Monday, February 7, 2011

directhomegym.com SCAM

directhomegym.com   FAKE FRAUD SCAM

http://www.directhomegym.com/
Yet another in a series of fake stores on the internet using GreenDot MoneyPak debit card and Google Checkout to defraud buyers.

Details on this scam can be found in my previous posts:
http://netscammers.blogspot.com/2010/12/homeclearancefurniturecom-scam.html
http://netscammers.blogspot.com/2010/12/comodo-sites-safe.html
Additional details on these scammers can be found here:
http://tucsoncitizen.com/bbbconsumeralert/2010/03/25/scammers-use-green-dot-moneypaks-to-steal-online/
and here:
http://tucsoncitizen.com/bbbconsumeralert/2010/04/23/online-scammers-steal-cash-fail-to-deliver-playset/


Images here:




Here is some text from the fake site:


Green Dot MoneyPak FAQs
We process our customers Green Dot MoneyPak payments through PayPal. However, WE DON'T ACCEPT DIRECT PAYPAL PAYMENT DUE A HIGH CHARGEBACK RISK.
MoneyPak is a safe and secure way to send money to where you need it. The MoneyPak works as a "cash top-up card". Once you purchase it at a participating retailer with cash, you can use it to reload prepaid cards, add money to a PayPal account without using a bank account, or make same-day payments to different companies.
You can add any amount from $20 to $500 onto a MoneyPak at most retailers. You can add up to $1,100 at Walmart.
MoneyPak can be purchased at thousands of stores nationwide, including major retailers such as Walmart, Walgreens, CVS Pharmacy, 7-Eleven,Rite Aid, Kmart, Kroger and Meijer. Click here to find a store near you.
Pick up a MoneyPak from the Prepaid Product Section or Green Dot display and take it to the register. The cashier will collect your cash and load it onto the MoneyPak.
MoneyPak costs $4.95 or less. There are no hidden fees or charges. Just purchase your MoneyPak, use cash to load it and you are ready to go.
This is my first purchase with DirectHomeGym.com and your website instructions suggested I should pay with MoneyPak, how do I know my money is safe?
Green Dot keeps records of all transactions ran through their MoneyPak system, this way they can track and protect the purchase. Make sure you have your receipt ready before calling Green Dot Customer Service.

Whats the Green Dot MoneyPak?
MoneyPak is a safe and secure way to send money to where you need it. The MoneyPak works as a "cash top-up card". Once you purchase it at a participating retailer with cash, you can use it to reload prepaid cards, add money to a PayPal account without using a bank account, or make same-day payments (pay for merchandise) to different companies.

Is using a MoneyPak safe?
Green Dot Corporation is a trusted name in the financial services industry and designed the MoneyPak with your privacy and personal security in mind. Unlike other services, you will never need to disclose your personal or financial information to a retail cashier.

How much money can I put on the MoneyPak?
You can add any amount from $20 to $500 onto a MoneyPak at most retailers. You can add up to $1,100 at Walmart.

Where can I purchase a MoneyPak?
MoneyPak can be purchased at thousands of stores nationwide, including major retailers such as Walmart, Walgreens, CVS Pharmacy, Rite Aid, Kmart, Kroger and Meijer. Click here to find a store near you.

How do I buy a MoneyPak at the store?
Pick up a MoneyPak from the Prepaid Product Section or Green Dot display (click) and take it to the register. The cashier will collect your cash and load it onto the MoneyPak.

How much does a MoneyPak cost?
MoneyPak costs $4.95 or less. There are no hidden fees or charges. Just purchase your MoneyPak, use cash to fund it and you�re ready to go.

Once I purchase a MoneyPak, can I use it right away?
The money is usually immediately available on your MoneyPak. Please note the following exceptions: Walgreens has a 60 minute funding delay, Radio Shack has a 30 minute funding delay and Longs Drugs has a 15 minute funding delay.

Why should I use the MoneyPak as opposed to other same-day money transmitter services?
There are many reasons:
- MoneyPak can be purchased at locations where you shop for your daily needs;
- It is cheaper compared to $8- $13 charged by other money transmitter services;
- There are no special customer service counters and no forms to fill out;
- Use the MoneyPak to make a payment online or by phone 24x7

How do I know if my payment has been received?
You can call or email your companys customer support number to verify that the payment has been received.


Google Checkout PAYMENTS FAQs
If you want to pay through Google Checkout please DO NOT place any order(s) using GreenDot MoneyPak System, email us your request with a complete list of products you want to purchase from us and our payment department will issue the invoice manually. Please allow us up to 5 business days to issue the invoice. At DirectHomeGym, we take fraud very seriously. If you're a first time customer and want to pay by credit card please send us proof of address (Water, phone or other utility bill matching you shipping/delivery address) along with your order request. Thank you for your understanding.

Leia Mais…

Wednesday, February 2, 2011

Domainscan.ro and fraud

motors-program.com was recently registered
http://whois.domaintools.com/motors-program.com
It will or is being used by a scammer in the internet to send spoof eBay emails to unwitting buyers.
See the list of spoof domains here:
http://netscammers.blogspot.com/2010/04/spoof-sites.html

Domain name: MOTORS-PROGRAM.COM
Created On:      2/1/2011 8:20:58 AM
Last Updated On: 2/1/2011 8:20:58 AM
Expiration Date: 2/1/2012 8:20:58 AM

The fraud domain was registered using this contact information:
Registrant Name: Mihai Vasile
Registrant Organization: NA
Registrant Street1: 81Revolutiei Blvd
Registrant Street2:
Registrant City: Arad
Registrant State/Province: Arad
Registrant Postal Code: 310130
Registrant Country: RO
Registrant Phone: 40.767064487
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: jenny22339@gmail.com
The email address, jenny22339@gmail.com was also used in connection to the fake site hosted by Domainscan that is mentioned here:
http://netscammers.blogspot.com/2011/01/domainscanro-loves-scammers.html
The scammer also has a fake site with that email address here:
http://tahoe20.110mb.com/contactme.htm
A scam involving a 2007 Chevrolet Tahoe LTZ
See the listings on Craigslist here:
http://www.google.com/search?q=jenny22339%40gmail.com&ie=utf-8&oe=utf-8&aq=t&client=firefox-a&rlz=1R1GGGL_en___US365#q=jenny22339%40gmail.com&hl=en&client=firefox-a&rlz=1R1GGGL_en___US365&tbs=qdr:d&prmd=ivns&filter=0&fp=438d7dda7b26e41


The domain is being hosted by "our friends" at
Future Web
    www.domainscan.ro [andreislim@gmail.com]
    G. Cosbuc, nr. 21
    Dej, Cluj 405200, RO
Read what the "CEO" of Domainscan, Cimpean Andrei , has to say about sites like these:
http://netscammers.blogspot.com/2011/01/domainscanro-loves-scammers.html

Leia Mais…

Tuesday, February 1, 2011

26 Romanian eBay Scammers Arrested

Prosecutors from DIICOT - Territorial Service Valcea - and police officers are executing search warrants in Valcea, Olt and Sibiu trying  to dismantle a criminal organization (about 26 members) specialized in computer fraud and deceit.
According to investigators, members of the group visited online specialized sites,  offering for sale goods that they actually did not possessed. Typically, the access to these sites was done by creating user accounts, using  stolen identities and stolen credit card information. This way the perpetrators creating to the victims the impression of a legitimate tranzaction. The victims were instructed  to transfer various amounts of money as price of the purchased item, shipping tax, or insurance.   The total damage exceeds 100,000 euros, about 100 persons, foreign citizens have been defrauded.

Here is a video of the arrest.



Related stories:
http://www.financiarul.ro/2011/01/25/perchezitii-in-valcea-olt-si-sibiu-pentru-destructurarea-unei-grupari-ce-se-ocupa-cu-fraude-informatice/

http://www.epochtimes-romania.com/articles/2011/01/article_99094.html

http://www.gds.ro/Ultima%20ora/2011-01-25/Perchezitii+in+Valcea,+Olt+si+Sibiu,+pentru+destructurarea+unui+grup+specializat+in+fraude+informatice

http://www.stiriazi.ro/ziare/articol/articol/perchezitii-in-valcea-olt-si-sibiu-pentru-destructurarea-unei-grupari-ce-se-ocupa-cu-fraude-informatice/sumar-articol/5747894/

http://www.news.ro/justitie/diicot-perchezitii-in-valcea-olt-si-sibiu-pentru-destructurarea-unei-grupari-ce-se-ocupa-cu-fraude-informatice/

 

Leia Mais…

Monday, January 31, 2011

byownerautosales.com SCAM

byownerautosales.com  FAKE FRAUD SCAM

byownerautosales.com is a site with fake ads for cars stolen from legitimate sites.

Here are examples:
http://www.byownerautosales.com/ads/2005-subaru-outback-2-5xt-limite-2/

The fake ad on the site lists the price for $3500.
The real ad on the real site lists the price for $9,888:
http://road2gmc.com/Customer/Dealer/VehicleDetail.aspx?id=635573
You can also see results for a search of the Vehicle ID # 4S4BP67C854322565

http://www.byownerautosales.com/ads/2004-chevrolet-silverado-2500hd-diesel-4x4/


Price on byownerautosales.com $3700
Price on the real ad $19995
http://www.jarboemotors.com/vehicledetails.aspx?vid=130648781
Vin # search 1GCHK242X4E297842

One of the IDs the scammer is using on this fake site, symonnejhony,
 aka symonnejhony@yahoo.com, has 87 results on Google Search:
http://www.google.com/search?q=%22symonnejhony%22&hl=en&num=10&lr=&ft=i&cr=&safe=images&tbs=#q=%22symonnejhony%22&hl=en&lr=&prmd=ivns&filter=0&fp=9f208f9e856ec787



Leia Mais…

Thursday, January 27, 2011

usarmy-pov-transport.com SCAM

usarmy-pov-transport.com FAKE FRAUD SCAM

http://www.usarmy-pov-transport.com/
previously mentioned in this post:
http://netscammers.blogspot.com/2010/10/us-army-deliverycom-fraud.html
is yet another scam site pretending to be associated with the US Military.
The site forwards the intended victims to http://www.army.mil/ to make them think its legitimate.
The domain is being used for fake emails.
The email address support@usarmy-pov-transport.com is associated with the site and the scammers are using the term:
US Army - Military Auto Transport Dept for POV(Privately Owned Vehicle) in Baldwin, NY

The site is being hosted in the UK.
Domain Name: USARMY-POV-TRANSPORT.COM
   Registrar: TUCOWS INC.
   Whois Server: whois.tucows.com
   Referral URL: http://domainhelp.opensrs.net
   Name Server: NS1.LIVEDNS.CO.UK
   Name Server: NS2.LIVEDNS.CO.UK
   Name Server: NS3.LIVEDNS.CO.UK
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 23-jan-2011
   Creation Date: 23-jan-2011
   Expiration Date: 23-jan-2012

Please use their on line form to report the site:
http://www.fasthosts.co.uk/companyinfo/contactus/
You can also try mailing them at:
abuse@fasthosts.co.uk
Read about the Fasthosts Romanian connection:
http://www.theregister.co.uk/2009/02/19/fasthosts_offshore/
(sorta makes it a bit convenient for the scammers huh?)



 

Leia Mais…

Wednesday, January 26, 2011

DOMAINSCAN.RO and scammers

I received a comment on ths post today 2-2-11

Cimpean Andrei has left a new comment on your post
Hy, I''m the CEO of domainscan.ro. First of all I must say that most if not all the domain names that you marked above as scam were suspended. You made the assumptions that all the above domains are for scams, but most of them were just empty new accounts, you made the assumption bases on the domain named, that's just not real and professional.

My response:
I removed "loves" from the title of this post.
Not all the domains are suspended as you suggested in your post.
We all know such domains are used for spoof and phishing emails and need no content, so they merely appear "empty".
Example:
http://www.ebaymotorstransactions.com/
Does this person, who is obvioulsy not the legitimate eBay have the right to run an account on your server which suggests to inexperienced internet users that the emails are for eBay transactions?
Similar sites listed here:
http://netscammers.blogspot.com/2010/04/spoof-sites.html

You have obviously read the initial post and had the opportunity to kill all these fake sites, but have yet to do so.....Does this mean you condone these domains?
http://whois.domaintools.com/ebaymotorstransactions.com
The email address used to register that account is:
fernandel1903@yahoo.com
The Yahoo account information reveals:
http://pulse.yahoo.com/fernandel1903
Fernand Joseph 30 - Male - Las Vegas, Nevada
That is a far cry from the actual domain registration data which claims:
Registrant Name: Andrei Gheorghe
Registrant Organization: NA
Registrant Street1: Calea Grivitei 81
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 010761
Registrant Country: RO
Registrant Phone: 4.023454575
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: fernandel1903@yahoo.com
Can you prove any of them are or were legitimate?
Have you reported these domains to the police and eBay?
Have you bothered to go over the domains on all your IPs and servers to check for similar sites and kill them?
You as a Romanian web host, should have a pro-active stance against fraud domains and set the benchmark.

Can you explain why you were listed as the registrant for the still actve fraud domain:
royal-cargo-ltd.com
http://db.aa419.org/fakebanksview.php?key=46322
(The domain still forwards to the suspended account: )
http://883784transportcargo.freehostia.com/ 
On these dates:
2010
2010-03-28
2010-03-30
2010-04-03
2010-04-08
2010-04-09
2010-04-10
2010-06-08
2010-08-02
2010-10-26
2010-11-11
(I can get this data using the service which I explain below)
The current whois for the site is:
http://whois.domaintools.com/royal-cargo-ltd.com

and by the way, goofoop@yahoo.com is not a valid Yahoo account......

....that's just not real and professional......
Registrant Name: Marius Macelaru
Registrant Organization: NA
Registrant Street1: str. v tepes, nr. 32
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: BUC
Registrant Postal Code: 342345
Registrant Country: RO
Registrant Phone: 40.93412342
Registrant Phone Ext.:
Registrant FAX: 40.264214035
Registrant Email: goofoop@yahoo.com
Here are fraud domains located on a server in Romania and the breakdown of how they are being used.
The domains have been reported to eBay.
They will also be listed on http://www.aa419.org/

In order to get this data I used my Domain Tools account.
This account costs about $3-400 a year.
I cannot afford to continue to pay for this service and am asking for your help by donating to my PayPal account below.

The server which contains the data for most of these domains is giving this notice:

Server response:
Excessive usage, try later...
This is "bs" and the data is available using a domain history search on Domain Tools.

http://www.checkout-customers.com/
Most likely used for fake invoices.
Contains a PayPal phishing site:
http://checkout-customers.com/paypal/
Created On: 9/11/2010 5:48:33 AM
Last Updated On: 9/11/2010 5:48:33 AM
Expiration Date: 9/11/2011 5:48:33 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: alexandru a dick
Registrant Organization: NA
Registrant Street1: strada sarariei nr 126
Registrant Street2:
Registrant City: iasi
Registrant State/Province: iasi
Registrant Postal Code: 707531
Registrant Country: RO
Registrant Phone: 4.072456645
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: cipas82@gmail.com
Admin Name: alexandru a dick
Admin Organization: NA
Admin Street1: strada sarariei nr 126
Admin Street2:
Admin City: iasi
Admin State/Province: iasi
Admin Postal Code: 707531
Admin Country: RO
Admin Phone: 4.072456645
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: cipas82@gmail.com
Billing Name: alexandru a dick
Billing Organization: NA
Billing Street1: strada sarariei nr 126
Billing Street2:
Billing City: iasi
Billing State/Province: iasi
Billing Postal Code: 707531
Billing Country: RO
Billing Phone: 4.072456645
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: cipas82@gmail.com
Tech Name: alexandru a dick
Tech Organization: NA
Tech Street1: strada sarariei nr 126
Tech Street2:
Tech City: iasi
Tech State/Province: iasi
Tech Postal Code: 707531
Tech Country: RO
Tech Phone: 4.072456645
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: cipas82@gmail.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO

http://www.e-bay-customer.com/
Most likely used for spoof eBay emails.
Created On: 11/29/2010 11:53:12 PM
Last Updated On: 11/29/2010 11:53:12 PM
Expiration Date: 11/29/2011 11:53:12 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:
ok

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Tom Tervenzy
Registrant Organization: NA
Registrant Street1: Ciobanului Nr. 27
Registrant Street2:
Registrant City: Arad
Registrant State/Province: Arad
Registrant Postal Code: 310298
Registrant Country: RO
Registrant Phone: 40.765718391
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: young77ed@gmail.com
Admin Name: Tom Tervenzy
Admin Organization: NA
Admin Street1: Ciobanului Nr. 27
Admin Street2:
Admin City: Arad
Admin State/Province: Arad
Admin Postal Code: 310298
Admin Country: RO
Admin Phone: 40.765718391
Admin Phone Ext.:
Admin FAX: .
Admin Email: young77ed@gmail.com
Billing Name: Tom Tervenzy
Billing Organization: NA
Billing Street1: Ciobanului Nr. 27
Billing Street2:
Billing City: Arad
Billing State/Province: Arad
Billing Postal Code: 310298
Billing Country: RO
Billing Phone: 40.765718391
Billing Phone Ext.:
Billing FAX: .
Billing Email: young77ed@gmail.com
Tech Name: Tom Tervenzy
Tech Organization: NA
Tech Street1: Ciobanului Nr. 27
Tech Street2:
Tech City: Arad
Tech State/Province: Arad
Tech Postal Code: 310298
Tech Country: RO
Tech Phone: 40.765718391
Tech Phone Ext.:
Tech FAX: .
Tech Email: young77ed@gmail.com
Name Servers:
NS2.DOMAINSCAN.RO
NS1.DOMAINSCAN.RO

http://www.ebaymotorstransactions.com/
Most likely used for spoof emails pretending to be eBay.

Created On: 8/8/2010 9:01:38 AM
Last Updated On: 8/8/2010 9:01:38 AM
Expiration Date: 8/8/2011 9:01:38 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Andrei Gheorghe
Registrant Organization: NA
Registrant Street1: Calea Grivitei 81
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 010761
Registrant Country: RO
Registrant Phone: 4.023454575
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: fernandel1903@yahoo.com
Admin Name: Andrei Gheorghe
Admin Organization: NA
Admin Street1: Calea Grivitei 81
Admin Street2:
Admin City: Bucuresti
Admin State/Province: Bucuresti
Admin Postal Code: 010761
Admin Country: RO
Admin Phone: 4.023454575
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: fernandel1903@yahoo.com
Billing Name: Andrei Gheorghe
Billing Organization: NA
Billing Street1: Calea Grivitei 81
Billing Street2:
Billing City: Bucuresti
Billing State/Province: Bucuresti
Billing Postal Code: 010761
Billing Country: RO
Billing Phone: 4.023454575
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: fernandel1903@yahoo.com
Tech Name: Andrei Gheorghe
Tech Organization: NA
Tech Street1: Calea Grivitei 81
Tech Street2:
Tech City: Bucuresti
Tech State/Province: Bucuresti
Tech Postal Code: 010761
Tech Country: RO
Tech Phone: 4.023454575
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: fernandel1903@yahoo.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO

http://www.ebaythirdparty.com/
Most likely used for spoof eBay emails.
Created On: 7/31/2010 10:05:25 AM
Last Updated On: 7/31/2010 10:05:25 AM
Expiration Date: 7/31/2011 10:05:25 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Ionescu Mihai
Registrant Organization: NA
Registrant Street1: Str Pasul Morii
Registrant Street2:
Registrant City: Bacau
Registrant State/Province: Bacau
Registrant Postal Code: 405200
Registrant Country: RO
Registrant Phone: 40.741767872
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: zilenoi@yahoo.com
Admin Name: Ionescu Mihai
Admin Organization: NA
Admin Street1: Str Pasul Morii
Admin Street2:
Admin City: Bacau
Admin State/Province: Bacau
Admin Postal Code: 405200
Admin Country: RO
Admin Phone: 40.741767872
Admin Phone Ext.:
Admin FAX: .
Admin Email: zilenoi@yahoo.com
Billing Name: Ionescu Mihai
Billing Organization: NA
Billing Street1: Str Pasul Morii
Billing Street2:
Billing City: Bacau
Billing State/Province: Bacau
Billing Postal Code: 405200
Billing Country: RO
Billing Phone: 40.741767872
Billing Phone Ext.:
Billing FAX: .
Billing Email: zilenoi@yahoo.com
Tech Name: Ionescu Mihai
Tech Organization: NA
Tech Street1: Str Pasul Morii
Tech Street2:
Tech City: Bacau
Tech State/Province: Bacau
Tech Postal Code: 405200
Tech Country: RO
Tech Phone: 40.741767872
Tech Phone Ext.:
Tech FAX: .
Tech Email: zilenoi@yahoo.com
Name Servers:
ns1.domainscan.ro
ns2.domainscan.ro

http://www.lkw-trans.com/ dead fake shipping site.
Dead, mentioned here:
http://forum.aa419.org/viewtopic.php?t=47087


http://shipping-expert.com/content/index.php  active fake shipping site

Domain name: SHIPPING-EXPERT.COM

Created On: 11/24/2010 6:24:49 PM
Last Updated On: 11/24/2010 6:24:49 PM
Expiration Date: 11/24/2011 6:24:49 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Popa Eugenia
Registrant Organization: NA
Registrant Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Registrant Street2:
Registrant City: Cluj
Registrant State/Province: CLUJ
Registrant Postal Code: 400431
Registrant Country: RO
Registrant Phone: 40.756481004
Registrant Phone Ext.:
Registrant FAX: .
Registrant Email: popaeugeniacorina@yahoo.com
Admin Name: Popa Eugenia
Admin Organization: NA
Admin Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Admin Street2:
Admin City: Cluj
Admin State/Province: CLUJ
Admin Postal Code: 400431
Admin Country: RO
Admin Phone: 40.756481004
Admin Phone Ext.:
Admin FAX: .
Admin Email: popaeugeniacorina@yahoo.com
Billing Name: Popa Eugenia
Billing Organization: NA
Billing Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Billing Street2:
Billing City: Cluj
Billing State/Province: CLUJ
Billing Postal Code: 400431
Billing Country: RO
Billing Phone: 40.756481004
Billing Phone Ext.:
Billing FAX: .
Billing Email: popaeugeniacorina@yahoo.com
Tech Name: Popa Eugenia
Tech Organization: NA
Tech Street1: STR. PASCALY NICOLAE nr. 5 ap. 11
Tech Street2:
Tech City: Cluj
Tech State/Province: CLUJ
Tech Postal Code: 400431
Tech Country: RO
Tech Phone: 40.756481004
Tech Phone Ext.:
Tech FAX: .
Tech Email: popaeugeniacorina@yahoo.com
Name Servers:
ns1.domainscan.ro
ns2.domainscan.ro



Domain name: http://www.transactions-details.com/
Most likely being used for spoof eBay emails.

Created On: 5/4/2010 7:28:16 PM
Last Updated On: 5/4/2010 7:28:16 PM
Expiration Date: 5/4/2011 7:28:16 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Roiu George
Registrant Organization: NA
Registrant Street1: str.Iza, nr.5, bl.S9, ap.19
Registrant Street2:
Registrant City: Oradea
Registrant State/Province: BH
Registrant Postal Code: 410458
Registrant Country: RO
Registrant Phone: 4.075666145
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: roiu.george@gmail.com
Admin Name: Roiu George
Admin Organization: NA
Admin Street1: str.Iza, nr.5, bl.S9, ap.19
Admin Street2:
Admin City: Oradea
Admin State/Province: BH
Admin Postal Code: 410458
Admin Country: RO
Admin Phone: 4.075666145
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: roiu.george@gmail.com
Billing Name: Roiu George
Billing Organization: NA
Billing Street1: str.Iza, nr.5, bl.S9, ap.19
Billing Street2:
Billing City: Oradea
Billing State/Province: BH
Billing Postal Code: 410458
Billing Country: RO
Billing Phone: 4.075666145
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: roiu.george@gmail.com
Tech Name: Roiu George
Tech Organization: NA
Tech Street1: str.Iza, nr.5, bl.S9, ap.19
Tech Street2:
Tech City: Oradea
Tech State/Province: BH
Tech Postal Code: 410458
Tech Country: RO
Tech Phone: 4.075666145
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: roiu.george@gmail.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO


Domain name: http://www.uscarstrader.com/
This site contains files and images of vehicles used in scams in the internet.
Tthe files is being used on these fake sites:
 http://tahoe20.110mb.com/contactme.htm
The scammer is advertising a:
2007 Chevrolet Tahoe LTZ
Price $2,800
and using the email address:
jenny22339@gmail.com 
See the listings on Craigslist here:
http://www.google.com/search?q=jenny22339%40gmail.com&ie=utf-8&oe=utf-8&aq=t&client=firefox-a&rlz=1R1GGGL_en___US365#q=jenny22339%40gmail.com&hl=en&client=firefox-a&rlz=1R1GGGL_en___US365&tbs=qdr:d&prmd=ivns&filter=0&fp=438d7dda7b26e41

another here:
http://lexus12.110mb.com/contactme.htm
2006 LEXUS IS 250
Price $2,700
melydon41@gmail.com

I believe the prices are based on the fact that Western Union and MoneyGram will not allow transfers over $3,000

Created On: 11/5/2010 12:05:06 AM
Last Updated On: 11/5/2010 12:05:06 AM
Expiration Date: 11/5/2011 12:05:06 AM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Toma Viorel
Registrant Organization: NA
Registrant Street1: Str Popa Lazar nr 12
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 021586
Registrant Country: RO
Registrant Phone: 4.076731904
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: goldsc99@gmail.com
Admin Name: Toma Viorel
Admin Organization: NA
Admin Street1: Str Popa Lazar nr 12
Admin Street2:
Admin City: Bucuresti
Admin State/Province: Bucuresti
Admin Postal Code: 021586
Admin Country: RO
Admin Phone: 4.076731904
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: goldsc99@gmail.com
Billing Name: Toma Viorel
Billing Organization: NA
Billing Street1: Str Popa Lazar nr 12
Billing Street2:
Billing City: Bucuresti
Billing State/Province: Bucuresti
Billing Postal Code: 021586
Billing Country: RO
Billing Phone: 4.076731904
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: goldsc99@gmail.com
Tech Name: Toma Viorel
Tech Organization: NA
Tech Street1: Str Popa Lazar nr 12
Tech Street2:
Tech City: Bucuresti
Tech State/Province: Bucuresti
Tech Postal Code: 021586
Tech Country: RO
Tech Phone: 4.076731904
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: goldsc99@gmail.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO


Domain name: http://www.vehicle-transactions.com/ forwards to legitimate eBay site.
Most likely being used foir spoof eBay emails.

Created On: 7/8/2010 1:26:57 PM
Last Updated On: 7/8/2010 1:26:57 PM
Expiration Date: 7/8/2011 1:26:57 PM

Registrar: PAKNIC (Pvt.) Limited [www.paknic.com]
Domain Status:

For Customer Support Please Contact:

Future Web
www.domainscan.ro [andreislim@gmail.com]
G. Cosbuc, nr. 21
Dej, Cluj 405200, RO

Registrant Name: Clayton Steven
Registrant Organization: NA
Registrant Street1: str. Bulevardul Unirii nr. 12
Registrant Street2:
Registrant City: Bucuresti
Registrant State/Province: Bucuresti
Registrant Postal Code: 040105
Registrant Country: RO
Registrant Phone: 4.074633057
Registrant Phone Ext.:
Registrant FAX: 1.
Registrant Email: venton12@yahoo.com
Admin Name: Clayton Steven
Admin Organization: NA
Admin Street1: str. Bulevardul Unirii nr. 12
Admin Street2:
Admin City: Bucuresti
Admin State/Province: Bucuresti
Admin Postal Code: 040105
Admin Country: RO
Admin Phone: 4.074633057
Admin Phone Ext.:
Admin FAX: 1.
Admin Email: venton12@yahoo.com
Billing Name: Clayton Steven
Billing Organization: NA
Billing Street1: str. Bulevardul Unirii nr. 12
Billing Street2:
Billing City: Bucuresti
Billing State/Province: Bucuresti
Billing Postal Code: 040105
Billing Country: RO
Billing Phone: 4.074633057
Billing Phone Ext.:
Billing FAX: 1.
Billing Email: venton12@yahoo.com
Tech Name: Clayton Steven
Tech Organization: NA
Tech Street1: str. Bulevardul Unirii nr. 12
Tech Street2:
Tech City: Bucuresti
Tech State/Province: Bucuresti
Tech Postal Code: 040105
Tech Country: RO
Tech Phone: 4.074633057
Tech Phone Ext.:
Tech FAX: 1.
Tech Email: venton12@yahoo.com
Name Servers:
NS1.DOMAINSCAN.RO
NS2.DOMAINSCAN.RO

Domain Name: http://www.accountcraigslists.org/
Most likely being used for spoof Craigslist emails.

Created On:21-Jan-2011 14:57:43 UTC
Last Updated On:24-Jan-2011 13:49:21 UTC
Expiration Date:21-Jan-2012 14:57:43 UTC
Sponsoring Registrar:Paknic (Private) Limited (R1605-LROR)
Status:TRANSFER PROHIBITED
Status:ADDPERIOD
Registrant ID:PAK11012111532-1
Registrant Name:Iordache Marius
Registrant Organization:NA
Registrant Street1:str. Lujerului, nr. 2
Registrant Street2:
Registrant Street3:
Registrant City:Bucuresti
Registrant State/Province:Bucuresti
Registrant Postal Code:111111
Registrant Country:RO
Registrant Phone:+40.743022593
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:imc_3030@yahoo.com
Admin ID:PAK11012111532-2
Admin Name:Iordache Marius
Admin Organization:NA
Admin Street1:str. Lujerului, nr. 2
Admin Street2:
Admin Street3:
Admin City:Bucuresti
Admin State/Province:Bucuresti
Admin Postal Code:111111
Admin Country:RO
Admin Phone:+40.743022593
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:imc_3030@yahoo.com
Tech ID:PAK11012111532-3
Tech Name:Iordache Marius
Tech Organization:NA
Tech Street1:str. Lujerului, nr. 2
Tech Street2:
Tech Street3:
Tech City:Bucuresti
Tech State/Province:Bucuresti
Tech Postal Code:111111
Tech Country:RO
Tech Phone:+40.743022593
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:imc_3030@yahoo.com
Name Server:NS3.NS-SERVICES.NET
Name Server:NS4.NS-SERVICES.NET
Name Server:NS1.DOMAINSCAN.RO
Name Server:NS2.DOMAINSCAN.RO

Leia Mais…

Romanian caught with $140k stolen in USA

Marian Potcovaru was arrested in Medina, Ohio for picking up about $140,000 in money transfers in Pennsylvania and Ohio.

Story here:
http://www.pittsburghlive.com/x/pittsburghtrib/news/pittsburgh/s_719794.html

It appears the scammers used the story where the seller is a soldier and needs to sell a vehicle.
Sound familiar?
I hope all you victims out there with similar circumstances have or will contact the authorities.
Its imperative to file reports.
These people are caught and as you can see here, Potcovaru had a substantial amount of money on him.

This was not Marian Potcovaru's first run in with US authorities involving scams.
Here is a story about Marian Potcovaru being accused of Forgery last year in Medina Ohio:
http://webcache.googleusercontent.com/search?q=cache:14hA5wANdc4J:lawtalk.blogspot.com/2010/01/judge-kimblers-criminal-docket-for_23.html+Marian+Potcovaru&cd=1&hl=en&ct=clnk&gl=us

Another story here:
http://medinagazette.northcoastnow.com/2011/01/27/forger-caught-in-medina-faces-federal-charges-in-pa/

Leia Mais…