Advanta TN scam

Advanta TN Fraud

Don't Bear Internet Fraud

This fraudster should not be confused with any legitimate company of the same or similar name - the website graphics below and the following evidence clearly identify the fake website and these criminal fraudsters and no other company or individual.

Advanta TN scam screenshot (09-Nov-2009)

Advanta TN This is a barely readable, clearly fraudulent all-flash scam website with stolen content malformed into a dreadful, (IMHO!), stock flash template, (Google for "APS ALWAYS PERFECT SOLUTIONS"), with added irritating muzak that has been set up to form a front for an illegal 'Purchase Manager' job campaign using a fake company identity. The criminal's domain a-tn.com was first registered on 25-Jun-2007 to 'Randall Steinmeyer' for the minimum period of only one year, then between 26-Jun-2008 and 09-Aug-2008 it was transferred to 'Vladimir Zaytsev' (it was advertised for sale on 14-Jan-2008), where it stayed parked, (Sedoparking), until sometime between 09-Jul-2009 and 23-Sep-2009 when the whois details went under privacy protection, the domain having been extended, presumably on or about 25-Jun-2009 for only one year until 25-Jun-2010. It's not an uncommon ploy by these criminal fraudsters to buy a pre-registered domain from a dealer to try and get around the 'recently registered domain' syndrome - a similar ploy was used by the Orion Logistic Group scammers for example. 13-Feb-2010 - They have a new scam which is identical to this one, apart from the flash template - A-Cape Transportation, LLC

Advanta TN : Evidence of Criminal Fraud

i) Stolen site content: Unfortunately for the crooks who use flash pages, Google search now has the ability to read embedded flash text content so the above home page 'Welcome' text is easily seen to have been taken word for word from this Toyo Logistics page. Other content, e.g. their 'About Us' page, (click on 'Company') has been taken word for word from various pages on the GAC Marine Services website, to give a few examples, this page, this page and this page Clear evidence of site theft.

ii) As the website content is stolen, it mostly doesn't really apply to the criminals, however, as they state above "Over its long history of growth in transportation services, A-TN has consistently introduced the most superior storage and loading facilities and transportation equipment. A-TN has realized a comprehensive distribution system through the utilization of the human resources, information processing abilities, and networks it has established over the years." However their domain a-tn.com was first registered on 25-Jun-2007 to a 'Randall Steinmeyer' for the minimum period of only one year, then between 26-Jun-2008 and 09-Aug-2008 it was transferred to 'Vladimir Zaytsev' (it was advertised for sale on 14-Jan-2008), where it stayed parked, (Sedoparking), until sometime between 09-Jul-2009 and 23-Sep-2009 when the whois details went under privacy protection, the domain having been extended, presumably on or about 25-Jun-2009 for only one year until 25-Jun-2010. It's not an uncommon ploy by these criminal fraudsters to buy a pre-registered domain from a dealer to try and get around the 'recently registered domain' syndrome - a similar ploy was used by the Orion Logistic Group scammers for example. In any event, it is clearly not "a long history of growth in transportation services". An indication of a fraudulent registration.

iii) A Google search shows absolutely zero internet presence for Advanta TN, (ignoring the crook's own website, of course).

iv) Fake 'Contact Us' details from their website (click on Contacts):

Advanta-TN Headquarters:

ADVANTA Transportation Network, LLC.
Copenhagen HQ: Copenhagen City Center
address: Larsbjoernstraede, 3
1454, Copenhagen, Denmark
phone/fax: (36) 988-A-TN, +45 (36) 98 82 86
email: office@a-tn.com

A-TN in USA
NYC [launch: 11/2009]
addres: 445 Park Avenue
New York City, NY, USA 10022
phone/fax: (917) 675 4810
TOLL (866) 966-9590
email: usdepartment@a-tn.com

A-TN in UK: LONDON
address: 90 Long Acre, Covent Garden,
London WC2E 9RZ
United Kingdom
Phone/Fax.. +44 (207) 849 330
email: ukdepartment@a-tn.com

A-TN in CH: HONG KONG,
Shui On Business Centre
address: 6-8 Harbour Road, Wan Chai
Hong Kong, China
phone/fax: + 8 (52) 284 8888
email: chdepartment@a-tn.com

• - A deep search of the New York State business entity registry returns no registration for these criminals as Advanta TN or any of its variants in New York state - they are not a legal registered business entity in New York.
• - A similar deep search of the Danish company registry (DCCA) returns no registration for these criminals in Denmark.
• - A similar deep search of the Hong Kong company registry (ICRIS) shows that there is no company by the name of Advanta registered in Hong Kong.
• - A similar deep search of the UK Companies House Registry shows that there is no company by the name of Advanta TN or any of its variants registered in the UK
As they are clearly not a legal registered business entity at any of their supposed locations, the above location details are not likely to be genuine.

• - A Google websearch for the address "445 Park Avenue, New York City, NY" Advanta returns no reference to these criminals at that address, ignoring their own fake website, of course.
• - A Google Maps Business Search for the address "445 Park Avenue, New York City, NY" shows no business of that name at that address.
• - Their Danish address is apparently mis-spelt according to Google - it should be "Larsbjørnsstraede, 3 1454". There is no Google evidence of these criminals at that address.
• - A Google Maps Business Search for the address "Larsbjørnsstræde 3, 1454, Copenhagen, Denmark" shows no business of the name Advanta at that address.
• - A Google maps business search for them at the London address "90 Long Acre, Covent Garden, London" also returns no hits.
• - The above London telephone number +44 (207) 849 330 is clearly fake - it does not have enough digits and doesn't connect.
• - There is no telephone number listed for these criminals in the UK London directory.

All clear evidence of fake details. (I could go on, but it's a waste of time).

v) A Job spec. from the crooks to a potential mule following basic induction:

.......................................Besides that, to keep you busy and paid I applied for another project
for you to participate. Our Equipment dept got a part time position opened,
here are the details. We are now opening a new office in one of European countries and they require
some type of equipment now (basically laptops and phones). Our equipment department didn't find
suppliers yet for the reasonable prices and looks like it might take up to a month,
though now they need to provide the equipment at least for the top managers.
So they plan to hire managers who will buy all the necessary equipment for them, until they sign an agreement with supply company.
You showed good results for both tests, perfect characteristics from ....... and got a brilliant resume, I won't have any problems to get you into their program.
You will spend about 2 more weeks in training with me and few weeks before stage 2, if you pass the
final test (which I am sure won't be a problem for you), so you will have time to start
this part-time position. By the time you pass to stage 2 you won't be able to combine two of those
positions any more.
The position is salary based, $350/week, paid weekly. Your duties will be limited to purchasing laptops and phones and other equipment at
On-line shops (in most cases Apple equipment). You will purchase for the money that the financial dept will send, you don't have to spend
any of your own or pay upfront. It will take you up to 5 extra hours a week. Our accountants will make same secured transfers to your card as they will do
with the iPhone payment. The same way you will receive your weekly salary as well, so you will be paid every week.
As soon as it will arrive, you will buy everything through On-line shops and forward to one of our European
dept via USPS. They will provide you all the necessary documents and instructions,
so you will just have to take the equipment to the post office, you won't have to pay for delivery.
No additional expenses are related. You don't have to involve any money
of your own. This is a temporary position, during the training, if you are interested
in extra income. Besides that it's a good chance to get
some extra points for the training, since the competition in TX is expected be tough.
It's a good opportunity which will give you a vision of how our departments cooperate and will give you
some advantage against other candidates in your state, so I wanted you to have it.
If you want me to apply with your file, let me know. I will write a recommendation
letter and send it to the training department together with your resume.
Please understand, It's not a required duty, you don't have to take it if you feel uncomfortable or just
not interested. It won't affect your training process. Still, your participation will guarantee you a better paid
position with our company and a $3K paycheck, but if you refuse, that's alright. I will pass it to others from your group.
Anyway, please let me know at your earliest convenience...........

and the follow-up instruction:

xxxxxx, I finally received the part time project instructions, an hour ago. The project starts today!
Please take a look and let me know if any questions.
As you can see, they require you to buy 2 (two) Apple MacBooks,
available in any Apple store. If possible, please don't order it On-line, as it will take too much time.
Please buy them at the closest Apple store, after that please go to the closest USPS office
and send to the address shown on the PO list. To send them out please print out all of the attached files
and take them to the post office. I don't have the PO labels yet, but will have them before the end of the day.
The payment will arrive to your card on Friday morning or today noon, so you will be able to make a purchase.
Please check your account later today and tomorrow, let me know once the payment arrives.
As soon as it does, please print out the PO list and the pre-paid USPS label and take it to post office with you.
The PO list and all the receipts should stay with you while the rest of papers go to USPS officer.
Please note that you don't have to pay for anything in USPS office since those are prepaid labels.
As you can see, the PO includes $4,098 to pay for the equipment,
$327 for the tax (8% sales tax), $125 shipment and handle fee (cash advance for commission), $350 your commission.
Please send out the PO once the payment becomes available, since Monday the equipment dept will put you on a purchase schedule
for next 2 weeks and you will receive 1 new PO every week.
Let me know if any questions and please confirm you got the PO. I will provide the PO labels
later today, meanwhile please check the PO payment.

Thank you!

*** GO N-Y-Giants [!!!!] David A. Maeweather, Special Projects - (917) 675-4810
Advanta - Transportation Network, LLC

...and there you have it - the victim was sucked in on the pretext of a managerial job with this fake company, but due to a 'delay' was offered this 'temporary' job buying equipment for their company, (as if they couldn't do it themselves....). This is the clear 'Purchase Manager' fraud 'job' where you are asked to purchase high end electronices equipment using 'phished' (stolen) funds that have been transferred to your account or credit card and asked to send the goods off to their new "European Office", which just happens to be in the Ukraine. Don't be tempted or you WILL be liable to lose a lot of money, have your bank account and your assets frozen and risk ending up with a criminal record. The final delivery destination of the above goods in the Ukraine is the following address, (taken from a pre-printed USPS address label sent to a victim):

ZAJCEV SERGEJ
BALKOVSKAYA STR 130, KV 23
65466 ODESSA
UKRAINE

This is a complex fraud and they even go to the trouble of creating fake LinkedIn profiles for their 'Special Projects Supervisors'. This is the one for the above David Maeweather and this is the new one for their identical A-Cape Transportation, LLC scam 'Special Projects Supervisor', Daniel F. Durant.

The above evidence clearly demonstrates beyond any doubt that the Advanta TN website has been set up by criminal fraudsters purely for the purpose of spamvertising an illegal reshipping fraud job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Advanta TN Fraudsters - hosting details

Main Domains, Registrars and Hosts

Domain

a-tn.com

Registrar

WILD WEST DOMAINS, INC. - 25-Jun-2007 (Transferred domain see info.)

Host Network

UK2-NET

Host IP

77.92.91.135

Key:
Active
Suspended or Inactive
Parked

Please notify me of any other current domains used by this criminal.

Domain Whois Data (a short excerpt from the historical record)

Domain:       a-tn.com   - Domain History
Cache Date:     2009-07-09
Registrar:     WILD WEST DOMAINS, INC.

Registrant:
   Vladimir Zaytsev
   Floragasse 4/2/4
   Vienna, N/A 1040
   Austria

   Domain Name: A-TN.COM
      Created on: 25-Jun-07
      Expires on: 25-Jun-10
      Last Updated on: 06-Jul-09

   Administrative Contact:
      Zaytsev, Vladimir vladimirzaytsev74@gmail.com
      Floragasse 4/2/4
      Vienna, N/A 1040
      Austria
      6643255666      Fax --

   Technical Contact:
      Zaytsev, Vladimir vladimirzaytsev74@gmail.com
      Floragasse 4/2/4
      Vienna, N/A 1040
      Austria
      6643255666      Fax --

   Domain servers in listed order:
      NS1.SEDOPARKING.COM <----Domain Parked on 09-Jul-2009
      NS2.SEDOPARKING.COM

Domain:       a-tn.com   - Domain History
Cache Date:     2009-09-24
Registrar:     WILD WEST DOMAINS, INC.

Registrant:
   Domains by Proxy, Inc.
   DomainsByProxy.com
   15111 N. Hayden Rd., Ste 160, PMB 353
   Scottsdale, Arizona 85260
   United States

   Domain Name: A-TN.COM
      Created on: 25-Jun-07
      Expires on: 25-Jun-10
      Last Updated on: 23-Sep-09

   Administrative Contact:
      Private, Registration A-TN.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599      Fax -- (480) 624-2598

   Technical Contact:
      Private, Registration A-TN.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599      Fax -- (480) 624-2598

   Domain servers in listed order:
      NS1.SAFEUKDNS.NET
      NS2.SAFEUKDNS.NET

   Domain Name: A-TN.COM - Current data (09-Nov-2009)
   Registrar: WILD WEST DOMAINS, INC.
   Whois Server: whois.wildwestdomains.com
   Referral URL: http://www.wildwestdomains.com
   Name Server: NS1.SAFEUKDNS.NET
   Name Server: NS2.SAFEUKDNS.NET
   Status: clientDeleteProhibited
   Status: clientRenewProhibited
   Status: clientTransferProhibited
   Status: clientUpdateProhibited
   Updated Date: 23-sep-2009
   Creation Date: 25-jun-2007
   Expiration Date: 25-jun-2010

Registrant:
   Domains by Proxy, Inc.
   DomainsByProxy.com
   15111 N. Hayden Rd., Ste 160, PMB 353
   Scottsdale, Arizona 85260
   United States

   Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)

   Domain Name: A-TN.COM
      Created on: 25-Jun-07
      Expires on: 25-Jun-10
      Last Updated on: 23-Sep-09

   Administrative Contact:
      Private, Registration A-TN.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599      Fax -- (480) 624-2598

   Technical Contact:
      Private, Registration A-TN.COM@domainsbyproxy.com
      Domains by Proxy, Inc.
      DomainsByProxy.com
      15111 N. Hayden Rd., Ste 160, PMB 353
      Scottsdale, Arizona 85260
      United States
      (480) 624-2599      Fax -- (480) 624-2598

   Domain servers in listed order:
      NS1.SAFEUKDNS.NET
      NS2.SAFEUKDNS.NET

DNS Lookup: a-tn.com A record
Searching for a-tn.com A record at f.root-servers.net [192.5.5.241]: Got referral to H.GTLD-SERVERS.NET. (zone: com.)
Searching for a-tn.com A record at H.GTLD-SERVERS.NET. [192.54.112.30]: Got referral to ns2.safeukdns.net. (zone: a-tn.com.)
Searching for a-tn.com A record at ns2.safeukdns.net. [77.92.89.142]: Reports a-tn.com.
Response:

Domain	Type	Class	TTL	Answer
a-tn.com.	A	IN	14400	77.92.91.135
a-tn.com.	NS	IN	86400	ns1.safeukdns.net.
a-tn.com.	NS	IN	86400	ns2.safeukdns.net.
ns1.safeukdns.net.	A	IN	14400	83.170.127.242
ns2.safeukdns.net.	A	IN	14400	77.92.89.142

Looking up at the 2 a-tn.com. parent servers:

Server	Response
ns2.safeukdns.net [77.92.89.142]	77.92.91.135
ns1.safeukdns.net [83.170.127.242]	77.92.91.135

This fraud website is hosted by UK2-NET on IP address 77.92.91.135.

***Latest News*** Initial entry 10th. Nov 2009