DES Group Inc. Fraud
Report
Active
Domain
Don't Bear Internet Fraud
Home
Bobbear Icon
Des Group Logo.

This
DES Group Inc. scam has identical text formats to several other web based and email based frauds including Trust Company Inc, Finance International, E-Z Transfer, SurRate Inc, Renaissance Capital Advisors Ltd, Business & Professional Consultants Inc., and no doubt many others, in other words it's a standard run-of-the mill, patently transparent money transfer fraud of the type that are turned out by the dozen by the same bunch of criminals using the same hosts and registrars that they regularly use. It's exactly the same fraud as this email based one.

This fraudulent company should not be confused with any other company that happens to bear a similar name. This fraudulent company is identified by the website graphics and the money laundering mule job it spamvertises.

DES Group Inc. : Evidence of Criminal Fraud

i) DES Group Inc. claims on their website to have been "The company was set up in 2001 in Montgomery, the USA by three enthusiasts having financial education.", but the criminal's domain renca.biz was only registered with OnlineNic, (Rustelecom), on November the 20th. 2007.

ii) The only Google hits for "DES Group Inc." are as scammers and fraudsters.

iii)
Similar website texts are used as on all the other fraud sites listed above.

iv) Their 'Privacy Protection' page is stolen from the genuine company Escrow.com

v) Of the numerous 'jobs' advertised on their website, this 'job' of 'TRANSCATIONAL OPERATOR' (sic) and this one of 'COURIER' are the only two available. One is the usual obvious (dyslexic) money mule job and the other is a similar stolen goods laundering job.

The Jobs:

Vacancies

TRANSCATIONAL OPERATOR

This vacancy is valid for American and Australian citizens ONLY at the moment. AVAILABLE

Location: USA, statewide
Status: Opened
Employee Type: Part-Time Employee

Transaction Operator is responsible for receiving and processing transfers from participants of deals and completing those transactions in accordance with the specified method. The detailed operational scheme is available at request.

Requirements:

Benefits of working for our company:

Click here to know more about this vacancy

If you are interested in this offer and are looking for more details of the job, write at job@des-group.com.

To start a work register on our website sign up

 Courier

This vacancy is valid for American citizens ONLY at the moment. AVAILABLE

Requirements:

General job description

Handling of packages and letters from your own home! Receiving, sending, sorting and repacking of packages as well as checking for missing parts.

Those people who are accepted for this job will follow these simple instructions:

Click here to know more about this vacancy

If you are interested in this offer and are looking for more details of the job, write at job@des-group.com.

To start a work register on our website sign up


In other words, just your usual money laundering mule position and stolen goods fencing positions.

vi) What sort of financial company is going to spamvertise for "TRANSCATIONAL OPERATOR" among the untrained, inexperienced and uncertified general population? I think we all know the answer to that one.



The above evidence clearly demonstrates beyond any doubt that the 
DES Group Inc. website has been set up by money laundering fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal money laundering activity and spamming - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.
 DES Group Inc. Fraudsters - current hosting details

Current Main Domains, Hosts and  Registrars
Domain

des-group.org
Registrar

Bizcn.com, Inc.
Host Network

SoftLayer Technologies Inc.
Host IP

75.126.208.74


See table below for the full list of known active & suspended main domains used by this criminal.
Please notify me of any other current domains used by this criminal.

Current Botnet Nameserver Domains and Registrars
Not botnet hosted at present - DNS data below. See table below for the full list of known active & suspended nameserver domains for this criminal.

The Spam Headers

Fresh spam required, full source code please or as an attachment.



The Spam Content

Fresh spam required, full source code please or as an attachment.

The Zombie Botnet

The criminal as not using a zombie botnet at this time. Normal DNS Data below.

Initial DNS Data (des-group.com)

How I am searching:

Searching for des-group.com A record at g.root-servers.net [192.112.36.4]: Got referral to G.GTLD-SERVERS.NET. (zone: com.) [took 39 ms]
Searching for des-group.com A record at G.GTLD-SERVERS.NET. [192.42.93.30]: Got referral to ns1.saitland.org. (zone: des-group.com.) [took 53 ms]
Searching for des-group.com A record at ns1.saitland.org. [75.126.208.74]: Reports des-group.com. [took 29 ms] Response:
Domain Type Class TTL Answer
des-group.com. A IN 14400 75.126.208.74
des-group.com. NS IN 86400 ns1.saitland.org.
des-group.com. NS IN 86400 ns2.saitland.org.
ns1.saitland.org. A IN 14400 75.126.208.74
ns2.saitland.org. A IN 14400 75.126.241.22

Looking up at the 2 des-group.com. parent servers:

Server Response
ns2.saitland.org [75.126.241.22]  75.126.208.74
ns1.saitland.org [75.126.208.74]  75.126.208.74

The host for this one is once again Softlayer Technologies (75.126.208.74) who have not responded to abuse reports regarding other fraudster(s) they host.


Here are all of the known domains that are/have been used for the
Finance International fraud:

Domain

des-group.com
des-group.org

Status

DNS deleted
Suspended
Registrar

OnlineNic (Rustelecom)
Bizcn.com, Inc.

Please notify me of any errors or domains not listed here.

i) The criminal will not respond to your challenge, but will use the notice to prepare a new network - immediate suspension is requested please, if allowed for by your AUP.

Fraud Blog

Initial entry 31st. December 2007

7th. March 2008 - no active domains known