DESIGN EXTENSIONS, LLC (Stolen Identity) Fraud
Report
Active
Domain
Don't Bear Internet Fraud
Home
Bobbear Icon
This fraud should not be confused with any other company of the same or similar name - the website screenshot and the following fraud evidence refer to this fake company alone and no other. The website has been stolen from a genuine Russian company. These criminals have also stolen the identity & location details of a genuine Florida company of the same name who, needless to say, have nothing whatsoever to do with these criminals.
DESIGN EXTENSIONS, LLC (Stolen Identity) scam screenshot 23-Jan-2010
DESIGN EXTENSIONS, LLC (Stolen Identity) scam screenshot 23-Jan-2010

DESIGN EXTENSIONS, LLC (Stolen Identity) is just one of the numerous fake Russian scam sites that exist solely to ensnare the unwary, whether it is to 'phish' for bank details or mainly to recruit money mules. The complete fraud website content has quite clearly been stolen from the verified genuine Russian company Home Design and modified to suit this criminal's purposes, in particular the addition of a 'Careers' menu option that doesn't exist on the genuine website and leads to the criminal's money mule job. The fake website was only recently set up, (for instance, the domain des-extensions.biz was only registered with the registrar MELBOURNE IT, LTD. (Yahoo as reseller) on 20-Jan-2010 for the usual 'criminal's domain' minimum period of only one year) and contains a clear money mule solicitation of U.S. Representative/Financial manager under the Careers tab. Notice the illiterate line in the above screenshot "a member of the Europen Chamber of Commerce" - the 'Runglish' style of poor English and grammar is a common thread of these Russian criminals. Their other identical fraud aliases are/were Vidal Architects, Inc, Design Resources, IncDesign Build Studio, Inc, Design 2 Studio LLC., First Design Group, Design to Perform, DESIGN BUILD INNOVATIONS, L.L.C, N Design Studio, Inc, Euro-Design Corp, The Design Studio, LLC (The Desugn Studio, LLC), DESIGN 4 ADVERTISING, INC., Design Pro Screens, Inc., International Design Center, LLC, HOUSE & DESIGNS, INC., Design & Promotions Corporation, The Design Agency, LLC, Design Products Inc., DESIGN +, INC., DESIGN ACCENTS, INC., International Design Source, Inc, Design For You llc, Design Engineering, INC, DESIGN FORCE, LLC, DESIGN FACTORY INC., DesignNext and the Advanced Design Services, Inc fraud among others - this is clearly a serial fraudster which is clear evidence of fraud in itself. As per their usual MO, these criminals have stolen the identity of this genuine Florida based company.

Evidence of Criminal Fraud:

i) The DESIGN EXTENSIONS, LLC (Stolen Identity) criminal's website has quite clearly been stolen from the genuine genuine Russian company Home Design so any claims made in it are not relevant to the criminals, although they do carry the claim "Since our company’s founding in 1998, we have assisted numerous corporate and some private individuals around the world" under this 'Careers' menu option. However, the fact that their initial domain des-extensions.biz was only registered with MELBOURNE IT, LTD. (Yahoo as reseller) on 20-Jan-2010 for the usual 'criminal's domain' minimum period of only one year is clear evidence of fraudulent misrepresentation.

ii) This fraud is simply an identical follow-on fraud to all their other identical aliases as listed above - clear evidence of a serial fraudster.

iii) As is usual for these criminals, despite claiming to have been in business since 1998, (as evidenced below), "DESIGN EXTENSIONS, LLC" have no genuine Google internet presence at all, (ignoring their own fake website, of course - you'd expect to find that). Don't be misled by listings for other companies of the same name, especially this one that they have clearly stolen the identity of - Irrefutable evidence of fraud.

iv) The payload of the fake website is the following crystal clear money mule criminal solicitation under the Careers tab:

U.S. Representative/Financial manager Job

Our company primarily deals in design activities for corporate and residential ground plans. Our business unit is experienced in both creation and implementation of plans conceived.

-       Accommodations

-       Premises design

Since our company’s founding in 1998, we have assisted numerous corporate and some private individuals around the world.  Although we are currently headquartered in Moscow, Russia, the arms of our innovation have reached the four corners of the planet. We maintain a direct and diligent marketing process in the United States, and repeatedly offer services that are ahead of the industry “curve” in both pricing and quality.  Our advantages lay in certain benefits our Europen clientele experience that only an overseas company can provide:

   1. We are able to offer similar products for lower than standard pricing; we are able to cheaply staff our Moscow office
   2. Our Home Office is staffed with industry experts with over 8 decades of combined experience 

Why do we need U.S. Representative/Financial manager?

When we initially started operations in the United States, we experienced some issues with US trade laws that can be summarized into two different problems:

   1. All financial services operations have to take place inside the USA
   2. Customers cannot make payments to a company don’t have offices inside the US, even if the company is an industry leader around the world.  Our Home Office is located in Russia, which is why customers are not able to directly transfer money (payments for our designs) to our office in Russia. Under US law, the funds must be deposited into the account of the Financial Manager of Staffing Solutions that resides in the USA.  Then, it is the Financial Manager’s responsibility to transfer the funds to our business in Russia. The company has to be registered in the US tax administration, which we have already finished. By maintaining a Financial Manager in the US, we are able to solve both of these problems and continue to help the companies that need us in the USA.

Main duties include receiving payments from customers:

   1. Bank checks
   2. Wire transfers
   3. Certified funds

Compensation:

The Financial Manager will be entitled to 5% of all completed transactions. The maximum turnover handled by a single manager is limited the by company’s policy and is set at $100,000 per month. Thus the maximum monthly pay will constitute $3,000-5,000.

Type of Employment:

Agreement 

Time Commitment:

2-4 hours per week

Important:

We also have a business proposal for US company owners and managing directors. Private US businesses can accept funds from our customers with no limitations with a monthly turnover of up to 500,000.00 US dollars. Their profit is set at 7.5% of the turnover and may constitute $40,000.00 monthly. Please apply if you have a legal running business and are interested in this offer. 

You can combine this job with your current job, because you'll spend no more than 3 hours per week. This job can become perfect addition to your current job.


v) You do not get a much clearer definition of the illegal 'part time' money mule function of receiving stolen funds to a personal checking account and transferring a balance back to these criminals via Western Union or Moneygram which on its own defines the company without doubt as criminal and bogus and is clear evidence of criminal fraud. The potential for absolutely massive fraud is self evident from the "business proposal for US company owners".

vi)
No legitimate company is going to advertise for this sort of illegal part time, 'work from home' money transfer position among the untrained, inexperienced and uncertified general population overseas. The additional 'business proposal' shows the potential sheer scale of this criminal fraud operation - don't be part of it or you will lose a lot of money and perhaps your liberty.

vii) Sample Spams:
From: "Design Extensions, LLC" <smolniy.desext@gmail.com>

Dear xxxxx ,
My name is Vadim Smolniy. I'm Top manager of our hr dept. I got your
information on Yahoo!HotJobs , Our dept sure that u're quallified for the
post of Financial manager.

To get more information about this post, go to this web-site:

http://d-extllc.com/jobs.htm

this work may be the nice addon to your current jo.b.

If u're ready, contact me ASAP.
Faithfully
Vadim Smolniy


From: "Design Extensions, LLC" <smolniy.desext@gmail.com>

Dear xxxxx,
My name is Vadim Smolniy. I am personnel managr of our Company. I noticed
your resume on Hot Jo.bs , I believe you fit for the vacancy of Finance
Manager.

To get more info about current post, go to this Url

http://d-extllc.com/jobs.htm

This will be the good complement to your current jo.b.

If you're ready, answer me as soon as possible.
Regards
Vadim Smolniy

From: "Design Extensions, LLC" <smolniy.desext@gmail.com>

Hello xxxxx,
I'mVadim Smolniy. I'm recruiter of HR dept.
I'm involved in attracting new workers. I have sent you brief description
for the employment offer a few minutes ago.
I just want to make confident that you received it. Please confirm that you
have received my last e-mail with the information.
You can find the information on our web-page: http://d-extllc.com
Sincerely
Vadim Smolniy

Notice the link to Yahoo! Hot Jobs... it's a common theme.  Mind, I believe Yahoo have off-loaded Hot-Jobs to Monster, so it's Monster's problem now.
viii) Fake staff: This 'Team' doesn't change between aliases, (except for the name of the fake 'director'). This time the same old face is Kirov Anton Pavlovich, (Other identical faces from the above list of aliases have various different names as listed in the fraud documentation - clear evidence of fraud):

Team

ix)
Another identical alias, another set of fake contact Details & fake certificates for this serial criminal from their 'Business Licence' page:

N.B. - the usual MO of these criminals is to steal the identity and location details of a genuine Florida company who, needless to say, have nothing to do with these criminals.

DESIGN EXTENSIONS, LLC 

RUSSIAN ADDRESS
122 Petrova street
Moscow, 422000
Russian Federation  

***The following address details are stolen and so have been converted to an image***

fake address


• - The above Florida address is simply the address of the genuine Florida Web Design company whose identity they have clearly stolen.
• - A Google search for the address "122 Petrova street Moscow" returns no hits for these criminals, (ignoring any occurrences of their own fake website, of course).
• - A Google Maps search for the address details "122 Petrova street Moscow" also returns no hits.
• - A Google Search for the fake DUNS number 78-738-0807 shows that it has been used for numerous other aliases - clear evidence of fraud.

The above evidence clearly demonstrates beyond any doubt that the fake DESIGN EXTENSIONS, LLC website has been set up very recently by money laundering criminals purely for the purpose of spamvertising an illegal money laundering 'mule' job of receiving 'customer's payments' to a personal checking account and transferring a balance back to these criminals. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of serial criminal activity - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

 
Known Website Domains

des-extensions.biz
d-ext.com
desextllc.com
d-extllc.com

Registrar

MELBOURNE IT, LTD. (Yahoo as reseller) - 20-Jan-2010
MELBOURNE IT, LTD. (Yahoo as reseller) - 08-Feb-2010
MELBOURNE IT, LTD. (Yahoo as reseller) - 27-Jan-2010
MELBOURNE IT, LTD. (Yahoo as reseller) - 08-Feb-2010
Host

Yahoo on IP addresses 69.147.83.187 69.147.83.188 98.136.50.138
Yahoo on IP addresses 69.147.83.187 69.147.83.188 98.136.50.138
Yahoo on IP addresses 69.147.83.187 69.147.83.188 98.136.50.138
Yahoo on IP addresses 69.147.83.187 69.147.83.188 98.136.50.138
Key:

Active
Suspended/Disabled
Parked


Domain Whois Data (Any personal whois details for the following criminal fraud domains are fake or stolen and so have been redacted).

Domain Name:                                 DES-EXTENSIONS.BIZ
Domain ID:                                   D37855626-BIZ
Sponsoring Registrar:                        MELBOURNE IT LTD

Sponsoring Registrar IANA ID:                13
Domain Status:                               clientTransferProhibited
Registrant ID:                               C126394621463872
Registrant Name:                             *****************
Registrant Organization:                     Private Registration US
Registrant Address1:                         PO Box 61359
Registrant City:                             Sunnyvale
Registrant State/Province:                   CA
Registrant Postal Code:                      94088
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     +1.5105952002
Registrant Email:                            contact@myprivateregistration.com
Administrative Contact ID:                   C126394621463870
Administrative Contact Name:                 PrivateRegContact Admin
Administrative Contact Organization:         Private Reg US
Administrative Contact Address1:             PO Box 61359
Administrative Contact City:                 Sunnyvale
Administrative Contact State/Province:       CA
Administrative Contact Postal Code:          94088
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:         +1.5105952002
Administrative Contact Email:                contact@myprivateregistration.com
Billing Contact ID:                          A126394648323479
Billing Contact Name:                        PrivateRegContact Bill
Billing Contact Organization:                Private Reg US
Billing Contact Address1:                    PO Box 61359
Billing Contact City:                        Sunnyvale
Billing Contact State/Province:              CA
Billing Contact Postal Code:                 94088
Billing Contact Country:                     United States
Billing Contact Country Code:                US
Billing Contact Phone Number:                +1.5105952002
Billing Contact Email:                       contact@myprivateregistration.com
Technical Contact ID:                        A126394648323481
Technical Contact Name:                      PrivateRegContact TECH
Technical Contact Organization:              Private Reg US
Technical Contact Address1:                  PO Box 61359
Technical Contact City:                      Sunnyvale
Technical Contact State/Province:            CA
Technical Contact Postal Code:               94088
Technical Contact Country:                   United States
Technical Contact Country Code:              US
Technical Contact Phone Number:              +1.5105952002
Technical Contact Email:                     contact@myprivateregistration.com
Name Server:                                 YNS1.YAHOO.COM
Name Server:                                 YNS2.YAHOO.COM
Created by Registrar:                        MELBOURNE IT LTD
Last Updated by Registrar:                   MELBOURNE IT LTD
Domain Registration Date:                    Wed Jan 20 00:18:46 GMT 2010
Domain Expiration Date:                      Wed Jan 19 23:59:59 GMT 2011
Domain Last Updated Date:                    Wed Jan 20 00:18:51 GMT 2010
Domain Name.......... d-ext.com
Registrar:     MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Status:        clientTransferProhibited
Dates:         Created 08-feb-2010   Updated 08-feb-2010  Expires 08-feb-2011
DNS Servers:   YNS1.YAHOO.COM  YNS2.YAHOO.COM 

  Creation Date........ 2010-02-09
  Registration Date.... 2010-02-09
  Expiry Date.......... 2011-02-09
  Organisation Name.... *****************
  Organisation Address. PO Box 61359
  Organisation Address.
  Organisation Address. Sunnyvale
  Organisation Address. 94088
  Organisation Address. CA
  Organisation Address. US

Admin Name........... Admin PrivateRegContact
  Admin Address........ PO Box 61359
  Admin Address........
  Admin Address........ Sunnyvale
  Admin Address........ 94088
  Admin Address........ CA
  Admin Address........ US
  Admin Email.......... contact@myprivateregistration.com
  Admin Phone.......... +1.5105952002
  Admin Fax............

Tech Name............ TECH PrivateRegContact
  Tech Address......... PO Box 61359
  Tech Address.........
  Tech Address......... Sunnyvale
  Tech Address......... 94088
  Tech Address......... CA
  Tech Address......... US
  Tech Email........... contact@myprivateregistration.com
  Tech Phone........... +1.5105952002
  Tech Fax.............
  Name Server.......... yns1.yahoo.com
  Name Server.......... yns2.yahoo.com



Domain Name.......... desextllc.com
Registrar:     MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Status:        clientTransferProhibited
Dates:         Created 27-jan-2010   Updated 27-jan-2010  Expires 27-jan-2011
DNS Servers:   YNS1.YAHOO.COM  YNS2.YAHOO.COM 

  Creation Date........ 2010-01-28
  Registration Date.... 2010-01-28
  Expiry Date.......... 2011-01-28
  Organisation Name.... *****************
  Organisation Address. PO Box 61359
  Organisation Address.
  Organisation Address. Sunnyvale
  Organisation Address. 94088
  Organisation Address. CA
  Organisation Address. US

Admin Name........... Admin PrivateRegContact
  Admin Address........ PO Box 61359
  Admin Address........
  Admin Address........ Sunnyvale
  Admin Address........ 94088
  Admin Address........ CA
  Admin Address........ US
  Admin Email.......... contact@myprivateregistration.com
  Admin Phone.......... +1.5105952002
  Admin Fax............

Tech Name............ TECH PrivateRegContact
  Tech Address......... PO Box 61359
  Tech Address.........
  Tech Address......... Sunnyvale
  Tech Address......... 94088
  Tech Address......... CA
  Tech Address......... US
  Tech Email........... contact@myprivateregistration.com
  Tech Phone........... +1.5105952002
  Tech Fax.............
  Name Server.......... yns1.yahoo.com
  Name Server.......... yns2.yahoo.com
Domain Name.......... d-extllc.com
Registrar:     MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Status:        clientTransferProhibited
Dates:         Created 08-feb-2010   Updated 08-feb-2010  Expires 08-feb-2011
DNS Servers:   YNS1.YAHOO.COM  YNS2.YAHOO.COM 

  Creation Date........ 2010-02-09
  Registration Date.... 2010-02-09
  Expiry Date.......... 2011-02-09
  Organisation Name.... *****************
  Organisation Address. PO Box 61359
  Organisation Address.
  Organisation Address. Sunnyvale
  Organisation Address. 94088
  Organisation Address. CA
  Organisation Address. US

Admin Name........... Admin PrivateRegContact
  Admin Address........ PO Box 61359
  Admin Address........
  Admin Address........ Sunnyvale
  Admin Address........ 94088
  Admin Address........ CA
  Admin Address........ US
  Admin Email.......... contact@myprivateregistration.com
  Admin Phone.......... +1.5105952002
  Admin Fax............

Tech Name............ TECH PrivateRegContact
  Tech Address......... PO Box 61359
  Tech Address.........
  Tech Address......... Sunnyvale
  Tech Address......... 94088
  Tech Address......... CA
  Tech Address......... US
  Tech Email........... contact@myprivateregistration.com
  Tech Phone........... +1.5105952002
  Tech Fax.............
  Name Server.......... yns1.yahoo.com
  Name Server.......... yns2.yahoo.com

DNS Lookup: des-extensions.biz A record (Also valid for desextllc.com)
Searching for des-extensions.biz A record at d.root-servers.net [128.8.10.90]: Got referral to H.GTLD.biz. (zone: biz.)
Searching for des-extensions.biz A record at H.GTLD.biz. [199.7.77.126]: Got referral to YNS1.YAHOO.COM. (zone: des-extensions.biz.)
Searching for des-extensions.biz A record at YNS1.YAHOO.COM. [98.136.43.32]: Reports des-extensions.biz.
Response:
Domain Type Class TTL Answer
des-extensions.biz. A IN 1200 69.147.83.187
des-extensions.biz. A IN 1200 98.136.50.138
des-extensions.biz. A IN 1200 69.147.83.188
des-extensions.biz. NS IN 86400 yns1.yahoo.com.
des-extensions.biz. NS IN 86400 ns9.san.yahoo.com.
des-extensions.biz. NS IN 86400 yns2.yahoo.com.
des-extensions.biz. NS IN 86400 ns8.san.yahoo.com.

Looking up at the 2 des-extensions.biz. parent servers:

Server Response
yns2.yahoo.com [66.196.84.168] 69.147.83.187 69.147.83.188 98.136.50.138
yns1.yahoo.com [98.136.43.32] 69.147.83.187 69.147.83.188 98.136.50.138

The criminal's host is listed as Yahoo Inc. on IP address 69.147.83.187 69.147.83.188 98.136.50.138.
***Latest News*** 23rd. January 2010
Webpage created

***Latest News*** 25th. January 2010
Yahoo have disabled the domain des-extensions.biz - please notify me of any active domains for this criminal.

***Latest News*** 8th. February 2010
News from site contact - the criminal has registered two new domains with Melbourne IT/Yahoo - d-ext.com and desextllc.com, both hosted on the usual Yahoo network:

DNS Lookup: d-ext.com A record (Also valid for desextllc.com and d-extllc.com)
Searching for d-ext.com A record at d.root-servers.net [128.8.10.90]: Got referral to K.GTLD-SERVERS.NET. (zone: com.)
Searching for d-ext.com A record at K.GTLD-SERVERS.NET. [192.52.178.30]: Got referral to yns1.yahoo.com. (zone: d-ext.com.)
Searching for d-ext.com A record at yns1.yahoo.com. [98.136.43.32]: Reports d-ext.com.
Response:
Domain Type Class TTL Answer
d-ext.com. A IN 1200 98.136.50.138
d-ext.com. A IN 1200 69.147.83.188
d-ext.com. A IN 1200 69.147.83.187
d-ext.com. NS IN 86400 ns9.san.yahoo.com.
d-ext.com. NS IN 86400 yns2.yahoo.com.
d-ext.com. NS IN 86400 ns8.san.yahoo.com.
d-ext.com. NS IN 86400 yns1.yahoo.com.

Looking up at the 2 d-ext.com. parent servers:

Server Response
yns2.yahoo.com [66.196.84.168] 69.147.83.187 69.147.83.188 98.136.50.138
yns1.yahoo.com [98.136.43.32] 69.147.83.187 69.147.83.188 98.136.50.138

The criminal's host is listed as Yahoo Inc. on IP address 69.147.83.187 69.147.83.188 98.136.50.138.

***Latest News*** 23rd. February 2010
New domain notified by owner of genuine site that these crooks have ripped off: d-extllc.com. Still registered with Melbourne IT/Yahoo and hosted by Yahoo - these crooks are not going to give up a good thing...