Job scam quick guide: it's a scam if...

  • they want you to collect and forward money in any way (a "money mule" job). You'll wind up engaged in money laundering, personally defrauded via expertly forged cheques, money orders, etc, or defrauding someone else who pays for goods that never arrive.
  • they want you to receive packages and reship them somewhere else. The goods will have been obtained fraudulently, and they're just using you to make the shipping address appear local. You will be aiding fraud.
  • they want up-front payment (either to them or someone else) of any sort for anything before you can get the job. This is advance fee fraud: there is no job -- it's just a big con to extract money from you.
  • they want you to buy any kind of "membership" or "kit" in order to start. Forget it -- it's not a real job at all: they're trying to sell you something, and they're probably making a bunch of other false claims about it if they're pitching it as a "job".
  • it's a job offer, and it's spam. There are LOTS of these scams about, as you can see.

Wednesday, May 09, 2007

Mkardo and Korduna

More money mule job scams. I don't have a resume on monster.com, but I'm sure that many who receive this spam do. A search reveals that an identical scam is presently being run under the name "Korduna". The "Korunda" site also contains a mistaken reference to "Criovat", but " criovat.com" is no longer active.

   Domain Name: MKARDO.COM <-- scam
   Registrar: TUCOWS INC.
   Whois Server: whois.tucows.com
   Referral URL: http://domainhelp.opensrs.net
   Name Server: NS1.SERVAGE.NET
   Name Server: NS2.SERVAGE.NET
   Name Server: NS3.SERVAGE.NET
   Name Server: NS4.SERVAGE.NET
   Updated Date: 29-apr-2007
   Creation Date: 29-apr-2007 <-- new
   Expiration Date: 29-apr-2008

   Domain Name: KORDUNA.COM <-- scam
   Registrar: ONLINENIC, INC.
   Whois Server: whois.OnlineNIC.com
   Referral URL: http://www.OnlineNIC.com
   Name Server: NS1.W-HOST.RU
   Name Server: NS2.W-HOST.RU
   Updated Date: 26-apr-2007
   Creation Date: 26-apr-2007 <-- new
   Expiration Date: 26-apr-2008

Circumstantial evidence suggests that criovat.com was part of the same scam, but it's now a parked domain available for sale. I consider it tainted, and wouldn't want to be associated with it.

   Domain Name: CRIOVAT.COM <-- formerly the same scam, it seems
   Registrar: INTERLAKENAMES.COM LLC
   Whois Server: whois.interlakenames.com
   Referral URL: http://www.interlakenames.com
   Name Server: DNS1.OREGONNAMES.COM
   Name Server: DNS2.OREGONNAMES.COM
   Updated Date: 31-mar-2007
   Creation Date: 26-mar-2007 <-- recent
   Expiration Date: 26-mar-2008

---------- Forwarded message ----------
From: [redacted] <[redacted]@gmail.com>
Date: 09-May-2007 22:52
Subject: Monster.com
To: [redacted]@gmail.com
Cc: [redacted]@ gmail.com, [redacted]@gmail.com, ideceive@gmail.com

Good morning. We have read your CV\\resume on MONSTER.COM, your are suitable for work in our Mkardo company. So this dutes and conditions of your work:

Duties: financial operations with the company's wholesale lots. You will have to collect the money that the client transfers onto your bank account (the bank is chosen according to the clients' regulations), cash them and transfer to us.

Conditions: Monthly salary $2000, after a 1-month probation period you will be given a 15% salary rise and will receive your paychecks bi-weekly. Possibility of career growth.

If you are interested in this job and you really want to work with us, send us confirmation that you are ready to work in our company , then we will send you contract, you should sign it and we will begin to co-operate.

For more info visit our web-site: http://mkardo.com Send your resume on our e-mail: mkardo@hotpop.com

Thank you. With best regards, administration of Mkardo company.

1 comment:

Spotter said...

On the matter of "CrioVat", a little further digging reveals that the following domains are associated with the same scam.

Domain Name: CRIOVATCOMPANY.COM <-- scam
Registrar: ONLINENIC, INC.
Whois Server: whois.OnlineNIC.com
Referral URL: http://www.OnlineNIC.com
Name Server: NS1.W-HOST.RU
Name Server: NS2.W-HOST.RU
Updated Date: 26-jan-2007
Creation Date: 26-jan-2007 <-- fairly recent
Expiration Date: 26-jan-2008

Domain Name: CRIO7.COM <-- scam
Registrar: TUCOWS INC.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: NS1.SERVAGE.NET
Name Server: NS2.SERVAGE.NET
Name Server: NS3.SERVAGE.NET
Name Server: NS4.SERVAGE.NET
Updated Date: 11-mar-2007
Creation Date: 11-mar-2007 <-- recent
Expiration Date: 11-mar-2008