Tuesday, March 1, 2011

fitnessclearancestock.com SCAM

http://www.fitnessclearancestock.com/  FAKE FRAUD SCAM

This site is another in the series of fake sites asking for payment using Green Dot/MoneyPak debit cards.
Buyers are not secure because once the scammer gets his money, you cannot recover the funds.
MoneyPak tells you this here:
https://www.moneypak.com/
"Treat your MoneyPak number just like cash. Only use MoneyPak with approved partners and companies you know and trust. Never give the number to a private individual or to pay for items purchased from classified ads. This product is not a bank account and funds are not insured. Once you give the number and the money is sent, Green Dot cannot provide refunds."

The major problem is that victims are often in a hurry to send their money to scammers and neglect to read warnings, after all, all good little victims do what the scammers tell them.....

Outlets that sell Green Dot and MoneyPak cards often don't bother to pass the warnings on to intended victims.
The same situations are true for victims of Western Union and MoneyGram transfers.
It should be standard proceedure for outlets selling these services to have disclaimers which victims should read and sign. It would save a lot of heartache and help to reduce fraud.
The problem with that is the companies involved would lose millions of dollars in fees.
These failures leave the consumer at risk for fraud.

Previous sites posted on this blog start here:
http://netscammers.blogspot.com/2011/02/homefitnessmartcom-scam.html

Here are images of the fake site:



Here are some of the scammer's instructions for victims:

NOTICE: All new customers please choose GreenDot MoneyPak as Payment Option. Processing time is instant and your order will be shipped sooner. After your payment is validated and your order delivered, GoogleCheckout will be enabled for your account. Thank you for your understanding.

Shop With Confidence: Green Dot keeps records of all transactions ran through their MoneyPak system, this way they can track and protect the purchase. Make sure you have your receipt ready before calling Green Dot Customer Service. 

VERY IMPORTANT NOTICE FOR MONEYPAK PAYMENTS: DO NOT PURCHASE ANY GREEN DOT PREPAID DEBIT CARD, our company process payments using own payment system. If you load the Moneypak(s) on a Green Dot Debit Card or PayPal we will not be able to validate your order. 

Here are some "inside shots"

The scammers are also asking intended victims to share personal information by requesting copies of driver's licenses, credit or debit cards and water, phone or utility bills.
Would you do that?
I hope not!!!

Leia Mais…

Sunday, February 27, 2011

Golden Horn Agency Hacked By Scammers

The website for Golden Horn Agency:
http://www.goldenhornagency.com/index.php
http://whois.domaintools.com/goldenhornagency.com

Has been hacked by scammers and contains a Craigslist phishing site here:
http://goldenhornagency.com/accounts.craigslist.org.com/

As an advisory, if you have an account on this site, please check your settings to determine if your data has been compromised.
California Law requires site owners to contact all persons to warn them in the event their accounts are hacked:
http://en.wikipedia.org/wiki/Security_breach_notification_laws

Here is an image of the phishing area on the hacked site:

Leia Mais…

Saturday, February 26, 2011

How DonDominio enables scammers

ebay-purchase-program.com
(a fraud domain)
was recently registered and is currently being hosted by:
http://www.dondominio.com/  http://whois.domaintools.com/dondominio.com

That in itself is not unusual, as you can see by the list of spoof sites here:
http://netscammers.blogspot.com/2010/04/spoof-sites.html
It is quite common for registrars and web hosts to allow fake sites to be on their servers.

The thing that is notable about ebay-purchase-program.com, is the fact that it was allowed to be registered using the data that is presented in the whois for the domain.
See for yourselves:
http://whois.domaintools.com/ebay-purchase-program.com

Domain Name:
 EBAY-PURCHASE-PROGRAM.COM
Domain Status:
 Active
 Registrar of Record: Don Dominio (SCIP)
 Registrar URL:   http://www.dondominio.com/
 Record last updated: 23/02/2011
 Record created:  23/02/2011
 Record expires:  23/02/2012
Registrant:
 Name:   eBay INC
 Organization:  eBay INC
 Email:   support-ebay@secure-buyer-protection.com
 Address:  2145  Hamilton Avenue
 City:   San Jose
 State:   California
 Postal Code:  95125
 Country:  US
 Phone:   +1.4085658285
 Fax:
Admin Contact:
 Name:   eBay INC
 Organization:  eBay INC
 Email:   support-ebay@secure-buyer-protection.com
 Address:  2145  Hamilton Avenue
 City:   San Jose
 State:   California
 Postal Code:  95125
 Country:  US
 Phone:   +1.4085658285
 Fax:
Tech Contact:
 Name:   eBay INC
 Organization:  eBay INC
 Email:   support-ebay@secure-buyer-protection.com
 Address:  2145  Hamilton Avenue
 City:   San Jose
 State:   California
 Postal Code:  95125
 Country:  US
 Phone:   +1.4085658285
 Fax:
Nameservers list:
 ns4.dondominio.com
 ns2.dondominio.com


Not only did this web host, SOLUCIONES CORPORATIVAS IP,SLU
aka DonDominio allow a fake site to be hosted on its servers, it allowed the scammers to use eBay's real name and location to be used in the obviously invalid whois data.

To make matters worse, the web host has allowed the fake site to be registered to a defunct fake site:
secure-buyer-protection.com
http://whois.domaintools.com/secure-buyer-protection.com

That domain is mentioned in a scam here:
http://forums.ebay.com/db2/topic/International-Trading/The-Email-Is/520262446

i want to buy lot x 2 Iphone 4
the seller tell me send mail to him markbromer@gmail.com
and i received mail from support@secure-buyer-protection.com
Congratulations - eBay Transaction Started - 2 x Apple iPhone 4 32GB Brand New Unlocked
Transaction Details:
2 x Apple iPhone 4 32GB Brand New Unlocked
Brand: Apple iPhone Inspection Period: 7 business days
Model: 4 32GB Price:
US $1,000.00
Case ID: 7X4GBR35X6 Shipping: US $0.00
Description: Brand new , factory unlocked, 100% original Apple iPhone 4 32GB in sealed boxes. 1 Year international Apple Care warranty.
WesternUnion
Locate the nearest Western Union office click here.
Make the payment with cash using the eBay Representative details.
Please send us a copy of the Western Union receipt by fax at :
International : 001 206 202 5619
USA : 206 202 5619
You have to send the money to our eBay Representative.
WARNING: Do not send the money to the seller directly.
We can not guarantee the safety of your transaction if
the seller have the money before you get your items.
eBay Representative Details:
First Name : Cristian
Last Name : Dustenlar
Address : 27 Denbigh Place
City : London
Zip : SW1V 2HA
Country : United Kingdom
Amount to be sent: US $1,000.00
We will refund your WesternUnion fees after you receive and approve your merchandise.

Domain Name:
SECURE-BUYER-PROTECTION.COM

Domain Status:
Active

Registrar of Record: Don Dominio (SCIP)
Registrar URL:   www.dondominio.com

Record last updated: 07/02/2011
Record created:  07/02/2011
Record expires:  07/02/2012

Registrant:
Name:   Whois Privacy Service Protects this domain
Organization:  Only contact by email, all postal mail will be rejected
Email:   secure-buyer-protection.com@whoisprivacycontact.com
Address:  c/ Fabrica, 25 2
City:   Manacor
State:   Illes Balears
Postal Code:  07500
Country:  ES
Phone:   +34.871987733
Fax:   +34.871986601

Admin Contact:
Name:   Whois Privacy Service Protects this domain
Organization:  Only contact by email, all postal mail will be rejected
Email:   secure-buyer-protection.com@whoisprivacycontact.com
Address:  c/ Fabrica, 25 2
City:   Manacor
State:   Illes Balears
Postal Code:  07500
Country:  ES
Phone:   +34.871987733
Fax:   +34.871986601

Tech Contact:
Name:   Whois Privacy Service Protects this domain
Organization:  Only contact by email, all postal mail will be rejected
Email:   secure-buyer-protection.com@whoisprivacycontact.com
Address:  c/ Fabrica, 25 2
City:   Manacor
State:   Illes Balears
Postal Code:  07500
Country:  ES
Phone:   +34.871987733
Fax:   +34.871986601

Nameservers list:
ns4.dondominio.com
ns2.dondominio.com


Send complaints to:
abuse@ovh.net
Consumers are not protected on the internet from web hosting companies and domain registrars.

Leia Mais…

Tuesday, February 22, 2011

starexpresscourier.com SCAM

http://www.starexpresscourier.com/  FAKE FRAUD SCAM

starexpresscourier.com is a fake shipping and escrow company run by scammers in Romania.
These scammers place fake ads for vehicles on the internet and ask for payment, usually with Western Union or MoneyGram.
We all know thats automatically a scam.

One of their previous sites is mentioned here:
http://netscammers.blogspot.com/2010/08/globalsafecouriercom.html

The fake site is being hosted by a company in Thailand.
http://whois.domaintools.com/starexpresscourier.com
It is registered to an ID Theft victim in North Mill Creek,North Mill Creek,US 46365
Send complaints to:
 name: Chaiyo Hosting Co., Ltd.
 mail: support@chaiyohosting.com tel: +66.21870187

The fake site claims to have offices in the USA:

United States Offices
405 North Reo Street
Tampa, FL
33609
United States
United States Offices
5598 Deer Creek Dr
Orlando FL 32821
United States

Here is an image of the fake site:

 

Leia Mais…

moneybookers-confirm.com Targets Renters in Ireland

moneybookers-confirm.com  FAKE FRAUD SCAM

The site is being hosted by my "ole friends" at XO Communications. 
Send complaints to them at:
abuse@concentric.com
The scammers used the ID and most likely the stolen credit card for someone in:
Admin Address........ Joplin
Admin Address........ 64801
Admin Address........ MT
http://whois.domaintools.com/moneybookers-confirm.com
Scammers using the domain moneybookers-confirm.com and the email address invoice@moneybookers-confirm.com
The targets of these scammers are people looking to rent an apartment in Lough Atalia Ro, Galway City Centre Ireland.

The scammer is using the email address:
amandagr34@live.com
First name: Amanda
Last name : Grant
Address    : 87 David Lee Point
City : London
PostalCode:  E15-3LF
Country   : United Kingdom
to post fake ads on the internet:
http://www.google.com/search?q=amandagr34@live.com


Contact Me At: Amandagr34@live.com Lough Atalia Ro, Galway City Centre - Click to view photos

Apartment to let


Furnished, Minimum 1 Year Lease
2 Bedrooms (2 double), 2 Bathrooms

Contact Name: Amanda
Phone: 026875676
The scammer is sending fake invoices from moneybookers-confirm.com with instructions to send Western Union deposits to:
First name: Kurt
Last name : Benson
Address   : Lewisham Way 158
City/State: London
PostalCode: SE14 6PD
Country   : United Kingdom
 

Leia Mais…

Friday, February 18, 2011

Romanian Scammer Adrian Ghighina Pleads Guilty

Release Here:
http://www.justice.gov/opa/pr/2011/February/11-crm-206.html


Department of Justice
Office of Public Affairs
FOR IMMEDIATE RELEASE Thursday, February 17, 2011
Romanian Man Pleads Guilty for Role in International Fraud Scheme Involving Online Auction Websites
WASHINGTON – A Romanian man pleaded guilty today before U.S. District Judge Matthew F. Kennelly in Chicago to one count each of wire fraud and conspiracy for his role in moving and hiding the illicit proceeds of an international fraud scheme, announced Assistant Attorney General Lanny A. Breuer of the Criminal Division, U.S. Attorney Patrick J. Fitzgerald for the Northern District of Illinois and U.S. Attorney Ronald C. Machen Jr. for the District of Columbia.

Adrian Ghighina, 33, of Bucharest, Romania, was indicted by a federal grand jury in the Northern District of Illinois in April 2008 on seven counts of wire fraud.   In May 2010, Ghighina was separately indicted by a federal grand jury in Washington on charges of conspiracy, bank fraud and money laundering.

According to court documents, Ghighina, who entered the United States legally in late 2004, acted as a “money mule” in a complex Internet fraud conspiracy.   Ghighina’s co-conspirators, many of whom are in Romania, created fraudulent online auctions for expensive items such as cars, motorcycles and RVs on websites such as eBay, Craigslist and AutoTrader.com.   Victims who responded to these fraudulent listings were directed, in some cases by e-mail or telephone, to transmit payment for the non-existent items using Western Union and bank wire transfers to accounts controlled by Ghighina.   Ghighina admitted that he moved from city to city opening new accounts at various banks using false identification as part of the conspiracy.   The victims never received the items for which they had paid.   From approximately September 2005 until his arrest in October 2009 in Miami, Ghighina opened accounts and/or received funds in Illinois, the District of Columbia, Florida, New York, Arizona and elsewhere.

Ghighina faces a maximum penalty of 20 years in prison and a $250,000 fine on the count of wire fraud from the Chicago indictment, and a maximum penalty of 20 years in prison and a $250,000 fine on the count of conspiracy to commit wire fraud from the Washington indictment.   Both counts also include up to three years of supervised release following any prison term.   Sentencing is scheduled for May 9, 2011.   Ghighina also previously was convicted on related charges of wire and visa fraud in the Southern District of Florida and sentenced on those charges to 27 months in prison.

The Chicago case is being prosecuted by Assistant U.S. Attorney Brian Hayes with the Northern District of Illinois.   The Washington case is being prosecuted by Special Assistant U.S. Attorney Joseph Springsteen for the District of Columbia.   Mr. Springsteen also serves as a Trial Attorney with the Criminal Division’s Computer Crime and Intellectual Property Section.   Assistance on the Washington case was also provided by CCIPS Trial Attorneys Gavin Corn and Mysti Degani.   The Criminal Division’s Office of International Affairs provided assistance in this matter.   This case is being investigated by the Chicago and Washington Field Offices of the FBI, as well as the Chicago Police Department and U.S. Immigration and Customs Enforcement’s Homeland Security Investigations.
11-206Criminal Division

According to some court documents, Adrian Ghignina came to the United States in 2004 with Bela Balint, Gabriel Toader  and Andrie Ovidiu.
Here is an excerpt:

"Case: 1:07-cr-00862 Document #: 145 Filed: 02/13/09 Page 2 of 12 PageID #:508
FACTUAL BASIS
4. In October of 2004, Mr. TOADER was 23 years old and a citizen
Romania. Since the age of 15, Mr. TOADER had worked in restaurants and
hotels. While working at a five star hotel in Romania, Mr. Toader heard that
there were excellent job opportunities in America.1 Along with his friends, Bela
Balint, Adrian Ghighina and Andrie Ovidiu, Mr. Toader applied for and was
granted a work visa to come to the United States. The group of friends was
hired to work at the Polo Club, located in Boca Raton, FL. After working at
several clubs in Florida, the group of friends relocated to Chicago, in
approximately April, 2005. Mr. Toader and several of his friends were then
employed at a restaurant in Greek Town.
After working in Chicago for a few months, Mr. TOADER went to get a
hair cut and met Estera, the stylist who cut his hair. Estera’s two sisters also
worked in the salon, one of whom was married to Christian Bentan. (Mr.
Bentan was a defendant in the companion case 06 CR 923.) Mr. Toader and
Estera started dating and thereafter he met Mr. Bentan in or around July,
2005. Mr. Toader was struggling to make ends meet and Mr. Bentan, who
appeared to be well off, often picked up the tab when the couples went out
together. Over time, Mr. Toaders friends Bela Balint and Adrian Ghignina also "

Here is more data on Mr Toader:
http://il.findacase.com/research/wfrmDocViewer.aspx/xq/fac.%5CFDCT%5CNIL%5C2008%5C20080911_0000976.NIL.htm/qx
and an accomplice Constanin Palanceanu
http://courtlistener.com/pdf/2010/11/24/USA_v._Constanin_Palanceanu.pdf
http://courtlistener.com/ca7/VtX/united-states-v-constanin-palanceanu/

Mr Toader is currently serving time in a Texas prison, but still manages an active internet presence:
http://www.friendsbeyondthewall.com/ppbtw/ads-male/t/toader_gabriel_13965.html

Leia Mais…

Wednesday, February 16, 2011

homefitnessmart.com SCAM

http://www.homefitnessmart.com/  FAKE FRAUD SCAM

homefitnessmart.com is yet another fake store asking for payment via Green Dot/MoneyPak.
More information in an older post here:
http://netscammers.blogspot.com/2011/01/onsalefurnituremartcom-scam.html

It is being hosted by hostnine.com
http://www.hostnine.com/contact-us/

Here are some images of the fake site, look familiar?



Leia Mais…