Aurora Financial Corporation

Aurora Financial Corporation Fraud (Stolen Identity)

Don't Bear Internet Fraud

This fraudster should not be confused with any legitimate company of the same or similar name - the screenshot below clearly identifies the fake website and the irrefutable evidence of criminal fraud identifies and refers to these fraudsters alone, and no other company.

Aurora Financial Corporation scam screenshot (20-Oct-2009)

Aurora Financial Corporation scam. This is just the latest fraud from the source of the numerous highly generic Russian scam websites that have been set up to form a front for a money laundering fraud job advertisement. (The identical job was posted by the Calisto Trading Inc., Reynolds Investment, & Simple Investments fraudsters and others). It's a bit slicker than most but at the end of the day its function is to con you into believing that they are a legitimate company when the evidence clearly demonstrates that they are crooks. The template may be different, but it's an identical scam to Epayment Solutions, Emarket Solutions Inc., Legal Operations Inc., Secure Operations Inc., Oranta Group Inc., Ketler Group Inc., Profit Financing Inc., Logic Group Inc., Maxi Group Inc., Fair Group, Fartex Group, MGPA Group Inc., Sky Group Inc., Idea Group Inc., Air Group Inc., Ideal Group Inc., Capital Group Inc., Fox Group Inc., Ebusiness Group Inc., Onicks Group Inc., Multi Group Inc., Single Group and the e-Innovative Inc. frauds among others. The website carries a clear money mule solicitation, their domains were only registered very recently, all their contact and location details are bogus and they are displaying a fake McAfee SECURE seal. You can see some of the aliases by doing a Google search for this damning extract from the clear money mule job on their website: "The major duty of the incumbent is to promptly receive and process stockbrokers' payments to further transfer them applying specified method". They have stolen the identity of an unrelated NY based company with a similar name. Thanks to the team at malwareurl.com for the 'heads-up' on this one.

Aurora Financial Corporation : Evidence of Criminal Fraud

i) Aurora Financial Corporation claim on their website "Our Company was created in Los Angeles, in 1991, by group of people", but the criminal's domain aurora-fc.org was only registered with Todaynic.com, Inc. on 10-Sep-2009 for the usual 'criminal's domain' minimum period of only one year. A clear indication of deception and fraud

ii) A webcheck shows that Aurora Financial Corporation are not registered in the NY state business register, clear evidence of a fake company. Check for yourself. N.B. not to be confused with a registered company with a similar name at a different address who are clearly nothing to do with these crooks, but whose name they have stolen.

iii) A Google search shows absolutely zero internet presence at all for this particular Aurora Financial Corporation, ignoring its own fake websites on domains aurora-fc.org and thelps.net, of course, (not to be confused with other companies of the same name), which makes this claim on their about us page: "Within 19 years of hard work the company acquired international standing and managed to develop into a global financial holding having the staff of 3000 people and representative offices in more than 100 countries" laughably absurd.

iv) Although the template is different, the content of the scammers website is the same as the numerous frauds listed above, including the inevitable money mule 'job' listed below.

v) Fake Location Details (copied from their website) [As there is no business of the name "Aurora Financial Corporation" registered in New York State, the following location details are bound to be bogus]

Aurora Financial Corporation
410 Park Avenue,
Manhattan Business Center,
15th Floor,
New York,
NY 10022 USA
Telephone: +1 888 414 70 32 (toll-free)
Fax: +1 718 971 54 06

• - A Google search for the address "410 Park Avenue, Manhattan Business Center, 15th Floor, New York" returns no hits for these criminals, ignoring their own fake webite, of course.
• - A Google Maps Business search for the street address "410 Park Avenue, New York" lists no business by the name of Aurora Financial Corporation at that address.
• - A Google search for the telephone number "+1 888 414 70 32" returns only the crook's fake website.
• - A Google search for the fax number "+1 718 971 54 06" returns only the crook's fake website.

vi) The list of fake partners on this page is simply a list of firms websites, but amusing for its spelling and grammatical errors.

vii) They've got the identical bunch of photoshopped fake certificates that these crooks always love to post on their fraud sites. Why do they think that these would convince anyone?

viii) They've got the usual identical fake list of addresses that they publish for all of their listed aliases - try this search of my site for their fake UK address "81 Holland Road" for example.

ix) Here is the obvious money laundering position of "FINANCIAL AGENT" posted on their website:

CLIENT MANAGER - AVAILABLE

Location: USA, remote position

Status: Opened

Employee Type: Part-Time Employee

The major duty of the incumbent is to promptly receive and process stockbrokers' payments to further transfer them applying specified method. Please enquire for detailed work scheme.

Requirements: Expert skill in managing payments and transfers between our company and clients.

Knowledge of basic payment systems.

Ability to schedule working hours effectively.

Availability of spare time (3-4 hours per day).

Advanced user ability to operate computer and to use Internet and e-mail.

Legal age.

Payment basis: During the trial period you will be paid 2300 $ per month.

You will also be keeping 8% commission from every payment received from a client.

With the current volume of clients on average your overall income will add up to 4000 $ per month.

After the trial period your base salary will go up to 3000 $ per month, plus 8% commission.

Benefits: Flexible work schedule.

Possibility to combine the job with primary employment.

Free training course.

NOTE: The vacancy is valid for Canadian, Usa residents only

In other words, a crystal clear ILLEGAL money laundering mule position that will get your bank account and your assets frozen, and could earn you a criminal record. Clear evidence of criminal fraud.

x) No legitimate company is going to spamvertise among the untrained, inexperienced and uncertified general population for a payment processing agent acting as a criminal money transfer agent. It clearly defines Aurora Financial Corporation as a criminal fraud organisation.

xi) Fake McAfee 'Secure' seal. If you click on it it simply resolves to another page on their server, (and not to the McAfee website as it should), where they say: "This site is tested and certified weakly to pass the FBI/SANS Internet Security Test." (sic). Clear fakery.

The above evidence clearly demonstrates beyond any doubt that the Aurora Financial Corporation website has been set up by money laundering criminal fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Aurora Financial Corporation Fraudsters - current hosting details

Main Domains, Hosts and Registrars

Domain

aurora-fc.org
thelps.net

Registrar

Todaynic.com, Inc. - 10-Sep-2009
Todaynic.com, Inc. - 13-Aug-2009

Host Network

CRGdSzS (China Railcom Guangdong Shenzhen Subbranch).
--

Host IP

61.235.117.88
--

Key:
Active
Suspended/Disabled/Inactive
Parked
Please notify me of any other current domains used by this criminal.

Domain Whois Data

Domain ID:D157078724-LROR
Domain Name:AURORA-FC.ORG
Created On:10-Sep-2009 21:56:10 UTC
Last Updated On:10-Sep-2009 21:58:40 UTC
Expiration Date:10-Sep-2010 21:56:10 UTC
Sponsoring Registrar:Todaynic.com, Inc. (R1316-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:TOD-41632436
Registrant Name:Ferdi Idas
Registrant Organization:Ferdi Idas
Registrant Street1:Moskow
Registrant Street2:
Registrant Street3:
Registrant City:Moskow
Registrant State/Province:MSK
Registrant Postal Code:132231
Registrant Country:RU
Registrant Phone:+7.9227737737
Registrant Phone Ext.:
Registrant FAX:+7.9227737737
Registrant FAX Ext.:
Registrant Email:m3333oldavimo@safe-mail.net
Admin ID:TOD-41632437
Admin Name:Ferdi Idas
Admin Organization:Ferdi Idas
Admin Street1:Moskow
Admin Street2:
Admin Street3:
Admin City:Moskow
Admin State/Province:MSK
Admin Postal Code:132231
Admin Country:RU
Admin Phone:+7.9227737737
Admin Phone Ext.:
Admin FAX:+7.9227737737
Admin FAX Ext.:
Admin Email:m3333oldavimo@safe-mail.net
Tech ID:TOD-41632437
Tech Name:Ferdi Idas
Tech Organization:Ferdi Idas
Tech Street1:Moskow
Tech Street2:
Tech Street3:
Tech City:Moskow
Tech State/Province:MSK
Tech Postal Code:132231
Tech Country:RU
Tech Phone:+7.9227737737
Tech Phone Ext.:
Tech FAX:+7.9227737737
Tech FAX Ext.:
Tech Email:m3333oldavimo@safe-mail.net
Name Server:NS1.AURORA-FC.ORG
Name Server:NS2.AURORA-FC.ORG

Registrar:     TODAYNIC.COM, INC.
Status:        clientTransferProhibited
Dates:         Created 13-aug-2009   Updated 13-aug-2009 Expires 13-aug-2010
DNS Servers:   NS1.THELPS.NET NS2.THELPS.NET

Domain name: thelps.net
Status: Active

Protection Status: public
( make contact info private at http://www.now.cn/domain/domainPrivate.php )

Registrant:
Name: Gef Dik
Address: Moskow
City: Moskow
Province/state: MSK
Country: RU
Postal Code: 130449

Administrative Contact:
Name: Gef Dik
Organization: Private Person
Address: Moskow
City: Moskow
Province/state: MSK
Country: RU
Postal Code: 130449
Phone: +7.9957737448
Fax: +7.9957737448
Email: molda33vimo@safe-mail.net

Technical Contact:
Name: Gef Dik
Organization: Private Person
Address: Moskow
City: Moskow
Province/state: MSK
Country: RU
Postal Code: 130449

Nameserver Information:
    ns1.thelps.net
    ns2.thelps.net

Create: 2009-08-14 01:15:56
Update: 2009-08-14
Expired: 2010-08-14

DNS Lookup: aurora-fc.org A record
Searching for aurora-fc.org A record at i.root-servers.net [192.36.148.17]: Got referral to A2.ORG.AFILIAS-NST.INFO. (zone: org.)
Searching for aurora-fc.org A record at A2.ORG.AFILIAS-NST.INFO. [199.249.112.1]: Got referral to ns1.aurora-fc.org. (zone: aurora-fc.org.)
Searching for aurora-fc.org A record at ns1.aurora-fc.org. [61.235.117.88]: Reports aurora-fc.org.
Response:

Domain	Type	Class	TTL	Answer
aurora-fc.org.	A	IN	3600	61.235.117.88
aurora-fc.org.	NS	IN	3600	ns1.aurora-fc.org.
aurora-fc.org.	NS	IN	3600	ns2.aurora-fc.org.
ns1.aurora-fc.org.	A	IN	3600	61.235.117.88
ns2.aurora-fc.org.	A	IN	3600	61.235.117.88

Looking up at the 2 aurora-fc.org. parent servers:

Server	Response
ns1.aurora-fc.org [61.235.117.88]	61.235.117.88
ns2.aurora-fc.org [61.235.117.88]	61.235.117.88

The host for the criminal's domain aurora-fc.org is CRGdSzS (China Railcom Guangdong Shenzhen Subbranch). on IP address 61.235.117.88.

***Latest News*** Initial entry 20th. October 2009