Poland Job Office scam

Poland Job Office Fraud

Report
Active
Domain

Don't Bear Internet Fraud

Home

Poland Job Office screenshot (18-Jun-2009)

New site template - extra information in RED below
Poland Job office new template

This fraudster should not be confused with any legitimate company of the same or similar name - the above website graphics and the following evidence clearly identify the fake website and these criminal fraudsters.

Poland Job Office This is just a standard scam website that has been set up to form a front for a money laundering job spamming campaign. The site content, (which is the same as used for the fraudster's other aliases, Business On-line and Work Online), has been stolen from a company called ASB Poland. Their initial website domain pjoffice.org.cn has only been registered with 厦门华融盛世网络有限公司 (Xiamen Huarong Spirit Network Limited) on 18-Jun-2009 for the usual criminal's domain one year period and the location/contact details are the same as for other frauds and are easily demonstrated to be fake as is the displayed fake US FDIC certificate. The template, the site content, the host and all the contact details are identical to this fraudster's previous alias - Job at Home. It is the same scam with a simple name change. They are also the same criminals as the Poland Real Estate scammers as evidenced below, in fact there is an identical version of the above site with the name "Poland Real Estate" in the template. They have another new template above, but the site home page content is still the same as clearly shown. They have different fake contact/location details as evidenced below. This fraud is operated by the same scammers as operate the Poland Real Estate scam.

Poland Job Office : Evidence of Criminal Fraud

i) Poland Job Office claim on their website above "Poland Job Office was established in 1997", but the criminal's initial domain pjoffice.org.cn was only registered with 厦门华融盛世网络有限公司 (Xiamen Huarong Spirit Network Limited) on 18-Jun-2009 for the usual criminal's domain one year period. A clear indication of a fraudulent registration. Domain estpoland.com.cn only registered with Web Commerce Communications Limited (Webnic.cc) on 15-Jul-2009 for only one year - clear indication of a fraud domain.

ii) A Google search shows absolutely no internet presence at all for this particular Poland Job Office, (apart from their own fake website, of course). If they had indeed been in business since 1997 they would have a large presence. The fact that they do not is clear evidence of a fake company.

iii) Another alias, but the same set of fake Website Contact Details:

Poland Job Office
Ul Fertovom 52
Warsaw, 00-095, Poland

Telephone: +1(631)479-3128

• - The address Ul Fertovom 52, Warsaw, 00-095, Poland has no Google hits and cannot be found on Google maps for the postcode 00-095, Warsaw. It is exactly the same address as for his previous Job at Home alias - it is simply a fake address.
• - The telephone number +1(631)479-3128 is not a Polish number, but a US number located at Huntington, NY - clear evidence of fraud
• - The telephone number +1(631)479-3128 is the same number as used for this criminal's Financial Center, Business On-line, Work Online and Job at Home scams - clear evidence of fraud

With their new template (above) they have a new fake set of contact info:

Poland Job Office
Ulica Senatorska, 34. 00-095
Warszawa, Poland

+48224892816

• - A Google search for the address "Ulica Senatorska, 34. 00-095 Warszawa" shows no sign of these criminals, but does show that the address clearly belongs to the Belgian Embassy in Warsaw - clear evidence of fraud.
• - A Google search for the telephone number +48224892816 returns zero hits.

iv) Fake BBB seal - clicking on the BBB seal on their website goes to a Texas real estate company which is clearly nothing to do with these criminals and in fact there is a warning about these criminals on the linked BBB information page - clear evidence of fraud.

v) The fraud site content is exactly the same as the site content for their previous aliases Business On-line, Work Online, Job at Home and the company ASB Poland, where presumably the content has been stolen from for all of the fake websites.

vi) They are displaying a FDIC logo which is not a members certificate and a check on the FDIC website shows that Poland Job Office are not registered with the FDIC which is nothing to do with this sort of operation anyway - it is a USA only regulatory body. Clearly fraudulent.

vii) They are advertising the job of "Financial Manager" which leads to a registration form for you to record your personal details - don't do it as it is simply a doorway to enrolling you in an illegal money mule operation which will get your bank account and your assets frozen and could earn you a criminal record.

viii) The Initial Spam:

Hello,

We analyzed your resume and see you as a potential candidate of our organization.
You may learn about organization business activity on our site. We'd like to offer you the Financial Manager vacancy.
You may also hold a vacancy in a different organization as our vacancy won't occupy a lot of time.

Requirements for the Financial manager position:

Over 21 years old
THE CITIZENSHIP OF THE USA is a must.
1-3 hours of free time per week

Financial manager position obligations:

Monthly report under performed operations
Well-timed encashment of the checks drawn on your name
Work efficiency

Financial manager position payment:

the first probation month - $1500 (it'll grow up to $2500 in future)
every transaction's commission is not less than 10% (out of cashed check sum or out of sum entered to your account).

Our company undertakes to cover transmission, check clearance and all other expenses at its own cost.
If you agree to work for our company, it is necessary for you to:
1) Reply to this email.
2) Provide your full name, home address and phone. FILL IN YOUR DATA CORRECTLY.

Please send your resume to this email : zeuspriority@gmail.com

Spam received from site contact - 25-Jul-2009:

We analyzed your resume and see you as a potential candidate of our firm.
You may learn about firm business activity on our site. We'd like to offer you the Financial Manager vacancy.
You may also hold a vacancy in a different firm as our vacancy won't occupy a lot of time.

Requirements for the Financial manager position:

* the first probation month - $1700 (it'll grow up to $2700 in future)
* every transaction's commission is not less than 10% (out of cashed check sum or out of sum entered to your account).

Financial manager position obligations:
* Well-timed encashment of the checks drawn on your name
* Monthly report under performed operations
* Work efficiency Financial manager position payment:
* 1-3 hours of free time per week
* Over 22 years old
* THE CITIZENSHIP OF THE USA is a must.

Our company undertakes to cover transmission, check clearance and all other expenses at its own cost.
If you agree to work for our company, it is necessary for you to:
1) Reply to this email.
2) Provide your full name, home address and phone. FILL IN YOUR DATA CORRECTLY.

You are to take the following steps in order to get down to work:

1) Log on our company site by the link click here
2) Check the « REGISTRATION FINANCIAL MANAGER » tab
3) Pass registration
4) Fill in the contract and send it at a specified address After we check your data, there will start your cooperation with our business. You can also view all information in regard to the operation of our company on our web-site on the Internet.

Respectfully yours,

Manager Andrew Hakes

Poland real Estate

From the above spam it is clear that these 'Poland Job Office' crooks are the same crooks as the Poland Real Estate scammers.

ix) The follow-up email:

Dear

Thank you for your interest to our company.

We are focused especially on:

•       comprehensive accounting and financial reporting
•       providing shelf (ready-made) companies
•       company administration services
•
Our clients in Poland, the Czech Republic and Slovakia are serviced by qualified managers from the Poland Real Estate team, taking care of all the accounting, corporate, administrative and economic issues.

We work for local and multinational corporations and organisations in many business sectors, particularly in real estate, construction and development, IT, shared-services centres, logistics, banking and SMEs. Most of our clients are foreign investors operating in CEE, outsourcing all accounting, administration and corporate matters to one or all Poland Real Estate branches.

Poland Real Estates personal attention combined with precise attention to complex issues, together with the active management of our clients companies, is where Poland Real Estate really adds value when compared to the services offered by other professional firms.

In connection with imperfection of our local legislation we cannot do a full-fledged business with US-based companies. Taxation of such activity exceeds all reasonable limits. However, our legislation doesn’t restrict us to do business with private individuals.

That’s why we have opened vacancy of Financial Manager.

Your work will include cash-out of payment checks of our US-based customers. Your compensation shall amount 8-10 of transaction sum. Average sum of transaction amounts USD 2500-3000. These funds will be transferred by our customers for already rendered consultant services.

To start working, please, visit our web site
http://snipurl.com/kbap8/ and proceed through following link: “Click here to sign up as a financial manager”.

You will have to pass through a logon procedure. Once you have finished with your registration, a contract of employment will be sent to you. IMPORTANT: Please, fill in the contract AT ONCE and send it to us.

We hope for a long-term cooperation with you.
With regards,
Rose McCallen HR manager
Poland Real Estate

You'll notice that they are calling themselves "Poland Real Estate" which undoubtedly links them to the Poland Real Estate fraudster who is hosted on the same IP. (The link http://snipurl.com/kbap8/ redirects to the Poland Job website http://pjoffice.org.cn/).

x) You do not get a clearer description of the ILLEGAL money mule function than that - it will get your bank account closed and your assets frozen, lose you a lot of money and earn you a visit from the police. Do not be tempted.

xi) No legitimate company would advertise for private citizens to operate as unlicensed and illegal money transfer agents. To do so clearly defines the fake Poland Job Office company as both criminal and fraudulent. There is also a 'phishing' for identity theft aspect due to the nature of identity proof requested upon registration. Clear evidence of criminal fraud.

The above evidence clearly demonstrates beyond any doubt that the Poland Job Office website has been set up by money laundering criminal fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Poland Job Office Fraudsters - hosting details

Main Domains, Registrars and Hosts

Domain

pjoffice.org.cn
pjoffice.com.cn
estate-poland.com.cn
estpoland.com.cn
polande.com.cn

Registrar

厦门华融盛世网络有限公司 (Xiamen Huarong Spirit Network Limited) on 18-Jun-2009
厦门华融盛世网络有限公司 (Xiamen Huarong Spirit Network Limited) on 18-Jun-2009
IP Mirror Pte Ltd. (25-Jun-2009)
Web Commerce Communications Limited (15-Jul-2009)
Web Commerce Communications Limited (15-Jul-2009)

Host Network

DATAPOINT-NET2 (Infobox.ru)
DATAPOINT-NET2 (Infobox.ru)
Masterhost.ru
Masterhost.ru
Masterhost.ru

Host IP

77.221.129.178
77.221.129.178
83.222.23.126 and 83.222.23.176
83.222.23.126 and 83.222.23.176
83.222.23.126 and 83.222.23.176

Key:
Active
Suspended or Inactive
Parked

Please notify me of any other current domains used by this criminal.

DNS Lookup: pjoffice.org.cn A record (Also valid for pjoffice.com.cn)
Searching for pjoffice.org.cn A record at e.root-servers.net [192.203.230.10]: Timed out. Trying again.
Searching for pjoffice.org.cn A record at k.root-servers.net [193.0.14.129]: Got referral to a.dns.cn. (zone: cn.)
Searching for pjoffice.org.cn A record at a.dns.cn. [203.119.25.1]: Got referral to ns1.host-invest.ru. (zone: pjoffice.org.cn.)
Searching for pjoffice.org.cn A record at ns1.host-invest.ru. [77.221.129.178]: Reports pjoffice.org.cn.
Response:

Domain	Type	Class	TTL	Answer
pjoffice.org.cn.	A	IN	3600	77.221.129.178
pjoffice.org.cn.	NS	IN	3600	ns1.host-invest.ru.
pjoffice.org.cn.	NS	IN	3600	ns2.host-invest.ru.
ns1.host-invest.ru.	A	IN	3600	77.221.129.178
ns2.host-invest.ru.	A	IN	3600	77.221.138.146

Looking up at the 2 pjoffice.org.cn. parent servers:

Server	Response
ns2.host-invest.ru [77.221.138.146]	77.221.129.178
ns1.host-invest.ru [77.221.129.178]	77.221.129.178

The host of this criminal fraudster is DATAPOINT-NET2 (Infobox.ru) on IP address 77.221.129.178 (the same host and IP as for their Job at Home and Poland Real Estate aliases)

***Latest News*** Initial entry 18th. June 2009

***Latest News*** 25th. June 2009
News from site contact - new domain pjoffice.com.cn accessed via spam link http://plzlink.me/2bj

***Latest News*** 16th. July 2009
News from Site contact - new domain estate-poland.com.cn used for a modified version of this Poland Job Office scam, but with the name Poland Real Estate in the template, (but still Poland Job Office in the page footer!). Registered with IP Mirror Pte Ltd. (25-Jun-2009) and hosted on the following network:
DNS Lookup: estate-poland.com.cn A record (also valid for estpoland.com.cn and polande.com.cn)
Searching for estate-poland.com.cn A record at i.root-servers.net [192.36.148.17]: Got referral to NS.CERNET.NET. (zone: cn.)
Searching for estate-poland.com.cn A record at NS.CERNET.NET. [202.112.0.44]: Got referral to ns.masterhost.ru. (zone: estate-poland.com.cn.)
Searching for estate-poland.com.cn A record at ns.masterhost.ru. [217.16.20.30]: Reports estate-poland.com.cn.
Response:

Domain	Type	Class	TTL	Answer
estate-poland.com.cn.	A	IN	900	83.222.23.176
estate-poland.com.cn.	A	IN	900	83.222.23.126
estate-poland.com.cn.	NS	IN	900	ns1.masterhost.ru.
estate-poland.com.cn.	NS	IN	900	ns2.masterhost.ru.
estate-poland.com.cn.	NS	IN	900	ns.masterhost.ru.
ns1.masterhost.ru.	A	IN	900	217.16.16.30
ns2.masterhost.ru.	A	IN	900	217.16.22.30
ns.masterhost.ru.	A	IN	900	217.16.20.30

Looking up at the 3 estate-poland.com.cn. parent servers:

Server	Response
ns2.masterhost.ru [217.16.22.30]	83.222.23.126 83.222.23.176
ns1.masterhost.ru [217.16.16.30]	83.222.23.126 83.222.23.176
ns.masterhost.ru [217.16.20.30]	83.222.23.126 83.222.23.176

The host of this fraudster's domain is Masterhost.ru on IP addresses 83.222.23.126 and 83.222.23.176

***Latest News*** 25th. July 2009
New domain reported by site contact - estpoland.com.cn hosted on the above domain by Masterhost.ru who have told me that they will only accept abuse reports in Russian and will not cease domain hosting without a court order which is disappointing. Looks like these criminals have a free hand.

***Latest News*** 1st. August 2009
New domain reported by site contact - polande.com.cn hosted on the above domain by Masterhost.ru who unfortunately knowingly aid and abet these criminal fraudsters by refusing to take action against them.