site Search:


 
    All Forums Hot Topics Gallery






how-to block ads


 
Search Topic:
Share Topic
Posting?
Post a:
Post a:
Links: ·Phish Tracker ·Anti-Phishing Work Group ·Avoid Phishing
AuthorAll Replies

music man
Premium
join:2008-08-12

reply to MGD

Re: Ebook websites, fraud charges, Devbill/DigitalAge/Pluto

@MGD

Great work fella!!

You may want to add the following to your list. Same format as all the rest from our eastern European "friends"

»sadi-q-themes.biz
»themobileclub.org
»allthebestforyou.biz
»www.sparecap.org

MGD
Premium,MVM
join:2002-07-31
kudos:9

said by music man:

@MGD

Great work fella!!

You may want to add the following to your list. Same format as all the rest from our eastern European "friends"

»sadi-q-themes.biz
»themobileclub.org
»allthebestforyou.biz
»www.sparecap.org
Thanks for the heads up music man See Profile

sadi-q-themes.biz, themobileclub.org, allthebestforyou.biz, sparecap.org are part of the same group that includes yourplproject.org 424-785-1586 and allforyounow.com aka ALL for you NOW 203-404-4852.

I will follow up with a detailed post on how the cyber-mules are being recruited. It appears once again that the criminals are instructing the cyber-mules to apply for the LLC via LegalZoom.com. That is a one stop shop where you can also apply for the EIN taxpayer ID from the IRS. In addition, NRAI National Registered Agents can then be used as a proxy LLC organizer. This will cloak the cyber-mules identity, much like a domain by proxy. Of course all of this is designed to make uncovering the cyber-mules, and closing down the operation more difficult. With this group, the crime syndicate also specifies the name of the LLC to be used. The name of the LLC will be totally unrelated to the website domain name, and as in the Globus / Photo / Mobile division, the LLC name will not be listed anywhere on the website. The only contact on the website will be the phone number.

Very smart indeed, but maybe not smart enough.

In order for this obfuscated set up to pass the merchant account vetting process, they will leave some credible connection. So far, the connections are that the area code of the contact number will match to the state where the LLC was registered. In addition, the domains have bogus registrations, they are fraudulent. The names used are not the people who registered the domains. However, to add credibility to the merchant application process the criminals will pick a random name and address that is within the same city or locale where the cyber-mule lives. Some of the registrants have been contacted, and confirmed that they did not register the domains. They have also checked their cards /bank accounts and so far do not appear to have been charged for the set up. it is possible, I presume, that the criminals could use an unrelated PayPal account to pay for the registration.

In the next post I will document the recruitment methods used for this operation.

SADI-Q-THEMES.BIZ 434-336-4079


»sadi-q-themes.biz
Snapped 2008-08-14 23:39:29

.

Domain Name: SADI-Q-THEMES.BIZ
Domain ID: D25870847-BIZ
Sponsoring Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Domain Status: clientTransferProhibited
Registrant ID: 68F4ABDA4EC
Registrant Name: ANNA GODFREY
Registrant Address1: 16540 Cedar Run Drive
Registrant City: Orlando
Registrant State/Province: FL
Registrant Postal Code: 32838
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.3256543365
Registrant Email: kymail23@gmail.com
Name Server: NS1.HOSTM.NET
Name Server: NS2.HOSTM.NET
Name Server: NS3.HOSTM.NET
Created by Registrar: ENOM, INC.
Domain Registration Date: Tue Jul 01 19:23:52 GMT 2008

.
.

THEMOBILECLUB.ORG 231-225-0410


»www.themobileclub.org/
Snapped 2008-08-14 23:49:11

.

Domain ID:D153477975-LROR
Domain Name:THEMOBILECLUB.ORG
Created On:29-Jul-2008 19:07:09 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:de9081f97df
Registrant Name:Dian Murray
Registrant Organization:themobileclub
Registrant Street1:5803 Bonnerton Rd
Registrant Street2:
Registrant Street3:
Registrant City:Edward
Registrant State/Province:NC
Registrant Postal Code:27821
Registrant Country:US
Registrant Phone:+1.2523225436
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:aluna864@gmail.com
Name Server:DNS1.REGISTRAR-SERVERS.COM
Name Server:DNS2.REGISTRAR-SERVERS.COM
Name Server:DNS3.REGISTRAR-SERVERS.COM

.
.

ALLTHEBESTFORYOU.BIZ 904-425-1621


»allthebestforyou.biz
Snapped 2008-08-14 23:39:11



Domain Name: ALLTHEBESTFORYOU.BIZ
Domain ID: D24827737-BIZ
Sponsoring Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Domain Status: clientTransferProhibited
Registrant ID: A32DA259FBB
Registrant Name: Aaron Small
Registrant Organization: -
Registrant Address1: 140 Claudia Dr
Registrant City: Jacksonville
Registrant State/Province: FL
Registrant Postal Code: 32218
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.9044251621
Registrant Email: AaronSma33@gmail.com
Name Server: NS1.HOSTM.NET
Name Server: NS2.HOSTM.NET
Name Server: NS3.HOSTM.NET
Created by Registrar: ENOM, INC.
Domain Registration Date: Mon May 05 21:40:38 GMT 2008

.
.

SPARECAP.ORG 208-629-8051


»www.sparecap.org
Snapped 2008-08-14 23:38:54



Domain ID:D152175941-LROR
Domain Name:SPARECAP.ORG
Created On:28-Mar-2008 18:41:07 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:4abcdd5a8f3
Registrant Name:Carmen Mercado
Registrant Organization:Mecosta
Registrant Street1:14345 90th Ave
Registrant Street2:
Registrant Street3:
Registrant City:Mecosta
Registrant State/Province:MI
Registrant Postal Code:49332
Registrant Country:US
Registrant Phone:+1.2319726108
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:snelson071@gmail.com
Name Server:NS.DNSPROTECT.COM
Name Server:NS2.DNSPROTECT.COM


MGD

Wednesday, 30-May 10:05:17 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online © 1999-2012 dslreports.com.
Most commented news this week
Hot Topics