CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 917
Comments: 23
block bottom
spacer spacer

[NEH]!!!HELP A VICTIM OF FRAUD!!!
Goto page 1, 2  Next
 
Post new topic   Reply to topic       All -> FavForums -> Phishing, Fraud and Dastardly Deeds [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
jassie

Private
Private


Joined: Jul 09, 2005
Posts: 35
Location: UK

PostPosted: Mon Mar 12, 2007 6:54 pm    Post subject: !!!HELP A VICTIM OF FRAUD!!!
Reply with quote

Hi,

I hope someone can help me please.

I have been a vcitim of fraud and robbed for $270 dollars.

This is what the situation is basically i went to this website called tradekey, which has a directory of suppliers.I found a supplier that sells electronic goods.

Please feel free to copy and paste the link into your web brower.

hxxp://www.tradekey.com/profile_view/uid/521143/huo-zz-co-ltd.htm

i recently added the supplier's hotmail address which is :-

huozz168@hotmail.com

After adding the supplier, i spoken to him through msn messenger.
He seemed genuine and after speaking to him for a about an hour i decided i wanted to buy a tom tom go 910 from him. we Negotiated a price of $270 dollars.

I had asked him how long will the product take to deliver he said about 7 days. I had asked him, will you give me a tracking number and he said yes once the money has been paid into his account he will send the product and email me the tracking number.

So he asked me to send the money via Westurn Union.

payment details to:-
first name: jin xian
Last name: chen
Address : putian city,fujian province,china country

The address does match with the website.

So i sent the money and informed him via msn messenger his address:-

huozz168@hotmail.com

He asked me to send my address information so i did and he confirmed, i will receive my tracking number within 24 hours.72 hours have gone by and i haven't received a tracking number and he has now blocked my
msn address. i can't speak to him anymore. I know this becasue when i log in with my address he seems offline. So what i did was logged in with another hotmail address on msn messenger and this time he was online.
When i confronted him he blocked me again.

I really need someones help. could someone added is msn hotmail address:-

huozz168@hotmail.com

in msn messenger and ask him who he is and he will give you a link

www.hotshopgood.com

That he is a supplier offering you goods.

I don't want anybody to confront him about fraud because he will block you. but I would really like to find out his address, ip number etc.

Is there any sort of software out there that can pin point him i.e home address ip address etc

so i can report him for fraud and hopefully get my money back or if i don't get my money back atleast get him done for fraud.

I don't want anybody spending hours to track him down but i don't mind doing the investigation work my self with you guidence but wouldn't mind if you would like to help me.

Am a honest guy with a family and trying to earn an extra income becasue times are hard and i though may be if i can earn a extra bit of cash it will ease the pressure but i have been tottaly robbed and i feel guttered.

Thanks for you time guys and i really hope someone out there can help me.

Regards

Jassie Mann

my msn messenger address: edited by Admin!

Back to top
View users profile Send private message MSN Messenger
mrrockford

News Admin
News Admin
AVPE Host
AVPE Host

Joined: Apr 24, 2004
Posts: 2886

Forums Admin MVP Premium Team F@H

PostPosted: Mon Mar 12, 2007 7:23 pm    Post subject:
Reply with quote

I'm doing some tracing and can not promise anything, but it looks like you have beeen ripped off! To be on the safe side please report this episode to your local Law Enforcment ASAP.

Back to top
View users profile Send private message Visit posters website
JeanInMontana

Sergeant
Sergeant
Premium Member

Joined: Jun 20, 2005
Posts: 148

Premium

PostPosted: Mon Mar 12, 2007 8:18 pm    Post subject:
Reply with quote

Have you contacted Western Union and told them about this? They may be able to give more information.


_________________
MontanaMenagerie
Back to top
View users profile Send private message Visit posters website
jassie

Private
Private


Joined: Jul 09, 2005
Posts: 35
Location: UK

PostPosted: Mon Mar 12, 2007 8:39 pm    Post subject:
Reply with quote

mrrockford wrote:
I'm doing some tracing and can not promise anything, but it looks like you have beeen ripped off! To be on the safe side please report this episode to your local Law Enforcment ASAP.



Thanks, anything will do to catch this guy.

God knows how many other people he has ripped off.

I haven't logged a call with the police yet because i didn't know wether the police would be able to do anything about this, for internet crime.

If any other members can help me i would be very grateful

Regards

Jassie

Back to top
View users profile Send private message MSN Messenger
jassie

Private
Private


Joined: Jul 09, 2005
Posts: 35
Location: UK

PostPosted: Mon Mar 12, 2007 8:43 pm    Post subject:
Reply with quote

JeanInMontana wrote:
Have you contacted Western Union and told them about this? They may be able to give more information.



Yes i have contacted West Union and they said they can't do anything about this. They said to me they can't guarantee anything and they told me you send money out of your own will. Confused

Regards

Jassie

Back to top
View users profile Send private message MSN Messenger
jassie

Private
Private


Joined: Jul 09, 2005
Posts: 35
Location: UK

PostPosted: Mon Mar 12, 2007 8:59 pm    Post subject:
Reply with quote

I've just been looking at this website :-

http://www.serviceobjects.com/products/dots_ipgeo.asp?zut=GGL1004&bhcp=1

They say you can track your customers ip number down.

Has anybody got a basic simple website where not many people view.
I was thinking you download this free 15 day software and apply to your website and then add the fradsters hotmail account huozz168@hotmail.com into your hotmail messenger and then send him your website link to view in that way we could find out
what the guys ip address is. May be able to locate the isp compay and catch the guy.

Am only saying this because i don't know how to create websites but am sure some webmaster will find this above software easy to apply on their site.

I Might be asking for a bit to much but its a idea Confused

Regards

Jassie

Back to top
View users profile Send private message MSN Messenger
JeanInMontana

Sergeant
Sergeant
Premium Member

Joined: Jun 20, 2005
Posts: 148

Premium

PostPosted: Mon Mar 12, 2007 9:36 pm    Post subject:
Reply with quote

Jassie do call the police, many departments now have cybercrime divisions.

You can get a pre-made website for free by doing a Google search. But what your talking about is basically spyware or a tracking cookie I didn't investigate all the details. However this is the kicker:

Quote:
USAGE:
To find out the geographical location of an IP Address, enter it as strInput. Currently IP Address Validation can only locate about 89% of the Internet's address space within 15 miles of accuracy.


Even if you get it you most likely won't find the villain and these kinds of people tend to use proxies anyway and you never will get their real IP address.

Your best bet is the police and maybe Hotmail abuse. Mrrockford might get lucky too of course.


_________________
MontanaMenagerie
Back to top
View users profile Send private message Visit posters website
downie

PIRT Handler


Joined: May 19, 2006
Posts: 3454

Phishing Squad

PostPosted: Mon Mar 12, 2007 11:59 pm    Post subject:
Reply with quote

aa419.org work on this type of site also.
http://wiki.aa419.org/index.php/FAQ_and_Support
I have started a thread there at http://forum.aa419.org/viewtopic.php?t=10977


_________________
"For evil to triumph utterly, it is only necessary that good men do nothing"
Back to top
View users profile Send private message
JeanInMontana

Sergeant
Sergeant
Premium Member

Joined: Jun 20, 2005
Posts: 148

Premium

PostPosted: Tue Mar 13, 2007 12:09 am    Post subject:
Reply with quote

I submitted it to SiteAdvisor and gave it a bad shopping experience rating with a link back to this thread. http://www.siteadvisor.com/sites/hotshopgood.com/


_________________
MontanaMenagerie
Back to top
View users profile Send private message Visit posters website
jassie

Private
Private


Joined: Jul 09, 2005
Posts: 35
Location: UK

PostPosted: Tue Mar 13, 2007 6:51 pm    Post subject: fraud
Reply with quote

hi guys i managed to add this guy again from a diffrent email address on msn messenger.

I got him to send a email to me, when i click on file>properties the
address url say:-

http://by111fd.bay111.hotmail.msn.com/cgi-bin/getmsg?msg=05133E85-971B-4413-A18D-

can i do anything with this?

or do i need him to send an email to my outlook express from his hotmail account so i can trace is ip address.

Any ideas guys?

Regards

Jassie

Back to top
View users profile Send private message MSN Messenger
jassie

Private
Private


Joined: Jul 09, 2005
Posts: 35
Location: UK

PostPosted: Tue Mar 13, 2007 9:14 pm    Post subject: tracing ip address further leads
Reply with quote

hi guys,

I have got the user to email me some prices of product to another email address(hotmail).

i managed to change some settings in hotmail these are the results i got from the header:-





From : ·¢ ´ï <huozz168@hotmail.com>
Sent : 13 March 2007 18:29:04
To : buyer78@hotmail.co.uk
Subject : pse3

| | | Inbox


--------------------------------------------------------------------------------

Attachment : DIGITALCAMERAS.doc (0.21 MB), camcordersdigitalmedia.doc (0.22 MB)
MIME-Version: 1.0
X-Originating-IP: [59.58.106.179]
X-Originating-Email: [huozz168@hotmail.com]
X-Sender: huozz168@hotmail.com
Received: from bay0-omc3-s41.bay0.hotmail.com ([65.54.246.241]) by bay0-mc10-f21.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Tue, 13 Mar 2007 11:29:04 -0700
Received: from hotmail.com ([64.4.53.63]) by bay0-omc3-s41.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Tue, 13 Mar 2007 11:29:04 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 13 Mar 2007 11:29:04 -0700
Received: from 64.212.198.134 by by19fd.bay19.hotmail.msn.com with HTTP;Tue, 13 Mar 2007 18:29:04 GMT
X-Message-Info: LsUYwwHHNt2xrCLgWdKEXGERkhZO9sDqTmfQMgiBvvPmCQ+2eyZ6Bqs/lYemMK2J
X-OriginalArrivalTime: 13 Mar 2007 18:29:04.0721 (UTC) FILETIME=[7AC2DC10:01C7659D]
Return-Path: huozz168@hotmail.com

The important bit i think is X-Originating-IP: [59.58.106.179]
I managed to download a 15 day trial software called visualroute 2007

http://visualroute.visualware.com/

Then i typed the following address 59.58.106.179 and did a search

here are the results i got:-

Domain Name: 163data.com.cn
ROID: 20021209s10011s00060378-cn
Domain Status: ok
Registrant Organization: ÖйúµçÐż¯ÍŹ«Ë¾
Registrant Name: Éò¾ü
Administrative Email: shenjun@cndata.com
Sponsoring Registrar: ÍøÂçÖÐÐÄ
Name Server:dns1.163data.com.cn
Name Server:dns2.cn.net
Registration Date: 2000-06-23 00:00
Expiration Date: 2007-06-23 00:00

i have saved this above results to notepad.

Does the squares mean i have to download a lanuage pack?

Are the above results is service provider?

what do you think guys should i contacted the above adminstrator email?

Is there a chance he is the administrator.

I need some help guys Confused

The reason i belive this is his ip address X-Originating-IP: [59.58.106.179]

because i sent an email from one of my hotmail accounts to my other hotmail account has a test. Then in the message head just like the one above in the originating-ip the ip address match exactly the ip address
of my machine i know this becasue i clicked on start>run>cmd

typed in: ipconfig

and the ip address matched the header of my hotmail address.

But Obviously this address is dynamic and my ip address will change
and my service provider will issue a new ip number every so often. So i guess the above ip number is dynamic to? but i think if i email :-

Administrative Email: shenjun@cndata.com

you think they will be able to help me out?

Am confussed but am getting closer to catching this guy that ripped me off.

Please help me out guys if you know more info of the result i just posted.

Back to top
View users profile Send private message MSN Messenger
jassie

Private
Private


Joined: Jul 09, 2005
Posts: 35
Location: UK

PostPosted: Tue Mar 13, 2007 9:58 pm    Post subject:
Reply with quote

I just managed to track the original emailed the guy sent to my account to confirm i sent him $270 dollars.

From : ·¢ ´ï <huozz168@hotmail.com>
Sent : 09 March 2007 15:20:09
To : jayz_2006@hotmail.co.uk
Subject : RE: NEW tom tom go 910

| | | Inbox

MIME-Version: 1.0
X-Originating-IP: [59.58.106.179] X-Originating-Email: [huozz168@hotmail.com]
X-Sender: huozz168@hotmail.com
Received: from bay0-omc1-s35.bay0.hotmail.com ([65.54.246.107]) by bay0-imc1-s33.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444); Fri, 9 Mar 2007 07:20:12 -0800
Received: from hotmail.com ([64.4.53.52]) by bay0-omc1-s35.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Fri, 9 Mar 2007 07:20:12 -0800
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Fri, 9 Mar 2007 07:20:12 -0800
Received: from 80.15.249.146 by by19fd.bay19.hotmail.msn.com with HTTP;Fri, 09 Mar 2007 15:20:09 GMT
X-Message-Info: LsUYwwHHNt0BPEYY9HL00yWEnzaPOIdZKoEU75+tMls=
X-OriginalArrivalTime: 09 Mar 2007 15:20:12.0626 (UTC) FILETIME=[6EA76320:01C7625E]
Return-Path: huozz168@hotmail.com
dear sir thank you for your order .$270 for a tom tom go 910.Money Transfer Control Number (MTCN) is 8960931590

The IP address seems to be a static address which is :-


59.58.106.179

This ip address hasn't changed since friday.

Does that mean i have is real ip tracked?

Any clues guys?

Back to top
View users profile Send private message MSN Messenger
downie

PIRT Handler


Joined: May 19, 2006
Posts: 3454

Phishing Squad

PostPosted: Tue Mar 13, 2007 11:25 pm    Post subject:
Reply with quote

Abuse addresses for that ip at http://www.dnsstuff.com/tools/whois.ch?ip=59.58.106.179&email=on
Looks promising, you could cc cncert(at)cert.org.cn


_________________
"For evil to triumph utterly, it is only necessary that good men do nothing"
Back to top
View users profile Send private message
funchords

Corporal
Corporal
Premium Member

Joined: Oct 16, 2006
Posts: 63
Location: USA
Premium

PostPosted: Wed Mar 14, 2007 7:03 am    Post subject:
Reply with quote

I think your money is gone, but you can still take a lot of action. Visit sites like epinions.com and other consumer-protection, anti-scam sites. Tell your story, stay brief and factual.

Let people know -- I've never heard of a transaction between strangers involving Western Union that resulted in a happy consumer.

Back to top
View users profile Send private message
Spockish

Lieutenant
Lieutenant


Joined: May 19, 2006
Posts: 262


PostPosted: Wed Mar 14, 2007 10:24 am    Post subject:
Reply with quote

Your money is gone.



A fool and his money...



Go to the website which refered you to him.

Report him. That's the only revenge you can get.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Phishing, Fraud and Dastardly Deeds All times are GMT
Goto page 1, 2  Next
Page 1 of 2

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer