your cash live

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Not quite a Newb Joined: 28 Jun 2005 Posts: 27

Just came across a new check mule group. They use the business name of "Your Cash Live". The victims are contacted via [email protected] . I can't find a web sited for em and I have no headers etc... but counterfeit business checks have been received in Eastern US. They are running the usual "heres a check from our US customers. Deposite it and Western Union 90% back to us.

Posted: Wed Jul 11, 2007 7:30 pm

The site, which domain they use for the mail (http://futureinvests.com/), looks like a HYIP and not a check mule?

Would you happen to have a mail they have sent out?

Posted: Wed Jul 11, 2007 8:13 pm

I took a quick look at http://futureinvests.com/, too - that's surely the oddest looking HYIP I've ever seen. Razz

Not so much of a HYIP, but something else dodgy. For a starter, they don't ask for money and there appears to be no way of paying them.
Did you fill the form? I think one of my characters is going to have a go at it...
Yum! I love filling forms! Laughing

/EDIT: Finished filling the form. They're going to send me $500 by email, wahey! Rolling Eyes

Posted: Wed Jul 11, 2007 8:24 pm

Hehe, interesting. I wanted to fill out the form too and see what happened before I posted here, but I guess I'll do that now. Who can't use $500 sent in the email Smile

Posted: Thu Jul 12, 2007 9:15 am

No answer so far. Not sure what to make of this. Very odd.

Here are the WHOIS details, just in case:

Quote:

Domain Name: FUTUREINVESTS.COM
Registrar: ESTDOMAINS, INC.
Whois Server: whois.estdomains.com
Referral URL: http://www.estdomains.com
Name Server: NS1.WORLDINVESTS.COM
Name Server: NS2.WORLDINVESTS.COM
Status: ok
Updated Date: 20-jun-2007
Creation Date: 14-mar-2007
Expiration Date: 14-mar-2008

Quote:

Domain Name: FUTUREINVESTS.COM

Registrant:
Malde Consulting LLP
Malde ([email protected])
483 GREEN LANES
LONDON
London,N13 4BS
GB
Tel. +044.3042920341

Creation Date: 14-Mar-2007
Expiration Date: 14-Mar-2008

Domain servers in listed order:
ns2.worldinvests.com
ns1.worldinvests.com

Administrative Contact:
Malde Consulting LLP
Malde ([email protected])
483 GREEN LANES
LONDON
London,N13 4BS
GB
Tel. +044.3042920341

Technical Contact:
Malde Consulting LLP
Malde ([email protected])
483 GREEN LANES
LONDON
London,N13 4BS
GB
Tel. +044.3042920341

Billing Contact:
Malde Consulting LLP
Malde ([email protected])
483 GREEN LANES
LONDON
London,N13 4BS
GB
Tel. +044.3042920341

Status:ACTIVE

Quote:

% Information related to '195.189.246.0 - 195.189.247.255'

inetnum: 195.189.246.0 - 195.189.247.255
netname: PRO100-NET
descr: PB ProstoHost
descr: 04074, Ukraine, Kiev
country: UA
org: ORG-PA120-RIPE
admin-c: UAG3-RIPE
tech-c: GMA-RIPE
status: ASSIGNED PI
notify: [email protected]
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: UAG3-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: UAG3-MNT
mnt-domains: UAG3-MNT
changed: [email protected] 20060726
changed: [email protected] 20060726
source: RIPE

organisation: ORG-PA120-RIPE
org-name: PB ProstoHosting.com
org-type: OTHER
address: Ukraine, Kiev
address: Leonida Pervomayskogo 2 of 3
phone: +380 (44) 231-65-36
phone: +7 (495) 938-97-12
e-mail: [email protected]
mnt-ref: UAG3-MNT
mnt-by: UAG3-MNT
changed: [email protected] 20060926
changed: [email protected] 20070102
source: RIPE

role: ProstoHosting.com Coordination Center
address: Kiev, Ukraine
address: Leonida Pervomayskogo 3 of 2
phone: +380.44 231 65 36
phone: +7 495 938 97 12
remarks: ---------------------------------------------------------
remarks: Points of contact for ProstoHosting Network Operations
remarks: routing and peering: [email protected]
remarks: SPAM and Network security issues: [email protected]
remarks: Customer support: [email protected]
remarks: ---------------------------------------------------------
e-mail: [email protected]
admin-c: UAG3-RIPE
tech-c: UAG3-RIPE
nic-hdl: GMA-RIPE
changed: [email protected] 20061021
source: RIPE

person: Andrei U Gramm
address: Ukraine, Kiev
address: Leonida Pervomayskogo 3 of 2
org: ORG-PA120-RIPE
phone: +380.44 231 65 36
nic-hdl: UAG3-RIPE
mnt-by: UAG3-MNT
changed: [email protected] 20060926
source: RIPE

% Information related to '195.189.246.0/23AS41062'

route: 195.189.246.0/23
descr: ProstoHost.NET
origin: AS41062
mnt-by: UAG3-MNT
changed: [email protected] 20060607
source: RIPE

There is no trace of a company called "Malde Consulting" at 483 Green Lanes in London. Via Royal Mail, I can only see:

Azzurri Communications Ltd
Bathmates Ltd
Belgravia Financial Consultancy Services
Arck Services 2006 Ltd
Counterfire Ltd
Eurocollections
Leco Ltd
Prime Secretarial Services
Starfish Seafood
Thames Cars & Co

See also: http://www.londononline.co.uk/area/Green_Lanes_N13/ - there's a Detective Agency at the same house number. Maybe we should ask them? Wink

Companies House does not show any record for Malde Consulting LLP.

The problem is that because I'm not sure what the website does, it will be difficult to complain about it to the hoster without the original email as backup.

I googled "Your Cash Live" and found this Yahoo link:
http://au.answers.yahoo.com/question/index.php?qid=20070708141550AAKPlGh

The money seems to be going to Russia. Cheque vlads? Confused

Not quite a Newb Joined: 28 Jun 2005 Posts: 27

Sorry, I don't have any of their e-mails. This came to me third-hand. The original check receiver deleted the messages. She just got a seemingly random check in the mail. It was a counterfeit of a business account from california. Unusually, it actually came with a sheet of instructions on how to cash and tansfer the funds. Thats where I gut the futureinvests domain.

Posted: Thu Jul 12, 2007 12:46 pm

Do you still have the cheque & the instructions?

Not quite a Newb Joined: 28 Jun 2005 Posts: 27

I have faxed copies

Posted: Thu Jul 12, 2007 4:57 pm

Any chance you could scan them & post them here?

Not quite a Newb Joined: 28 Jun 2005 Posts: 27

Luther, I'm not too proud to admit that youre asking me to do something beyond my technical abilities. I can scan em but have no idea how to post em. Haven't you ever noticed that I have never had an avatar? PM me and I'll do my best though.