Author |
Message |
beeman
Not quite a Newb
Joined: 28 Jun 2005
Posts: 27
|
Posted:
Wed Jul 11, 2007 7:11 pm |
|
Just came across a new check mule group. They use the business name of "Your Cash Live". The victims are contacted via [email protected] . I can't find a web sited for em and I have no headers etc... but counterfeit business checks have been received in Eastern US. They are running the usual "heres a check from our US customers. Deposite it and Western Union 90% back to us. |
|
|
|
|
JoeM
Master Baiter
Joined: 20 Jun 2007
Posts: 164
Location: Saluting Thor in Asgård
|
Posted:
Wed Jul 11, 2007 7:30 pm |
|
The site, which domain they use for the mail (http://futureinvests.com/), looks like a HYIP and not a check mule?
Would you happen to have a mail they have sent out? |
_________________ 'We have discovered to our charging that you are been clever by half' -
HYIP:
Fake sites: 3x 3x 1x 1x 1x 1x 1x 1x
[Click here to support 419Eater.com] |
|
|
|
Luther Blissett
Elite Baiter
Joined: 06 Sep 2005
Posts: 1029
Location: Watford, Middle East
|
Posted:
Wed Jul 11, 2007 8:13 pm |
|
|
|
|
JoeM
Master Baiter
Joined: 20 Jun 2007
Posts: 164
Location: Saluting Thor in Asgård
|
Posted:
Wed Jul 11, 2007 8:24 pm |
|
Hehe, interesting. I wanted to fill out the form too and see what happened before I posted here, but I guess I'll do that now. Who can't use $500 sent in the email |
_________________ 'We have discovered to our charging that you are been clever by half' -
HYIP:
Fake sites: 3x 3x 1x 1x 1x 1x 1x 1x
[Click here to support 419Eater.com] |
|
|
|
Luther Blissett
Elite Baiter
Joined: 06 Sep 2005
Posts: 1029
Location: Watford, Middle East
|
Posted:
Thu Jul 12, 2007 9:15 am |
|
No answer so far. Not sure what to make of this. Very odd.
Here are the WHOIS details, just in case:
Quote: |
Domain Name: FUTUREINVESTS.COM
Registrar: ESTDOMAINS, INC.
Whois Server: whois.estdomains.com
Referral URL: http://www.estdomains.com
Name Server: NS1.WORLDINVESTS.COM
Name Server: NS2.WORLDINVESTS.COM
Status: ok
Updated Date: 20-jun-2007
Creation Date: 14-mar-2007
Expiration Date: 14-mar-2008
|
Quote: |
Domain Name: FUTUREINVESTS.COM
Registrant:
Malde Consulting LLP
Malde ([email protected])
483 GREEN LANES
LONDON
London,N13 4BS
GB
Tel. +044.3042920341
Creation Date: 14-Mar-2007
Expiration Date: 14-Mar-2008
Domain servers in listed order:
ns2.worldinvests.com
ns1.worldinvests.com
Administrative Contact:
Malde Consulting LLP
Malde ([email protected])
483 GREEN LANES
LONDON
London,N13 4BS
GB
Tel. +044.3042920341
Technical Contact:
Malde Consulting LLP
Malde ([email protected])
483 GREEN LANES
LONDON
London,N13 4BS
GB
Tel. +044.3042920341
Billing Contact:
Malde Consulting LLP
Malde ([email protected])
483 GREEN LANES
LONDON
London,N13 4BS
GB
Tel. +044.3042920341
Status:ACTIVE
|
Quote: |
% Information related to '195.189.246.0 - 195.189.247.255'
inetnum: 195.189.246.0 - 195.189.247.255
netname: PRO100-NET
descr: PB ProstoHost
descr: 04074, Ukraine, Kiev
country: UA
org: ORG-PA120-RIPE
admin-c: UAG3-RIPE
tech-c: GMA-RIPE
status: ASSIGNED PI
notify: [email protected]
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: UAG3-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: UAG3-MNT
mnt-domains: UAG3-MNT
changed: [email protected] 20060726
changed: [email protected] 20060726
source: RIPE
organisation: ORG-PA120-RIPE
org-name: PB ProstoHosting.com
org-type: OTHER
address: Ukraine, Kiev
address: Leonida Pervomayskogo 2 of 3
phone: +380 (44) 231-65-36
phone: +7 (495) 938-97-12
e-mail: [email protected]
mnt-ref: UAG3-MNT
mnt-by: UAG3-MNT
changed: [email protected] 20060926
changed: [email protected] 20070102
source: RIPE
role: ProstoHosting.com Coordination Center
address: Kiev, Ukraine
address: Leonida Pervomayskogo 3 of 2
phone: +380.44 231 65 36
phone: +7 495 938 97 12
remarks: ---------------------------------------------------------
remarks: Points of contact for ProstoHosting Network Operations
remarks: routing and peering: [email protected]
remarks: SPAM and Network security issues: [email protected]
remarks: Customer support: [email protected]
remarks: ---------------------------------------------------------
e-mail: [email protected]
admin-c: UAG3-RIPE
tech-c: UAG3-RIPE
nic-hdl: GMA-RIPE
changed: [email protected] 20061021
source: RIPE
person: Andrei U Gramm
address: Ukraine, Kiev
address: Leonida Pervomayskogo 3 of 2
org: ORG-PA120-RIPE
phone: +380.44 231 65 36
nic-hdl: UAG3-RIPE
mnt-by: UAG3-MNT
changed: [email protected] 20060926
source: RIPE
% Information related to '195.189.246.0/23AS41062'
route: 195.189.246.0/23
descr: ProstoHost.NET
origin: AS41062
mnt-by: UAG3-MNT
changed: [email protected] 20060607
source: RIPE
|
There is no trace of a company called "Malde Consulting" at 483 Green Lanes in London. Via Royal Mail, I can only see:
Azzurri Communications Ltd
Bathmates Ltd
Belgravia Financial Consultancy Services
Arck Services 2006 Ltd
Counterfire Ltd
Eurocollections
Leco Ltd
Prime Secretarial Services
Starfish Seafood
Thames Cars & Co
See also: http://www.londononline.co.uk/area/Green_Lanes_N13/ - there's a Detective Agency at the same house number. Maybe we should ask them?
Companies House does not show any record for Malde Consulting LLP.
The problem is that because I'm not sure what the website does, it will be difficult to complain about it to the hoster without the original email as backup.
I googled "Your Cash Live" and found this Yahoo link:
http://au.answers.yahoo.com/question/index.php?qid=20070708141550AAKPlGh
The money seems to be going to Russia. Cheque vlads? |
_________________ Banks: x1 x2 Law Firms: x1 Misc. Mugu Pooh: x1 x2 HYIPs: x25 Phonelad Websites: x6
Donate the Nurse, the Eater needs Pants... Err? * Scamwarners.com * Artists against 419 * Kill HYIPs & Ponzi Scams! |
|
|
|
beeman
Not quite a Newb
Joined: 28 Jun 2005
Posts: 27
|
Posted:
Thu Jul 12, 2007 12:36 pm |
|
Sorry, I don't have any of their e-mails. This came to me third-hand. The original check receiver deleted the messages. She just got a seemingly random check in the mail. It was a counterfeit of a business account from california. Unusually, it actually came with a sheet of instructions on how to cash and tansfer the funds. Thats where I gut the futureinvests domain. |
|
|
|
|
Luther Blissett
Elite Baiter
Joined: 06 Sep 2005
Posts: 1029
Location: Watford, Middle East
|
Posted:
Thu Jul 12, 2007 12:46 pm |
|
|
|
|
beeman
Not quite a Newb
Joined: 28 Jun 2005
Posts: 27
|
Posted:
Thu Jul 12, 2007 3:44 pm |
|
|
|
|
Luther Blissett
Elite Baiter
Joined: 06 Sep 2005
Posts: 1029
Location: Watford, Middle East
|
Posted:
Thu Jul 12, 2007 4:57 pm |
|
|
|
|
beeman
Not quite a Newb
Joined: 28 Jun 2005
Posts: 27
|
Posted:
Thu Jul 12, 2007 8:52 pm |
|
Luther, I'm not too proud to admit that youre asking me to do something beyond my technical abilities. I can scan em but have no idea how to post em. Haven't you ever noticed that I have never had an avatar? PM me and I'll do my best though. |
|
|
|
|
|