Thursday, November 11, 2010

4 Front Furniture’s site hacked by scammers

4 Front Furniture
http://www.4ff.co.uk/
Unit D2 Harbet Road
Lee Valley Trading Estate
Edmonton, London
N18 3QR


Has been hacked by scammers using a Google Checkout scam at:
http://www.4ff.co.uk/images/icons/site/index.html

This could be due to an insecure password used by the company or the scammers got one of the employees to answer a phishing email which discloses the user name and passwords of the site.

Here are images of the fake site nested amongst the files of the legitimate site:






Here is some text from the fake site:
1. Buyer and Seller Agree to Terms
  • Both parties agree to terms, which include a description of the vehicle, sale price and number of days granted for the Buyer's inspection.
2. Buyer Pays Google Checkout
  • The Buyer submits their payment to Google Checkout.
  • Once received, the payment will be verified and secured into a non-interest bearing trust account.
3. Seller Ships the Vehicle
  • Upon payment verification, the Seller is authorized to ship the vehicle and submit tracking information.
  • Google Checkout verifies that the Buyer receives the shipment.
  • The inspection period begins once the vehicle is delivered.
4. Buyer Accepts the Vehicle
5. Google Checkout Pays the Seller
  • Google Checkout pays the Seller after all conditions of the transaction are met.
1.General Provisions
  • The transactions performed by a Buyer and a Seller on the Google Checkout site shall be governed by the Uniform Electronic Transactions Act (Civil Code Section 1633 et. seq.) governing Escrow Regulations.
  • A person or entity offering vehicles for sale, and desiring to use the Google Checkout Services in order to close such a sale, shall be hereinafter referred to as "Seller".
  • A person or entity desiring to purchase vehicles from a Seller, by use of Google Checkout for completing the purchase, shall be referred to as "Buyer".
  • The use of Google Checkout (by the Buyer and Seller) for performing a single protected transfer of ownership title shall be referred to as a "Transaction".
2. Instructions and Deposit of Funds into Google Checkout
  • Once the Buyer and Seller agree on these General Google Checkout Instructions, these instructions shall constitute a binding contract between all parties. Google Checkout covers the buyers who complete a transaction against the following types of deliberate and material misrepresentation by the Seller:
  • Paying for a vehicle and never receiving it.
  • Paying for and receiving a vehicle:
    • that was a stolen vehicle at the time of the transaction
    • with an undisclosed or unknown lien against its title
    • a make and/or model that is different than what was described in the Seller's listing
    • whose title is subject to an undisclosed salvage, rebuilt/rebuildable, unrebuildable, reconstructed, scrapped/destroyed, junk, lemon, manufacturer buyback, or water damage brand
    • that has different specifications than the ones at the moment of agreement
    • whose odometer reading is different than the odometer reading described by the Seller
  • The Seller will have to start the shipping process and provide the Buyer with relevant information (ie. tracking number) within maximum 48 hours from our payment confirmation. Upon receipt of the vehicle, the Buyer will be granted 7 days to perform all necessary tests.
3. Shipping of the Vehicle
  • Upon receipt of Buyer's funds and clearance of same, Google Checkout will notify Seller to ship the vehicle. Seller agrees to ship the vehicle, which is mandatory insured at full value, to Buyer. Buyer and Seller agree to choose a shipping method accepted by both parties.
  • The Buyer Inspection Period (7 days) shall commence upon the Buyer's acknowledgement of vehicle receipt.
4. Buyer's Acceptance, Disbursement of Funds:
  • During the Buyer Inspection Period, Buyer shall either: (1) Accept the vehicle and follow all further instructions to complete acceptance of the vehicle. Google Checkout will pay the Seller the purchase price; or (2) Reject the vehicle and follow any further instructions to complete the rejection of the vehicle.
5. Buyer Rejection Process
  • During the Buyer Inspection Period, Buyer may reject the vehicle. In such case, the Buyer shall follow all other instructions to properly reject the vehicle. Upon such rejection, Google Checkout will contact the Seller informing the Seller about the Buyer's decision to reject and return the vehicle.
6. Payment Process
  • All deposits for vehicles in Escrow (provided by Google Checkout) should be submitted within maximum 24 hours from receipt of our payment terms. Failure to do so will result in the Escrow transaction being cancelled.

Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

Tuesday, November 9, 2010

payment-support-department-inc.com FRAUD

http://www.payment-support-department-inc.com/  FAKE FRAUD SCAM

Scammer is using the email:
ebay@payment-support-department-inc.com

I received this information from an intended victim:

This 2002 GMC Yukon Denali AWD with 93.060 miles, has no leaks or drips and has never been smoked in. This truck has been extremely well maintained with a full service history .I am the second owner of this truck.I bought it when I was serving in Fort Lauderdale and is slightly used in 100% working and looking conditions with a clear title free of encumbrances and liens.
I have dropped my price to $2800.00 since I need to sell it before 16 November,when I will be deployed in Afghanistan with my platoon replacing the troops scheduled to come home.
If you're interested to conclude this purchase in a timely manner email me your; FULL NAME and SHIPPING ADDRESS PHONE NUMBER to open a case with eBay's Buyer Protection Program and they will contact you to explain the entire procedure. The financial part will be managed by them, which means that you will have a 7 days inspection period before committing to buy the vehicle. In this way both, buyer and seller are 100% covered during the steps of this transaction.
Hope to hear from you soon,
Corporal Cole Hudson

The real reason the price is $2800 is because Western Union and MoneyGram have a limit of $3000 for transactions.
The price plus fees will be under that amount.

Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

Sunday, November 7, 2010

fast-motorpay.com FRAUD

http://www.fast-motorpay.com/  FAKE FRAUD SCAM

This site appears to have been created by the same scammers who are running:
http://www.central-safepay.com/
Posted here:
http://netscammers.blogspot.com/2010/10/central-safepaycom-fraud.html

The scammers have also set up another fake site to spoof AutoTraderUK:
http://www.tradersafedeals.com/safe_deals/  
They posted this site in an attempt to get victims to think they are legitimate.

Here is an image from tradersafedeals.com:






Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott

Leia Mais…

Saturday, November 6, 2010

To play like a pro you need Skill , For Skill need Brain

Here is Adrian's new sitewww.klm-trans.com
Today I was going through my list of possible fraud domains and came upon a newley registered one.
http://www.klm-cargotrans.com/
The domain now contains an overly used scam template (images below)
I did a whois search on it and reviewed the data.
http://whois.domaintools.com/klm-cargotrans.com
I was quickly able to determine the account is fraud for these reasons:
klm-cargotrans.com would have nothing to do with the legitimate company KLM, which merged with AirFrance since they already have web sites.
Next the whois data lists a person who lives in PEVELY, 63070, DE.
We all know Pevely isn't in Germany, its in Missouri.
The next step is to look at the other registration data.
The contact email given for the registrant is:
vnoob@yahoo.com
A quick Google search indicates the email address belongs to someone who refers to himself as:
VeVeRuTz
A further look reveals this person lives in Valcea, Romania.

Inregistrat: Nov 2008
Locatie: Valcea
Prenumele:Adrian
Nick:vEvE
Varsta:23
ID mess:vnoob@yahoo.com
ID steam:Cand o sa imi cumpar atunci al fac Public.
__________________
To play like a pro you need Skill , For Skill need Brain
- = Schizofrenic Hamster = -
Yes Adrian, you need a brain.
More data:
Domain Name: KLM-CARGOTRANS.COM
   Registrar: CRONON AG BERLIN, NIEDERLASSUNG REGENSBURG
   Whois Server: whois.tmagnic.net
   Referral URL: http://nsi-robo.tmag.de
   Name Server: NS1.NETBEAT.DE
   Name Server: NS2.NETBEAT.DE
   Status: ok
   Updated Date: 05-nov-2010
   Creation Date: 05-nov-2010
   Expiration Date: 05-nov-2011
Technical Contact
      Gica Baiesu
      harry@abc.ro
      Ostengasse 4
      Regensburg, D-93047, DE
      phone: +49.1623302488
The tecnical contact, Mr Baiesu has an email address for the .ro (Romanian) domain abc.ro.
Mr Baiesu shows up frequently as the tecnical contact for fraud domains.
Here are some screen captures of Adrian's public profile:
Not bad huh?
At least we know what he's spending his (oops I mean your) money on, funny slippers and a Mercedes.
Here are some images of the fraud domain:
Here is the scammer's first intended victim:
Here are more intended victims:
Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

Friday, November 5, 2010

london-autopay.com FRAUD

http://www.london-autopay.com/  FAKE FRAUD SCAM
The same scammers are aslo running:
http://www.england-cartrader.com/  FAKE FRAUD SCAM

london-autopay.com and england-cartrader.com are fake sites targeting buyers in the UK.
Here is a related thread on Gumtree:
http://forums.gumtree.com/viewtopic_f_29_t_391962_Anyone_used_MotorsPayDirect

The sites are being run by scammers based in Romania.
Intended victims are being asked to wire transfer money to UK bank accounts set up by the scammers.
The scammers are additionally using the fake site:
http://www.ukroyalairforces.com/ , which actually forwards intended victims to:
http://www.raf.mod.uk/organisation/rafflightsafety.cfm
to create spoof emails such as: kevin.haswell@ukroyalairforces.com
and
grgbennett@ukroyalairforces.com
Garret G Bennett - Air Corps Pilot
The Royal Air Force Regiment
and
Herald Bakker - Air Corps Pilot
Army email: herald.bakker@ukroyalairforces.com
Personal email: herald.bakker@gmail.com
The Royal Air Force Regiment
to fool prospective buyers of cars.

Both fraud domains are being hosted in Russia.
Its a clone of many other fraud sites listed here:
http://escrow-fraud.com/index.php?page=gallery&layout=171
The scammer's use of this template caused the company BuyerGuardian.com to go out of business in 2008.
Story here:
http://forum.escrow-fraud.com/viewtopic.php?f=5&t=1611


If you have additional details please contact me:
netscammers@gmail.com

Here are some images of london-autopay.com




Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott

Leia Mais…

Wednesday, November 3, 2010

flexible-shipping.com FRAUD

http://www.flexible-shipping.com/  FAKE FRAUD SCAM

Is a fake site run by a Romanian scammer.
The site is a spoof of the real shipping site located in Fort Lauderdale, Florida:
http://www.flexinternationalshipping.com/

The fake company is supposedly located in:
Seattle, Washington

Here are some images of the fake site:



Remember, there is NO SUCH THING in real life as a shipping and escrow company.

Here is some text from the fake site:

Buyer-Seller Services     
How it works
Flexible Shipping Inc. offers a transfer service for the transfer of the vehicles title from the seller to the buyer. The main advantage of this service for the seller is that the buyer does not have possession of the title prior to the seller receiving the payment for the vehicle.
The main advantage of this service for the buyer is that the buyer can verify that the seller's title for the vehicle is on hand with an independent party, Flexible Shipping Inc., prior to releasing the payment for the vehicle to the seller.

Title Transfer Service

 
 Below is an outline of the Flexible Shipping Inc. title transfer process: 
 The buyer and seller agree to use the Flexible Shipping Inc. transfer service for title transfer.
 The seller sends the vehicles title signed over to the buyer to Flexible Shipping Inc.. The title should arrive at Flexible Shipping Inc. along with the vehicle.
 Once the seller received payment for the vehicle, the seller is required to contact Flexible Shipping Inc. within 24 hours to authorize the release of the title to the buyer.
 Flexible Shipping Inc. gives the title to the buyer and takes care of the paperwork that needs to be done for registration etc.

Payment Transfer Service

In response to numerous customer requests, Flexible Shipping Inc. now offers an optional independent third party transfer service. The majority of our shipping customers are purchasing or selling a vehicle and are looking for a means to transfer the payment for the vehicle from the buyer to the seller. The main advantage of this service for the buyer is that the seller does not have possession of both the vehicle and the buyers funds at the same time. The main advantage of this service for the seller is that the seller can verify that the buyers payment for the vehicle is on hand with an independent party, Flexible Shipping Inc., prior to releasing the vehicle to the shipper.
 
 Below is an outline of the Flexible Shipping Inc. payment transfer process: 
 The buyer and seller agree to use Flexible Shipping Inc. for payment transfer.
 The buyer transfer the funds to Flexible Shipping Inc. in order to begin the shipping procedures and take the vehicle of the market. The funds should arrive at Flexible Shipping Inc. within 24 hours. Please contact us for payment terms and details needed.
 Upon receipt of the funds, Flexible Shipping Inc. notifies the seller that the funds are on hand with Flexible Shipping Inc..
 Flexible Shipping Inc. ship the vehicle , a tracking number will be provided to the buyer.
 Flexible Shipping Inc. will only release the funds to the seller upon notification by the buyer after the standard 5 days inspection period (not the seller). Flexible Shipping Inc. is responsible for verifying the pick up and delivery of the vehicle.
 After the buyer has inspected the vehicle and agreed to buy it,  Flexible Shipping Inc. sends the funds to the seller and takes care for the buyer of the paperwork that needs to be done for registration etc.

 
Flexible Shipping Inc. TRANSFER SERVICE FEE
The charge for the Flexible Shipping Inc. transfer service is included in the shipping fees.
 
Flexible Shipping Inc. DETAILS
Flexible Shipping Inc. transfer service is like an escrow service. Flexible ShippingInc. is guarantying the validity of the funds or title we receive from the buyer or seller in any way.  Flexible ShippingInc. is simply providing an independent third party transfer service, which means we assist with the transfer of funds between the buyer and the seller. Receipt of agreement by Flexible ShippingInc. from either the buyer or seller for the payment and/or title transfer service, confirms that both the buyer and seller agree to use these services and that both the buyer and seller concur with the terms and conditions of these services.



Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…

vhc-trans.com FRAUD

http://www.vhc-trans.com/

Fraud site run by Romanian scammers.
They are targeting car buyers in Latvia.

The site is hosted in Germany.

role:           Hetzner Online AG - Contact Role
address:        Hetzner Online AG
address:        Stuttgarter Straße 1
address:        D-91710 Gunzenhausen
address:        Germany
phone:          +49 9831 61 00 61
fax-no:         +49 9831 61 00 62
e-mail:         ripe@hetzner.de
abuse-mailbox:  abuse@hetzner.de

The domain registration contains fake contact information:
Registrant ID:           8YJIHWT-RU
Registrant Name:         Bruil
Registrant Organization: Bruil
Registrant Street1:      Koperensteeg 10
Registrant City:         Wekerom
Registrant Postal Code:  6733
Registrant Country:      RU

Administrative, Technical Contact
Contact ID:              8YJIHWT-RU
Contact Name:            Bruil
Contact Organization:    Bruil
Contact Street1:         Koperensteeg 10
Contact City:            Wekerom
Contact Postal Code:     6733
Contact Country:         RU
Contact Phone:           +73920923872
Contact E-mail:          business.tales@gmail.com

Here are some inages of the site:



Oh! what a tangled web we weave
When first we practise to deceive!
Sir Walter Scott
NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet.

Leia Mais…