Web Hosting Talk







View Full Version : Fraud Warning ?


UNIXIELHOST
11-29-2001, 02:01 AM
We got a order for most expensive package just recent, see what it has to say:



fullname: Tan Chong Meng

email: nabil@devilla.biz

companyname: bloodbrother corp inc

streetaddress: rumah pangsa singapore

city: singapore

state: singapore

zip: 65847

country: SINGAPORE

telephone: 6590254561

domainname: irc-world.net

domainstatus: transfer

username: sotzdotz

package: Advanced (500MB/12GB)

options_frontpage: yes

comments: help me if i blur



I checked irc-world.net is not registered, he asked me to transfer a domain but havent registered. Doesnt making any sense.

I decide to run a check of domain name of email address he is using, I use NetSol to run a search, here what I find:

NOTE: FAILURE TO LOCATE A RECORD IN THE WHOIS DATABASE IS NOT INDICATIVE
OF THE AVAILABILITY OF A DOMAIN NAME.

Domain ID: D1319913-BIZ
Domain Name: DEVILLA.BIZ
Sponsoring Registrar: NameSecure.com, Inc.
Domain Status: ok
Administrative Contact ID: LJQ8NS445327
Administrative Contact Name: chibor chibor
Administrative Contact Organization: chibor
Administrative Contact Address1: ipoh
Administrative Contact Address2: perak
Administrative Contact City: ipoh
Administrative Contact State/Province: CA
Administrative Contact Postal Code: 545562
Administrative Contact Country: United States
Administrative Contact Phone Number: +1.21545245
Administrative Contact Facsimile Number:
Administrative Contact Email: dr-sotz@dr-sotz.org
Billing Contact ID: NOP2NS445327
Billing Contact Name: chibor chibor
Billing Contact Organization: chibor
Billing Contact Address1: ipoh
Billing Contact Address2: perak
Billing Contact City: ipoh
Billing Contact State/Province: CA
Billing Contact Postal Code: 545562
Billing Contact Country: United States
Billing Contact Phone Number: +1.21545245
Billing Contact Facsimile Number:
Billing Contact Email: dr-sotz@dr-sotz.org
Technical Contact ID: IEF1NS0
Technical Contact Name: Namesecure.com, Inc.
Technical Contact Organization: Namesecure.com, Inc.
Technical Contact Address1: P.O. Box 27096
Technical Contact City: Concord
Technical Contact State/Province: CA
Technical Contact Postal Code: 94527
Technical Contact Country: United States
Technical Contact Phone Number: +1.1888939626
Technical Contact Facsimile Number:
Technical Contact Email: support@namesecure.com
Registrant ID: NOP2NS445327
Registrant Name: chibor chibor
Registrant Organization: chibor
Registrant Address1: ipoh
Registrant Address2: perak
Registrant City: ipoh
Registrant State/Province: CA
Registrant Postal Code: 545562
Registrant Country: United States
Registrant Phone Number: +1.21545245
Registrant Facsimile Number:
Registrant Email: dr-sotz@dr-sotz.org
Name Server: DNS1.NAMESECURE.COM
Name Server: DNS2.NAMESECURE.COM
Created by Registrar: NameSecure.com, Inc.
Last Updated by Registrar:
Domain Registration Date: Sat Nov 10 03:08:38 GMT 2001
Domain Expiration Date: Wed Nov 09 23:59:59 GMT 2011

I would like to know what to do next? SHould I just reject and trash the order?

UNIXIELHOST
11-29-2001, 02:04 AM
Other update, I run a check of dr-stoz.org with NetSol, here what I see:

Registrant:
Chan Weng Foong,Chan Weng Foong (DRSOTZ-DOM)
Damansara Utama
petaling jaya, selangor 47400
MY

Domain Name: DR-SOTZ.ORG

Administrative Contact, Billing Contact:
Chan Weng Foong, Chan Weng Foong (CC21821) act_nukeman@yahoo.com
Chan Weng Foong,Chan Weng Foong
Damansara Utama
petaling jaya, selangor 47400
MY
03-77282278 123 123 1234
Technical Contact:
WorldNIC Name Host (HOST-ORG) namehost@WORLDNIC.NET
VeriSign, Inc.
21355 Ridgetop Circle
Dulles, VA 20166
US
1-888-642-9675

Record last updated on 26-Aug-2001.
Record expires on 06-Mar-2006.
Record created on 06-Mar-2001.
Database last updated on 28-Nov-2001 10:12:00 EST.

Domain servers in listed order:

NS50.WORLDNIC.COM 216.168.225.190
NS49.WORLDNIC.COM 216.168.225.179

chinpakt
11-29-2001, 02:17 AM
Originally posted by josephp
We got a order for most expensive package just recent, see what it has to say:

streetaddress: rumah pangsa singapore

city: singapore

state: singapore

zip: 65847

I would like to know what to do next? SHould I just reject and trash the order?

Hi, I can safely say (I am a Malaysian residing in Singapore), that the street address is a fake. "rumah pangsa' is a generic meaning for 'flat' in the Malaysian Malay language.

As for the zip code, it is also a fake as the current zipcodes for Singapore have 6 digits.

Just my two cents.

jic
11-29-2001, 02:31 AM
Let me just let you know.. I have been in this business for quite a bit and whenever the residing IP is from

.my
.ro
.ru
.sp

You know that you probably have fraud on your hands. The ISP's don't ever care so you just ignore it. I usually call the CC company and tell them the CC has been stolen and report the domain they have already carded. If I am really bored I will call the owner of the CC and talk to them about it. They seem to like to run up the phone bill and talk about how they have no clue how their CC got stolen.. Still interesting if you are bored :)