Wednesday, January 26, 2011

DOMAINSCAN.RO and scammers

I received a comment on ths post today 2-2-11

Cimpean Andrei has left a new comment on your post
Hy, I''m the CEO of domainscan.ro. First of all I must say that most if not all the domain names that you marked above as scam were suspended. You made the assumptions that all the above domains are for scams, but most of them were just empty new accounts, you made the assumption bases on the domain named, that's just not real and professional.

My response:
I removed "loves" from the title of this post.
Not all the domains are suspended as you suggested in your post.
We all know such domains are used for spoof and phishing emails and need no content, so they merely appear "empty".
Example:
http://www.ebaymotorstransactions.com/
Does this person, who is obvioulsy not the legitimate eBay have the right to run an account on your server which suggests to inexperienced internet users that the emails are for eBay transactions?
Similar sites listed here:
http://netscammers.blogspot.com/2010/04/spoof-sites.html

You have obviously read the initial post and had the opportunity to kill all these fake sites, but have yet to do so.....Does this mean you condone these domains?
http://whois.domaintools.com/ebaymotorstransactions.com
The email address used to register that account is:
fernandel1903@yahoo.com
The Yahoo account information reveals:
http://pulse.yahoo.com/fernandel1903
Fernand Joseph 30 - Male - Las Vegas, Nevada
That is a far cry from the actual domain registration data which claims:
Registrant Name: Andrei Gheorghe
Registrant Organization: NA
Registrant Street1: Calea Grivitei 81
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 010761
Registrant Country: RO
Registrant Phone: 4.023454575
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: fernandel1903@yahoo.com
Can you prove any of them are or were legitimate?
Have you reported these domains to the police and eBay?
Have you bothered to go over the domains on all your IPs and servers to check for similar sites and kill them?
You as a Romanian web host, should have a pro-active stance against fraud domains and set the benchmark.

Can you explain why you were listed as the registrant for the still actve fraud domain:
royal-cargo-ltd.com
http://db.aa419.org/fakebanksview.php?key=46322
(The domain still forwards to the suspended account: )
http://883784transportcargo.freehostia.com/ 
On these dates:
2010
2010-03-28
2010-03-30
2010-04-03
2010-04-08
2010-04-09
2010-04-10
2010-06-08
2010-08-02
2010-10-26
2010-11-11
(I can get this data using the service which I explain below)
The current whois for the site is:
http://whois.domaintools.com/royal-cargo-ltd.com

and by the way, goofoop@yahoo.com is not a valid Yahoo account......

....that's just not real and professional......
Registrant Name: Marius Macelaru
Registrant Organization: NA
Registrant Street1: str. v tepes, nr. 32
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: BUC
Registrant Postal Code: 342345
Registrant Country: RO
Registrant Phone: 40.93412342
Registrant Phone Ext.:
Registrant FAX: 40.264214035
Registrant Email: goofoop@yahoo.com
Here are fraud domains located on a server in Romania and the breakdown of how they are being used.
The domains have been reported to eBay.
They will also be listed on http://www.aa419.org/

In order to get this data I used my Domain Tools account.
This account costs about $3-400 a year.
I cannot afford to continue to pay for this service and am asking for your help by donating to my PayPal account below.

The server which contains the data for most of these domains is giving this notice:

Server response:
Excessive usage, try later...
This is "bs" and the data is available using a domain history search on Domain Tools.

http://www.checkout-customers.com/
Most likely used for fake invoices.
Contains a PayPal phishing site:
http://checkout-customers.com/paypal/
Created On: 9/11/2010 5:48:33 AM
Last Updated On: 9/11/2010 5:48:33 AM
Expiration Date: 9/11/2011 5:48:33 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: alexandru a dick
Registrant Organization: NA
Registrant Street1: strada sarariei nr 126
Registrant Street2:
Registrant City: iasi
Registrant State/Province: iasi
Registrant Postal Code: 707531
Registrant Country: RO
Registrant Phone: 4.072456645
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: cipas82@gmail.com
Admin Name: alexandru a dick
Admin Organization: NA
Admin Street1: strada sarariei nr 126
Admin Street2:
Admin City: iasi
Admin State/Province: iasi
Admin Postal Code: 707531
Admin Country: RO
Admin Phone: 4.072456645
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: cipas82@gmail.com
Billing Name: alexandru a dick
Billing Organization: NA
Billing Street1: strada sarariei nr 126
Billing Street2:
Billing City: iasi
Billing State/Province: iasi
Billing Postal Code: 707531
Billing Country: RO
Billing Phone: 4.072456645
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: cipas82@gmail.com
Tech Name: alexandru a dick
Tech Organization: NA
Tech Street1: strada sarariei nr 126
Tech Street2:
Tech City: iasi
Tech State/Province: iasi
Tech Postal Code: 707531
Tech Country: RO
Tech Phone: 4.072456645
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: cipas82@gmail.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO

http://www.e-bay-customer.com/
Most likely used for spoof eBay emails.
Created On: 11/29/2010 11:53:12 PM
Last Updated On: 11/29/2010 11:53:12 PM
Expiration Date: 11/29/2011 11:53:12 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:
ok

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Tom Tervenzy
Registrant Organization: NA
Registrant Street1: Ciobanului Nr. 27
Registrant Street2:
Registrant City: Arad
Registrant State/Province: Arad
Registrant Postal Code: 310298
Registrant Country: RO
Registrant Phone: 40.765718391
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: young77ed@gmail.com
Admin Name: Tom Tervenzy
Admin Organization: NA
Admin Street1: Ciobanului Nr. 27
Admin Street2:
Admin City: Arad
Admin State/Province: Arad
Admin Postal Code: 310298
Admin Country: RO
Admin Phone: 40.765718391
Admin Phone Ext.:
Admin FAX: .
Admin Email: young77ed@gmail.com
Billing Name: Tom Tervenzy
Billing Organization: NA
Billing Street1: Ciobanului Nr. 27
Billing Street2:
Billing City: Arad
Billing State/Province: Arad
Billing Postal Code: 310298
Billing Country: RO
Billing Phone: 40.765718391
Billing Phone Ext.:
Billing FAX: .
Billing Email: young77ed@gmail.com
Tech Name: Tom Tervenzy
Tech Organization: NA
Tech Street1: Ciobanului Nr. 27
Tech Street2:
Tech City: Arad
Tech State/Province: Arad
Tech Postal Code: 310298
Tech Country: RO
Tech Phone: 40.765718391
Tech Phone Ext.:
Tech FAX: .
Tech Email: young77ed@gmail.com
Name Servers:
NS2.DOMAINSCAN.RO
NS1.DOMAINSCAN.RO

http://www.ebaymotorstransactions.com/
Most likely used for spoof emails pretending to be eBay.

Created On: 8/8/2010 9:01:38 AM
Last Updated On: 8/8/2010 9:01:38 AM
Expiration Date: 8/8/2011 9:01:38 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Andrei Gheorghe
Registrant Organization: NA
Registrant Street1: Calea Grivitei 81
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 010761
Registrant Country: RO
Registrant Phone: 4.023454575
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: fernandel1903@yahoo.com
Admin Name: Andrei Gheorghe
Admin Organization: NA
Admin Street1: Calea Grivitei 81
Admin Street2:
Admin City: Bucuresti
Admin State/Province: Bucuresti
Admin Postal Code: 010761
Admin Country: RO
Admin Phone: 4.023454575
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: fernandel1903@yahoo.com
Billing Name: Andrei Gheorghe
Billing Organization: NA
Billing Street1: Calea Grivitei 81
Billing Street2:
Billing City: Bucuresti
Billing State/Province: Bucuresti
Billing Postal Code: 010761
Billing Country: RO
Billing Phone: 4.023454575
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: fernandel1903@yahoo.com
Tech Name: Andrei Gheorghe
Tech Organization: NA
Tech Street1: Calea Grivitei 81
Tech Street2:
Tech City: Bucuresti
Tech State/Province: Bucuresti
Tech Postal Code: 010761
Tech Country: RO
Tech Phone: 4.023454575
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: fernandel1903@yahoo.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO

http://www.ebaythirdparty.com/
Most likely used for spoof eBay emails.
Created On: 7/31/2010 10:05:25 AM
Last Updated On: 7/31/2010 10:05:25 AM
Expiration Date: 7/31/2011 10:05:25 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Ionescu Mihai
Registrant Organization: NA
Registrant Street1: Str Pasul Morii
Registrant Street2:
Registrant City: Bacau
Registrant State/Province: Bacau
Registrant Postal Code: 405200
Registrant Country: RO
Registrant Phone: 40.741767872
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: zilenoi@yahoo.com
Admin Name: Ionescu Mihai
Admin Organization: NA
Admin Street1: Str Pasul Morii
Admin Street2:
Admin City: Bacau
Admin State/Province: Bacau
Admin Postal Code: 405200
Admin Country: RO
Admin Phone: 40.741767872
Admin Phone Ext.:
Admin FAX: .
Admin Email: zilenoi@yahoo.com
Billing Name: Ionescu Mihai
Billing Organization: NA
Billing Street1: Str Pasul Morii
Billing Street2:
Billing City: Bacau
Billing State/Province: Bacau
Billing Postal Code: 405200
Billing Country: RO
Billing Phone: 40.741767872
Billing Phone Ext.:
Billing FAX: .
Billing Email: zilenoi@yahoo.com
Tech Name: Ionescu Mihai
Tech Organization: NA
Tech Street1: Str Pasul Morii
Tech Street2:
Tech City: Bacau
Tech State/Province: Bacau
Tech Postal Code: 405200
Tech Country: RO
Tech Phone: 40.741767872
Tech Phone Ext.:
Tech FAX: .
Tech Email: zilenoi@yahoo.com
Name Servers:
ns1.domainscan.ro
ns2.domainscan.ro

http://www.lkw-trans.com/ dead fake shipping site.
Dead, mentioned here:
http://forum.aa419.org/viewtopic.php?t=47087


http://shipping-expert.com/content/index.php  active fake shipping site

Domain name: SHIPPING-EXPERT.COM

Created On: 11/24/2010 6:24:49 PM
Last Updated On: 11/24/2010 6:24:49 PM
Expiration Date: 11/24/2011 6:24:49 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Popa Eugenia
Registrant Organization: NA
Registrant Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Registrant Street2:
Registrant City: Cluj
Registrant State/Province: CLUJ
Registrant Postal Code: 400431
Registrant Country: RO
Registrant Phone: 40.756481004
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: popaeugeniacorina@yahoo.com
Admin Name: Popa Eugenia
Admin Organization: NA
Admin Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Admin Street2:
Admin City: Cluj
Admin State/Province: CLUJ
Admin Postal Code: 400431
Admin Country: RO
Admin Phone: 40.756481004
Admin Phone Ext.:
Admin FAX: .
Admin Email: popaeugeniacorina@yahoo.com
Billing Name: Popa Eugenia
Billing Organization: NA
Billing Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Billing Street2:
Billing City: Cluj
Billing State/Province: CLUJ
Billing Postal Code: 400431
Billing Country: RO
Billing Phone: 40.756481004
Billing Phone Ext.:
Billing FAX: .
Billing Email: popaeugeniacorina@yahoo.com
Tech Name: Popa Eugenia
Tech Organization: NA
Tech Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Tech Street2:
Tech City: Cluj
Tech State/Province: CLUJ
Tech Postal Code: 400431
Tech Country: RO
Tech Phone: 40.756481004
Tech Phone Ext.:
Tech FAX: .
Tech Email: popaeugeniacorina@yahoo.com
Name Servers:
ns1.domainscan.ro
ns2.domainscan.ro



Domain name: http://www.transactions-details.com/
Most likely being used for spoof eBay emails.

Created On: 5/4/2010 7:28:16 PM
Last Updated On: 5/4/2010 7:28:16 PM
Expiration Date: 5/4/2011 7:28:16 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Roiu George
Registrant Organization: NA
Registrant Street1: str.Iza, nr.5, bl.S9, ap.19
Registrant Street2:
Registrant City: Oradea
Registrant State/Province: BH
Registrant Postal Code: 410458
Registrant Country: RO
Registrant Phone: 4.075666145
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: roiu.george@gmail.com
Admin Name: Roiu George
Admin Organization: NA
Admin Street1: str.Iza, nr.5, bl.S9, ap.19
Admin Street2:
Admin City: Oradea
Admin State/Province: BH
Admin Postal Code: 410458
Admin Country: RO
Admin Phone: 4.075666145
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: roiu.george@gmail.com
Billing Name: Roiu George
Billing Organization: NA
Billing Street1: str.Iza, nr.5, bl.S9, ap.19
Billing Street2:
Billing City: Oradea
Billing State/Province: BH
Billing Postal Code: 410458
Billing Country: RO
Billing Phone: 4.075666145
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: roiu.george@gmail.com
Tech Name: Roiu George
Tech Organization: NA
Tech Street1: str.Iza, nr.5, bl.S9, ap.19
Tech Street2:
Tech City: Oradea
Tech State/Province: BH
Tech Postal Code: 410458
Tech Country: RO
Tech Phone: 4.075666145
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: roiu.george@gmail.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO


Domain name: http://www.uscarstrader.com/
This site contains files and images of vehicles used in scams in the internet.
Tthe files is being used on these fake sites:
 http://tahoe20.110mb.com/contactme.htm
The scammer is advertising a:
2007 Chevrolet Tahoe LTZ
Price $2,800
and using the email address:
jenny22339@gmail.com 
See the listings on Craigslist here:
http://www.google.com/search?q=jenny22339%40gmail.com&ie=utf-8&oe=utf-8&aq=t&client=firefox-a&rlz=1R1GGGL_en___US365#q=jenny22339%40gmail.com&hl=en&client=firefox-a&rlz=1R1GGGL_en___US365&tbs=qdr:d&prmd=ivns&filter=0&fp=438d7dda7b26e41

another here:
http://lexus12.110mb.com/contactme.htm
2006 LEXUS IS 250
Price $2,700
melydon41@gmail.com

I believe the prices are based on the fact that Western Union and MoneyGram will not allow transfers over $3,000

Created On: 11/5/2010 12:05:06 AM
Last Updated On: 11/5/2010 12:05:06 AM
Expiration Date: 11/5/2011 12:05:06 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Toma Viorel
Registrant Organization: NA
Registrant Street1: Str Popa Lazar nr 12
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 021586
Registrant Country: RO
Registrant Phone: 4.076731904
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: goldsc99@gmail.com
Admin Name: Toma Viorel
Admin Organization: NA
Admin Street1: Str Popa Lazar nr 12
Admin Street2:
Admin City: Bucuresti
Admin State/Province: Bucuresti
Admin Postal Code: 021586
Admin Country: RO
Admin Phone: 4.076731904
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: goldsc99@gmail.com
Billing Name: Toma Viorel
Billing Organization: NA
Billing Street1: Str Popa Lazar nr 12
Billing Street2:
Billing City: Bucuresti
Billing State/Province: Bucuresti
Billing Postal Code: 021586
Billing Country: RO
Billing Phone: 4.076731904
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: goldsc99@gmail.com
Tech Name: Toma Viorel
Tech Organization: NA
Tech Street1: Str Popa Lazar nr 12
Tech Street2:
Tech City: Bucuresti
Tech State/Province: Bucuresti
Tech Postal Code: 021586
Tech Country: RO
Tech Phone: 4.076731904
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: goldsc99@gmail.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO


Domain name: http://www.vehicle-transactions.com/ forwards to legitimate eBay site.
Most likely being used foir spoof eBay emails.

Created On: 7/8/2010 1:26:57 PM
Last Updated On: 7/8/2010 1:26:57 PM
Expiration Date: 7/8/2011 1:26:57 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Clayton Steven
Registrant Organization: NA
Registrant Street1: str. Bulevardul Unirii nr. 12
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 040105
Registrant Country: RO
Registrant Phone: 4.074633057
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: venton12@yahoo.com
Admin Name: Clayton Steven
Admin Organization: NA
Admin Street1: str. Bulevardul Unirii nr. 12
Admin Street2:
Admin City: Bucuresti
Admin State/Province: Bucuresti
Admin Postal Code: 040105
Admin Country: RO
Admin Phone: 4.074633057
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: venton12@yahoo.com
Billing Name: Clayton Steven
Billing Organization: NA
Billing Street1: str. Bulevardul Unirii nr. 12
Billing Street2:
Billing City: Bucuresti
Billing State/Province: Bucuresti
Billing Postal Code: 040105
Billing Country: RO
Billing Phone: 4.074633057
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: venton12@yahoo.com
Tech Name: Clayton Steven
Tech Organization: NA
Tech Street1: str. Bulevardul Unirii nr. 12
Tech Street2:
Tech City: Bucuresti
Tech State/Province: Bucuresti
Tech Postal Code: 040105
Tech Country: RO
Tech Phone: 4.074633057
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: venton12@yahoo.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO

Domain Name: http://www.accountcraigslists.org/
Most likely being used for spoof Craigslist emails.

Created On:21-Jan-2011 14:57:43 UTC
Last Updated On:24-Jan-2011 13:49:21 UTC
Expiration Date:21-Jan-2012 14:57:43 UTC
Sponsoring Registrar:Paknic (Private) Limited (R1605-LROR)
Status:TRANSFER PROHIBITED
Status:ADDPERIOD
Registrant ID:PAK11012111532-1
Registrant Name:Iordache Marius
Registrant Organization:NA
Registrant Street1:str. Lujerului, nr. 2
Registrant Street2:
Registrant Street3:
Registrant City:Bucuresti
Registrant State/Province:Bucuresti
Registrant Postal Code:111111
Registrant Country:RO
Registrant Phone:+40.743022593
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:imc_3030@yahoo.com
Admin ID:PAK11012111532-2
Admin Name:Iordache Marius
Admin Organization:NA
Admin Street1:str. Lujerului, nr. 2
Admin Street2:
Admin Street3:
Admin City:Bucuresti
Admin State/Province:Bucuresti
Admin Postal Code:111111
Admin Country:RO
Admin Phone:+40.743022593
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:imc_3030@yahoo.com
Tech ID:PAK11012111532-3
Tech Name:Iordache Marius
Tech Organization:NA
Tech Street1:str. Lujerului, nr. 2
Tech Street2:
Tech Street3:
Tech City:Bucuresti
Tech State/Province:Bucuresti
Tech Postal Code:111111
Tech Country:RO
Tech Phone:+40.743022593
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:imc_3030@yahoo.com
Name Server:NS3.NS-SERVICES.NET
Name Server:NS4.NS-SERVICES.NET
Name Server:NS1.DOMAINSCAN.RO
Name Server:NS2.DOMAINSCAN.RO

1 comments:

Cimpean Andrei said...

Hy, I''m the CEO of domainscan.ro. First of all I must say that most if not all the domain names that you marked above as scam were suspended. You made the assumptions that all the above domains are for scams, but most of them were just empty new accounts, you made the assumption bases on the domain named, that's just not real and professional.

Post a Comment