Royal Mail concert ticket scam

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 28 Mar 2010 Posts: 5

Any suggestions on how to bait this one along? Thanks...

Quote:

I am currently at the airport and in couple hours i will be boarding to the flight for UK. I need to sell the tickets asap. Let's use the Royal Mail company that has an office near the airport to overnight the tickets to you. You will have the tickets in hand tomorrow Monday at 10 am.

Royal Mail will hold the funds while you verify the tickets until after the event is ended and you passed the gate. SO, you will be able to withdraw your money back from Royal Mail if something is wrong with the tickets. But the tickets are genune. So, you are protected and i am protected.

Here is the service i am talking about, see how it goes:
http://parcel-service.info/royalmail.com/overnight_service/portal/rm/webship.high.html

I will pay the fees

Let me know what you think

Lisa Watson - First Flight Attendant
www.britishairways.com

0844 493 0787
Fax: +44 (0) 17 8788 3196

25 Vine Place,
Suffolk,
CO10 2PG
United Kingdom

Posted: Sun Mar 28, 2010 9:56 pm

mmmm.... interesting!

Quote:

Queried whois.afilias.info with "parcel-service.info"...

Domain ID:D31673809-LRMS
Domain Name:PARCEL-SERVICE.INFO
Created On:24-Feb-2010 21:55:04 UTC
Expiration Date:24-Feb-2011 21:55:04 UTC
Sponsoring Registrar:Key-Systems GmbH (R124-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:P-22875224
Registrant Name:Lodewijk Assurantin
Registrant Organization:
Registrant Street1:K R Poststraat 11
Registrant Street2:
Registrant Street3:
Registrant City:Heerenveen
Registrant State/Province:
Registrant Postal Code:8441 EL
Registrant Country:NL
Registrant Phone:+31.0513469121
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:[email protected]

This email adress has registered 2 other fake Royal mail websites in the DB: http://db.aa419.org/[email protected]&Submit=GO&psearchtype=

One year registration? I believe it's fake. Permission to kill? Very Happy

Hello I'm New here! Joined: 28 Mar 2010 Posts: 5

Here's what I've done so far (using fake email and info, of course). I am "Kenta Nozawa", the spammer is Lisa Watson:

Quote:

On Sun, Mar 28, 2010 at 4:59 PM, <[email protected]> wrote:

It's done, did you receive the Royal Mail confirmation?

Lisa Watson - First Flight Attendant
www.britishairways.com

0844 493 0787
Fax: +44 (0) 17 8788 3196

25 Vine Place,
Suffolk,
CO10 2PG
United Kingdom

-----Original Message-----
From: Kenta Nozawa <[email protected]>
To: [email protected]
Sent: Mon, Mar 29, 2010 12:57 am
Subject: Re: TAYLOR SWIFT TICKETS

YES!

MOST REGARDS,
KENT

On Sun, Mar 28, 2010 at 4:33 PM, <[email protected]> wrote:

I am on my way to Royal Mail, i should be there in 5 minutes. Please stay close to your e-mail on the next 5-10 minutes to get the confirmation e-mail from Royal Mail, ok?

Lisa Watson - First Flight Attendant
www.britishairways.com

0844 493 0787
Fax: +44 (0) 17 8788 3196

25 Vine Place,
Suffolk,
CO10 2PG
United Kingdom

-----Original Message-----
From: Kenta Nozawa <[email protected]>
To: [email protected]
Sent: Mon, Mar 29, 2010 12:31 am
Subject: Re: TAYLOR SWIFT TICKETS

KENT NOZAWA
11151 LARKIN LANE
MIDWEST CITY, OK 73130
[email protected]

On Sun, Mar 28, 2010 at 4:26 PM, <[email protected]> wrote:

NO, i am in Phoenix, AZ.

I need your name and address and will go to Royal Mail and send the tickets. I also need a yahoo or gmail e-mail address at the recommendation of Royal Mail to make sure they will be able to send the confirmation e-mail and that they e-mail will go through.

Lisa Watson - First Flight Attendant
www.britishairways.com

0844 493 0787
Fax: +44 (0) 17 8788 3196

25 Vine Place,
Suffolk,
CO10 2PG
United Kingdom

-----Original Message-----
From: Kenta Nozawa <[email protected]>
To: [email protected]
Sent: Mon, Mar 29, 2010 12:25 am
Subject: Re: TAYLOR SWIFT TICKETS

I MISUNDERSTAND, NOT IN UK??? SORRY MY ENGLISH NOT GREAT!

On Sun, Mar 28, 2010 at 12:37 PM, <[email protected]> wrote:

All 4 is $600.

I am currently at the airport and in couple hours i will be boarding to the flight for UK. I need to sell the tickets asap. Let's use the Royal Mail company that has an office near the airport to overnight the tickets to you. You will have the tickets in hand tomorrow Monday at 10 am.

Royal Mail will hold the funds while you verify the tickets until after the event is ended and you passed the gate. SO, you will be able to withdraw your money back from Royal Mail if something is wrong with the tickets. But the tickets are genune. So, you are protected and i am protected.

Here is the service i am talking about, see how it goes:
http://parcel-service.info/royalmail.com/overnight_service/portal/rm/webship.high.html

I will pay the fees

Let me know what you think

Lisa Watson - First Flight Attendant
www.britishairways.com

0844 493 0787
Fax: +44 (0) 17 8788 3196

25 Vine Place,
Suffolk,
CO10 2PG
United Kingdom

-----Original Message-----
From: Kenta Nozawa <[email protected]>
To: [email protected]
Sent: Sun, Mar 28, 2010 8:31 pm
Subject: Re: TAYLOR SWIFT TICKETS

YES! WHERE TO MEET?

YOURS,
KENT

On Sun, Mar 28, 2010 at 12:28 PM, <[email protected]> wrote:

4 Taylor Swift w/ Kellie Pickler

Section 115, Row B, Seats 3-6

$150/seat

Wed, Mar 31 2010 7:00 PM
Ford Center, Oklahoma City, OK

Lisa Watson - First Flight Attendant
www.britishairways.com

0844 493 0787
Fax: +44 (0) 17 8788 3196

25 Vine Place,
Suffolk,
CO10 2PG
United Kingdom

-----Original Message-----
From: Kenta Nozawa <[email protected]>
To: [email protected]
Sent: Sun, Mar 28, 2010 8:11 pm
Subject: TAYLOR SWIFT TICKETS

** CRAIGSLIST ADVISORY --- AVOID SCAMS BY DEALING LOCALLY
** Avoid: wiring money, cross-border deals, work-at-home
** Beware: cashier checks, money orders, escrow, shipping
** More Info: http://www.craigslist.org/about/scams.html

GREAT SEATS! I TAKE ALL FOUR IF STILL HAVE THEM?

KENT

this message was remailed to you via: [email protected] =

Hello I'm New here! Joined: 28 Mar 2010 Posts: 5

And here is the Royal Mail email:

Quote:

Royal Mail
Sending Date: Sunday, March 28, 2010
Tracking (Consignment) Number: US655938738GB
Tracking Details: Click Here
Dear Royal Mail Customer,

We have your parcel in our custody.

Description of goods: ( 4 ) Taylor Swift w/ Kellie Pickler Tickets
Sender of package ( Seller ): Lisa Watson
Sender's Address: 95 Dundas Street, Sunderland, SR6 0AB, United Kingdom
Receiver of package ( Buyer ): Kent Nozawa
Receiver's Address: Same as Delivery Address
Royal Mail Parcel Content:

( 4 ) Taylor Swift w/ Kellie Pickler Tickets
Seat Location: Section: 115, Row: B, Seats: 3, 4, 5, & 6
Event Location & Date: Wednesday, March 31, 2010, 7:00 PM, Ford Center, Oklahoma City, OK
Delivery Address:

Address: 11151 Larkin Lane
City / State: Midwest City / OK
Zip(City Code): 73130
Country: USA
Delivery Type: Royal Mail Express SameDay Delivery
Signature: Required
Amount to be paid by the Buyer: US $600.00

ETA ( Estimated time of arrival) - Monday, March 29, 2010, 10:00 AM PST if the payment is sent before Sunday, March, 11:00 PM PST. The ETA will be confirmed after the payment is received and verified by Royal Mail Payment Department.
Receiver of the Payment - Royal Mail Agent: Christina Newman

The payment must be made through Western Union Money Transfer to the Name of the Royal Mail Agent who is in charge with this transaction - Christina Newman - using the "Money in Minutes" Service from Western Union.

Instructions on how to fill out the Green "Money in Minutes" Form ( Be sure to ask for the green form )

Pay to: Royal Mail Agent's Name ( only First Name, Last Name: Christina Newman )
Payout location: Suffolk, United Kingdom
From: Your Name, Your Address
Amount Transferred: US $600.00

Important Note: When you fill in the name of the receiver on the green Western Union " To Send Money Form " please be careful to write the name correctly and write only the name of the person who will receive the money. This is important because the information you write on the Western Union " To Send Money Form " will be filled in the Western Union database by the Western Union clerk and for the receiver to be able to pick up the funds from Western Union, the name of the receiver from the Western Union database must match the name on the receiver's ID Card.

Important Note: The Payment must be made at one of Western Union's Agent Locations, in person by the Buyer. The payment must not be made using Western Union's Send Money Online Service due to the high Credit Card fraud risk. We will not confirm any payments made by Credit Card, online or by phone.

After you complete the payment you need to send the Payment Information for verification to our Payment Department by replying at this e-mail or click here: arrow Royal Mail OnLine Payment Service

The Payment Information that you need to send to us for verification are:

- MTCN ( Money Transfer Control Number ) - 10 digits number located on your payment receipt
- Sender's Name and Sender's Address
- Receiver's Name
- Amount Transferred
- Attachment of Scanned or Photocopy of Western Union Receipt(s)
Please read our Royal Mail Payment Privacy Policy to learn our payment release and payment refund conditions.

1. The Payment will be sent to the Seller by Royal Mail only after you receive the package, check the merchandise and if you are completely satisfied with it, you will then instruct us to release the Payment to the Seller.
2. Royal Mail acts as a third party holding at the same time the merchandise and the Payment.
3. After the merchandise is received by the Buyer, the Buyer will have up to 31 days depending on the nature of the merchandise to review the merchandise.
For transaction No. US655938738GB the inspection time is time is 31 ( thirty one ) business days.
a) If the Buyer decided to keep the merchandise the Buyer will instruct Royal Mail to release the funds to the Seller.
b) If for any reason the Buyer does not want to keep the merchandise, the Buyer will ask Royal Mail to be refunded.
The refund procedure is very simple, the Buyer will receive the money from Royal Mail through Bank to Bank Wire Transfer, or by Check or by Money Transfer. The refund method is at the Buyer's choice.

Richard Gregor - Royal Mail Customer Department
Royal Mail London Office
Address: 148 Old Street
London, EC1V 9HQ, United Kingdom
General Manager: James Ward
Email: Royal Mail OnLine Customer Service

Posted: Sun Mar 28, 2010 10:20 pm

Nas, can you post the headers of the royal mail email? With your permission, I'll try to get the domain killed as I believe it is a fake one. I'll need headers for evidence.

(if you don't know how to find ehaders - http://forum.419eater.com/forum/viewtopic.php?t=118787)

Thanks Very Happy

Hello I'm New here! Joined: 28 Mar 2010 Posts: 5

Here's the header from the Royal Mail email:

Quote:

Delivered-To: [email protected]
Received: by 10.229.29.13 with SMTP id o13cs79941qcc;
Sun, 28 Mar 2010 14:53:53 -0700 (PDT)
Received: by 10.150.66.12 with SMTP id o12mr2053417yba.147.1269813233258;
Sun, 28 Mar 2010 14:53:53 -0700 (PDT)
Return-Path: <[email protected]>
Received: from node76.smtp.com (node76.smtp.com [67.205.93.76])
by mx.google.com with ESMTP id gr39si7101075ibb.58.2010.03.28.14.53.52;
Sun, 28 Mar 2010 14:53:53 -0700 (PDT)
Received-SPF: neutral (google.com: 67.205.93.76 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=67.205.93.76;
Authentication-Results: mx.google.com; spf=neutral (google.com: 67.205.93.76 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from xp (ACA23450.ipt.aol.com [172.162.52.80])
by node76.smtp.com (Postfix) with ESMTPA id B3BC42AF74A
for <[email protected]>; Sun, 28 Mar 2010 17:53:47 -0400 (EDT)
X-SMTPCOM-Spam-Policy: BulkEmail.SMTP.com is a paid relay service.
We do not tolerate UCE of any kind.
Please report it ASAP to [email protected]
X-SMTPCOM-Sender-ID: 330
X-SMTPCOM-Tracking-Number: 3786477
Reply-To: <[email protected]>
From:"Royalmail.com" <[email protected]>
To: "nozawakent" <[email protected]>
Subject: Royal Mail Shipment Details and Payment Instructions
Message-ID: <1fc32570c83c354f8d2394bb9bdb00a4@xp>
Date: Mon, 29 Mar 2010 00:53:35 +0300
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0001_BEBF1F3D.D474DB4A"
X-Priority: 3
X-Mailer: Microsoft Office Outlook 12.0

Hello I'm New here! Joined: 28 Mar 2010 Posts: 5

Oh and yes, fire away! Smile

Hello I'm New here! Joined: 02 Jul 2010 Posts: 1

Hello,
I am new here.
I almost fell for the Royal Mail scam today. It was for Paul McCartney tickets. I was stupid enough to actually go to Western Union and transfer the money, but then nothing about it felt right to me, so I did some poking around online and found this thread and immediately canceled the transaction and will be getting my money back. I didn't send the scammers the transaction number, so they can't get the money. I want to thank you guys for posting about this scam.

The "seller's" name is Mariah Graham. The text of her emails was exactly the same as you posted below.

Let me know if you need any other info about it.

---------------
Vee.

Hello I'm New here! Joined: 04 Jul 2010 Posts: 1

Hello,
I also was almost scammed by Mariah Graham - but mine was for UFC tickets in Vegas. I was extremely suspicious and had a chat with a Western Union worker when we decided to send a fake Western Union cinfirmation number. Guess what - I get a phone call from a "Royal Mail Agent" with his phone number displaying a 310 area code (California) not UK.

One last thing the tickets were advertised on CraigsList.

No money lost and had a bit of fun...

Hello I'm New here! Joined: 09 Aug 2010 Posts: 1

Same scam for Paul McCartney tix in Montreal from a Lisa Donovan. Let's see how long I can play "her" along for, until I tell "her" the gig (no pun intended) is up. Wink

Hello I'm New here! Joined: 12 Aug 2010 Posts: 2

I too almost fell for the scam from "Lisa Donovan" for Paul McCartney tickets (in Toronto). Luckily I realized my mistake and was able to cancel the Western Union transaction and get my money back.

My concern now is that there may be more to this scam then just money. Does anyone have any idea if my computer may be at risk? I didn't open any attachments during all the transactions, but I did visit their bogus sites. I'm hoping that nothing was dropped into my computer as a result.

I have run two different full scans (Windows Defender and Avira) and nothing has come up.

Does anyone have any thoughts?

Also, I still have all the emails to Lisa and "Royal Mail" saved, if anyone wants any of the info.

(P.S. We went to the McCartney show on Sunday. Bought tickets from a real scalper at the venue - more expensive than "Lisa's" front row seats, but good seats nonetheless. Awesome concert!)

Kirm

Baiting Guru Joined: 03 May 2007 Posts: 18313

Welcome! You're probably perfectly safe. The scammers are most often just after money, not trying to install any malware. (though they occasionally try phishing).

I'm glad to hear you figured out the scam in time and were able to retrieve your money. Very Happy

You mentioned bogus sites? Please post info on any websites you're aware of, we may be able to get them taken offline.

Posted: Sat Aug 14, 2010 8:58 am

Personally I think that if a fake site is passing itself as a real business like the Royal Mail, its easier and better to report it to them for action.
They have the legal resources to apply more pressure to have the site taken down than we have.

Hello I'm New here! Joined: 12 Aug 2010 Posts: 2

I did contact Royal Mail and they got back to me right away, which was nice. As ultimately the scammer is not using their site directly, (the emails were going to [email protected]) they don't think that there is anything they can do, but I suggested that they pursue it anyways. Especially as the scammer seems to always use the same tracking number and is possibly using employee names. We'll see what happens.

There were a couple of weird things that happened during this entire scam that I was wondering about. Not sure if anyone can shed light on why the scammers were doing this, unless it was just to further convince me of their authenticity:

1. They wanted me to send them a copy of the Western Union receipt. I scanned it in and sent it as a Word (.doc) document. They emailed back and requested that I resend it as a .jpg or .pdf file. Why would this matter?

2. When I purchased the Western Union money order, the clerk mis-spelled my name. The scammer caught it right away, sent me an email saying that the information on the money order receipt did not match the information on the "Royal Mail" info sheet, and could I please check it. Why would this matter to the person picking up the money?

3. Why do they specifically ask for a Yahoo or Gmail account? I was using Hotmail for the initial contact. I also have a Gmail account, so gave that to them too. Then they proceeded to communicate with me through the Hotmail account. (They did send an email to my Gmail account, but as they continued with the Hotmail account, I stuck with that.) If all of this is simply to phish for email accounts, Wow!

If anyone has any thoughts on these, to help satisfy my curiousity, that would be great.

So, in answer to your question about bogus sites, I guess all I really have is that email: [email protected]

Hello I'm New here! Joined: 14 Oct 2010 Posts: 1

OMG people I just got scammed for this very same thing!! For shakira tickets! If anybody can help me report and flag! This person took 300 and I am so upset that by the time i notice it was too late! I am soooo freakin stupid! I never fall for these type of things!! I filed a report after and it when i went to western union to do the money order it didn't even cross my mind that western union transfering money meant scam!! I cant believe how dumb i am right now! I had a weird felling and ignored my feeling thinking was paranoid! Anyways I am going to be posting up my emails and names that were given to me and the person's name who picked up the money was a Maya something...
It was royal mail the same thing and the person who was in contact with me name was a kathleen!
I just am so sad I didn't see this forum till now 15 hours later Sad

Posted: Sun Oct 17, 2010 6:24 pm

Sorry to hear it desireemichelle :,-(

Hello I'm New here! Joined: 13 Nov 2010 Posts: 1

Another warning for Royal Mail Ticket Scam - "Kathleen Vance".....

Beware of the following text.....

I have sent the tickets and now I received an invoice from Royal Mail saying they have contacted you with the confirmation and instructions to your e-mail. Please confirm you have received the instructions and complete your end. I used the overnight 10 am next day delivery service so you will receive the tickets tomorrow morning if you can send the payment before the end of the day today. Royal Mail advised me to tell you to look in your Spam/Junk folder to make sure you received their e-mail.

Royal Mail also told me to tell you that after making the payment to send them the payment details including a picture of the Western Union receipt at [email protected] and if they do not reply back it means that it's late and their customer service is closed, but their payment dep. will process the transfer and deliver the tickets tomorrow.

I need your name and address to know where to overnight the tickets out. I also need a yahoo or gmail e-mail address at the recommendation of Royal Mail to make sure they will be able to send the confirmation e-mail and that they e-mail will go through.

I am currently at the airport and in couple hours i will be boarding to the flight for UK being a flight attendant. Myself and my colleagues cannot make it to the event due to a flight schedule change. Let's use the Royal Mail company whch is similar to DHL or FedEx that has an office near the airport to overnight the tickets to you.
You will have the tickets in hand tomorrow Saturday at 10 am.

Royal Mail will hold the funds while you verify the tickets until after the event is ended and you passed the gate. SO, you will be able to withdraw your money back from Royal Mail if something is wrong with the tickets. But the tickets are genune. So, you are protected and i am protected.

Here is the service i am talking about, see how it goes:
http://11amovernight.info/royalmail.com/portal/rm/webship.high.html

I will pay the fees

Let me know what you think

Posted: Sat Nov 13, 2010 8:12 am

From Domaintools

Quote:

Domain Name:11AMOVERNIGHT.INFO
Created On:22-Oct-2010 16:25:23 UTC

Dutch registrant?

Definite scam.Standard "fake escrow/courier" website which will find its way into the aa419 database.

Calling Artemis!!

Posted: Sat Nov 13, 2010 10:39 am

I've taken the liberty of starting a thread in FB here: http://forum.419eater.com/forum/viewtopic.php?p=1625496#1625496

Will be reported and (hopefully) killed soon Very Happy

Posted: Tue Nov 16, 2010 10:18 am

Site is offline, however there is a small chance that it might still be used for emails - if you receive an email from that domain let me know.

Hello I'm New here! Joined: 17 Nov 2010 Posts: 1

Don't kill it!! I want to catch this person!! If you kill the domain how will we catch her?? I was scammed by her today Sad

My money was picked up in Rotherhithe, UK. Was anyone else's money picked up in that location? You can call Western Union, give them your money # (check your email for it if you don't have the reciept).

If we all have the same place then that is probably where she lives.

Also, 310 is not an area code, it's the country code. Any phone number called from the UK will start with 310, it looks the area code but it wasn't.

Posted: Wed Nov 17, 2010 12:00 pm

Welcome! Don't underestimate our site killers experience in this area, and leaving a scamming website up for the criminals to use to con other people won't get you your money back, I assure you.

31 is the COUNTRY code for the Netherlands. Rotherhide is a large area, not much to take to the police other than one person in thousands stole your money, and they may not even have been responsible for the site anyway (sitck around and read a bit and you will come to understand why).

Sorry to hear you lost money, reality is it has gone in all likelihood.

Hello I'm New here! Joined: 03 Dec 2010 Posts: 2

Hi all,
I received a similar mail from [email protected]
It also had a link in it which led to a Royal Mail. Although it had the Royal Mail logo it was suspicious because of the missing favicon.
Another thing is that so-called Lauren Gardner replied to my mails at 2am and 4am UK time on a thursday...

I tried to inform Royal Mail that someone abuses their logo etc. for a scam but it was not possible for me to send them a mail!!! I'm not from UK and the form I had to fill out wanted an UK postcode.....

here are the mails we have written until now (including the fake royal mail link):

Obviously we need a safe delivery and payment option to make sure the exchange goes well.
I have found a great way for us to complete the deal safely and fast, and in this way you will receive the tickets in less than 24 hours after I send them, if you can take care of your part of the deal the same day as well.
The solution is provided by the international shipping company Royal Mail. They are very big here in the UK, very similar to Fedex or UPS, and they will handle and delivery of the tickets as well as the payment part.
What this procedure does is make sure you receive the tickets before I receive the money and at the same time your money will be held by Royal Mail to ensure I get paid once you use the tickets to go to the game. My payment would be approved by you next week once you use the tickets.
With this procedure I will only receive the payment for the tickets after the game, after you receive and use the tickets.
The link below is taken from the Royal Mail site and it explains the procedure I am talking about. Please check the link and the procedure and let me know if you agree to the terms.

http://royalmail.com.online-express.info/en_lang/details/rm/webship.high.html

Like I said, I will pay for the overnight delivery so you will receive them in time.

Let me know if we can proceed.

Lauren

_____________________________________________________
From: Dirk
To: [email protected]
Subject:
Date: Wed, 1 Dec 2010 14:51:52 +0000

Hi Lauren,

Unlucky customer... Lucky me! Wink

I’m still interested and would take the tickets. What is the easiest way for the payment?

Cheers,

Dirk

__________________________________________

The tickets are still available. The price is $560 for all 4.
My name is Lauren Gardner and I am from Birmingham, United Kingdom.
I can send the tickets today. I can start the delivery from my end today and you can receive them on Thursday at any address in the US. My company will pay for the delivery of the tickets and with the overnight delivery you can receive the tickets tomorrow.
I work for the Trailfinders travel agency, in Birmingham, United Kingdom.
The tickets were bought by my company as a bonus we were going to give on a deal to a customer from the US. Unfortunately the deal did not go through and now we are stuck with the tickets.
I would hate to see these tickets go to waste, so now I am trying to find a buyer for them.
Get back to me if you are still interested and let's work on the delivery and payment arrangements.

Cheers

Lauren

Posted: Fri Dec 03, 2010 6:50 am

Hey radedi, welcome to Eater!

First of all, I am glad you didn't get scammed. And second, that is a nice little fake website there. And a very new one.

http://royalmail.com.online-express.info/en_lang/details/rm/webship.high.html

is really http://www.online-express.info/

Quote:

canonical name royalmail.com.online-express.info.
aliases
addresses 174.120.232.250
Domain Whois record

Queried whois.afilias.info with "online-express.info"...

Domain ID:D35617516-LRMS
Domain Name:ONLINE-EXPRESS.INFO
Created On:30-Nov-2010 08:20:25 UTC
Last Updated On:30-Nov-2010 08:20:26 UTC
Expiration Date:30-Nov-2011 08:20:25 UTC
Sponsoring Registrar:Directi Internet Solutions Pvt. Ltd. dba PublicDomainRegistry.com (R159-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:PP-SP-001
Registrant Name:Domain Admin
Registrant Organization:PrivacyProtect.org
Registrant Street1:P.O. Box 97
Registrant Street2:Note - All Postal Mails Rejected, visit Privacyprotect.org
Registrant Street3:
Registrant City:Moergestel
Registrant State/Province:
Registrant Postal Code:5066 ZH
Registrant Country:NL
Registrant Phone:+45.36946676
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:[email protected]
Admin ID:PP-SP-001
Admin Name:Domain Admin
Admin Organization:PrivacyProtect.org
Admin Street1:P.O. Box 97
Admin Street2:Note - All Postal Mails Rejected, visit Privacyprotect.org
Admin Street3:
Admin City:Moergestel
Admin State/Province:
Admin Postal Code:5066 ZH
Admin Country:NL
Admin Phone:+45.36946676
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:[email protected]
Billing ID:PP-SP-001
Billing Name:Domain Admin
Billing Organization:PrivacyProtect.org
Billing Street1:P.O. Box 97
Billing Street2:Note - All Postal Mails Rejected, visit Privacyprotect.org
Billing Street3:
Billing City:Moergestel
Billing State/Province:
Billing Postal Code:5066 ZH
Billing Country:NL
Billing Phone:+45.36946676
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:[email protected]
Tech ID:PP-SP-001
Tech Name:Domain Admin
Tech Organization:PrivacyProtect.org
Tech Street1:P.O. Box 97
Tech Street2:Note - All Postal Mails Rejected, visit Privacyprotect.org
Tech Street3:
Tech City:Moergestel
Tech State/Province:
Tech Postal Code:5066 ZH
Tech Country:NL
Tech Phone:+45.36946676
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:[email protected]
Name Server:NS1099.WEBSITEWELCOME.COM
Name Server:NS1100.WEBSITEWELCOME.COM

And not only is it a cooperative registrar, we have a whole host of fake site killers that would love to kill the site. (Of which I am one of! Laughing

) So I will post this up in our Fake Bank Forum and we will do our best to get it killed ASAP.

Can you post up the header for the email that references the scam domain? If you need help getting the header, just post back and mention what type of email account you have (gmail, hotmail, etc.) Be sure to delete your personal email information before you post. Very Happy

Hello I'm New here! Joined: 03 Dec 2010 Posts: 2

Hi Dora,

it all started on craigslist.. I replied to the given craigslist-typical mail address from my mail account at work.

I don't exactly know what you mean with header.. Sad

Today I received 2 mails from Royal Mail with the payment information:
Western Union - Pay to: Royal Mail Agent's Name (only First Name, Last Name - Susan Lancer )
Payout location: Birmingham, United Kingdom

And "Lauren Gardner" sent me a mail if I already have made the payment.

She/He doesn't know that I know he/she is a scammer. Is there any chance to catch her/him in the act?

Royal Mail concert ticket scam	View next topic View previous topic