Companies House
http://www.companieshouse.gov.uk/
Their web site explains what they do:
http://www.companieshouse.gov.uk/about/functionsHistory.shtml
Companies House's function is to register companies based in the UK and make that data available to verify those companies legitimacy.
The registrations can be performed through third party companies set up on the internet.
The problem is that scammers are now registering fake companies through those third party firms.
This opens the doors to all kinds of scams on the internet.
Sites like aa419.org rely on legitimate records to verify the legal existance of companies claiming to me registered with Companies House in order to get fraud sites closed down quickly.
Scammers quite frequently claim that on their fake sites.
Verification of this claim can be made through a legitimate third party.
Inquiries for this data must be from valid law enforcement agencies only.
Please leave a comment, which will not be published, with your contact information.
Thanks
Friday, March 12, 2010
Companies House UK OK? No Way
Sunday, March 7, 2010
Mircea Lucian Tapus
Mircea Lucian Tapus
Braila
ROMANIA
Bucharest, Bucharest 07000
Romania
Currently owns and runs:
www.robportal.com
http://whois.domaintools.com/robportal.com
(appropriate domain name)
Tapus is also listed as the owner of:
http://whois.domaintools.com/123anunt.net
Also worked with:
http://netscammers.blogspot.com/2010/03/catalin-ilie.html
Using the fake escrow sites labeled:
D.E.X and H.V.B Office Escrow Services
Mr Tapus swindled eBay sellers of jewelry and laptops.
Here are some of the domains he created and used:
w-m-e.com
edigitalinfo.com
exchange-office.org
exchange-office.info
wbpinfo.net
worldbusinesspay.net
worldbusinessoffice.net
multiadvertiser.com
reviewinfonet.com
paydirectly.net
drvnet.net
derivatenet.com
escrowdex.com
apherus.net
hvbsolutions.com
hvb-solutions.com
hvb-solution.com
hvb-solution.net
hvb-solution.co.uk
midland-office.net
romaxnet.net
romaxnet.com
romaxnet2.net
world-trade-service.net
world-trade-services.net
bay.ro
safedirnet.com
deeply-digital.net
sexsme.info
securetr.org
webglobalservice.info
wbc-service.com
Thursday, March 4, 2010
Catalin Ilie
Catalin Ilie
BUCURESTI
Mr Ilie worked with this scammer:
Vasile Bogdan
http://netscammers.blogspot.com/2010/01/vasile-bogdan.html
and
Mircea Lucian Tapus
Braila
Braila
ROMANIA
http://netscammers.blogspot.com/2010/03/mircea-lucian-tapus.html
He also worked with this group:
http://netscammers.blogspot.com/2010/03/guess-fake-escrow.html
Gabriel Ghelase Pantea
Date Of Birth
09-05-1974
Helped with the scams after he moved to the UK.
This person is a known "carder" and worked with the group to create the drop off points for the stolen items
that were sent to the UK
Renu Subramnaiam
United Kingdom
Here are some stories about "Jilsi"
http://www.uktamilnews.com/index.php/2010/01/15/wembley-sri-lankan-guilty-of-online-crime/
http://www.guardian.co.uk/technology/2010/jan/14/darkmarket-online-fraud-trial-wembley
http://www.dailymail.co.uk/news/article-1243185/Loner-admits-running-web-community-criminals-DarkMarket.html
Ahhh yes and the Java Bean Internet Cafe.
Home of eBay scammers for a while.
Still go there Jony?
Also involved in some of the scams was:
Daniel Laptes
http://www.bestjobs.ro/dlaptes
Some of the sites involved:
coral-deals.com
safer-dealer.com
set-ltd.net
1st-express.net
finance-ltd.com
finance-ltd.net
finance-ltd.org
finance-ltd.0catch.com
cashguards.co.uk
safedealexchange.com
worldglobalservices.com
express-ltd.com
express-ltd.net
euelectronics.net
deal-expert.com
ebay-payments-online.com
financial-and-commercial-department.com
dealexchange.com
awesomeelectronics.com
one-express.net
toyou.0catch.com
international-traders.0catch.com
trade-secure.co.uk
eximp-ltd.net
eximps-ltd.net
fast-helpnet.com
fast-helpnet.co.uk
fast-helpnet.net
impdex-ltd.com
trusled.biz.tc
trusledonline.com
trust-ltd.org.uk
exnew.0catch.com
abester.0catch.com
trusled.0catch.com
bestnet.0catch.com
vipmail.biz.tc
safedl.0catch.com
truled.net
terentes.0catch.com
directline.biz.tc
trust-ltd.us
Trust-LTD.co.uk
Trust-LTD.net
updateonline.info
trust-trader.uk.com
pgscargo.0catch.com
safedl.0catch.com
pgscargo.0catch.com
abise.0catch.com
See some of the layouts here:
http://escrow-fraud.com/index.php?page=gallery&layout=10a
More data will become available when I have the time.
Thursday, February 18, 2010
Guess the Scammer
Ever get ripped off selling jewelry on eBay by a fake escrow site with "SOL" in the name?
Here are but a few of the fraud escrow sites involved that were run by this group:
loc-solutions.com
pa-expertservices.com
heritageunited.com
echo-trading.com
navcogroup.com
safe-consign.com
terranovaunited.com
veritas-alliance.com
vilemont.com
wells-alliance.com
eutradealliance.com
simpleconsign.net
execsol.com
oned-group.net
tud-group.com
italian-traders.com
safetradeitaly.com
square-solutions.com
inttrad.com
trade-safer.com
dartsol.com
ogstrader.com
sn-trust.com
comm-trust.com
superbizsol.com
corescrow.com
betoncon.com
cdamart.com
istbussines.com
bestbizsol.com
pr1-trd.com
endeasol.com
chesteram.com
parcel-ex.com
marvinson.com
worldwide-express.net
delviago.com
bancelo.com
sonicsvc.com
traders-square.com
expert-tra.com
compacttra.com
celstad.com
mediatecha.com
mellont.com
quintecha.net
gladursol.com
xellos-tr.com
worldwidetrans.net
transworldwide.net
wellstad.com
western-trader.com
vistavaltrade.com
vbsafetrade.com
tristolfinance.com
terralosol.com
target-deal.com
solariossec.com
sierrasols.com
sheldon-group.com
secure-transol.net
santander-trust.com
relstad.com
quinio.com
promtinvestment.com
pow-trading.com
onvario.com
onlinemarket-solutions.com
ogr-exchange.com
oet-exchange.com
multivistatd.com
multivalt.com
mondial-sol.com
merralosol.com
iwo-eu.com
interntrading.com
eustad.com
cromencotrade.com
crestavistatd.com
coraliontd.com
celio-solutions.com
celiosol.com
ca-secure.net
capital-union.com
caixa-sol.com
burbin.com
bristolsec.com
arricentsol.com
arreliossol.com
accor-trade.com
acceltsol.com
These scammers were very busy as you can see.
You can imagine why the images on flickr.com were removed.
The list isn't even complete and might never be.
I can only do so much.
These sites were run by the same scammers, the majority using servers owned by XO Communications.
There is way more to this story than I have the time to write about.
I did try to contact one of the scammer's fathers and asked him to have the scammer contact me with no results. If I was his father I don't know what I'd do either.
You can imagine what a mess this situation is and what an embarrassment the scammer would be to his dad.
(data now posted below)
One of the scammers involved in these sites was a "mule" as well as a fake eBay jewelry buyer.
A mule is someone who picks up packages and money transfers for the other scammers.
This paricular mule worked for this group and another person I will mention in a future post.
Alex Georgescu
DOB 09-06-1978
Originally from Romania.
Here are some pictures that were taken of him in Alicante, Spain at the UPS facility picking up what he thought to be a Rolex watch that was shipped from an intended eBay victim.
Alex is on the right in the 2 tone blue shirt:
Images used courtesy of:
http://www.autosec4u.de/
Alex and his unnamed accomplice, in the white tank top, missed the UPS driver on the street.
They apparently had done this several times previously and knew to enter the facility from a rear loading platform to avoid cameras placed at the front counter.
Little did he know that someone with a hidden camera was taking these images.
As far as I know, Alex moved to the Pheonix, USA area several years ago.
I believe he has an uncle there.
His sponsor, an associate real estate broker in Pheonix, doesn't know that he used her last name to create several Yahoo accounts used to scam people on the fake escrow sites tud-group.com and pa-expertservices.com.
Here are two:
michael_kaporalis@yahoo.com
kaporalis_2000@yahoo.com
A simple Google search will reveal the real estate broker.
http://www.denisakaporalis.com/
I was informed that he may have subsequently went to the New York area to pick up money transfers for scammers.
One of the persons involved in setting up the fake escrow sites is:
Leonard Labuneti
DOB 14.05.1976
Location Braila Romania
The next person who was involved in the sites is:
Razvan Iulian Russu
DOB 13.06.1977
Presently living in Bucharest
Son of Florin Iulian Russu
(owner of Biotop Ro)
http://www.plaxo.com/directory/profile/509994/cec2056b/Florin/Russu
I'll add more data when I have the time.
*update*
As mentioned I am adding more data.
One of the major players in this scam group is none other than:
Liviu Costin Popovici
Mr Popovici is responsible for setting up the site:
http://www.fraudpedia.org/
...sort of like spitting in your face huh?
Read about his exploits here:
http://translate.google.com/translate?hl=en&sl=ro&u=http://www.curierulnational.ro/print/5687&ei=gcShTfrqLsmBgAfJ_5TaBQ&sa=X&oi=translate&ct=result&resnum=5&ved=0CD8Q7gEwBA&prev=/search%3Fq%3D%2522POPOVICI%2BLIVIU%2BCOSTIN%2522%26hl%3Den%26lr%3D%26prmd%3Divnso
and here:
http://translate.google.com/translate?hl=en&sl=ro&u=http://www.curierulnational.ro/Eveniment/2003-02-07/Romanii,%2Bexperti%2Bin%2Bhotii%2Bpe%2BInternet&ei=_MShTc-6DInYgQfeio3bBQ&sa=X&oi=translate&ct=result&resnum=6&ved=0CEgQ7gEwBQ&prev=/search%3Fq%3D%2522POPOVICI%2BLIVIU%2BCOSTIN%2522%26hl%3Den%26lr%3D%26prmd%3Divnso
Saturday, February 13, 2010
Dumitru Andrei Udeci
Dumitru Andrei Udeci
D.O.B. 08-08-1987
Location: Bujoreni Ramnicu Valcea , Romania
Fraud sites used:
door2door-cargall.t35.com
door2door-cargus.t35.com
Thursday, February 11, 2010
tradermotorsinc.com Romanian fraud
www.tradermotorsinc.com
Registered to an identity theft victim in Bloomington Indiana.
The email address used to create the fraud domain belongs to:
x_bitza99@yahoo.no
http://profiles.yahoo.com/x_bitza99
http://www.okazii.ro/comunitati/okazia-lui/x_bitza99.html
Localitatea: Ramnicu Valcea
Undoubtably the domain was set up to spoof Trader On Line.
*UPDATES*
The domain now has a fake store front with electronics and prices listed in British Pounds.
Hopefully there are not any victims.
The scammer has removed the image from his Yahoo profile and apparently is suspended at Okazzi.ro
Would anyone like to reveal his true name?
Vietnamese Phishing Vessel
www.vpphq.com
(Vietnamese Phishing Vessel)
The term VPP pertains to Vehicle Purchase Protection scams.
The scammers use these domains to try to convince inexperienced internet users that their "deal" is guaranteed, most commonly by a third party or legitimate company.
The domain registration email address doesn't belong to the person listed as the registrant in:
Slidell, LA 70458
The same email was used to register
Registrant:
MatrixQN
World Wide Web
Ho Chi Minh, HCM 70000
VN
Domain name: HANOI24H.COM
Administrative Contact:
Administrator, Domain haitactb@gmail.com
World Wide Web
Ho Chi Minh, HCM 70000
VN
+84909105305 Fax: +84909105305
Technical Contact:
Administrator, Domain haitactb@gmail.com
World Wide Web
Ho Chi Minh, HCM 70000
VN
+84909105305 Fax: +84909105305
