Topic 'Re: [Spam] Kanicn' in forum 'Scam and Phishbusters' - dslreports.com

Re: [Spam] Kanicn

Thu, 07 Jan 2010 17:44:53 EDT

Doctor Four posted : Found this bit on Slashdot - it appears as though Chinese scammers (like Kanicn and others of its ilk) have been hacking into Hotmail accounts and setting the auto-reply to spam "discounted" electronics.

»tech.slashdot.org/article.pl?sid···/2049224

There have been some other topics about this here and in the Security forum in the last several months.
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)

Re: [Spam] Kanicn

Thu, 03 Dec 2009 17:51:37 EDT

Whip posted : Another new one:

xinhaiyuanonline.com

quote:
Registration Service Provided By: Huipu Business
Contact: ym@wz88.com
Visit: »ym.wz88.com

Domain name: XINHAIYUANONLINE.COM

Registrant Contact:
YNZG Domain Register Center
Yong Liu ()

Fax:
No.39, Yongquan Lane, Shiba District
Ruian, ZHEJIANG 325200
CN

Administrative Contact:
YNZG Domain Register Center
Yong Liu (enometp@gmail.com)
+86.57765820533
Fax: +86.57765820555
No.39, Yongquan Lane, Shiba District
Ruian, ZHEJIANG 325200
CN

Technical Contact:
YNZG Domain Register Center
Yong Liu (enometp@gmail.com)
+86.57765820533
Fax: +86.57765820555
No.39, Yongquan Lane, Shiba District
Ruian, ZHEJIANG 325200
CN

Status: Locked

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 26 Nov 2009 14:14:05
Expiration date: 26 Nov 2010 14:14:05

[imaging now]

Snapped

And of course:

[imaging now]

Snapped

Re: [Spam] Kanicn

Mon, 30 Nov 2009 13:53:44 EDT

K Patterson posted : Accepts wire transfer, Western Union, or Moneygram.

Absolutely fraudulent.

Re: [Spam] Kanicn

Mon, 30 Nov 2009 12:25:16 EDT

ladisko posted : Hi guys, what about this one? Probably another shit...

»www.maikongs.com/

Thx

Re: [Spam] Kanicn

Thu, 05 Nov 2009 03:35:54 EDT

ladisko posted : Hi,
just add a comment to let you know the another one wich I didn't notice in the summary of scam sites mentioned before so here it is:

»www.qqqtrade.com/

See ya

Re: [Spam] Kanicn

Tue, 03 Nov 2009 15:54:21 EDT

Doctor Four posted : BIZCN is rapidly gaining a reputation for being a haven for scams and fake security sites alike.

So I am not surprised to see the latest Kanicn clone show up as a registrant there.

As MGD noted in the Gawker thread,

said by MGD :
Cyber criminals could be crippled for an extended period if ICANN would revoke registration privileges for BIZCN.COM and DIRECTI. If that were combined with an organized campaign to null route all traffic from a half dozen AS's, that would only leave the rogue banking system to be addressed in order to have a significant impact on this rogueware pandemic.

As long as it still generates enormous income, expect what happened with Gawker to become the norm. They only need a nominal success rate with fake add campaigns to be very effective. Also note that in many of these rogue adds there are geo ip scripts running, so that the criminals can target visitors by location, while showing the regular add to others.

»Gawker(.com) Scammed By Malware Crew Pretending To Be Spark
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)

Re: [Spam] Kanicn

Tue, 03 Nov 2009 14:20:45 EDT

BRONXBABE posted : I HAD ORDERED FROM ALLRIGHTTRADE.COM. IN CHINA. SENT WIRE MONEY. NOW THEY DON'T ANSWER EMAILS, NO MORE ONLINE CHAT AND TOOK PAYMENT INFO OFF SITE. I'VE BEEN SCAMMED. ANYBODY ORDERED FROM THEM

Re: [Spam] Kanicn

Mon, 02 Nov 2009 07:16:33 EDT

nwrickert posted : The domain was recently registered:


   Domain Name: EVCBXD.COM
   Registrar: BIZCN.COM, INC.
   Whois Server: whois.bizcn.com
   Referral URL: http://www.bizcn.com
   Name Server: NS10.CDNCENTER.COM
   Name Server: NS11.CDNCENTER.COM
   Name Server: NS12.CDNCENTER.COM
   Name Server: NS7.CDNCENTER.COM
   Name Server: NS8.CDNCENTER.COM
   Name Server: NS9.CDNCENTER.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 09-oct-2009
   Creation Date: 09-oct-2009
   Expiration Date: 09-oct-2010

There's no web record that I can find. A google search turned up only a report that it is a fraud site.

so that's a probably some new scam site

It sure looks suspicious.

--
AT&T Uverse; Zyxel NBG334W router (behind the 2wire gateway); openSuSE 11.0; firefox 3.0.14

Re: [Spam] Kanicn

Mon, 02 Nov 2009 04:28:48 EDT

ladisko posted : Hi guys,
so that's a probably some new scam site with funny ebay lookin appearance:D:D....

»www.evcbxd.com/

Let's check it

Re: [Spam] Kanicn

Sat, 31 Oct 2009 15:09:16 EDT

Doctor Olds posted :

said by ladisko:

Thanks guys, now I know why the eBay is such a good friend of PayPal company:))

eBay has owned PayPal since 2002

PayPal
»pages.ebay.com/aboutebay/thecomp···iew.html

quote:
Founded in 1998 and acquired by eBay Inc. in October 2002, PayPal enables any individual or business with an email address to securely, easily and quickly send and receive payments online. PayPal's service builds on the existing financial infrastructure of bank accounts and credit cards and uses the world's most advanced proprietary fraud prevention systems to create a safe payment solution. A global leader in online payment solutions, PayPal has tens of millions of registered accounts and is accepted by millions of merchants worldwide, on and off eBay.

--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

Re: [Spam] Kanicn

Sat, 31 Oct 2009 14:27:38 EDT

ladisko posted : Thanks guys, now I know why the ebay is such a good friend of paypal company:))

Re: [Spam] Kanicn

Sat, 31 Oct 2009 10:50:38 EDT

Doctor Olds posted :

said by ladisko:

I'll add my experience which I have just with one Chinese seller which does the business with clothing and I've to say I'm satisfied as they're offering PayPal payment and quite reasonable prices...I don't know what to say because I see that a hundreds of such a liars're trying to get money from us and are located on several servers, so maybe I was lucky to find this one...he was originally selling on the ebay and after I bought an item there was a visiting card with his web site in the package I received...

BUT what I want to tell and ask same way is...could it be a rule that if the seller provide also a PayPal payment method, then I can consider it to be "quite" safe or not???
...
because please amend my opinion but PayPal is eligible to return your money if there is a doubt about the transaction...so I think if I buy something from the potential scammer and I pay via PayPal and the doubts appear it's possible I get my money back??

PayPal.com offers buyers protections when buying through eBay.com and I do not think it covers anywhere else so you likely are not covered by the same guarantee using PayPal.com at any 3rd party web site.

PayPal Buyer Protection
»pages.ebay.com/help/buy/PayPal-b···ion.html
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

Re: [Spam] Kanicn

Sat, 31 Oct 2009 10:25:38 EDT

nwrickert posted : Wow! That did not make a lot of sense.

Rule for shills: At least be clear on what it is that you are shilling for.

Rule for spammers: At least be clear on what you are spamming.
--
AT&T Uverse; Zyxel NBG334W router (behind the 2wire gateway); openSuSE 11.0; firefox 3.0.14

Re: [Spam] Kanicn

Sat, 31 Oct 2009 09:04:42 EDT

ladisko posted : Hi,
so I hope guys anyone will response to my add...so actually I'm glad that I firstly read about this scammers and suckers before I decide to purchase or send money...as I've read all your reports...

I'll add my experience wich I have just with one chinese seller wich does the business with clothing and I've to say I'm satisfied as they're offering paypal payment and quite reasonable prices...I don't know what to say because I see that a hundreds of such a liars're trying to get money from us and are located on several servers, so maybe I was lucky to find this one...he was originaly selling on the ebay and after I bought an item there was a visiting card with his web site in the package I received...

BUT what I want to tell and ask same way is...could it be a rule that if the seller provide also a paypal payment method, then I can consider it to be "quite" safe or not???
...
because please amend my opinion but paypal is eligible to return your money if there is a doubt about the transaction...so I think if I buy something from the potentional scammer and I pay via paypal and the doubts appear it's possible I get my money back??

and the second I would ask is there any seller offering the eletronics for a retail prices at all?? or all this stuff is only a band of stupid spammer and don't hesitate to say criminals??

Hope someone will respond

Re: [Spam] Kanicn

Tue, 22 Sep 2009 09:54:15 EDT

nwrickert posted :

said by maxidela:

does anyone knows if this site is a scam too? »www.ffe2.com/

The domain was registered in March this year.


   Domain Name: FFE2.COM
   Registrar: BIZCN.COM, INC.
   Whois Server: whois.bizcn.com
   Referral URL: http://www.bizcn.com
   Name Server: NS1.4EVERDNS.COM
   Name Server: NS2.4EVERDNS.COM
   Status: clientDeleteProhibited
   Status: clientTransferProhibited
   Updated Date: 03-mar-2009
   Creation Date: 03-mar-2009
   Expiration Date: 03-mar-2010

It appears to have Chinese ownership. Among other things, that means that if they cheat you, then you probably won't be able to sue them.

Personally, I would not do business at that site.

--
AT&T dsl; Speedstream 5100b modem; Zyxel NBG334W router; openSuSE 11.0; firefox 3.0.14

Re: [Spam] Kanicn

Tue, 22 Sep 2009 09:34:28 EDT

maxidela posted : does anyone knows if this site is a scam too? »www.ffe2.com/

Re: [Spam] Kanicn

Sun, 16 Aug 2009 11:32:08 EDT

Whip posted : Guess I can add this here:

efeatrade.com

»scam.com/showthread.php?p=792465#post792465

quote:
Domain Name.......... EFEATRADE.COM
Creation Date........ 2009-06-25 09:43:38
Registration Date.... 2009-06-25 09:43:38
Expiry Date.......... 2010-06-25 09:43:38
Organisation Name.... gaobin
Organisation Address. putianshiguanghualuxingyuandaxia307shi
Organisation Address.
Organisation Address. Putian
Organisation Address. 351100
Organisation Address. FJ
Organisation Address. CN

Admin Name........... gaobin
Admin Address........ putianshiguanghualuxingyuandaxia307shi
Admin Address........
Admin Address........ Putian
Admin Address........ 351100
Admin Address........ FJ
Admin Address........ CN
Admin Email.......... info@dingdian.cn
Admin Phone.......... +86.5946987287
Admin Fax............ +86.5946987287

Tech Name............ gaobin
Tech Address......... putianshiguanghualuxingyuandaxia307shi
Tech Address.........
Tech Address......... Putian
Tech Address......... 351100
Tech Address......... FJ
Tech Address......... CN
Tech Email........... info@dingdian.cn
Tech Phone........... +86.5946987287
Tech Fax............. +86.5946987287

Bill Name............ gaobin
Bill Address......... putianshiguanghualuxingyuandaxia307shi
Bill Address.........
Bill Address......... Putian
Bill Address......... 351100
Bill Address......... FJ
Bill Address......... CN
Bill Email........... info@dingdian.cn
Bill Phone........... +86.5946987287
Bill Fax............. +86.5946987287
Name Server.......... ns2.dns.com.cn
Name Server.......... ns1.dns.com.cn

BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
IP Address: 205.209.148.137 (ARIN & RIPE IP search)
IP Location: US(UNITED STATES)-NEW YORK-NEW YORK
Lock Status: clientTransferProhibited
DMOZ no listings
Y! Directory: see listings
Data as of: 23-Apr-2008

»efeatrade.com/company/?Payment-32.html

quote:
We prefer western union most, which is the fastest way.

Western Union and Moneygram

www.westernunion.com and www.moneygram.com , Please let us know the MTCN (Money Transfer Control Number); total currency amount; sender information after you make payment by western union or moneygram.

Re: [Spam] Kanicn

Wed, 01 Jul 2009 17:25:23 EDT

Doctor Four posted : I thought for a minute that my Yahoo email had gotten one of these, as it had a Chinese sounding name in the subject, and a hotmail.co.uk from address, but it turned out to be an ordinary 419.
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)

Re: [Spam] Kanicn

Wed, 01 Jul 2009 01:01:37 EDT

MGD posted :

said by lipe000 :

...Hello,

Sorry about my poor english, it is beacause I live in Brazil.
....
..
He said I will never more see the money, so I decided to say to everybody who they really are. Let's put it up!!!

The store that I bought was: kiecy.com
it has another one: seiol.com

Add it to your list... It is growing quickly ahh!!!

Thank you

Thank you for posting and alerting everyone about the kiecy.com and seiol.com fraud.

Both are hosted on dedicated IPs at GoDaddy. While GoDaddy is very slow to remove websiotes for fraud. These fake hijacked logos should qualify for immediate termination. Complaints to the related entities would surely hasten that process. All are just forged fixed images:

[att=1]

From the FAQ on the fraud site Seiol.com:

Question: Is it safe to buy online from you?

Answer: Yes

They must have stole that from the little red riding hood story !!

The kiecy.com fraud site lists a unique Chinese business registration number ICP:05061904

--------------------------------------
Copyright 2009 kiecy.com. All Rights Reserved. kiecy.com
Tel:+86-377-65572905 Fax:+86-377-65572905
Email:service@kiecy.com ICP:05061904
--------------------------------------

Thousands of other fraud websites lists that same unique number:
»www.google.com/search?hl=en&q=%2···oq=&aqi=

The fraud scam site Seiol.com forgot to remove their other name:
--------------------------------------
»www.huxry.com
MSN/E_mail:service@huxry.com
Tel:+86 371 61253101

There are some method you can try when you have difficulty:
1. Read the help information by click the links in the left;
2. Contact Us, We would respond to you as soon as possible.

Tel:+86 377 77645473
Email:service@Seiol.com
Fax:+86 371 77645473
MSN:service@Seiol.com
Address:NO.168, Huayuan Road,ZhengZhou 450008,Henan Prov., China Zip Code:450000

--------------------------------------
»www.google.com/search?hl=en&q=%2···oq=&aqi=

--------------------------------------
www.kiecy.com
here is our bank information:

Beneficiary
Hu Xu
First Name: Hu
Last Name: XU

Beneficiary Address
NO.40, HuaYuan Road, ZhengZhou 450008, Henan Prov., China

Bank Name
Bank of china henan NanYang branch ZhongZhou road subbranch.

Swift Code
BKCH CN BJ 530

Bank Account
6285 8602 0003 513

Country
China
--------------------------------------

»www.kiecy.com/admin/ad_login.asp

Hu XU, I imagine there must be numerous IDs with that name on them.

MGD

Re: [Spam] Kanicn..shhkkj.com

Tue, 30 Jun 2009 22:40:38 EDT

MGD posted :

said by K Patterson:

Man, I have got to get a new monitor - I thought you were talking about pantystore.com

LOL!,

A new monitor may not necessarily correct that problem. Of course that assumes that you even consider the discrepancy to be a problem in the first place. :)

MGD

Re: [Spam] Kanicn..shhkkj.com

Tue, 30 Jun 2009 20:59:16 EDT

K Patterson posted : Man, I have got to get a new monitor - I thought you were talking about pantystore.com

Re: [Spam] Kanicn

Tue, 30 Jun 2009 19:34:59 EDT

anon posted :

said by legendNYC:

This arrived today from a relative's Yahoo.com addy, sent to all contacts:

Subject: New shopping new life

Dear friend,
I would like to introduce a really good company that mainly do the electornic products trade.
Now the company is doing promotion,all of it's products are sold nearly as same as their cost.
It redeners the best service to customers,it provide you original products which is good quality,and what's more,the pricewill give you a big surprise!
It is realy a good opportunity for doing shopping.Just grasp the opportunity,or there will be no more than that!
The web address: www.kanicn.com

Google found this: »windowslivehelp.com/community/t/43026.aspx

We've determined that this issue is caused by Malware.
The product team is currently looking into this issue further, we'll keep you updated on this.
In the meantime, please visit our solution blog for more info on how to enhance your account's security.

Hello,

Sorry about my poor english, it is beacause I live in Brazil.
I have been e-mailled for several times by a Kiecy guy who told me that they had the biggest deal wondering Iphones!!!
So i e-mailled him asking for a Paypal payment, and he asnwered me saying that it would just be acepted if I buy more than 10000 euros.
So I doubted. My relative is a diplomat working for the brazilian government in China. I did a trial sending them 288, dollars, and just after sending the money a asked for my tracking number, and I did'nt get any response.
What did I do??? Asked my aunt to have a closer look into it. He phoned me saying this is a globalized scamm in which more than 4000 people are involved, from every piece of the whole world.
And I asked about the bank account, and he said they have more the a hundred of them... It is possible for locating them and sueding also, we have to contact to the bank and ask for theirs full "true" name and adress. He said even the big ones are involved!!!

He said I will never more see the money, so I decided to say to everybody who they really are. Let's put it up!!!

The store that I bought was: kiecy.com
it has another one: seiol.com

Add it to your list... It is growing quickly ahh!!!

Thank you

Re: [Spam] Kanicn..shhkkj.com

Tue, 30 Jun 2009 19:02:55 EDT

MGD posted :

said by krc :

thanks k mpatterson because i was im this irene person...they even offered to send half of payment..just to trust them...any evidence of them scamming?? please advise

shhkkj.com are 100% guaranteed Chinese criminal scammers. There is absolutely no doubt about that.

They, like the thousands of other identical fraud sites operated from China are not selling any products. All they want to do is steal your money. That is why they are offering to accept half up front. They will never ship you anything, and will keep asking for more money.

The fraud website shhkkj.com

[att=1]

quote:
Contact Information:

If you have any questions about the item you already bought, exchange,

refund or any technical problems, please email us at our customer

support email:

shhkkj@188.com

paritystore@yahoo.com.cn

We'll reply as soon as possible and no late than 24 hours. If you

want to buy our products and have any question about the price, product

features, etc.. Please contact our online sales representatives at.

MSN: paritystore@hotmail.com

Or call them at 80082008800. They will help to answer any of your

questions. You also can click the Leave message button below to leave a

message online.

has cross reference contact info that is also listed on the fraud website paritystore.com

[att=2]

quote:
Contact Information:

If you have any questions about the item you already bought, exchange,

refund or any technical problems, please email us at our customer

support email:

shhkkj@188.com

paritystore@yahoo.com.cn

We'll reply as soon as possible and no late than 24 hours. If you

want to buy our products and have any question about the price, product

features, etc.. Please contact our online sales representatives at.

MSN: paritystore@hotmail.com

Or call them at 80082008800. They will help to answer any of your

questions. You also can click the Leave message button below to leave a

message online.

Just a small sample from those that have been ripped off: 2,000 Euro and 232 GB Pounds:

quote:
I have been very recently scammed by this website (2000 Euro lost!):

>http://www.paritystore.com

Be carefull

This website has been created in march 2009

All the informations provided on this site are wrong except there western union ID and banking informations!

As I was anxious about the delivery, they sent me a actual DHL tracking number (and I received a very nice advertising brochure for a chinese printer)

Don't buy before checking carefully your supplyer!

If you have been scammed with the same website, I suggest we keep in touch to organize our actions plan

--------------------------------------------------------
--------------------------------------------------------

Hiya,

I have just been ripped off by the same company, Same Yun chun Xu. 232 GBP

EMS numbers - Same story,

Held in Customs wanted 80 euro extra, I offered to pay the customs direct via credit card, they refused to give me the customs declaration number to pay it. No replies to emails.

I have sent an email to gaj110@shanghai.gov.cn as you listed. did you get any money back?

Ref: »resources.alibaba.com/topic/5028···tore.htm

Is that enough to convince you that they will steal your money ?? There are thousands of these fraud websites operated by Chinese criminals.

NEVER EVER SEND CASH MONEY UP FRONT, BANK WIRES AND MONEY GRAM / WESTERN UNION SHOULD NEVER BE USED FOR PURCHASES

MGD

Re: [Spam] Kanicn..shhkkj.com

Mon, 29 Jun 2009 13:34:51 EDT

anon posted : thanks k mpatterson because i was im this irene person...they even offered to send half of payment..just to trust them...any evidence of them scamming?? please advise

Re: [Spam] Kanicn

Thu, 25 Jun 2009 01:59:06 EDT

Doctor Four posted : These scammers seem to be creating new domains almost as fast as the Zlob gang were doing when that trojan first came out.
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)

Re: [Spam] Kanicn..shhkkj.com

Wed, 24 Jun 2009 17:58:57 EDT

K Patterson posted : Absolutely a scam.

Re: [Spam] Kanicn

Wed, 24 Jun 2009 17:25:33 EDT

RMCNet posted : »i43.tinypic.com/2mz9zwg.jpg newest email
X-Originating-IP: [115.49.34.57] ip that hes emailing from

Re: [Spam] Kanicn..shhkkj.com

Wed, 24 Jun 2009 16:02:29 EDT

anon posted : Is this site a scam? pleasr advise..I'm trying to order dj equipment but they won't allow paypal or cc..they only say yuo have to purchase 5 or more products b4 you become vip...also this is their contact info::
2. The payment way .western union or Bank wire Transfer
The method of Wester Union :
The Western Union address is as belowes:
-My first name is: Yun chun
-My last name is: Xu
-City: Shanghai
-Country:China
-Post code :200023
-Address: Number570,huaihai Road,shanghai China
-We will need the following information from you after
you have sent the payment:
-Money Transfer Control Number (MTCN)
-Senders Name and shipping information
-Item name

The method of Bank wire Transfer :
BANK OF CHINA
Bank wire Transfer

-Bank name:BANK OF CHINA NANYANG BRANCH HENAN PROVINCE P.R.CHINA

-Address:NO.59,zhongzhou Road,nanyang China
-A/C holder's name: Yun chun Xu
-A/C No.: 628573020002213
-Swift code: BKCH CN BJ 530

3.When we confirm your payment we will send20your product to you immediately. After that we will send to you the tracking number. Please let me know when you finish your payment and send your detail address.
Happy shopping.
Best regards.
Irene.

--------------------------------------------------------------------------------
ºÃÍæºØ¿¨µÈÄã·¢£¬ÓÊÏäºØ¿¨È«ÉÏÏß£¡

--------------------------------------------------------------------------------
Save energy, paper and money -- get the Green Toolbar.

--------------------------------------------------------------------------------
ºÃÍæºØ¿¨µÈÄã·¢£¬ÓÊÏäºØ¿¨È«ÐÂÉÏÏß£¡

Re: [Spam] Kanicn

Tue, 23 Jun 2009 23:55:34 EDT

MGD posted : Tell them that you really want to place the order, but you would like to check some references. Ask them for the email address of a prior customer from the US who you could request a transaction reference from. Explain that this is a necessary procedure because they will not accept forms of payment that have recourse. In order to send cash you must be able to check references for prior successful orders from the US. If you can obtain good references you may even increase your order.

If they give you an email address, go ahead and ask for a reference. If you get a reply then the headers can be checked to see where the mail originated from. If it happens you can also get a best shot attempt from them of their English skills.

Also, again ask if there are any custom fees in addition to the total price.

In terms of identifying and/or catching these criminals, well the odds are between very slim and none, and they are very optimistic odds.

MGD

Re: [Spam] Kanicn

Tue, 23 Jun 2009 18:21:23 EDT

RMCNet posted : Thank you for taking me seriously MGD, Is there any information I should try to get out of him that will help to catch him?

http://www.authentic-elecs-supplier.com/ is Scam or not ???

Tue, 23 Jun 2009 18:15:08 EDT

anon posted : Please any one tell me this web site is scam or not ?? I have order product from this web but still not paying yet i ask them i wanna pay by paypal or crdit crd but the said no only western u, n bank trnsfr. here their reply please any one advise thank u.

Hello ???

OK, Here is our Bank Account details for you to do Bank Transfer:
BANK'S NAMEFBANK OF CHINA BEIJING BRANCH FENGTAI DONGDAJIE SUB-BRANCH
BANK'S ADDRESSFNo.19 Dongdajie Rd, Fengtai District, Beijing
SWIFT CODE/BICFBKCHCN BJ 110
BENEFICIARY'S NAMEFYao Ren (first name: Yao, last name: Ren)
BANK ACCOUNT NO/IBANF 6013820100005272920

Company address: No.1 Shangdi Eastern Rd,Haidian District, Beijing, China
Zip Code: 100083
Tel: 0086-1352-627-2983

Please send us the receipt after the payment is finished, and once it is confirmed, we will send your package and inform you the tracking number, then you can receive it in 4 to 5 days.

Look forward to doing more business with you.

Best regards
Crystal

------------------

Hi Crystal

Can you please give me the detail of Bank Transfer, your name, address and phone number please. I just make a record if something wrong I have evidence and I can get refund from my bank

Best Regards

??????????

From: es@authentic-elecs-supplier.com [mailto:es@authentic-elecs-supplier.com]
Sent: Wednesday, June 24, 2009 9:45 AM

Hello ?????,

Of course we are not scamner, Here are some tracking numbers: EE054161482CN, EE054093195CN, EE054161505CN, EB022310812CN, check by: »www.ems.com.cn/english-main.jsp you can see our customers can receive their orders without any problem after they made the payment.

Hope we can have very good business together.

Best regards
Crystal

--------------------------
Hi Crystal

I saw a quite web site that saying that your web site some kind of scam, please let me do my study for while before I pay to you because if you are not we will order a lot product from you because we looking for supplier from china. Please understand that for our own safety. PayPal and Credit card is the safest to pay products and we know who we paying for, Please be patience.

Yours sincerely

????????

From: es@authentic-elecs-supplier.com [mailto:es@authentic-elecs-supplier.com]
Sent: Wednesday, June 24, 2009 9:08 AM

---------------------------
Hello ????????

Many thanks for your reply.

Sorry that we don't use credit card or paypal, they are inconvenient for our funds circulation.

Best regards
Crystal

----------------------------
Hi Crytal

I would like to pay by credit card or paypal, its fastest way to do it.

Please advice

???????????

From: es@authentic-elecs-supplier.com [mailto:es@authentic-elecs-supplier.com]
Sent: Wednesday, June 24, 2009 1:59 AM

--------------------------------------
Dear ???

Thanks very much for your order.

The price of our 100% ORIGINAL Nokia N96 16GB 5MP WiFi GPS TV Unlocked is 112eur include the shipping cost.

It is Authentic from Nokia company directly, also with 1 year international guarantee and 50 working days return policy. Also it is fully unlocked with SIM free, can work with any network.

And you can pay for it via Moneygram, Bank Transfer, or Western Union, could you please tell us which one you want to use? once the payment is ok, we will send your item asap and offer you the tracking number, then you can receive it in 3 to 4 days.

If any question, please feel free to inform us, we will be very pleased to assist you.

Look forward to your early reply.

Best regards
Crystal

Re: [Spam] Kanicn

Tue, 23 Jun 2009 15:07:39 EDT

MGD posted :

said by RMCNet:

VISA/Bank Transfer:
Bank name: Bank of China Panjiayuan subbranch of bank
Address: Chongwen District East grinding plant on the 7th Street Baoding Center Room 801,Block B,Beijing
A / C holder's name: MU CHUN XIAO
A / C No. :6285 6602 0092 871
Swift code: BKCH CN BJ 530
I confirm that your payment arrive, I will be using UPS and EMS Speedpost to send you the goods ,3-7 days to arrive, have any questions, please let me know.
Best wishes to you!
This is the guy behind lucksey.com
He is still currently on good terms with me if anyone wants me to try to get information out of him just ask, glad I found this site before I finished the deal :D

You should ask him if there are any custom fees or duty taxes, since that is the ruse they hit victims with after they send the funds. They use that delaying tactic to try and scam additional money from victims by telling them that the shipment has been held up for these additional taxes.

In comparing your wiring instructions to the ones above posted by "redmind2":

quote:
According to your order we can accept Bank Wire Transfer and Western Union and please choose one way you like.
The information of the Bank Wire Transfer as follows:
Bank: Bank of China Henan Branch
Bank Address: NO.129,QIYI ROAD,NANYANG HENAN CHINA
The Holder`s Name: Zhu Huitao
First Name: Huitao(first name)
Last Name: Zhu(surname)
Holder's Address:NO.32,Gongnong Road,NANYANG HENAN CHINA
Account Number: 628572020003093
Swift Code: BKCHCNBJ530

If you choose this way,please email us and scan the copy receipt to us after you pay .
The information of Wsetern Union as follows:
The receiver's name: Wenling Feng
First name: Wenling
Last name: Feng
City:Beijing
Country:China
If you choose this way,please email us the Money Transfer Control Number and the Senders First name and last name.

It is apparent that this China based scam has been operating for several years, and has grown into an entire industry resulting in an epidemic. Though it originally appeared to be concentrated in the Henan province of China, notorious for scammers, it has now spread all over.

One can find victims from around the globe, posting on many news articles regarding the Chinese police looking for police contact info. For example, these thread posts which began over two years ago are from victims reporting the identical crime format:

Here are some sample excerpts:

quote:
From: Nigel Orchard
To: >editor@rip-off.co.uk
Sent: Monday, August 06, 2007 5:15 PM
Subject: I've been ripped-off!

Dear Sirs

I purchased 2 Panasonic televisions form a website >http://www.top-un.com on the 27th of June. I transferred $915 to this account
International Money Transfer

our bank information is:

Bank address:BANK OF CHINA ,BEIJING BRANCH No.8 YaBaoLu,Beijing,China.
A/C holder is name:Xi Hua Wang
A/C No.:4060300-0188-069219-5
SWIFT code:BKCH CN BJ 110.

I have not received the goods, they just keep asking me for another hundred US dollars for China customs, I have asked for my money to be returned, but they have not returned money to my account, I just thought I would let you know, and maybe you can warn other people not to buy off this website.

----------------------------------------------------

By Ralph Harris ¨C August 25th, 2007 at 3:50 am
I had a similar experience:

The company I dealt with is:
W.D.Z.M.C.N. Co., LTD
Website: >http://www.wdzmcn.com/
Email: wdzmcn-211@hotmail.com
TEL £º+8681830457
Service Center Phone : +861063001839

After transferring a large sum of money by International Bank transfer, the only response I get is:
"But only through the Customs inspection can export these products to USA in order to send the high quality products to customer,so the Customs taxes standard is 27.5% of items price."
This information is for the benefit of other potential victims and a request for any advice to remedy the situation.

---------------------------------------

By Beniamin from Poland ¨C November 6th, 2007 at 7:29 am
this are the datails about the people, the name of the site changes from a cheat to a cheat but the name won't:
The Western Union address is as belowes:
- My first name : Guo Xiu
- My last name : Tan
- City:Nanyang
- Country:China
- Post code :473000
- Address:NO.129.QIYI ROAD,Nanyang HeNan CHINA
and:
-Bank name:Bank of China
-Address:NO.129.QIYI ROAD,Nanyang HeNan CHINA
-A/C holder's name: XiaoPing Sun (first name is xiaoping last name is sun)
-A/C holder's No: 6296740010200077236
-Swift code: BKCH CN BJ 530

The MoneyGram address is as belowes:
- My first name : Guo Xiu
- My last name : Tan
- City:Nanyang
- Country:China
- Post code :473000
- Address:NO.129.QIYI ROAD,Nanyang HeNan CHINA

Ref: »www.chinatechnews.com/2005/12/02···ng-gang/

This is a multi year crime spree perpetrated on victims from all over the world. It has now grown into a large scam industry that it is hard to believe that the Bank of China and the authorities are not aware of this. Both Money Gram and Western Union should be alerting victims who are transferring money to China about this fraud.

»stopthedrugwar.org/chronicle/532···rackdown

»www.google.com/search?hl=en&q=BK···oq=&aqi=

I am also disturbed by what appears to be multiple subnets of IP addresses in the US, leased from Softlayer Tech. which upon initial review appears to be entirely devoted to hosting hundreds of suspicious websites. Many of them contain name components such as "Ebay" or "Nike" "Jordon" etc. which are clearly trademark violations used to lure victims.

Though several thousand of the fraud scam domains are hosted in China, the discovery of fraud groups utilizing faster US based hosting resulted from the audit of the known fraud myewell.com.

Though myewell.com is currently hosted on a dedicated IP 174.37.37.133. That IP appears to be a subnet leased from Softlayer Tech:

----------------------------
== Additional Information From rwhois://rwhois.softlayer.com:4321 ==

network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.174.37.0.0/18
network:Auth-Area:174.37.0.0/18
network:Network-Name:SOFTLAYER-174.37.0.0
network:IP-Network:174.37.37.128/26
network:IP-Network-Block:174.37.37.128-174.37.37.191
network:Organization;I:Yitian technology limited company
network:Street-Address:No.1226 Xiahe road,No.18 12F jutian masion,Xiamen,Fujian,China
network:City:xiamen
network:State:ot
network:Postal-Code:361004
network:Country-Code:EH
network:Tech-Contact;I:
network:Abuse-Contact;I:
network:Admin-Contact;I:IPADM258-ARIN
network:Created:20090317
network:Updated:20090317
network:Updated-By:
----------------------------

I am unable to find any documentation for: Yitian technology limited company or its listed address.

If you review the hosting history of myewell.com

myewell.com

IP Address History:


Event Date Action  Pre-Action IP   Post-Action IP 
2009-03-09 New       -none-        67.228.236.65  
2009-03-30 Change  67.228.236.65   174.36.140.214  
2009-04-06 Change  74.36.140.214   174.37.37.133

The prior IP address of 174.36.140.214 is also part of a Softlayer subnet dedicated to the same China based :Yitian technology limited company. That IP is currently hosting these suspicious domains:

----------------------------

174.36.140.214

1. 365hotbuy.com
2. Adetrade.com
3. Atophandbag.com
4. Brand-bay.com
5. Brand-oem.com
6. Cada123.com
7. Eby-asp.com
8. Ele-bay.com
9. Ele-eden.com
10. Ele-stores.com
11. Ele-y100w.com
12. Elewholesale.com
13. Eshoesoffer.com
14. Fastnewbuy.com
15. Gaokegs.com
16. Globseason.com
17. Good-lookingshoes.com
18. Handbagaaa.com
19. Huaye8.com
20. Jordan23link.com
21. Keyavo.com
22. Likeitso.com
23. Mickybuy.com
24. Niceshoes4u.com
25. Nike85.com
26. Okeybags.com
27. Okeyclothes.com
28. Okeyjersey.com
29. Packstrade.com
30. Reborn2008.com
31. Replica-oem.com
32. Shawinproducts.com
33. Shidaimall.com
34. Shoevent.com
35. Shuenwoyi.com
36. Sneakers-apparels.com
37. Sugefac.com
38. Trade-eden.com
39. Trade-on-alibaba.com
40. Trustwholesaler.com
41. Ui-mall.com
42. Watchesshowhappy.com
43. Welt188.com
----------------------------

As per the above history, the IP where myewell.com was born and remained for its first three weeks: 67.228.236.65, is also subbed to:

----------------------------
== Additional Information From rwhois://rwhois.softlayer.com:4321 ==

network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.67.228.224.0/19
network:Auth-Area:67.228.224.0/19
network:Network-Name:SOFTLAYER-67.228.224.0
network:IP-Network:67.228.236.64/28
network:IP-Network-Block:67.228.236.64-67.228.236.79
network:Organization;I:Yitian technology limited company
network:Street-Address:No.1226 Xiahe road,No.18 12F jutian masion,Xiamen,Fujian,China
network:City:xiamen
network:State:ot
network:Postal-Code:361004
network:Country-Code:EH
network:Tech-Contact;I:
network:Abuse-Contact;I:
network:Admin-Contact;I:IPADM258-ARIN
network:Created:20080528
network:Updated:20080617
network:Updated-By:
----------------------------

A random audit of that entire network: IP-Network-Block:67.228.236.64-67.228.236.79 shows that it appears to be an exclusive host of these domains:

----------------------------
67.228.236.64

1. Bmbyk.com
2. Chwilde.com
3. Cn-nikeshoes.com
4. Ebayholder.com
5. Elenot.com
6. Gleefair.com
7. Jrdfashions.com
8. Kyuic.com
9. Naitasports.com
10. Nikegem.com
11. Orzeye.com
12. Ozcerct.com
13. Pickjordan.com
14. Ptjinling.com
15. Retail-shoes.com
16. Soccerjersey-shop.com
17. Sun-v.cn
18. Sun-v.com.cn
19. Tohitrade.com
20. Ttsycn.com
21. Zjornament.com

----------------------------

67.228.236.65

1. Apparelangels.com
2. Db2012.com
3. Exportnike.com
4. Intersold.net
5. Kenviya.com
6. Magneticf.com
7. Mickyhere.com
8. Nike-goldseller.com
9. Nikemovement.com
10. Onstylish.com
11. Whole925.com

----------------------------

67.228.236.66

-0-
----------------------------

67.228.236.67

1. Biz-ele.com see:»www.google.com/search?hl=en&q=%2···oq=&aqi=

----------------------------

67.228.236.68

1. Unionproduct.com

----------------------------

67.228.236.69

1. Aoagoog.com
2. Btvhk.com
3. Cheapjordanshoesonsale.com
4. Jordanshoesjordanshoes.com gs
5. Jxbrandshoes.com
6. Nikeshoesnikeshoes.com
7. Peango.com
8. Printingwaiter.com
9. Tms-keyboard.com
10. Zdstyle.com
11. Zhizimould.com

----------------------------

67.228.236.70

-0-
----------------------------

67.228.236.71

1. Shirt888.com

----------------------------

67.228.236.72

1. Alicetrade.com
2. B2b-eden.com

----------------------------

67.228.236.73

1. Replica-golf.eu

----------------------------

67.228.236.74

1. Beijitrade.com
2. Ele-exp.com
3. Ffe2.com
4. Jodan23club.com
5. Jollyexport.com
6. Jordan23club.com
7. Okeywear.com
8. Pickele.com
9. Richglorytrade.com
10. Theworldway.com
11. Tostorevip.com
12. Waystrade.com
13. Wtolocker.com

----------------------------

67.228.236.75

1. Hk8666.com
2. Keepingfashion.com

----------------------------

67.228.236.76

1. Beausac.net
2. Dh-inspection.com
3. Ecshoes999.com
4. Edoplaza.com
5. Fashionfine.com
6. Gobaybay.com
7. Jerseysaaa.com
8. Macsky168.com
9. Myjoymartt.com
10. Nikeint.com
11. Nikeshoessell.com
12. Nikesos.com
13. O-unique.com
14. Shoealibaba.com
15. Shoeok.com
16. Top-trouble.com
17. Trade2002.com

----------------------------

67.228.236.77

1. Zjbonny.com

----------------------------

67.228.236.78

1. 21bizsky.com
2. Ccanis.com
3. Direct-selling168.com
4. Jerseysid.com
5. Putonnike.com

----------------------------

67.228.236.79

-0-
----------------------------

While I have not examined every one, the random sample shows that they are marketing everything from Rolex watches to electronics, and all require payment via the same vectors.

Also be advised that anytime you see electronics advertised as having a "World Wide Warranty" you know that it is bogus. no such warranties exist. All electronics manufacturers issue country specific warranties, and thus you often see a reference to "Grey market products" which means that the product is exported and sold in a country that the manufacturer did not authorize it to be, and is not covered. That of course is in reference to products that actually ship, and not in this case where it is purely a money scam.

I am surprised that this fraud, originally a Chinese cottage industry, which has now progressed to a full fledged enterprise, has not generated much mainstream media attention, or at least that I can find.

A rough count alone of these fraud domains hosted in China now numbers in the several thousands.

MGD

Re: [Spam] Kanicn

Tue, 23 Jun 2009 03:43:25 EDT

RMCNet posted : »i44.tinypic.com/25ovxbl.jpg
A screenshot of the email, I don't see how you can possible think I'm "Mr. site owner". Have an admin look at my I.P, I live in Minnesota, just trying to help.

Re: [Spam] Kanicn

Tue, 23 Jun 2009 03:22:56 EDT

Doctor Olds posted :

said by RMCNet:

This is the guy behind lucksey.com
He is still currently on good terms with me if anyone wants me to try to get information out of him just ask, glad I found this site before I finished the deal :D

Sure you are, Mr. site owner.

»answers.yahoo.com/question/index···3AAnie8I
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

Re: [Spam] Kanicn

Tue, 23 Jun 2009 00:12:43 EDT

RMCNet posted : VISA/Bank Transfer:
Bank name: Bank of China Panjiayuan subbranch of bank
Address: Chongwen District East grinding plant on the 7th Street Baoding Center Room 801,Block B,Beijing
A / C holder's name: MU CHUN XIAO
A / C No. :6285 6602 0092 871
Swift code: BKCH CN BJ 530
I confirm that your payment arrive, I will be using UPS and EMS Speedpost to send you the goods ,3-7 days to arrive, have any questions, please let me know.
Best wishes to you!
This is the guy behind lucksey.com
He is still currently on good terms with me if anyone wants me to try to get information out of him just ask, glad I found this site before I finished the deal :D

Re: [Spam] Kanicn

Mon, 22 Jun 2009 19:21:08 EDT

MGD posted :

said by ahmed ginger :

thank you
for your response
its incredible so from where can wee Shipping
all the site are Stealing as :(
so any body know good site to shipping?

some people Say www.mphfec.com/ its good
if its nowt good i will never Shipping again :mad:
please its good or now

Those people are WRONG, mphfec.com = FRAUD SCAM FRAUD

Check the domain registrations of the websites here: »www.domaintools.com. If they are registered in China, and require payment via Western Union / Money Gram or bank wire, then do not buy.

quote:
SCAM AND CHEATERS

mphfec.com This website took $6000.00 dollars and never sent merchandise and never sent my money back. They use this saying you owe there coutry taxes to get you to send more money. That company is located in China and that website again is MPHFEC.COM are a scam.

Please be careful, DO NOT ORDER ANYTHING FROM THIS WEBSITE>

»finance.google.com/group/google.···69c9cdd3

Hijacking & Spamming
»www.google.com/search?q=mphfec.c···=en&sa=2

I have located well over 500 of these fraud domains from China, so any search for electronics will bring up several. Be careful !! NEVER EVER SEND CASH for products!

MGD

Re: [Spam] Kanicn

Mon, 22 Jun 2009 19:12:12 EDT

anon posted : thank you
for your response
its incredible so from where can wee Shipping
all the site are Stealing as :(
so any body know good site to shipping?

some people Say www.mphfec.com/ its good
if its nowt good i will never Shipping again :mad:
please its good or now

Re: [Spam] Kanicn

Mon, 22 Jun 2009 18:43:13 EDT

MGD posted :

said by ahmed ginger :

how are you all
ok can i buy from www.myewell.com
they say to mee its ok to Shipping from theam.
Is there any one help me its okey or not okey

DO NOT BUY FROM THEM myewell.com = FRAUD SCAM FRAUD

myewell.com is part of a group of several hundred Chinese fraud domains that are all involved in hijacking webmail accounts and spamming. All the domains require payment via Money Gram / Western Union or via a wire transfer to Bank of China.

quote:
Email account hacked and all contacts are deleted

Reply Contact
It seems that my email account has been hacked and all my contacts have been deleted. Is is possible to restore them in any way?

At the same an auto-reply had been set up with the following answer:

Sent: Saturday, March 21, 2009 4:44 PM
Subject: Hi friend:

Hi friend:

Introduce you a good website:* www. myewell.com *

It is a large wholesaler who trade mainly in all kinds of electronical products for promotion. To my surprise, their products are very low price and high quality.

I bought an iphone from this website last month, and the iphone works very well! I think it is a shopping paradise which can bring you much benefit, so i want to share it with you! It is really worthy to have a try. Their contact information is: Email: {removed email address}

Best Regards!

»windowslivehelp.com/community/t/30342.aspx

»www.google.com/search?hl=en&q=my···oq=&aqi=

MGD

Re: [Spam] Kanicn

Mon, 22 Jun 2009 17:50:19 EDT

anon posted : how are you all
ok can i buy from www.myewell.com
they say to mee its ok to Shipping from theam.
Is there any one help me its okey or not okey

Re: [Spam] Kanicn

Sun, 21 Jun 2009 12:11:39 EDT

anon posted : I did use the same way to pay them and when i contacted them they told me they receie the money and they will not send me my tracking number i should wait for some time, from that statement i did feel that i lost my money

Re: [Spam] Kanicn

Fri, 19 Jun 2009 01:43:07 EDT

Doctor Four posted :

said by Frank Musht :

Hi, Im suprised that Mohammed Ali from Kenya has dealt with this guys and still deals with them.

I don't think he's from Kenya - the domain he posted from is CN (China). And he's more likely a shill than a buyer or victim.
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)

Re: [Spam] Kanicn

Thu, 18 Jun 2009 03:46:13 EDT

anon posted : Hi, Im suprised that Mohammed Ali from Kenya has dealt with this guys and still deals with them.

Im also from Kenya and i lost USD 900.00 to Kanicn. This is a fraud Company and please dont send money to them.

I wish this guy could help us trace his so called agent in china.

Re: [Spam] Kanicn

Wed, 17 Jun 2009 23:41:55 EDT

anon posted : Here's the account information

--------------------------

According to your order we can accept Bank Wire Transfer and Western Union and please choose one way you like.
The information of the Bank Wire Transfer as follows:
Bank: Bank of China Henan Branch
Bank Address: NO.129,QIYI ROAD,NANYANG HENAN CHINA
The Holder`s Name: Zhu Huitao
First Name: Huitao(first name)
Last Name: Zhu(surname)
Holder's Address:NO.32,Gongnong Road,NANYANG HENAN CHINA
Account Number: 628572020003093
Swift Code: BKCHCNBJ530

If you choose this way,please email us and scan the copy receipt to us after you pay .
The information of Wsetern Union as follows:
The receiver's name: Wenling Feng
First name: Wenling
Last name: Feng
City:Beijing
Country:China
If you choose this way,please email us the Money Transfer Control Number and the Senders First name and last name.
After we confirm your payment and we'll email you all the invoices and the tracking number after sent out goods then you can track your goods online.It takes 5-7days to your place via EMS.Hope sincerely that we can do well our business and keep a good business relationship for a long time.Please contact us any time if you have any question when you are free.Look forward to your early reply .
Regards!

-------------------------------

I've seen the product information on www.kingacme.com and
I've transfer my money by wire transfer, but I immediately requested my bank to revoke it. The money is held in the transferring bank in one of the European countries, and I got a message that they'll send the money back to me with some revoke charge.

I'm wondering if there's anyway that I can sue them.
Through InterPol?

Re: [Spam] Kanicn

Wed, 17 Jun 2009 15:44:18 EDT

Doctor Four posted : I love it: the more the shills try to plug for their scam, the more they expose it.

At the rate they're going, they're guaranteed to keep this topic at the top of Google's page rank.
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)

Re: [Spam] Kanicn

Wed, 17 Jun 2009 12:17:24 EDT

Doctor Olds posted :

said by frenks:

Mon magasin [snip]

Like it very much.

[snip] triche?

You do know English. I see it.
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

Re: [Spam] Kanicn

Wed, 17 Jun 2009 11:47:39 EDT

MGD posted :

said by frenks:

...... Il n'est pas faux. Ce n'est pas une fraude, triche = vous trompe?

Au contraire, mon frère. Ils sont une Grande Fraude.

MGD

Re: [Spam] Kanicn

Wed, 17 Jun 2009 11:32:58 EDT

MGD posted : ........ And then there were more scam fraud websites...!

A new audit of IP Address: 125.65.109.23 shows that the original 4 scam websites:

quote:
IP Address: 125.65.109.23
IP Location - Beijing - Beijing- Chengdu-saiya-cor

4 Results for 125.65.109.23

1. Kanicn.com
2. Keeptopfe.com
3. Keeptopfe.net
4. Selexpress.com

has now grown to 8:

Search Results for 125.65.109.23 [no reverse DNS set]

1. Charmpioneer.com = SCAM - FRAUD - SCAM
2. Foisonlw.com = SCAM - FRAUD - SCAM
3. Intlsss.net = SCAM - FRAUD - SCAM
4. Kanicn.com = SCAM - FRAUD - SCAM
5. Keeptopfe.net = SCAM - FRAUD - SCAM
6. Selexpress.com = SCAM - FRAUD - SCAM
7. Sh-yineng.com = SCAM - FRAUD - SCAM
8. Keeptopfe.com = SCAM - FRAUD - SCAM

The new arrivals such as Charmpioneer.com are also frauds. The payment options:

[Att=1]

The fraudulent display of a hijacked US BBB logo, on a Chinese website no less:

[att=2]

This is clearly a global scamming operation, note the default Euro prices. Also, many of the Google search hits on the thread, over 800 so far this week, are from the UK. This confirms that the webmail account hijackings and resulting spam is targeting consumers from around the globe with this fraud.

Again if anyone has the time to engage them in a fake purchase attempt and can obtain and post the wire transfer details.

One report already details the Western Union / Money Gram instructions as:

----------------------------------
WENLING FENG

Kani Electronics World Trade Company

B-28-1, No 83, Fuxing Road,
Haidian District, Beijing China
Postal code:100038
----------------------------------

If your webmail account has been hijacked and used to send spam to recipients in your address book, change your password to a strong one. Check to make sure that the account is not set to auto respond with a copy of the spam, and also check that a signature has not been set with a copy of the spam.

MGD