Web Hosting Talk







View Full Version : Scammer alert! Flix7/Joao/Nuno again (now for Sehx.net)


larwilliams
04-17-2008, 01:05 AM
Hi guys,

Just wanted to alert anyone that is looking to buy hosting companies, that Sehx.net is a scam. It is owned by Nuno Santos (if that's even his real name), the same scam artist who ripped people off using Flix7 (flix7.com) and goes under the names Nuno and Joao.

I almost fell for it, before I decided to do some research. What triggered this is when I suggested payment via escrow.com (which would ensure I got the clients before pay was sent). He made up some crap about wire transfers being messed up sometimes.

I've edited out the Verisign stuff, to make for an easier read.

whois for sehx.net

lawrence@debian:~$ whois sehx.net

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: SEHX.NET
Registrar: DYNADOT, LLC
Whois Server: whois.dynadot.com
Referral URL: http://www.dynadot.com
Name Server: NS1.DIRECTNET.INFO
Name Server: NS2.DIRECTNET.INFO
Status: ok
Updated Date: 16-mar-2008
Creation Date: 04-mar-2008
Expiration Date: 04-mar-2009

>>> Last update of whois database: Thu, 17 Apr 2008 01:00:24 EDT <<<

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.Domain Name: sehx.net
Registered at http://www.dynadot.com

Registrant:
Nuno Santos
Rua da Liberdade 22
Lisboa, Lisboa 1100
Portugal

Administrative Contact:
Nuno Santos
Rua da Liberdade 22
Lisboa, Lisboa 1100
Portugal
ndenuno@gmail.com
+351 962515395

Technical Contact:
Nuno Santos
Rua da Liberdade 22
Lisboa, Lisboa 1100
Portugal
ndenuno@gmail.com
+351 962515395

Record expires on 2009/03/04 UTC
Record created on 2008/03/04 UTC

Domain servers in listed order:
ns1.directnet.info
ns2.directnet.info


whois for flix7.com

lawrence@debian:~$ whois flix7.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: FLIX7.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.MJMWEBTECH.INFO
Name Server: NS2.MJMWEBTECH.INFO
Status: clientTransferProhibited
Updated Date: 24-nov-2007
Creation Date: 08-nov-2007
Expiration Date: 08-nov-2008

>>> Last update of whois database: Thu, 17 Apr 2008 01:01:56 EDT <<<

Registration Service Provided By: Supreme Center
Contact: support@propersupport.com
Visit: http://www.propersupport.com/

Domain name: flix7.com

Registrant Contact:

Nuno Santos (jnuno11@gmail.com)
351916675543
Fax:
Rua da Liberdade 22
Lisboa, 1100
PT

Administrative Contact:

Nuno Santos (jnuno11@gmail.com)
351916675543
Fax:
Rua da Liberdade 22
Lisboa, 1100
PT

Technical Contact:

Nuno Santos (jnuno11@gmail.com)
351916675543
Fax:
Rua da Liberdade 22
Lisboa, 1100
PT

Status: Locked

Name Servers:
NS1.MJMWEBTECH.INFO
NS2.MJMWEBTECH.INFO

Creation date: 08 Nov 2007 19:51:53
Expiration date: 08 Nov 2008 19:51:53


No doubt this is the same individual. A search for Flix7 will give all the evidence you need.

I wish to thank the good posters on WHT for posting the information that saved me from wasting my time on him.

larwilliams
04-17-2008, 01:07 AM
The original e-mail from him


From:
sales@sehx.net
To:
lawrencewilliams@lcwsoft.com
Date:
Yesterday 08:29:51 am
*

Hello sir!
*
I’m contacting you because I have seen that you’re looking to buy an hosting business/clients on WHT board.
*
I have been running an hosting business for the past 3 years. My business were located in Europe but support was provided in English.
*
Support was outsourced and I was paying 300 USD month for it.
*
Currently I have 48 cPanel hosting clients.

75% of the clients are from Europe and the remaining from the rest of the world.
*
Payments are made through PayPal system and 1 of them are paying through wire transfer (Western Union)

According to my WHMCS:

Income Summary

Monthly: €899.19 (47)
Quarterly: €0 (0)
Semi-Annually: €0 *(0)
Annually: €220 (1)
Biennially: €0 (0)
Est. Annual Income: €13430.28

Domains costs €10 year for renewal. All of the domains were registered by me on 3 registrars:
*
-NameCheap
-007names
-Dynadot

Below is a breakdown of our plane, how much they have in space and how much they pay:

Hosting Customers Plans

Plano 1: 1gb/20gb - €18.99 month (9 clients)
Plano 2: 2gb/35gb - €24.99 month (13 clients)
Plano 3: 3gb/60gb – €28.99 month (15 clients)
Plano 4: 5gb/100gb – €34.99 month (11 clients)
*
Some people have upgraded packages, which I can release to serious parties only.

What you get with the company:
WHMCS Owned License
Status 2k Owned License
NameCheap Account with ~€25 left in it.
*
Dynadot and 007names account will not be transferred. I will push all the domains to you.
BIN For Customers ONLY: €6,000 (Accepting offers starting at *€2,000)

The Majority customers are in Europe. My server is hosted in Greece. I would prefer the new owner to have their servers in US due to fast connections and from far away, better support.

I’m selling this business because I have recently acquired an VPS company and don’t have time to continue with this one.
*
I will accept an 50/50 payment solution for this sale. Can only accept an wire transfer payment due to some taxes applied in Europe.
*
I'm willing to provide some ID copy, Address, Bank Statement papers in case the buyer needs some proofs of my identity.
*
Any Questions? Just Ask. I’m would be glad to sent you some screenshots from*my billing system and clients payments.
*
Regards,
Joćo

larwilliams
04-17-2008, 01:09 AM
And the e-mail that triggered my suspicions:


Ok Lawrence.

Tomorrow i will wait for the sales agreement to be sent.

Escrow.com doesn't work with portuguese banks very well.

That's why i asked for an wire transfer.

Regards,
Joćo


Nobody in their right mind would send a wire transfer to a person who:

A) Lives in a foreign country AND
B) They don't even know.

Also, you would think a scam artist would be smart enough to use WHOIS Privacy Guard :P

larwilliams
04-17-2008, 01:15 AM
Here are some previous threads regarding Flix7 solely:

http://www.webhostingtalk.com/showthread.php?t=652479&highlight=flix7
http://www.webhostingtalk.com/showthread.php?t=656767&highlight=flix7

larwilliams
04-17-2008, 01:22 AM
Possibly the same person as well:

http://www.webhostingtalk.com/showthread.php?t=678241&highlight=Nuno

DATARTIM
04-17-2008, 01:03 PM
We had the exact same email, luckily didn't take it any further as I remembered a thread about a "Joao" and his numbers didn't add up.

Jedito
04-17-2008, 01:43 PM
He contacted me through MSN the past month offering me a "company", I remembered his name and obviously ignored him

VolkswagenGolfGTI
04-17-2008, 08:51 PM
Thanks for the heads up.

DMEHosting
04-17-2008, 08:59 PM
To bad the guy from "http://www.webhostingtalk.com/showthread.php?t=678241&highlight=Nuno" was taken by this scam...:mad:

Henrik
04-17-2008, 10:29 PM
Sorry to hear about this guys... Did you file criminal charges against this character?

MikeDVB
04-18-2008, 12:33 AM
Being that the person is in Portugal, it would likely be very difficult to pursue criminal charges. It's sad that it works like this.

Henrik
04-18-2008, 02:00 AM
Then again; Portugal isn't Nigeria ;)

MikeDVB
04-18-2008, 02:06 AM
Then again; Portugal isn't Nigeria ;)

I was more referring to the cost of bringing criminal charges, as apposed to the ability to actually do it.

But yeah, Nigeria..... uggg

Henrik
04-18-2008, 02:12 AM
Depending on the sum; Get a local lawyer and go after the person that allegedly scammed people.

VisiGod
04-18-2008, 03:16 PM
I'm from Portugal and i must say that this is a very bad publicity for the professionals here.

All i can say is go to our judicial police site (http://www.pj.pt/htm/Ingles/contacts.htm) and ask how you can complain.

"Rua da Liberdade" is a very used street name and there are a lot of streets with that name even in lisbon.

His mobile phone +351-916675543 is from Vodafone operator in portugal so you can send them an email and ask if that number is still valid.

If anyone needs help within Portugal please PM or mail me and i'll be glad to help you get that guy.

Henrik
04-18-2008, 10:40 PM
@VisiGod Thank you for assisting the people in this thread!

larwilliams
04-19-2008, 01:29 AM
@VisiGod Thank you for assisting the people in this thread!
Indeed, as I am thankful to those who posted about him previously in other threads. It saved me from being scammed by him.

I say rape his a*s with a stripper pole :rolleyes:

Dawson
04-19-2008, 02:39 AM
We got the same email, and we just deleted it. :)

VisiGod
04-19-2008, 01:28 PM
He's trying to "sell" me the clients. Started by signing his emails as Nuno but the last one was signed as Joćo. I will continue to "play" his game to see if i can gather more information about him.

Then i will report him to the local authorities as fraud and will point them here. So if anyone was scammed by him please PM me so that i can contact you if the lawsuit goes ahead.

HRS-AL
04-19-2008, 08:31 PM
This user also uses the alias Sandra Cunha when trying to make sales.

A thread regarding this can be seen here:
http://www.hostingdiscussion.com/business-websites-sale/11631-sale-clients-database-cpanel.html

Nuno Raposa is the name he uses and claims to run a VPS. He sent me quite a bit of documentation and screenshots of his WHMCS panel to prove sales.

He works alongside a lady by the name of Sandra. I personally believe they work together to scam people. "sandra" sent me her drivers license as well as a few other pieces of documents to verify herself.

I was very close to making a deal, if anyone wants further info please PM me.

note: the domain RogerMagic.org has something to do with this guy and Sandra.

magnuson56
04-20-2008, 12:07 PM
wow, Mods should suspend access to even view the forums so that he cant continue to scam people...

Henrik
04-20-2008, 12:17 PM
wow, Mods should suspend access to even view the forums so that he cant continue to scam people...

The (these) person(s) wouldn't have much trouble to by-pass this suspension though :(

But I agree, it could made to say "we know what you are up to".

JLHC
04-25-2008, 10:32 AM
Wow... I just noticed this thread..
I received this email from him as well..
However, he stop responding after I ask a few questions. ;)

JRSEOMarketing
04-25-2008, 04:31 PM
I'm sure the admins/mods have been updated on the situation, and are working behind the scenes. Sucks.. people like this get away with scams. Get a real job...

Henrik
04-26-2008, 05:46 AM
I'm sure the admins/mods have been updated on the situation, and are working behind the scenes. Sucks.. people like this get away with scams. Get a real job...

Sadly people like this are good at getting away from such barriers, and these moderators have no legal power whatsoever, thus these alleged scam artists can continue doing what they are doing for quite a long time a head :(