Difference between revisions of "Flash Mob 15 Target Details"
| Line 166: | Line 166: | ||
* Does this look familiar? It should; it's a clone of ics-expressdeliveries.co.uk -- another fake courier hosted by the same company. The two also share the same putative address. | * Does this look familiar? It should; it's a clone of ics-expressdeliveries.co.uk -- another fake courier hosted by the same company. The two also share the same putative address. | ||
| − | * The fakers stole text from this legitimate courier's Web site: http://www.orbital-express.co.uk/ -- adding a fake package tracking system to the stolen content. | + | * The fakers stole most of their text from this legitimate courier's Web site: http://www.orbital-express.co.uk/ -- adding a fake package tracking system to the stolen content. |
* Despite claiming to be located in Britain, this firm is not listed with Companies House: http://www.companieshouse.gov.uk/ | * Despite claiming to be located in Britain, this firm is not listed with Companies House: http://www.companieshouse.gov.uk/ | ||
Revision as of 17:22, 17 November 2006
Contents
- 1 What are these sites?
- 2 fortunesweepstakes.co.uk
- 3 everbrighttrust.com
- 4 alexanderattorneys.org
- 5 diplomaticcargovoyage.com
- 6 globalcredituk.com
- 7 langalbertchambers.com
- 8 lavegardesecurity.net
- 9 transglobefins.com
- 10 asianetbank.com
- 11 ics-expressdeliveries.co.uk
- 12 bohaitrust.com
- 13 skyexpressdelivery.co.uk
- 14 robo.org.uk
- 15 rdut-online.com
- 16 atlantcargo.com
- 17 samegalotterys.com
- 18 crystal.profil.cn
- 19 realfastshoping.com
What are these sites?
These are fakers that web hosts haven't bothered to take down. They're happy to let fraud run free on their servers, despite overwhelming evidence that these companies aren't real. Take a look over some of these sites for yourself... given the facts, would YOU want to do business with them?
fortunesweepstakes.co.uk
Fortune Sweepstakes Email Verification Department
IP: 83.170.64.96 => ultra6.uk2.net => UK2.NET => ripe@uk2.net, abuse@uk2.net
The first complaint about this site was sent on 2 November 2006.
http://db.aa419.org/fakebanksview.php?key=10118
- Evidence
- Evidence
- Evidence
everbrighttrust.com
Everbright Trust Finance & Security and Delivery Services
IP: 218.66.104.248 => Chinanet => abuse@fjdcb.fz.fj.cn
The first complaint about this site was sent on 29 May 2006!
http://db.aa419.org/fakebanksview.php?key=7552
- Insecure (no SSL) online banking here: http://www.everbrighttrust.com/accessmenu.htm
- No legitimate bank would ever use insecure logins.
- This "bank" is not registered with the Chinese authorities, which is
absolute proof (if it were needed) of its fake, criminal nature.
alexanderattorneys.org
194.106.33.35 => server0001.freedom2surf.net => Freedom To Surf Ltd => abuse@freedom2surf.net,abuse@nildram.net, abuse@pipex.net
The first complaint about this fake barrister was sent 13 July 2006.
http://db.aa419.org/fakebanksview.php?key=8344
- Evidence
- Evidence
- Evidence
diplomaticcargovoyage.com
Diplomatic Cargo Voyage Services Inc.
66.29.40.210 => ns1.macfonse.com => Net Access Corporation => abuse@nac.net
The first complaint about this fake barrister was sent 19 September 2006.
http://db.aa419.org/fakebanksview.php?key=9375
- Evidence
- Evidence
- Evidence
globalcredituk.com
Global Credit Bank Online aka Global Credit Bank and Trust Company
61.151.239.39 => Chinanet => abuse@public.xz.js.cn, abuse@pub.xz.jsinfo.net
The first complaint about this site was sent 5 June 2006.
http://db.aa419.org/fakebanksview.php?key=6448
- Evidence
- Evidence
- Evidence
langalbertchambers.com
Nkosijabu & Chambers Association "Legal Services Shop"
218.66.104.248 => Chinanet => abuse@jsinfo.net, spam@jsinfo.net, abuse@fjdcb.fz.fj.cn
The first complaint about this site was sent 13 July 2006.
http://aa419.org/fake-banks/fakebanksview.php?key=7576
- Evidence
- Evidence
- Evidence
lavegardesecurity.net
84.246.225.130 => ns1.dns26.net => Hosting ELB Multimedia => ???
The first complaint about this site was sent 3 September 2006.
http://db.aa419.org/fakebanksview.php?key=9080
- Evidence
- Evidence
- Evidence
transglobefins.com
Transglobe Finance Security and Delivery International
61.151.239.151 => Chinanet => anti-spam@ns.chinanet.cn.net???
The first complaint about this site was sent 1 July 2006.
http://db.aa419.org/fakebanksview.php?key=7728
- Evidence
- Evidence
- Evidence
asianetbank.com
218.30.114.152 => ns1.dns.com.cn => Chinanet => ???
The first complaint about this site was sent 6 November 2006.
http://db.aa419.org/fakebanksview.php?key=6242
- Evidence
- Evidence
- Evidence
ics-expressdeliveries.co.uk
83.170.64.73 => ultra9.uk2.net => UK2.NET => ripe@uk2.net, abuse@uk2.net
The first complaint about this site was sent 1 November 2006.
http://db.aa419.org/fakebanksview.php?key=10068
- Does this look familiar? It should; it's a clone of skyexpressdelivery.co.uk -- another fake courier hosted by the same company. The two also share the same putative address.
- The fakers stole text from this legitimate courier's Web site: http://www.orbital-express.co.uk/ -- adding a fake package tracking system to the stolen content.
- Despite claiming to be located in Britain, this firm is not listed with Companies House: http://www.companieshouse.gov.uk/
bohaitrust.com
Bohai Trust Finance & Security Delivery Services
61.145.116.173 => dns.cnmsn.net => Chinanet => ???
The first complaint about this site was sent 14 June 2006.
http://db.aa419.org/fakebanksview.php?key=7899
- This site refers to flashmob target http://www.everbrighttrust.com .
The faker copied the text from that site, and forgot to edit the names of their fake companies. http://www.everbrighttrust.com claims to be both a bank and a courier service. No such thing exists in the real world.
- Insecure (No SSL) online banking here: http://www.bohaitrust.com/ac.htm
- No genuine bank anywhere offers online banking without SSL, of course.
- Not registered with the Chinese banking authorities.This is the most damning evidence of all, and proves absolutely that this "bank" is fake.
skyexpressdelivery.co.uk
83.170.64.74 => ultra1.uk2.net => UK2.NET => ripe@uk2.net, abuse@uk2.net
The first complaint about this site was sent 3 November 2006.
http://db.aa419.org/fakebanksview.php?key=10220
- Does this look familiar? It should; it's a clone of ics-expressdeliveries.co.uk -- another fake courier hosted by the same company. The two also share the same putative address.
- The fakers stole most of their text from this legitimate courier's Web site: http://www.orbital-express.co.uk/ -- adding a fake package tracking system to the stolen content.
- Despite claiming to be located in Britain, this firm is not listed with Companies House: http://www.companieshouse.gov.uk/
robo.org.uk
83.170.64.71 => ultra1.uk2.net => UK2.NET => ripe@uk2.net, abuse@uk2.net
The first complaint about this site was sent 11 November 2006.
http://db.aa419.org/fakebanksview.php?key=10392
- Not registered, although they claim a UK address: http://www.fsa.gov.uk/register/
- Originally http://www.robo.org.uk, url changed to avoid being shut down. What legitimate bank acts like that?
- See the ridiculous fees for opening accounts here http://www.robo.org.uk/default/accnewaction.html
Logo from the fake site. The North/South rotation, like the "bank", is nothing like the real world :)
rdut-online.com
205.209.113.214 => ns1.digitalsofthosting.net => Host Department LLC => ???
The first complaint about this site was sent 17 October 2006.
http://db.aa419.org/fakebanksview.php?key=9871
- This site claims to offer both "haulage" and banking. Companies in the real world don't offer this bizarre combination of services. Only in the world where trunkboxes filled with the millions left by ex-dictators do such companies exist.
- The "online banking" is not protected by SSL: http://www.rdut-online.com/login.htm
- Their telephone number resolves to a cell phone.
- They are not listed by the Dutch authorities, although they claim to be located in the Netherlands: http://www.dnb.nl/dnb/pagina.jsp?pid=tcm:13-45525-64 -- the surest sign that this "bank" is fake.
atlantcargo.com
66.29.87.186 => ns7.myhostnet.net => Net Access Corporation => abuse@nac.net
The first complaint about this site was sent 17 October 2006.
http://db.aa419.org/fakebanksview.php?key=9876
- Evidence
- Evidence
- Evidence
samegalotterys.com
71.18.29.192 => ns5.hostexcellence.com => Hosting-Network GmbH => abuse@ecommerce.com
The first complaint about this site was sent 29 October 2006.
http://db.aa419.org/fakebanksview.php?key=8179
- Real lotteries are not e-mail based and require you to pay to enter.
- Winners of this "lottery" are supposed to verify their status by entering their supposed winning number online. Real lotteries verify winners' identities through rather more robust channels. Moreover, the online verification form is not secure: http://www.samegalotterys.com/Verification%20page.html -- so others online could intercept your "winning" number -- and you can only enter one of two numbers! (I guess only two people entered this lottery!)
- The telephone number listed on the site belongs to a cell phone.
- The page is riddled with typos, e.g., "This can winyou extra prizes. If some or all the six numbers you havemarked on any one board matches these numbers on the Ticket attached to your E-mail address, youcan win a prize in one of seven Prize Divisions shown here."
crystal.profil.cn
205.209.101.51 => Host Department LLC => http://profil.cn/reportabuse.php
The first complaint about this site was sent 21 July 2006.
http://db.aa419.org/fakebanksview.php?key=8563
- Evidence
- Evidence
- Evidence
realfastshoping.com
207.155.252.97, 207.155.252.219, 207.155.252.14, 207.155.248.14 => XO Communications => abuse@xo.com
The first complaint about this site was sent 30 October 2006.
http://db.aa419.org/fakebanksview.php?key=10180
- Evidence
- Evidence
- Evidence
