Bestway International Scam

Bestway International Fraud

Don't Bear Internet Fraud

Bestway International (Bestway Int) scam screenshot (25-Jan-2009)

Bestway International scam screenshot (25-Jan-2009)

Bestway International (Bestway Int) is a website that has been set up purely for the purposes of lending a false air of legitimacy to both a money mule job and a reshipping fraud job under the 'Jobs' tab. This crook shares the same registrar, the same domain registration date, the same host, the same nameservers and the same IP address as the Focal Financial Group fraudster so it is likely that they are from the same stable with all that implies. The payload of the fake website is the usual twin jobs of money laundering mule and reshipping donkey advertised under the 'Jobs' menu option.

This fraud should not be confused with any other company of the same or similar name - the above website screenshot and the following fraud evidence refer to this company alone and no other.

Evidence of Criminal Fraud:

i) According to their Jobs page:

"We were established in 2004, then continued to grow with service focusing on almost all of the states and overseas. We invite you to take a closer look at our service and offerings. Bestway Int is on International Electronics market since 2005, providing all types of electronic wholesales". However, their domain bestwayint.com was only registered with XIN NET TECHNOLOGY CORPORATION on 03-Sep-2008. A Clear indication of misrepresentation and fraud.
(I like the bit about "service focusing on almost all of the states and overseas" - some 'focus'!)

ii) The website carries the following jobs under the 'Jobs' menu option:

PACKAGE HANDLER

Duties include receiving, sorting packages according to zip code and/or town name, loading freight into vehicles for distribution or shipping out packages to our clients with your local postal service (working with shipping labels). Packages range in weight from 1-50 pounds. Applicants must be capable of lifting up to 50 pounds on an occasional basis.

SALES MANAGER

Job Requirements:
• Ability to excel in fast-paced sales environment.
• Adapt at prospecting for new clients and developing into a qualified sale.
• Strong negotiation skills that lead to consistently closing qualified leads.
• Excellent organizational skills.
• Can successfully work and grow in a team environment.
• Managing cash and balancing receipts;
• Making bank deposits;
• Operating within prescribed budgets;
• Superior written and verbal communication skills.
• Must be able to produce results within defined timelines.
• Ability to travel 50% of the time.
• Proficient in Microsoft Word, PowerPoint and Excel.

Occupation

    * 2-4 hours per day.

Training

    * The training course and full support are available on request

Basic Salary Packages range between 16,000$ and 25,000$.

iii) The "PACKAGE HANDLER" job consists of "shipping out packages to our clients with your local postal service (working with shipping labels)" which is accepting packages to your home address, affixing the supplied shipping labels and sending the packages off to these criminals in the Ukraine or wherever using "your local postal service". The problem is that the goods have been bought with stolen credit card data and shipped to your home address and you will be the only contact - do not be fooled - the activity is illegal and will lose you a lot of money, your bank account and possibly your liberty.

iv) The "SALES MANAGER" job is summarised by the three lines: "Managing cash and balancing receipts", "Making bank deposits" and "2-4 hours per day". It is a part time, work from home task of accepting funds into your bank account and transferring a balance back to these crooks using Western Union. Once again - do not be fooled - the activity is also illegal and will lose you a lot of money, your bank account and possibly your liberty.

v) No legitimate company is going to advertise for these sort of illegal part time, 'work from home' positions among the untrained, inexperienced and uncertified general population overseas, to do so defines the company as both bogus and criminal.

vi) 'Contact Us' Details from the "Contact" page:

Main (Germany):

Friedrichstr. 205, D-10969 Berlin.
E-mail: support@bestwayint.org

United States:

Tel: (870) 667-4114

E-mail: support@bestwayint.org

Employment manager:

oliver.bestwayint@gmail.com

• - There's no independent evidence that these crooks are at the address Friedrichstr. 205, D-10969 Berlin - a Google search for "Friedrichstr. 205" returns zero results for them.
• - A German zipcode check shows that the postcode 10969 is wrong for Friedrichstr. 205 - it should be 10117. Check for yourself. Clear evidence of a fake address.
• - There is no listed German telephone contact number.
• - There is no address for the supposed USA location of these crooks.
• - The domain bestwayint.org, used in the above email address has been suspended.

vii) A webcheck shows that Bestway International are not registered at Germany's 'Companies House', (Select either 'alle Schlagwörter enthalten' or 'den genauen Firmennamen enthalten' search option) - check for yourself - clear evidence of a fake company.

viii) A Google search returns a whole host of "Bestway Internationals" but no trace can be found of these particular crooks.

The above evidence clearly demonstrates beyond any doubt that the Bestway International website is a fake website set up very recently by money laundering criminals purely for the purpose of spamvertising an illegal money laundering 'mule' job and a reshipping 'donkey' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal activity - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Known Website Domains

bestwayint.com
bestwayint.org

Registrar

XIN NET TECHNOLOGY CORPORATION - 03-Sep-2008
XIN NET TECHNOLOGY CORPORATION - 04-Aug-2008

Host & IP Address

KORNET(Korea Telecom) - 121.156.57.205
-

Active
Suspended/Disabled

How I am searching:

Searching for bestwayint.com A record at g.root-servers.net [192.112.36.4]: Got referral to I.GTLD-SERVERS.NET. (zone: com.)
Searching for bestwayint.com A record at H.GTLD-SERVERS.NET. [192.54.112.30]: Got referral to ns1.dangns.com. (zone: bestwayint.com.)
Searching for bestwayint.com A record at ns1.dangns.com. [61.155.140.117]: Reports bestwayint.com. Response:

Domain	Type	Class	TTL	Answer
bestwayint.com.	A	IN	86400	114.141.10.231
bestwayint.com.	NS	IN	86400	ns4.bestwayint.com.
bestwayint.com.	NS	IN	86400	ns3.bestwayint.com.
bestwayint.com.	NS	IN	86400	ns2.bestwayint.com.
bestwayint.com.	NS	IN	86400	ns1.bestwayint.com.
ns4.bestwayint.com.	A	IN	86400	114.141.10.231

Looking up at the 4 bestwayint.com. parent servers:

Server	Response
ns4.dangns.com [61.155.140.117]	114.141.10.231
ns2.dangns.com [61.155.140.117]	114.141.10.231
ns1.dangns.com [61.155.140.117]	114.141.10.231
ns4.gotchans.com [222.135.146.134]	Timeout

The host of this criminal fraudster is HCLC-INFRA (Korea), on IP address 114.141.10.231 - these are exactly the same details as for the Focal Financial Group fraudster. Why would a supposed German company have a Chinese registrar and a Korean host?

***Latest News*** Webpage created 25-Jan-2009 - thanks to Frank Bear for the heads-up on this one.

***Latest News*** 4th. Febrary 2009
News from Frank Bear - the domain bestwayint.com has been moved to a new host:

How I am searching:

Searching for bestwayint.com A record at f.root-servers.net [192.5.5.241]: Got referral to M.GTLD-SERVERS.NET. (zone: com.)
Searching for bestwayint.com A record at M.GTLD-SERVERS.NET. [192.55.83.30]: Got referral to ns2.gotchans.com. (zone: bestwayint.com.)
Searching for bestwayint.com A record at ns2.gotchans.com. [221.203.168.133]: Reports bestwayint.com. Response:

Domain	Type	Class	TTL	Answer
bestwayint.com.	A	IN	86400	121.156.57.205
bestwayint.com.	NS	IN	86400	ns4.bestwayint.com.
bestwayint.com.	NS	IN	86400	ns3.bestwayint.com.
bestwayint.com.	NS	IN	86400	ns2.bestwayint.com.
bestwayint.com.	NS	IN	86400	ns1.bestwayint.com.
ns4.bestwayint.com.	A	IN	86400	121.156.57.205

Looking up at the 4 bestwayint.com. parent servers:

Server	Response
ns3.gotchans.com [58.215.240.103]	121.156.57.205
ns4.gotchans.com [222.187.220.112]	121.156.57.205
ns1.dangns.com [61.155.140.117]	121.156.57.205
ns2.gotchans.com [221.203.168.133]	121.156.57.205

The new host for this criminal fraudster is KORNET(Korea Telecom) on IP address 121.156.57.205