Liram Delivery Service

Liram Delivery Service Fraud

Don't Bear Internet Fraud

Liram Delivery Service scam screenshot - 16-Apr-2009

This fraudster should not be confused with any other company that may have a similar name. The website graphics and the evidence below identify this criminal.

Liram Delivery Service is a Russian re-shipping fraud job spamvertising website. It's only purpose is to lend an air of legitimacy to a spamvertised reshipping fraud job of accepting parcels, (stolen goods), to your private address, re-labelling them and sending them off to these criminals in the Ukraine or Russia. In this instance they refer to the job as "Correspondence manager" and it appears under the 'Careers' tab. The criminals two domains were registered relatively recently for the usual criminals domain one year minimum period. They have absolutely zero Google web presence, (apart from their own fraud sites, of course), they appear to have no history and their location details are clearly fake. They have a current identical alter-alias of Glorex Delivery Service, aka Glorex Business Solutions and a previous alias of Transcargo International Logistics. To get around the usual 'Runglish' problem, all of their their website content is stolen, for instance their home page content is stolen from this 'Pack and Send website 'About Us' page.

Evidence of Criminal Fraud:

i) The criminals two domains, (garant-post.com and liramdelivery.com), were registered on 01-oct-2008 and 31-jan-2009 both for the customary criminals domain minimum period of one year.

ii) A Google search for "Liram Delivery" shows that they have no web presence whatsoever apart from their own fraud websites. Clear evidence of fraud

iii) Stolen website content. Their above home-page content has all been stolen from this 'Pack and Send website 'About Us' page and their 'Solutions' page, (complete with an image from their previous Transcargo International Logistics scam), has been stolen from this Pack and Send website page..

iv) The criminal job from the website:

Position: Correspondence manager
Department: Correspondence department
Salary: $ 30.00 for every SENT parcel

Short and sweet, but remember that every parcel you accept to your home address and forward on to these criminals will contain goods purchased by credit card fraud. It amounts to handling stolen goods and such criminal activity will get you a visit from the police and possibly a criminal record - don't be tempted. Such a job is clear evidence of fraud - no legitimate company is going to entrust such a job to any John/Jane Doe recruited at random from the general public.

v) The Job Email:

From: admin@liramdelivery.com
Date: Wed, 15 Apr 2009 1:55:37 +0400
Subject: Re: Correspondence Manager - resume attached

Dear xxxxxxxx,

We have received your resume and we are happy to inform you are
acceptable for a Correspondence Manager job. You can find additional
information about your salary, work schedule and duties in the
attached file.

To register:

1. Read the job specifications and descriptions. If you have any
questions – ask me or write a reply with your confirmation.
2. I will send you the employee’s Registration form and Labor
Agreement. You should fill it in correctly, sign it and send it back.
3. Send a scanned image of your Driver’s License or your Passport for
your identification.

The procedure is simple and will not take more than 2 days.

Note:
You can easily find additional information on our website or feel free
to ask any questions about your duties and salary.

Right now we are at the very start of the process.
Read the job specifications and descriptions. If you have any
questions – ask me or write a reply with your confirmation

I am here to help you and I will do my best to help you get along with this.

Best regards,
Daniel Morgan

Liram Delivery LLC,
http://www.liramdelivery.com
+442032875082

vi) The referred to Job Description:

JOB DESCRIPTION

Position: Correspondence manager
Department: Correspondence department
Salary: $ 30.00 for every SENT parcel

GENERAL

Additional opportunity to earn money. This is part-time job position (you must spend 1 hour at day).

PRINCIPAL DUTY

1.    checking goods* for performance capacity, defects and mechanical damages,
2.    packing the given goods, filling in the acceptance form, indicating all defects and damages found,
3.    sending goods to Sales Manager.

* All the parcels pass the control in the International Package Center, we care about your security.

ADDITIONAL DUTIES

1.    Assistance in company’s financial business

REQUIRED SKILLS

1.    Team work
2.    Basic knowledge of MS Office.
3.    Accuracy

WORKING CONDITIONS

from 30 to 70 packages at month

WORK PLAN

1.    Receive the correspondence to your residential address
2.    Report to our manager about new packages
3.    Repack received items following the instructions our manager will send to you.
4.    Receive prepaid shipping labels.
5.    Fill the forms and papers according to our manager’s instructions (You will receive the e-mail with instructions for each package).
6.    Send the package out using the specified shipping method

vii) Fake location details from the website:

Contact us

Your calls are received by the phone: +44 20 3287 5082
E-mail: support@liramdelivery.com

You also can send us a letter by letter-post:

83 Rivington Street, London, EC2A 3AY, United Kingdom

• - A Google search shows that the address 83 Rivington Street, London, EC2A 3AY, United Kingdom belongs to a club called 'Cargo', confirmed by a Google street view. It's a rather dim view as it's under a railway arch as they say on their website - clear evidence of fraud.

The above evidence clearly demonstrates that the Liram Delivery Service website is a fraudulent website set up with intent to deceive. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is usually false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Liram Delivery Service Fraud Domains

Website Domains

liramdelivery.com
garant-post.com

Registrar

1 & 1 INTERNET AG (31-jan-2009)
Directi/PublicDomainRegistry.com (01-oct-2008)

Nameserver Domains

oildns.net

Registrar

INTERNET.BS CORP. (17-Feb-2009)

Key:
Active
Suspended/Disabled
Parked

DNS Data: (liramdelivery.com)
How I am searching:

Searching for liramdelivery.com A record at l.root-servers.net [199.7.83.42]: Got referral to f.gtld-servers.net. (zone: com.)
Searching for liramdelivery.com A record at f.gtld-servers.net. [192.35.51.30]: Got referral to ns2.oildns.net. (zone: liramdelivery.com.)
Searching for liramdelivery.com A record at ns2.oildns.net. [92.241.162.58]: Reports liramdelivery.com. Response:

Domain	Type	Class	TTL	Answer
liramdelivery.com.	A	IN	14400	88.212.221.46
liramdelivery.com.	NS	IN	14400	ns2.oildns.net.
liramdelivery.com.	NS	IN	14400	ns1.oildns.net.
ns1.oildns.net.	A	IN	14400	92.241.161.58
ns2.oildns.net.	A	IN	14400	92.241.162.58

Looking up at the 2 liramdelivery.com. parent servers:

Server	Response
ns2.oildns.net [92.241.162.58]	88.212.221.46
ns1.oildns.net [92.241.161.58]	88.212.221.46

The host of this criminal fraudster's website is SEMWEB-NET-II (Russian) on IP address 88.212.221.46

DNS Data: (garant-post.com)
How I am searching:

Searching for garant-post.com A record at k.root-servers.net [193.0.14.129]: Got referral to h.gtld-servers.net. (zone: com.)
Searching for garant-post.com A record at h.gtld-servers.net. [192.54.112.30]: Got referral to ns.openhosting.ru. (zone: garant-post.com.)
Searching for garant-post.com A record at ns.openhosting.ru. [81.176.236.10]: Reports garant-post.com. Response:

Domain	Type	Class	TTL	Answer
garant-post.com.	A	IN	10800	81.176.236.12
garant-post.com.	NS	IN	10800	ns2.openhosting.ru.
garant-post.com.	NS	IN	10800	ns.openhosting.ru.
ns.openhosting.ru.	A	IN	10800	81.176.236.10
ns2.openhosting.ru.	A	IN	10800	81.176.237.10

Looking up at the 2 garant-post.com. parent servers:

Server	Response
ns2.openhosting.ru [81.176.237.10]	81.176.236.12
ns.openhosting.ru [81.176.236.10]	81.176.236.12

The host of this criminal fraudster's website is OPENHOSTING-RT (Russian) on IP address 81.176.236.12

***Latest News*** Webpage created 16th. April 2009

***Latest News*** 17th. April 2009
News from Simon Bear - the domain garant-post.com has been suspended.