MGDPremium,MVM
join:2002-07-31
kudos:9
2 edits | reply to datan
Re: Ebook websites, fraud charges, Devbill/DigitalAge/Pluto said by datan :
dear all,
I had a fraudulent transaction on my credit card, did a search and ended up here.
30 Jan: SCREEN SAVERSRISE.COM 240-2844437 MD USD 4.82
believe this is a clone of certain website you may already be familiar with.
the only thing i'm very disturbed is how they managed to get my credit card number. I have been VERY careful about this card. It's a new card, issued less than a month and i've only used it with 3 online merchants (paypal, a newsgroup provider and one another) and i used it to sign for a transaction only once.
.
Excellent detective work Datan. Kudos for finding and posting to this thread. Now that this crime syndicate has taken extraordinary measures to operate in stealth mode, it is victims such as you who do extensive research on a small charge which helps enormously in keeping this crime syndicate in our cross-hairs. So far, yours is the only public fraud report that I can find.
Over the last several months it is apparent that the criminals are processing charges against a mix of global victims in order to diffuse public exposure. You appear to be in Singapore, though you do not state if it is a local financial institution's card or not. Besides the US, other recent victims have been from Australia, Switzerland, Japan, and the UK.
You are also astute for posting the exact line item fraud charge:
30 Jan: SCREEN SAVERSRISE.COM 240-2844437 MD USD 4.82
From that data we can derive that the acquirer bank account associated with the merchant processing account was set up from, and is located in the state of Maryland.
It appears that the cyber-mule who was employed and duped into setting the accounts up is this individual:
... and the location matches.
Ms. Saira B Farooq, is in for a big surprise !!. Has no clue that the initial business partner job offer from her posted resume was setting her up. Probably feeling that this business partnership was a proud achivement, and having no clue, she lists it on her revised resume. Thankfully she did, as the crime syndicate now makes sure that the registered business LLC has no naming connection to the website name. An attempt to obfuscate and keep fraud forensic hounds at bay, and prevent cyber-mule identification and interception.
.
.
Excellent find !! Doctor Olds 
Cloaked domain registration, should have screamed fraud to merchant account underwriters:
====================================
ICANN Registrar:NETWORK SOLUTIONS
Registrant:
CLEMENT, JACK
ATTN: SCREENSAVERSRISE.COM
c/o Network Solutions
P.O. Box 459
Drums, PA. 18222
Domain Name: SCREENSAVERSRISE.COM
Administrative Contact, Technical Contact:
CLEMENT, JACK nd3tu88k4ys@networksolutionsprivateregistration.com
ATTN: SCREENSAVERSRISE.COM
c/o Network Solutions
P.O. Box 459
Drums, PA 18222
570-708-8780
Record expires on 16-Sep-2010.
Record created on 16-Sep-2009.
Domain servers in listed order:
NS1.CROW.ARVIXE.COM
NS2.CROW.ARVIXE.COM
Server Type:Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.28
IP Address:174.120.229.131
IP Location: - Texas - Dallas - Theplanet.com Internet Services Inc
Response Code: 200
Domain Status: Registered And Active Website
====================================
How SCREENSAVERSRISE.COM was approved for a merchant account is beyond me. Missing graphics, incomplete website. As Snowy has pointed out before, this template group is not configured to even process card data externally. The purchase page source code is all formatted as text fields. No one could complete a purchase from the outside.
They do not even have screen saver files on this site:
SCAM FRAUD= SCREEN SAVERSRISE.COM 240-2844437 = FRAUD SCAM
SCAM FRAUD= AKA SCREENSAVERSRISE.COM 240-284-4437 = FRAUD SCAM
said by Doctor Olds:Indeed, but they don't have the "cookie cutter look" like the earlier series unless they have more I can't locate. .. .
There is an entire group of the syndicate's card fraud laundering websites that are all based on the same templated form, with minor graphic and other variations:
SCREENSAVERSRISE.COM
UNIQUEDESKTOPSTYLE.BIZ
They vary the prices of each fraud site using odd amounts to prevent searching patterns from connecting multiple fraud sites together.
SCREENSAVERSRISE.COM
UNIQUEDESKTOPSTYLE.BIZ
All of them will also list a price in the $1.50 to $1.90 range as a cover for card validation pinging.
SCREENSAVERSRISE.COM
UNIQUEDESKTOPSTYLE.BIZ
They cover a lot of the potential, to prevent the hidden sites and reported fraud charges from being connected together. Smart ..... but not smart enough! ...
MGD |
Glad to have you back here knocking cyber-criminals around and taking a cyber-bite out of web-based crimes. 