server: ns01.nlcityhosting.com
email: admin.nlcityhosting.com
serial: 2010070202
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
newcitymedz.com IN NS ns01.nlcityhosting.com 86400s (1.00:00:00)
newcitymedz.com IN NS ns02.nlcityhosting.com 86400s (1.00:00:00)
106.161.17.85.in-addr.arpa IN PTR ns01.newcitymeds.com 86400s (1.00:00:00)

Domains sharing name servers:

Domains sharing name servers under another name

74.86.81.154

Payment processor / tracking (bogus)

Leave a Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: