Komerset Logistics

Komerset Logistics Fraud

Don't Bear Internet Fraud

Komerset Logistics scam screenshot - 10-May-2009

Komerset Logistics screenshot - 10-May-2009

This fraudster should not be confused with any other company that may have a similar name. The website graphics and the evidence below identify this criminal, however please be aware that the above website graphics and text have been stolen from the genuine company Somerset Logistics who are as much of a victim of this criminal as anybody else.

Komerset Logistics is a criminal fraud website that has been set up by fraudsters using a website stolen in its entirety from the genuine Somerset Logistics company with the addition of a fake job. It is a simple follow-on fraud to their recent Comerset Logistics scam which prompted the following clear warning on the Somerset Logistics website. That much is self-evident and in itself defines Komerset Logistics as a criminal fraud operation. Their fake location and contact details are the same as their previous fraud and their domain komersetlogistics.com was only registered on 30-Mar-2009 with the Moldovan registrar 1'ST DOMAIN NAME SERVICE (http://www.1dns.ru/ but who also appear on http://www.gougle.ru/) for the usual criminal's domain minimum period of one year. The scammers website is hosted on the 'Cayman British Islands Offshore Network' IP 78.129.166.5 as used by other fraudsters. Why would a supposed US company use a Moldovan registrar, hide his whois data using 'Privacy Protect' and use a Cayman Islands host? The fact that the company is fake is confirmed without doubt by the fact that 'Komerset Logistics' is not registered in their supposed state of Washington. All clear evidence of fraud. The real purpose of the website is under the 'Careers' tab - it is the usual part-time, work-from-home job scam, this time entitled "Part Time Transportation Assistant".

The Somerset Logistics website warning of this criminal's activities:
Somerset Logistics warning

Evidence of Criminal Fraud:

i) The primary evidence of fraud is the self evident theft of the Komerset Logistics website from the genuine company Somerset Logistics and their clear warning above of this criminal's continuing fraud activity on their genuine website.

ii) As all the website content has been stolen from a genuine company, any claims in it are irrelevant to this fraudster, however, the criminal's domain komersetlogistics.com was only registered with the Moldovan registrar 1'ST DOMAIN NAME SERVICE on 30-Mar-2009 which obviously makes a complete nonsense of the above statement "Komerset is rated by the industry in the top 5%" and their above website footer date of 2005. The domain whois data is hidden using 'Privacy Protect'. Clear evidence of misrepresentation and fraud.

iii) This criminal has no web presence whatsoever, the only Google hits for this criminal are for his own fake website and a fake jigsaw.com business directory entry - a clear indication of fraud.

iv) Website Contact Details:
Contact Komerset Logistics
Mailing Address

Komerset Logistics
5620 Halls Lake Way
Lynnwood, WA 98036

Phone Number

Local Phone: (425) 648-3107
Local Fax: (425) 648-3107

• - These are the same fake location and contact details as for their previous alias - Comerset Logistics
• - A Google search on the address "5620 Halls Lake Way Lynnwood" returns zero hits.
• - A Google Maps search on the address "5620 Halls Lake Way Lynnwood" returns zero hits for businesses at that address.
• - Note the single phone and Fax. number - not the sign of a genuine company. The number also locates to Seattle and not Lynwood.
All evidence of fake contact and location details.

v) A websearch of the Washington State Company Register shows that "Komerset Logistics" is not a registered company in the state of Washington - clear & irrefutable evidence of a fake company. Check for yourself.

vi) The website job solicitation:

Part Time Transportation Assistant

We offering a flexible work schedule, payment right after the successfully performed delivery, bonuses plus stable salary after probationary period. Your wage, as a Transportation Assistant, can reach up to 1,500-2,000 USD per month while spending only 15-25 hours a week. We need well-organized people, older than 18 years old who have PC (or notebook) and Internet access at home. Blackberry device is needed, but optional. Permanent US address with phone landline is required. Knowledge of MS Office is obligatory.

The above job doesn't appear on the genuine website job page. It is a 'cloaked' job as they often are now as the criminals seek to minimise the evidence of their criminality, but make no mistake, as this sentence implies, "payment right after the successfully performed delivery", the job will consist of accepting parcels to your home address and reshipping them on to these criminals in Eastern Europe. This is the well known reshipping fraud function of handling stolen goods bought by funds from 'phished' accounts. It will leave you open to arrest and possible criminal conviction. Don't be tempted. There may well be an additional 'money mule' function of accepting fake checks to your personal account and transferring a balance back to these criminals using Moneygram or Western Union. The two often go hand in hand.

vii) The criminal is hosted on IP address 78.129.166.5. This host and IP address has also been used for numerous other frauds, including AREM Networks, Western Trust, LLP, Great Expedition, AST Finance & Consult and has been implicated in hosting Zeus attack sites. Reverse IP checks show a whole host of attack and fraud sites - a veritable nest of criminal activity is hosted on this IP address.

The above evidence clearly demonstrates that the Komerset Logistics website is a stolen fraudulent website set up with intent to deceive. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is usually false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Known Website Domains

komersetlogistics.com

Registrar

1'ST DOMAIN NAME SERVICE (30-Mar-2009)

Host & IP

Netelligent Hosting Services Inc. (67.212.80.121)

Key:
Active
Suspended/Disabled
Parked

Criminal Registered Nameserver Domains

srvdns.co.uk

Registrar

Register.com Inc (22-Jan-2009)

DNS Data: (komersetlogistics.com)
How I am searching:

Searching for komersetlogistics.com A record at g.root-servers.net [192.112.36.4]: Got referral to H.GTLD-SERVERS.NET. (zone: com.)
Searching for komersetlogistics.com A record at H.GTLD-SERVERS.NET. [192.54.112.30]: Got referral to ns2.srvdns.co.uk. (zone: komersetlogistics.com.)
Searching for komersetlogistics.com A record at ns2.srvdns.co.uk. [78.129.166.6]: Reports komersetlogistics.com. Response:

Domain	Type	Class	TTL	Answer
komersetlogistics.com.	A	IN	14400	78.129.166.5
komersetlogistics.com.	NS	IN	14400	ns2.srvdns.co.uk.
komersetlogistics.com.	NS	IN	14400	ns1.srvdns.co.uk.
ns1.srvdns.co.uk.	A	IN	14400	78.129.166.5
ns2.srvdns.co.uk.	A	IN	14400	78.129.166.6

Looking up at the 2 komersetlogistics.com. parent servers:

Server	Response
ns2.srvdns.co.uk [78.129.166.6]	78.129.166.5
ns1.srvdns.co.uk [78.129.166.5]	78.129.166.5

The host for this criminal fraudster is listed as Cayman British Islands Offshore Network on IP address 78.129.166.5. This host and IP address has also been used for other frauds, including AREM Networks, Western Trust, LLP, Great Expedition, AST Finance & Consult and has been implicated in hosting Zeus attack sites. Reverse IP checks show a whole host of attack and fraud sites - a veritable nest of criminal activity.

Webpage created 10th. May 2009

***Latest News *** 2nd. June 2009
Report from Frank Bear - the Komerset Logistics fraudsters are now on a new network:
DNS Data: (komersetlogistics.com)
How I am searching:

Searching for komersetlogistics.com A record at m.root-servers.net [202.12.27.33]: Got referral to A.GTLD-SERVERS.NET. (zone: com.) [took 195 ms]
Searching for komersetlogistics.com A record at A.GTLD-SERVERS.NET. [192.5.6.30]: Got referral to ns2.net-media.ca. (zone: komersetlogistics.com.) [took 104 ms]
Searching for komersetlogistics.com A record at ns2.net-media.ca. [67.212.80.122]: Reports komersetlogistics.com. [took 125 ms] Response:

Domain	Type	Class	TTL	Answer
komersetlogistics.com.	A	IN	14400	67.212.80.121
komersetlogistics.com.	NS	IN	14400	ns1.net-media.ca.
komersetlogistics.com.	NS	IN	14400	ns2.net-media.ca.
ns1.net-media.ca.	A	IN	14400	67.212.80.121
ns2.net-media.ca.	A	IN	14400	67.212.80.122

Looking up at the 2 komersetlogistics.com. parent servers:

Server	Response
ns2.net-media.ca [67.212.80.122]	67.212.80.121
ns1.net-media.ca [67.212.80.121]	67.212.80.121

The host of this criminal fraudster is Netelligent Hosting Services Inc. of Laval Quebec on IP address 67.212.80.121. Looks like Netelligent have inherited all of the crooks from Cayman British Islands Offshore Network

***Latest News*** 7th. September 2009
News from Frank Bear - the domain komersetlogistics.com has been disabled - please notify me of any active domains for this criminal.