express-shipping.net ~ express-shipping.org

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT.

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

The identity of an individual or entity have been stolen along with fund from their bank accounts. You are being recruited to wire transfer these funds either by WESTERN UNION, MONEYGRAM, into your bank, a DOMESTIC BANK or FOREIGN BANK ACCOUNT

  1. Understanding The Cyber Theft Ring
  2. Money Mule Explained
  3. Protecting Yourself Against Money Mule
  4. Washingtonpost.com by Brian Kerbs
  5. Interview With A Money Mule
  6. Bobbear.co.UK ~ Historical Money Mule Sites

Optimus Consulting Group ~ optimus-consulting.org ~ optimus-consulting.biz
____________________

express-shipping

31.193.133.167 resolves to 31-193-133-167.static.as29550.net.
The following A records are set to 31.193.133.167:

  1. abc-solutions-uk.org
  2. best-way-corp.biz
  3. best-way-outsource-ltd.org
  4. consult-compass-us.org
  5. dynamite-solutions.com
  6. dynamitesolutions-ltd.net
  7. folcongroupinc.biz
  8. infotech-directuk.org
  9. ship-expressinc.com
  10. ship-expressinc.net
  11. ukachall-ltd.org
  12. uksolution-management.org
  13. us-folcongroup.org
  14. d-strong-group.com
  15. david-strong-group.com
  16. d-stronggroup.com
  17. express-shipping.net
  18. jcglobaldelivery.com
  19. independent-post.net
  20. ww-mailexpress.com
  21. uts-freight.com
  22. ems-freight.com
  23. groveerfininc.blogspot.com
  24. wtransports.wordpress.com

5 thoughts on “express-shipping.net ~ express-shipping.org

  1. Ed D says:

    http://www.express-shipping.net
    http://www.express-shipping.eorg
    http://www.express-shipping.eu

    Make it http://www.express-shipping.org and re-write the story. I almost fell for it…

    Headquarters Address:
    Express Shipping, LLC.
    705 Olive Street
    Saint Louis, Missouri 63101
    United States

    Certificate of Organization
    Missouri Secretary of State Official Website Authenticity
    Articles of Organization of Express Shipping

    Phone/Fax:
    +1 (231) 432-3496
    +1 (314) 270-5563

    General Information:
    info@express-shipping.org

    Customer Service:
    service@express-shipping.org

  2. SFA Reporter says:

    Address lookup

    canonical name express-shipping.org.
    aliases
    addresses 178.208.83.27
    Domain Whois record

    Queried whois.publicinterestregistry.net with “express-shipping.org”…

    Domain ID:D164757104-LROR
    Domain Name:EXPRESS-SHIPPING.ORG
    Created On:19-Feb-2012 09:21:46 UTC
    Last Updated On:22-Feb-2013 10:31:19 UTC
    Expiration Date:19-Feb-2014 09:21:46 UTC
    Sponsoring Registrar:Regtime Ltd. (R1602-LROR)
    Status:OK
    Registrant ID:CO1104491-RT
    Registrant Name:Express Shipping, LLC
    Registrant Organization:Express Shipping, LLC
    Registrant Street1:705 Olive Street
    Registrant City:Saint Louis
    Registrant State/Province:MO
    Registrant Postal Code:63101
    Registrant Country:US
    Registrant Phone:+1.8882534646
    Registrant FAX:+1.3147549977
    Registrant Email:info@express-shipping.net

    Admin ID:CA1104491-RT
    Admin Name:Express Shipping, LLC
    Admin Organization:Express Shipping, LLC
    Admin Street1:705 Olive Street
    Admin City:Saint Louis
    Admin State/Province:MO
    Admin Postal Code:63101
    Admin Country:US
    Admin Phone:+1.8882534646
    Admin FAX:+1.3147549977
    Admin Email:info@express-shipping.net

    Tech ID:CT1104491-RT
    Tech Name:Express Shipping, LLC
    Tech Organization:Express Shipping, LLC
    Tech Street1:705 Olive Street
    Tech Street2:
    Tech Street3:
    Tech City:Saint Louis
    Tech State/Province:MO
    Tech Postal Code:63101
    Tech Country:US
    Tech Phone:+1.888-253-4646
    Tech FAX:+1.314-754-9977
    Tech Email:info@express-shipping.net

    Name Server:NS1.MCHOST.RU
    Name Server:NS2.MCHOST.RU
    Name Server:NS3.MCHOST.RU
    Name Server:NS4.MCHOST.RU

    DNSSEC:Unsigned
    Network Whois record

    Queried whois.ripe.net with “-B 178.208.83.27″…
    Information related to ‘178.208.83.0 – 178.208.83.255’

    inetnum: 178.208.83.0 – 178.208.83.255
    netname: MCHOST-NET
    remarks: INFRA-AW
    descr: McHost.Ru
    country: RU
    admin-c: MI1667-RIPE
    tech-c: MI1667-RIPE
    status: ASSIGNED PA
    mnt-by: MCHOST
    mnt-routes: WZNET-MNT
    changed: a.scopenco@mchost.ru 20100419
    source: RIPE

    role: McHost.Ru Inc
    address: 2nd Kabelnaya av., 2
    address: 117607
    address: Moscow, Russia
    remarks: McHost.Ru contacts
    remarks: —————————————————
    remarks: SPAM and Network security issues: abuse@mchost.ru
    remarks: Customer support: support@mchost.ru
    remarks: General information: info@mchost.ru
    remarks: —————————————————
    e-mail: ripe@mchost.ru
    admin-c: AVS15-RIPE
    tech-c: AVS15-RIPE
    mnt-by: MCHOST
    nic-hdl: MI1667-RIPE
    changed: a.scopenco@mchost.ru 20100316
    source: RIPE

    % Information related to ‘178.208.83.0/24AS35415’

    route: 178.208.83.0/24
    descr: MCHOST-NET
    origin: AS35415
    mnt-by: WZNET-MNT
    changed: bk@webazilla.com 20100419
    source: RIPE

    % This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS3)
    DNS records

    DNS query for http://www.express-shipping.org failed: TimedOut

    name class type data time to live
    http://www.express-shipping.org IN CNAME express-shipping.org 598s (00:09:58)
    express-shipping.org IN SOA
    server: ns1.mchost.ru
    email: andavis05@hotmail.com
    serial: 1364221417
    refresh: 28800
    retry: 7200
    expire: 604800
    minimum ttl: 600
    600s (00:10:00)
    express-shipping.org IN MX
    preference: 20
    exchange: alt1.aspmx.l.google.com
    600s (00:10:00)
    express-shipping.org IN TXT v=spf1 include:aspmx.googlemail.com ~all 600s (00:10:00)
    express-shipping.org IN NS ns4.mchost.ru 600s (00:10:00)
    express-shipping.org IN NS ns2.mchost.ru 600s (00:10:00)
    express-shipping.org IN NS ns3.mchost.ru 600s (00:10:00)
    express-shipping.org IN A 178.208.83.27 600s (00:10:00)
    express-shipping.org IN NS ns1.mchost.ru 600s (00:10:00)
    express-shipping.org IN MX
    preference: 30
    exchange: aspmx2.googlemail.com
    600s (00:10:00)
    express-shipping.org IN MX
    preference: 30
    exchange: aspmx5.googlemail.com
    600s (00:10:00)
    express-shipping.org IN MX
    preference: 30
    exchange: aspmx3.googlemail.com
    600s (00:10:00)
    express-shipping.org IN TXT google-site-verification=QeSdXLXbX3d7SLrk1JZ4cZ4xVGPRwU72z2tatg0WdBU 600s (00:10:00)
    express-shipping.org IN MX
    preference: 30
    exchange: aspmx4.googlemail.com
    600s (00:10:00)
    express-shipping.org IN MX
    preference: 10
    exchange: aspmx.l.google.com
    600s (00:10:00)
    express-shipping.org IN MX
    preference: 20
    exchange: alt2.aspmx.l.google.com
    600s (00:10:00)
    express-shipping.org IN TXT google-site-verification=QeSdXLXbX3d7SLrk1JZ4cZ4xVGPRwU72z2tatg0WdBU 600s (00:10:00)
    27.83.208.178.in-addr.arpa IN PTR s23.h.mchost.ru 600s (00:10:00)
    83.208.178.in-addr.arpa IN RRSIG
    type covered: NSEC (47)
    algorithm: RSA/SHA-1 (5)
    labels: 5
    original ttl: 7200 (02:00:00)
    signature expiration: 2013-07-05 15:31:03Z
    signature inception: 2013-06-05 14:31:03Z
    key tag: 61635
    signer’s name: 178.in-addr.arpa
    signature:
    (1024 bits)

    7199s (01:59:59)
    83.208.178.in-addr.arpa IN NSEC
    next domain name: 84.208.178.in-addr.arpa
    record types: NS RRSIG NSEC
    7199s (01:59:59)
    83.208.178.in-addr.arpa IN NS nserver1.mchost.ru 599s (00:09:59)
    83.208.178.in-addr.arpa IN NS nserver2.mchost.ru 599s (00:09:59)
    — end —

  3. SFA Reporter says:

    Address lookup

    canonical name ns1.mchost.ru.
    aliases
    addresses 178.208.73.21
    Domain Whois record

    Queried whois.ripn.net with “mchost.ru”…

    domain: MCHOST.RU
    nserver: ns1134.dns.dyn.com.
    nserver: ns2142.dns.dyn.com.
    nserver: ns3166.dns.dyn.com.
    nserver: ns4190.dns.dyn.com.
    nserver: ns4.nic.ru.
    nserver: ns8.nic.ru.
    state: REGISTERED, DELEGATED, VERIFIED
    person: Private Person
    registrar: REGTIME-REG-RIPN
    admin-contact: http://whois.webnames.ru
    created: 2004.01.30
    paid-till: 2014.01.30
    free-date: 2014.03.02
    source: TCI

    Last updated on 2013.06.05 19:31:37 MSK
    Network Whois record

    Queried whois.ripe.net with “-B 178.208.73.21″…

    % Information related to ‘178.208.73.0 – 178.208.73.255’

    inetnum: 178.208.73.0 – 178.208.73.255
    netname: MCHOST-NET
    remarks: INFRA-AW
    descr: McHost.Ru
    country: RU
    admin-c: MI1667-RIPE
    tech-c: MI1667-RIPE
    status: ASSIGNED PA
    mnt-by: MCHOST
    mnt-routes: WZNET-MNT
    changed: a.scopenco@mchost.ru 20100409
    source: RIPE

    role: McHost.Ru Inc
    address: 2nd Kabelnaya av., 2
    address: 117607
    address: Moscow, Russia
    remarks: McHost.Ru contacts
    remarks: —————————————————
    remarks: SPAM and Network security issues: abuse@mchost.ru
    remarks: Customer support: support@mchost.ru
    remarks: General information: info@mchost.ru
    remarks: —————————————————
    e-mail: ripe@mchost.ru
    admin-c: AVS15-RIPE
    tech-c: AVS15-RIPE
    mnt-by: MCHOST
    nic-hdl: MI1667-RIPE
    changed: a.scopenco@mchost.ru 20100316
    source: RIPE

    % Information related to ‘178.208.73.0/24AS35415’

    route: 178.208.73.0/24
    descr: MCHOST-NET
    origin: AS35415
    mnt-by: WZNET-MNT
    changed: bk@webazilla.com 20100409
    source: RIPE

    % This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS4)

  4. SFA Reporter says:

    Domain Name: EXPRESS-SHIPPING.NET
    Registrar: REGTIME LTD.
    Whois Server: whois.webnames.ru
    Referral URL: http://www.webnames.ru
    Name Server: NS1.MCHOST.RU
    Name Server: NS2.MCHOST.RU
    Name Server: NS3.MCHOST.RU
    Name Server: NS4.MCHOST.RU
    Status: ok
    Updated Date: 22-feb-2013
    Creation Date: 19-feb-2012
    Expiration Date: 19-feb-2014

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s