Nouvelle Consultancy Ltd ~ nouvelle-consultancy.org

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

The identity of an individual or entity have been stolen along with fund from their bank accounts. You are being recruited to wire transfer these funds either by WESTERN UNION, MONEYGRAM, into your bank, a DOMESTIC BANK or FOREIGN BANK ACCOUNT

  1. Understanding The Cyber Theft Ring
  2. Money Mule Explained
  3. Protecting Yourself Against Money Mule
  4. KerbsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

Nouvelle Consultancy Ltd at
64.120.46.58 resolves to 64.120.46.58.rdns.ubiquity.io.

The following A records are set to 64.120.46.58:

  1. greatmerriment.com
  2. instantmo-us.biz
  3. solutionpartners.org
  4. vision-systems-uk.org
  5. nouvelle-ukconsultancy
  6. nouvelle-consultancy.org
  7. sumthink-creative.org
  8. dreamcapital-uk.org

UNITED KINGDOM

Tel: 012 1364 5089
Fax: 087 2352 7716
ltancy.org”>admin@nouvelle-ukconsultancy.org
Support: support@nouvelle-ukconsultancy.org
Job: mail to: job@nouvelle-ukconsultancy.org”>job@nouvelle-ukconsultancy.org
Webmaster:
webmaster@nouvelle-ukconsultancy.org
Address lookup

canonical name nouvelle-ukconsultancy.org
aliases
addresses: 64.120.46.58
Domain Whois record

Queried whois.publicinterestregistry.net with “nouvelle-ukconsultancy.org”…

Domain ID:D169323616-LROR
Domain Name:NOUVELLE-UKCONSULTANCY.ORG
Created On:30-Jul-2013 11:55:10 UTC
Expiration Date:30-Jul-2014 11:55:10 UTC
Sponsoring Registrar:Paknic (Private) Limited (R1605-LROR)
Status:TRANSFER PROHIBITED
Status:ADDPERIOD

Registrant ID:PAK13073078677-1
Registrant Name:Satu Aijala
Registrant Organization:Satu Aijala
Registrant Street1:Norra Esplanaden 88
Registrant City:Helsinki
Registrant State/Province:Helsinki
Registrant Postal Code:00350
Registrant Country:FI
Registrant Phone:+358.0504133
Registrant FAX:+358.0504133
Registrant Email:bellem@nouvelle-ukconsultancy.org

Admin ID:PAK13073078677-2
Admin Name:Satu Aijala
Admin Organization:Satu Aijala
Admin Street1:Norra Esplanaden 88
Admin City:Helsinki
Admin State/Province:Helsinki
Admin Postal Code:00350
Admin Country:FI
Admin Phone:+358.0504133
Admin FAX:+358.0504133
Admin Email:bellem@nouvelle-ukconsultancy.org
Tech ID:PAK13073078677-3

Tech Name:Satu Aijala
Tech Organization:Satu Aijala
Tech Street1:Norra Esplanaden 88
Tech City:Helsinki
Tech State/Province:Helsinki
Tech Postal Code:00350
Tech Country:FI
Tech Phone:+358.0504133
Tech FAX:+358.0504133

Tech Email:bellem@nouvelle-ukconsultancy.org

Name Server:NS1.MORTER.PL
Name Server:NS2.DZEN.PL
Name Server:NS3.MORTER.PL

DNSSEC:Unsigned
Network Whois record

Queried rwhois.nobistech.net with “64.120.46.58”…

%rwhois V-1.0,V-1.5:00090h:00 rwhois.nobistech.net (Ubersmith RWhois Server V-2.3.0)
autharea=64.120.44.0/22
xautharea=64.120.44.0/22
network:Class-Name:network
network:Auth-Area:64.120.44.0/22
network:ID:NET-21133.64.120.46.56/29
network:Network-Name:Base Assignment
network:IP-Network:64.120.46.56/29
network:IP-Network-Block:64.120.46.56 – 64.120.46.63
network:Org-Name:Wright, Malcolm
network:Street-Address:20 Ash way
network:City:Stoke On Trent
network:State:Staffs
network:Postal-Code:ST2 9DZ
network:Country-Code:GB
network:Tech-Contact:MAINT-21133.64.120.46.56/29
network:Created:20100216213943000
network:Updated:20130717055104000
network:Updated-By:admin@nobistech.net
contact:POC-Name:Nobis Network Administration Team
contact:POC-Email:admin@nobistech.net
contact:POC-Phone:admin@nobistech.net
contact:Tech-Name:Nobis Network Administration Team
contact:Tech-Email:admin@nobistech.net
contact:Tech-Phone:admin@nobistech.net
contact:Abuse-Name:Nobis Network Abuse Team
contact:Abuse-Email:abuse@nobistech.net
contact:Abuse-Phone:abuse@nobistech.net
%ok
Queried whois.arin.net with “n 64.120.46.58″…

NetRange: 64.120.0.0 – 64.120.127.255
CIDR: 64.120.0.0/17
OriginAS: AS15003
NetName: NETBLK-NOBIS-TECHNOLOGY-GROUP-06
NetHandle: NET-64-120-0-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
Comment: ++++++++++++++++++++++++++++++++++
Comment: Nobis Technology Group, LLC
Comment: http://www.nobistech.net
Comment: For inquiries and complaints
Comment: about any Nobis IP address
Comment: space please contact our NOC
Comment: via e-mail at admin@nobistech.net
Comment: ++++++++++++++++++++++++++++++++++
RegDate: 2009-04-24
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-64-120-0-0-1

OrgName: Nobis Technology Group, LLC
OrgId: NTGL
Address: 6930 East Chauncey Lane
Address: Suite 150
City: Phoenix
StateProv: AZ
PostalCode: 85054
Country: US
RegDate: 2007-01-30
Updated: 2011-01-10
Comment: +++++++++++++++++++++++++++
Comment: Nobis Technology Group, LLC
Comment: http://www.nobistech.net
Comment: +++++++++++++++++++++++++++
Comment:
Comment: For all inquiries relating
Comment: to network abuse, network
Comment: security, DMCA, trademark,
Comment: legal compliance, and law
Comment: enforcement requests, contact
Comment: abuse@nobistech.net via e-mail
Comment: or via postal mail as follows:
Comment:
Comment: Nobis Technology Group
Comment: ATTN IP Network Operations
Comment: 6930 East Chauncey Lane
Comment: Suite 150
Comment: Phoenix, AZ 85054
Ref: http://whois.arin.net/rest/org/NTGL

ReferralServer: rwhois://rwhois.nobistech.net:4321

OrgAbuseHandle: ABUSE1601-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-480-212-1710
OrgAbuseEmail: abuse@nobistech.net
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE1601-ARIN

OrgTechHandle: AIA12-ARIN
OrgTechName: ARIN IP Admin
OrgTechPhone: +1-480-212-1710
OrgTechEmail: arin@nobistech.net
OrgTechRef: http://whois.arin.net/rest/poc/AIA12-ARIN

OrgNOCHandle: NOC2466-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-480-212-1710
OrgNOCEmail: admin@nobistech.net
OrgNOCRef: http://whois.arin.net/rest/poc/NOC2466-ARIN

RAbuseHandle: ABUSE1601-ARIN
RAbuseName: Abuse
RAbusePhone: +1-480-212-1710
RAbuseEmail: abuse@nobistech.net
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE1601-ARIN

RTechHandle: AIA12-ARIN
RTechName: ARIN IP Admin
RTechPhone: +1-480-212-1710
RTechEmail: arin@nobistech.net
RTechRef: http://whois.arin.net/rest/poc/AIA12-ARIN

RNOCHandle: NOC2466-ARIN
RNOCName: NOC
RNOCPhone: +1-480-212-1710
RNOCEmail: admin@nobistech.net
RNOCRef: http://whois.arin.net/rest/poc/NOC2466-ARIN
DNS records

name class type data time to live
nouvelle-ukconsultancy.org IN A 64.120.46.58 120s (00:02:00)
nouvelle-ukconsultancy.org IN MX
preference: 10
exchange: mx.nouvelle-ukconsultancy.org
120s (00:02:00)
nouvelle-ukconsultancy.org IN NS ns1.morter.pl 120s (00:02:00)
nouvelle-ukconsultancy.org IN SOA
server: ns1.nouvelle-ukconsultancy.org
email: hostmaster@nouvelle-ukconsultancy.org
serial: 3
refresh: 300
retry: 120
expire: 86400
minimum ttl: 60
120s (00:02:00)
nouvelle-ukconsultancy.org IN NS ns3.morter.pl 120s (00:02:00)
nouvelle-ukconsultancy.org IN TXT v=spf1 a mx ip4:55.11.65.20/2 ip4:90.2.123.112/2 ip4:176.33.87.19/2 ip4:212.63.89.33/2 ?all 120s (00:02:00)
nouvelle-ukconsultancy.org IN NS ns2.dzen.pl 120s (00:02:00)
58.46.120.64.in-addr.arpa IN PTR 64.120.46.58.rdns.ubiquity.io 14400s (04:00:00)
46.120.64.in-addr.arpa IN SOA
server: ns1.chi.nobistech.net
email: hostmaster@46.120.64.in-addr.arpa
serial: 1375318801
refresh: 14400
retry: 3600
expire: 604800
minimum ttl: 10800
14400s (04:00:00)
46.120.64.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-08-10 20:02:11Z
signature inception: 2013-07-31 20:02:11Z
key tag: 3584
signer’s name: 64.in-addr.arpa
signature:
(1024 bits)

10799s (02:59:59)
46.120.64.in-addr.arpa IN NSEC
next domain name: 47.120.64.in-addr.arpa
record types: NS RRSIG NSEC
10799s (02:59:59)
46.120.64.in-addr.arpa IN NS ns1.sea.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns1.nyc.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns2.lax.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns2.chi.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns2.atl.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns1.lax.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns1.chi.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns1.atl.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns2.sea.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns2.nyc.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns2.dal.nobistech.net 14400s (04:00:00)
46.120.64.in-addr.arpa IN NS ns1.dal.nobistech.net 14400s (04:00:00)
— end —

One thought on “Nouvelle Consultancy Ltd ~ nouvelle-consultancy.org

  1. SFA Reporter says:

    Address lookup
    canonical name dreamcapital-uk.com

    aliases
    addresses 176.227.205.4
    Domain Whois record

    Queried whois.internic.net with “dom dreamcapital-uk.com

    Domain Name: DREAMCAPITAL-UK.COM
    Registrar: PAKNIC (PRIVATE) LIMITED
    Whois Server: whois.paknic.com
    Referral URL: http://www.paknic.com
    Name Server: NS1.MORTER.PL
    Name Server: NS2.DZEN.PL
    Name Server: NS3.MORTER.PL
    Status: ok
    Updated Date: 17-jul-2013
    Creation Date: 17-jul-2013
    Expiration Date: 17-jul-2014

    >>> Last update of whois database: Thu, 01 Aug 2013 01:24:49 UTC <<<
    Queried whois.paknic.com with "dreamcapital-uk.com"…

    Registration Service Provided By:RV Ltd. [http://dnregistrar.ru/]

    Domain name: DREAMCAPITAL-UK.COM

    Created On: 7/17/2013 10:50:56 AM
    Expires On: 7/17/2014 10:50:56 AM
    Last Updated On: 7/17/2013 10:50:56 AM

    Registrant:
    Luisana Castro
    Luisana Castro glynis@dreamcapital-uk.com
    Rua Martim Francisco 492
    Rio de Janeiro, RJ 23555-030
    BR
    55.21521469 Fax: 55.21521469

    Administrative Contact:
    Luisana Castro
    Luisana Castro glynis@dreamcapital-uk.com
    Rua Martim Francisco 492
    Rio de Janeiro, RJ 23555-030
    BR
    55.21521469 Fax: 55.21521469

    Billing Contact:
    Luisana Castro
    Luisana Castro glynis@dreamcapital-uk.com
    Rua Martim Francisco 492
    Rio de Janeiro, RJ 23555-030
    BR
    55.21521469 Fax: 55.21521469

    Technical Contact:
    Luisana Castro
    Luisana Castro glynis@dreamcapital-uk.com
    Rua Martim Francisco 492
    Rio de Janeiro, RJ 23555-030
    BR
    55.21521469 Fax: 55.21521469

    Domain servers in listed order:
    ns1.morter.pl
    ns2.dzen.pl
    ns3.morter.pl

    Queried whois.ripe.net with -B 176.227.205.4
    Information related to & 176.227.205.0 – 176.227.205.7
    Abuse contact for 176.227.205.0 – 176.227.205.7 is ;abuse@redstation.com

    inetnum: 176.227.205.0 – 176.227.205.7
    netname: RSDEDI-IAFCPPCH
    descr: Dedicated Server Hosting
    country: GB
    admin-c: RA1415-RIPE
    tech-c: RA1415-RIPE
    status: ASSIGNED PA
    remarks: ABUSE REPORTS: abuse@redstation.com
    mnt-by: REDSTATION-MNT
    mnt-domains: REDSTATION-MNT
    mnt-routes: REDSTATION-MNT
    changed: ripe-admin@redstation.com 20130717
    source: RIPE

    role: Redstation Admin Role
    address: Redstation Limited
    address: 2 Frater Gate Business Park
    address: Aerodrome Road
    address: Gosport
    address: Hampshire
    address: PO13 0GW
    address: UNITED KINGDOM
    abuse-mailbox: abuse@redstation.com
    e-mail: ripe-admin@redstation.com
    admin-c: KMAC-RIPE
    tech-c: PA5242-RIPE
    nic-hdl: RA1415-RIPE
    mnt-by: REDSTATION-MNT
    changed: ripe-admin@redstation.com 20080625
    source: RIPE

    % Information related to '176.227.192.0/20AS35662'

    route: 176.227.192.0/20
    descr: Redstation Limited
    origin: AS35662
    mnt-by: REDSTATION-MNT
    changed: ripe-admin@redstation.com 20111224
    source: RIPE

    This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS3)
    DNS records

    name class type data time to live
    dreamcapital-uk.com IN TXT v=spf1 a mx ip4:55.11.65.20/2 ip4:90.2.123.112/2 ip4:176.33.87.19/2 ip4:212.63.89.33/2 ?all 120s (00:02:00)
    dreamcapital-uk.com IN A 176.227.205.4 120s (00:02:00)
    dreamcapital-uk.com IN MX
    preference: 10
    exchange: mx.dreamcapital-uk.com
    120s (00:02:00)
    dreamcapital-uk.com IN NS ns3.morter.pl 120s (00:02:00)
    dreamcapital-uk.com IN NS ns2.dzen.pl 120s (00:02:00)
    dreamcapital-uk.com IN NS ns1.morter.pl 120s (00:02:00)
    dreamcapital-uk.com IN SOA
    server: ns1.dreamcapital-uk.com
    email: hostmaster@dreamcapital-uk.com
    serial: 40
    refresh: 300
    retry: 120
    expire: 86400
    minimum ttl: 60
    120s (00:02:00)
    4.205.227.176.in-addr.arpa IN PTR h176-227-205-4.host.redstation.co.uk 3600s (01:00:00)
    205.227.176.in-addr.arpa IN NS dns2.redstation.co.uk 3600s (01:00:00)
    205.227.176.in-addr.arpa IN NS dns3.redstation.co.uk 3600s (01:00:00)
    205.227.176.in-addr.arpa IN SOA
    server: dns3.redstation.co.uk
    email: admin@redstation.co.uk
    serial: 2012120811
    refresh: 1200
    retry: 60
    expire: 1728000
    minimum ttl: 3600

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s