Job at Home Fraud
Report
Active
Domain
Don't Bear Internet Fraud
Home
Bobbear Icon
Job at Home screenshot (07-May-2009)
Job at Home screenshot (07-May-2009)

This fraudster should not be confused with any legitimate company of the same or similar name - the above website graphics and the following evidence clearly identify the fake website and these criminal fraudsters.

Job at Home This is just a standard scam website that has been set up to form a front for a money laundering job spamming campaign. The site content, (which is the same as used for the fraudster's other aliases, Business On-line and Work Online), has been stolen from a company called ASB Poland. Their initial website domain wahoffice.biz has only been registered very recently for a one year period and the location/contact details are the same as for other frauds and are easily demonstrated to be fake as are the displayed fake BBB and FDIC certificates. They are using the same host and IP address as their previous alias Work Online.

Job at Home  : Evidence of Criminal Fraud

i) Job at Home claim on their website above "Job at Home was established in 1997", but the criminal's initial domain wahoffice.biz was only registered with Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com on 30-Apr-2009 for the minimum period of one year. A clear indication of a fraudulent registration.

ii) A Google search shows absolutely no internet presence at all for this particular Job at Home, (apart from their own fake website, of course). If they had indeed been in business since 1997 they would have a large presence. The fact that they do not is clear evidence of a fake company.

iii) Another alias, another set of fake Website Contact Details:

Job at Home
Ul Fertovom 52
Warsaw, 00-095, Poland

+1(631)479-3128

• - The address 
Ul Fertovom 52, Warsaw, 00-095, Poland has no Google hits and cannot be found on Google maps for the postcode 00-095, Warsaw which is the same postcode as used for their previous Work Online alias address - it is simply a fake address.
• - The telephone number +1(631)479-3128 is not a Polish number, but a US number located at Huntington, NY - clear evidence of fraud
• - The telephone number +1(631)479-3128 is the same number as used for this criminal's Financial CenterBusiness On-line and Work Online scams - clear evidence of fraud

iv) The fraud site content is exactly the same as the site content for their previous aliases Business On-lineWork Online and the company ASB Poland, where presumably the content has been stolen from for both of the fake websites.

v) They are displaying a clearly fake BBB certificate which is simply a .gif image on the criminal's own server and leads to a fake BBB report, also on their own server at URL http://jobathomesite.net/my/cks.htm. As a result of this fake certificate, the Cincinnati BBB have this genuine damning report on this criminal's previous Financial Center alias and its related aliases.

vi) They are displaying a FDIC logo which is not a members certificate and a check on the FDIC website shows that Job at Home are not registered with the FDIC which is nothing to do with this sort of operation anyway. Clearly fraudulent.

vii) They are advertising the job of "Financial Manager" which leads to a registration form for you to record your personal details - don't do it as it is simply a doorway to enrolling you in an illegal money mule operation which will get your bank account and your assets frozen and could earn you a criminal record.

viii) The Spam:

Dear, 

We analyzed your resume and see you as a potential candidate of our company.

You may learn about company business activity on our site. We'd like to
offer you the Financial Manager position.

You may also hold a position in a different company as our vacancy won't
occupy a lot of time.

Requirements for the Financial manager position:

-  THE CITIZENSHIP OF THE USA is a must.
-  Over 22 years old
- 1-4 hours of free time per week

Financial manager position obligations:

- Work efficiency
- Monthly report under performed operations
- Well-timed encashment of the checks drawn on your name

Financial manager position payment:

- every transaction's commission is not less than 10% (out of cashed
check sum or out of sum entered to your account).
- the first probation month - $1600 (it'll grow up to $2600 in future)

Our company undertakes to cover transmission, check clearance and all other
expenses at its own cost.

If you agree to work for our company, it is necessary for you to:

1) To register yourself on the company's site as a Financial Manager. WHEN
REGISTERING, FILL IN YOUR DATA CORRECTLY.

2) Follow the instructions indicated on the site in the course of
registration (fill in the Contract, etc).

Additionally, you may find all the detailed information on our site.

TO GET ON OUR SITE, CLICK ON THE LINK AT THE BOTTOM OF LETTER.

Transfer Manager Position

http://snipurl.com/ibq1m/
 (Redirects to http://jobathomesite.org/)


ix) The Crooks bogus contract:
Job at Home
Ul Fertovom, 52. 00-095
Warszawa, Poland                                                                                            
 
Financial MANAGER Contract # US-1271

Job at Home hereinafter referred to as PRINCIPAL, in the name OF DIRECTOR GENERAL David Hopson, acting on the basis of company foundation charter of February, 25, 2009, on one side, and _____________________________________________________________________________________________,further referred to as MANAGER, acting on his own, on the other side, have concluded the present agreement on the following:

1. Subject of the agreement

1.1.    MANAGER shall carry out assets cashing in his country at the request of PRINCIPAL in his name and interest on the reward basis; the above-mentioned funds being the PRINCIPAL’s property.
1.2.    MANAGER is registered by PRINCIPAL under the code of US-1573. The code serves to provide mutual exchanges of MANAGER and PRINCIPAL
 
2. Obligations of the sides

2.1.    MANAGER undertakes an obligation:
2.1.1.    To accept bank checks to his/her postal address for further cashing at the request of PRINCIPAL
2.1.2.    After getting the means delivered to the account of the MANAGER, to transfer them to the recipient indicated by PRINCIPAL within the following 24 hours with the exception of holidays and days off. The present division also applies to check cashing.
2.1.3.    To submit all the statements regarding executed operations connected with mutual activity to PRINCIPAL at his request.
2.2.    PRINCIPAL is obliged:
2.2.1.    To notify MANAGER timely about the issuance of check in his/her name for further cashing.
2.2.2.    To pay for MANAGER’s services of check cashing in the amount of 10% (percent) of the amount of the cashed check. MANAGER shall take out the mentioned sum during each transaction.
2.2.3.    To pay MANAGER USD 1,500 monthly to his/her bank account as salary. The first payment is to be issued in a month after the conclusion of the present agreement.
2.2.4.    To pay all the expenditures connected with:
    check cashing
    bank commission for money transfer
    Western Union services.
    other expenditures on agreement of the sides
2.2.5.    Hold confidential data concerning MANAGER’s personal account.

3. Special conditions and responsibility of the sides.

3.1.    MANAGER bears the responsibility for the means of PRINCIPAL being delivered to MANAGER as the result of PRINCIPAL’s activity. MANAGER shall pay a penalty for the delay of money transfer in the amount of 1% (percent) for each delayed day.
3.2.    In case of non-execution or violation of the conditions of the present agreement the sides shall be responsible within the limits of the existing legislation.
3.3.    Termination of the agreement can be done before its term ends in case of systematic non-fulfillment of the duties by MANAGER, not earlier than within one month from the moment of notification sent to MANAGER by PRINCIPAL. The sides shall settle accounts and MANAGER is obliged to hand over the assets pertaining to PRINCIPAL.
3.4.    Disputes, unsettled by means of negotiation are subject to determination by arbitration court at the location of respondent.

4. Legal addresses and details of the sides

Country                                            State   

City                                                ZIP Code   

Postal address                   

Full name                                        Date of Birth   

Home Phone                                    Cell Phone   

Email   


MY VERITABLE COPY OF PERSONAL ID IS ATTACHED


MANAGER SIGN                        ______________________


David Hopson
Job at Home                        job at home sig
Ul Fertovom, 52. 00-095          ______________________
Warszawa, Poland


4.1 Additional instructions
After the contract sign, email or fax copy of signed contract and your personal ID to:
E-mail: robert.contract@gmail.com
Fax: +1 (866) 334-5723


The above evidence clearly demonstrates beyond any doubt that the Job at Home website has been set up by money laundering criminal fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.
Job at Home Fraudsters - hosting details

Main Domains, Registrars and Hosts  
Domain

wahoffice.biz
wahonline.info
wahome.us
wahdirect.net
jobathomesite.org
wahsite.org
jobathomesite.biz
jobathomesite.info
jobathomesite.net
jobathome.dhs.org

 
Registrar

Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (30-Apr-2009)
Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (30-Apr-2009)
Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (30-Apr-2009)
Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (30-Apr-2009)
Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (18-May-2009)
Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (30-Apr-2009)
Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (18-May-2009)
Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (18-May-2009)
Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (18-May-2009)
-
Host Network

SmartLogic Ltd. (Moscow)
SmartLogic Ltd. (Moscow)
SmartLogic Ltd. (Moscow)
SmartLogic Ltd. (Moscow)
SmartLogic Ltd. (Moscow)
DATAPOINT-NET2 (Infobox.ru)
DATAPOINT-NET2 (Infobox.ru)
DATAPOINT-NET2 (Infobox.ru)
DATAPOINT-NET2 (Infobox.ru)
DATAPOINT-NET2 (Infobox.ru)
Host IP

80.90.114.53
80.90.114.53
80.90.114.53
80.90.114.53
80.90.114.53
77.221.129.178
77.221.129.178
77.221.129.178
77.221.129.178
77.221.129.178
Key:
Active
Suspended or Inactive
Parked

Please notify me of any other current domains used by this criminal.

Network Data (jobathomesite.org)
How I am searching:

Searching for jobathomesite.org A record at d.root-servers.net [128.8.10.90]: Got referral to B0.ORG.AFILIAS-NST.org. (zone: org.)
Searching for jobathomesite.org A record at B0.ORG.AFILIAS-NST.org. [199.19.54.1]: Got referral to ns1.hosting24x7.ru. (zone: jobathomesite.org.)
Searching for jobathomesite.org A record at ns1.hosting24x7.ru. [80.90.114.53]: Reports jobathomesite.org. Response:
DomainTypeClassTTLAnswer
jobathomesite.org.AIN1440080.90.114.53
jobathomesite.org.NSIN14400ns2.hosting24x7.ru.
jobathomesite.org.NSIN14400ns1.hosting24x7.ru.
ns1.hosting24x7.ru.AIN1440080.90.114.53
ns2.hosting24x7.ru.AIN1440080.90.118.96

Looking up at the 2 jobathomesite.org. parent servers:

ServerResponse
ns2.hosting24x7.ru [80.90.118.96]80.90.114.53
ns1.hosting24x7.ru [80.90.114.53]80.90.114.53

This criminal's website is hosted by SmartLogic Ltd. on IP 80.90.114.53, (the same host and IP as for their Work Online alias)
***Latest News*** Initial entry 7th. May 2009

***Latest News*** 9th. May 2009
News from Simon Bear - the domains wahoffice.biz and wahonline.info have been suspended - please notify me of any active domains for this criminal

***Latest News*** 13th. May 2009
News from site contact - new criminal's domain wahome.us registered with Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (30-Apr-2009) and hosted on the above SmartLogic Ltd. (80.90.114.53) network.
Later: The domain wahome.us has been suspended by the registrar -
please notify me of any active domains for this criminal.

***Latest News*** 15th. May 2009
New domain reported by site contact - wahdirect.net registered with
Directi Internet Solutions Pvt. Ltd./PublicDomainRegistry.com (30-Apr-2009) and hosted on the above SmartLogic Ltd. (80.90.114.53) network. There has been no response from SmartLogic Ltd. to reports of abuse on this IP which hosts an unpleasant selection of mainly porn sites with a few attack/exploit sites thrown in.

***Latest News*** 16th. May 2009
The domain wahdirect.net has been suspended by the registrar.

***Latest News*** 20th. May 2009
New fraud domain notified by site contact - jobathomesite.org still hosted by
SmartLogic Ltd. (smartLogic.ru) on the above network.
Later: The domain jobathomesite.org has been suspended by the registrar - please notify me of any active domains for this criminal.

***Latest News*** 8th. Jun 2009
More active domains discovered for this criminal - wahsite.org, jobathomesite.biz, jobathomesite.info, jobathomesite.net all hosted on the following network:
Network Data (wahsite.org, jobathomesite.biz, jobathomesite.info, jobathomesite.net)
How I am searching:

Searching for wahsite.org A record at b.root-servers.net [192.228.79.201]: Got referral to D0.ORG.AFILIAS-NST.org. (zone: org.)
Searching for wahsite.org A record at D0.ORG.AFILIAS-NST.org. [199.19.57.1]: Got referral to ns1.host-invest.ru. (zone: wahsite.org.)
Searching for wahsite.org A record at ns1.host-invest.ru. [77.221.129.178]: Reports wahsite.org. Response:
DomainTypeClassTTLAnswer
wahsite.org.AIN360077.221.129.178
wahsite.org.NSIN3600ns1.host-invest.ru.
wahsite.org.NSIN3600ns2.host-invest.ru.
ns1.host-invest.ru.AIN360077.221.129.178
ns2.host-invest.ru.AIN360077.221.138.146

Looking up at the 2 wahsite.org. parent servers:

ServerResponse
ns2.host-invest.ru [77.221.138.146]77.221.129.178
ns1.host-invest.ru [77.221.129.178]77.221.129.178

The host of this criminal fraudster is DATAPOINT-NET2 (Infobox.ru) on IP address 77.221.129.178

***Latest News*** 13th. Jun 2009
DirectI have suspended all of the criminal's fraud domains - please notify me of any active domains for this criminal

***Latest News*** 16th. Jun 2009
The criminal is now using a sub-domain of the dhs.org service (jobathome.dhs.org) to host his criminal website on the usual DATAPOINT-NET2 (Infobox.ru) host. Hosting details:
Network Data (jobathome.dhs.org)
DNS Lookup: jobathome.dhs.org A record
Searching for jobathome.dhs.org A record at j.root-servers.net [192.58.128.30]: Got referral to A0.ORG.AFILIAS-NST.INFO. (zone: org.)
Searching for jobathome.dhs.org A record at A0.ORG.AFILIAS-NST.INFO. [199.19.56.1]: Got referral to ns1.dhsnames.com. (zone: dhs.org.)
Searching for jobathome.dhs.org A record at ns1.dhsnames.com. [206.251.79.98]: Got referral to ns1.host-invest.ru. (zone: jobathome.dhs.org.)
Searching for jobathome.dhs.org A record at ns1.host-invest.ru. [77.221.129.178]: Reports jobathome.dhs.org.

Response:
DomainTypeClassTTLAnswer
jobathome.dhs.org.AIN360077.221.129.178
jobathome.dhs.org.NSIN3600ns1.host-invest.ru.
jobathome.dhs.org.NSIN3600ns2.host-invest.ru.
ns1.host-invest.ru.AIN360077.221.129.178
ns2.host-invest.ru.AIN360077.221.138.146

Looking up at the 2 dhs.org. parent servers:
ServerResponse
ns1.dhsnames.com [206.251.79.98]ns1.host-invest.ru. ns2.host-invest.ru.
ns2.dhsnames.com [204.16.241.26]ns1.host-invest.ru. ns2.host-invest.ru.

Looking up at the 2 jobathome.dhs.org. parent servers:
ServerResponse
ns2.host-invest.ru [77.221.138.146]77.221.129.178
ns1.host-invest.ru [77.221.129.178]77.221.129.178

The host of this criminal fraudster's subdomain jobathome.dhs.org is  DATAPOINT-NET2 (Infobox.ru) on IP address 77.221.129.178 as before.
The redirect link for this crooks site is http://xrl.us/bew2or/

***Latest News*** 17th. Jun 2009
The sub-domain jobathome.dhs.org has been deleted by the service provider and the redirect links have been deleted by that provider too - please notify me of any active domains for this criminal.