Internet Scammers

AUTOTRANSPORT LIMITED FRAUD

2012-01-09T15:19:00.000-05:00

AUTOTRANSPORT LIMITED
aka
http://www.transportlimited.com/ http://whois.domaintools.com/transportlimited.com

FAKE FRAUD SCAM
FAKE SCAM ΤΗΣ ΑΠΑΤΗΣ

transportlimited.com is a fake shipping site.
The scammers running the site are in Romania and are pretending to be a shipping company based in the UK:
AUTOTRANSPORT LIMITED
Address: 40 CARLTON PLACE
Town: STOCKPORT
Zip: SK7 6AG
Country: UNITED KINGDOM
Registration Number: 07544058

Οι ηλίθιοι τη λειτουργία του χώρου είναι που προσπαθούν να εξαπατήσουν τους καλούς φίλους μου στην Ελλάδα.

Μην είστε ανόητοι, καθώς αυτό είναι ένα τέχνασμα για να κλέψουν τα χρήματά σας.

Οι Ρουμάνοι δεν έχουν αυτοκίνητα προς πώληση, όλα τα ψέματα της.

Send complaints to:
RAbuseName: Abuse Department
RAbusePhone: +1-866-817-2811
RAbuseEmail: abuse@singlehop.com
and
http://www.justhost.com/cgi/info/contact_us

edmunds.protectionvault SCAM

2011-11-12T16:07:00.001-05:00

http://edmunds.protectionvault.comeze.com/

Office
Edmunds Protection Vaults
8285 Phillips Highway
Jacksonville - FL 32256
United States

To report this fake site file complaints here:
http://www.000webhost.com/report-abuse

Yes its another spoof Edmund's site.

The scammer is using the name and email:
Catharine Black - cath.bl@att.net

Here is the email this scammer is sending to their intended victims:

Thank you for being so supportive with my husband's health issue, it is very encouraging! I have included an autocheck history report for you, so enjoy!
I am glad you are still interested in my car, please read my e-mail entirely and with caution because there are some things involved with it! My daily routine consists in running between my house to work and helping my husband with his medical recovery, which is obviously more than most of the times it is more than I can handle; that is why I have chosen to sell my car over the Internet, therefore getting this through a third party such as Edmunds Protection Vaults is the best solution for me.
The car already is at their storage facility, it is sealed and ready for shipping (Edmunds Protection Vaults quoted me with a great price offer and I decided to include the shipping in the car's price.), you do not need to worry buying my car sight unseen because you can see, test drive and inspect it before paying for it.
Again I want to point out that I am looking after a fast transaction, with no delays because I need to cover some of the expenses of my husband's recovery. That is why I decided to lower the price, to avoid wasting time with negotiations and find a buyer as soon as possible. For more info regarding Edmunds Protection Vaults please visit their website over here.

Sincerely,
Catherine Black

Hey,
I am replying your e-mail regarding my 2003 Audi A4 3.0 Quattro, final asking price is $4,700 because I want a fast and smooth sale since I have many other things to attend. This was my family's second car and we need to sell it because we do not need it any more since my husband suffered a hearth attack 2 months ago. We owe money on medical bills because our health insurance didn't covered the full recovery costs and the asking price for our second car covers most of what we owe right now. I have attached some pictures so enjoy!
The car has only 71,451 original miles, the interior is in excellent condition, the factory alloy are in very good condition, there are no curb rubs to mention. The carpets have no stains and are very clean, fully loaded with options such: fog lamps, heated/power mirrors, intermittent wipers, power door locks, keyless entry, AM/FM Stereo with bosse premium speakers, cd changer, power front seats with lumbar support, alarm, anti-theft system, woodgrain interior trim, floor mats, leather wrapped steering wheel, auxiliary power outlet, trip computer, vanity mirrors, rear defrost, dual zone A/C climate control, cruise control, traction control, electronic stability control, the revolutionary all wheel drive "Quattro system", ABS, power steering, new tires, child safety locks rear windows, 8 airbags, xenon headlights. Dealer maintained, no due repairs, transmission is smooth and responsive, the engine has lots of power and a great MPG (28-highway and 20-city). The timing belt has been replaced at 60,000 miles, new brake pads and rotors at 68,000 The engine doesn't smoke (not even at cold start), there's no rust on it, always garaged (and covered), washed waxed weekly, detailed twice a year. It has no leaks or drips, slightly used, in 100% working and perfect cosmetic condition.
Thanks
Catherine Black

Another:

I am replying your e-mail regarding my 2002 Toyota RAV 4, final asking price is $5,300 because I want a fast and smooth sale since I have many other things to attend. This was my family's second car and we need to sell it because we do not need it any more since my husband suffered a hearth attack past week. We owe money on medical bills because our health insurance didn't covered the full recovery costs and the asking price for our second car covers most of what we owe right now. Below you will find some details about the car and a few photos, so enjoy!
80,382 miles, automatic transmission, never been involved in an accident, never smoked in, no liens, clear title in hand.Both the exterior and the interior are in excellent condition, the factory alloy wheels are in very good condition, clean and shiny. The cloth seats and carpets look in almost new condition with no stains, lots of options such as: air conditioning, cruise control, tilt steering wheel, tinted windows, power locks, power mirrors, power steering, power windows, anti-lock brakes, 6 airbags, intermittent wipers, keyless entry, security system, premium sound system with CD player and AM/FM tuner, and more! It runs and drives excellent. This is an extremely well maintained car with a full service history, it has no leaks or drips and does not smoke at all, slightly used.

I am glad you are still interested in my car, please read my e-mail entirely and with caution because there are some things involved with it! My daily routine consists in running between my house to work and helping my husband with his medical recovery, which is obviously more than most of the times it is more than I can handle; that is why I have chosen to sell my car over the Internet, therefore getting this through a third party such as Edmunds Protection Vaults is the best solution for me.
The car already is at their storage facility, it is sealed and ready for shipping (Edmunds Protection Vaults quoted me with a great price offer and I decided to include the shipping in the car's price.), you do not need to worry buying my car sight unseen because you can see, test drive and inspect it before paying for it.
Again I want to point out that I am looking after a fast transaction, with no delays because I need to cover some of the expenses of my husband's recovery. That is why I decided to lower the price, to avoid wasting time with negotiations and find a buyer as soon as possible. For more info regarding Edmunds Protection Vaults please visit their website over here.

Sincerely,
Laura Gannon

e-garagesale.org SCAM

2011-11-11T01:52:00.001-05:00

http://www.e-garagesale.org/ FAKE FRAUD SCAM

http://whois.domaintools.com/e-garagesale.org

Yet another fraud site pretending to ne associated with eBay and Craigslist.
Previous site run by the same scammers:
http://netscammers.blogspot.com/2011/08/e-commercetradercom-scam.html

Please send all emails to spoof@ebay.com

You can see all the fake testimonies here:
https://www.google.com/search?q=%22e-garagesale.org%22&hl=en&rlz=1I7GGLD_en&num=10&lr=&ft=i&cr=&safe=images

Its interesting to see that these scammers are hijacking eBay accounts and posting positive statements on eBay's Message Boards:
http://answercenter.ebay.com/question/Escrow-Insurance/E-Garagesaleorg/900280081

Here are images of the fake site:

barclysescrow.com NIGERIAN FRAUD

2011-11-08T07:35:00.000-05:00

http://www.barclysescrow.com/ FAKE FRAUD SCAM

http://whois.domaintools.com/barclysescrow.com

Of course its a spoof created by the scammer pretending to be Barclays Bank.

This fraud domain was created by:
http://pulse.yahoo.com/kconsistency1
kconsistency1

Here is a little history on Oghenekevwe Ogodogun (Mr. Konsistency) 30 - Male - Warri, Nigeria
Previous sites involving kconsistency1
1st-assurance.com
http://db.aa419.org/fakebanksview.php?key=49589
ibaklays.com
http://db.aa419.org/fakebanksview.php?key=57302
natwstbonline.com
http://db.aa419.org/fakebanksview.php?key=53879
http://www.phishtank.com/technical_details.php?phish_id=1199517
streambk.com
http://db.aa419.org/fakebanksview.php?key=30789
http://forum.aa419.org/viewtopic.php?t=28185

ibconlineservice.com
http://escrow-fraud.com/index.php?page=fraud_data&id=7829
http://escrow-fraud.com/gallery.php?img=ibconlineservice.com.jpg
sncpb.net
http://whois.gwebtools.com/sncpb.net
Here are more sites on the server registered to:
http://whois.domaintools.com/just1k.com
Domain Name:just1k.com
Record last updated at 2011-05-16 10:57:24
Record created on 2011/3/14
Record expired on 03/14/2012
Run by ccokoji@gmail.com (click to see fraud sites that email is associated with)
Can you spot the spoof sites?

30 domains hosted on IP address 69.73.178.222
acegrey.com
agipgrpdaccor.com
bdespana.com
blloysuk.com
ctbgrps.com
ecimbgrp.com
fibgrp.com
fredhammondengineering.com
globaldynamicsec.com
halifaxb.com
halifxonline.com
hhsbcb.com
i-gtbuk.com
ifbgrp.com
igtbonline.com
igtbuk.com
ihalifxb.com
linkxpres.com
llydgrp.com
llydsgrp.com
natwstgrp.com
rbnscl.com
reservebsa.com
snorwich.com
stndchrted.com
streamonlinett.com
triodosbk.com
ubabibgrp.com
unddcou.com

Transport SR Ltd SCAM

2011-11-08T05:58:00.001-05:00

http://www.transport-sr.com/ FAKE FRAUD SCAM

http://whois.domaintools.com/transport-sr.com

TRANSPORT SR LTD
60 CEMETERY ROAD
PORTH CF39 0BL
MID GLAMORGAN
UNITED KINGDOM

Tel: +44 702 301 6992
Fax: +44 844 774 5298

This site appears to be the same scammers as this post:
http://netscammers.blogspot.com/2011/11/auto-transport-solutions-ltd-fraud.html

AUTO TRANSPORT SOLUTIONS LTD FRAUD

2011-11-08T05:55:00.000-05:00

http://www.auto-transport-solutions.com/ FAKE FRAUD SCAM

http://whois.domaintools.com/auto-transport-solutions.com

Auto Transport Solutions Ltd is a fake shipping and escrow company.
There is no such thing in real life as a shipping and escrow company!

Main Office (Headquarters)
AUTO TRANSPORT SOLUTIONS LTD
211 LINCOLN ROAD
MILLFIELD PETERBOROUGH
PETERBOROUGH PE1 2PL
UNITED KINGDOM
Tel: +44 203 239 3593
Fax: +44 872 110 7297

Here is some text from the fraud site:

ESCROW SERVICES
Buying a car from an International seller/dealer?
Besides transporting cars, we offer an intermediation service.
Using our service, the transaction between the SELLER of the car and the BUYER can be done in 10 easy steps:
Step 1: Seller and Buyer agree to the terms of the transaction and the price of the vehicle.
Step 2: The Seller brings the vehicle and itâ€™s documents to one of our offices or terminals.
Step 3: We verify the documents of the car and if the car is reported to be stolen.
Step 4: The car is prepared for transport.
Step 5: The Seller signs the Sale Contract and the Buyer receives the Sale Contract by fax/email.
Step 6: The Buyer signs the contract and returns it to us via email/fax for confirmation.
Step 7: The Buyer deposits 30% of the car's price in the bank account of Auto Transport Solutions Ltd.
Step 8: After the deposit is made, Auto Transport Solutions Ltd transports the vehicle to the Buyer's address.
Step 9: The vehicle arrives at the Buyer's address within 4-7 business days.
a) The buyer inspects the vehicle for 48 hours and if he is satisfied, pays the rest of the money to Auto Transport Solutions Ltd (70%).
b) If the Buyer is not satisfied with the condition of the vehicle, he is reimbursed the money he has paid (30%) and the vehicle is returned to the Seller.
Step 10: If the buyer accepts the vehicle, Auto Transport Solutions Ltd gives the money to the Seller.
Transaction complete!

What are the benefits?
Auto Transport Solutions Ltd acts as a secure third party to protect the Buyer and Seller.
How Buyers are protected:
* The Buyer has 48 hours to personally inspect the car.
* The Seller isn't paid until the Buyer accepts the car.
How Sellers are protected:
* Auto Transport Solutions Ltd confirms when the Buyer receives the car.
* The payment is collected by Auto Transport Solutions Ltd.
Who are we?
Auto Transport Solutions Ltd is a leader in the car shipping industry. We own and operate over 30 modern car carriers (equipped with satellite tracking) through a
network of more than 40 terminal facilities throughout Europe.
What do we do?
We specialize in shipping vehicles quickly and safely across UK and Europe. Auto Transport Solutions Ltd is committed to the highest standards of service and care to
handle your vehicle move.
Who do we help?
Whomever needs their vehicle shipped! For more than 8 years, Auto Transport Solutions Ltd has provided dependable automobile transportation for individuals, military
personnel, private corporations, moving & relocation companies, and numerous car dealers nationwide.

How can you get started?
Dive right in and get a quote! If you’re new to the world of car shipping, take the time to browse our website and learn more about the process of how we ship your
vehicle. Or call Auto Transport Solutions Ltd at (800) 452-2880, and speak to one of our friendly customer service agents. Our reputation was built on our high standards
of customer service and satisfaction to make your auto move worry free.

Here are images of the fraud site:

FSA Auto Inc. International SCAM

2011-11-08T04:58:00.000-05:00

http://www.fsa-auto-inc.zzl.org/ FAKE FRAUD SCAM

fsa-auto-inc.zzl.org is a fake shipping site run by scammers in Romania.

E-MAIL FSA Auto Inc.:: support@fsa-auto-inc.co.cc

A similar scam using the same template can be seen here:
http://netscammers.blogspot.com/2011/07/offshore-google-checkout-fraud.html

These scammers appear to be using the site in connection with a spoof of Kelley Blue Book.
If you have any further information please contact me:
netscammers@gmail.com

Here is an image of the fake site:

roehl-transport.com FRAUD

2011-11-06T06:52:00.000-05:00

roehl-transport.com FAKE FRAUD SCAM
http://whois.domaintools.com/roehl-transport.com

Roehl Transport
23 Crabtree Manorway North
London DA17 6
United Kingdom
Fax Number : +44 0844 7745958

This fraud site is targeting car buyers in the Netherlands.
The site is being run by scammers in Romania.
The scammer is using the name:
Nuttn Dwane
and the email address:
borzdo@hotmail.com
He is pretending to be in Bristol, United Kingdom

Deze fraude site is gericht op kopers van auto's in Nederland.
De site wordt gerund door oplichters in Roemenië.
De oplichter gebruikt de naam:
Nuttn Dwane
en het e-mailadres:
borzdo@hotmail.com
Hij doet alsof om in Bristol, Verenigd Koninkrijk

These scammers also ran the site
Crosbie Mobile
http://crosbiemb.comeze.com/
Crosbie Mobile
23 Crabtree Manorway North
London DA17 6
United Kingdom
Fax Number : +44 0844 7745958
Data here:
http://forum.aa419.org/viewtopic.php?t=53522
http://fraud.forumandco.com/t1373-crosbiembcomezecom

Here are some images of the fraud site:

e-businesstrader.com SCAM

2011-11-01T19:58:00.001-04:00

http://www.e-businesstrader.com/ FAKE FRAUD SCAM

e-businesstrader.com http://whois.domaintools.com/e-businesstrader.com

Fake site run by scammers in Romania.
The site is hosted by:
person:         Khalid Cook
address:        Santrex Internet Services Ltd.
address:        PO Box 66387
address:        E14 1LR
address:        London, UK
phone:          +442075316044
e-mail:         admin@santrex.net

Send complaints to:
abuse-mailbox: abuse@santrex.net

There are several other sites posted on this blog which are clones of this fake site.
This fake site claims affiliations with eBay.
Please forward any emails from these scammers to:
spoof@ebay.com

Here are some images of the fake site:

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

ukrent.24.eu Betrug

2011-10-23T10:59:00.002-04:00

http://www.ukrent.24.eu/ FAKE BETRUG SCAM

New site:
http://www.loghin-alibaba.net/
Send complaints to:
OrgAbuseHandle: ABUSE1740-ARIN
OrgAbuseName: ABUSE
OrgAbusePhone: +1-404-260-8434
OrgAbuseEmail: abuse@corp.web.com

Der Betrug Website wird von 24.eu. gehostet
Bitte Datei Beschwerden hier:
http://www.24.eu/contact
http://www.24.eu/contact/abuse

Die Person, die versuchen, Ihr Geld zu stehlen, ist hier zu nennen:
http://netscammers.blogspot.com/2010/01/tudorascu-alexandru-and-dina-georgiana.html

Hier sind Bilder von der gefälschten Seite:

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

Grmtransport Fraud

2011-10-18T09:04:00.000-04:00

www.grmtransport.com FAKE FRAUD SCAM

http://whois.domaintools.com/grmtransport.com

42 SYNTAGMA SREET
ATHENS
193 00
GREECE
RATHBONE STREET
LONDON
W1T 1NQ
UNITED KINGDOM
Phone:+30 (210) 322 4712

For technical support and questions please contact us at the following e-mails:
Headquarters Office:
grmtransports@europe.com
GRM Transport is a fraud site created and run by scammers in Romania.
These scammers are targeting victims in Spain.

Other sites using the same template:
http://escrow-fraud.com/index.php?page=gallery&layout=210

Images of the fraud site:

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

BELMONT TRANSPORT LTD FRAUD

2011-10-18T07:53:00.000-04:00

www.belmont-trans-ltd.com FAKE FRAUD SCAM

http://whois.domaintools.com/belmont-trans-ltd.com

BELMONT TRANSPORT LTD Headquarters
Atlas Business Centre
Oxgate Lane
NW2 7HJ, London
Fax: +44 700 593 1023
E-mail: belmont-trans-ltd@live.com

Fraud site hosted by Yahoo.
This site is targeting victims who think they are buying cars on the internet.

It is a very common template used by scammers in Romania.
http://escrow-fraud.com/index.php?page=gallery&layout=2

Here are images of the fake shipping site:

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

2 Scam Yahoo Domains

2011-10-18T07:07:00.001-04:00

Make that 3 domains ;)

www.uae-shipping-logistic.com http://whois.domaintools.com/uae-shipping-logistic.com

www.uae-shipping-logistics.com http://whois.domaintools.com/uae-shipping-logistics.com

www.uae-shipping-vehicles.com http://whois.domaintools.com/uae-shipping-vehicles.com

UAE would normally signify United Arab Emirates
http://en.wikipedia.org/wiki/United_Arab_Emirates

Both domains are associated, being created by the same scammer.
If you look at the domain registration information in the links next to the domains above, you will see that both sites are registered to 2 different women.
uae-shipping-vehicle.com is registered to a man.

These scam domains are easy to spot, given that someone like me has the time and rescources to investigate them.
This situation also shows that web hosts and domain registration companies enable scams with no protection for the consumer or the credit card theft victims who's cards are used to create these fake sites.

There are no files uploaded to the domains as of 10-18-11 7am, but I can assure you they are both fraud.
Need proof?
Contact me:
netscammers@gmail.com

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

Bloomberg Express and Cargo Limited

2011-10-18T06:45:00.001-04:00

http://www.bloombergexpresscargo.com/

http://whois.domaintools.com/bloombergexpresscargo.com

This is an interesting site that uses text and terms from other sites.

One of the addresses used on this site:
"29 Commercial Way, London NW107XF"
Has been used on several other fake shipping sites.
Its actually a DHL office:
DHL Express (UK) Ltd 29 Commercial Way, London NW10 7XF, United Kingdom +44 844 248 0967

The term:
"was established in 1986 with one simple philosophy: that our shipper's deserve the highest level of service and reliability based on our attention to detail and knowledge of our customer's unique needs and circumstances."
has about 16 Google Search results.

The term:
"2. Delivering of your credit card, debit card to any location of your choice. You may have lost your credit card while on a journey and demand a new one from your bank, with letter of authority to us to help collect new one from your bank, be happy that it will be done in a no time and deliver to you wherever you may be. And many other reasons why you would need this tailored services. "
returns 8 results.
I'm sorry but I would never consider using a third party to ship my credit card.

Is it a scam site?
My guess is yes.
Here is a clone site:
http://maestroexpresscargo.com/

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

Twitter Phish

2011-10-16T06:04:00.003-04:00

This morning I checked my Gmail Spam folder and found this message:

I looked at the headers
:
Delivered-To: netscammers@gmail.com
Received: by 10.229.238.129 with SMTP id ks1cs22539qcb;
        Sat, 15 Oct 2011 19:36:09 -0700 (PDT)
Received: by 10.68.22.36 with SMTP id a4mr27500607pbf.80.1318732568273;
        Sat, 15 Oct 2011 19:36:08 -0700 (PDT)
Return-Path: <dm-argfpnzzref=tznvy.pbz-86322@postmaster.twitter.com>
Received: from ham-cannon.twitter.com (ham-cannon.twitter.com. [199.59.148.230])
        by mx.google.com with ESMTP id d6si11731607pbw.115.2011.10.15.19.36.07;
        Sat, 15 Oct 2011 19:36:08 -0700 (PDT)
Received-SPF: pass (google.com: domain of dm-argfpnzzref=tznvy.pbz-86322@postmaster.twitter.com designates 199.59.148.230 as permitted sender) client-
ip=199.59.148.230;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of dm-argfpnzzref=tznvy.pbz-86322@postmaster.twitter.com designates 199.59.148.230 as
permitted sender) smtp.mail=dm-argfpnzzref=tznvy.pbz-86322@postmaster.twitter.com; dkim=pass header.i=@twitter.com
X-DKIM: Sendmail DKIM Filter v2.8.2 1878413861.twitter.com B70E36BD917C
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=twitter.com; s=dkim;
t=1318732567; i=@twitter.com; bh=ZjBfBfxqWvFuogB4SWW35pMhpNI=;
h=Date:From:Reply-To:To:Subject:Mime-Version:Content-Type:
List-Unsubscribe;
b=GhGE6cQMtQ7VKz4fohFHla0ZGu2Ccgi52jMuWtKFFL2oTQbasDvcLxlJx1GvAwLGE
kl9ljvVSUOEnpGB5XyEEaFOWc6M+I1M9Y+jUdyKqA9RIOiQBPI/plUdcE/ssiOYn40
7RJkh5w/rspsBWCm/uIlCaKz/187kEEzMnElFF3Q=
X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 1878413861.twitter.com B70E36BD917C
DomainKey-Signature: a=rsa-sha1; s=default; d=twitter.com; c=simple; q=dns;
h=date:from:reply-to:to:subject:mime-version:content-type:
x-twitterimpressionid:list-unsubscribe:errors-to:bounces-to;
b=CgnLv25e1JGid3p2T4V5dnwHQD1ZUAU3MG1AwnE/EVuk+BfQOvAL9sOyHvwozEXYg
yN8nX0i71SMR+vH8IzngA==
Date: Sun, 16 Oct 2011 02:36:07 +0000
From: Twitter <dm-argfpnzzref=tznvy.pbz-86322@postmaster.twitter.com>
Reply-To: noreply@postmaster.twitter.com
To: netscammers@gmail.com
Message-Id: <4e9a4317b5c17_c33bf7222988230f0@1878413861.twitter.com.tmail>
Subject: Here & Now (@hereandnow) has sent you a direct message on Twitter!
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary=mimepart_4e9a4317b62d5_c33bf72229882316e
X-Twitterimpressionid: am-18336062913187325677065615
List-Unsubscribe: <http://twitter.com/account/unsubscribe?code=zrFWuehpt16C4oYGorPJ2o3pLQeesC8t&iid=am-18336062913187325677065615&nid=22+list-
unsubscribe&t=dm&uid=111657563&utm_content=optout>
Errors-To: Twitter <dm-argfpnzzref=tznvy.pbz-86322@postmaster.twitter.com>
Bounces-To: Twitter <dm-argfpnzzref=tznvy.pbz-86322@postmaster.twitter.com>

I checked my Twitter Messages and found this:

I did a Google Search and found this post:
http://www.gmanews.tv/story/235570/technology/new-twitter-phishing-attack-poses-as-reputation-alert

So:
Has hereandnow's Twitter account been hacked?
Yes, it was.
Its all explained here:
http://twitter.com/#!/hereandnow

Its the Twitter account for:
http://hereandnow.wbur.org/
(a show that features Robin Young, a crush from the days when I lived in Massachusetts ;))

The link in the fake Twitter message forwards the intended victim to the phishing website:
http://twittelr.com/verify/session/login/

The domain is actually twittelr.com

http://whois.domaintools.com/twittelr.com

Its hosted in China:

inetnum:      220.163.0.0 - 220.165.255.255
netname:      CHINANET-YN
descr:        CHINANET yunnan province network
descr:        China Telecom
descr:        A12,Xin-Jie-Kou-Wai Street
descr:        Beijing 100088
country:      CN
admin-c:      CH93-AP
tech-c:       CH93-AP
mnt-by:       MAINT-CHINANET
mnt-lower:    MAINT-CHINANET-YN
changed:      hostmaster@ns.chinanet.cn.net 20010711
status:       ALLOCATED NON-PORTABLE
changed:      hm-changed@apnic.net 20081210
source:       APNIC
person:       Chinanet Hostmaster
nic-hdl:      CH93-AP
e-mail:       anti-spam@ns.chinanet.cn.net   < send complaints here
address:      No.31 ,jingrong street,beijing
address:      100032
phone:        +86-10-58501724
fax-no:       +86-10-58501724
country:      CN
changed:      dingsy@cndata.com 20070416
mnt-by:       MAINT-CHINANET
source:       APNIC

Here is another page on the phishing site twittelr.com :
http://twittelr.com/status/error/

The source code of that page includes this:
link rel="icon" href="http://26.media.tumblr.com/avatar_be75a538ccae_16.gif"/

A Google search leads here:
http://site-connect.net/info/mokelov.tumblr.com

This is scary:
https://safeweb.norton.com/report/show?name=twittelr.com

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

transport7.com SCAM

2011-10-14T02:28:00.000-04:00

http://www.transport7.com/ FAKE FRAUD SCAM

http://whois.domaintools.com/transport7.com

Transport 7 Ltd
Carpenter Court 1, Maple Road
Bramhall
Stockport
SK7 2DH
United Kingdom
Company Number:
07221644
Email:
support@transport7.com

There is no such thing in real life as a shipping and escrow company.

This fraud site is pretending to be the real company:
http://companycheck.co.uk/company/07221644

transport7.com uses a SSL Certificate,
http://en.wikipedia.org/wiki/Ssl_certificate
issued by GeoTrust, Inc.

This should not be interpreted as meaning the site is safe or legitimate.
GeoTrust, Inc. will sell anyone, including scammers, an SSL Certificate.
GeoTrust, Inc. even gives them away for free 30 day trails:
http://www.geotrust.com/ssl/
A call to GeoTrust, Inc. sales department yielded no respone, apparently the sales department was too busy giving away free SSL Certificates yesterday.

Should we trust SSL Certifications issued by GeoTrust, Inc.?

The fraud site is hosted by:

organisation:   ORG-PAK5-RIPE
org-name:       PP Alexey Klimenko
org-type:       OTHER
address:        Ukraine, Sevastopol,
address:        Heroev Sevastopola 21-10
phone:          +380994015332
abuse-mailbox: abuse@uahoster.org

A Google Search on this web host reveals this blog post:
Evil network: Alexey Klimenko / UAHOSTER-NET / uahoster.org / GreatHost-ALTNET, AS41390 (91.217.153.0/24)
http://blog.dynamoo.com/2011/09/evil-network-alexey-klimenko-uahoster.html
It appears this web host is connected to other scams and sites that inject viruses to people who visit the sites they host.

Here are some images of the fraud site:

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

DGO EXPRESS FRAUD

2011-10-13T02:42:00.000-04:00

http://www.dgo-express.com/ Fake Fraud Scam

http://whois.domaintools.com/dgo-express.com

DGO EXPRESS is a fake shipping and escrow company.
There is nothing in real life as a shipping and escrow comapny.

DGO EXPRESS
Europe Offices 29 Nether St.
North Finchley London
N12 7NL
United Kingdom

U.S.A. Offices
1219 Locust Street
Philadelphia
PA 19105
United States
Tel:+44-703-5345623
Fax:+44-703-0521234

The fraud site is hosted by:
Net Onboard Sdn Bhd
No 31 & 33, Jalan Utama 2/18,
    Taman Perindustrian Puchong Utama,
    Puchong
    Selangor,47100
    MY
    Tel. +6.0380625088
    Fax. +6.0380624955

Previous sites run by the same scammers can be seen here:
http://escrow-fraud.com/index.php?page=gallery&layout=154

It appears that the hosting company has a penchant for hosting sites by this particular group of scammers.
A reverse search of the ip 182.239.42.37 reveals the following domains used by the same scammers:

cmd-express.com
dgo-express.com
dmx-express.com
egm-express.com
ehm-express.com active
ekm-express.com dead
etm-express.com dead
tdm-express.com
tgm-express.com
thm-express.com
tsm-express.com
tzm-express.com

Net Onboard also previously hosted the scammer's other site:
ebm-express.com

It is apparent that Net Onboard has little if any regard for scams operating on its servers.
Why would a web host enable scammers to do this?
The answer is money.
Net Onboard accepts payments for services using the same methods the scammers do:
http://netonboard.com/support/faqq.shtml
i) Direct Cash/Cheque Deposit
ii) Internet Funds Transfer
iii) Cheque Postal (recommended Registered or PosLaju or Courier)
iv) Western Union
v) TT wire transfer
vi) Credit card (via Paypal only)

It stands to reason that a domain registered using a specific email address, that is determined to be fraud and removed, would be an indication others using the same email address and or template would also be scam sites.
cmd-express.com marco.tezzini@hotmail.com
dgo-express.com marco.tezzini@hotmail.com
dmx-express.com marco.tezzini@hotmail.com
egm-express.com toni.materazzi@yahoo.com
ehm-express.com active toni.materazzi@yahoo.com
ekm-express.com dead toni.materazzi@yahoo.com
etm-express.com dead toni.materazzi@yahoo.com
tdm-express.com   toni.materazzi@yahoo.com
tgm-express.com   toni.materazzi@yahoo.com
thm-express.com   toni.materazzi@yahoo.com
tsm-express.com   toni.materazzi@yahoo.com
tzm-express.com   tlutze54@hotmail.com
ebm-express.com toni.materazzi@yahoo.com dead and no IP

DGO EXPRESS and the other sites are run by scammers in Romania,
These scammers post ads for vehicles on the internet and ask for payments using bank transfer to, you guessed it, Barclay's Bank in the UK.
Here is one of the accounts they used previously:

Bank: Barclays
Bank Branch: Kenton Park Parade Branch, London, United Kingdom
Account name: EKM Express
Account number: 33289575
Sort Code: 20-37-16
IBAN: GB82 BARC 2037 1633 2895 75
BIC: BARCGB22
Transfer reason: 342921

That information is from this discussion of the site etm-express.com dead, registered using the email address toni.materazzi@yahoo.com same email address as the clone site on the same server ehm-express.com active toni.materazzi@yahoo.com
The discussion can be seen here:
http://www.lotuselan.net/forums/elan-f14/warning-elan-fraud-t23596.html

Here are images of the fraud sites mentioned above:

Here is some text from the fraud sites:

DGO EXPRESS has been providing superior domestic and international transportation services for over 10 years. Our employees and agents are skilled professionals
with both the knowledge and the experience to get the job done. From small items, documents, electronics to cars & container shipments we can provide the
equipment and the expertise to handle any job, no matter how demanding it may be
SAFE EXCHANGE SERVICE DESCRIPTION:
BUYER and SELLER agree to terms
Both parties agree to terms of the transaction, which includes a description of the merchandise, sale price, and transaction information.
SELLER sends the merchandise via our services
Our agency verifies & inspects the type, condition and authenticity of the merchandise. We issue a tracking number to confirm that the merchandise is in our depots, and
it is scheduled for departure upon payment confirmation.
BUYER sends the payment to DGO EXPRESS
The buyer sends the payment to our company using the 3 available payment methods. Upon payment verification, we will ship the merchandise to the buyer and update
the tracking information. Delivery times vary by destination from 1 to 8 working days.
BUYER receives the merchandise
The merchandise is delivered to the buyer along with our inspection certificate that guarantees the type, condition and authenticity of the products(s). The Buyer will
notify DGO EXPRESS within 3 days after the delivery if he will accept or reject the merchandise.
DGO EXPRESS pays the SELLER
Once the merchandise is approved and received by the Buyer, we release the payment to the seller.The transaction is complete.
PAYMENT METHODS:
You can send the payment by Bank Wire Transfer or with cash trough Western Union or Money Gram transfer

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

Green Card Lottery, Diversity Immigrant Visa Program Scam

2011-10-10T13:12:00.021-04:00

The scammers are using the domains:

greencard-state-program.com http://whois.domaintools.com/greencard-state-program.com
and
greencard-state-program.org http://whois.domaintools.com/greencard-state-program.org
and
kccusafis.org http://whois.domaintools.com/kccusafis.org
and
travel-state-program.org http://whois.domaintools.com/travel-state-program.org
and
travel-state-program.com http://whois.domaintools.com/travel-state-program.com

with the email addresses:
dv@greencard-state-program.com
and
dv@greencard-state-program.org
and
dvs@kccusafis.org
aka
U.S. Department of State <dvs@kccusafis.org>
and
support@travel-state-program.org
dv@travel-state-program.com

It appears this scammer previously used:
dvusfis.org

Report greencard-state-program.com and .org to:
Reg.Ru Network Operations
Russia, Moscow, Vassily Petushkova st., house 3, Office 326
         SPAM reports: abuse@reg.ru

Report all 3 domains to the web host here:

role:            Digital Network Hosting Department
address:         13a, Yaroslavskaya st.,
address:         Moscow, Russia, 129366
phone:           +7 495 660 8383
fax-no:          +7 495 660 8383
admin-c:         MIF
tech-c:          DNO-RIPE
e-mail:          noc@msm.ru
nic-hdl:         DHO-RIPE
mnt-by:          DN-MNT
abuse-mailbox:   abuse@di-net.ru

Here is another fraud domain used by scammers.
Domain Name: USA-GREEN-CARD-DV.COM
   Registrar: NETWORK SOLUTIONS, LLC.
   Whois Server: whois.networksolutions.com
   Referral URL: http://www.networksolutions.com/en_US/
   Name Server: NS7.WORLDNIC.COM
   Name Server: NS8.WORLDNIC.COM
   Status: clientTransferProhibited
   Updated Date: 26-nov-2011
   Creation Date: 26-nov-2011
   Expiration Date: 26-nov-2012
Please report the fraud domain to:
abuse@networksolutions.com
That scammer is asking for Western Union payments.
As of 11-14-11, 2858 have visited this post.
173 people sent emails to spoof@westernunion.com
50 people complained to the web host.
http://netscammers.blogspot.com/p/are-you-weena.html
Please make complaints.
This scammer is asking for payments using Western Union.
Remember, NEVER send Western Union payments for anything on the internet.
Forward any suspicious emails to:
spoof@westernunion.com

Also report the scammer here:
http://www.justice.gov/spam.htm

More on this type of fraud:
http://www.usafis.org/consumer_alert.asp

Here is what the scammer is sending intended victims:

Your registered name xxx is included to show this message originated from U.S. Department of State. U.S. Department of State notifies "intended victims"   of being selected as a winner of the Diversity Visa program.

Dear xxx , You are one of the 50,000 winners selected by the computer random draw from the 12.1 million entries registered in the Diversity Immigrant Visa Program . The Diversity Immigrant Visa program is a United States congressionally-mandated lottery program for receiving a United States Permanent Resident Card. It is also known as the Green Card Lottery

Diversity Visa Details
With the Diversity Visa (also known as Green Card) you will enjoy all the advantages and benefits of a U.S. permanent resident, including health and education benefits, and employment opportunities along with guidance in your new country, orientation sessions and programs to integrate into mainstream American society. Once received you can use it at any time you want to move in the United States or just travel. The visa must be renewed after 10 years.

U.S. Government helps you with the accommodation and offers you Health Insurance (Freedom HSA Direct Individual Health insurance for 1 year), Dwelling (Apartment in any city you prefer, 1 bedroom for 3 months ), a guaranteed job (in the field that you are are currently qualified so you can start working even from the first week you arrive in the United States and get paid as U.S citizen. ) and education (for U.S. Students or Higher Education through EducationUSA. It includes transfer to a U.S college or University so you can continue your educational study. More details can be found at http://educationusa.state.gov/ .)

Processing fees
Type of Residence Card Status Amount (per person)
United States Permanent Resident Card Granted! - Waiting for payment of processing fee $879
Processing fees Included
Total $879
Although the Diversity Visa participation was free, the law and regulations require to every diversity visa winner to pay a visa processing fee of $879. The Diversity Visa(Green Card) is guaranteed upon receiving the payment.
The per person fee for each Diversity Visa is $879, payable in U.S. dollars or equivalent of your local currency. This $879 fee is the only fee a winner needs to pay throughout the entire relocation process.
Accompanying family members(wife/husband, fiancee, brothers, sisters, childrens, cousins) may be included in the program and their visas will be provided at the same time with yours so you can travel/move together in the same time. However the fees must be paid per person and each member(e.g wife, brother, parents, childrens, cousin) must pay $879. There is no discount for childrens.

Please note that you are allowed to take with you as many family members you want. However for each person you must pay an additional amount of U.S $879
For example if you decide to move in the United States with your wife and a kid the total fee is US$879(your fee) + US$879(your wife) + US$879(your kid) = US$2637.
PURPOSE: The U.S. Department of State uses the fee payment primarily to process your visa related documents and verify your identity.
Visa Payment processing instructions
The fees must be paid using Western Union money transfer and will be processed by the U.S. embassy in the United Kingdom.
Western Union is a leading provider of International person-to-person money transfer. With more than 150 years experience and 245,000 Agent locations in over 200 countries and territories, Western Union is recognized for sending money quickly, reliably, and safety.
You can send the payment in U.S. dollars or equivalent of your local currency .
Click on the following link to find the nearest Western Union agency and send the fees payment :
Find Western Union Agency
If you are unable to find a Western Union agency near your location, you may ask a relative or friend to pay the fee on your behalf.
After you find a Western Union agency you need to go with cash money, an identity card(e.g passport or national identity card) and send the payment to the U.S. embassy agent address in United Kingdom:

Name   : Darren Childs also using Kevin Wine, Alexander Preis, Alan Thompson, Richard Hawk, Thomas Krumme
Address: 73 Queens Avenue
              London, N20 0JB
              United Kingdom

The payment must be sent to the above U.S. embassy agent address in United Kingdom because the U.S. Department of State decided this based on the diplomatic relations with your country.
After you send the payment follow the next steps:
Fax the Western Union receipt at +44 207 691 7968 !
                               also using +44 2030041354
Then wait for the confirmation that the payment was received.
Within 48 hours, you will receive a confirmation via email with your Case Number/Confirmation Number and exact date and time(approx. 2 days) of the final interview. Upon successful interview you will receive your documents and travel information to move in the United States. Under no circumstances your visa status won't be affected by the interview. After you have paid the processing fees your visa is guaranteed !

Please Note!
The payment must be sent via Western Union in maxx 72 hours after you have received and read the email from U.S. DEPARTMENT of STATE. You are strongly encouraged not to wait until the last day to pay. Heavy demand may result in system delays .
The visa processing fee(US $879) is mandatory for each person and the U.S. Government doesn't offer any discount, loan or exception.
You have been selected winner of the Diversity Visa lottery so the visa is guaranteed upon receiving the payment fees on time.
A hard copy of this letter will be mailed to your postal address upon receiving the payment fees.
Please be advised that even through you are a winner of Diversity Visa your Case Number/Confirmation Number will be provided only after you send the payment confirmation of the fees. Please do not contact us to ask for the Case Number/Confirmation Number.
If it would be necessary to contact the U.S. Department of state YOU MUST ALWAYS REFER TO YOUR NAME. The email is dvs@kccusafis.org !
also using The email is support@travel-state-program.org !

CONFIDENTIALITY STATEMENT: AUTHORITIES: The information asked for on this form is requested pursuant to Section 222 of the Immigration and Nationality Act. Section 222(f) provides that the records of the Department of State and of diplomatic and consular offices of the United States pertaining to the issuance and refusal of visas or permits to enter the United States shall be considered confidential and shall be used only for the formulation, amendment, administration, or enforcement of the immigration, nationality, and other laws of the United States. Certified copies of such records may be made available to a court provided the court certifies that the information contained in such records is needed in a case pending before the court.
Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

trustworldcourierltd.com FRAUD

2011-10-06T16:22:00.001-04:00

www.trustworldcourierltd.com FAKE FRAUD SCAM

The site is hosted by Yahoo
http://whois.domaintools.com/trustworldcourierltd.com

This fake shipping site, Trust World Courier, is being run by a Nigerian scammer who is operating out of Lagos.

The scammer is pretending to be a company selling phones:
Electronics Security Limited
37 BELDHAM ROAD
WRECCLESHAM, FARNHAM GU9 8TW
United Kingdom

He is then pretending to ship these non existant phones, using this fake shipping site, to intended victims in the Phillipines.

Here is an image of the fraud site:

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

amazon-shipping-company.com FRAUD

2011-10-05T15:07:00.000-04:00

www.amazon-shipping-company.com
http://whois.domaintools.com/amazon-shipping-company.com

The site actually claims to be Amazon.com

The domain registration contains this data:

Amazon Service (amazon.service.ltd@gmail.com)
   +1.3473520234
   Fax:
   527 3rd Avenue
   New York, NY 10001
   US

The phone number that was posted is not even a Manhatten number:
http://en.wikipedia.org/wiki/Area_code_347
http://en.wikipedia.org/wiki/File:Area_code_347.png

The address is for the UPS Store
http://www.theupsstorelocal.com/1227/

The person who created the site put a YouTube video on it:

To top it off the "Today's Deals" Page
http://www.amazon-shipping-company.com/todays-deals.html
uses Google Checkout !!!!
Here are some images of the fake site:

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

global-parcel2go.com FRAUD

2011-10-02T07:53:00.001-04:00

http://www.global-parcel2go.com/ FAKE FRAUD SCAM

global-parcel2go.com http://whois.domaintools.com/global-parcel2go.com

This particular site opened a "can of worms" so to speak.
The site is hosted by:
Registration Service Provided By: ROBERTSHOST.NET
Contact: +001.6126682588
Website: http://robertshost.net/
http://whois.domaintools.com/robertshost.net

robertshost.net also hosts the following similar domains:
bc-parcel2go.com
ca-parcel2go.com
ca-parcel2go.eu
canada-parcel2go.com
delivery-parcel2go.com
delivery-tnt.eu
eu-parcel2go.com
ship-parcel2go.com
ship-parcel2go.eu
ship-parcel2go.us
shipping-parcel2go.com
uk-parcel2go.com
us-parcel2go.com

http://www.ship-parcel2go.us/
has registration information:
http://whois.domaintools.com/ship-parcel2go.us
A search for the address reveals the property at the address in Minneapolis, Minnesota is owned by someone who has a different name.

I have my doubts as to the legitimacy of robertshost.net due to the fact that it hosts only the fake parcel2go sites.
robertshost.net is hosted by:
http://whois.domaintools.com/thetigerhost.com

The fraud parcel2go sites are imitations of the legitimate site:
http://www.parcel2go.com/
Read and report the fraud sites here:
http://www.parcel2go.com/content/fraud-prevention.aspx

The fraud site global-parcel2go.com proves itself to be a scam because it asks for payments using Western Union, shown in the image below.
The fraud site also mentions a fake bank account, used on other fraud sites, also shown in the image below:
Parcel2Go International Airmail - How to make payment via Checks or Bank to Bank Money Transfer - for amounts up to USD $10,000.00
Please make your check or money order payable to Internet Parcel2Go Services, include the Parcel2Go transaction number, and send it to one of the addresses below. Money order and check payments are only accepted when drawn on a US bank, have a limit of $ 4.999.99, and are subject to a 10 days bank hold. We do not accept checks drawn on a credit card.
U.K./Air Mail: Internet Parcel2Go Services
Bank of England
Threadneedle Street
London, EC2R 8AH, United Kingdomn
Express Mail: Internet Parcel2Go Services
Bank of England
Threadneedle Street
London, EC2R 8AH, United Kingdomn
Bank Transfer - up to USD $10,000.00
Bank transfers can be submitted with the help of your banking institution. Provide your bank with the information below to properly transfer your payment:
Bank Name: Bank of England
Address: Threadneedle Street
London, EC2R 8AH, United Kingdomn
ABA Routing #: 121000358
Swift Code: BOFAUS3N
Credit Account Name: Internet Parcel2Go Services
Credit Account #: 01286498
The above information is for payments on transactions that are made in United States Dollars only (USD).

Here are the images:

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

eznettransactions.com SCAM

2011-09-23T13:30:00.001-04:00

http://www.eznettransactions.com/ FAKE FRAUD SCAM

New site
http://www.eznettransaction.com/ http://whois.domaintools.com/eznettransaction.com

Send complaints to:

person:         Khalid Cook
address:        Santrex Internet Services Ltd.
address:        PO Box 66387
address:        E14 1LR
address:        London, UK
phone:          +442075316044
e-mail:         admin@santrex.net
abuse-mailbox: abuse@santrex.net
nic-hdl:        KC1261-RIPE
mnt-by:         Cook08

eznettransactions.com http://whois.domaintools.com/eznettransactions.com

Previous fake sites by the same scammers posted here:
(there are images and data)
http://netscammers.blogspot.com/2011/09/e-ztransactioncom-scam-targets-disabled.html
http://netscammers.blogspot.com/2011/07/ez-transactionscom-scam.html

These scammers list fake items for sale on Craigslist and use eznettransactions.com

Again they have fake sites with fake testimonies on them:
http://eznettransactions.wordpress.com/
Read more here.

eznettransactions.com was registered using a service in Russia
REGIONAL NETWORK INFORMATION CENTER, JSC DBA RU-CENTER
http://www.nic.ru
The scammers created their own nameserver
EZNETTRANSACTIONS.COM
These scammers are using the identity, and most likely, the stolen credit card of someone in
Contact City:            Rochester
Contact Postal Code:     14626
Contact Country:         US
The fake site/nameserver is hosted by:
netname:         net-0x2a
descr:           Zharkov Mukola Mukolayovuch
remarks:         Datacentre "0x2a"
country:         UA
org-name:       Private Entreprise Zharkov Mukola Mukolayovuch
org-type:       OTHER
address:        Ukraine, Kyiv, Entuziastov str. 29, of. 42

Send complaints to:
support@0x2a.com.ua and support@netassist.kiev.ua

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

worldwidedeliveryltd.com SCAM

2011-09-22T18:14:00.001-04:00

http://www.worldwidedeliveryltd.com/ FAKE FRAUD SCAM

New domain same scammers:
http://www.expressparcel2go.com/ http://whois.domaintools.com/expressparcel2go.com
Previous sites:
worldwidedeliveryltd.com http://whois.domaintools.com/worldwidedeliveryltd.com Dead
wwdeuro.enterneted.com Dead
eworlddelivery.com Dead
worldtradeweb.net Dead
worldwidedelivery.totalh.com Dead
worldwidedelivery-eu.com Dead
Fake shipping and escrow site run by scammers in Romania.

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

is-express.com Reshipping Scam

2011-09-22T17:18:00.000-04:00

http://www.is-express.com/ FAKE FRAUD SCAM

is-express.com http://whois.domaintools.com/is-express.com

The site is hosted by:
netname:        TONOVA-VDS
descr:          Sia Vps Hosting
country:        LV
Send complaints to:
abuse@vps-hosting.lv

IS-EXPRESS.COM is a common reshipping scam.
The scammers buy items on the internet using stolen credit cards and PayPal accounts and have them sent to you to reship to them.
These scammers are commonly located in Eastern European countries so guess who's left holding the bag?
You. The person who is transporting stolen goods.

http://is-express.com/contactus.html
By Telephone
We are open Monday - Friday from 09:00 - 17:00 EST.
You can reach us at +1(302) 504-4341
By postal mail
IS-EXPRESS.COM
1201 N Orange St
Wilmington, DE 19801
USA

http://is-express.com/employment.html
Become a shipping agent!
International Shopping Express is looking for shipping agents in the U.S.A.
Email: mail@is-express.com

If you're smart and Google some of the text on the site, you'll find these scammer's clone at:
http://invostroy.ru/index.html
Its hosted by the same company.
Send complaints to abuse@vps-hosting.lv

Here are some images of the fraud site:

Here is some text from the scam site:

IS-EXPRESS.COM brings USA E-commerce to your doorstep!
Shopping online? Found that item you like? Perhaps the latest Palm V offer with all the trimmings? Or maybe the latest hard-to-find DVD or CD? Maybe even a nice book you know your parents or spouse would love?
A problem is the most US vendors would ship only within the USA, which means for you to get that DVD or Palm V or you'd have to make a lot of arrangements: email the vendor for a special request, ask a relative or friend in the US to receive the package for you and have him forward the package to you. In short a lot of hassle, a lot of headaches, and a lot of waiting. And you're not even sure of the safety of your package.
Yes there are some like Amazon.com that offer international shipments for some of their products (but not electronic items). For those products that they do ship internationally, you have no choice as to which carrier to choose. In short, a lot of avoidable cost is added to your bill.
With our Global Mail Program and our http://www.is-express.com/ website where you can register, shop, get shipping information, and in the future, track your shipment status, we bring the US to your doorstep.
International Shopping Express gives you a US address that can receive all your US orders! Simply have all your US orders ship to your US address which we will provide and we'll take care of the rest - international shipments, customs clearance (if applicable in your country), and local delivery to your home or office.
International Shopping Express has more than 5 years of experience in this e-commerce business and is part of MBE's network of over 4,000 centers worldwide, assuring that you receive your package quickly and safely - be it a piece of jewelry, the latest book from amazon.com, DVDs from your favorite online store, or that Palm Pilot bid that you won from Ebay.

Our vision and mission:
Make it easy for customers all over the world to purchase online in the U.S.A.
Offer fast, reliable, efficient and inexpensive service.
Reply quickly to emails from customers (within the same business day)
Enter all incoming packages during the same business day.
Send all outgoing packages within 1-2 business days.
Screw up as little as possible.
Getting some happy customers, which will recommend our service to others.
Fighting against fraud and helping merchants safely sell internationally.
Following are answers to some of the frequently asked questions.
Do I need to pay for registering with your company?
Do I have to pay a monthly fee to be registered?
Which Countries do you ship?

What is the maximum package size that I can ship?
Can you repack my packages?

Can I ship letters and magazines with your company?

How long can you keep my packages and is there a storage fee?

Can I use another company to ship my packages once they arrrive to your facility?

How do I find out how much it will cost to ship my packages?

How do I know if you have received a package for me?

Which address will I use to send my packages in USA?

Is your service door to door?

Who pays for the duties and taxes?

What if my package gets damaged during shipping?

Are there any restricted items that I can not ship?

How do I pay for my shipping cost?

Do you have any warranty?

Do I need to pay for registering with your company?
There is no fee to register with our company. Once you register, you will receive a suite number and an address which you will use as your address in the USA. Before we can accept any packages for you, we will need a copy of your picture ID which can be a driver's licence or a passport. e-mail to: mail@is-express.com
Back to Top
Do I need to pay a monthly fee to use your services?
We do not charge a monthly fee for using our services. The only fee you will be paying is the shipping cost of your packages. You can store your packages in our facility for a max of 30 days.
Back to Top
Which Countries do you ship?
We ship to over 200 countries all around the world.
Back to Top
What is the maximum package size that I can ship?
The maximum package size we can ship is 140" length plus girth. The max length is 110"
Back to Top
Can you repack my packages?
When you ship multiple packages, your shipping rate is calculated based on the total weight and volume of your packages. The number of your packages does not increase or decrease your shipping rate. When you make your purchases in the USA, we would recommend you to ask your supplier to pack your packages as small as possible because sometimes we receive merchandise packed in a much larger box than it is necessary. If you need us to repack your packages, we can do so for a fee of $10.00 per package.
Back to Top
Can I ship letters and magazines with your company?
Yes, you can. When you receive letters and magazines, you will receive an e-mail informing you about the details. We also offer Mail Scan service where you can ask for your mail to be scanned and e-mailed to you. The cost for this service is $5.00 for the first 3 pages and $1.00 for each additional page.
Back to Top
How long can you keep my packages and is there a storage fee?
We can keep your packages in our facility up to 30 days. Any package left more than 30 days will be considered abandoned and will be disposed of.
Back to Top
Can I use another company to ship my packages once they arrrive to your facility?
Once your packages arrive to our facility, you will need to ship them with one of our discounted shipping services like Fedex, DHL, UPS or GLS. To avoid any surprises, we would encourage you to get a shipping rate for your packages, prior to sending to our facility.
Back to Top
How do I find out how much it will cost to ship my packages?
You can get a price of shipping of your packages from our manager by e-mail.
Back to Top
How do I know if you have received any packages for me?
Once we receive a package for you, it is entered into our system and you will receive an e-mail with your package details including dimensions, weight and who it was shipped from.
Back to Top
Which address will I use to send my packages in USA?
Once you register with us, you will receive by e-mail your new address that you will use to send your packages to. Below is a sample address for customer named John Doe:
John Doe
14350 60th St North
Suite: 305
Clearwater FL. 33760
Back to Top
Is your service door to door?
Our shipping services are door to door including customs clearence, but not including duties and taxes.
Back to Top
Who pays for Customs duties and taxes?
You will pay for the duties and taxes. These fees will be collected from you when your packages are delivered to you. If the value of the package is high and requires a substantial amount of duties and taxes, our partners may contact you to secure the payment. Please make sure that, when sending a package, you are aware of the duties and taxes and are willing to pay it. If these fees are not paid, we will be billed for it in which case we will charge them to your credit card plus a 20% service fee.
Back to Top
What if my package gets damaged during shipping?
We take the utmost care of your packages during shipping, but it is possible that they might be damaged during shipping. It is very important to use sturdy packing materials like double walled cardboard boxes and protective fillers to insure the safety of the package contents. Each shipment carries a $300.00 insurance free of charge and if you need more insurance, you can purchase it online (Max $10,000.00). If your package gets damaged during shipping, you can file a claim by calling our customer service at 1(863) 226-1088. Your insurance amount can not be more than the value declared on your Commercial Invoice.
Back to Top
Are there any restricted items that I can not ship?
The following items are not acceptable for carriage to any international destinations unless otherwise indicated. (Additional restrictions may apply depending on destination. Various regulatory clearances in addition to customs clearance may be required for certain commodities, thereby extending the transit time. Please call DHL at 1-800-225-5345 and speak to an International Rep to find out if your item is restricted by Customs or contact the Customs at the recipients country. if you ship an item that is restricted or requires a special permit or license which unables the recipient to clear it through customs, the shipment will have to be returned back to the USA and you will be responsible for the return shipping charges.)
1. Human corpses, human organs or body parts, human and animal embryos, or cremated or disinterred human remains.
2. Explosives
3. Firearms, weaponry and their parts.
4. Perishable foodstuffs and foods and beverages requiring refrigeration or other environmental control. We only ship food items with FedEx or DHL. We can not ship any food items with GLS and UPS.
5. Live animals (including insects).
6. Plants and plant material, inc?uding cut flowers.
7. Lottery tickets and gambling devices where prohibited by local, state, provincial or national law.
8. Money (coins, cash, currency, paper money and negotiable instruments equivalent to cash such as endorsed stocks, bonds and cash letters).
9. Collectable coins and stamps.
10. Particularly valuable goods (e.g. precious metals and stones, jewelry and genuine pearls, objects of art, antiques).
11. Pornography.
12. Shipments* being processed under:
Duty drawback claims unless advance arrangements are made.
Temporary Import Bonds
U.S. State Department licenses.
Carnets.
U.S. Drug Enforcement Administration export permit.
Shipments destined to or being withdrawn from a Foreign Trade Zone.
Letters of Credit
Certificate of Registration shipments (CF4455).
Shipments moving into or out of Foreign Trade Zones or bonded warehouses.
Fish and Wildlife/CITES export permits.
13. Hazardous waste, including, but not limited to, used hypodermic needles or syringes or other medical waste.
14. Shipments that may cause damage to, or delay of, equipment, personnel or other shipments.
15. Shipments that require us to obtain any special license or permit for transportation, importation or exportation.
16. Shipments whose carriage, importation or exportation is prohibited by any law, statute or regulation.
17. Shipments with a declared value for customs in excess of that permitted for a specific destination. (See the Declared Value for Carriage and Limits of Liability section.)
18. Dangerous goods.
19. Dead animals (including insects) or animals that have been mounted.
20. Goods packed insufficiently and/or not standard forms of packaging.
21. Goods which require in any way particularly careful treatment (because they are e.g. particularly fragile or can only be transported upright or only lying on a certain side)
22. Packages that are wet, leaking or emit an odor of any kind.
Back to Top
How do I pay for my shipping cost?
You can pay for your shipping costs with a credit card, wire transfer or Western Union\MoneyGram transfer system. For credit card payments we will need you to fill out and fax us a Credit Card Authorisation form. We will need this form one time only, as long as you use the same credit card. You can download the Credit Card Authorisation Form.
Back to Top
Do you have any warranty?
We thrive to give our customers the best service for delivery of their packages. In case of damage to your packages during shipping we will reimburse you up to $300.00 per shipment up on inspection of the packages and approval of your damage claim.

Using International Shopping Express is as EASY as 1-2-3!
Step 1: SIGN-UP!
Send us request for a registration
Read the Terms of the Agreement;
Fill up the application form (including Credit Card Information) and submit);
Your Unique personal USA Address and Account Number will then be generated;
You will expect an e-mail confirmation of your application and a phone call from our customer service representative to confirm your account opening. We may ask for additional documentation as per our USA Headquarter and Bank Merchant requirements for credit card processing. Your credit Card is only to guarantee your shipments and will only be charged when your shipment is processed and ready to be forwarded to your desired destination;
If you don't recieve the account number, please email us. There are times when the server goes down for routine maintenance during the day;
With your own USA address, you become a "virtual US resident", allowing you to receive packages and documents. From your address, these packages and documents can then be sent to you in your home country.
Step 2: USE YOUR ADDRESS!
As part of the privileges of being a "US resident", you are now capable to shop in Internet sites that ship only within the US or who don't ship internationally. Now you can shop at Macys.com, bloomingdales.com, Buy.com, Reel.com, eBay.com, Amazon.com, etc. You can then have your packages shipped to your USA address given to you by International Shopping Express, which will then forward to you in your desired destination.
Tell people about your address! You can then receive your letters, documents and other packages sent to your US address, as if you were a resident of that country! You can use this address as shipping address when ordering from mail order catalogues, auctions, magazines, bank statements, etc.!
Step 3: CONFIRM
Once your package has arrived at your (US) address, our US Hub will receive, sort, inspect, process, prepare airway bills, and forward to you in your destination automatically if there are no problems in your shipments. However, we will notify you through email if there are some discrepancies or problems such as No Invoice/Value, Items not allowed to be shipped, damaged items or packaging, etc before we finally forward to you or return back to sender. We will compute your shipment charges and charge your credit card number before leaving the US Hub and forwarding your mails and packages to the final destination.
Upon arrival of your packages in your country's office, you will be informed of your packages and mails for you to pick up or be delivered to you (for a nominal fee).

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet

Fraud sites 9-21-11

2011-09-21T18:28:00.000-04:00

http://www.express-transs-europe.com/ FAKE FRAUD SCAM
http://whois.domaintools.com/express-transs-europe.com
24 ASHWIN STREET
LONDON
E8 3DL
UNITED KINGDOM
Phone: 0044 (742) 522-3234
Fax: 0044 (207)785-6860
For technical support and questions please contact us at the following e-mails:
Headquarters Office:
contact@expres-transs-europe.com office@expres-transs-europe.com
Romanian fraud site.
Scammers listing motorcycles and using fake shipping.

http://www.cargo-spedition.com/ FAKE FRAUD SCAM
http://whois.domaintools.com/cargo-spedition.com
Civic Centre Building
157 Station Road Harrow
HA1 2XF
London UK
Europe
Phone Number: +44 7979-4141-07
Fax Number: +44 (0)1234 391 672
TheInternational-CargoSpedition United Kingdom Offices
Level 18
204 Elizabeth St
Sydney South
Sydney
NSW 1235
Australia
theinternational-cargosp@london.com
Romanian fraud site.
Scammers listing cars on the internet and using fake shipping.

http://www.royal-shiper.com/ FAKE FRAUD SCAM

http://whois.domaintools.com/royal-shiper.com

Royal Shipper Ltd.
Registration No.: 06959107
Address:
48 Queen Anne Street
London
W1G 9JJ
United Kingdom
Contact:
support@royal-shiper.com
Phone:
(+44) 7551919329
Romanian fraud site.
Scammers listing cars and using fake shipping site.

http://www.superior-royalship.com/ FAKE FRAUD SCAM
http://whois.domaintools.com/superior-royalship.com
Superior Royalship
Registered Office
749 Mary Lane
Lewiston
NY 14092
United States
Tel: +1 (716) 754-72311
Romanian fraud site.
Scammers listing cars and using fake shipping and escrow.

Oh! what a tangled web we weave When first we practise to deceive! Sir Walter Scott NEVER use instant payment services like Western Union or MoneyGram to buy items on the internet