+ Reply to Thread
Results 1 to 3 of 3

  1. #1
    Join Date
    Jun 2005
    Location
    UK
    Posts
    152

    inst-exchanges.com

    Another check fraud / money laundering scam:

    From: David Warheit
    Subject: work as Finance Manager
    Date: Fri, 04 Nov 2005 02:35:17 -2100

    To Whom It May Concern:


    Our company Prompt Insurance is specializing in online funds transfers and payments. Our system is worldwide with agents in over 90 countries serving and meeting our client’s needs. In conjunction with major commercial banks makes our system one of the fastest, flexible and most reliable.

    Right now we are searching for enthusiastic, energetic and flexible people to work as Finance Managers for our company. This is part time position. You will be required to work up to 2 hours per day. The most important is to pay attention to the detail and flexibility. Great rewards guaranteed for the right people. You will be required to have a bank account in a specific bank with Internet banking and Tax Number/Social Security number. Computer is a must.


    Job offer: Finance Manager
    Job ID: FM01974

    More information about this position and our company you can find on our web site at: http://inst-exchanges.com/us/vacanciesproxweb/ or if you have any questions - email it to us on [email protected]


    Thank you,

    With best regards, David Warheit,
    Project manager, INSTANTexchange, Inc.

    [ Copyright © 2004-2005 INSTANTexchange, Inc. All rights reserved. ]
    Visiting the site comes up with the same old crap, basically just laundering fake checks:

    We have open vacancies in: United Kingdom, Australia and Germany.

    We are looking for payment assistant to perform money exchanges from bank wire to Western Union. You will need NO money to start. We help people to send money to their friends of family in Europe in case when they haven't near Western Union location but bank wires take about 1-2 weeks to receive cash.
    Our clients send money to our employees ( We hope you will be one of them ), they receive money and forward it to Europe via Western Union.

    Transfers will be about $2,000.00 - $10,000.00 Firstly.

    Your working schedule will be like this:
    1. You come online at 9:00 am in the morning ( Or during the day )
    2. Receive details of money transferred to you and where you should is send to
    3. Go to bank and receive cash
    4. After you must take your percent for your job from received amount
    5. Go to near Western Union location and send the rest money using received details ( You should pay all fees from the rest amount) and get back online to supply us with MTCN and amount of transfer.

    As a part-time employee, you'll have access to the following benefits:

    - $4,000 per month
    - You need 1-2 hours free during the day, and 6-8 hours during the week
    - $48,000 per year + benefits
    - Free Exchanges with us
    - Comprehensive medical and life insurance for you and your dependents
    - Great starting pay and annual raises
    - Direct deposit
    - Set work schedule
    - Variety of shift options
    - Business experience recruiters look for
    - Weekends and holidays off
    - Paid vacations and holidays
    - Discounted stock purchase plan
    - Promotion from within
    - Training and skill building


    Requirements:

    - Computer with e-mail and ICQ
    - 1-2 hours free during the day, and 6-8 hours during the week ( Mainly in the morning ) for communication
    - Western Union office in your state or region (Western Union office you can find there)
    - Banking account account ( Or be able to open a new account )
    - Fax machine ( If possible )


    Job description:

    Persons who will be accepted for this job will follow these simple instructions:

    - Receive money on your Banking account account ( For exchanging money on other currency or payment system )
    - Report to our manager about new transfer
    - Take money from your bank account
    - Send money to our coordinator via Western Union

    If you are interesting, please provide your personal information there. Same day one of our managers will contact you.
    The no-doubt-fake WHOIS details are:

    Domain Name : inst-exchanges.com

    ::Registrant::
    Name : Dena Smith
    Email : [email protected]
    Address : 6510 N Washington
    Zipcode : 99208
    Nation : US
    Tel : 509467848
    Fax :

    ::Administrative Contact::
    Name : Dena Smith
    Email : [email protected]
    Address : 6510 N Washington
    Zipcode : 99208
    Nation : US
    Tel : 509467848
    Fax :

    ::Technical Contact::
    Name : Dena Smith
    Email : [email protected]
    Address : 6510 N Washington
    Zipcode : 99208
    Nation : US
    Tel : 509467848
    Fax :

    ::Name Servers::
    ns1.makesoulbraives.com
    ns2.makesoulbraives.com

    ::Dates & Status::
    Created Date 2005-10-26 05:32:50 EDT
    Updated Date 2005-10-26 05:32:50 EDT
    Valid Date 2006-10-26 05:32:50 EDT
    Status ACTIVE
    Interestingly, the site also carries the branding of instantexchanges.com which is currently offline:

    [whois.criticalinternet.com]
    Registration Service Provided By: QWE
    Contact: +7.903325145

    Domain Name: INSTANTEXCHANGES.COM

    Registrant:
    INSTANTexchange, Inc.
    Serg Tomm ([email protected])
    Avenue Louise 168
    Brussels
    Brussels,16110
    BE
    Tel. +44.2451114818

    Creation Date: 28-Sep-2005
    Expiration Date: 28-Sep-2006

    Domain servers in listed order:
    ns1.idghost.com
    ns2.idghost.com


    Administrative Contact:
    INSTANTexchange, Inc.
    Serg Tomm ([email protected])
    Avenue Louise 168
    Brussels
    Brussels,16110
    BE
    Tel. +44.2451114818

    Technical Contact:
    INSTANTexchange, Inc.
    Serg Tomm ([email protected])
    Avenue Louise 168
    Brussels
    Brussels,16110
    BE
    Tel. +44.2451114818

    Billing Contact:
    INSTANTexchange, Inc.
    Serg Tomm ([email protected])
    Avenue Louise 168
    Brussels
    Brussels,16110
    BE
    Tel. +44.2451114818

    Status:ACTIVE
    The site appears to be hosted on 80.179.117.77 in Israel. This could be a zombie PC. The following sites are *also* hosted on that address and are most likely fraudulent.

    • www.Solidjob.org
    • www.Midterra.net
    • www.Inst-exchanges.com
    • www.Dehaster.com
    • www.Delgbla.net


    Nameservers are interesting, so lets look at makesoulbraives.com.. ah I can't. It's registered, but the details aren't showing.

    However..

    ns1.makesoulbraives.com A (Address) 69.123.242.76
    ns2.makesoulbraives.com A (Address) 85.234.137.177

    These both appear to be zombie PCs.

    Other IPs for the same domain are:

    72.145.183.37
    67.164.220.105
    12.226.24.176
    172.178.0.120
    85.176.106.100

    67.164.220.105 also hosts the fraudulent sites www.Firebirdequity.com and www.Sectt.net.

    Looks to be part of a huge botnet to me, so these are serious criminal scammers.

  2. #2
    Join Date
    Jun 2005
    Location
    UK
    Posts
    152

    Re: inst-exchanges.com

    Looks like the same outfit are behind the scam mentioned here: http://isc.sans.org/diary.php?storyid=861

  3. #3
    Join Date
    Apr 2014
    Location
    Orlando, FL
    Posts
    389

    Re: inst-exchanges.com

    testing 12345

Similar Threads

  1. About 2 Traffic Exchanges
    By need2know in forum Mail Order Scams
    Replies: 0
    Last Post: 06-01-2007, 09:29 AM
  2. Do Traffic Exchanges Work?
    By mokua in forum Mail Order Scams
    Replies: 0
    Last Post: 01-29-2007, 01:31 PM

Tags for this Thread

Bookmarks

Bookmarks

Posting Permissions

  • You may post new threads
  • You may post replies
  • You may not post attachments
  • You may edit your posts
  •