LC Escrow & Consulting
home
page screenshot (25-May-2009):
This fraudster should not
be confused
with any other company that may have the same or a similar name. The
website
graphics and the evidence below identify this criminal and this
criminal alone.
LC
Escrow & Consulting is
part of a huge Russian money laundering criminal network
that has dozens of aliases, among them being Promo
Invest, Transfer Invest Inc., E-Investment Projects, E-Investments Provider Inc., K-Investment Group, EU
Investment Solutions, EURO
Investment Solutions, AFC
Financial Services, AIF
Investment Consulting, etc etc etc.
It's the usual glossy website set up deliberately to lure the unwary
into the world of money laundering fraud. It uses the same Shockwave
Flash template as Trans
Atlanta Services and the same characters can
also be seen in the Xerpat template.
The sole purpose of the site is to act as a convincing front
to a
money laundering mule recruitment operation under the guise of 'Escrow Agents'
working part time from home channelling money through personal bank
accounts for a percentage cut. The criminal's domain lcescrow.com
was only very recently registered for the usual criminal's domain
minimum period of one year, they have no internet presence, their
location/contact details are bogus and they are not a registered
company. They are also hosted on the known criminal host 'Cayman
British Islands Offshore
Network' on an IP block leased from Rapidswitch.com
which is full of other fraudsters, malware distributors,
hacking sites and attack sites.
Evidence
of
Spamming and Criminal Fraud:
i) On the 'About Us' page of their website
the criminals
claim: "LC Escrow
& Consulting is one of the world leading independent providers
of e-commerce and online payment solutions". However their
domain lcescrow.com
was only registered with REGTIME
LTD. on 24-apr-2009
for the usual criminal's minimum domain period of one year. Clear evidence of
misrepresentation and fraud.
ii)
A google search for "LC
Escrow & Consulting" shows that they
have absolutely no web presence, (disregarding their own fake website of course), apart from fraud site listing(s) and an
indication of the possible method they used to assemble their fake
site. The above grandiose statement is clearly bogus.
iii)
They have the usual Vacancies tab that these crooks
usually have, under which is this job advert:
Partnership and recruiting
opportunity
Escrow Agent - Can apply
online!
As
an escrow agency we provide the parties with a receipt for the escrow
property, a copy of the escrow agreement and keep complete and accurate
records in our web-based information center. An escrow agent is a
fiduciary, with duties to all parties who have an interest in the
escrow property. The most important duty is to safeguard the escrow
property.
An
escrow is a legal arrangement to help parties perform their contracts
and avoid disagreements. The escrow agreement has three parties: a
"depositor", an "escrow agent" and a "beneficiary". In the typical
escrow, the depositor is required to entrust property with an escrow
agent. The escrow agent holds the escrow property until it can be
released to the beneficiary upon the happening of some future event, or
the performance of some condition.
General Requirements
* Applicants must be in age of 21-60
* Ability to create good administrative reporting
* Honesty, responsibility, and promptness in operations
* Effectively interaction with customers
* Knowledge of Microsoft Excel and Microsoft Word
* Familiar to working online, Internet and e-mail skills
* Prior customer service experience is a good benefit, but not a must
* USA Citizen
If
you want to build up an escrow agent career in one of the worlds most
reliable and famous escrow agency, please fill out the registration
form. After the registration you will be able to log in our web-based
information center, where you can get familiar with your duties and
additional information. If
you register on their website you access a 'private' area where various
tasks are set out for you, starting with downloading the usual bogus
'Employment Agreement', filling it in, scanning it and sending it back
to these crooks with a whole host of identity data which is likely to
be used for all sorts of purposes such as picking up Western Union
payments. You also see the following further explanation of the 'job': An escrow is a legal
arrangement to help parties perform their contracts and avoid
disagreements. The escrow agreement has three parties: a "depositor",
an "escrow agent" and a "beneficiary". In the typical escrow, a
depositor is required to entrust money or property with an Escrow Agent.
For this purpose, you as the Escrow Agent must have a business or
personal bank account to hold escrow deposits and release them to
beneficiaries. You can use an existing, or open a new bank account at
any financial institution in your region. On each Escrow Deposit you
will be receiving detailed instructions on how to handle and proceed
with an Escrow Deposit. As the Escrow Agent, besides your standard
hourly rate you will gain 1-3% for each processed Escrow Deposit
depending on its amount. Using the business account is better than
using the personal one, because with business account you will be able
to deal with larger amounts and having better precentage.
The bank account should not be used for any other company/employer
during your employment with LC Escrow & Consulting!
iv)That is the usual
crystal clear money mule function that will get
your bank account
closed, your assets frozen, earn you a visit from the police and
possibly a criminal record. Do not be tempted.
v)
No legitimate company would advertise for private citizens to operate
as unlicensed and
illegal money transfer agents. To do so clearly
defines the company LC
Escrow & Consulting
as both criminal and
fraudulent.
There is also a 'phishing' for
identity theft aspect due to the nature of identity proof requested,
e.g. 'Passport,
National ID Card or a
Driver's license.' Clear
evidence of criminal fraud.
vi) Another alias,
another set of fake contact Details
from the website:
9863 - 9867 Mill Road,
Cambridge, MG09 99HT
Tel: +44 844 48 48 778
Fax: +44 844 48 48 778
• - The address does not exist - it is a fake 'filler'
address that is put in the 'Template Monster' series of flash website
templates as a Google search for "9863 - 9867 Mill Road, Cambridge,
MG09 99HT"
quickly reveals.
• - Dialling the number "+44 844 48 48 778"
got through to what sounds like a VOIP number in Belgium who
didn't recognise the name LC Escrow & Consulting. This Google search for the number "0844 48 48 778",
(As would be dialled from the UK), also indicates that it belongs to
someone else.
vii)"LC Escrow &
Consulting" are not registered in the
UK 'Companies
House').
Clear, verifiable
evidence of a
fake company - check for yourself. The above evidence is clear
proof that the LC
Escrow & Consulting
website is a fraudulent website set up with intent to deceive. If you
are an abuse team that has received an abuse report regarding these
fraudsters, please consider immediate termination of their services in
view of the absolutely undeniable evidence of criminal fraud - please
don't delay - these criminals will not respond to any communication
from you, (all their whois data is invariably false), but will simply
take advantage of any attempt at communication as a delaying tactic to
allow them time to carry on their criminal activity and prepare their
next network.
Known
Website Domains
lcescrow.com
Registrar
REGTIME LTD. (24-apr-2009)
Key: Active Suspended/Disabled Parked DNS Data: (Valid for lcescrow.com)
How I am
searching:
Searching for lcescrow.com A record at c.root-servers.net
[192.33.4.12]: Got referral to E.GTLD-SERVERS.NET. (zone: com.) [took
32 ms]
Searching for lcescrow.com A record at E.GTLD-SERVERS.NET.
[192.12.94.30]: Got referral to ns1.nameself.com. (zone: lcescrow.com.)
[took 157 ms]
Searching for lcescrow.com A
record at ns1.nameself.com. [89.108.89.8]: Reports lcescrow.com. [took
179 ms]
Response:
Domain
Type
Class
TTL
Answer
lcescrow.com.
A
IN
28800
78.129.166.5
lcescrow.com.
NS
IN
28800
ns1.nameself.com.
lcescrow.com.
NS
IN
28800
ns2.nameself.com.
ns1.nameself.com.
A
IN
3600
195.161.113.218
ns1.nameself.com.
A
IN
3600
89.108.89.8
ns2.nameself.com.
A
IN
3600
89.108.94.183
ns2.nameself.com.
A
IN
3600
217.16.27.38
Looking up at the 2 lcescrow.com. parent servers:
Server
Response
ns2.nameself.com [89.108.94.183]
78.129.166.5
ns1.nameself.com [89.108.89.8]
78.129.166.5
The host for this
criminal fraudster is listed as Cayman
British Islands Offshore
Network on
IP address 78.129.166.5.
This host and
IP address have also been used for other frauds, including
AREM
Networks, Western
Trust, LLP, Great
Expedition, AST Finance & Consult, Komerset
Logistics,
Browncorp
Financial Services and American
Finance and
has been implicated in
hosting Zeus attack sites. Reverse IP checks show a whole host of
attack, malware and fraud sites, not only on this IP but the whole
block - a cess-pit of criminal activity.
This host appears to have no internet presence and the Google hits it returns are mainly
related to criminal activity. IP contact data:
Information related to '78.129.166.5'
inetnum:
78.129.166.0 - 78.129.166.255
netname:
KY-PRVT-NWRK-019231
descr:
Cayman British Islands
Offshore Network
country:
KY
admin-c:
JW1886-RIPE
tech-c:
JW1886-RIPE
status:
ASSIGNED PA
mnt-by:
RAPIDSWITCH-MNT
changed:
abuse[at]rapidswitch.com 20090122
source:
RIPE
person:
Jan Willson
address:
George Town, Cayman Islands,
phone:
+3459497923
nic-hdl:
JW1886-RIPE
changed:
support[at]kynetworks.biz
20081115
source:
RIPE
The
domain kynetworks.biz
was only registered with Network Solutions, (XiaMen BizCn Computer &
NetWork Co.,Ltd as reseller), on 16-Nov-2008 and is
currently resolving as a suspended account on a Russian host, OTCEK.com. Their telephone number, (+1 345-949-7923), Googles as the number of a group of churches on the Cayman Islands.***Latest
News*** Webpage set
up 25th. May 2009 ***Latest
News *** 2nd. June 2009 Report
from Frank Bear - the LC Escrow & Consulting fraudsters are now on a new
network: DNS Data:(lcescrow.com) How I am searching:
Searching for lcescrow.com A record at l.root-servers.net
[199.7.83.42]: Got referral to f.gtld-servers.net. (zone: com.) Searching for lcescrow.com A record at f.gtld-servers.net.
[192.35.51.30]: Got referral to ns2.nameself.com. (zone: lcescrow.com.) Searching for lcescrow.com A record at ns2.nameself.com. [217.16.27.38]: Reports lcescrow.com. Response:
Domain
Type
Class
TTL
Answer
lcescrow.com.
A
IN
28800
67.212.80.121
lcescrow.com.
NS
IN
28800
ns1.nameself.com.
lcescrow.com.
NS
IN
28800
ns2.nameself.com.
ns1.nameself.com.
A
IN
3600
89.108.89.8
ns1.nameself.com.
A
IN
3600
195.161.113.218
ns2.nameself.com.
A
IN
3600
89.108.94.183
ns2.nameself.com.
A
IN
3600
217.16.27.38
Looking up at the 2 lcescrow.com. parent servers:
Server
Response
ns2.nameself.com [217.16.27.38]
67.212.80.121
ns1.nameself.com [89.108.89.8]
67.212.80.121
The host
of this criminal fraudster is Netelligent
Hosting Services Inc. of Laval Quebec on IP address 67.212.80.121. Looks
like Netelligent have inherited most of the crooks from Cayman British Islands Offshore
Network
