Kinda dodgy

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 12 Dec 2005 Posts: 10

http://aboutfias.com/

Looks like bs. What does everyone else think?

Posted: Thu Jan 04, 2007 12:34 pm

Looks legit to me. Have they contacted you?

Posted: Thu Jan 04, 2007 12:41 pm

Legit?????

says it started 1985 yet reistration for the domain was only 2005.

Every department uses the same telephone number.

Play with them nicely, then kill the site....

Posted: Thu Jan 04, 2007 4:54 pm

OK, perhaps my sarcasm should have been more obvious.

efias.net whois gives a yahoo.com address. Enough said.

I was more interested in how spanky was contacted.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

They also offer jobs, read as fake cheque/mule scam jobs:

Quote:

JOB DESCRIPTION

You are supposed to transfer money from our partners in your country to our international representatives.

Your objective will be collection of money (via wire transfer, as a rule) and further transfer to international representatives of our company in different companies (via Western Union money transfer, as a rule). To get money you can use your bank account in any bank of your country. If you do not have any, you will have to open one before you start working (you may open several accounts). If you already have your bank account, you can use it to receive money.
To transfer money to international representatives of our company via Western Union money transfer it is enough for you to visit the nearest Western Union centre. To find the address and telephone of the nearest centre, please, visit www.westernunion.com and click "Find Agent Location".

Your salary will depend on the sum of the transactions you will operate. Your profit will make 5% from each transaction you will operate. The sum of one transaction generally does not exceed 5,000.00, so we can easily calculate, that being engaged only 2-3 times a week you will get minimum 2,000.00-2,500.00 per month.

http://efias.com/index.php?page=54

Here is the Who-Is for the domain, I will send an abuse notification about the scammers site right now, it's on www.gnax.net and they are quick to deal with scam sites:

Quote:

www.efias.com
207.210.95.194, ns3.maxiehost.com., Global Net Access, LLC , [email protected]

Domain Name: EFIAS.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS3.MAXIEHOST.COM
Name Server: NS4.MAXIEHOST.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 26-nov-2006
Creation Date: 06-mar-2006
Expiration Date: 06-mar-2007

>>> Last update of whois database: Thu, 04 Jan 2007 12:00:27 EST <<<

domain: efias.com
owner: Paul Sokal
organization: EFIAS
email: [email protected]
address: 1530 Hopkins Road
city: Panton
postal-code: 05491
country: US
phone: +1.8027592520
admin-c: CCOM-438503 [email protected]
tech-c: CCOM-438503 [email protected]
billing-c: CCOM-438503 [email protected]
nserver: ns4.maxiehost.com
nserver: ns3.maxiehost.com
status: lock
created: 2006-03-06 07:54:38 UTC
modified: 2006-11-26 07:03:27 UTC
expires: 2007-03-06 02:51:19 UTC

contact-hdl: CCOM-438503
person: Paul Sokal
organization: EFIAS
email: [email protected]
address: 1530 Hopkins Road
city: Panton
postal-code: 05491
country: US
phone: +1.8027592520

source: joker.com live whois service
query-time: 0.0701889999999999
db-updated: 2007-01-04 17:00:31

[edit]

Abuse notification has been sent.

Posted: Thu Jan 04, 2007 8:21 pm

Added efias.com to the DB
http://db.aa419.org/fakebanksview.php?key=11662

[Edit] Added aboutfias.com to the DB
http://db.aa419.org/fakebanksview.php?key=11664

Note, the email addresses for both show efias.NET as the email domain.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

By mistake I sent the http://aboutfias.com url from the original posters post Embarassed

, Gnax just replied saying it's not on their server, I have replied giving them the correct domain name, although, if they read my whole abuse notificaton, the correct url was mentioned twice including the url to the job advert page, hopefully they should kill it when they read my reply.

Posted: Thu Jan 04, 2007 8:33 pm

Efias.com is the real site, aboutfias.com is just a frame loading from the efias domain. Aboutfias.com needs to go as well.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

Cheers SF, I have also sent an abuse notification about www.Aboutfias.com

Posted: Thu Jan 04, 2007 9:09 pm

A couple of US flags will make a nice addition to your sig, SP. Wink

Posted: Thu Jan 04, 2007 9:17 pm

I knew I'd heard that name before...

http://forum.419eater.com/forum/viewtopic.php?t=90031

Is it the same outfit?

Posted: Thu Jan 04, 2007 9:22 pm

Quote:

You need the following information to login to your account:
http://efias.com
Your Login is: xx
Your Password is: xxxxxx

Yup, same one.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

^^^^^ Looks like it, exactly the same text and joker.com name servers.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

Just had a quick chat on YIM with one of the abuse department operatives at Gnax.net who host the www.efias.com domain:

Quote:

Gnax Abuse Department: hello

SP: Hi, you are on the abuse team at gnax.net yes?

Gnax Abuse Department: yes i am

SP: good, I sent an abuse notification yesterday about this scammers site you are hosting: http://www.efias.com

Gnax Abuse Department: i remember seeing that, just a second please

SP: i didn't want to bother gnax by emailing them again, so I joined the forum to post it there also

SP: ok

Gnax Abuse Department: i did contact the server owner yesterday, and they responded

SP: this is a known scammer, he has another domain at a diffeent host as well, this is his other faker that is a frame from efias.com: http://www.aboutfias.com the same scammer also had this domain: http://e-fias.com and we had that closed down last October

Gnax Abuse Department: "Thank you for the notification. The client has been notified and the site will be removed promptly."

SP: they are also known to pay for their domain names and hosting with stolen credit cards

Gnax Abuse Department: i'll follow up again with the host to see what's going on

SP: thanks mate.

Gnax Abuse Department: np, this should all be resolved soon Smile

SP: thanks for your help, the fakers have been added to the fake bank database on aa419.org: http://db.aa419.org/fakebanksview.php?key=11662

http://db.aa419.org/fakebanksview.php?key=11664

SP: see ya later

[edit]

5 minutes later now and I just pinged www.efias.com and get:

Quote:

Sorry, I could not determine the IP for www.efias.com (error 11004).

The page is just blank and wont load, hopefully they just killed it now Very Happy

, and obviously the www.aboutfias.com wont load either now because of that, not heard back from their hosts yet.

Posted: Fri Jan 05, 2007 11:51 pm

Efias is dead Very Happy

Aboutfias isn't loading, but Netcraft still resolves. I wouldn't be surprised if the scammer moves the site there (if the host doesn't dead it first).

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

^^^^^ Yep

now I can have one of those nice stars and stripes United States

Posted: Sat Jan 06, 2007 12:48 am

^^^
You'll get another if/when aboutfias goes down Very Happy

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

No reply from the abuse department for aboutfias.com so I sent them an updated email telling them that gnax.net have killed the efias.com account etc.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

WTF, www.efias.com appears to be back online Evil or Very Mad

Can someone double check this, now appears to be hosted by ThePlanet.com = [email protected] will shoot of an abuse notice shortly, can someone confirm the planet first?

Posted: Sat Jan 06, 2007 12:23 pm

Confirmed SP:

01/06/07 12:19:50 IP block 74.52.16.226
Trying 74.52.16.226 at ARIN
Trying 74.52.16 at ARIN

OrgName: ThePlanet.com Internet Services, Inc.
OrgID: TPCM
Address: 1333 North Stemmons Freeway
Address: Suite 110
City: Dallas
StateProv: TX
PostalCode: 75207
Country: US

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

^^^^^ Cheers, was pretty certain, but didn't want to send abuse if it wasn't with them Very Happy

, abuse notification has now been sent to the planet with forwarded emails that I sent to Gnax.net and the chatlog from my chat with their abuse department last night.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

Got a reply from ThePlanet:

Quote:

Dear Sir or Madam,

We appreciate you bringing this to our attention. This issue is currently being investigated. We will E-Mail you when we feel this issue has been resolved.

--
Regards,
Abuse Department
The Planet - EV1Servers

Posted: Sun Jan 07, 2007 12:03 pm

Just hope they shut it down soon.

Posted: Sun Jan 07, 2007 1:06 pm

SP: I'm surprised you got a reply on a Sunday! Shocked

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

^^^^^ Me too, I was expecting Monday at the earliest Shocked