expert-shipping-world-wide.com

www.expert-shipping-world-wide.com FRAUD SCAM
expert-shipping-world-wide.com FRAUD SCAM

The scammer is advertising cars on hacked craigslist accounts.
In this case its a 2002 Volkswagen GLS 1.8T
Here is the message this scammer is sending to his intended victims:

Hello,

My name is Victoria Morris. Thank you for being interested in buying my Volkswagen. The car is as described in craigslist post.
It has 51,600 miles, the vin number is 3VWSE69M42M139449, automatic transmission, 4 Cylinder 1.8 Liter Turbo, has been dealer inspected in last 500 miles, car's in great condition... no issues
I'm selling it because my family has big problems paying the mortgage and we need money asap.
Please contact me only if your interested in the car ..I dont want to waste my time and yours.... Any other questions just ask.

Regards,
Nikole

NEVER use instant payment services for items on the internet.
NEVER use Western Union or MoneyGram to purchase items on the internet.

Leia Mais…

heihachi.net fraud

I have been told the owner of heihachi.net, Dominik Bauer aka  Andreas Mueller aka 13speedtest37
from Austria, has been arrested in connection with the fraud sites he hosted.
Story here:
http://www.polizei.bayern.de/lka/news/presse/aktuell/index.html/136840
Translation here:
http://www.microsofttranslator.com/BV.aspx?ref=IE8Activity&a=http%3A%2F%2Fwww.polizei.bayern.de%2Flka%2Fnews%2Fpresse%2Faktuell%2Findex.html%2F136840

www.dhl-logistic.com FAKE FRAUD
www.dhl-logistik.com FAKE FRAUD
www.packetstation.net FAKE FRAUD
www.packstation-verifizierung.info FAKE FRAUD PHISHING

Other sites hosted by Heihachi LTD. and mentioned in connection with DDoS attacks:
http://netscammers.blogspot.com/2010/05/aa419-ddos-attack.html


Address lookup
canonical name dhl-logistic.com
aliases
addresses 188.72.205.238


Domain Whois record
Queried whois.internic.net with "dom dhl-logistic.com"...

Domain Name: DHL-LOGISTIC.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: clientTransferProhibited
Updated Date: 17-aug-2010
Creation Date: 16-aug-2010
Expiration Date: 16-aug-2011

>>> Last update of whois database: Wed, 18 Aug 2010 18:50:54 UTC <<< Queried whois.enom.com with "dhl-logistic.com"... Visit AboutUs.org for more information about dhl-logistic.com AboutUs: dhl-logistic.com

Registration Service Provided By: Heihachi LTD.
Contact: support@heihachi.net
Visit: www.heihachi.net

Domain name: dhl-logistic.com

Administrative Contact:
Heihachi LTD.
Andreas Mueller (support@heihachi.net)
+507.8321668
Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Technical Contact:
Heihachi LTD.
Andreas Mueller (support@heihachi.net)
+507.8321668
Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Registrant Contact:
Heihachi LTD.
Andreas Mueller ()

Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Status: Locked

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 16 Aug 2010 22:38:28
Expiration date: 16 Aug 2011 22:38:00

Network Whois record
Queried whois.ripe.net with "-B 188.72.205.238"...

% Information related to '188.72.205.0 - 188.72.206.255'

inetnum: 188.72.205.0 - 188.72.206.255
netname: SANTREX-INTERNET-SERVICE-968432
descr: Santrex Internet Service
country: DE
admin-c: KC77-RIPE
tech-c: SR614-RIPE
status: ASSIGNED PA
mnt-by: NETDIRECT-MNT
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
changed: technik@netdirekt.de 20090813
source: RIPE

person: Khalid Cook
address: 41 granite apartments
address: London, Stratford
address: United Kingdom
address: E15 1PY
phone: +447703031000
fax-no: +447703031000
e-mail: support@santrex.net
abuse-mailbox: abuse@santrex.net
nic-hdl: KC77-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20091015
source: RIPE

person: Simon Roehl
address: netdirekt e. K.
address: Kleyer Strasse 79 /Tor 14
address: 60326 Frankfurt
address: DE
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: technik@netdirekt.de
abuse-mailbox: abuse@netdirekt.de
nic-hdl: SR614-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20040224
changed: technik@netdirekt.de 20100617
source: RIPE

% Information related to '188.72.192.0/18AS28753'

route: 188.72.192.0/18
descr: ORG-nA8-RIPE
origin: AS28753
org: ORG-nA8-RIPE
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20090722
source: RIPE

organisation: ORG-nA8-RIPE
org-name: netdirect
org-type: LIR
address: netdirekt e. K.
Kleyer Strasse 79 / Tor 14
60326 Frankfurt
Germany
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: ripe@netdirekt.de
admin-c: SR614-RIPE
admin-c: WW200-RIPE
mnt-ref: NETDIRECT-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20050329
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060815
changed: bitbucket@ripe.net 20070108
changed: bitbucket@ripe.net 20070509
changed: bitbucket@ripe.net 20070813
changed: bitbucket@ripe.net 20080516
changed: bitbucket@ripe.net 20080527
changed: bitbucket@ripe.net 20081014
changed: bitbucket@ripe.net 20090102
changed: bitbucket@ripe.net 20090227
changed: bitbucket@ripe.net 20090708
changed: bitbucket@ripe.net 20090709
changed: bitbucket@ripe.net 20090710
changed: bitbucket@ripe.net 20090929
changed: bitbucket@ripe.net 20090929
changed: bitbucket@ripe.net 20091204
changed: bitbucket@ripe.net 20100105
changed: bitbucket@ripe.net 20100205
source: RIPE

DNS records
DNS query for 238.205.72.188.in-addr.arpa returned an error from the server: NameError

name class type data time to live
dhl-logistic.com IN A 188.72.205.238 1800s (00:30:00)
dhl-logistic.com IN SOA server: dns1.name-services.com
email: info.name-services.com
serial: 2002050701
refresh: 10001
retry: 1801
expire: 604801
minimum ttl: 181
1800s (00:30:00)

canonical name dhl-logistik.com.
aliases
addresses 188.72.205.238


Domain Whois record
Queried whois.internic.net with "dom dhl-logistik.com"...

Domain Name: DHL-LOGISTIK.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: clientTransferProhibited
Updated Date: 17-aug-2010
Creation Date: 16-aug-2010
Expiration Date: 16-aug-2011

>>> Last update of whois database: Wed, 18 Aug 2010 19:06:46 UTC <<< Queried whois.enom.com with "dhl-logistik.com"... Visit AboutUs.org for more information about dhl-logistik.com AboutUs: dhl-logistik.com

Registration Service Provided By: Heihachi LTD.
Contact: support@heihachi.net
Visit: www.heihachi.net

Domain name: dhl-logistik.com

Administrative Contact:
Heihachi LTD.
Andreas Mueller (support@heihachi.net)
+507.8321668
Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Technical Contact:
Heihachi LTD.
Andreas Mueller (support@heihachi.net)
+507.8321668
Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Registrant Contact:
Heihachi LTD.
Andreas Mueller ()

Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Status: Locked

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 16 Aug 2010 22:38:30
Expiration date: 16 Aug 2011 22:38:00

Network Whois record
Queried whois.ripe.net with "-B 188.72.205.238"...

% Information related to '188.72.205.0 - 188.72.206.255'

inetnum: 188.72.205.0 - 188.72.206.255
netname: SANTREX-INTERNET-SERVICE-968432
descr: Santrex Internet Service
country: DE
admin-c: KC77-RIPE
tech-c: SR614-RIPE
status: ASSIGNED PA
mnt-by: NETDIRECT-MNT
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
changed: technik@netdirekt.de 20090813
source: RIPE

person: Khalid Cook
address: 41 granite apartments
address: London, Stratford
address: United Kingdom
address: E15 1PY
phone: +447703031000
fax-no: +447703031000
e-mail: support@santrex.net
abuse-mailbox: abuse@santrex.net
nic-hdl: KC77-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20091015
source: RIPE

person: Simon Roehl
address: netdirekt e. K.
address: Kleyer Strasse 79 /Tor 14
address: 60326 Frankfurt
address: DE
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: technik@netdirekt.de
abuse-mailbox: abuse@netdirekt.de
nic-hdl: SR614-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20040224
changed: technik@netdirekt.de 20100617
source: RIPE

% Information related to '188.72.192.0/18AS28753'

route: 188.72.192.0/18
descr: ORG-nA8-RIPE
origin: AS28753
org: ORG-nA8-RIPE
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20090722
source: RIPE

organisation: ORG-nA8-RIPE
org-name: netdirect
org-type: LIR
address: netdirekt e. K.
Kleyer Strasse 79 / Tor 14
60326 Frankfurt
Germany
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: ripe@netdirekt.de
admin-c: SR614-RIPE
admin-c: WW200-RIPE
mnt-ref: NETDIRECT-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20050329
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060815
changed: bitbucket@ripe.net 20070108
changed: bitbucket@ripe.net 20070509
changed: bitbucket@ripe.net 20070813
changed: bitbucket@ripe.net 20080516
changed: bitbucket@ripe.net 20080527
changed: bitbucket@ripe.net 20081014
changed: bitbucket@ripe.net 20090102
changed: bitbucket@ripe.net 20090227
changed: bitbucket@ripe.net 20090708
changed: bitbucket@ripe.net 20090709
changed: bitbucket@ripe.net 20090710
changed: bitbucket@ripe.net 20090929
changed: bitbucket@ripe.net 20090929
changed: bitbucket@ripe.net 20091204
changed: bitbucket@ripe.net 20100105
changed: bitbucket@ripe.net 20100205
source: RIPE

DNS records
DNS query for 238.205.72.188.in-addr.arpa returned an error from the server: NameError

name class type data time to live
dhl-logistik.com IN A 188.72.205.238 1800s (00:30:00)
dhl-logistik.com IN SOA server: dns1.name-services.com
email: info.name-services.com
serial: 2002050701
refresh: 10001
retry: 1801
expire: 604801
minimum ttl: 181
1800s

canonical name packetstation.net.
aliases
addresses 188.72.205.238


Domain Whois record
Queried whois.internic.net with "dom packetstation.net"...

Domain Name: PACKETSTATION.NET
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: clientTransferProhibited
Updated Date: 21-jul-2010
Creation Date: 13-jul-2010
Expiration Date: 13-jul-2011

>>> Last update of whois database: Wed, 18 Aug 2010 19:08:48 UTC <<< Queried whois.enom.com with "packetstation.net"... Visit AboutUs.org for more information about packetstation.net AboutUs: packetstation.net

Registration Service Provided By: Heihachi LTD.
Contact: support@heihachi.net
Visit: www.heihachi.net

Domain name: packetstation.net

Administrative Contact:
Heihachi LTD.
Andreas Mueller (support@heihachi.net)
+507.8321668
Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Technical Contact:
Heihachi LTD.
Andreas Mueller (support@heihachi.net)
+507.8321668
Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Registrant Contact:
Heihachi LTD.
Andreas Mueller ()

Fax:
Bruenner Strasse 32/2
Wien, AT 1210
AT

Status: Locked

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 13 Jul 2010 10:46:04
Expiration date: 13 Jul 2011 10:46:00

Network Whois record
Queried whois.ripe.net with "-B 188.72.205.238"...

% Information related to '188.72.205.0 - 188.72.206.255'

inetnum: 188.72.205.0 - 188.72.206.255
netname: SANTREX-INTERNET-SERVICE-968432
descr: Santrex Internet Service
country: DE
admin-c: KC77-RIPE
tech-c: SR614-RIPE
status: ASSIGNED PA
mnt-by: NETDIRECT-MNT
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
changed: technik@netdirekt.de 20090813
source: RIPE

person: Khalid Cook
address: 41 granite apartments
address: London, Stratford
address: United Kingdom
address: E15 1PY
phone: +447703031000
fax-no: +447703031000
e-mail: support@santrex.net
abuse-mailbox: abuse@santrex.net
nic-hdl: KC77-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20091015
source: RIPE

person: Simon Roehl
address: netdirekt e. K.
address: Kleyer Strasse 79 /Tor 14
address: 60326 Frankfurt
address: DE
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: technik@netdirekt.de
abuse-mailbox: abuse@netdirekt.de
nic-hdl: SR614-RIPE
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20040224
changed: technik@netdirekt.de 20100617
source: RIPE

% Information related to '188.72.192.0/18AS28753'

route: 188.72.192.0/18
descr: ORG-nA8-RIPE
origin: AS28753
org: ORG-nA8-RIPE
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20090722
source: RIPE

organisation: ORG-nA8-RIPE
org-name: netdirect
org-type: LIR
address: netdirekt e. K.
Kleyer Strasse 79 / Tor 14
60326 Frankfurt
Germany
phone: +49 69 90556880
fax-no: +49 69 905568822
e-mail: ripe@netdirekt.de
admin-c: SR614-RIPE
admin-c: WW200-RIPE
mnt-ref: NETDIRECT-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20050329
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060223
changed: bitbucket@ripe.net 20060815
changed: bitbucket@ripe.net 20070108
changed: bitbucket@ripe.net 20070509
changed: bitbucket@ripe.net 20070813
changed: bitbucket@ripe.net 20080516
changed: bitbucket@ripe.net 20080527
changed: bitbucket@ripe.net 20081014
changed: bitbucket@ripe.net 20090102
changed: bitbucket@ripe.net 20090227
changed: bitbucket@ripe.net 20090708
changed: bitbucket@ripe.net 20090709
changed: bitbucket@ripe.net 20090710
changed: bitbucket@ripe.net 20090929
changed: bitbucket@ripe.net 20090929
changed: bitbucket@ripe.net 20091204
changed: bitbucket@ripe.net 20100105
changed: bitbucket@ripe.net 20100205
source: RIPE

DNS records
DNS query for 238.205.72.188.in-addr.arpa returned an error from the server: NameError

name class type data time to live
packetstation.net IN A 188.72.205.238 1800s (00:30:00)
packetstation.net IN SOA server: dns1.name-services.com
email: info.name-services.com
serial: 2002050701
refresh: 10001
retry: 1801
expire: 604801
minimum ttl: 181
1800s

canonical name packstation-verifizierung.info.
aliases
addresses 92.241.190.202


Domain Whois record
Queried whois.afilias.info with "packstation-verifizierung.info"...

Domain ID:D33854586-LRMS
Domain Name:PACKSTATION-VERIFIZIERUNG.INFO
Created On:20-Jul-2010 22:50:26 UTC
Last Updated On:20-Jul-2010 23:15:23 UTC
Expiration Date:20-Jul-2011 22:50:26 UTC
Sponsoring Registrar:eNom, Inc. (R126-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:584cd695c5e2e101
Registrant Name:Andreas Mueller
Registrant Organization:Heihachi LTD.
Registrant Street1:Bruenner Strasse 32/2
Registrant Street2:
Registrant Street3:
Registrant City:Wien
Registrant State/Province:AT
Registrant Postal Code:1210
Registrant Country:AT
Registrant Phone:+507.8321668
Registrant Phone Ext.:
Registrant FAX:+507.8321668
Registrant FAX Ext.:
Registrant Email:support@heihachi.net
Admin ID:584cd695c5e2e101
Admin Name:Andreas Mueller
Admin Organization:Heihachi LTD.
Admin Street1:Bruenner Strasse 32/2
Admin Street2:
Admin Street3:
Admin City:Wien
Admin State/Province:AT
Admin Postal Code:1210
Admin Country:AT
Admin Phone:+507.8321668
Admin Phone Ext.:
Admin FAX:+507.8321668
Admin FAX Ext.:
Admin Email:support@heihachi.net
Billing ID:584cd695c5e2e101
Billing Name:Andreas Mueller
Billing Organization:Heihachi LTD.
Billing Street1:Bruenner Strasse 32/2
Billing Street2:
Billing Street3:
Billing City:Wien
Billing State/Province:AT
Billing Postal Code:1210
Billing Country:AT
Billing Phone:+507.8321668
Billing Phone Ext.:
Billing FAX:+507.8321668
Billing FAX Ext.:
Billing Email:support@heihachi.net
Tech ID:584cd695c5e2e101
Tech Name:Andreas Mueller
Tech Organization:Heihachi LTD.
Tech Street1:Bruenner Strasse 32/2
Tech Street2:
Tech Street3:
Tech City:Wien
Tech State/Province:AT
Tech Postal Code:1210
Tech Country:AT
Tech Phone:+507.8321668
Tech Phone Ext.:
Tech FAX:+507.8321668
Tech FAX Ext.:
Tech Email:support@heihachi.net
Name Server:NS1.HEIHACHI.NET
Name Server:NS2.HEIHACHI.NET
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

Network Whois record
Queried whois.ripe.net with "-B 92.241.190.202"...

% Information related to '92.241.190.0 - 92.241.190.255'

inetnum: 92.241.190.0 - 92.241.190.255
netname: HEIHACHI
descr: Heihachi Ltd
country: RU
admin-c: HEI668-RIPE
tech-c: HEI668-RIPE
status: ASSIGNED PA
mnt-by: RU-WEBALTA-MNT
changed: lexa@wahome.ru 20090908
source: RIPE

person: Andreas Mueller
address: Bella Vista, Calle 53, Marbella
address: Ciudad de Panama, Panama
remarks: Visit us under gigalinknetwork.com
remarks: ICQ 7979970
remarks: Dedicated Servers, Webspace, VPS, DDOS protected Webspace
remarks: Send abuse ONLY to: abuse@gigalinknetwork.com
remarks: Technical and sales info: support@gigalinknetwork.com
phone: +5078321458
abuse-mailbox: abuse@gigalinknetwork.com
nic-hdl: hei668-RIPE
mnt-by: WEBALTA-MNT
changed: support@gigalinknetwork.com 20100307
source: RIPE

% Information related to '92.241.160.0/19AS41947'

route: 92.241.160.0/19
descr: Wahome IP's =)
origin: AS41947
mnt-by: RU-WEBALTA-MNT
mnt-routes: GIGABASE-MNT
mnt-routes: RU-WEBALTA-MNT
changed: lexa@wahome.ru 20071218
source: RIPE

DNS records
name class type data time to live
packstation-verifizierung.info IN MX preference: 10
exchange: mail.packstation-verifizierung.info
14400s (04:00:00)
packstation-verifizierung.info IN TXT v=spf1 a mx ip4:92.241.164.198 ~all 14400s (04:00:00)
packstation-verifizierung.info IN A 92.241.190.202 14400s (04:00:00)
packstation-verifizierung.info IN SOA server: ns1.heihachi.net
email: hostmaster.packstation-verifizierung.info
serial: 2010072000
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
packstation-verifizierung.info IN NS ns2.heihachi.net 14400s (04:00:00)
packstation-verifizierung.info IN NS ns1.heihachi.net 14400s (04:00:00)
202.190.241.92.in-addr.arpa IN PTR webspace.heihachi.net 1222s (00:20:22)

Leia Mais…

WWJD

8-26-10
Yet another forum offering the scammer help for my supposed blackmailing him.
http://forums.digitalpoint.com/showthread.php?t=1918155
There were some people on that forum were quick to jump to the conclusion that the scammer who posted was legitimate.
Fortunately some members of that forum questioned the scammer's post and the thread is closed.
The scammer again stated:
I am the owner of a roof repair business in the UK and I have major problems with a blog owner who is posting false negative reviews about my website. This person asked me for money in order to remove the bad reviews. I paid him. He asked to be paid by a service called Liberty Reserve, I had to send a wire transfer to a website he provided. I paid 300 pounds. Then he removed the reviews. Now he is back and asking for more money. I am desperate, I don't know what to do, a friend who understands about computers advised me that I must search an online community and ask for advice. I am 42 years old and I only know how to use the internet and my email. When the false negative reviews appeared on google, I lost 80% of my customers, people calling my office calling us scammers. It was horrible. Please, I need some advice if possible.

...and another:
http://packetpunks.com/Thread-Help-me-please
Apparently there is some confusion on this forum as to what is going on.
"metal", supposedly one of the forum administrators, posted:
"RE: Help me, please
How do you know it was not legit? Is it a scam? The guy was PMing me. Acid said he got the guys password for him."
Acid refers to another forum member who posted on the thread and supposedly has my password.
Acid apparently has engaged in private conversations with StuartSHart, the scammer.
Has "metal" read my blog?
Does "metal" condone members of his forum hacking other people's accounts?
"metal" has a link in his posts as his signature:
"This is my website of web design. Me and Gpizzle designed this forums."
That link leads to:
http://qualitycomputerri.com/
Would I use his services now that I know he condones this type of behavior on a forum he runs?
Looks like the moderator "RS BADGER" is the only one who posted on the thread that has a brain.
"Delete this thread its spammed all over the net every forum imaginable has this posted on it"

08-25-10
He's at it again.
The scammer has now "enlisted" the services of members at:
www.hackforums.net
to try to get this blog killed.
Yet again people are falling for his story that I am/have blackmailed him.

Here is new his post at:
http://www.hackforums.net/showthread.php?tid=634503&page=1

I am the owner of a roof repair business in the UK and I have major problems with a blog owner who is posting false negative reviews about my website. This person asked me for money in order to remove the bad reviews. I paid him. He asked to be paid by a service called Liberty Reserve, I had to send a wire transfer to a website he provided. I paid 300 pounds. Then he removed the reviews. Now he is back and asking for more money. I am desperate, I don't know what to do, a friend who understands about computers advised me that I must search an online community and ask for advice. I am 42 years old and I only know how to use the internet and my email. When the false negative reviews appeared on google, I lost 80% of my customers, people calling my office calling us scammers. It was horrible. Please, I need some advice if possible.

Thank you

Stuart

___________________________
Data from his previous post:

I would like to thank the admins of the Black Hat SEO blackhatworld.com site for deleting the thread containing the lies posted by the scammer and threats by Black Hat SEO forum members.
I will be more than happy to post those threats on my blog if I get any more harrassment by those forum members.
I am sure they do not represent other members or the the owner of blackhatworld.com

I had an interesting afternoon to say the least.
I went over my daily list of domains to find fake ones and posted some in the spoof site post on this blog, the rest I handed off to an associate at aa419.org to post.

I then decided to open the chat on the blog in case any intended victims had questions or information about these scam sites I deal with on a daily basis.
I noticed the chat area filled up and people started to message me with things like:

No Muie: Hello!
No Muie: What can I do for you?
201.25.141.66: Hi, how are you?
No Muie: I am fine
No Muie: How are you?
201.25.141.66: I´m fine
201.25.141.66: I heard you´re the big scammer
201.25.141.66: Am I right?
No Muie: nope
201.25.141.66: How much have you got till now?
No Muie: huh?
201.25.141.66: As a word of advice
201.25.141.66: they´re following your trace right now.
201.25.141.66: back it off and you have a chance.
No Muie: my trace?
201.25.141.66: as a friend.
201.25.141.66: there´s a price on your head =D
201.25.141.66: gbye

No Muie: Hello
94.4.32.234: are you no muie?
No Muie: How can I help you?
94.4.32.234: are you the person behind the onine alias No muie?
No Muie: with whom am I speaking?
94.4.32.234: answer the question
No Muie: I don't take orders.
94.4.32.234: I think you'll find you've got something coming your way
No Muie: Which is?
No Muie: Give me a hint, I hate surprises
94.4.32.234: You'll find out. You really shouldn't screw people over it's people like us that hunt down scum like you
No Muie: shame we could have been friends
94.4.32.234: Enjoy the present..
94.4.32.234: Thats what friends do right..
No Muie: well, depends on the present
No Muie: hehehe
94.4.32.234: You find out soon enough. Might as well laugh now. Taking innocent people and destroying there business was not a wise thing to do
No Muie: Thats it?
No Muie: Now I won't be able to sleep.
94.4.32.234: Enjoy.


No Muie: What can I do for you?
No Muie: Hello!
119.157.30.154: hey there's a guy
No Muie: and....
119.157.30.154: he has a Repair site and he looking for ur Info
No Muie: repair site?
119.157.30.154: yea
119.157.30.154: he is offering people 500$ SO be careful
No Muie: I am not following what you are saying.
119.157.30.154: is this ur Profile? http://hiderefer.org/?http://forum.aa419.org/viewtopic.php?t=37845&sid=66854aaa745bf3910df6153f3335b724
No Muie: http://forum.aa419.org/viewtopic.php?t=37845
119.157.30.154: yes
No Muie: trax-holdings.co.uk
No Muie: $500 for what?
119.157.30.154: hey buddy i want to help u
No Muie: help me how?
119.157.30.154: is ur name Alexandru Tanase?
No Muie: LOLOLOLOL
No Muie: no
119.157.30.154: sorry
119.157.30.154: his nice is No Muie too
119.157.30.154: and he is from Romania :( Wrong Place
119.157.30.154: Sorry Once Again
119.157.30.154: Take Care


87.174.254.239: You have put up false scam reports on your blog, and are emailing people asking for money, otherwise their business will fail.
No Muie: Oh please, stop
No Muie: I'm laughing too much
87.174.254.239: Smart guy, but unfortunately, loads of people have reported your blog to blogspot, good luck with it all :)
87.174.254.239: Your blog will be taken down soon, so get ready to purchase a domain, lowlife.
No Muie: loads of who? the Indians?
87.174.254.239: Actually, I'm from Germany, scumbag.
No Muie: ya ya ya
87.174.254.239: I just read a thread on a forum where i'm active, and a guy who's received threats from you.
87.174.254.239: Bad mouthing their business, calling them scammers.
87.174.254.239: And then, asking for big amounts of money to take down the post.
No Muie: hmm
No Muie: you are on the same drugs as them?
87.174.254.239: What the f**k are you talking about?
87.174.254.239: I'm just helping those guys out, what you've fu**ed with.
87.174.254.239: Asking for money.
87.174.254.239: You lowlife miserable f**k.
No Muie: I have not, as you suggest, blackmailed anyone.
87.174.254.239: Really?
87.174.254.239: This is no_muie again. I was thinking that your last payment was not enough. I need more money in order to continue fighting crime. People like you, in construction business, should pay us crime fighters because we work day and night to make the web a safer place for everybody. I need 1000 pounds now. If you morons don't pay, the negative reviews of your website will be up again and this will means the end of your business. By the way, click on one of the ads if you access my blog and don't try to report me, I will know.
87.174.254.239: ;)
No Muie: Thats funny, who wrote that?
87.174.254.239: All your emails have been sent to Google (Blogspot).
87.174.254.239: Good luck.
No Muie: Thatnks for stopping by.
No Muie: oops thanks
87.174.254.239: Expect your blog to be deleted in a bit.

So I decided to go to the link and see what the chatter was about.
Here is what the scammer posted on the site:

http://www.blackhatworld.com/blackhat-seo/black-hat-seo/226969-we-have-problem-harassment-blog.html

The scammer stareounut :
We have a problem with harassment from a blog

--------------------------------------------------------------------------------

We have a website for roof repairs and construction work. There is a guy out there, that has a blog, netscammers.blogspot, who is claiming to catch scammers and fraudsters. One day, like 4 people told us they have found os online but they think that we are scammers. when we searched the address of our website on google, first result was a posting from this guy stating that we are scammers. We contacted this person, called no_muie, and he said that we need to pay him in order to get removed. He asked for 300 pounds. We paid and he removed us. All the bad results disappeared from google. Now, he is back. He asks for more money from us, or else. We are desperate, we don't know what to do. We have many customers and companies that we work with, what if this guy comes back with the postings. We don't want to pay him more money, he will just keep on asking if we just pay. Please, help us, we can pay you to help us get rid of this troll. contact us . Thank you very much.

The scammer even posted a link to what is supposedly an email exchange I had with him demanding money:
http://img295.imageshack.us/img295/8602/nomuie.jpg

The worst aspect to this story is the fact that the people who are on this forum posted tips for the scammer to report me, my blog and my Twitter account.
Some users posted things about spamming my email and using methods to have my blog taken down.
I'm thankful that a couple of people warned me about what was happening.
As for the rest, I can't believe they fell for the scammers fake story.
...and I bet the scammer is having a good laugh.....

Now the scammer has started a discussion here:
http://www.topix.com/forum/news/topix/TU71R6AJS0QR7HV59

Notice all the posters are listed as being from Reston, Va??
This indicates the scammer is replying to his own thread using multiple accounts and AOL as a proxy.

Leia Mais…

cars-central.com

cars-central.com FRAUD SCAM
www.cars-central.com FRAUD SCAM

cars-central.com is being run by the same scammers who ran:
http://netscammers.blogspot.com/2010/08/deltadirectcarsnet.html

http://netscammers.blogspot.com/2010/08/cars-for-less-placecom.html

http://netscammers.blogspot.com/2010/07/number1autosalesinccom.html

http://netscammers.blogspot.com/2010/07/number1autosalesincom.html

http://netscammers.blogspot.com/2010/06/reliableusedcarsinccom.html

http://netscammers.blogspot.com/2010/07/superautosalesuscom.html

Using MoneyGram payments for fake car listings on their site.
NEVER use instant payment services for internet transactions.

It appears the scammers paid to have people create fake posts on numerous blogs to advertise the domain:
http://www.google.com/search?q=%22cars-central.com%22&rlz=1I7GGLD_en&ie=UTF-8&oe=UTF-8&sourceid=ie7


www.Cars-Central.com is the best place to buy repo cars at very low prices.

Huge inventory with all brands and years is available.

Please visit Cars-Central.com in order to purchase your next dream car.

Used Cars For Sale.

Buy It Now Prices


Repossessed Cars are a hot favorite among middle class Americans. Imagine buying a car that is as good as new but at just half its price. Its a deal most people would die for. No wonder there are so many companies offering this

service. But do all of them do justice to the customers. Well, not many.

Of the few companies that give a good value for the buck, is cars-central.com. This is the best place to buy repo cars. There is a huge inventory of cars available at your disposal. Most companies offer only models that are in trend and

that are fast-moving. For the true car lover this is too much of a restriction. But with Cars-Central the options are huge. Not only are a variety of brands available, but also brands segregated by years. So a 1985 model Chevy won’t be

hard to find. Now, that’s something a lot of other companies can’t offer.

The other main factor is the price. Used cars from other companies leave a whole in your pocket that won’t get fixed even after years. You might have as well purchased a new car for a little more. If this has been your experience till

date, then Cars-Central is the place for you. Quality cars are available at enviable prices.

Visit the site of Cars-Central and check out the deals ourself. Don’t have to give me credit if you end up liking one of the cars.

Leia Mais…

payment-department-inc.com

payment-department-inc.com SCAM FRAUD
support@payment-department-inc.com

 

Scammer is sending spoof emails pretending to be eBay:

New eBay Motors VPP Transaction
Case ID: 26M9LT26WFN28
Item: 1990 Volkswagen Bus/Vanagon GL
Price: $2,500.00 CAD


Seller Verified Profile

eBay Motors Member in good standing from 7 years 6 months.
Registered e-mail address: dav.turner@hotmail.com
Identity and Contact Information Verified.
Continues to meet strict Membership Criteria.
Committed to Dispute Resolution and Mediation.
Purchase Protection Coverage up to
$20,000.00

The scammer is asking for Western Union funds to be wired to:

eBay Financing Center Agent*:
First Name: Paul
Last Name: Perez
Address: 64 Newman Street
City: London
Zip: W1T 3EF
Country: United Kingdom

Here are some excerpts from emails sent to an intended victim:

The eBay listing was canceled because the credit card that I had on file for eBay listing payments expired two months ago and I forgot to change it on eBay so eBay suspended my listing because they could not charge my credit card.
I have explained to you the entire procedure. I told you that you'll have 5 days to inspect the van. In case you will not be agree with my van you will have to return it back to eBay and they will give you a fully refund.
To initiate a new transaction case at eBay Vehicle Protection Program I need your Full Name and Shipping Address and we will complete this deal safe and quick.
I'm very sorry for this inconvenience and I hope that you will make a good decision regard this transaction.

God bless us all
Kind regards
Corporal David Turner
CFB

I have sent our details to ebay and I got the invoice. Can you please check your email for the invoice, also look into your bulk folder too, sometimes messages get lost in there.

Please read it carefully so you can understand the entire process and let me know when you can complete this transaction so I can make all the arrangements for delivery.
Also I have a friendly advise, don't tell at the Western Union office that this is the payment for a Internet purchase or you send the money to an ebay account/agent, because both of us will be extra charged with some extra fees for making e-commerce. We can avoid paying this extra money. If the Western Union agent ask you, just tell that the money are for a relative/friend. I will also do the same thing with the shipping so you don't have to pay any fees. I am not willing to spend some useless money, I hope you will understand why I am asking you this.

I will declare to the Logistic Department that you are my cousin, and I have to send the van over to your home, to keep it there while I'm in Afghanistan, so the estimated shipping cost is about 200$ (all delivery cost included). With the van you'll receive 2 keys, original invoice, service book, carfax, 4 summer tires and all the van's documents and manuals.
Also you have to pay a normal transfer fee at Western Union office, this fee is around $150, but since I pay for the delivery it will be nice if you can pay this fee, if you don't have any extra money right now you can deduct this fee from the total amount.

Kind Regards
Corporal David Turner
CFB


Hi,

My 1990 Volkswagen Bus/Vanagon GL runs and drives excellent. This van has been extremely well maintained
with a full service history. It's in perfect condition without any mechanical problems, with no damages or hidden defects,
no need for additional repairs, clear title without any accidents. This van runs and drives excellent. I have all the van's manuals, all the documents and papers.
I have dropped my price to $2,500.00 CAD (purchase price) since this is an urgent sale and I need to sell it before 29th of
August when I will be deployed in Afghanistan with my platoon replacing the troops scheduled to come home.
To conclude this deal in a timely manner, the financial part will be managed by the eBay . They are acting like a third
party in our deal. Which means that you will have 5 days inspection period before committing to buy the vehicle. In this way
both, buyer and seller are 100% covered during the steps of this transaction.

If you're interested to conclude this purchase in a timely manner email me your Full Name, Home Address and Phone Number to
open a case with eBay and they will contact you to explain the entire procedure.

Kind regards
David
CFB

Leia Mais…

globalsafecourier.com

www.globalsafecourier.com FRAUD SCAM
globalsafecourier.com FRAUD SCAM

I reported this site on aa419.org on Wed Dec 16, 2009 6:23 pm
http://forum.aa419.org/viewtopic.php?t=39061&highlight=globalsafecourier

Database entry here:
http://db.aa419.org/fakebanksview.php?key=42475

The web host has been informed several times about this fraud site and has taken no action against the scammers.

Bunditraksana, Surat support@porar.com
9/5 soi. Ratchadaphisek 18,
Ratchadaphisek rd.
Huaykwang
Huaykwang, Bangkok 10320

The site is run by scammers based in Romania.
They are asking for payments using MoneyGram.
The victims are being instructed to send money to a person in Memphis, TN.
NEVER use instant payment services like MoneyGram for internet purchases.

Leia Mais…

2 scams using Western Union

Thomas Docks thomasdocks01@gmail.com
Using the spoof email address:
Google Checkout google@checkout-cgi-bin.biz

Once the payment is done, Fax the WesternUnion payment receipt to Google Checkout at: 1 (408) 693 3721

NEVER use Western Union for payment of items on the internet.

Payment data:
Google Checkout Agent Details:
Name:Mark Payton
Adress:79 Lichfield Grove
City:London
State:
Zip:N3 2JL
Country:United Kingdom

Hi
I am selling this truck because my brigade will deploy for 14 months to Afghanistan. I'm under enormous time pressure cause I need to sell it fast, before 14th of August that being the reason for selling it so low. It is in immaculate condition, meticulously maintained and hasn't been involved in any accident...I do have the title, clear, under my name.The truck has 128,000 miles VIN#5TEHN72N23Z151531.
It is still available for sale if interested, price as stated in the ad $2,950. The truck is in Baltimore, MD ,and in case it gets sold I will take care of shipping. Let me know if you are interested, email back. Below is the truck details and also link with more photos.
You can find more pics at: http://picasaweb.google.com/116995343575845866278/Tacoma?authkey=Gv1sRgCOi5sMP6j-HaGA&feat=directlink


2003 Toyota Tacoma 4x4 Double-Cab powerful 6 cylinder 3.4 liter engine and a automatic transmission, garaged, excellent condition vehicle, power everything.


Thank you
Thomas Docks

Hi,


As I've previously told you, I'm currently involved in a military program, temporarily based in MD, as I'll be changing it for Afghanistan very soon. Due to military security reasons I'm restricted from leaving the unit's facility under any purpose and have strictly limited phone access. The shipping won't be a problem; military has a considerable discount, so I can handle it by myself, with no charges whatsoever on your account. The car will be sent along with all its documents including title, bill of sale, 2 sets of keys, full service records and everything else you'll need. Because it's such a large transaction, I'd suggest using an authorized third party, as Google Checkout for instance. I've done some research and that's the safest way to do it. That's why, I've taken the liberty to prearrange things with them, using their escrow Google Checkout. I thought you might want to see it there, so I've asked them to allow viewers to inspect the car; but their reply was: "We are not a showroom!" No worries cause I'll grant you a 5 days inspection period (to test drive it) from the moment you receive it, before Google Checkout escrow releases your money to me. The vehicle is located in their warehouse in MD (ready for delivery).
If you are still interested just send me your full name and shipping address. I will forward your info to Google Checkout and they will further notify you about our deal. This way you'll be able to talk to them without any third party involved, and ask all you need to know.
My regards!
Thomas

Hello,

I just wanted to let you know that I already opened the case with Google Checkout about our deal and they sent you a invoice and also the payment instructions, so please let me know when Google Checkout contacts you. Because of the strict policies of the filters of Spam of webmaster, maybe you cannot receive the invoice of Google Checkout in your box of reception. Please check your box of "Spams" or "Bulk" from your email address in order to see the transaction. If you not receive in the next 2-3 hours please email me back.

Thank you
Thomas



eBay ebay@safe-trades-department.com
Sarah Connell toolsare@gmail.com

Hi,

The selling price for the 2007 Nissan Titan LE Crew Cab is four thousand dollars. I am located in Thomasville, NC and the truck is in perfect condition and there's not even a scratch on it. It has recorded 29,000 miles and everything from the motor to the tires and mirrors is shining and looking new, non-smoking environment inside. It has a clear title, no liens or loans and has an accident free history. TITLE IS IN HAND so the transfer of both title and vehicle will provide a smooth transaction. I've secured my sale through eBay who acts as a legitimate third party in this transaction. As you know eBay is the best company of online transactions and they hold and insure your payment until receipt of the vehicle in good condition. It is ready to be delivered, as I am looking to sell it in a timely manner for my new investment. You have to decide fast because at this price the black Nissan truck is not going to last on the market for a long time.

Thank you,
Sarah

The total price is $4,000 including shipping to your residence. There are no other hidden costs to be paid. If you wish to purchase it, please provide me your full name and the accurate shipping address in order to register the deal with eBay. They will provide you further instructions/ information. Let me know ASAP, so I can set up all the things on my end. Thanks, Sarah

Payment method accepted: Western Union Money Transfer.
Sending the payment by any other method of payment will void this transaction and your right to refund.

Next step to be taken: The buyer must send the payment.
It is recommended to send the payment as soon as possible because the Vehicle Purchase Protection is valid for 30 days only.

Please follow our instructions in three easy steps in order to complete the transaction safely:

1. To submit your payment, go to the Western Union branch, taking some personal identification with you and pay cash. It's available to everyone and you don't need a bank account or credit card.

2. Make Western Union Money Transfer To:

Receiver's Name: Henry Davis
Receiver's Address: 928 Virginia Ave NE Atlanta, GA 30306

NEVER use Western Union for payment of items on the internet.

Leia Mais…

deltadirectcars.net

deltadirectcars.net FRAUD SCAM
www.deltadirectcars.net FRAUD SCAM

The site forwards intended victims to:
cars-for-less-place.com

See this post for more details:
http://netscammers.blogspot.com/2010/08/cars-for-less-placecom.html

WE HAVE REDUCED OUR PRICES BY 75% ON ALL THE USED CARS WE HAVE ON STOCK.
(know any legitimate car dealers that would make this claim?)

PLEASE VISIT OUR WEBSITE FOR "BUY IT NOW" CRISIS PRICES.
(the crisis is that because of my blog less people are getting ripped off)

CLICK HERE ENTER WEBSITE NOW



WE HAVE USED CARS ALL YEARS AND ALL BRANDS!! ALL ARE AVAILABLE AT VERY LOW PRICES!!

LIMITED TIME OFFER!
(yes, till Yahoo takes their fingers out of their butts and kills the domain)

PLEASE VISIT OUR WEBSITE TODAY!

CLICK HERE ENTER WEBSITE NOW



SKIP THIS INTRO AND ENTER THE WEBSITE NOW

(don't fall for it)

Leia Mais…

safetycentre-department.com

safetycentre-department.com FRAUD SCAM
www.safetycentre-department.com FRAUD SCAM

I reported safetycentre-department.com back in May to eBay, who I am sure reported it to the web host (Google).
I have since been informed that eBay notified Google of the fraud domain on:
28 January 2010

I received a message from someone who wired money to:
JPMorgan Chase Bank NA
100 N. Citrus Street,
West Covina, CA 91791,
To an account under the name of Amaris V. Jackson.
The intended victim was told that Amaris V. Jackson is an agent of eBay Motors.

Please don't fall for this scam.
The scammers are using the phone number:
408-844-4478
If you call, and I'm sure some of you will, the scammers answer the phone as eBay Motors.


.

Leia Mais…

landmark-autosales.com

www.landmark-autosales.com SCAM, FRAUD
landmark-autosales.com SCAM, FRAUD

This URL forwards intended victims to:
united-auto-sales.com

See this post for more details:
http://netscammers.blogspot.com/2010/07/united-auto-salescom.html

Using MoneyGram payments for fake car listings on their site.
NEVER use instant payment services for internet transactions.

Leia Mais…

Global Shipping Inc.

Global Shipping Inc.

www.lineglobalinc.com FRAUD, SCAM
lineglobalinc.com FRAUD, SCAM

This scam site is attempting to sell non existent cars and trucks to unsuspecting buyers.

Previous fraud sites by the same scammer include:
global-lines-delivery.com
globallines-escrow.com
lineglobalshipping.com
proglobalshipping.com
royalspedition.net

Please contact me if you have any information pertaining to this scam or the previous ones.

Leia Mais…

cars-for-less-place.com

www.cars-for-less-place.com FRAUD, SCAM
cars-for-less-place.com FRAUD, SCAM

This site forwards to their other fake site:
http://www.number1autosalesinc.com

More information here:
http://netscammers.blogspot.com/2010/07/number1autosalesinccom.html

As a result of my blog and posts on these scammers, I have been threatened and an attempt to hack my data has occured.
Its quite obvious I have put a "dent" in their car sales scam.

Leia Mais…