Tuesday, June 29, 2010

awardspace.co.uk 3125 Computer Threats

http://safeweb.norton.com/report/show?url=awardspace.co.uk
awardspace.co.uk

Summary
•Computer Threats: 3124
•Identity Threats: 1
•Annoyance factors: 0

Total threats on this site: 3125

Wow, I'll sure stay away from any sites on their servers.

Leia Mais…

Monday, June 28, 2010

Save a Starfish

Its important to leave information about the scammers because you will be
"Saving a Starfish"
Your simple act of kindness can help prevent others from being defrauded.
Many people find this blog by searching for the URLs, emails, and names the scammers use.
Leave feedback in the appropriate thread.

Please watch this inspirational video.

Leia Mais…

Saturday, June 26, 2010

Alexandra Oncescu and Bogdan Ionut Dita

The scammer who stole money from the person "Nick" in the BBC report:
Internet car sale scam exposed
http://news.bbc.co.uk/1/hi/uk/8090795.stm



Is none other than:
Alexandra Oncescu
Oncescu and her boyfriend, Dita, are originally from Pitesti, Romania.
They now live in Madrid, Spain have been quite busy over the past several years scamming people, mostly in the UK.

Ms Oncescu enjoys posting about people and bragging about her scamming abilities.
She's a very vindictive person.
You can see posts she made on www.aa419.org and stories about her:
http://forum.aa419.org/viewtopic.php?t=12790
http://forum.aa419.org/viewtopic.php?t=24898
http://forum.aa419.org/viewtopic.php?t=12206
http://blog.aa419.org/?p=73

Ms Oncescu actually had the nerve to leave me messages on this blog:

"You also have captcha and approval. Man, you got big since 2008. I watch your blog daily for new scams for us, already told you, you are a great source of inspiration, but never tried to post something. Now I see that you are so big and important that you have captcha and shit. What is this? Craigslist? You work with the secret service, with cia, with fbi, with DIICOT. eres como un vigilante, like the punisher. You were so green in this business in 2008, posting on aa419.org. now you have your own blog, you make a difference. Good for you, good for you. Keep posting new things for us."

"I would like to thank you. You are a great source of inspiration for all romanian scammers. You know, there is a great competition between us, some come up with new scams, and we don't know where to find them, in order to do them ourselves. Your blog is gold for us. new scams, new rip-off tactics. Keep up the good work. Like these scam websites you found, the one that sell cars, please, keep on posting them, we will copy the websites and do the scams ourselves. thank you m8. Signed: Dessydina.com, remember us? you never found our websites from 2008, why? it was fun. how is sandy_bitch? and your correct name would be iau_muie. "

So I thought I would give her something she can truely enjoy reading.

Here is what some of the sites looked like:
http://escrow-fraud.com/index.php?page=gallery&layout=73

Here are some of their sites, including the ones she thinks I didn't know about from 2008:

infoyma-sl.com
franiestan-sl.com
totana-sl.com
victoria-sl.com
albaresa-sa.com
transcres-sl.com
joel-sl.com
vpp-bureau.com
sercatrans-logistica.com
transportes-guimar.com
logistica-tercia.com
logistica-pineda.com
cantabriashipping.net
sam-logistics.com
morata-logistica.com
sparkuhl-logistica.com
sol-logistica.com
transportes-guimar.com
catalan-shipping.com
veyporlogistica.com
veypor-logistica.com
veypor-logistica.net
tiscan-ex.com
mo-exportaciones.com
multicl-expeditions.com
diallojohn-expeditions.com
dialloj-expeditions.com
automovileshipping.com
mediterranean-shipping.com
mediterranean-logistics.com
ez2export.net
dessydina.com
unipexpeimp.com
dessunipexpeimp.eu
mediterraneo-international-shipping.com
mediteraneoshipping.com
meditrans-logistica.com
protectivent.com
protectivent.net
ronekicargosl.com
ronekiexpeimp.com
eg-express.com
cantabriashipping.com
total-shipping.com
transporte-auto.com
mundo-envios.com
negro-universal.com
negroexport.com
negroexportacao.com
multicl-expeditions.com
tiscan-ex.com
rigel-logistica.com
transportes-guimar.com
cfe-shipping.com
grupo-igi.com
hnos-sainz.com
iscan-express.com
diallojohn-expeditions_com
etransporte.biz
etransporte.info
dessunipexpeimp.eu
catradezone.com
arroyo-express.com
alba-expeditions.net

Alexandra, Ce aveţi de spus acum?
Sunteţi Fiind foarte liniştită.

Ms Oncescu came by for a visit 7-5-10 and here is what she had to say:

Please wait for a site operator to respond...
Operator No Muie has joined the chat.
No Muie: Hi
68.49.227.26: hi, wait a minute
68.49.227.26: I will reveal one of the most dangerous scammers
68.49.227.26: * URL deleted*
68.49.227.26: this guy right here
68.49.227.26: click
68.49.227.26: you see? you have to search for this guy, he is extremely dangerous
68.49.227.26: you know what it says on the paper? of course not, you are from UK
68.49.227.26: Should I translate?
No Muie: sure
68.49.227.26: I beat and I f**k like a sewing machine
68.49.227.26: this guy can do it
No Muie: and what does this mean to me?
68.49.227.26: that you should go after him, he is probably more guilty of all the people you post here. guilty of pick pocketing probably , but guilty nevertheless
68.49.227.26: and he is funny as hell too
No Muie: like you Alexandra?
68.49.227.26: lol
68.49.227.26: yes, like me baby
68.49.227.26: lol
No Muie: :)
68.49.227.26: we have decided to sandbox your blog for a while, you want?
68.49.227.26: until you behave
No Muie: sandbox?
68.49.227.26: you don't know what sandbox is? lol
No Muie: sorry, no
No Muie: ddos?
68.49.227.26: you will see soon. always afraid of ddos, you should know that google protects your ass, we can't do that here. maybe on aa419
68.49.227.26: we will sandbox you baby, and no one will know you exist, if you are not indexed on google
No Muie: I cannot stop you from doing things.
68.49.227.26: maybe that guy from aa419, earl will see you
68.49.227.26: and the other guy I called "the most dangerous villane of the decade"
No Muie: Gonaz?
No Muie: lol
68.49.227.26: gonna slap you hard, aye
68.49.227.26: why do you keep posting this idiotic shipping website? they still work?
68.49.227.26: they scam uk people I think
68.49.227.26: they don't make money muie
The visitor has left the chat.
The chat is ended.


Please wait for a site operator to respond...
Operator No Muie has joined the chat.
No Muie: hello Alexandra
24.61.171.241: Hello
24.61.171.241: How do you know it is me?
No Muie: suprised?
24.61.171.241: yes
24.61.171.241: very
No Muie: I know you must be shocked
No Muie: It was fun to see you posting on aa419
No Muie: I have to admit I am not "green"
24.61.171.241: yes, you are not green
24.61.171.241: How did you found me?
No Muie: congratulations on your babay
No Muie: oops baby
No Muie: Is Bogdan going to marry you?
24.61.171.241: Dita? Yes, I think so, still waiting for the proposal
No Muie: I am sorry it has to be this way.
No Muie: People shouldn't scam.
24.61.171.241: but how did you found us, this is amazing
No Muie: You said it yourself, I know many people in DIICOT, USSS,FBI
24.61.171.241: yes, I can see now. DIICOT was at our home
24.61.171.241: they broke our door
No Muie: oops
No Muie: they like to do that
24.61.171.241: yes, they do. anyway, nothing ever happens, they scream
a little, "get down" and then after interrogating a little and find the
laptop encrypted, no evidence, they let you go
24.61.171.241: same old, same old
24.61.171.241: we are in us now anyway
No Muie: like Massachusetts?
24.61.171.241: yes, you see the socks?
No Muie: I see Comcast Salem
24.61.171.241: yes, you see the socks I am using
No Muie: I didn't think you were using your real IP
24.61.171.241: yes, you are utterly smart
24.61.171.241: that's why you got us
24.61.171.241: now what?
No Muie: I don't know what to say.
No Muie: I am not God or the police.
No Muie: You must live with what you did.
24.61.171.241: Yes, I will repay all my victims, get the name of those
two probably innocent people from there
24.61.171.241: You made me laugh enough
24.61.171.241: My entire team is laughing their asses off for the last
days
No Muie: I didn't think you were being sincere.
24.61.171.241: And that guy you offer as present for the fat Americans
of 4 of July, lol
No Muie: Stancu, yes
24.61.171.241: That is the scammer? you have seen the house beside him
in the picture?
24.61.171.241: that guy scams people
24.61.171.241: hahahaha
24.61.171.241: with the millions he scams he built a house made of mud
No Muie: Oh, I thought that was Disneyland Romania
24.61.171.241: man, I am not going to tell you more, you know already
enough. If you get paid for the things you do, congratulations. If you
don't, allow me to laugh a little more and get the f**k out of here. It
stinks of greenhorn.
The visitor has left the chat.
The chat is ended.

Leia Mais…

Tuesday, June 1, 2010

reliableusedcarsinc.com

As a result of my blog and posts on these scammers, I have been threatened and an attempt to hack my data has occured.
Its quite obvious I have put a "dent" in their car sales scam.

Here are the scammer's newest sites:
http://netscammers.blogspot.com/2010/07/0nlinebuslnesscom.html
http://netscammers.blogspot.com/2010/07/number1autosalesinccom.html
http://netscammers.blogspot.com/2010/07/number1autosalesincom.html

Related previous websites by the same scammers on this post:
http://netscammers.blogspot.com/2010/07/phantom-stores.html


www.superautosalesus.com SCAM
superautosalesus.com SCAM

CBS News Video here.

Related story here by Gary Craig of the Democrat and Chronicle

See this story on MSNBC by Herb Weisbaum aka ConsumerMan

A MUST READ web site for vehicle shoppers on the internet.
http://www.carbuyingtips.com/

10 Tips to Avoid Internet Car Sales Scams.

Look at this Google Search data which contains all the stolen CarFax Reports.

Fake MerchantCircle reviews on superautosalesus.com:
http://www.merchantcircle.com/business/Superstore.Used.Cars.800-396-1867
Interesting to note that MerchantCircle still has the site listed as verified.
How many scam sites has MerchantCircle verified?

Also involved is the site www.e-websitesecurity.org
It offers fake verifications of the scam sites.
Current scam site:
http://www.e-websitesecurity.org/check_domain.php?domain=SuperAutoSalesUS.com
Their older site is still listed on e-websitesecurity.org
http://www.e-websitesecurity.org/check_domain.php?domain=SuperAutoSalesUSA.com
In fact, all their previous fake sites are still listed.
Just replace the URLS.

MoneyGram warning about car scams.
(Shame that WalMart doesn't warn people because the victims don't go to the MoneyGram site to purchase the transfers. The scammers tell the victims to specifically use WalMart.):
https://www.moneygram.com/wps/portal/moneygramonline/home/detailpages/FraudAlertDetail

MoneyGram to combat fraud press release

Better Business Bureau Warns Of Car Scam
The Better Business Bureau of Central & Eastern Kentucky is warning car shoppers to beware of websites offering too-good-to-be-true deals on repossessed cars.
http://www.msnbc.msn.com/id/38125845/from/toolbar

BBB article on this scam site:
http://www.ky-in.bbb.org/article/these-scammers-pose-as-an-out-of-business-louisville-used-car-dealer-20582

Also
http://www.lex18.com/news/better-business-bureau-warns-of-car-scam

The scammers found my post on Norton Safe Web and added their own fake recommendations:
http://safeweb.norton.com/report/show?url=superautosalesus.com

superautosalesusa.com was these scammer's newest site.
www.superautosalesusa.com
It appears dead.

The scammers previously used:
http://www.e-websecurity.org/ Now dead.
To falsely verify their fake sites and make people think they were legitimate.
They were also using MerchantCircle to "verify" their fake site:
Posting has been deleted.
http://www.merchantcircle.com/business/Superstore.Used.Cars.800-396-1867
http://www.merchantcircle.com/business/Super.Auto.Sales.702-399-1400

NEVER send money using MoneyGram for items on the internet.

Here is a MEMPHIS, TN (WMC-TV)news story on one of these scammer's previous sites.
americautosales.com
http://www.wmctv.com/Global/story.asp?S=12648088

And an update to the story where a victim speaks out.
Video below.
http://www.wmctv.com/Global/story.asp?S=12723656


Its also on the BBB site:
http://dallas.bbb.org/article/internet-scam-uses-local-auto-dealers-name-20101







Be VOCAL
File a local police report in order to get a Case Number.
You will need a case number to file a loss on your income taxes.
File a complaint here:
http://www.ic3.gov/default.aspx

reliableusedcarsinc.com is dead.

www.masslenmotors.com is dead.
masslenmotors.com is dead
heavensentusedcars.com is dead.

Again they were using MechantCircle to place fake recommendations for the fraud site heavensentusedcars.com.

I contacted MerchantCricle's TOS, mentioned these scammer's previous posts on their site and was told:

Thank-you for contacting MerchantCircle, helping local businesses find more customers online.

If you feel a user is violating our Terms of Service (http://www.merchantcircle.com/corporate/tos.html) please flag (report abuse) the listing page in question by clicking the red "report abuse" icon and we would be happy to look into this violation.

If you feel a MerchantCircle user is violating the law or if you feel threatened in any way please contact your local authorities.

Please note, MerchantCircle does not give out private information such as emails, IP addresses or names without a court-issued subpoena per our privacy policy: http://www.merchantcircle.com/corporate/privacy.html

If you have further questions regarding MerchantCircle and our Community Guidelines/ Terms of Service, you may access our extensive Knowledgebase here: http://merchantcircle.helpserve.com/index.php
Trish Burnside
800 E. El Camino Real Suite 330
Mt. View CA 94040
I never asked for the scammer's information.
I reported the fake data to the email address:
tosviolation@merchantcircle.com
BUT the way MerchantCircle has their site set up you have to become a member to report abuse.


Their clone fake site:
anycreditcarsales.com is now dead.
Data here:
http://www.google.com/search?hl=en&as_q=&as_epq=anycreditcarsales.com&as_oq=&as_eq=&num=10&lr=&as_filetype=&ft=i&as_sitesearch=&as_qdr=all&as_rights=&as_occt=any&cr=&as_nlo=&as_nhi=&safe=images

These scammers were also using:
americautosales.com
www.americautosales.com
Better Business Bureau warning here:
http://dallas.bbb.org/article/internet-scam-uses-local-auto-dealers-name-20101

Fake MerchantCircle post deleted:
http://www.merchantcircle.com/business/America.Auto.Sales.901-345-3322

More data here:
http://www.google.com/search?hl=en&as_q=&as_epq=americautosales.com&as_oq=&as_eq=&num=10&lr=&as_filetype=&ft=i&as_sitesearch=&as_qdr=all&as_rights=&as_occt=any&cr=&as_nlo=&as_nhi=&safe=imagesand this domain for email:
americautosales.net

I am sure there will be new sites as this scam seems to have been quite lucrative.

This is a very popular thread.
SILENCE IS THE SCAMMER'S BEST FRIEND !!!!
PLEASE post feedback and comments below.
Others will benefit from your input.
Lets help others so they don't lose their money.
Most importantly NEVER use MoneyGram to pay for items online.
Contact me if you have any details:
netscammers@gmail.com

The site was reported twice by aa419.org:
http://reports.scampatrol.org/NEW/reportview.php?ReportID=12605

Read how the scammers have tried to defend their fake site:
http://www.sitejabber.com/reviews/www.reliableusedcarsinc.com

Look at all the fake CARFAX reports on the site:
http://www.google.com/search?hl=en&lr=&as_qdr=all&q=+site:reliableusedcarsinc.com+%22reliableusedcarsinc.com%22&sa=X&ei=QtwLTKvNEMH58AbN0YWLBw&ved=0CAIQqAQwBA

These scammers also set up a fake site to legitimize reliableusedcarsinc.com
website-secure.org
http://www.website-secure.org/check_domain.php?domain=ReliableUsedCarsInc.com
website-secure.org is not in ANY way related to WebsiteSecure.org
WebsiteSecure.org is a legitimate professional business.

The scammers are also using Google ads:
http://webcache.googleusercontent.com/search?q=cache:zA-7RZ1WYwsJ:search.go2net.com/go2net/ws/redir/qcat%3DWeb/qcoll%3Drelevance/qkw%3DCraigslist%2520Cars%2520Tulsa%2520Oklahoma/rfcp%3DRightNav/rfcid%3D302362/qlnk%3D1/_iceUrlFlag%3D11%3F_IceUrl%3Dtrue+reliableusedcarsinc.com&cd=14&hl=en&ct=clnk&gl=us

What is incredible about these scammers
is their use of services by Merchant Circle.
They were "Verified" by MerchantCircle!
http://www.merchantcircle.com/bulletins/Reliable.Used.Cars.Inc.816-333-2913

The verification is now removed but the other site (link below is still listed as verified)

Look at the fake customer review:
http://webcache.googleusercontent.com/search?q=cache:xk-z8mNbGtsJ:www.merchantcircle.com/business/Reliable.Used.Cars.Inc.816-333-2913+%22reliableusedcarsinc.com%22&cd=10&hl=en&ct=clnk&gl=us

"Reliable Used Cars Inc 5 Thank you
When I bought my Mustang in 2007 I wrote that I was completely satisfied with www.reliableusedcarsinc.com and in particular with Yolanda Barron. The same holds true today. This is my 3rd purchase of a Ford vehicle since 2007. For me it's simple; when I need a new vehicle I just get online at www.reliableusedcarsinc.com, look for Yolanda, and know that I will be completely satisfied with the vehicle and the experience. Great Place To buy cars.


May 28, 2010 by George Roziski in Knoxville, TN
"

If you try to report the listing on MerchantCircle:
http://www.merchantcircle.com/help/

it appears you either have to register for an account or as it states:

"No Thanks
I do not wish to register at this time, and understand that it may take up to several weeks to receive a response."

several weeks ?????

These same scammers have run numerous clone sites including:

yankeeautomotive.com
The fake verification on website-secure.org
http://www.website-secure.org/check_domain.php?domain=yankeeautomotive.com

carconnectionplanet.com
The fake verification on website-secure.org
http://www.website-secure.org/check_domain.php?domain=carconnectionplanet.com

qualitycarsource.com
The fake verification on website-secure.org
http://www.website-secure.org/check_domain.php?domain=qualitycarsource.com

anycreditcarsales.com
The fake verification on website-secure.org
http://www.website-secure.org/check_domain.php?domain=anycreditcarsales.com

unlimited-autos.com
Data here:
http://www.sitejabber.com/reviews/www.unlimited-autos.com
The fake verification on website-secure.org
http://www.website-secure.org/check_domain.php?domain=unlimited-autos.com

parkway-auto.com

kikimotorsinc.com
http://www.website-secure.org/check_domain.php?domain=kikimotorsinc.com
Here is a discussion on the site and cars on it:
http://forums.corvetteforum.com/c6-corvette-general-discussion/2521735-corvette-too-cheap.html
Another posting:
http://forum.e46fanatics.com/showthread.php?t=738958

ultimate-autosales.com
http://www.website-secure.org/check_domain.php?domain=ultimate-autosales.com

kkcarco.com
http://www.website-secure.org/check_domain.php?domain=kkcarco.com

rome-fashion.com

superauto-sales.com
http://www.website-secure.org/check_domain.php?domain=superauto-sales.com

starsauto-sales.com

stars-automart.com
Discussion about the site:
http://forums.ebay.com/db1/topic/Ebay-Motors/I-Need-Some/510123209
Notice the fake recommendations on the last page of the post.

star7auto.com
http://www.website-secure.org/check_domain.php?domain=star7auto.com

carsourceus.com
http://www.website-secure.org/check_domain.php?domain=carsourceus.com

extrememotorcarsinc.com
http://www.website-secure.org/check_domain.php?domain=extrememotorcarsinc.com

kingsautosalesusa.com
http://www.website-secure.org/check_domain.php?domain=kingsautosalesusa.com

creditcityautosalesusa.com
http://www.website-secure.org/check_domain.php?domain=creditcityautosalesusa.com

barrera-autosales.com
http://www.google.com/search?hl=en&as_q=&as_epq=barrera-autosales.com&as_oq=&as_eq=&num=10&lr=&as_filetype=&ft=i&as_sitesearch=&as_qdr=all&as_rights=&as_occt=any&cr=&as_nlo=&as_nhi=&safe=images

Look at all the posts about anycreditcarsales.com, including fake endorsements:
http://www.google.com/search?hl=en&as_q=&as_epq=anycreditcarsales.com&as_oq=&as_eq=&num=10&lr=&as_filetype=&ft=i&as_sitesearch=&as_qdr=all&as_rights=&as_occt=any&cr=&as_nlo=&as_nhi=&safe=images

The MerchantCircle "verification" listing for anycreditcarsales.com was deleted, here is the cached version:
http://webcache.googleusercontent.com/search?q=cache:u0M1V46pNccJ:www.merchantcircle.com/business/Uomo.Auto.Sales.800-893-6652+anycreditcarsales.com&cd=3&hl=en&ct=clnk&gl=us


How is the consumer protected?

Leia Mais…