Haptic Posted August 17, 2009 Posted August 17, 2009 Hi Guys We recieved an email this morning from a gentleman showing us a link to a website masquerading as our company including things like our company registration number, We need your help to track the owners off this website down so we can get it shut down, We also need to show this post to help stop any unknowing customers from getting scammed by this website so under no circumstances use the following website to purchase anything, COMPUTER PRODUCTS LIMITED - Home thankyou in advance to all you edugeek Sleuths,
powdarrmonkey Posted August 17, 2009 Posted August 17, 2009 (edited) Well the page.tl domain claims to be free webhosting, but must be responsible for their subdomains. Contact: http://www.own-free-website.com/impressum.php#support page.tl Registrant details: Benjamin Lochmann Benjamin Lochmann New Media GmbH Senefelderstrasse 10 Nuernberg, Bayern 90409 DE Edited August 17, 2009 by powdarrmonkey 1
box_l Posted August 17, 2009 Posted August 17, 2009 % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf % Note: This output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '80.190.202.0 - 80.190.202.127' inetnum: 80.190.202.0 - 80.190.202.127 netname: HBG-NET-DE descr: webme GmbH descr: 91054 Erlangen country: DE admin-c: BL1935-RIPE tech-c: IPX remarks: ################################### remarks: #Abuse Contact: [email protected]# remarks: ################################### status: ASSIGNED PA mnt-by: IPPARTNER-MNT source: RIPE # Filtered role: IP Exchange Network Operation Center address: IP Exchange GmbH address: Am Tower 5 address: 90475 Nuernberg address: DE phone: +49 911 30950 50 remarks: +------------------------------------------------------ remarks: | In case of abuse please contact [email protected] | remarks: |------------------------------------------------------| remarks: | In case of technical problems please contact: | remarks: | IP Exchange Network Operation Center 24x7 | remarks: | [email protected] Tel.: +49 911 309 50 50 | remarks: |------------------------------------------------------| abuse-mailbox: [email protected] admin-c: GT-RIPE tech-c: GT-RIPE tech-c: LUKE-RIPE tech-c: KS-RIPE tech-c: SVEN2-RIPE nic-hdl: IPX mnt-by: IPPARTNER-MNT source: RIPE # Filtered person: Benjamin Lochmann address: Homepage Baukasten GmbH address: Richard-Wagner-Str. 2 address: D-91054 Erlangen address: DE phone: +49 911 6603839 nic-hdl: BL1935-RIPE mnt-by: IPPARTNER-MNT source: RIPE # Filtered % Information related to '80.190.0.0/16AS15598' route: 80.190.0.0/16 descr: IP Exchange GmbH origin: AS15598 mnt-by: IPPARTNER-MNT source: RIPE # Filtered 1
Martin Posted August 17, 2009 Posted August 17, 2009 There is a phone and e-mail address displayed via Network-Tools.com... Person: Benjamin Lochmann address: Homepage Baukasten GmbH address: Richard-Wagner-Str. 2 address: D-91054 Erlangen address: DE phone: +49 911 6603839 e-mail: [email protected] ...so hopefully you should be able to chase things up quite quickly. mb 1
EduTech Posted August 17, 2009 Posted August 17, 2009 I would email this company: Free Website - Hosting your Homepage for free http://www.own-free-website.com/impressum.php#support Inform them that a website been hosted by one of their customers is wrong etc and see what they can do for you. Might also be worth contacting the company, find out some further information about them.. payment options etc see if that gives you any more information you can use to track them down. James. 1
SYNACK Posted August 17, 2009 Posted August 17, 2009 Interesting, the IP address involved appears to be run by very industrious scum bags and hosted on a german ISP 82.98.86.161 Over 100 domains point to it. The BGP AS belongs to: PLUSLINE Plus.Line AG IP-Services Mainzer Landstr. 199 60326 Frankfurt Germany 1
LeMarchand Posted August 17, 2009 Posted August 17, 2009 No further help, but I would hope that anyone visiting the site would be able to guess that it's iffy: the poor design, use of Comic Sans on a business site, dodgy payment methods, dubious and capitalization and spacing, "translated from another language" grammar and awful spelling should be give-aways. 1
russdev Posted August 17, 2009 Posted August 17, 2009 Also search on the email brings up lots of forums where they have spammed. Russ 1
powdarrmonkey Posted August 17, 2009 Posted August 17, 2009 Genius: COMPUTER PRODUCTS LIMITED - Payment Terms "Please smile and I will give you a pound" 1
Haptic Posted August 17, 2009 Author Posted August 17, 2009 Here go Benjamin Lochmann - Germany | LinkedIn have added him fella just waiting to see if he accepts;)
tmcd35 Posted August 17, 2009 Posted August 17, 2009 Genius: COMPUTER PRODUCTS LIMITED - Payment Terms "Please smile and I will give you a pound" Wow, thought the site looked 'dodgy' without that! Excellent - "well take your money and not even bother to send you anything in return". I wonder how meny people actually fall for these scam sites? E-mail a "sales" rep on an hotmail address and then send money via Weston Union. Tbh - if you're stupid enough to do it then you deserve to lose your money! 1
tmcd35 Posted August 17, 2009 Posted August 17, 2009 Interesting, the IP address involved appears to be run by very industrious scum bags and hosted on a german ISP 82.98.86.161 Over 100 domains point to it. The BGP AS belongs to: PLUSLINE Plus.Line AG IP-Services Mainzer Landstr. 199 60326 Frankfurt Germany To be fair (?) if it's a free webhosting site I'd expect over 100 domains to point at the IP.
Martin Posted August 17, 2009 Posted August 17, 2009 You could be cheeky and contact Boston.com and politely ask them if they can change the contents of Picture of "JONHSON HARRY" (from the "Company Payment Information" page) to be a more appropriate photograph/image mb 1
SteveBentley Posted August 17, 2009 Posted August 17, 2009 The site appears to have been coded by somebody called "Jimmy", who helpfully included an image from his own hard drive on COMPUTER PRODUCTS LIMITED - Photo "file:///C:/Users/Jimmy/AppData/Local/Temp/moz-screenshot-2.png" 1
SYNACK Posted August 17, 2009 Posted August 17, 2009 (edited) Looks like they have been busy elsewhere with their new hoax site too: English Spanish Translator Org: For sale Apple Iphone 3G S (32GB) Black --$300 | Facebook California, USA: For sale Apple Iphone 3G S (32GB) White ---$300 - Free Classified Ads | Post Free Classified Ads | Free Classifieds http://www.elections.com.pk/forums/showthread.php?tid=1528&pid=2376#pid2376 For sale Apple Iphone 3G S (32GB) White --$300 Free Classifieds - classifieds.SmasHits.com Hacked and trashed this site (tracked by googleing their analytics tag - UA-2594508-10): User:Rajjunrey WordPress Codex And used these fools to get the domain who are decidedly unhelpful to authorities: http://www.own-free-website.com/?t=32 http://www.own-free-website.com/impressum.php#investigative-authorities The google ad client id also brings up many results [ame=http://www.google.com/search?hl=en&safe=off&rls=com.microsoft%3Aen-us%3AIE-Address&q=google_ad_client+%3D+%27pub-2387676167301415%27%3B&aq=f&oq=&aqi]google_ad_client = 'pub-2387676167301415'; - Google Search[/ame]= One of the other victims may be able to help in tracking down possible ip addresses or people to threaten with heaftly legal reprisals. EDIT: An email to [email protected] may with the IP details may be able to get you either action or information on the end hosting client that is using the IP address. Not sure if this would work directly from a company but worth a shot and they should be happy to help propper authorities if nessisary. Edited August 17, 2009 by SYNACK 1
Haptic Posted August 17, 2009 Author Posted August 17, 2009 GREAT WORK GUYS the fraudulent site has now been removed!
Guest richard_s Posted August 17, 2009 Posted August 17, 2009 And I was going to suggest a conversation involving his kneecaps, a heavy duty nail gun and tree stump to persuade him to take the site down..... Oh well one can dream.......
powdarrmonkey Posted August 17, 2009 Posted August 17, 2009 "file:///C:/Users/Jimmy/AppData/Local/Temp/moz-screenshot-2.png" Urgh, vista user
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now