byownerautosales.com SCAM

byownerautosales.com  FAKE FRAUD SCAM

byownerautosales.com is a site with fake ads for cars stolen from legitimate sites.

Here are examples:
http://www.byownerautosales.com/ads/2005-subaru-outback-2-5xt-limite-2/

The fake ad on the site lists the price for $3500.
The real ad on the real site lists the price for $9,888:
http://road2gmc.com/Customer/Dealer/VehicleDetail.aspx?id=635573
You can also see results for a search of the Vehicle ID # 4S4BP67C854322565

http://www.byownerautosales.com/ads/2004-chevrolet-silverado-2500hd-diesel-4x4/

Price on byownerautosales.com $3700
Price on the real ad $19995
http://www.jarboemotors.com/vehicledetails.aspx?vid=130648781
Vin # search 1GCHK242X4E297842

One of the IDs the scammer is using on this fake site, symonnejhony,
 aka symonnejhony@yahoo.com, has 87 results on Google Search:
http://www.google.com/search?q=%22symonnejhony%22&hl=en&num=10&lr=&ft=i&cr=&safe=images&tbs=#q=%22symonnejhony%22&hl=en&lr=&prmd=ivns&filter=0&fp=9f208f9e856ec787

Leia Mais…

usarmy-pov-transport.com SCAM

usarmy-pov-transport.com FAKE FRAUD SCAM

http://www.usarmy-pov-transport.com/
previously mentioned in this post:
http://netscammers.blogspot.com/2010/10/us-army-deliverycom-fraud.html
is yet another scam site pretending to be associated with the US Military.
The site forwards the intended victims to http://www.army.mil/ to make them think its legitimate.
The domain is being used for fake emails.
The email address support@usarmy-pov-transport.com is associated with the site and the scammers are using the term:
US Army - Military Auto Transport Dept for POV(Privately Owned Vehicle) in Baldwin, NY

The site is being hosted in the UK.
Domain Name: USARMY-POV-TRANSPORT.COM
   Registrar: TUCOWS INC.
   Whois Server: whois.tucows.com
   Referral URL: http://domainhelp.opensrs.net
   Name Server: NS1.LIVEDNS.CO.UK
   Name Server: NS2.LIVEDNS.CO.UK
   Name Server: NS3.LIVEDNS.CO.UK
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 23-jan-2011
   Creation Date: 23-jan-2011
   Expiration Date: 23-jan-2012

Please use their on line form to report the site:
http://www.fasthosts.co.uk/companyinfo/contactus/
You can also try mailing them at:
abuse@fasthosts.co.uk
Read about the Fasthosts Romanian connection:
http://www.theregister.co.uk/2009/02/19/fasthosts_offshore/
(sorta makes it a bit convenient for the scammers huh?)



 

Leia Mais…

DOMAINSCAN.RO and scammers

I received a comment on ths post today 2-2-11

Cimpean Andrei has left a new comment on your post
Hy, I''m the CEO of domainscan.ro. First of all I must say that most if not all the domain names that you marked above as scam were suspended. You made the assumptions that all the above domains are for scams, but most of them were just empty new accounts, you made the assumption bases on the domain named, that's just not real and professional.

My response:
I removed "loves" from the title of this post.
Not all the domains are suspended as you suggested in your post.
We all know such domains are used for spoof and phishing emails and need no content, so they merely appear "empty".
Example:
http://www.ebaymotorstransactions.com/
Does this person, who is obvioulsy not the legitimate eBay have the right to run an account on your server which suggests to inexperienced internet users that the emails are for eBay transactions?
Similar sites listed here:
http://netscammers.blogspot.com/2010/04/spoof-sites.html

You have obviously read the initial post and had the opportunity to kill all these fake sites, but have yet to do so.....Does this mean you condone these domains?
http://whois.domaintools.com/ebaymotorstransactions.com
The email address used to register that account is:
fernandel1903@yahoo.com
The Yahoo account information reveals:
http://pulse.yahoo.com/fernandel1903
Fernand Joseph 30 - Male - Las Vegas, Nevada
That is a far cry from the actual domain registration data which claims:
Registrant Name: Andrei Gheorghe
Registrant Organization: NA
Registrant Street1: Calea Grivitei 81
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 010761
Registrant Country: RO
Registrant Phone: 4.023454575
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: fernandel1903@yahoo.com
Can you prove any of them are or were legitimate?
Have you reported these domains to the police and eBay?
Have you bothered to go over the domains on all your IPs and servers to check for similar sites and kill them?
You as a Romanian web host, should have a pro-active stance against fraud domains and set the benchmark.

Can you explain why you were listed as the registrant for the still actve fraud domain:
royal-cargo-ltd.com
http://db.aa419.org/fakebanksview.php?key=46322
(The domain still forwards to the suspended account: )
http://883784transportcargo.freehostia.com/ 
On these dates:
2010
2010-03-28
2010-03-30
2010-04-03
2010-04-08
2010-04-09
2010-04-10
2010-06-08
2010-08-02
2010-10-26
2010-11-11
(I can get this data using the service which I explain below)
The current whois for the site is:
http://whois.domaintools.com/royal-cargo-ltd.com

and by the way, goofoop@yahoo.com is not a valid Yahoo account......

....that's just not real and professional......
Registrant Name: Marius Macelaru
Registrant Organization: NA
Registrant Street1: str. v tepes, nr. 32
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: BUC
Registrant Postal Code: 342345
Registrant Country: RO
Registrant Phone: 40.93412342
Registrant Phone Ext.:
Registrant FAX: 40.264214035
Registrant Email: goofoop@yahoo.com
Here are fraud domains located on a server in Romania and the breakdown of how they are being used.
The domains have been reported to eBay.
They will also be listed on http://www.aa419.org/

In order to get this data I used my Domain Tools account.
This account costs about $3-400 a year.
I cannot afford to continue to pay for this service and am asking for your help by donating to my PayPal account below.

The server which contains the data for most of these domains is giving this notice:

Server response:
Excessive usage, try later...

This is "bs" and the data is available using a domain history search on Domain Tools.

http://www.checkout-customers.com/
Most likely used for fake invoices.
Contains a PayPal phishing site:
http://checkout-customers.com/paypal/
Created On: 9/11/2010 5:48:33 AM
Last Updated On: 9/11/2010 5:48:33 AM
Expiration Date: 9/11/2011 5:48:33 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: alexandru a dick
Registrant Organization: NA
Registrant Street1: strada sarariei nr 126
Registrant Street2:
Registrant City: iasi
Registrant State/Province: iasi
Registrant Postal Code: 707531
Registrant Country: RO
Registrant Phone: 4.072456645
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: cipas82@gmail.com
Admin Name: alexandru a dick
Admin Organization: NA
Admin Street1: strada sarariei nr 126
Admin Street2:
Admin City: iasi
Admin State/Province: iasi
Admin Postal Code: 707531
Admin Country: RO
Admin Phone: 4.072456645
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: cipas82@gmail.com
Billing Name: alexandru a dick
Billing Organization: NA
Billing Street1: strada sarariei nr 126
Billing Street2:
Billing City: iasi
Billing State/Province: iasi
Billing Postal Code: 707531
Billing Country: RO
Billing Phone: 4.072456645
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: cipas82@gmail.com
Tech Name: alexandru a dick
Tech Organization: NA
Tech Street1: strada sarariei nr 126
Tech Street2:
Tech City: iasi
Tech State/Province: iasi
Tech Postal Code: 707531
Tech Country: RO
Tech Phone: 4.072456645
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: cipas82@gmail.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO

http://www.e-bay-customer.com/
Most likely used for spoof eBay emails.
Created On: 11/29/2010 11:53:12 PM
Last Updated On: 11/29/2010 11:53:12 PM
Expiration Date: 11/29/2011 11:53:12 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:
ok

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Tom Tervenzy
Registrant Organization: NA
Registrant Street1: Ciobanului Nr. 27
Registrant Street2:
Registrant City: Arad
Registrant State/Province: Arad
Registrant Postal Code: 310298
Registrant Country: RO
Registrant Phone: 40.765718391
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: young77ed@gmail.com
Admin Name: Tom Tervenzy
Admin Organization: NA
Admin Street1: Ciobanului Nr. 27
Admin Street2:
Admin City: Arad
Admin State/Province: Arad
Admin Postal Code: 310298
Admin Country: RO
Admin Phone: 40.765718391
Admin Phone Ext.:
Admin FAX: .
Admin Email: young77ed@gmail.com
Billing Name: Tom Tervenzy
Billing Organization: NA
Billing Street1: Ciobanului Nr. 27
Billing Street2:
Billing City: Arad
Billing State/Province: Arad
Billing Postal Code: 310298
Billing Country: RO
Billing Phone: 40.765718391
Billing Phone Ext.:
Billing FAX: .
Billing Email: young77ed@gmail.com
Tech Name: Tom Tervenzy
Tech Organization: NA
Tech Street1: Ciobanului Nr. 27
Tech Street2:
Tech City: Arad
Tech State/Province: Arad
Tech Postal Code: 310298
Tech Country: RO
Tech Phone: 40.765718391
Tech Phone Ext.:
Tech FAX: .
Tech Email: young77ed@gmail.com
Name Servers:
NS2.DOMAINSCAN.RO
NS1.DOMAINSCAN.RO

http://www.ebaymotorstransactions.com/
Most likely used for spoof emails pretending to be eBay.

Created On: 8/8/2010 9:01:38 AM
Last Updated On: 8/8/2010 9:01:38 AM
Expiration Date: 8/8/2011 9:01:38 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Andrei Gheorghe
Registrant Organization: NA
Registrant Street1: Calea Grivitei 81
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 010761
Registrant Country: RO
Registrant Phone: 4.023454575
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: fernandel1903@yahoo.com
Admin Name: Andrei Gheorghe
Admin Organization: NA
Admin Street1: Calea Grivitei 81
Admin Street2:
Admin City: Bucuresti
Admin State/Province: Bucuresti
Admin Postal Code: 010761
Admin Country: RO
Admin Phone: 4.023454575
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: fernandel1903@yahoo.com
Billing Name: Andrei Gheorghe
Billing Organization: NA
Billing Street1: Calea Grivitei 81
Billing Street2:
Billing City: Bucuresti
Billing State/Province: Bucuresti
Billing Postal Code: 010761
Billing Country: RO
Billing Phone: 4.023454575
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: fernandel1903@yahoo.com
Tech Name: Andrei Gheorghe
Tech Organization: NA
Tech Street1: Calea Grivitei 81
Tech Street2:
Tech City: Bucuresti
Tech State/Province: Bucuresti
Tech Postal Code: 010761
Tech Country: RO
Tech Phone: 4.023454575
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: fernandel1903@yahoo.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO

http://www.ebaythirdparty.com/
Most likely used for spoof eBay emails.
Created On: 7/31/2010 10:05:25 AM
Last Updated On: 7/31/2010 10:05:25 AM
Expiration Date: 7/31/2011 10:05:25 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Ionescu Mihai
Registrant Organization: NA
Registrant Street1: Str Pasul Morii
Registrant Street2:
Registrant City: Bacau
Registrant State/Province: Bacau
Registrant Postal Code: 405200
Registrant Country: RO
Registrant Phone: 40.741767872
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: zilenoi@yahoo.com
Admin Name: Ionescu Mihai
Admin Organization: NA
Admin Street1: Str Pasul Morii
Admin Street2:
Admin City: Bacau
Admin State/Province: Bacau
Admin Postal Code: 405200
Admin Country: RO
Admin Phone: 40.741767872
Admin Phone Ext.:
Admin FAX: .
Admin Email: zilenoi@yahoo.com
Billing Name: Ionescu Mihai
Billing Organization: NA
Billing Street1: Str Pasul Morii
Billing Street2:
Billing City: Bacau
Billing State/Province: Bacau
Billing Postal Code: 405200
Billing Country: RO
Billing Phone: 40.741767872
Billing Phone Ext.:
Billing FAX: .
Billing Email: zilenoi@yahoo.com
Tech Name: Ionescu Mihai
Tech Organization: NA
Tech Street1: Str Pasul Morii
Tech Street2:
Tech City: Bacau
Tech State/Province: Bacau
Tech Postal Code: 405200
Tech Country: RO
Tech Phone: 40.741767872
Tech Phone Ext.:
Tech FAX: .
Tech Email: zilenoi@yahoo.com
Name Servers:
ns1.domainscan.ro
ns2.domainscan.ro

http://www.lkw-trans.com/ dead fake shipping site.
Dead, mentioned here:
http://forum.aa419.org/viewtopic.php?t=47087


http://shipping-expert.com/content/index.php  active fake shipping site

Domain name: SHIPPING-EXPERT.COM

Created On: 11/24/2010 6:24:49 PM
Last Updated On: 11/24/2010 6:24:49 PM
Expiration Date: 11/24/2011 6:24:49 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Popa Eugenia
Registrant Organization: NA
Registrant Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Registrant Street2:
Registrant City: Cluj
Registrant State/Province: CLUJ
Registrant Postal Code: 400431
Registrant Country: RO
Registrant Phone: 40.756481004
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: popaeugeniacorina@yahoo.com
Admin Name: Popa Eugenia
Admin Organization: NA
Admin Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Admin Street2:
Admin City: Cluj
Admin State/Province: CLUJ
Admin Postal Code: 400431
Admin Country: RO
Admin Phone: 40.756481004
Admin Phone Ext.:
Admin FAX: .
Admin Email: popaeugeniacorina@yahoo.com
Billing Name: Popa Eugenia
Billing Organization: NA
Billing Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Billing Street2:
Billing City: Cluj
Billing State/Province: CLUJ
Billing Postal Code: 400431
Billing Country: RO
Billing Phone: 40.756481004
Billing Phone Ext.:
Billing FAX: .
Billing Email: popaeugeniacorina@yahoo.com
Tech Name: Popa Eugenia
Tech Organization: NA
Tech Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Tech Street2:
Tech City: Cluj
Tech State/Province: CLUJ
Tech Postal Code: 400431
Tech Country: RO
Tech Phone: 40.756481004
Tech Phone Ext.:
Tech FAX: .
Tech Email: popaeugeniacorina@yahoo.com
Name Servers:
ns1.domainscan.ro
ns2.domainscan.ro



Domain name: http://www.transactions-details.com/
Most likely being used for spoof eBay emails.

Created On: 5/4/2010 7:28:16 PM
Last Updated On: 5/4/2010 7:28:16 PM
Expiration Date: 5/4/2011 7:28:16 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Roiu George
Registrant Organization: NA
Registrant Street1: str.Iza, nr.5, bl.S9, ap.19
Registrant Street2:
Registrant City: Oradea
Registrant State/Province: BH
Registrant Postal Code: 410458
Registrant Country: RO
Registrant Phone: 4.075666145
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: roiu.george@gmail.com
Admin Name: Roiu George
Admin Organization: NA
Admin Street1: str.Iza, nr.5, bl.S9, ap.19
Admin Street2:
Admin City: Oradea
Admin State/Province: BH
Admin Postal Code: 410458
Admin Country: RO
Admin Phone: 4.075666145
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: roiu.george@gmail.com
Billing Name: Roiu George
Billing Organization: NA
Billing Street1: str.Iza, nr.5, bl.S9, ap.19
Billing Street2:
Billing City: Oradea
Billing State/Province: BH
Billing Postal Code: 410458
Billing Country: RO
Billing Phone: 4.075666145
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: roiu.george@gmail.com
Tech Name: Roiu George
Tech Organization: NA
Tech Street1: str.Iza, nr.5, bl.S9, ap.19
Tech Street2:
Tech City: Oradea
Tech State/Province: BH
Tech Postal Code: 410458
Tech Country: RO
Tech Phone: 4.075666145
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: roiu.george@gmail.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO


Domain name: http://www.uscarstrader.com/
This site contains files and images of vehicles used in scams in the internet.
Tthe files is being used on these fake sites:
 http://tahoe20.110mb.com/contactme.htm
The scammer is advertising a:
2007 Chevrolet Tahoe LTZ
Price $2,800
and using the email address:
jenny22339@gmail.com 
See the listings on Craigslist here:
http://www.google.com/search?q=jenny22339%40gmail.com&ie=utf-8&oe=utf-8&aq=t&client=firefox-a&rlz=1R1GGGL_en___US365#q=jenny22339%40gmail.com&hl=en&client=firefox-a&rlz=1R1GGGL_en___US365&tbs=qdr:d&prmd=ivns&filter=0&fp=438d7dda7b26e41

another here:
http://lexus12.110mb.com/contactme.htm
2006 LEXUS IS 250
Price $2,700
melydon41@gmail.com

I believe the prices are based on the fact that Western Union and MoneyGram will not allow transfers over $3,000

Created On: 11/5/2010 12:05:06 AM
Last Updated On: 11/5/2010 12:05:06 AM
Expiration Date: 11/5/2011 12:05:06 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Toma Viorel
Registrant Organization: NA
Registrant Street1: Str Popa Lazar nr 12
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 021586
Registrant Country: RO
Registrant Phone: 4.076731904
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: goldsc99@gmail.com
Admin Name: Toma Viorel
Admin Organization: NA
Admin Street1: Str Popa Lazar nr 12
Admin Street2:
Admin City: Bucuresti
Admin State/Province: Bucuresti
Admin Postal Code: 021586
Admin Country: RO
Admin Phone: 4.076731904
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: goldsc99@gmail.com
Billing Name: Toma Viorel
Billing Organization: NA
Billing Street1: Str Popa Lazar nr 12
Billing Street2:
Billing City: Bucuresti
Billing State/Province: Bucuresti
Billing Postal Code: 021586
Billing Country: RO
Billing Phone: 4.076731904
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: goldsc99@gmail.com
Tech Name: Toma Viorel
Tech Organization: NA
Tech Street1: Str Popa Lazar nr 12
Tech Street2:
Tech City: Bucuresti
Tech State/Province: Bucuresti
Tech Postal Code: 021586
Tech Country: RO
Tech Phone: 4.076731904
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: goldsc99@gmail.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO


Domain name: http://www.vehicle-transactions.com/ forwards to legitimate eBay site.
Most likely being used foir spoof eBay emails.

Created On: 7/8/2010 1:26:57 PM
Last Updated On: 7/8/2010 1:26:57 PM
Expiration Date: 7/8/2011 1:26:57 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Clayton Steven
Registrant Organization: NA
Registrant Street1: str. Bulevardul Unirii nr. 12
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 040105
Registrant Country: RO
Registrant Phone: 4.074633057
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: venton12@yahoo.com
Admin Name: Clayton Steven
Admin Organization: NA
Admin Street1: str. Bulevardul Unirii nr. 12
Admin Street2:
Admin City: Bucuresti
Admin State/Province: Bucuresti
Admin Postal Code: 040105
Admin Country: RO
Admin Phone: 4.074633057
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: venton12@yahoo.com
Billing Name: Clayton Steven
Billing Organization: NA
Billing Street1: str. Bulevardul Unirii nr. 12
Billing Street2:
Billing City: Bucuresti
Billing State/Province: Bucuresti
Billing Postal Code: 040105
Billing Country: RO
Billing Phone: 4.074633057
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: venton12@yahoo.com
Tech Name: Clayton Steven
Tech Organization: NA
Tech Street1: str. Bulevardul Unirii nr. 12
Tech Street2:
Tech City: Bucuresti
Tech State/Province: Bucuresti
Tech Postal Code: 040105
Tech Country: RO
Tech Phone: 4.074633057
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: venton12@yahoo.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO

Domain Name: http://www.accountcraigslists.org/
Most likely being used for spoof Craigslist emails.

Created On:21-Jan-2011 14:57:43 UTC
Last Updated On:24-Jan-2011 13:49:21 UTC
Expiration Date:21-Jan-2012 14:57:43 UTC
Sponsoring Registrar:Paknic (Private) Limited (R1605-LROR)
Status:TRANSFER PROHIBITED
Status:ADDPERIOD
Registrant ID:PAK11012111532-1
Registrant Name:Iordache Marius
Registrant Organization:NA
Registrant Street1:str. Lujerului, nr. 2
Registrant Street2:
Registrant Street3:
Registrant City:Bucuresti
Registrant State/Province:Bucuresti
Registrant Postal Code:111111
Registrant Country:RO
Registrant Phone:+40.743022593
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:imc_3030@yahoo.com
Admin ID:PAK11012111532-2
Admin Name:Iordache Marius
Admin Organization:NA
Admin Street1:str. Lujerului, nr. 2
Admin Street2:
Admin Street3:
Admin City:Bucuresti
Admin State/Province:Bucuresti
Admin Postal Code:111111
Admin Country:RO
Admin Phone:+40.743022593
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:imc_3030@yahoo.com
Tech ID:PAK11012111532-3
Tech Name:Iordache Marius
Tech Organization:NA
Tech Street1:str. Lujerului, nr. 2
Tech Street2:
Tech Street3:
Tech City:Bucuresti
Tech State/Province:Bucuresti
Tech Postal Code:111111
Tech Country:RO
Tech Phone:+40.743022593
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:imc_3030@yahoo.com
Name Server:NS3.NS-SERVICES.NET
Name Server:NS4.NS-SERVICES.NET
Name Server:NS1.DOMAINSCAN.RO
Name Server:NS2.DOMAINSCAN.RO

Leia Mais…

Romanian caught with $140k stolen in USA

Marian Potcovaru was arrested in Medina, Ohio for picking up about $140,000 in money transfers in Pennsylvania and Ohio.

Story here:
http://www.pittsburghlive.com/x/pittsburghtrib/news/pittsburgh/s_719794.html

It appears the scammers used the story where the seller is a soldier and needs to sell a vehicle.
Sound familiar?
I hope all you victims out there with similar circumstances have or will contact the authorities.
Its imperative to file reports.
These people are caught and as you can see here, Potcovaru had a substantial amount of money on him.

This was not Marian Potcovaru's first run in with US authorities involving scams.
Here is a story about Marian Potcovaru being accused of Forgery last year in Medina Ohio:
http://webcache.googleusercontent.com/search?q=cache:14hA5wANdc4J:lawtalk.blogspot.com/2010/01/judge-kimblers-criminal-docket-for_23.html+Marian+Potcovaru&cd=1&hl=en&ct=clnk&gl=us

Another story here:
http://medinagazette.northcoastnow.com/2011/01/27/forger-caught-in-medina-faces-federal-charges-in-pa/

Leia Mais…

onsalefurnituremart.com SCAM

http://www.onsalefurnituremart.com/  FAKE FRAUD SCAM

Yet another Green Dot MoneyPak scam site.
Previous blog entries on these scammers:
http://netscammers.blogspot.com/2011/01/directfurniturebazaarcom-scam.html
http://netscammers.blogspot.com/2010/12/comodo-sites-safe.html
http://netscammers.blogspot.com/2010/12/homeclearancefurniturecom-scam.html

Appears to be the same crew responsible for these sites too:
http://www.resellerratings.com/store/Lattis_Clearance_Shop
clearanceshop.org
http://clearance-furniture.pissedconsumer.com/clearancefurniture-biz-is-a-scam-http-3a-www-clearancefurniture-biz-category-php-id-category-3d8-20100107166919.html
clearancefurniture.biz
http://www.google.com/url?sa=t&source=web&cd=11&ved=0CCMQFjAAOAo&url=http%3A%2F%2Fwww.bt3central.com%2Fshowthread.php%3Fp%3D440703&ei=rxg_TanpHoL3gAfm5ODWCA&usg=AFQjCNHeh-GFp_Q51q5idVAH3bo37v9UrA
toolsclearance.com
http://spokane.bbb.org/article/outletfurnitureus-and-clearancefurniturebiz-scam-sites-stating-they-have-a-%22deposit%22-in-montana-15346
Outletfurniture.us & Clearancefurniture.biz

Additional details on these scammers can be found here:
http://tucsoncitizen.com/bbbconsumeralert/2010/03/25/scammers-use-green-dot-moneypaks-to-steal-online/
and here:
http://tucsoncitizen.com/bbbconsumeralert/2010/04/23/online-scammers-steal-cash-fail-to-deliver-playset/

Please note:
BBB offers the following advice for consumers making online purchases:
•Beware of any offers that do not accept credit cards and ask you to purchase a MoneyPak and provide a MoneyPak number in an e-mail or over the phone.
•Reloadable cash cards like Green Dot MoneyPak and other methods of cash transfers like MoneyGram and Western Union should never be used to send money to anyone you do not know. These types of payments are virtually impossible to trace, and there is a good chance you will lose your money.

Images of the fake site:

Leia Mais…

2010 Income Tax Deductions for Internet Losses

If you were defrauded on the Internet and you are filing a US Tax return for 2010 here is some quick help.

It is tax deductible if you suffered a loss due to the theft of your money or items in an online scam.
You should have supporting documentation such as a copy of the police report you filed at the time of your loss. Make sure you keep copies of all receipts and evidence.

For more information please visit:
www.irs.gov
http://www.irs.gov/taxtopics/tc515.html
http://www.irs.gov/publications/p547/ar02.html#en_US_2010_publink1000225208
(click Theft)

You will need to fill out an IRS Form 4684  and Form 1040 and Schedule A
http://www.irs.gov/individuals/article/0,,id=118506,00.html

Form 1040 and Instructions - Standard Income Tax Return

Schedule A and Instructions - Itemized Deductions

Here are the instructions for the Form 4684 you will need to file:
http://www.irs.gov/pub/irs-pdf/i4684.pdf

The form is located here:
http://www.irs.gov/pub/irs-pdf/f4684.pdf

If you have any question please consult a qualified tax preparer.

Leia Mais…

directfurniturebazaar.com SCAM

http://www.directfurniturebazaar.com/  FAKE FRAUD SCAM

directfurniturebazaar.com is yet another Green Dot MoneyPak scam site.

Details on this scam can be found in my previous posts:
http://netscammers.blogspot.com/2010/12/homeclearancefurniturecom-scam.html
http://netscammers.blogspot.com/2010/12/comodo-sites-safe.html

Additional details on these scammers can be found here:
http://tucsoncitizen.com/bbbconsumeralert/2010/03/25/scammers-use-green-dot-moneypaks-to-steal-online/
and here:
http://tucsoncitizen.com/bbbconsumeralert/2010/04/23/online-scammers-steal-cash-fail-to-deliver-playset/

Please note:
BBB offers the following advice for consumers making online purchases:
•Beware of any offers that do not accept credit cards and ask you to purchase a MoneyPak and provide a MoneyPak number in an e-mail or over the phone.
•Reloadable cash cards like Green Dot MoneyPak and other methods of cash transfers like MoneyGram and Western Union should never be used to send money to anyone you do not know. These types of payments are virtually impossible to trace, and there is a good chance you will lose your money.

Here are images of the fake site:

Leia Mais…

army-shipping.com SCAM

http://www.army-shipping.com/  FAKE FRAUD SCAM
aka
http://u.s.army-shipping.com/

US Army Shopping & Safety Service

army-shipping.com is the newer site from the same scammers that ran:
http://netscammers.blogspot.com/2010/10/us-army-deliverycom-fraud.html

Please send complaints to:
Abuse reports mailto:abuse@hostinguk.net

Leia Mais…

dhlexpressway.com wash wash scam

dhlexpressway.com FAKE FRAUD SCAM

We all know that DHL did not set up www.dhlexpressway.com
The person that set the spoof site up is using the name and email:
Dr. Mark Cook aka mark_41@live.com
You can see the ads and fake recommendations he's set up on the internet for this scam:
http://www.google.com/search?q=%22mark_41%40live.com%22&hl=en&num=10&lr=&ft=i&cr=&safe=off&tbs=\

The site was created using this identity:
http://whois.domaintools.com/dhlexpressway.com

The scam is old, the victims will be new.
Read about the scam here:
http://en.wikipedia.org/wiki/Black_money_scam

Don't be a sucker.
Greedy idiots commonly fall prey to this scam.



Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

baworldcargo.net British Airways Spoof

baworldcargo.net  FAKE FRAUD SCAM

newer site:
http://baworldcargo.net/
http://whois.domaintools.com/baworldcargo.net

http://www.baworldcargo.net/ 
http://whois.domaintools.com/baworldcargo.net

Another spoof site:
www.baworld-cargo.com
http://whois.domaintools.com/baworld-cargo.com

is a fake shipping site run by a scammer who is pretending to be the legitimate British Airways site which is:
http://www.baworldcargo.com/
http://whois.domaintools.com/baworldcargo.com

Think YAHOO cares?
Think British Airways cares? YES they do!!!
British Airways has been to this blog 3 times.
Lets hope they get the fake site killed soon.

Here is a screen capture of the fake site:

Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

The F.B.I is washing you.

I just couldn't resist posting this fake email that was forwarded to me from an intended victim:


Subject: Report From F.B.I Police Department Center
From: fbiscamwatch@usa.com
FEDERAL BUREAU OF INVESTIGATION FBI,
MOST URGENT INSPECTOR TONY STOMAC FEDERAL BUREAU OF INVESTIGATION FBI.
WASHINGTON DC .
EMAIL: fbiscamwatch@usa.com
WEB SITE:  www.ic3.gov/


FBI SEEKING TO WIRETAP INTERNET
ATTENTION: ,

The Federal Bureau Of Investigation F.B.I, Has discovered through our Intelligence Monitoring Network (I.M.N) here in this office of online investigations, that you have an ongoing transaction regarding being a sole beneficiary of an unclaimed package Bank Draft containing your funds amount of $500.000.00 U.S.D deposited with Federal Express by Mrs. Jane Smith and we have been notify by the British Metropolitan Police force  MPF and Central Intelligence Agency C.I.A and confirmed that this funds is yours.

So the Federal Bureau Of Investigation F.B.I Washington DC, In conjunction with the British Metropolitan Police force  MPF, Has screened through our various Monitoring Networks concerning fraud and has been confirmed and notified that the transaction you have with Federal Express is Legal and you have the Lawful Right to proceed further with the transaction.

We advise you to go ahead with them as we are monitoring all their services and network. Be advised that any other letter, forwarded to you from any other organization or body, apart from the Federal Express, should be immediately forwarded to us so that we can trace the address of the sender.
The United State of America Government, United Kingdom Government and Canadian Government has spent over Five Million United State Dollar to make sure these scammers are brought before the law. They are still ready to spend more to make sure they are brought before the law.

Meanwhile, you are advised to follow the procedure of the Federal Express, Nigeria and provide their requirement of $110 Usd to enable them commence on delivery of your package bank draft of US$500,000.00 in their office to your home destination as they have their own legal procedure which we have examined and confirmed legal. Follow their instructions while you keep us updated for more details.

 You are advised to contact the necessary officer Mr. Fred Koko of  Federal  Express for more details for your package to arrive to you as we are monitoring every move now.

We are fully in control of the situation, Be advised that your package will arrive to you to your home address as confirmed that the necessary charges of $110 Usd would be taken care of by you, as confirmed by the Monitoring  network. For your own good you are advised to confirm any other transaction you have either involved your self with, in the past to enable us trace the source of the transaction. Only this transaction you have with the Federal Express has been confirmed Legal any other are still under investigation, and so many others are scam, most especially from Europe, Asia and others.

NB: We urge you to comply with the lay down procedure given to you by the Federal Express.

The F.B.I is washing you.

Thanks for your co-operation.
Warms Regard
Inspector Tony Stomac.

Here is the original scam:
You are welcome to FedEx Courier Express with world wide delivery at its best. We are pleased to be at your service. FedEx Courier Express is Regulated and Stipulated by the Delivery Service Authority(D.S.A), The delivery institutions that REGULATES all delivery activities in Abuja Nigeria.
This is to inform you that we are in the position of delivering your confirmable Bank Draft of US$500,000,00 to your home address which was deposited in our office by Mrs. Jane Smith, to let you know that all necessary arrangement of delivering your Bank Draft to your home address has been processed. We have scheduled the shipment of your package for today based on the instructions from the depositor, meanwhile your package is at the Delivery department of the company at the moment, The Delivery department are demanding for the sum of US$110 Delivery charges before they will allow the shipment to proceed.

Therefore in order to enable us commence with this shipment as scheduled, You are advised to contact the nearby Western Union Money Transfer ( W.U.M.T ) office location around your designated area and send us the sum of US$110 with the information listed below:

Receiver Name: Henry Julius
Address: Plot 78 Gariki ,City: Abuja
State: Abuja, Country: Nigeria
Tex Question To Be Used: Best Colour
Answer: White


FEDERAL EXPRESS SERVICE NIGERIA LTD
70 International Airport Road Mafoluku,
Lagos, Nigeria.
Contact Email: www.fedexcourier@live.com


Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

british-securepay.com FRAUD

www.british-securepay.com  FAKE FRAUD SCAM

Fake shipping and escrow targeting UK victims.

Same scammers as:
http://netscammers.blogspot.com/2011/01/sydney-motorspaycom-fraud.html
Using the same clone site.......and web host in Russia.
The site is registered to an ID theft victim in Australia.

Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

elitecargoexpress.com FRAUD

http://www.elitecargoexpress.com/  FAKE FRAUD SCAM
New site:
http://www.extrafreightexpress.com/

elitecargoexpress.com is a fake shipping and escrow site targeting Canadian buyers of season tickets for National Hockey League teams.
There is nothing in real life as a shipping and escrow company.
The site is being run by scammers based in Romania.

Previous fake sites by the same scammers:
elitetrans-express.com
elitefreightshippers.com
elitecargologistics.com
eliteglobaldivision.com
eliteglobalcarrier.com

Please send complaints to:
abuse@ecommerce.com

Here are some images from the fraud site:

Notice there is no secure connection?
There is no secure server.
There is no 256 bit SSL.

Here is some text from the fake site:

How it works - Elite Cargo Express Inc
   ESCROW PROCESS

   • What are the escrow steps?
   • How is the buyer protected?
   • How is the seller protected?
   • How do I start a new transaction?
   • How does the buyer pay?
   • How does the seller get paid in the end?

   SENSITIVE INFO & SECURITY

   • Can I tell the password to my account to a friend so that he can use it?
   • Will Elite Cargo Express Inc disclose any private information I provide?
   • Why is the escrow process safe?

   MY QUESTION WASN'T ANSWERED HERE! WHAT SHOULD I DO?


  ANSWERS
• What are the escrow steps?
Both parties agree to the terms of transaction, which includes a description of the merchandise, sale price, number of days for the buyer's inspection period.
- Step 1 is completed after a transaction has been added to our database by one of the parties.
- Step 2 is completed after the transaction has been accepted by both parties.
- Step 3 is completed after the shipping and payment information has been updated.
We will provide the shipping information (tracking number) to the seller. The buyer submits a payment to Elite Cargo Express Inc in order to verify and process the funds before proceeding to the next step.
- Step 4 is completed after the buyer has received the goods / merchandise for inspection.
The buyer must decide to accept or return the merchandise received before the inspection period expires, or it will become non-returnable. If the buyer accepts the merchandise, Elite Cargo Express Inc pays the seller and the transaction goes to Step 5. Otherwise, the merchandise is sent back to the seller and, after verification, the money is returned to the buyer.
- Step 5 is completed after seller has received the funds.
• How is the buyer protected?
- In most of cases we are the ones that deliver the goods / merchandise.
- The seller isn't paid until the buyer accepts the merchandise, or the inspection period is over.
• How is the seller protected?
Elite Cargo Express Inc will ship the merchandise only after our Payment Dept. verifies the funds.
• How do I start a new transaction?
Once you have a Elite Cargo Express Inc account, after logging in, click on Start a Transaction icon in the Third Party Agency Tools section. The page that will load will guide you through the rest of the process.
• How does the buyer pay Elite Cargo Express Inc?
Elite Cargo Express Inc only accepts wire and money transfer, in order to reduce the risk of credit card fraud on the buyer's side. PayPal will be accepted soon.
• How does the seller get paid in the end?
The seller is paid only upon acceptation of the merchandise by the buyer. Funds are sent by check or wire transfer (in the case of the latter, an additional fee of $15 is deducted).
• Can I tell the password to my Elite Cargo Express Inc account to a friend so that he can use it?
- You may in no circumstance disclose your password to anyone.
- Do not enter your Elite Cargo Express Inc account password on any website.
Anyone that knows your user name and password can access all the features of your account and thus perform transactions in your name.
• Will Elite Cargo Express Inc disclose any private information I provide?
Elite Cargo Express Inc will not disclose any of the information you provide to any third party, excepting legal entities.
• Why is the escrow process safe?
Elite Cargo Express Inc acts as a secure middleman between the buyer and the seller.
• My question wasn't answered here, what should I do?
You should contact our Customer Support and fill out a support request form.
After you submit a support request, our support team will analyze it and provide the best solution to your problem via e-mail.


Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

sydney-motorspay.com FRAUD

http://www.sydney-motorspay.com/

Please see this post as its apparently the same scammers:
http://netscammers.blogspot.com/2011/01/au-cartradercom-fraud.html

Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

au-cartrader.com FRAUD

http://www.au-cartrader.com/  FAKE FRAUD SCAM

Au-cartrader.com a fake shipping and escrow company run by Romanian scammers, registered in Russia and hosted on a server in Russia.
The fake site is targeting car buyers in Australia.
We all know that there is nothing in real life as a shipping and escrow site.

These scammers created a domain named http://www.defenceairforces.com/, which forwards to the legitimate site http://www.airforce.gov.au/, to trick buyers into thinking they are dealing with a legitimate person in the Royal Australian Air Force.
The scammers are then instructing their intended victims to send payments via Western Union.

This site is being run by the same scammers involved in the previous clone site:
http://netscammers.blogspot.com/2010/11/london-autopaycom-fraud.html

http://whois.domaintools.com/au-cartrader.com
http://nic.ru/en/

http://whois.domaintools.com/defenceairforces.com
send complaints to:
abuse@nvhserver.com
Here is what the scammer is sending to his intended victims:

I've spoke to my superiors and I can take 4 days permission to bring the car but I don't want to take this permission and maybe come for nothing, I mean that there is a risk of coming to you and...you simply don't show up and I don't want to be embarrassed because there will not be a second chance for me to take a second permission. Carsales website recommends using escrow companies for distant transaction and I believe http://www.au-cartrader.com/ can do a very good job. I've read their terms which is suitable for both of us but first you must register at their website and then provide your user name so I can start the transaction. You can read how escrow works here: www.au-cartrader.com/howitworks.php .
I can give you one day to test the car at any inspection service you wish and only if you decide to keep it, they will release the money to me so, this is the safest way. I'm going to drive the car myself so...there will be no shipper or shipping company and the reason of using an escrow company is because I don't want to drive all the way just like that, I must be sure I'm coming for something because as you probably know is a very big distance . Let me know your decision because there is another person who wants to buy it and I need to know which way to go.

I'll bring the car with the log book and we can sign the papers right away

--
Thomas Brent - Air Corps Pilot id# 2819293
Army email: ac2819293@defenceairforces.com
Personal email: thomasbr76@gmail.com
Royal Australian Air Force

Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…