www.postroexpres.com part 2

[petrols]

And, now look how sofisticated are these guys. Look at their fake website http://www.postroexpres.com , at Contact section. The email that appears there is support@practical-service-southern.com. That means, as far as I understand, they are preparing their next url: http://www.practical-service-southern.com. This is the probable place they will move, after http://www.postroexpres.com will be closed.
The previous site http://www.postroexpress.com (double s) was closed, after I sent a complaint to the Abuse contact of hostgator.com (the host provider of http://www.postroexpress.com, as found on Whois information on http://www.dnsstuff.com).
The host provider of http://www.postroexpres.com is earthlink.net. I sent also a complaint to their Abuse contact 2 days ago, they replied me in a couple of hours same day, asking some more details, I provided them, but nothing happened after. The site is still active.
Now, I will start to investigate http://www.practical-service-southern.com.
Next chapter soon.
Please, some comments.
Peter

[peg]

practical-service-southern.com is now in the database.

To me the mere fact that it is associated with a fraud site (and appears to be an up and coming site) was enough. No image (at the moment) but should it arise... Let me know and I will put it in the gallery.

[petrols]

Finally, the site http://www.postroexpres.com was shut down.
We have to find the new address they moved... Because, it's evident, these guys will continue the fraud, this is their business. They didn't earn enough money to retire

[petrols]

Now, here is the new URL for these crooks: http://www.postrorexpress.com.

And, some more details of this ring:
1. The Western Union transfer they ask is to be done to the following name and address:

Name: Cretu Bogdan-Mihai
Address: Pdtropoylak\'h 3-5
City: Athens
Zip Code: TK 10455
Country: Greece

The name is a Romanian name. As far as I know, it has to be real (only the name), because the receiver of money needs some ID proof in order to receive the money at WU. Or, maybe he presents a fake ID to WU...
Anyway, I'm sure this Romanian guy is not in Greece.

2. The crook that pretends to be the seller writes from the email address: lamuncasanatoasa@hotmail.com. Just for curiosity, the translation from Romanian of the words 'la munca sanatoasa' is 'healthy work'


I think I'm going soon to give up hunting these guys... No point... It is so easy today to buy a new domain name, and to find a hosting provider... It seems the Internet needs some radical change in the future, with more control over it. But, maybe some people will say control is against the freedom of expresssion...

[georg]

all WU-Adresses was coming via mail are FAKEs....