jax-plastic.com

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Tue Jan 29, 2013 2:31 am

http://jax-plastic.com/

IP: 182.237.2.126

Suspiciously recent and short registration for a site that claims to do business in 30 countries. Primary contact number is a premium rate number, not a landline. Personal registrant for company site. No Chinese language option on a supposedly Chinese site. Claimed physical address does not appear to exist.

Quote:

Domain Name: JAX-PLASTIC.COM
Registrar: XIAMEN CHINASOURCE INTERNET SERVICE CO., LTD.
Whois Server: whois.cnolnic.com
Referral URL: http://www.zzy.cn
Name Server: F1G1NS1.DNSPOD.NET
Name Server: F1G1NS2.DNSPOD.NET
Status: clientTransferProhibited
Updated Date: 22-aug-2012
Creation Date: 22-aug-2012
Expiration Date: 22-aug-2013

I got this site from Loualsindor, who is baiting a product scammer using this domain for email. The odd thing is that the company seems to have a wider web presence than is normal for a lad site. Can some other site killers take a look and tell me what you folks think?

Posted: Wed Jan 30, 2013 4:19 am

Bumping this so more people take a look.

Posted: Wed Jan 30, 2013 3:42 pm

There are hundres if not thousands of these chinese sites "selling" everything under the sun. If you do actually recieve something it will be a forgery.

This site is mostly likely a fake but is not the AFF that we deal with.

Marking n/a

Posted: Wed Jan 30, 2013 9:41 pm

Actually, as this bait is proceeding it is shaping up to be an AFF scheme. The "sales rep" is requiring a 40% deposit up front (reduced to 15% as soon as I barked about it) and is denying me a visit to the until he's received it. I've got a bank account for a transfer, but want to get a bit deeper before I get it hammered by Alan, just in case.

Posted: Thu Jan 31, 2013 12:28 am

Hmmmm. My gut feeling is that Woody is right. I'd probably use, as a reason for that, the following line of reasoning- is there anything in emails from the domain that you could usefully use as evidence of AFF in a fight with the webhost/registrar?

Posted: Thu Jan 31, 2013 12:38 am

He's dancing around it so far, which is why I'm delaying send the account info to Alan. I want to be sure I corner him into getting sufficiently "scammy" so Alan's got an easy kill.

I'd be happy to post all the insanity here once I get to that point, if it will help. I'm not really in the site-killing business, but will do my best to give you the best info I can.

Any magic words that the domains are looking for? I can always try to shove the conversation in a necessary direction. My lad is still a little timid, so I'm taking this fairly slowly.

At this point, I'm pressing for a "site visit" to try to get him to intensify the need for me to send money "first". If there's a way to leverage that for you to make this easier, let me know!

Posted: Thu Jan 31, 2013 1:12 am

Honestly, there's already enough evidence to get it closed down now, and even if it isn't AFF, I still want to kill it. Sharing any suspicious emails you receive can't hurt.

Posted: Thu Jan 31, 2013 1:22 am

Sure, I can post the whole string here, if that's the correct process. There's not much (he's mercifully NOT the keeper of a long drawn-out script), but the pay-up-front-first piece is pretty blatant.

If this isn't the place for it, please let me know. Since it's not a bank, I don't want to muddy things up.

Posted: Thu Jan 31, 2013 2:01 am

No need to post the whole thing. Just the part where he asks for the advance fee is fine. That is definitive proof.

Posted: Thu Jan 31, 2013 6:07 pm

I'll give you the back-and-forth where the 40% deposit is demanded before the "site visit" as well as the header information:

Dear Friend
Good morning,have a nice day.
Our offer as follow.
EPP price:us$0.8/piece FOB qingdao port.
By the way,could you tell me more information
about your company?
Best&Regard
Saul
---
The price is very good, the best I've seen. 40% up front is a bit more than we're used to, however.

Lou
---
Dear Friend
Good morning,have a nice day.
Could you tell me how much percent
you can accept? I'll talk it to my boss.
Best&Regard
---
Thank you for that consideration. We would prefer a 15% deposit, if that is agreeable.

Lou
---
Dear Friend
Thanks for your reply.
My boss accept it.but you must pay for the deposit brfore
visit our factory.
What's your idears?
By the way,I had sent our bank information to you in attached.
Looking forward to hearing from you soon.
Best&Regard
Saul
---
And the header, let me know what else I can do to help:

Delivered-To: [email protected]
Received: by 10.194.46.199 with SMTP id x7csp175450wjm;
Tue, 18 Dec 2012 21:14:36 -0800 (PST)
X-Received: by 10.68.244.6 with SMTP id xc6mr14634437pbc.94.1355894075700;
Tue, 18 Dec 2012 21:14:35 -0800 (PST)
Return-Path: <[email protected]>
Received: from corp.21cn.com (corp.forptr.21cn.com. [121.14.129.37])
by mx.google.com with ESMTP id tp3si4116289pbc.205.2012.12.18.21.14.31;
Tue, 18 Dec 2012 21:14:35 -0800 (PST)
Received-SPF: neutral (google.com: 121.14.129.37 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=121.14.129.37;
Authentication-Results: mx.google.com; spf=neutral (google.com: 121.14.129.37 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
HMM_SOURCE_IP:10.27.101.3:42746.1470363179
HMM_ATTACHE_NUM:0000
HMM_SOURCE_TYPE:SMTP
Received: from XP201202061629 (entas3.inner-hermes.com [10.27.101.3])
by corp.21cn.com (HERMES) with ESMTP id 92BDCAC026
for <[email protected]>; Wed, 19 Dec 2012 13:14:23 +0800 (CST)
Received: from XP201202061629 ([120.0.167.188])
by 21CN-entas3(MEDUSA 10.27.101.3) with ESMTP id 1355894059.30294 for [email protected]
;
Wed Dec 19 13:14:30 2012
0/X-Total-Score: 0:
2/X-Total-Score: 0:
X-FILTER-SCORE: to=<8d9096828d948a8f85909361888e828a8d4f84908e>, score=<1355894070Pv7x1IBBBBBGBBjBBzBGjzASxiTEEEEEQEEPEEtEQPtn>
X-REAL-FROM:[email protected]
Message-ID: <1D6A49F5A9AB40ED8A9DD2B8D4259A85@XP201202061629>
From: "saul" <[email protected]>
To: "Lou Sindor" <[email protected]>
References: <90B401CCB0FE4E7BB2A8DE516E9CA37D@XP201202061629><CAGGtSMwG9y1ufiuznMQgg8zEzsaneFKDUgMb-YE1+D6hgn+TTw@mail.gmail.com><CD4CA05EA94A4A3DAD4AF8EE49EC09F7@XP201202061629><CAGGtSMz92bKgyi_UiW2o--zWttLopkEQ9AyxbG0RyqH4x24Sfg@mail.gmail.com><375DEB7FEA5B485385DA714513C31127@XP201202061629><CAGGtSMwk_Xif+0ft9eY4MX94NKgUBHX8g2ii_H=LiW4mp01QRg@mail.gmail.com><81D9FD05C18D402F8C914B2EDB01A942@XP201202061629><CAGGtSMx3=LcY-37jnyw4SpeALv29Q7edi0dYC0SjGwaK3pO7_g@mail.gmail.com><BAC7394B5FB34478AFC768133CFFE127@XP201202061629> <CAGGtSMy9Syf82iR+vi4hpX7HYkKaM7bcbHLdSKjE+9m6R-mebA@mail.gmail.com>
Subject: Re: GPPS
Date: Wed, 19 Dec 2012 13:14:11 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0E06_01CDDDEA.BC7EBA40"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
Disposition-Notification-To: "saul" <[email protected]>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157

This is a multi-part message in MIME format.

------=_NextPart_000_0E06_01CDDDEA.BC7EBA40
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64

Posted: Tue Feb 05, 2013 1:33 am

Just an update...

The lad has dropped his AFF demands to just $2,000 which he will use for transportation and security during my site visit. He insists it will be returned upon my arrival, but would like it sent as soon as possible.

And then he wants to delay my trip by 10 days.

Amazing!

The web site was gone for a bit, but seems to have returned.

Posted: Tue Feb 05, 2013 1:38 am

With the AFF angle established now, can we DB this one?

Posted: Tue Feb 05, 2013 2:19 am

A little more fuel, in case it's needed:

-----Dear Friend,

Thank you for your email.

USD-based arbitration are no problem. (I had said that my attorney had some issues with his contract wording...something I'll be able to use for a long one-line-at-a-time torture session if I need it.)

We are glad you come to visit us and meet .The airport code is ZSQD.

Before visitation,could you pay USD2000 for all the cost in China?
We must approval of local authorities for your visitation.
The factory is far away .We must drive to factory from airport.
And we must ensure your personal safety .
And Our quality is good,you must satisfy with our goods. We will return USD2000 to you after placing order.
Please confirm it as soon as possible.If you are agree it, we will arrange it .

By the way from Thursday, our Spring Festival will be coming.It will be end on 17th Feb, 2013. So could you arrage the visitation again ? (I was originally asking to go on the 7th.)

Header in case you need it:

Delivered-To: [email protected]
Received: by 10.194.0.40 with SMTP id 8csp22949wjb;
Sun, 3 Feb 2013 22:56:30 -0800 (PST)
X-Received: by 10.66.80.68 with SMTP id p4mr49776635pax.35.1359960989663;
Sun, 03 Feb 2013 22:56:29 -0800 (PST)
Return-Path: <[email protected]>
Received: from corp.21cn.com (corp.forptr.21cn.com. [121.14.129.38])
by mx.google.com with ESMTP id bf6si15867661pab.228.2013.02.03.22.56.24;
Sun, 03 Feb 2013 22:56:29 -0800 (PST)
Received-SPF: neutral (google.com: 121.14.129.38 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=121.14.129.38;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 121.14.129.38 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
HMM_SOURCE_IP:10.27.101.7:50237.611094456
HMM_ATTACHE_NUM:0000
HMM_SOURCE_TYPE:SMTP
Received: from XP201202061629 (entas7.inner-hermes.com [10.27.101.7])
by corp.21cn.com (HERMES) with ESMTP id 9A75A48400C
for <[email protected]>; Mon, 4 Feb 2013 14:54:23 +0800 (CST)
Received: from XP201202061629 ([110.249.117.174])
by 21CN-ent7(MEDUSA 10.27.101.7) with ESMTP id 1359960860.11271 for [email protected]
;
Mon Feb 4 14:56:23 2013
0/X-Total-Score: 0:
2/X-Total-Score: 0:
X-FILTER-SCORE: to=<8d9096828d948a8f85909361888e828a8d4f84908e>, score=<13599609830mBBBBBTBBjBBfBTjfPWSEcEEEEELEEwEEOELwORHfgb>
X-REAL-FROM:[email protected]
X-Receive-IP:110.249.117.174 [email protected]
Message-ID: <9587AA2D9A494DAC895C538DCB1F85C5@XP201202061629>
From: "saul" <[email protected]>
To: "Lou Sindor" <[email protected]>
References: <CAGGtSMwvWMx_A=usib0e5btWbyCdf_13pc55B+=yN8dthu_+Rw@mail.gmail.com><ED6499383F804A0BB637C1629D743CD7@XP201202061629><CAGGtSMwzURBUnAyKLt3tQg9WwVe37mmdtBE7obo0bRFOHhmGbg@mail.gmail.com><EB80AD7023CA4718B03C6516EA307EE9@XP201202061629><CAGGtSMypEhvsk61LNWHQ5XZAw9fqte3+p+iv=++D8iRJBjK-2Q@mail.gmail.com><84EC25A3B4F4447DBE171A0D59954505@XP201202061629><CAGGtSMzyxOneYsyZ_7s4L3wZGDwQthetNA2P7M2S5w4jRyYbYw@mail.gmail.com><705BA2B94F8E4EB38C3910AB27FCEB56@XP201202061629><CAGGtSMx3fmicmP-dA3=anpWfiOQd9LSBn+HiPR0XFxrONxfDaw@mail.gmail.com><94C81F2E57514BC9848A68F7E686F23F@XP201202061629> <CAGGtSMyGfNeRwqn+NpRYU8cxPqBNo1D9aAwfYnOFL4Feosb6=w@mail.gmail.com>
Subject: Re:Re:EPP FOAM
Date: Mon, 4 Feb 2013 14:54:23 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_01B6_01CE02E7.8533ABA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
Disposition-Notification-To: "saul" <[email protected]>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157

This is a multi-part message in MIME format.

------=_NextPart_000_01B6_01CE02E7.8533ABA0
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: base64

Posted: Tue Feb 05, 2013 10:27 am

I'm still not convinced.

There are over 10,000 Google results for "Qingdao poly xin plastic" and not a single scam reference.

They could be asking for a fee to check that you are legit Smile

Posted: Tue Feb 05, 2013 5:54 pm

I think he feels it slipping away, this is what I got this morning:

Dear Friend
Thanks for your reply.
As our companys rule,we can provide the samples to you which it's comparative hardness,but the customers will be paid for the charges,the total amount
is usd 303 dollars.we'll delivery it by DHL,if we get the cost of samples today,
we'll arrange delivery it at once.
How do you like?
Best&Regard
Saul

So we've gone for an advance fee demand of
1. A$24,000 deposit before I am allowed to see either their facility or any products (accompanied by a bank account for me to wire to immediately, of course).
2. A reduced deposit of $9,000 because I barked at the first amount.
3. No deposit, but $2,000 sent in advance for them to arrange my travel and "security"(?).
4. A new and reduced demand for the purchase of samples ahead of time for $303 (but only if they get it today).

I'm certainly convinced.

(Edit: try Googling my pal's address, [email protected]. It pops up in several spam forums. Also, and this is more convincing, he sent his "We learn from the web that you are in the market for chemical materials and would like to establish business realation with you" message to my baiting account, not a catcher. The ONLY place that my loualsindor address appears is in baits and here.)

Posted: Thu Feb 07, 2013 6:49 pm

The lad has again pushed off my trip by a few days and renewed the AFF demand for $2,000 to cover my expenses while I'm in China. I'm delaying him at this point, offering to just pay my way as I go to "avoid the paperwork". He's definitely squirming.

How can I assist in killing this?

Posted: Thu Feb 07, 2013 7:01 pm

You guys are more than welcome to try reporting this site whenever you want...

It's just not going to get a DB entry.

Marking 'n/a' to move to Misc. Forum