IT Complex Ltd. Fraud
Report
Active
Domain
Don't Bear Internet Fraud
Home
Bobbear Icon
This fraudster should not be confused with any legitimate company of the same or similar name - the website graphics below and the following evidence clearly identify the fake website and these criminal fraudsters and no other company or individual.
IT Complex Ltd. scam screenshot (28-Oct-2009)
IT Complex Ltd. scam screenshot (28-Oct-2009)

IT Complex Ltd. This is just a standard scam website that has been set up to form a front for a money laundering job spamming campaign using stolen web content and a stolen UK company identity. The criminal's domain has only been very recently registered for the usual 'criminal's domain' one year minimum period, they have absolutely no web presence and their location and contact details are bogus. The whole purpose of the fake site is to lend an air of legitimacy to a job website spamming campaign intended to recruit money laundering mules. This fraud has a pretty well identical MO to three previous frauds, Web Productions Limited, Software Maintenance Ltd and Data Systems Limited, in fact this serial criminal's latest fraud uses the same domain registrar and is hosted on exactly the same IP (93.174.92.219) as the previous Data Systems Limited scam and the criminal is still using the same fake Careerbuilder spams. It is a very heavily disguised and complex scam, but the end result is the same - transferring stolen funds to criminals. Thanks to the victims that have contacted me with information on these criminals. **N.B. This criminal uses selective IP blocking techniques - if you get a 'page not found' error it does not necessarily mean that the site is inactive**.

IT Complex Ltd.  : Evidence of Criminal Fraud

i) The criminal's website is based on stolen content taken from the IDS logic company website. That much is self-evident and clear evidence of criminal fraud. [N.B. The criminal's website is using IP blocking techniques, (not a sign of a genuine company) - if you get a 'page not available' error it may be necessary to circumvent the measures]. The last criminals that used selective IP blocking on their websites were the "<random name> International" scammers.

ii
) As the site is stolen, it mostly doesn't really apply to the criminals, however,
they have inserted some content clearly based on their previous scams, including this claim on their 'About Us' page "IT Complex Ltd. (Company No 05893370) is a UK-based web solutions & services provider. Our head office is located in Northolt, west of London. Our company has been in business for 3 years, and during this time period we have been able to complete numerous projects of many scopes and complication degrees", but the criminal's domain itcomplexltd.com was only registered with WEB COMMERCE COMMUNICATIONS LIMITED DBA WEBNIC.CC, on 26-sep-2009 for the usual criminal domain period of only one year. An indication of a fraudulent registration.

iii) A Google search shows absolutely no genuine internet presence at all for this particular IT Complex Ltd. with the above website, (ignoring the crook's own website, of course), although it is clear that, (as per their previous scams), they have hijacked a UK company registration for a company, (Company No. 05893370). From the complete lack of Google presence, even the stolen company does not appear to be active and sure enough, in the Companies House data the company is listed as under 'Proposal to Strike off '. They are also not listed in the telephone directory - check for yourself. Not to be confused with any other company of the same or similar name. There is also a Ukrainian IT company of the same name.

iv) Fake 'Contact Us' details from their website:

3 Harborough House
Taywood Rd
Northolt
UB5 6GW
United Kingdom

Tel : +44 020 3239 2793
Email : uk@itcomplexltd.com

• - A Google websearch for the address "3 Harborough House Taywood Rd Northolt UB5 6GW" returns no link to these criminals, ignoring their own fake website, of course.
• - A UK postcode check for the postcode
UB5 6GW shows that the address "3 Harborough House Taywood Rd Northolt UB5 6GW" is inaccurate - it is actually "Flat 3, Harborough House, Taywood Rd, Northolt UB5 6GW". Harborough House is a residential block of flats.
• - Their UK telephone number ((+44) 20 3239 2793 - format corrected) always defaults to voicemail with what sounds like a Dutch accent, (exactly as per their previous scam).

All clear evidence of fake details.


v) The Fake Careerbuilder Spam:



Careerbuilder logo

Message from Job Poster  

Dear xxxxxx.


A solid and growing European IT firm with more than 3 years of successful operation is expanding and currently looking for an optimistic, responsible and self-motivated account manager to join its dynamic team in the US. This is a wonderful opportunity to receive a unique experience of joining a professional outsourcer group, as well as servicing VIP clients and creating long-lasting customer relationships.

Account managers are responsible for ensuring a significant communication link between our outsourcer groups and customers, by standing for the corporation and providing the top-notch level of client satisfaction. This is a full-time home-based position, no relocation or travel is needed. Please note, that the company never request any startup fees or any other payments!

Job Responsibilities:

- Ensure current customers are looked after and all their expectations are met within a timely manner.
- Be responsive to customers needs, and look for opportunities to go one step further to provide a great experience.
- Develop persistent client relations through constant contact and professional and honest communication.
- Monitor and assist in organizing the customer billing procedures.
- Keep accurate records, compose weekly status reports and maintain full project documentation.
- Complete project assignments accurately and on time.

Minimum Requirements:

- High School Diploma or equivalent;
- Strong knowledge of MS Word, MS Excel and MS Outlook;
- Brilliant communication skills, both written and verbal;
- Ability to multitask and manage own time and resources;
- High level of self-motivation and self-organization;
- Ability to learn fast and work in a fast-paced environment.

Pay and Benefits:

- Base pay and bonuses $42,000+ first year;
- Paid time off 3 weeks and days-off;
- Reimbursement of general expenses cell phone, Internet, etc.;
- Quick career development opportunities.

The complete job description is sent upon request - please reply to this email or forward your questions to christigorak@gmail.com. We are currently attempting to struggle against the inrush of unsolicited emails delivered our company's mailboxes by using this public email for initial contacts. Please accept our apologies for any inconvenience.

Best regards,
Christina Gorak
Hiring Manager
christigorak@gmail.com  
You are receiving this employment opportunity email because you uploaded your resume on CareerBuilder.
If your employment status has changed or you no longer wish to receive these emails, you can update your privacy and communication preferences from your resume by logging onto CareerBuilder.com:
http://www.careerbuilder.com/jobseeker/emails/emailsubcenter.aspx

Or you can Block this employer from viewing your resume and sending you candidate emails.

This email was sent from Account ID e3de258c32296cf2b8f358bacc7467b0 and by this logged in User e3de258c32296cf2b8f358bacc7467b0
DISCLAIMER
Please be aware that the content of this email has not been reviewed or approved by CareerBuilder and is in no way endorsed by CareerBuilder. You are solely responsible for any response you choose to provide to this email and you do so at your own risk. If you have questions regarding the legitimacy of the position being offered please contact the CareerBuilder Site Integrity Team by submitting your inquiry at: http://w ww.careerbuilder.com/JobSeeker/Help/Feedback.aspPlease also review common scams and tips for protecting yourself on CareerBuilder's Fraud Page. If you have questions or comments for and CareerBuilder, please use our feedback form. 



vi) A response to the above spam led to the following information:
Dear xxxxxx,

Thank you for your interest in the recently opened position of an account manager with our company. IT Complex Ltd. is a young, but already recognized web outsourcing provider in the European IT market. Our head office is located in the suburbs of London (United Kingdom) and we are preparing to open an office in the USA by the end of the year. Despite the fact that we have only recently entered the US market, we have already found our customers here, and now we are searching account managers to provide a vital communication link between our developer teams in Europe and US customers.

As an account manager, you will be working from home, as an independent contractor on the 1099. The working hours are 9 AM to 4 PM, Monday through Friday. We expect our account managers to perform the following activities:

- Providing our customers with the highest level of customer support service possible;
- Responding to customers’ requests and needs in a timely manner;
- Developing strong business relationships by demonstrating professional customer communication;
- Overseeing and verifying customers’ billing procedures;
- Distributing payroll among outsourcing developer teams;
- Keeping records on the project developments process, monitoring the progress on it;
- Assisting in completing project tasks by gathering the most detailed information from customers.

Your typical daily routines will include:

- logging into a remote helpdesk (where you will be able to schedule your daily activities, contact other team members, download and share project documentation and other materials);
- participating in conference calls with project managers and developers,
- checking your mailbox for messages from customers.

We offer a fixed monthly salary of $3,500, which is paid in parts, every two weeks. The company also provides a flexible bonus system, which allows you to receive additional bonuses for each new project that you take for support. The bonus amount depends on the total price for the taken project; bonuses are paid instantly. The number of projects that you can take each month depends only on your multitasking and time-management skills.

You can find additional information about IT Complex Limited at our corporate website. In order to apply for this position, please download and fill out the application form from the Careers Section of our website, and send it to our hiring managers along with a copy of your most recent resume by email or fax.

Please don’t hesitate to email our HR department for questions about this opportunity or reply directly to this message. We will review the submitted information and contact you in 1-2 business days to inform about the status of your application. Selected candidates will be invited for the phone interview.

---
Christina Gorak
IT Complex Ltd.
Phone: (347) 767-6771
christina.gorak@itcomplexltd.com
It's dressed up as:

- Overseeing and verifying customers’ billing procedures;
- Distributing payroll among outsourcing developer teams;


- but it's the usual money mule function of accepting fake checks/transfers to your personal or business bank account and transferring a balance back to these criminals. Don't be tempted or you WILL lose a lot of money, have your bank account and your assets frozen and risk ending up with a criminal record.
vii) Followed by this usual fake, unenforceable contract.
The above evidence clearly demonstrates beyond any doubt that the IT Complex Ltd. website has been set up by money laundering criminal fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.
IT Complex Ltd. Fraudsters - hosting details

Main Domains, Registrars and Hosts  
Domain

itcomplexltd.com
Registrar

WEB COMMERCE COMMUNICATIONS LIMITED DBA WEBNIC.CC - 26-sep-2009
Host Network

NL-ECATEL

Host IP

93.174.92.219

Key:
Active
Suspended or Inactive
Parked

Please notify me of any other current domains used by this criminal.

Domain Whois Data
Registrar:     WEB COMMERCE COMMUNICATIONS LIMITED DBA WEBNIC.CC
Status:        clientDeleteProhibited
Dates:         Created 26-sep-2009   Updated 27-sep-2009  Expires 26-sep-2010
DNS Servers:   NS1.ITCOMPLEXLTD.COM  NS2.ITCOMPLEXLTD.COM 

Domain: itcomplexltd.com
Status: Protected

DNS:
    ns1.itcomplexltd.com
    ns2.itcomplexltd.com

Created: 2009-09-27 00:25:01
Expires: 2010-09-27 00:25:01
Last Modified: 2009-09-27 00:12:16

Registrant Contact:
    I.T. COMPLEX LIMITED
    Dylan Steele (info@itcomplexltd.com)
    3 Harborough house Taywood Road
    North Holt, , uk UB5 6GW
    P: +44.2032392793     F: +44.2030311084

Administrative Contact:
    I.T. COMPLEX LIMITED
    Dylan Steele (info@itcomplexltd.com)
    3 Harborough house Taywood Road
    North Holt, , uk UB5 6GW
    P: +44.2032392793     F: +44.2030311084

Technical Contact:
    I.T. COMPLEX LIMITED
    Dylan Steele (info@itcomplexltd.com)
    3 Harborough house Taywood Road
    North Holt, , uk UB5 6GW
    P: +44.2032392793     F: +44.2030311084

Billing Contact:
    I.T. COMPLEX LIMITED
    Dylan Steele (info@itcomplexltd.com)
    3 Harborough house Taywood Road
    North Holt, , uk UB5 6GW
    P: +44.2032392793     F: +44.2030311084

DNS Lookup: itcomplexltd.com A record
Searching for itcomplexltd.com A record at i.root-servers.net [192.36.148.17]: Got referral to G.GTLD-SERVERS.NET. (zone: com.)
Searching for itcomplexltd.com A record at G.GTLD-SERVERS.NET. [192.42.93.30]: Got referral to ns1.itcomplexltd.com. (zone: itcomplexltd.com.)
Searching for itcomplexltd.com A record at ns1.itcomplexltd.com. [89.248.162.160]: Reports itcomplexltd.com.
Response:
Domain Type Class TTL Answer
itcomplexltd.com. A IN 14400 93.174.92.219
itcomplexltd.com. NS IN 14400 ns1.itcomplexltd.com.
itcomplexltd.com. NS IN 14400 ns2.itcomplexltd.com.
ns1.itcomplexltd.com. A IN 14400 89.248.162.160
ns2.itcomplexltd.com. A IN 14400 93.174.92.219

Looking up at the 2 itcomplexltd.com. parent servers:

Server Response
ns2.itcomplexltd.com [93.174.92.219] 93.174.92.219
ns1.itcomplexltd.com [89.248.162.160] 93.174.92.219

This criminal's website is hosted by NL-ECATEL (AS29073, Ecatel LTD) on IP address 93.174.92.219.
***Latest News*** Initial entry 28th. Oct 2009