Mynes Consulting & Finance Fraud
Report
Active
Domain
Don't Bear Internet Fraud
Home
Bobbear Icon

Mynes Consulting & Finance

Mynes Consulting & Finance

Mynes Consulting & Finance is an obvious, run-of-the mill Russian based money laundering fraud. It was around earlier in the year as an email based one, but it seems to have resurfaced with a website. Like so many of these scams it has the usual annoying background muzak, spelling mistakes and fractured "finance-ese".

Known Website Domains

mcf-ltd.info (Suspended)
mfc-ltd.net (Suspended)
mynescf.com
(Suspended)
mynes.us (Suspended)
mynescf.net (Suspended)
mynescf.biz
(Active)
mynescf.info (Unhosted)

Registrar:

ESTDOMAINS, INC.
ESTDOMAINS, INC.
PUBLICDOMAINREGISTRY.COM
PUBLICDOMAINREGISTRY.COM
ONLINENIC, INC. (sweb.ru)
TUCOWS INC. (masterhost.ru)
ESTDOMAINS, INC.

DNS Data:


Looking up at the 3 mynescf.biz parent servers:

Server Response Host
ns2.masterhost.ru [217.16.22.30]  217.16.16.104 217.16.16.124 MASTERHOST
ns1.masterhost.ru [217.16.16.30]  217.16.16.104 217.16.16.124
ns.masterhost.ru [217.16.20.30]  217.16.16.104 217.16.16.124

Looking up at the 2
mynes.us parent servers:

Server Response Host
ns2.openhosting.ru [81.176.237.10]  81.176.236.12 OPENHOSTING-RT
ns.openhosting.ru [81.176.236.10]  81.176.236.12

Looking up at the 2
mynescf.net parent servers:

Server Response Host
ns2.spaceweb.ru [77.222.41.3] 77.222.40.40 SpaceWeb
ns1.spaceweb.ru [77.222.40.2] 77.222.40.40

Looking up at the 4 mynescf.info parent servers:

Server Response Host
managedns4.estboxes.com [69.50.183.30]  69.50.182.21 InterCage, Inc.
managedns2.estboxes.com [69.50.183.26]  69.50.182.21
managedns3.estboxes.com [69.50.182.22]  69.50.182.21
managedns1.estboxes.com [69.50.182.20]  69.50.182.21

Evidence of Criminal Fraud:

i) Contact Details (From the website):
Address:
Mynes Consulting & Finance
is located at 510 E 64nd Street,
New York, New York 10021 ,
United States

Phone numbers:
786-375-5994
786-375-5994 (FAX)

The first thing you notice is that the voice and fax telephone numbers are the same which is usual for these crooks - in fact they sometimes have a fax machine on the line or an answering machine, but you'll never get a human to answer. The second thing the observant may notice is the first line of the address "510 E 64nd Street". What's odd about that? - 64nd, that's what. I suspect they've taken the address "510 E 62nd Street", (which IS zip code 10021), changed it to 64 and forgot to change 'nd' to 'th'. Needless to say, Google doesn't find "510 E 64nd Street" or even "510 E 64th Street" except from this crook's website. It's an obvious fake address.

ii) The Mynes Consulting & Finance website claims that they were founded "at the beginning of 1990", yet the first two scam website domains were only registered on October the 23rd. 2007, and the third on 6th. July 2007.

iii) They have virtually no internet presence other than wide recognition as spammers and scammers.

iv) They can't even spell their name correctly "Mynes Consulting & Finace" appears all over their scam website.

v) Dreadful and nonsensical 'Runglish', i.e. "The demand for highly-professional consulting services evokes at a certain advanced business development level"

vi) Multiple domains for the same fraud website registered with different registrars.

vii) The 'job' consists of  accepting money into your account and transferring it out to the crooks via Moneygram or Western Union - the usual illegal money mule function.

viii) Spamvertised via zombie botnet as clearly demonstrated below from spam received in my spamtraps:

ix) Numerous spams received all with different forged From & Return Path address details


The Job (From the website)

Financial Manager

Responsibilities: prompt processing of incoming money transfers in real-time mode.

Demands: What we offer: If you are interested in this vacancy, please send your CV at mynescf.finanсе@gmail.com or fill out the special application form in our site.

x) Note the "prompt processing of incoming money transfers in real-time mode." - the clear illegal money mule function. No legitimate company would spamvertise a job soliciting for private citizens to do money transfers.

xi) No reputable company would use a gmail response address like this.
Spam Headers:

Return-Path: <kris@nilsabbas.com>
Received: from mwinf3010.me.freeserve.com (mwinf3010.me.freeserve.com)
    by mwinb3406 (SMTP Server) with LMTP; Fri, 02 Nov 2007 20:43:06 +0100
X-Sieve: Server Sieve 2.2
Envelope-to: xxxxxxxxx.freeserve.co.uk
Received: from smtp1.freeserve.com (mwinf3009 [172.22.159.39])
    by mwinf3010.me.freeserve.com (SMTP Server) with ESMTP id xxxxxxxxx
    for <xxxxxxxxx@back34-mail02-03.me-wanadoo.net>; Fri,  2 Nov 2007 20:43:06 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
    by mwinf3009.me.freeserve.com (SMTP Server) with ESMTP id AC2781C00B6E
    for <xxxxxxxxx.freeserve.co.uk>; Fri,  2 Nov 2007 20:43:06 +0100 (CET)
Received: from dsl-189-136-54-251.prod-infinitum.com.mx (unknown [189.136.54.251])
    by mwinf3009.me.freeserve.com (SMTP Server) with SMTP id C38981C00B5C
    for <xxxxxxxxx.freeserve.co.uk>; Fri,  2 Nov 2007 20:43:05 +0100 (CET)
X-ME-UUID: xxxxxxxxx@mwinf3009.me.freeserve.com
Message-ID: <xxxxxxxxx@nilsabbas.com>
Date: Fri, 2 Nov 2007 02:45:29 +0100
From: Mynes C&F <Kris@nilsabbas.com>
User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050716)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: "xxxxxxxxx" <xxxxxxxxx.freeserve.co.uk>
Subject: job offer
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
X-me-spamlevel: med
X-me-spamrating: 87.944179
X-Antivirus: AVG for E-mail 7.5.503 [269.15.18/1104]

Notes:  The RDNS data of the source IP (dsl-189-136-54-251.prod-infinitum.com.mx) betrays the zombie botnet source of the spam by the dsl tag.

Spam Body:

Our company, "MYNES CONSULTING & FINANCE", has been actively working and developing at the financial market for over ten years.

Company's activity is, first of all, to render financial and investment market expert participant services as for private investors,
so for issuers, practically, from any country of the world.

We are working at the market whose potential and possibilities are constantly growing and opening new horizons of success.
The company offers the most advanced standards of servicing, at the same time, sharing the value of human communication with its clients.

The team of highly experienced specialists and high quality service represent our corporate identity.

Our primary tasks:
to increase the interest of private persons in the stock market work and to give them the real
possibilities to multiply their capital by means of market tools.
to provide conditions for promising enterprises and organizations with different
ownership forms and various branches development by attracting investments as well as by rendering
services in the area of corporate and financial consulting.

Presently our company is employing personnel for the position of

Transfer Manager

The functions of this specialist include processing of transactions incoming to his or her account from the company clients.
After the necessary procedures of preparing documents, he or she has to transfer the sum to the accounts indicated by our operations manager.
All you need to have is some free time (up to 3 hours a day), the desire and ability to work in team, responsibility.
The wages at the first stage will be 5% from the total turnover a month.

Requirements:
Higher education
Age of 25 or more
PC using skills (Office software), mail programs, Internet

We offer:
Continuous training;
Possibilities of stable carrier and personality growth and development;
Probation and work in the dynamic friendly atmosphere, well disposed labor group;
Competitive wages;
Bonus system according to the results of the work.

If you are interested in the vacancy, you can send your Resume to the address job@mynescf.biz

Thank you for your interest!
MYNES CONSULTING & FINANCE 
 
 
 
   2007 (C) Mynes C&F.
All right reserved.