http://www.coolwhois.com/d/fedexfastdelivery.com
Registration Service Provider:
services@123-reg.co.uk
08712309525
08709126612 (fax)
http://www.123-reg.co.uk
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
...yes and ask them how and why they can allow someone to register a domain named:
fedexfastdelivery.com
Using erroneous contact data:
Administrative Contact:
courier, fedex dicksonwalls@yahoo.com
12
sadoh
johan, johannesburg BS10 5NG
GB
+44.783543633
A simple Google search of dicksonwalls@yahoo.com reveals:
http://www.google.com/search?q=%22dicksonwalls%40yahoo.com%22&hl=en&lr=&filter=0
http://www.yaari.com/?controller=profile&action=show&id=1395168
http://www.yaari.com/?controller=profile&action=show&id=1632084
In addition to using a domain to most likely send spoof emails pretending to be FedEx, dicksonwalls@yahoo.com is also a romance scammer.
HI DEAR,
I am very glad to meet you on this site, however l love to share, l love to
preserve and l will love to hold for a lifetime relationship with somebody my
heart longs for.
I am Dickson Walls, I am currently working in UK , I am 38 years of old. girl,
I am a honest, loving, caring and sincere, I am a man who knows the
pricelessness of a sincere relationship. A man who will love to go a long way
and an extra mile for the woman who will sincerely and carelessly share her
precious time with me, holding a special place for me in her heart.
To me, l really desire a woman to build a future with, who is sincere,
responsible, caring understanding. it just don't matter much how you look on
the outside in this relationship but it really matters how you look right inside
because "beauty is skin deep". If you really sincerely want to build a
world of passion, caring, sharing those emotional feelings that seems to
be
betrayed and a committed long-term relationship, I'm yours! Together we can
create great impressions in each other heart that's forever.
Well get to know more about me at dicksonwalls@yahoo.com or
dickson.walls@live.com
can call me on +447045759841 begin_of_the_skype_highlighting +447045759841 end_of_the_skype_highlighting
l really don't want to play around, l want to get to your heart and show
you the deepest love and passions that is endless. l hope you will understand my
heart-beats. I look forward to reading from you.
Dickson walls
Wednesday, March 31, 2010
fedexfastdelivery.com
xhost.ro Total threats found: 19
http://safeweb.norton.com/report/show?url=xhost.ro
Viruses
Threats found: 18
Here is a sample:
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php?filename=funny_weeks&pagetitle=Weeks
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php?filename=huburi&pagetitle=Huburi
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php?filename=sitemap&pagetitle=Sitemap
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php?filename=mylinks&pagetitle=Linkuri-utile
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php?filename=banculzilei&pagetitle=Zambetul-Zilnic
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php?filename=valuta&pagetitle=Valute
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php?filename=rss&pagetitle=RSS
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php?filename=radio&pagetitle=Radio
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php?filename=texte&pagetitle=Texte-Cugetari
Threat Name: Trojan.Malscript!html
Location: http://zackyty11.xhost.ro/index.php
Phishing Attacks (what's this?)
Threats found: 1
Here is a complete list:
Location: http://zaff.xhost.ro/
Sunday, March 28, 2010
gcn.ro not safe?
http://safeweb.norton.com/report/show?url=gcn.ro
Threats found: 2
Here is a complete list:
Threat Name: Trojan Horse
Location: http://auth.gcn.ro/files/Download/nod32.rar
Threat Name: Hacktool
Location: http://auth.gcn.ro/files/Download/cr-wr370.zip
Trojan Horse and Hacktool on a server in Romania?
eBay Craigslist Merger?
Not quite.
Its just another fake domain created by scammers to send fake emails to intended victims.
www.payments-ebay-craigslist.net
More spoof sites listed here:
http://netscammers.blogspot.com/2010/04/spoof-sites.html
Here are the other domains I posted on www.aa419.org yesterday.
www.vpp-e-bay-transaction.com
www.cgi20ebay-motors.com
www.chekout-ebay-escrow.com
www.invoice-ebay-autos-motors.com
www.paiements-ebay-be.com
www.safely-buy-ebaymotors.com
www.safely-pay-ebaymotors.com
www.vpp-ebay-safetydept.com
www.vpp-ebayinc.com
www.vpp-vehicle-purchase-protection-vpp-ebay-motors.com
www.checkout-motors-invoice.com
www.motorsvpp-customer-financialcenter.com
www.purchase-motors-vpp.com
www.cgi-secure-payments-department.com
www.auto-payment-ebvpp.com
www.checkout-vpp.com
www.online-vpp-payment-department.com
www.vehicle-protection-program-vpp.com
www.vpp-online-departament.com
How are these domains allowed?
This wouldn't happen for example on Main Street or the local shopping mall.
If I opened a store and someone else decided to open a store next to me using the same name I'd sue them in court.
I would want to protect my company's name.
There is actually no legitimate reason why these domains are allowed to be registered and hosted.
They are obvious spoof domains created by scammers for the sole purpose of defauding inexperienced internet users.
I don't think its a freedom of speech issue.
See the amount of similar spoof domains myself and others have posted:
http://forum.aa419.org/viewforum.php?f=20&start=0
Thursday, March 25, 2010
Florescu Gheorghe Bogdan
Florescu Gheorghe Bogdan
Last known location:
City :Rm Valcea
Stat : VAlcea
Country : Romania
http://ro.netlog.com/fafa_vl
http://myworld.ebay.com/fafa_vl "suspended"
http://myworld.ebay.com/vl83faf "also suspended"
Some of the fake escrow, shipping and phishing sites he was involved in:
tcexpress.shyper.com
fahrzeug-mobile.com
home--globalps.com
gps-cargo.com
custom-atv-shop.com
custom-bike-shop.com
mobile-sicher.com
shippings-mobile.com
custom-scout24.com
uk-freightcenter.com
heyes-courier.com
ebayers111.freewebpage.org Phishing site
mcbane-international.com
practico-europa.com
sernam-post.com
custom-scout24.com
I will create posts with data on his accomplices in the future.
Sunday, March 14, 2010
Guess The Fake Escrow
I've done a post entitled "Guess the Scammer" so I thought I would do one as "Guess The Fake Escrow".
The scammers involved are (big surprise) Romanians.
Lets start by revealing some of the data from this group of scammers.
I'll reveal the identities of the scammers later.
Some people aren't going to be happy when that happens.
I'm sure this post is going to cause a lot of consternation amongst scammers and others, but nothing is going to happen unless there's a big stink made.
(to quote a US Secret Service contact)
All the victims were sellers on eBay and all shipped their items to Spain.
Here are just some of the items that were stolen:
1.Fedex 850984997755,14k Certified Authentic Mens Ruby& Diamond Ring,1100$,item #4996240152
2.Fedex 845317547540,Princess Cut Diamond,3500$
3.Fedex 849573539716,Real Diamond Gorgeous Ladies Engagement/Wedding Ring,2000$,item #4996989807
4.Fedex 848031329301 One of a kind diamond ring,colorless(F), clarity SI,6000$,item #4996741965
5.Fedex 850257477540,A GORGEOUS GLITTERY TWINKLING DIAMOND,11500$,item #4996600216
6.Fedex 846569024968,Men's 14k yellow gold 3 diamond 1ct total weight ring,1500$,item #4995575033
7.USPS ET 526562303 US,14kt. White Gold, 5/8 ct. tw. Diamond Wedding Set,700$,item #4995069200
8.Fedex 849492343565,PLATINUM LADIES DIAMOND AND TANZANITE FASHION PENDANT,5000$,item #4996251808
9.UPS 1Z5478586642700313, Rolex Ladies 18K,2300$,item #4995914457
10.Fedex 849188181239,3 Stone Engagement Ring with center Canadian Diamond,2000$,item #5000034543
11.UPS 1ze45a096611007387,Diamond Ring,2500$ 12.UPS 1Z32W3716600386396,Diamond engagement ring plus wedding ban,1800$,item #4999202532
13.Fedex 851811770795,DAVID YURMAN SILVER/WHITE+YELLOW GOLD BRACELET+DIAMONDS,2000$,item #4998477021
14.UPS 1Z4AR8786600063958,Diamond Engagement Ring,600$,item #4998975974
15.Fedex 847124190067,Plat. Ring setting, 6-prong head, 2 pear-shape diamonds,700$,item #4999348353
16.Fedex 1Z826E5F6600335590,Lds 14K White Gold Diamond Braclet,800$,item #5000292946
17.UPS 1ZX332816625627336 ,Beautiful Diamond Engagement Ring,4000$,item #4999668239
18.Fedex 1Z0E976V6626005935,Tanzanite and diamond ring 14K yellow gold,800$,item #5000257272
19,UPS 46820474335,Diamond ring,3000$,item #5000536336
20.UPS 1ZEY44896690613891,Chopard Diamond Watch,1500$, item #5000888672
21.UPS 1zw3784x6646658694,Gold Necklaces & Diamond Ring,750$,item #4999512376
22.Fedex 848388908432,Opal set in 18ct and diamonds,2400$,item #4999692372
23.UPS 1ZR35W726609365416,diamond solitare ring and a diamond and sapphire,2500$
24.Fedex 847128024805,Beautiful and Unique 1940?s Diamond Dinner Ring,2400$,item #4995602146
25.Fedex 851967597173,Must Sell 31+ctw sapphire & 2+ ctw diamond bracelet,item #4996381203,4500$
26.Fedex 850949807958,14K White Gold Diamond and Burmese Sapphire Ring,item #5000374438 ,1000$
27.UPS 1ZW329X46624136220,1 1/4 k diamond bridal set,3000$
28.Fedex 851554436307,PLATINUM DIAMOND wedding set,2800$
29.Ups 1Z 319 056 54 4109 8942,MIKIMOTO 18K WGold South Sea Black Pearl & Diamond Ring,3500$,item #4999562658
30.Fedex 791096523152,4.37ct. Round Brilliant Cut Diamond Ring,25500$,item #4995304103
31.Fedex 851549278879,White gold and diamond wedding set,2000$,item #4995696087
32.UPS M1234745166,PLATINUM Half Eternity DIAMOND set RING,1200$,item #4998553601
33.UPS 1ZXX15886632400654,1 CT. T.W. ROUND MULTI-DIAMOND ANNIVERSARY BAND IN 14,item #4998821001,600$
34.Fedex 815041407170,.63ct Round (6-prong) Diamond Solitair Engagement Ring,2000$,item #5000916506
35.Fedex 850988688015, Tacori design platinum diamond engagement ring, $5,000
36.UPS 1ZX170426741730367,BEAUTIFUL RARE DIAMOND HEART ENGAGMENT RING,2000$,item #4999852297
37.Fedex 847817196420,Beautiful Solitare Diamond Ring,1150$,item #5000380626
38.Fedex 46734549178,Brilliant Round Diamond Solitaire Platinum Wedding Set,3500$,item #4993769424
39.Dhl 830 4184 593,New Beautiful Diamond Engagement/Anniversary Ring,1200$,item #4995916585
40.Fedex 845084248158,BEAUTIFUL LADIES SAPPHIRE AND DIAMOND RING,item #4994935038,2400$
41.fedex 850645876461,/2 ct. tw. Diamond white gold 14k anniversary ring,800$
42.Fedex 851565774943,Custom Made Diamond Necklac,7000$,item #4998947816
Here are more items:
1.UPS 1ZX761926641917606,Wedding Bands+Ladies 14kYellow Gold Diamond Ring,380$+1850$,2 acarete,item number item #4910735369
2.Fedex 791291433897,Ladys Gold and DiamondWatch,1800$,item number 4910107508
3.Fedex 790696057558 ,Diamond EngagementRing,1500$,item number 4909482738
4.Fedex 8173 6267 2710,1.5Ct gold diamondring,5500$,item #4909458048
5.UPS 1Z5FT3520495010613,1Z5FT3440495010816,. 58CTDIAMOND RING BRIDAL SET,1000$,item #4910536149
6.Fedex 8465 6279 3322,6.80 Ct WG Diamond TennisBracelet,2700$,Item #4910671924 7.Fedex 790204464721,gold ring with threediamonds,2600$,nu stiu item number
8.Fedex 8437 0422 7262,Stainles steel rolex datejustwith diamond bezel,2600$,item number 4909776165
9.Fedex 8471 2348 6386,Tanzanite and Diamond TennisBracelet,2000$,item number #4910503273
10.Fedex 7906 9689 7255,Diamond Engagement ring 14kgold round brilliant cut diamond,2000$,item number4909965031
11.Fedex 8453 2110 3256,One ladies Ring Guard and oneDiamond solitaire,1700$,item number 4909536334
12.Fedex 8480 2808 3061,Diamond ring with 18 caratgold band diamond is 1 carat,2700$,item number4910681629
13.Fedex 845322362073,ct tw diamond and platinum tennisbracelet,4000$,nu stiu item number
14.Fedex 844292638821,NEW BREITLING SUPER AVENGERDIVERS CHRONOGRAPH,2600$,item number 4909874932
15.Fedex 847832699374 ,Diamond Engagment ring PlatinumSetting,2300$,item number #4910346673
16.Royal mail Airsure LY01399635 0GB,crisscuttri-diamond, platinum engagement ring,3000$
17.Fedex 791886558570,platinum diamond and sapphirering 1.67 carat natural blue sapphire,3000$,itemnumber 4910330021
18.Fedex 839268618150,DIAMOND ENGAGEMENTRING,2100$,item number 4910552035
19.EMS EE666177778 AU,18 carat Gold Saphire andDiamond Gold Dress Ring,3800$,item number 4909467210
20.USPS ra877713239us,diamond bracelet from italy ,62diamonds ,platinum ,7500$,item number 4910304481
21.USPS 8257887422,2.20 cwt pink sapphire ring with .46,3000$,item number 4909844954
22.Fedex 658544345752,14K gold necklace with 1.82diamonds,1780$,item number 4910776932 23.Fedex 652543043817,Cartier- Santos,1500$,item number 4909877330
24.FEDEX: 790205970532,Diamond Engagement Ring .42c,2200$,item #4910996360
25.Fedex 653260272657,14K ring with diamond,1600$
26.USPS ER 735726659 US,Woman's Solitaire CinnamonDiamond Ring,1300$,item #4910401889
27.Fedex 846249446194, $4.2k diamond and pearl necklaceby yvel brandnewinbox,2800$,item #4910223535
28.Fedex 845316884250 ,14 K yellow gold diamond,3200$,item #3920214377
29.Fedex 835088245050 ,Beatifull PL 1.7 EngagementDiamond Ring,2100$,item #4910170658
30.Fedex 844560170385 ,platinum diamond eng agementring and matching band,3000$,item #4910013261
31.Fedex 790207625122,14K Vintage Rolex Midsize OysterPerpetual,2000$,item number 4910931942
32.Fedex 847130007375, Rolex Submariner,4000$,item#4910850830
33.UPS 1Z 92211V0445067112, ROLEX DATEJUST LADY'S18kGold/SS + 10 Diamonds,2100$,item number 4910224188
34.Fedex 848027412670,18KGold Men's Bretlingwristwatch,13500$,item #4914091686
35.Fedex 847828772600,100% Auth. CARTIER Lady ROADSTERPINK WATCH,3000$,item #4915525573
36.Fedex 8478 2390 6510,Cartier 18K GoldRing,1500$,item #4915277816
37.Fedex 848025884564,CUSTOM MADE PIAGET 18kt YELLOWGOLD WRISTWATCH,9500$,item #4914356168
38.Fedex 847182173262,GENTS OMEGA SEAMASTERWATCH,1500$,item number4915623929
39.FEDEX 839266879485,Fancy 18K White Gold Ruby andDiamond Bracelet,8000$,item #4915540289
40.Fedex 848546022864,2 carat diamond ring set inplatinum,2000$,
41.Fedex 848638263419,Tag Heuer Ladies Wristwatchdiamond inset,2300$,item #4909807428
42.Fedex 848025944600,Longines 14kt Yellow Gold Watch,Mens,2000$,item #4914834396 43.Fedex 847829924264, 1.6 Carat Pear Shaped Diamond ,5800$,item #4914693612
44.Fedex 824089128260,vacheron constatine watch,2000$
45.Fedex 845322976606,Omega Wrist watch with diamondbezel in 18K gold,2170$
The mule for some of the sites was:
Alex Georgescu
Listed in the Guess the Scammer thread:
http://netscammers.blogspot.com/2010/02/guess-scammer.html
Ok Ok no guesses so I will start to leave hints.
Here is the contact information from one of the sites:
87 Yarmouth Road
Norwich, NORFOLK
NR7 0HF
Licensed and bond under no: 04050938 at Companies
House UK
Companies House
31 Bloomsburry Street
London
WC1B3XD
Tel: 0870 3333636
Fax: 02920380900
(OoOoOO scammers love that Companies House huh?)
Some of the sites were created by people at:
http://www.dezibel.ro/
aka
http://www.dezibelmedia.ro/
They were:
Valentin Balanescu
valibalanescu@dezibel.ro
and someone named:
"Thomas"
thomas@dezibelmedia.ro
Oh what the heck..here's another tid bit..this guy was involved too:
Nicolescu Lucian
http://profiles.yahoo.com/lucian2k1
http://ro.linkedin.com/in/lucian2k
http://twitter.com/lucian2k
http://www.seedmoney.ro/advisors/lucian-nicolescu
"Lucian is a Software Architect with about a decade of hands-on experience in planning and developing we applications."
I'm sure he meant "web" applications, like fake escrow sites.
The domain awesomeelectronics.com was used in conjunction with some of these sites.
awesomeelectronics.com is also connected to the sites by these scammers:
http://netscammers.blogspot.com/2010/03/catalin-ilie.html
The domain was basically used by the scammers for email addresses:
chelsywhitehouse@awesomeelectronics.com
sales@awesomeelectronics.com
sales.craigslist@awesomeelectronics.com
The scammers also ran a job scam.
They tried to get people to post fake auctions on eBay and used these email addresses:
sonytrader@europe.com
sonyalvarez@mail.com
The major player in these fake escrow sites was:
Ghinescu Radu Mihai
Owner of
STAR DANCE PROMOTION SRL
Leader Paco Group
and previously a "Sales Manager"
at the aforementioned:
Tel: 0727979797
URL: http://www.dezibel.ro/
Here are some links to show what he's more currently been up to and about some "questionable" activities he's been involved in:
(click the text they're links)
Here is an article about him and an investigation into his activities in the UK
An article about him on adevarul.ro
The fake escrow sites all these people were involved in were:
auction-insurance.com
insured-payments.com
insurance-limited.com
insurance-ltd.net
insurance-ltd.co.uk
escrowukltd.com
online-traderservices.com
uk-trade-xchange.com
uk-xchange-trade.com
ukinternetltd.com
uk-insuranceltd.com
uk-alliance-group.com
uk-auction-insurance.com
uk-insurance-business.com
uk-internetlimited.com
uk-netsolutions.com
uk-netservices.com
uk-trade-secure.com
Layouts for the sites can be seen here:
http://escrow-fraud.com/index.php?page=gallery&layout=54
http://escrow-fraud.com/index.php?page=gallery&layout=23
Another person involved is:
Chirita Alexandru aka Chirita Alexandru Florin
An interesting story about him can be seen here:
http://www.oradea.net/readarticle.php?article_id=233&vote=2
Translated
He has ads platered all over the internet using the email address:
alex_ykf@yahoo.com
http://www.google.com/search?hl=en&rlz=1I7DLUS_en&q=alex_ykf%40yahoo.com&start=20&sa=N&filter=0
"Alexandru" aka "Dexter" was also involved in scams with:
http://netscammers.blogspot.com/2010/01/vasile-bogdan.html
They conspired to use people in a job scam using the fake company:
West Computers
Centro Comercial Miramar - av. Encarnación s/n local C39 -
29640 Fuengirola
SPAIN
Tel: +34-617-676-959
Fax: +34-951-238-032
More data will be added as it becomes available.
Feel free to leave comments blelow.
Thanks
Friday, March 12, 2010
Companies House UK OK? No Way
Companies House
http://www.companieshouse.gov.uk/
Their web site explains what they do:
http://www.companieshouse.gov.uk/about/functionsHistory.shtml
Companies House's function is to register companies based in the UK and make that data available to verify those companies legitimacy.
The registrations can be performed through third party companies set up on the internet.
The problem is that scammers are now registering fake companies through those third party firms.
This opens the doors to all kinds of scams on the internet.
Sites like aa419.org rely on legitimate records to verify the legal existance of companies claiming to me registered with Companies House in order to get fraud sites closed down quickly.
Scammers quite frequently claim that on their fake sites.
Verification of this claim can be made through a legitimate third party.
Inquiries for this data must be from valid law enforcement agencies only.
Please leave a comment, which will not be published, with your contact information.
Thanks
Sunday, March 7, 2010
Mircea Lucian Tapus
Mircea Lucian Tapus
Braila
ROMANIA
Bucharest, Bucharest 07000
Romania
Currently owns and runs:
www.robportal.com
http://whois.domaintools.com/robportal.com
(appropriate domain name)
Tapus is also listed as the owner of:
http://whois.domaintools.com/123anunt.net
Also worked with:
http://netscammers.blogspot.com/2010/03/catalin-ilie.html
Using the fake escrow sites labeled:
D.E.X and H.V.B Office Escrow Services
Mr Tapus swindled eBay sellers of jewelry and laptops.
Here are some of the domains he created and used:
w-m-e.com
edigitalinfo.com
exchange-office.org
exchange-office.info
wbpinfo.net
worldbusinesspay.net
worldbusinessoffice.net
multiadvertiser.com
reviewinfonet.com
paydirectly.net
drvnet.net
derivatenet.com
escrowdex.com
apherus.net
hvbsolutions.com
hvb-solutions.com
hvb-solution.com
hvb-solution.net
hvb-solution.co.uk
midland-office.net
romaxnet.net
romaxnet.com
romaxnet2.net
world-trade-service.net
world-trade-services.net
bay.ro
safedirnet.com
deeply-digital.net
sexsme.info
securetr.org
webglobalservice.info
wbc-service.com
Thursday, March 4, 2010
Catalin Ilie
Catalin Ilie
BUCURESTI
Mr Ilie worked with this scammer:
Vasile Bogdan
http://netscammers.blogspot.com/2010/01/vasile-bogdan.html
and
Mircea Lucian Tapus
Braila
Braila
ROMANIA
http://netscammers.blogspot.com/2010/03/mircea-lucian-tapus.html
He also worked with this group:
http://netscammers.blogspot.com/2010/03/guess-fake-escrow.html
Gabriel Ghelase Pantea
Date Of Birth
09-05-1974
Helped with the scams after he moved to the UK.
This person is a known "carder" and worked with the group to create the drop off points for the stolen items
that were sent to the UK
Renu Subramnaiam
United Kingdom
Here are some stories about "Jilsi"
http://www.uktamilnews.com/index.php/2010/01/15/wembley-sri-lankan-guilty-of-online-crime/
http://www.guardian.co.uk/technology/2010/jan/14/darkmarket-online-fraud-trial-wembley
http://www.dailymail.co.uk/news/article-1243185/Loner-admits-running-web-community-criminals-DarkMarket.html
Ahhh yes and the Java Bean Internet Cafe.
Home of eBay scammers for a while.
Still go there Jony?
Also involved in some of the scams was:
Daniel Laptes
http://www.bestjobs.ro/dlaptes
Some of the sites involved:
coral-deals.com
safer-dealer.com
set-ltd.net
1st-express.net
finance-ltd.com
finance-ltd.net
finance-ltd.org
finance-ltd.0catch.com
cashguards.co.uk
safedealexchange.com
worldglobalservices.com
express-ltd.com
express-ltd.net
euelectronics.net
deal-expert.com
ebay-payments-online.com
financial-and-commercial-department.com
dealexchange.com
awesomeelectronics.com
one-express.net
toyou.0catch.com
international-traders.0catch.com
trade-secure.co.uk
eximp-ltd.net
eximps-ltd.net
fast-helpnet.com
fast-helpnet.co.uk
fast-helpnet.net
impdex-ltd.com
trusled.biz.tc
trusledonline.com
trust-ltd.org.uk
exnew.0catch.com
abester.0catch.com
trusled.0catch.com
bestnet.0catch.com
vipmail.biz.tc
safedl.0catch.com
truled.net
terentes.0catch.com
directline.biz.tc
trust-ltd.us
Trust-LTD.co.uk
Trust-LTD.net
updateonline.info
trust-trader.uk.com
pgscargo.0catch.com
safedl.0catch.com
pgscargo.0catch.com
abise.0catch.com
See some of the layouts here:
http://escrow-fraud.com/index.php?page=gallery&layout=10a
More data will become available when I have the time.