Escrow.com Fraud.Car sale. $13,000 need help

[hjms_itf]

watch out for this guy name ernest chen(thatz what he said)
he is selling cars. for me it was 2003 honda accor coupe. He offer me to use http://www.escrow.com
and it seems pretty safe..but it wasnt. he send me attachment about how to use this site and stuff.(which I am pretty sure contain virus)
also told me to use same computer for security reason. I really bought that.
so I went http://www.escrow.com and register .when I went to customer serivice for wire trnasfer questions. they even relpy me back. it was really convincing. next day I went to bank for wire transfer and next think I know. I couldnt open the window on http://www.escrow.com it said no longer exist.
this is the web address forward to when I type http://www.escrow.com with my computer." http://server2.allhostingsolutions.com/suspended.page/"and it said account has been suspended
so I used my sister and it works but coulnt log in. I ask their customer sericvice about it and they said I was never register and transaction confirmation code doesnt exite.

I wire transfer 5days ago. it was 13,000 dollars
this guy goes by ernest chen email:ernestchen@netzero.net recipient name: Ronard J Chevrette
Account number:00663-44230
Routing number:121000358
Address:668A Hayes St. San Francisco CA 94102
Bank:Bank of AMerica

thatz what http://www.escrow.com(fake one) provided infomation and what I transfer too.
I need to catch this guy and whoever help me catch him I am willing to pay reward.
I went to police but they dont see as crime unless he has fake account number.
what should I do? Is there anything I can do about it..? Tomorow I am going to recipent bank..hopefully it helps me.
Is it even possbile to make fake account and withdraw over 10,000 dollars.?

[peg]

Just to be ABSOLUTELY clear on this for anyone who reads this post. ESCROW.COM is NOT a fake company.

People are using an exploit that modifies a HOSTS file on the local machine to "Re-Direct" you to a fake site when you enter http://escrow.com in your browser.

To verify IF you have been victimized using this exploit you can do one of the following:

Open a command window (START -> RUN -> type in the dialog box command -> Press OK)
Then in the command window type ping escrow.com <enter>
You should see something like

Code: Select all

   Pinging escrow.com [216.154.246.76] with 32 bytes of data:

   Reply from 216.154.246.76: bytes=32 time<1ms TTL=255
   Reply from 216.154.246.76: bytes=32 time<1ms TTL=255
   Reply from 216.154.246.76: bytes=32 time<1ms TTL=255
   Reply from 216.154.246.76: bytes=32 time<1ms TTL=255

Ping statistics for 10.201.128.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms



Even if you get

Code: Select all

Pinging escrow.com [216.154.246.76] with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 216.154.246.76:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),


The important part is the IP Address in the first line. YOURS should say 216.154.246.76 and you should be able to type that number sequence directely in the web browser address bar and be taken to Escrow.com (The real one). IF NOT... Suspect fraud.

Alternative (and perhaps easier) is to CHECK the HOSTS file directly (It's just a plain text file and can be opened in any text editor such as notepad) Info on this can be found at http://forum.escrow-fraud.com/viewtopic.php?p=1635#1635 (Thanks Jaxhot).

As a final note, many of the scammers choose NOT to seek the SSL certificate (as it requires some level of verification of identity)... SO since escrow.com IS legit, and they DO have an SSL. If you cannot not navigate to https://escrow.com (Note S in the https) then you are likely at a scam site as well.