Here is Adrian's new site
Today I was going through my list of possible fraud domains and came upon a newley registered one.
The domain now contains an overly used scam template (images below)
I did a whois search on it and reviewed the data.
I was quickly able to determine the account is fraud for these reasons:
klm-cargotrans.com would have nothing to do with the legitimate company KLM, which merged with AirFrance since they already have web sites.
Next the whois data lists a person who lives in PEVELY, 63070, DE.
The next step is to look at the other registration data.
The contact email given for the registrant is:
A quick Google search indicates the email address belongs to someone who refers to himself as:
A further look reveals this person lives in Valcea, Romania.
Inregistrat: Nov 2008
ID steam:Cand o sa imi cumpar atunci al fac Public.
To play like a pro you need Skill , For Skill need Brain
- = Schizofrenic Hamster = -
Yes Adrian, you need a brain.
Domain Name: KLM-CARGOTRANS.COM
Registrar: CRONON AG BERLIN, NIEDERLASSUNG REGENSBURG
Whois Server: whois.tmagnic.net
Referral URL: http://nsi-robo.tmag.de
Name Server: NS1.NETBEAT.DE
Name Server: NS2.NETBEAT.DE
Updated Date: 05-nov-2010
Creation Date: 05-nov-2010
Expiration Date: 05-nov-2011
Regensburg, D-93047, DE
The tecnical contact, Mr Baiesu has an email address for the .ro (Romanian) domain abc.ro.
Here are some screen captures of Adrian's public profile:
Not bad huh?
At least we know what he's spending his (oops I mean your) money on, funny slippers and a Mercedes.
Here are some images of the fraud domain:
Here is the scammer's first intended victim:
Here are more intended victims:
Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott