Thursday, February 18, 2010

Guess the Scammer

Ever get ripped off selling jewelry on eBay by a fake escrow site with "SOL" in the name?


Here are but a few of the fraud escrow sites involved that were run by this group:

loc-solutions.com
pa-expertservices.com
heritageunited.com
echo-trading.com
navcogroup.com
safe-consign.com
terranovaunited.com
veritas-alliance.com
vilemont.com
wells-alliance.com
eutradealliance.com
simpleconsign.net
execsol.com
oned-group.net
tud-group.com
italian-traders.com
safetradeitaly.com
square-solutions.com
inttrad.com
trade-safer.com
dartsol.com
ogstrader.com
sn-trust.com
comm-trust.com
superbizsol.com
corescrow.com
betoncon.com
cdamart.com
istbussines.com
bestbizsol.com
pr1-trd.com
endeasol.com
chesteram.com
parcel-ex.com
marvinson.com
worldwide-express.net
delviago.com
bancelo.com
sonicsvc.com
traders-square.com
expert-tra.com
compacttra.com
celstad.com
mediatecha.com
mellont.com
quintecha.net
gladursol.com
xellos-tr.com
worldwidetrans.net
transworldwide.net
wellstad.com
western-trader.com
vistavaltrade.com
vbsafetrade.com
tristolfinance.com
terralosol.com
target-deal.com
solariossec.com
sierrasols.com
sheldon-group.com
secure-transol.net
santander-trust.com
relstad.com
quinio.com
promtinvestment.com
pow-trading.com
onvario.com
onlinemarket-solutions.com
ogr-exchange.com
oet-exchange.com
multivistatd.com
multivalt.com
mondial-sol.com
merralosol.com
iwo-eu.com
interntrading.com
eustad.com
cromencotrade.com
crestavistatd.com
coraliontd.com
celio-solutions.com
celiosol.com
ca-secure.net
capital-union.com
caixa-sol.com
burbin.com
bristolsec.com
arricentsol.com
arreliossol.com
accor-trade.com
acceltsol.com

These scammers were very busy as you can see.
You can imagine why the images on flickr.com were removed.
The list isn't even complete and might never be.
I can only do so much.

These sites were run by the same scammers, the majority using servers owned by XO Communications.
There is way more to this story than I have the time to write about.

I did try to contact one of the scammer's fathers and asked him to have the scammer contact me with no results. If I was his father I don't know what I'd do either.
You can imagine what a mess this situation is and what an embarrassment the scammer would be to his dad.
(data now posted below)

One of the scammers involved in these sites was a "mule" as well as a fake eBay jewelry buyer.
A mule is someone who picks up packages and money transfers for the other scammers.
This paricular mule worked for this group and another person I will mention in a future post.
Alex Georgescu
DOB 09-06-1978
Originally from Romania.
Here are some pictures that were taken of him in Alicante, Spain at the UPS facility picking up what he thought to be a Rolex watch that was shipped from an intended eBay victim.
Alex is on the right in the 2 tone blue shirt:



Images used courtesy of:
http://www.autosec4u.de/

Alex and his unnamed accomplice, in the white tank top, missed the UPS driver on the street.
They apparently had done this several times previously and knew to enter the facility from a rear loading platform to avoid cameras placed at the front counter.
Little did he know that someone with a hidden camera was taking these images.

As far as I know, Alex moved to the Pheonix, USA area several years ago.
I believe he has an uncle there.
His sponsor, an associate real estate broker in Pheonix, doesn't know that he used her last name to create several Yahoo accounts used to scam people on the fake escrow sites tud-group.com and pa-expertservices.com.
Here are two:
michael_kaporalis@yahoo.com
kaporalis_2000@yahoo.com
A simple Google search will reveal the real estate broker.
http://www.denisakaporalis.com/



I was informed that he may have subsequently went to the New York area to pick up money transfers for scammers.

One of the persons involved in setting up the fake escrow sites is:
Leonard Labuneti
DOB 14.05.1976
Location Braila Romania

The next person who was involved in the sites is:
Razvan Iulian Russu
DOB 13.06.1977
Presently living in Bucharest
Son of Florin Iulian Russu
(owner of Biotop Ro)
http://www.plaxo.com/directory/profile/509994/cec2056b/Florin/Russu


I'll add more data when I have the time.

*update*
As mentioned I am adding more data.
One of the major players in this scam group is none other than:
Liviu Costin Popovici
Mr Popovici is responsible for setting up the site:
http://www.fraudpedia.org/
...sort of like spitting in your face huh?
Read about his exploits here:
http://translate.google.com/translate?hl=en&sl=ro&u=http://www.curierulnational.ro/print/5687&ei=gcShTfrqLsmBgAfJ_5TaBQ&sa=X&oi=translate&ct=result&resnum=5&ved=0CD8Q7gEwBA&prev=/search%3Fq%3D%2522POPOVICI%2BLIVIU%2BCOSTIN%2522%26hl%3Den%26lr%3D%26prmd%3Divnso

and here:
http://translate.google.com/translate?hl=en&sl=ro&u=http://www.curierulnational.ro/Eveniment/2003-02-07/Romanii,%2Bexperti%2Bin%2Bhotii%2Bpe%2BInternet&ei=_MShTc-6DInYgQfeio3bBQ&sa=X&oi=translate&ct=result&resnum=6&ved=0CEgQ7gEwBQ&prev=/search%3Fq%3D%2522POPOVICI%2BLIVIU%2BCOSTIN%2522%26hl%3Den%26lr%3D%26prmd%3Divnso

Leia Mais…

Saturday, February 13, 2010

Dumitru Andrei Udeci

Dumitru Andrei Udeci
D.O.B. 08-08-1987
Location: Bujoreni Ramnicu Valcea , Romania

Fraud sites used:
door2door-cargall.t35.com
door2door-cargus.t35.com

Leia Mais…

Thursday, February 11, 2010

tradermotorsinc.com Romanian fraud

www.tradermotorsinc.com

Registered to an identity theft victim in Bloomington Indiana.

The email address used to create the fraud domain belongs to:

x_bitza99@yahoo.no

http://profiles.yahoo.com/x_bitza99

http://www.okazii.ro/comunitati/okazia-lui/x_bitza99.html

Localitatea: Ramnicu Valcea

Undoubtably the domain was set up to spoof Trader On Line.

*UPDATES*
The domain now has a fake store front with electronics and prices listed in British Pounds.
Hopefully there are not any victims.
The scammer has removed the image from his Yahoo profile and apparently is suspended at Okazzi.ro
Would anyone like to reveal his true name?

Leia Mais…

Vietnamese Phishing Vessel

www.vpphq.com
(Vietnamese Phishing Vessel)

The term VPP pertains to Vehicle Purchase Protection scams.
The scammers use these domains to try to convince inexperienced internet users that their "deal" is guaranteed, most commonly by a third party or legitimate company.

The domain registration email address doesn't belong to the person listed as the registrant in:
Slidell, LA 70458


The same email was used to register

Registrant:
MatrixQN
World Wide Web
Ho Chi Minh, HCM 70000
VN

Domain name: HANOI24H.COM


Administrative Contact:
Administrator, Domain haitactb@gmail.com
World Wide Web
Ho Chi Minh, HCM 70000
VN
+84909105305 Fax: +84909105305

Technical Contact:
Administrator, Domain haitactb@gmail.com
World Wide Web
Ho Chi Minh, HCM 70000
VN
+84909105305 Fax: +84909105305

Leia Mais…

Wednesday, February 10, 2010

Denis V. Strutinschi

The founder of www.Mondopay.com

Denis V. Strutinschi

Last known address
Constanta
Constanta, CT 8700


An ad he placed on line explaining what Mondopay did:
*click here*

He had some trouble with Mondopay:
Mondopay Vs. Dotcommerce
*click here*

His eBay profile:
http://myworld.ebay.es/x3nnox

Strutinschi targeted eBay jewelry sellers and ran phishing sites targeting:
CommonWealth One Federal Credit Union
Lake Michigan Credit Union
eBay and Pay Pal users

Here is a list of some of the fraud domains Strutinschi created for his scams:

truetrader.net
biz-trader.com
safetradeinc.com
safepaycenter.com
commercialescrowservices.com
bayarea-escrow.com
crazyivaniniraq.com
swanandnoblelaw.com
paypal-members-update.com
updateaccounteservice.com
ciumecsanunderline.com
joshuasimonfromca.com
cobadincustombikes.com
inoutrequestinformation.com
theuntouchablepatrickhoward.com
furbleyfanatics.com
eurekacars.net
anti-chill.com
johnlegend.com
xennox.org

Leia Mais…

Monday, February 8, 2010

6 Romanian scammers jailed for eBay scams

Sentence pronounced on 01/27/2010 by the Court in Sibiu.

The significance of this case is the fact that the scammer's prison sentences are longer than the ones normally given.




The defendants in this case are Horatiu Octavian Rotaru, Marius Petru Tamba, Ionut Cosmin Danica, Mihai Isaia Pintilie, Ilie Cristian Munteanu, Cosmin Radu Bela, Dinu Constantin Chircusi and Gheorghe Trocaru.



In the sentence, they’ve been convicted for:



Danica Ionut Cosmin, sentenced to serve 5 years and six months in prison; Was in jail on 06/15/2005-10/16.2006. He should serve the rest.

Art. 7. Law 39/2003 ─ (1) The initiation or constitution of an organized criminal group, or joining or supporting in any way such a group, shall be punished by prison from 5 to 20 years and the interdiction of certain rights.

(2) The punishment for the deeds stipulated in paragraph (1) may not be bigger than the sanction provided by the law for the most grave offense within the purpose of the organized criminal group.

(3) If the deeds stipulated in paragraph (1) have been followed by a grave offense, the rules pertaining the concurrence of several offenses shall be applied.

Art.49 –Law 161 Causing the loss of property to a person by the input, alteration of deletion of computer data, by restricting the access to such data or by preventing in any way the operation of a computer system, in order to obtain an economic benefit for oneself or for another is punished with imprisonment from 3 to 12 years.

Penalty for participation

Art.41 Romanian Criminal Code– Instigators and accomplices to an offence provided by the criminal law, committed intentionally, shall be sanctioned by the penalty provided in the law for authors. In establishing the penalty, each person’s contribution to the commission of the offence, as well as the provisions of article 87, shall be taken into account.

Art.25 –Law 161: Owning equipment to forge electronic payment instruments The manufacturing or the owning of equipment, including hardware and software, to be used to forge electronic payment instruments is punished by imprisonment from 6 months to 5 years.

Art.27: Performing financial operations fraudulently

(1) The carrying out of one of the operations mentioned in art.1, item 10, by using an electronic payment instrument, including the identification data that allow its use, without the consent of the owner of the respective instrument, is punished with imprisonment with 1 to 12 years.

(2) The same punishment is given to performing one of the operations mentioned in art.1, item 10, to the unauthorised use of any identification data or by using false identification data.

(3) The same punishment applies to the unauthorised use, by another person, of any identification data in order to carry out any of the operations mentioned in art.1, item10.

(4) The punishment is imprisonment from 3 to 15 years and the prohibition of the rights if the facts mentioned in paragraphs (1) (3) are carried out by a person who, by the nature of his (her) job:a) performs technical operations necessary to issue electronic payments instruments or to perform the types of operations mentioned on art.1 item 10; or

b) has access to the security mechanisms involved in issuing or using electronic payment instruments; or

c) has access to the identification data or the security mechanisms involved in carrying out the types of operations mentioned on art.1 item 10.

(5) The tentative is punished.





Pintilei Mihai Isaia, sentenced to serve 7 years and 6 months in prison; Was in jail on 06/15/2005-10/16.2006. He should serve the rest.

Art. 7. Law 39/2003 ─ (1) The initiation or constitution of an organized criminal group, or joining or supporting in any way such a group, shall be punished by prison from 5 to 20 years and the interdiction of certain rights.

(2) The punishment for the deeds stipulated in paragraph (1) may not be bigger than the sanction provided by the law for the most grave offense within the purpose of the organized criminal group.

(3) If the deeds stipulated in paragraph (1) have been followed by a grave offense, the rules pertaining the concurrence of several offenses shall be applied.

Art.49 –Law 161 Causing the loss of property to a person by the input, alteration of deletion of computer data, by restricting the access to such data or by preventing in any way the operation of a computer system, in order to obtain an economic benefit for oneself or for another is punished with imprisonment from 3 to 12 years.

Penalty for participation

Art.41 Romanian Criminal Code– Instigators and accomplices to an offence provided by the criminal law, committed intentionally, shall be sanctioned by the penalty provided in the law for authors. In establishing the penalty, each person’s contribution to the commission of the offence, as well as the provisions of article 87, shall be taken into account.

Art.27: Performing financial operations fraudulently

(1) The carrying out of one of the operations mentioned in art.1, item 10, by using an electronic payment instrument, including the identification data that allow its use, without the consent of the owner of the respective instrument, is punished with imprisonment with 1 to 12 years.

(2) The same punishment is given to performing one of the operations mentioned in art.1, item 10, to the unauthorised use of any identification data or by using false identification data.

(3) The same punishment applies to the unauthorised use, by another person, of any identification data in order to carry out any of the operations mentioned in art.1, item10.

(4) The punishment is imprisonment from 3 to 15 years and the prohibition of the rights if the facts mentioned in paragraphs (1) (3) are carried out by a person who, by the nature of his (her) job:a) performs technical operations necessary to issue electronic payments instruments or to perform the types of operations mentioned on art.1 item 10; or

b) has access to the security mechanisms involved in issuing or using electronic payment instruments; or

c) has access to the identification data or the security mechanisms involved in carrying out the types of operations mentioned on art.1 item 10.

Robery

Art.211 Criminal Code– (1) Coercion of a person by violence or threat, to give, to do, or not to do or to suffer something, if the act is committed in order to obtain an unlawful benefit, for oneself or for another, shall be punished by strict imprisonment from one to 5 years.

(2) When coercion resides in threat with revealing a real or invented act, which is likely to compromise the person threatened, his/her spouse or a close relative, the penalty shall be strict imprisonmentfrom 2 to 7 years.





Bela Cosmin Radu, sentenced to serve 5 years and six months in prison; He should serve in jail 5 years and six months minus one day (the day when he was arrested 06/15/2005) Art. 7. Law 39/2003 ─ (1) The initiation or constitution of an organized criminal group, or joining or supporting in any way such a group, shall be punished by prison from 5 to 20 years and the interdiction of certain rights.

(2) The punishment for the deeds stipulated in paragraph (1) may not be bigger than the sanction provided by the law for the most grave offense within the purpose of the organized criminal group.

(3) If the deeds stipulated in paragraph (1) have been followed by a grave offense, the rules pertaining the concurrence of several offenses shall be applied.

Art.49 –Law 161 Causing the loss of property to a person by the input, alteration of deletion of computer data, by restricting the access to such data or by preventing in any way the operation of a computer system, in order to obtain an economic benefit for oneself or for another is punished with imprisonment from 3 to 12 years.

Penalty for participation

Art.41 Romanian Criminal Code– Instigators and accomplices to an offence provided by the criminal law, committed intentionally, shall be sanctioned by the penalty provided in the law for authors. In establishing the penalty, each person’s contribution to the commission of the offence, as well as the provisions of article 87, shall be taken into account.

Art.25 –Law 161: Owning equipment to forge electronic payment instruments The manufacturing or the owning of equipment, including hardware and software, to be used to forge electronic payment instruments is punished by imprisonment from 6 months to 5 years.

Art.27: Performing financial operations fraudulently

(1) The carrying out of one of the operations mentioned in art.1, item 10, by using an electronic payment instrument, including the identification data that allow its use, without the consent of the owner of the respective instrument, is punished with imprisonment with 1 to 12 years.

(2) The same punishment is given to performing one of the operations mentioned in art.1, item 10, to the unauthorised use of any identification data or by using false identification data.

(3) The same punishment applies to the unauthorised use, by another person, of any identification data in order to carry out any of the operations mentioned in art.1, item10.

(4) The punishment is imprisonment from 3 to 15 years and the prohibition of the rights if the facts mentioned in paragraphs (1) (3) are carried out by a person who, by the nature of his (her) job:a) performs technical operations necessary to issue electronic payments instruments or to perform the types of operations mentioned on art.1 item 10; or

b) has access to the security mechanisms involved in issuing or using electronic payment instruments; or

c) has access to the identification data or the security mechanisms involved in carrying out the types of operations mentioned on art.1 item 10.

(5) The tentative is punished.



Chircusi dinu constantin, sentenced to serve 5 years and 4 months in prison; He should serve in jail 5 years and 4 months minus one day (the day when he was arrested 06/15/2005) Art. 7. Law 39/2003 ─ (1) The initiation or constitution of an organized criminal group, or joining or supporting in any way such a group, shall be punished by prison from 5 to 20 years and the interdiction of certain rights.

(2) The punishment for the deeds stipulated in paragraph (1) may not be bigger than the sanction provided by the law for the most grave offense within the purpose of the organized criminal group.

(3) If the deeds stipulated in paragraph (1) have been followed by a grave offense, the rules pertaining the concurrence of several offenses shall be applied.

Art.49 –Law 161 Causing the loss of property to a person by the input, alteration of deletion of computer data, by restricting the access to such data or by preventing in any way the operation of a computer system, in order to obtain an economic benefit for oneself or for another is punished with imprisonment from 3 to 12 years.

Penalty for participation

Art.41 Romanian Criminal Code– Instigators and accomplices to an offence provided by the criminal law, committed intentionally, shall be sanctioned by the penalty provided in the law for authors. In establishing the penalty, each person’s contribution to the commission of the offence, as well as the provisions of article 87, shall be taken into account.

Art.27: Performing financial operations fraudulently

(1) The carrying out of one of the operations mentioned in art.1, item 10, by using an electronic payment instrument, including the identification data that allow its use, without the consent of the owner of the respective instrument, is punished with imprisonment with 1 to 12 years.

(2) The same punishment is given to performing one of the operations mentioned in art.1, item 10, to the unauthorised use of any identification data or by using false identification data.

(3) The same punishment applies to the unauthorised use, by another person, of any identification data in order to carry out any of the operations mentioned in art.1, item10.

(4) The punishment is imprisonment from 3 to 15 years and the prohibition of the rights if the facts mentioned in paragraphs (1) (3) are carried out by a person who, by the nature of his (her) job:a) performs technical operations necessary to issue electronic payments instruments or to perform the types of operations mentioned on art.1 item 10; or

b) has access to the security mechanisms involved in issuing or using electronic payment instruments; or

c) has access to the identification data or the security mechanisms involved in carrying out the types of operations mentioned on art.1 item 10.

(5) The tentative is punished.



Munteanu Ilie Cristian, sentenced to serve 5 years and 4 months in prison; Was in jail on 07/13/2005-10/16.2006. He should serve the rest.

Art. 7. Law 39/2003 ─ (1) The initiation or constitution of an organized criminal group, or joining or supporting in any way such a group, shall be punished by prison from 5 to 20 years and the interdiction of certain rights.

(2) The punishment for the deeds stipulated in paragraph (1) may not be bigger than the sanction provided by the law for the most grave offense within the purpose of the organized criminal group.

(3) If the deeds stipulated in paragraph (1) have been followed by a grave offense, the rules pertaining the concurrence of several offenses shall be applied.

Art.49 –Law 161 Causing the loss of property to a person by the input, alteration of deletion of computer data, by restricting the access to such data or by preventing in any way the operation of a computer system, in order to obtain an economic benefit for oneself or for another is punished with imprisonment from 3 to 12 years.

Penalty for participation

Art.41 Romanian Criminal Code– Instigators and accomplices to an offence provided by the criminal law, committed intentionally, shall be sanctioned by the penalty provided in the law for authors. In establishing the penalty, each person’s contribution to the commission of the offence, as well as the provisions of article 87, shall be taken into account.

Art.27: Performing financial operations fraudulently

(1) The carrying out of one of the operations mentioned in art.1, item 10, by using an electronic payment instrument, including the identification data that allow its use, without the consent of the owner of the respective instrument, is punished with imprisonment with 1 to 12 years.

(2) The same punishment is given to performing one of the operations mentioned in art.1, item 10, to the unauthorised use of any identification data or by using false identification data.

(3) The same punishment applies to the unauthorised use, by another person, of any identification data in order to carry out any of the operations mentioned in art.1, item10.

(4) The punishment is imprisonment from 3 to 15 years and the prohibition of the rights if the facts mentioned in paragraphs (1) (3) are carried out by a person who, by the nature of his (her) job:a) performs technical operations necessary to issue electronic payments instruments or to perform the types of operations mentioned on art.1 item 10; or

b) has access to the security mechanisms involved in issuing or using electronic payment instruments; or

c) has access to the identification data or the security mechanisms involved in carrying out the types of operations mentioned on art.1 item 10.

(5) The tentative is punished.





Trocaru Gheorghe, sentenced to serve 7 years and 6 months in prison; He should serve in jail 7 years and 6 months minus one day (the day when he was arrested 08/15/2005) Art. 7. Law 39/2003 ─ (1) The initiation or constitution of an organized criminal group, or joining or supporting in any way such a group, shall be punished by prison from 5 to 20 years and the interdiction of certain rights.

(2) The punishment for the deeds stipulated in paragraph (1) may not be bigger than the sanction provided by the law for the most grave offense within the purpose of the organized criminal group.

(3) If the deeds stipulated in paragraph (1) have been followed by a grave offense, the rules pertaining the concurrence of several offenses shall be applied.

Robery

Art.211 Criminal Code– (1) Coercion of a person by violence or threat, to give, to do, or not to do or to suffer something, if the act is committed in order to obtain an unlawful benefit, for oneself or for another, shall be punished by strict imprisonment from one to 5 years.

(2) When coercion resides in threat with revealing a real or invented act, which is likely to compromise the person threatened, his/her spouse or a close relative, the penalty shall be strict imprisonmentfrom 2 to 7 years.


Some of the domains these scammers used:
www.fedex-uk.net
www.fedex-office-uk.com
www.dhl-uk.net

Their ploy was to advertise listings on eBay and pretend to send the items using the fake domains.

More on their scams:
http://translate.google.com/translate?hl=en&sl=ro&u=http://tech.rol.ro/content/view/2129/7/&ei=8qZwS6q6JOWutgfZm-T5CQ&sa=X&oi=translate&ct=result&resnum=3&ved=0CA4Q7gEwAg&prev=/search%3Fq%3DHoratiu%2BOctavian%2BRotaru%26hl%3Den%26rlz%3D1I7DLUS_en

http://translate.google.com/translate?hl=en&sl=ro&u=http://stiri.acasa.ro/articole/social/hackeri-sibieni-judecati-pentru-o-frauda-de-350-000-dolari&ei=I6hwS5qgJI-0tgexwaj8CQ&sa=X&oi=translate&ct=result&resnum=4&ved=0CBYQ7gEwAw&prev=/search%3Fq%3DHoratiu%2BOctavian%2BRotaru%26hl%3Den%26rlz%3D1I7DLUS_en

Leia Mais…

Sunday, February 7, 2010

franciscocourier.com

Lets take a quick look at this scam site.
www.franciscocourier.com

Listed here:
http://forum.aa419.org/viewtopic.php?p=194630#194630
and here:
http://escrow-fraud.com/index.php?page=fraud_data&id=9935

The commonly used template is here:
http://escrow-fraud.com/index.php?page=gallery&layout=31

Registration Service Provided By: TAPRAP
Contact: +234.7060531794
Website: http://www.taprap.net

Domain Name: FRANCISCOCOURIER.COM

Registrant:
WWCP Inc
World Wide Courier Post (as0001959@yahoo.com)
17/27 Howie Street
London
London,SW11 4AS
GB
Tel. +390.94768349446

Creation Date: 20-Jan-2010
Expiration Date: 20-Jan-2011

Domain servers in listed order:
dns2.supremepanel5.com
dns1.supremepanel5.com

The Yahoo email address used to register the site:
http://profiles.yahoo.com/as0001959
Listed as Alex Male Illinois, a far cry from a supposedly legitimate company based in the UK.

A quick Google search on the email used to register the fake site reveals this:


The search reveals that Yahoo email address has been used on previous scam sites and for spam emails:
http://db.aa419.org/fakebanksview.php?key=44259
http://spamdb.vp44.com/emails/sep09/sep09-336.php

I don't think "as0001959" is a common or commonly duplicated term so I did an additional search:
http://www.google.com/search?hl=en&lr=&q=%22as0001959%22&start=0&sa=N&filter=0
"as0001959" leads to another email address and several ads on the internet for dating sites.

Suffice to say this appears to be a typical Nigerian scammer.
I hope no one falls prey to any scams using this site.

Leia Mais…

Friday, February 5, 2010

Oldie But Moldy

Several years ago I was able to help save people targeted in in a fake escrow scam involving $4,000,000.00 worth of jewelry from sellers on eBay.
Thats right you read the correct amount 4 Million Dollars.
I had help from a US Secret Service Agent on this.

The biggest problem was getting the web hosting company to close the sites as soon as they were discovered.
The host kept saying they needed a court order to remove the fraud domains.
I let the Secret Service agent deal with them.
(I'd rather not go into certain details about my interaction with this particular web hosting company. I'll create another post to deal with that)

The layout is here:
http://escrow-fraud.com/index.php?page=gallery&layout=6

The sites involved were:

gbtriplealliance.com
gbsafedeals.com
dealinthree.com
gbtripledeal.com
tripleallianceonline.com
tripleonlinedeal.com
ukallianceonline.com
uksafedeals.com

Unfortunately some people did send their merchandise to the scammers.

Some of the scammer's email addresses were:

homecinema99@yahoo.com
homechoice99@yahoo.com
arthurneverdies@yahoo.com
peterneverdies@yahoo.com
daveneverdies@yahoo.com
carloneverdies@yahoo.com
marcusneverdies@yahoo.com
daveneverdies@yahoo.com

Some of the items were sent to:

Arthur Moore
2 Chelsea Close
Edgware
Middlesex
London HA8 5TG UK
Phone#: +44(0)2087926818

and

Mr. Peter More
28 Westward Road
LONDON
E4 8LX
United Kingdom
Phone#: +44(0)2087926818

and

Mr. Arthur Moren
25 regents court
stonegrove
edgware
HA8 8AD
London
United Kingdom
Phone#: +44(0)2087926818

These sites were run by Romanian based scammers.

Leia Mais…

2-5-10

Had a busy day finding and posting sites.

To see the sites I posted go here:

http://forum.aa419.org/viewforum.php?f=20&start=0

Find the box Order: and select "Newest first"

You'll see that many of the sites posted are "spoof" sites.
These are sites set up by scammers using stolen credit cards and pretend to be companies like eBay.
The scammers use the domains mostly for fake emails sent to intended victims.

Other sites are fake shipping and escrow, or "third party" sites.
(There is NO SUCH THING as a legitimate shipping and esrow site)

Read about these sites here:
http://forum.aa419.org/viewtopic.php?t=32656

If you'd like to help aa419.org kill some of these sites, join us!

Leia Mais…

Wednesday, February 3, 2010

citycorus.com

www.citycorus.com
(hopefully its reported and the web host kills it soon)

UPDATE!
The site was promptly killed by the webhost.
(Thanks)
Its interesting to note that I emailed a TV station where the scammer lives to ask them to highlight this situation and perhaps prevent others from doing the same thing.
newsdesk@abs-cbn.com
results=0
No response, which is customary as not too many people, especially those who can do something about them, care about internet scams.


Registration data:
Registrant:
CityCorus
Jones Brain (jones_73@yahoo.com)
MY

How many people are named Jones Brain?

If you Google the address:
2 Jalan, Taman Tun Perek
You get:
This!
Which means its a ficticious address.

A Google search on the email address reveals:
http://profiles.friendster.com/47959946


junald fuentes
Male, 18, Single, Santa Cruz, Davao del Sur, PH
hi im jones add me jones_73@yahoo.com

The Google search also reveals a link to a suspended blog
howtostopspam.blogspot.com
(click here)

The Yahoo profile:
http://profiles.yahoo.com/jones_73
18? 36?

Leia Mais…

Tuesday, February 2, 2010

darkengel.org real or just a front ?

Designs and creates web sites?
Programs?
It appears so.
However, what other projects have they applied their "powerful programming skills" to?

Well, it appears that TUDOR Razvan Gabriel used to create php forms for eBay phishing sites and fake escrow sites.

tudor razvan gabriel
web designer and programmer
home page: http://www.darkengel.org/

heart has its reasons, which reason doesn't know
Pascal

Here are results when you Google his name:

http://www.google.com/search?q=tudor+razvan+gabriel&rlz=1I7DLUS_en&ie=UTF-8&oe=UTF-8&sourceid

Leia Mais…