GenCorp Financial Consulting Fraud
Report
Active
Domain
Don't Bear Internet Fraud
Home
Bobbear Icon
Gencorp Consulting Logo.

This GenCorp Financial Consulting fraud is another scam that shares its roots with many others such as the Elite Finance Group, Fast Transfers scam, Alpha Financial scam and the Sigma Motion scam, the Safe Way Worldwide scam and no doubt many others, in other words it's a standard mix 'n match fraud, a demonstrably fake site of the type that is turned out by the dozen by the same bunch of criminals,with bits from here and bits from there. At the end of the day it's just another standard money laundering mule job spamvertising site like all the others.

This fraudster bears no relation to any other company of a same or similar name and should not be confused. The above website graphics and the money laundering job below are intended to identify this fraudster alone.

GenCorp Financial Consulting : Evidence of Criminal Fraud


i)  On their home page they claim "GenCorp Financial Consulting was established in 1991" but their domain gencorp-consulting.com was only registered on 30-May-2007 with PUBLICDOMAINREGISTRY.COM (REGGI.RU)

ii) Their bogus job is exactly the same one as advertised by the 
Elite Finance Group fraudster among others as "Processing Manager".

iii) In the 'About Us' blurb they say they "We are an independent, employee-owned, global firm of 3,000 talented individuals, operating from offices across the world, in Europe, North America, Latin America, Asia, and Oceania. We have won numerous awards for delivering complex and highly innovative assignments, run one of the most successful venture programmes in our industry, have technology development capability that few firms can match, deep expertise across key industries and government, and a unique breadth of skills from strategy to IT to HR to applied technology.", however they have no Google internet presence apart from listings as fraudsters and scammers.

iv) The payload of the website is the usual part-time money mule job. This time it's under "ACCESABLE VACANCIES" (note the incorrect spelling), and is called a "Pension fund Flow Manager" and here are the details copied directly from their website:

ACCESABLE VACANCIES

Closing Date: Open until filled
Position: Pension fund Flow Manager
Salary: Depends on Work Scope/ bonus & benefits
Duty Location: Oslo, Virtual Office, Worldwide.

Description of Duties:

  1. Phone and E-mail contact with company clients
  2. Receiving Personal Pension Fund transfers from our company and forwarding it to our clients.
  3. Managing cash and balancing receipts
  4. Operating within prescribed budgets
  5. Following up on client’s accounts

The Pension fund Flow Manager is a very important position in corporation, eventually they are the main work-chain of GenCorp Financial, that is why all CV’s will be carefully checked, including but not limited with background information check and with criminal reports.

* Some details of the work with our company are subject for changes. However that should have give a reason for worries, as our employees are always notified in advance, and participate in work only if they agree to the changes.


Salary
The Salary depends on the work scope you wish to make, GenCorp Financial will pay you AMOUNT$ per month, and AMOUNT% per transfer/payment you will successfully process. Our most successful Managersreceive at least 12 transfers per month, and their salary starts from 5-6000$ per month.

This work is part-time, and you shall work at home, there is no need to be in the office for 10 hrs a day, you will need no more then 3 hrs per day to fulfill the tasks you will receive, then – you may do whatever you wish.


Candidate requirements

*The brief training course is enclosed.

General:
This job will allow You to:

If you are creative, independent, focused, accurate, detail-oriented, professional, flexible, skilled, hard working, polite, purposeful and want to reach success, then you will be interested in this position. please follow this link http://gencorp-consulting.com/?p=reg and register, our managers will contact you as soon as possible.

In other words a standard illegal money mule job involving part time working from home processing 'transfers' via Western Union for a percentage cut.
v) No legitimate company would use private individuals to transfer money in this way. To do so is illegal and defines the company as both bogus and criminal.


The above evidence clearly demonstrates that the GenCorp Financial Consulting website is a fraudulent website set up with intent to deceive. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is usually false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.
GenCorp Financial Consulting Fraudsters - current hosting details [Updated 11th. Jan. 2008]

Current Main Domains, Hosts and  Registrars
Domain

gencorpconsulting.biz
Registrar

PUBLICDOMAINREGISTRY.COM (REGGI.RU)

Host Network

Hostfresh
Host IP

58.65.235.49


See table below for the full list of known active & suspended main domains used by this criminal.
Please notify me of any other current domains used by this criminal.

Current Botnet Nameserver Domains and Registrars
Not botnet hosted at present - DNS data below. See table below for the full list of known active & suspended nameserver domains for this criminal.

The Spam Headers

Fresh spam required, full source code please or as an attachment.



The Spam Content

Good Day

The large company Gen Corp Financial Consulting search responsible people for work. Our company work since 1991 and has huge experience of the work with finance, management, technological consultation of firms, etc. We search people who will be perform the work qualitatively. In turn we guarantee good money which will depend on the work made by you, you should consider this work seriously. We hope you will be worthy Manager our company Our company is a well-known financial organization, with solid and honest reputation.

Candidate requirements

The brief training course is enclosed.

We offer our employees a competitive salary $2500-$4000 per month and benefits package, including health,long term disability, paid time off, pre-tax reimbursement accounts, educational reimbursement, voluntary supplemental insurance, employee assistance program and 401(k) plan. This is a great opportunity to join a company poised for growth that encourages teamwork without minimizing the contribution of the individual. We value candor and accountability, and we perform with integrity and respect. We embrace change and we possess an entrepreneurial spirit. Our people and our clients are our most important assets!

If you are interested in working with us, or if you need more information, you can contact me directly at my personal email address: christopher@gencorp-consulting.info

Sincerely yours, GenCorp Financial Consulting


The Zombie Botnet

The criminal as not using a zombie botnet at this time. Normal DNS Data below.

DNS Data for gencorp-consulting.com & gencorpconsulting.biz

How I am searching:

Searching for gencorp-consulting.com A record at k.root-servers.net [193.0.14.129]: Got referral to d.gtld-servers.net. (zone: com.)
Searching for gencorp-consulting.com A record at d.gtld-servers.net. [192.31.80.30]: Got referral to ns1.tromba45.info. (zone: gencorp-consulting.com.)
Searching for gencorp-consulting.com A record at ns1.tromba45.info. [58.65.235.49]: Reports gencorp-consulting.com. Response:
Domain Type Class TTL Answer
DNS Data for gencorp-consulting.info & gencorpconsulting.biz A IN 14400 58.65.235.49
gencorp-consulting.com. NS IN 14400 ns1.domain.com.
gencorp-consulting.com. NS IN 14400 ns2.domain.com.

Looking up at the 2 gencorp-consulting.com. parent servers:

Server Response
ns2.tromba45.info [58.65.235.49]  58.65.235.49
ns1.tromba45.info [58.65.235.49]  58.65.235.49

The host of this criminal's website is Hostfresh on IP  58.65.235.49
DNS Data for gencorp-consulting.info

How I am searching:

Searching for gencorp-consulting.info A record at m.root-servers.net [202.12.27.33]: Got referral to B9.INFO.AFILIAS-NST.ORG. (zone: info.)
Searching for gencorp-consulting.info A record at B9.INFO.AFILIAS-NST.ORG. [204.74.113.33]: Got referral to yns2.yahoo.com. (zone: gencorp-consulting.info.)
Searching for gencorp-consulting.info A record at yns2.yahoo.com. [216.109.116.20]: Got referral to K.ROOT-SERVERS.NET. (zone: (root))
Searching for gencorp-consulting.info A record at K.ROOT-SERVERS.NET. [193.0.14.129]: Got referral to a9.info.afilias-nst.info. (zone: info.) 
Searching for gencorp-consulting.info A record at a9.info.afilias-nst.info. [204.74.112.33]: Got referral to yns2.yahoo.com. (zone: gencorp-consulting.info.) 
Searching for gencorp-consulting.info A record at yns2.yahoo.com. [216.109.116.20]: Got referral to K.ROOT-SERVERS.NET. (zone: (root))
Searching for gencorp-consulting.info A record at K.ROOT-SERVERS.NET. [193.0.14.129]: Got referral to b9.info.afilias-nst.org. (zone: info.) 
Searching for gencorp-consulting.info A record at b9.info.afilias-nst.org. [204.74.113.33]: Got referral to yns2.yahoo.com. (zone: gencorp-consulting.info.)
Searching for gencorp-consulting.info A record at yns2.yahoo.com. [216.109.116.20]: Got referral to J.ROOT-SERVERS.NET. (zone: (root))
Searching for gencorp-consulting.info A record at J.ROOT-SERVERS.NET. [192.58.128.30]: Got referral to F9.INFO.AFILIAS-NST.ORG. (zone: info.)
Searching for gencorp-consulting.info A record at F9.INFO.AFILIAS-NST.ORG. [198.133.199.33]: Got referral to yns1.yahoo.com. (zone: gencorp-consulting.info.)
Searching for gencorp-consulting.info A record at yns1.yahoo.com. [66.218.71.205]: Reports gencorp-consulting.info. Response:
Domain Type Class TTL Answer
gencorp-consulting.info. A IN 600 216.39.58.208
gencorp-consulting.info. A IN 600 216.39.58.209
gencorp-consulting.info. A IN 600 216.39.58.235
gencorp-consulting.info. A IN 600 216.39.58.236
gencorp-consulting.info. A IN 600 216.39.58.237
gencorp-consulting.info. A IN 600 216.39.58.192
gencorp-consulting.info. NS IN 86400 yns1.yahoo.com.
gencorp-consulting.info. NS IN 86400 yns2.yahoo.com.
gencorp-consulting.info. NS IN 86400 ns8.san.yahoo.com.
gencorp-consulting.info. NS IN 86400 ns9.san.yahoo.com.
ns8.san.yahoo.com. A IN 1800 66.218.71.205
ns9.san.yahoo.com. A IN 1800 216.109.116.20
yns1.yahoo.com. A IN 1800 66.218.71.205
yns2.yahoo.com. A IN 1800 216.109.116.20

Looking up at the 2 gencorp-consulting.info. parent servers:

Server Response
yns2.yahoo.com [216.109.116.20]  [BOGUS ANSWER: This server is not authoritative for gencorp-consulting.info: it refers back to the root servers]
yns1.yahoo.com [66.218.71.205]  216.39.58.198 216.39.58.199 216.39.58.200 216.39.58.201 216.39.58.202 216.39.58.203

The crook is using the Yahoo small business network for his 'secure mail' exchange (Mx) domain gencorp-consulting.info


Here are all of the known domains that are/have been used for the
GenCorp Financial Consulting- fraud:

Domain

gencorp-consulting.com

gencorp-consulting.info
(Used as MX)
gencorpconsulting.biz

Status

Suspended
Suspended

Active
Registrar

Directi Internet Solutions d/b/a PublicDomainRegistry.Com
Melbourne IT Limited dba Internet Names WorldWide
(Probably Yahoo as reseller)
Directi Internet Solutions d/b/a PublicDomainRegistry.Com

Please notify me of any errors or domains not listed here.

i) The criminal will not respond to your challenge, but will use the notice to prepare a new network - immediate suspension is requested please, if allowed for by your AUP.

Fraud Blog

Initial entry 11th. January 2008

***Latest News*** 26th. January 2008
New domain gencorpconsulting.biz spotted in the wild.