Sunday, February 7, 2010

franciscocourier.com

Lets take a quick look at this scam site.
www.franciscocourier.com

Listed here:
http://forum.aa419.org/viewtopic.php?p=194630#194630
and here:
http://escrow-fraud.com/index.php?page=fraud_data&id=9935

The commonly used template is here:
http://escrow-fraud.com/index.php?page=gallery&layout=31

Registration Service Provided By: TAPRAP
Contact: +234.7060531794
Website: http://www.taprap.net

Domain Name: FRANCISCOCOURIER.COM

Registrant:
WWCP Inc
World Wide Courier Post (as0001959@yahoo.com)
17/27 Howie Street
London
London,SW11 4AS
GB
Tel. +390.94768349446

Creation Date: 20-Jan-2010
Expiration Date: 20-Jan-2011

Domain servers in listed order:
dns2.supremepanel5.com
dns1.supremepanel5.com

The Yahoo email address used to register the site:
http://profiles.yahoo.com/as0001959
Listed as Alex Male Illinois, a far cry from a supposedly legitimate company based in the UK.

A quick Google search on the email used to register the fake site reveals this:


The search reveals that Yahoo email address has been used on previous scam sites and for spam emails:
http://db.aa419.org/fakebanksview.php?key=44259
http://spamdb.vp44.com/emails/sep09/sep09-336.php

I don't think "as0001959" is a common or commonly duplicated term so I did an additional search:
http://www.google.com/search?hl=en&lr=&q=%22as0001959%22&start=0&sa=N&filter=0
"as0001959" leads to another email address and several ads on the internet for dating sites.

Suffice to say this appears to be a typical Nigerian scammer.
I hope no one falls prey to any scams using this site.

Leia Mais…

Friday, February 5, 2010

Oldie But Moldy

Several years ago I was able to help save people targeted in in a fake escrow scam involving $4,000,000.00 worth of jewelry from sellers on eBay.
Thats right you read the correct amount 4 Million Dollars.
I had help from a US Secret Service Agent on this.

The biggest problem was getting the web hosting company to close the sites as soon as they were discovered.
The host kept saying they needed a court order to remove the fraud domains.
I let the Secret Service agent deal with them.
(I'd rather not go into certain details about my interaction with this particular web hosting company. I'll create another post to deal with that)

The layout is here:
http://escrow-fraud.com/index.php?page=gallery&layout=6

The sites involved were:

gbtriplealliance.com
gbsafedeals.com
dealinthree.com
gbtripledeal.com
tripleallianceonline.com
tripleonlinedeal.com
ukallianceonline.com
uksafedeals.com

Unfortunately some people did send their merchandise to the scammers.

Some of the scammer's email addresses were:

homecinema99@yahoo.com
homechoice99@yahoo.com
arthurneverdies@yahoo.com
peterneverdies@yahoo.com
daveneverdies@yahoo.com
carloneverdies@yahoo.com
marcusneverdies@yahoo.com
daveneverdies@yahoo.com

Some of the items were sent to:

Arthur Moore
2 Chelsea Close
Edgware
Middlesex
London HA8 5TG UK
Phone#: +44(0)2087926818

and

Mr. Peter More
28 Westward Road
LONDON
E4 8LX
United Kingdom
Phone#: +44(0)2087926818

and

Mr. Arthur Moren
25 regents court
stonegrove
edgware
HA8 8AD
London
United Kingdom
Phone#: +44(0)2087926818

These sites were run by Romanian based scammers.

Leia Mais…

2-5-10

Had a busy day finding and posting sites.

To see the sites I posted go here:

http://forum.aa419.org/viewforum.php?f=20&start=0

Find the box Order: and select "Newest first"

You'll see that many of the sites posted are "spoof" sites.
These are sites set up by scammers using stolen credit cards and pretend to be companies like eBay.
The scammers use the domains mostly for fake emails sent to intended victims.

Other sites are fake shipping and escrow, or "third party" sites.
(There is NO SUCH THING as a legitimate shipping and esrow site)

Read about these sites here:
http://forum.aa419.org/viewtopic.php?t=32656

If you'd like to help aa419.org kill some of these sites, join us!

Leia Mais…

Wednesday, February 3, 2010

citycorus.com

www.citycorus.com
(hopefully its reported and the web host kills it soon)

UPDATE!
The site was promptly killed by the webhost.
(Thanks)
Its interesting to note that I emailed a TV station where the scammer lives to ask them to highlight this situation and perhaps prevent others from doing the same thing.
newsdesk@abs-cbn.com
results=0
No response, which is customary as not too many people, especially those who can do something about them, care about internet scams.


Registration data:
Registrant:
CityCorus
Jones Brain (jones_73@yahoo.com)
MY

How many people are named Jones Brain?

If you Google the address:
2 Jalan, Taman Tun Perek
You get:
This!
Which means its a ficticious address.

A Google search on the email address reveals:
http://profiles.friendster.com/47959946


junald fuentes
Male, 18, Single, Santa Cruz, Davao del Sur, PH
hi im jones add me jones_73@yahoo.com

The Google search also reveals a link to a suspended blog
howtostopspam.blogspot.com
(click here)

The Yahoo profile:
http://profiles.yahoo.com/jones_73
18? 36?

Leia Mais…

Tuesday, February 2, 2010

darkengel.org real or just a front ?

Designs and creates web sites?
Programs?
It appears so.
However, what other projects have they applied their "powerful programming skills" to?

Well, it appears that TUDOR Razvan Gabriel used to create php forms for eBay phishing sites and fake escrow sites.

tudor razvan gabriel
web designer and programmer
home page: http://www.darkengel.org/

heart has its reasons, which reason doesn't know
Pascal

Here are results when you Google his name:

http://www.google.com/search?q=tudor+razvan+gabriel&rlz=1I7DLUS_en&ie=UTF-8&oe=UTF-8&sourceid

Leia Mais…

Sunday, January 31, 2010

Vasile Bogdan

Originally from Romania
Vasile Stefan Bogdan
Born in IASI (Romania) the 24th December of 1985.
Son of Constantin and Maria.
Arrested November 2006 in Spain

Last known address:
City : Maastricht, Netherlands

This scammer was deeply involved in scamming sellers and buyers on eBay.
Latest scams involved listing items on line and asking for Money Gram payments for boats and tractors.

He also worked with this person:
http://netscammers.blogspot.com/2010/03/catalin-ilie.html

Some of the fake escrow sites he used were:
eximp-ltd.net
eximps-ltd.net
fast-helpnet.com
fast-helpnet.net
impdex-ltd.com
trusledonline.com
trust-ltd.net
trust-ltd.us
trust-ltd.co.uk
trust-ltd.org.uk
trust-trader.uk.com
directline.biz.tc
safedl.biz.tc
truled.com
truled.net
truled.org
truled.us

See the layouts here:
http://escrow-fraud.com/index.php?page=gallery&layout=10a

Leia Mais…

Tudorascu Alexandru and Dina Georgiana Claudia












AKA Tudorescu Florea Alexandru
Last known addresses:
Timisoara


These scammers specialized in placing ads on the internet for apartment rentals.
They use Western Union in their scams.

Newest scam and fake shipping sites:
preston-lettings.com   http://whois.domaintools.com/preston-lettings.com
Send complaints to abuse@hetzner.de

www.oxford-lettings.com
abroad-renting.uk.st
abrdrnt1.awardspace.co.uk
www.abroad-renting.uk.gp
www.HomeAbroad.uk.mn
www.home-abroad.uk.cm
www.urgent-logistics.uk.cm

Hello,


Thank you for your reply. As I said, the total price which you'll have to pay for one month of rent (warm miete) will be €600, no additional costs.
I would like to receive the monthly rent directly to my british bank account.
In order to view the flat and settle a deal, you will need the keys, and the contract .
Obviously we need a safe and fast way to complete this deal.
A friend of mine has had a similar situation which he solved using the services of Urgent Logistics (www.urgent-logistics.uk.cm) which is a very good british delivery company.
They will handle the delivery of the keys and also the payments .
If you are ready to rent this flat, I must explain you how this service works and what we need to do.
You will need to deposit the first month of rent (€600) plus the security deposit (kaution) of €600 to Urgent Logistics, so they can proceed with the delivery of the keys and the contract.
This is a guarantee that nothing happens to the goods inside the apartment, during your inspection (of course you get the money back if you are not satisfied).
I will pay for the 24 hours air delivery so you'll receive the keys and the signed contract straight away.
Here's how it works :
1 - To start this transaction, I need your full contact information (full name, full shipping address, telephone number)
2 - I will go to a local Urgent Logistics office and leave the Keys and the contract on your name as the intended receiver.
3 - Urgent Logistics will check the envelope to see if everything is OK with it and also the legal papers that will come along with the Keys. After this, they will send you an email notification.
4 - At this point you'll have to make the above mentioned money deposit to Urgent Logistics, for the first month of rent and for the kaution (which you get back when you leave the apartment).
5 - After you pay the deposit you'll have to confirm it to Urgent Logistics .
6 - Urgent Logistics will verify the payment information, and if everything is in order they will deliver the Keys and the contract to you .
7 - After you receive everything, you must go and check the apartment and in the next 2 days you must contact Urgent Logistics to tell them if you are satisfied or not.
If all is in order, you'll instruct Urgent Logistics to release the money to me.
However, if you are not pleased with the apartment for any reason, they will return your money and you'll send me the keys back by post.
I will pay for the Urgent Logistics services so there will be no extra costs for you.
If you have the €1200 ready (the rent for 1 month-€600 and the kaution-€600) and if you're ready to begin this transaction, please tell me your full name and shipping address, and I'll start the procedure.
You'll receive a notification and important instructions from Urgent Logistics (please go through them exactly).
Also, in case you have another apartment right now, and you cannot move in immediately, we can make the deal as I explained it now, and consider it only an inspection and reservation. You will move in when you are ready and the first rent will be considered for that month, not for right now.
Let me know if this is ok.
I am waiting for your quick answer because there are several others interested in the apartment, and I need to know if I can count on a deal with you.

Friendly greetings,

-----------------
Nathan Summers
Project Manager in Civil Engineering
tel: 00447031812574 (Monday to Friday).
address: 12 Whitfield Street
city/postal code: London, W1T 4EZ
United Kingdom

Here is an example of the suggested payment:

BGS Agent Name and Address :
First name Martin

Last name Peterson

Address 21 Hattwick Road

City/State London
PostalCode W1G 7HE
Country England

Here is an earlier message they sent.
(thanks to the intended victim who sent it to me as it may help others)
Hello,


Thank you for your reply. Like I said, the total price which you'll have to pay for one month of rent will be €600,
no extra charges. I would like to receive the monthly rent directly to my english bank account.
In order to check the flat and see if you like it (I'm think you will), you need to receive the keys,
the full address and the contract. Obviously we need a way to complete this deal in a safe and fast way for the both of us.
A friend of mine has had a similar situation which he solved using the SDK Logistics service.
SDK Logistics (www.SDK.uk.tp) is a delivery company, similar to FedEx, DHL or UPS. They will handle the payment and delivery of the Keys .
If you are ready to proceed with this transaction I must explain you how this service works and what we need to do.
You have to deposit to the SDK Logistics the first month of rent: €600, plus a security deposit (kaution) of €600 so they can proceed with the delivery of the keys and the contract. This is a guarantee that nothing happens to the keys, or to the goods inside the apartment during your inspection.
Like I said, I will pay for 24 hours airplane delivery so you'll receive the Keys and the contract signed by me right away.
I will explain you step by step how this works :
1 - To start this transaction i need to know your full shipping information (full name, full shipping address, telephone number)
2 - I go to a SDK Logistics Office and leave the Keys and the contract on your name as the intended receiver.
3 - SDK Logistics will check the envelope to see if everything is OK with it and also the legal papers that will come along with the Keys.
4 - They will send you a delivery notification to let you know they have the Keys and the papers in their custody.
5 - At this point you'll have to make a money deposit to SDK Logistics, for the amount we agreed, the total amount you shall deposit is for the first month of rent and for the security deposit (which you get back when you finish using the apartment) .
6 - After you pay the deposit you'll have to send the info about the money deposit to SDK Logistics .
7 - SDK Logistics will verify the payment information and if everything is in order they will deliver the Keys and the contract to you .
8 - After you receive the package, You must go and check the apartment and in the next 2 days you must contact SDK Logistics to tell them if you'll use it or not. if all is in order you'll instruct SDK Logistics to release the money to me.
On the other hand, if you don`t like the apartment for some reason they will return your money and you'll send them the keys and the contract so I can recover them.
I will pay for the SDK Logistics Service and for the shipping so there will be no extra costs for you.
If you have the €1200 ready (the rent for 1 month-€600 and the kaution-€600) and if you're ready to begin this transaction, please tell me your full name and shipping address, and I'll start the official procedure, and SDK Logistics will notify you about this matter.
You'll also receive important guidelines plus instructions from them (please go through them exactly).

all done‏

Hello,

I just came back from SDK Logistics. Luckily they work on Sundays too.
I gave them the keys, the signed rental contract , and a copy after the title of ownership
they said they will email you with details for paying one month rent, and the kaution as guarantee. Then, they will deliver the package within 24 hours of your payment.
Here is the number of delivery: deleted
You can then go inside and have a look at the place. If you like it, you will then confirm SDK Logistics by email and they will release the money to me , and you can move right in. On the other hand, if you're not satisfied, they will refund you the money, and give you instructions on how to send the keys and everything back to me.
However, I am sure you will love it (more than 80.000 euro spent on decoration, furniture and appliances.)
So, If you have a chance to arrange everything today, tomorrow the keys will be there and you can go see it.
I am looking forward to your reply.

Have a nice day!

Involved in the following fraud sites:

rapid-logistics.uk.tc
tdg-logistics.uk.tp
rapidlogistics.exofire.net
lht-logistics.uk.tp
lhtlog.we.bs
sdk.freeftp.eu
tdg.000space.com
tdgl.50webs.com
bgsl.oxyhost.com
bgsl.110mb.com
bgs.uk.tp
bgs.uk.tc
bgsl.oxyhost.com
trans-epax.tripod.com
skship24.com
sk-ship-24.com
sk-online.com
epax-trans.com
epaxtrans.com
epaxtransport.com
tdg.uk.tp
tdg.uk.pn
tdg.uk.mn
sdk.uk.tp
bgsl.vze.com

German discussion boards on these scammers:
http://wohnungsbetrug.wordpress.com/2012/06/28/www-preston-lettings-com-vorkassebetrug-2/
http://forum.sat1.de/showthread.php?p=262255

Leia Mais…