The Purpose of This Post Is To ALERT You That The Job You Are About To APPLY For or May Have Applied For or is CONSIDERING APPLYING For Is 
Fraudulent. A LEGITIMATE COMPANY IDENTITY OR AN INDIVIDUAL IDENTITY HAS BEEN STOLEN OR A BOGUS ONE CREATED
These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram -Essentially You Become A Money or RePackage Mule
Money Mule Explained
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule
Address lookup
| canonical name | newcitymedz.com. |
| aliases | http://www.newcitymedz.com |
| addresses | 85.17.161.106 |
Domain Whois record
Queried whois.internic.net with “dom newcitymedz.com”…
Domain Name: NEWCITYMEDZ.COM
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS01.NEWCITYMEDZ.COM
Name Server: NS02.NEWCITYMEDZ.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 02-jul-2010
Creation Date: 02-jul-2010
Expiration Date: 02-jul-2011
Last update of whois database: Fri, 20 Aug 2010 09:23:30 UTC
Queried whois.godaddy.com with “newcitymedz.com”…
Registrant:
European Hosting Agency
Industriepark 15 a
Haarlem, Noord Holland 2031BE
Netherlands
Registered through: GoDaddy.com, Inc. http://www.godaddy.com
Domain Name: NEWCITYMEDZ.COM
Created on: 02-Jul-10
Expires on: 02-Jul-11
Last Updated on: 02-Jul-10
Administrative Contact:
Sidorov, Ryan D. noreply@newcitymedz.com
European Hosting Agency
Industriepark 15 a
Haarlem, Noord Holland 2031BE
Netherlands
+31.0203125568 Fax — +31.0203125569
Technical Contact:
Sidorov, Ryan D. noreply@newcitymedz.com
European Hosting Agency
Industriepark 15 a
Haarlem, Noord Holland 2031BE
Netherlands
+31.0203125568 Fax — +31.0203125569
Domain servers in listed order:
NS01.NEWCITYMEDZ.COM
NS02.NEWCITYMEDZ.COM
Network Whois record
Queried whois.ripe.net with “-B 85.17.161.106″…
Information related to ‘85.17.161.0 – 85.17.161.255’
inetnum: 85.17.161.0 – 85.17.161.255
netname: LEASEWEB
descr: LeaseWeb
descr: P.O. Box 93054
descr: 1090BB AMSTERDAM
descr: Netherlands
descr: http://www.leaseweb.com
remarks: Please send email to “abuse@leaseweb.com” for complaints
remarks: regarding portscans, DoS attacks and spam.
remarks: INFRA-AW
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: OCOM-MNT
changed: ripe@leaseweb.com 20070601
source: RIPE
person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: abuse@leaseweb.com
e-mail: ripe@leaseweb.com
nic-hdl: LSW1-RIPE
notify: ripe@leaseweb.com
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050607
changed: ripe@ocom.com 20060215
changed: ripe@ocom.com 20060608
changed: ripe@ocom.com 20080603
source: RIPE
Information related to ‘85.17.0.0/16AS16265’
route: 85.17.0.0/16
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
changed: ripe@ocom.com 20050311
changed: ripe@ocom.com 20070610
source: RIPE
DNS records
| name | class | type | data | time to live | |||||||||||||||
| http://www.newcitymedz.com | IN | CNAME | newcitymedz.com | 14400s | (04:00:00) | ||||||||||||||
| newcitymedz.com | IN | MX |
|
14400s | (04:00:00) | ||||||||||||||
| newcitymedz.com | IN | A | 85.17.161.106 | 14400s | (04:00:00) | ||||||||||||||
| newcitymedz.com | IN | SOA |
|
86400s | (1.00:00:00) | ||||||||||||||
| newcitymedz.com | IN | NS | ns01.nlcityhosting.com | 86400s | (1.00:00:00) | ||||||||||||||
| newcitymedz.com | IN | NS | ns02.nlcityhosting.com | 86400s | (1.00:00:00) | ||||||||||||||
| 106.161.17.85.in-addr.arpa | IN | PTR | ns01.newcitymeds.com | 86400s | (1.00:00:00) | ||||||||||||||
Domains sharing name servers:
- http://www.ed-solution.com
- http://www.ed-sup.com
- http://www.edcollection.com
- http://www.edcustomer.com
- http://www.edselection.com
- http://www.luxpharmacy.com
- http://www.manfriendly.com
- http://www.partners-dns.com
- http://www.perfectgenerics.com
- http://www.prescriptionspoint.com
- http://www.propeciahair.com
- http://www.rx-partners.biz
- http://www.rxtrusted.com
- http://www.secureccpay.com
- http://www.somaextreme.com
- http://www.trustedtablets.com
- http://www.trustedtabs.com
- http://www.ultimatepillstore.com
- http://www.viagracomparison.com
- http://www.yoursecurebilling.com
Domains sharing name servers under another name
- http://www.aviagra.net
- http://www.edhelp.biz
- http://www.ezmedz.net
- http://www.mediaplace.biz
- http://www.meds4all.net
- http://www.rxp-alive.com
- feeds.mysecurebilling.com
- mail.mysecurebilling.com
- http://www.raypharma.com
- http://www.buyviagra-online.com
- http://www.buyvigrxpills.com
- http://www.edhealthshop.com
- http://www.extenzedeal.com
- http://www.extenzediscount.com
- http://www.myrxmart.com
- http://www.norxsexpills.com
- http://www.ordercheapviagra.com
- http://www.proactol4u.com
- http://www.rxnetshop.com
- http://www.samsexpills.com
- http://www.viagra0.com
- http://www.viagraorviagra.com
- http://www.cheap-edpills.com
- http://www.xmedicines.com
- http://www.youredstore.com
74.86.81.154
- http://www.theindiantv.com
- http://www.crocmint.com
- http://www.croc2host.com
- ns1.croc2host.com
- ns2.croc2host.com
- http://www.caliplus.org
- http://www.croc2host.com
- http://www.crocitalia.com
- http://www.crocmintdb2.com
- http://www.securedinfo.net
- http://www.vigaplus.org
- http://www.vitopay.com
- http://www.vitosaver.com
- http://www.vitoslim.com
- http://www.mail.hoodia-absolute.com
- http://www.hoodia-absolute.com
Payment processor / tracking (bogus)
- http://www.securedinfo.net
- http://www.bill.rx-partners.biz
- http://www.rx-partners.biz
- http://www.topsecured.net
- http://www.securedtrack.com
- http://www.mysecurebilling.com
- http://www.vigrxplus.com
- http://www.extenzedeal.com
- http://www.shareasale.com
- http://www.zenerx.com
- http://www.everestnutrition.com
- http://www.4rx.com
- http://www.proactol.com
- http://www.vigaplus.com
scamFRAUDalert®Pharmacies Checker 