OnlineCompanySite Inc

Don't Bear Internet Fraud

This fraudster should not be confused with any other company that may have the same or a similar name. The website graphics and the evidence below clearly identify this criminal alone and no other company whatsoever.

OnlineCompanySite Inc scam screenshot (21-Dec-2009)

OnlineCompanySite Inc is just another clearly fraudulent money mule recruiting spammer, (sample below), and scammer using a fake website based on content and location details stolen from genuine CurrencySource website. They claim to have been in business since 1998, but their domain onlinecompany-site.com was only registered with MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE (Yahoo as reseller) on 19-Dec-2009 for the usual 'criminal's domain' minimum period of only one year, they have absolutely zero Google web presence at the moment and their contact details are stolen and fake.

The whole purpose of this fraud site is to lend an air of legitimacy to a 'Money Mule' job that consists of accepting stolen funds to your home address, and transferring a balance back to these crooks in Russia/the Ukraine via Western Union or Moneygram. It will get your bank account and your assets frozen, lose you a lot of money and earn you a criminal record - don't be tempted.

OnlineCompanySite Inc : Evidence of Criminal Fraud

i) The above OnlineCompanySite Inc fraud website content has been stolen from the genuine CurrencySource company and modified to include a registration page for a money laundering mule role which is being spamvertised in the usual way. Clear evidence of site theft and fraud.

ii) Despite the claim on their 'About Us' page to have been in business since 1998, the criminal's domain onlinecompany-site.com was only registered on 19-Dec-2009 for the usual 'criminals domain' minimum period of only one year with a registrar frequently used by these criminals, MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE (Yahoo as reseller).

iii) Despite their claim of being in business since 1998, a Google search for "OnlineCompanySite Inc" returns zero results at the moment - they have zero web presence which is not commensurate with such a claim.

iv) They are spamvertising the job of “Executive Manager” which has no website details at all - just a registration form for you to record your personal details - don't do it as it is simply a doorway to enrolling you in an illegal operation which at the very least will cost you a lot of money.

v) No legitimate company would advertise for private citizens to operate as part-time, work from home "Financial Managers". To do so clearly defines the fake OnlineCompanySite Inc company as both criminal and fraudulent. There is also a 'phishing' for identity theft aspect due to the nature of identity proof usually requested upon registration. Do not be fooled.

vi) Stolen & Fake contact details from their website:

Contact Information

Corporate Headquarters
OnlineCompanySite Inc
431 S. Lincoln Street
Fredericksburg, TX 78624

Toll Free: (845) 698-0108
Direct: 830.990.2971
E-mail: contract@onlinecompanysite.net

Sales
Please E-mail Sales at contract@onlinecompanysite.net
Call: (845) 698-0108

Technical Support
Please E-mail Technical Support at contract@onlinecompanysite.net
Call: (845) 698-0108

• - The above location details & Direct telephone number are simply the location details of the genuine CurrencySource company whose website they have stolen - clear evidence of fraud.
• - A Google search for the toll-free telephone number (845) 698-0108 shows that it is actually an internet dial-up access number - clear evidence of fraud.

vii) The Spam:

Hello,

We found your curriculum vitae on the Internet. Therefore we'd like to offer you a position of an 'Executive Manager'. Our HR department looked through your curriculum vitae and length of service and highly recommends you for this work in our organization. The given position consists of the following tasks:
- timely filing of reports on the carried out work
- record keeping of customers in the USA.
You will receive more detailed instructions during an interview over the phone.
Person specification :
- Age: starting from 25
- Citizenship: US
- Time: must have from 1 to 2 hours of free time a day for carrying out his tasks.
salary for this position makes up 7000USD a month. The payment will be carried out to your transaction account every month. There are many candidates willing to take up this offer, therefore we're kindly asking you not to delay with your decision about this position.
You may find detailed information about our organization at our website.
If this position is interesting to you, then please follow these steps:
1) Register at our website. To do so click on click here.
After doing so click on registration of 'Executive Manager'. Please fill out every field correctly, since data will be checked by our security department.
2) Pass an interview over the phone.
3) Sign a contract with our organization.
We would like to thank you beforehand and we're looking forward to a long-term cooperation.

The above is the usual vague and meaningless description of the offered role which is commonplace now as the crooks try to evade detection, but make no mistake, the clearly fake nature of the stolen website guarantees that it is the illegal 'Money Laundering Mule' function of accepting funds to your personal bank account and transferring a balance back to these criminals in Russia or the Ukraine. The transferred money eventually comes back as stolen and is recovered by the bank, leaving you out of pocket by the amount you have tranferred and facing some awkward questions about why you are involved in criminal fraud. Do not be tempted.

The above evidence clearly demonstrates beyond any doubt that the fake OnlineCompanySite Inc website has been stolen and has set up by criminal fraudsters purely for the purpose of spamvertising a fraud job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

OnlineCompanySite Inc Fraudsters - hosting details

Main Domains, Registrars and Hosts

Domain

onlinecompany-site.com
onlinecompanysite.org
online-companysite.com
onlinecompanysite.com

Registrar

MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE (Yahoo as reseller) - 19-Dec-2009
MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE (Yahoo as reseller) - 19-Dec-2009
MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE (Yahoo as reseller) - 19-Dec-2009
ALANTRON BLTD. - 22-nov-2009

Host Network

Yahoo
Yahoo
Yahoo
LU-ROOT-20071108 (root eSolutions)

Host IP

68.180.151.76
69.147.83.187 69.147.83.188 98.136.50.138
69.147.83.187 69.147.83.188 98.136.50.138
212.117.185.75

Active
Suspended, disabled or Inactive
Parked

Please notify me of any other current domains used by this criminal.

Domain Whois Data: (The whois details of these fraud domains are fake - any named person is NOT the genuine registrant)

Domain Name.......... onlinecompany-site.com
Registrar:     MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Status:        clientTransferProhibited
Dates:         Created 19-dec-2009   Updated 19-dec-2009 Expires 19-dec-2010
DNS Servers:   YNS1.YAHOO.COM YNS2.YAHOO.COM

Domain Name.......... onlinecompany-site.com
Creation Date........ 2009-12-19
Registration Date.... 2009-12-19
Expiry Date.......... 2010-12-19
Organisation Name.... Adele Boozer
Organisation Address. PO Box 61359
Organisation Address.
Organisation Address. Sunnyvale
Organisation Address. 94088
Organisation Address. CA
Organisation Address. US

Admin Name........... Admin PrivateRegContact
Admin Address........ PO Box 61359
Admin Address........
Admin Address........ Sunnyvale
Admin Address........ 94088
Admin Address........ CA
Admin Address........ US
Admin Email.......... contact@myprivateregistration.com
Admin Phone.......... +1.5105952002
Admin Fax............

Tech Name............ TECH PrivateRegContact
Tech Address......... PO Box 61359
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94088
Tech Address......... CA
Tech Address......... US
Tech Email........... contact@myprivateregistration.com
Tech Phone........... +1.5105952002
Tech Fax.............
Name Server.......... yns1.yahoo.com
Name Server.......... yns2.yahoo.com

Domain Name.......... onlinecompanysite.org
Domain ID:D157849184-LROR
Domain Name:ONLINECOMPANYSITE.ORG
Created On:19-Dec-2009 09:33:37 UTC
Last Updated On:19-Dec-2009 22:55:51 UTC
Expiration Date:19-Dec-2010 09:33:37 UTC
Sponsoring Registrar:Melbourne IT, Ltd (R52-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:D12612021922279
Registrant Name:Charles Helzerman
Registrant Organization:Private Registration US
Registrant Street1:PO Box 61359
Registrant Street2:
Registrant Street3:
Registrant City:Sunnyvale
Registrant State/Province:CA
Registrant Postal Code:94088
Registrant Country:US
Registrant Phone:+1.5105952002
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:contact@myprivateregistration.com
Admin ID:D12612021922276
Admin Name:PrivateRegContact Admin
Admin Organization:Private Reg US
Admin Street1:PO Box 61359
Admin Street2:
Admin Street3:
Admin City:Sunnyvale
Admin State/Province:CA
Admin Postal Code:94088
Admin Country:US
Admin Phone:+1.5105952002
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:contact@myprivateregistration.com
Tech ID:D12612021922278
Tech Name:PrivateRegContact TECH
Tech Organization:Private Reg US
Tech Street1:PO Box 61359
Tech Street2:
Tech Street3:
Tech City:Sunnyvale
Tech State/Province:CA
Tech Postal Code:94088
Tech Country:US
Tech Phone:+1.5105952002
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:contact@myprivateregistration.com
Name Server:YNS1.YAHOO.COM
Name Server:YNS2.YAHOO.COM

Domain Name.......... online-companysite.com
Registrar:     MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Status:        clientTransferProhibited
Dates:         Created 19-dec-2009   Updated 19-dec-2009 Expires 19-dec-2010
DNS Servers:   YNS1.YAHOO.COM YNS2.YAHOO.COM

Domain Name.......... online-companysite.com
Creation Date........ 2009-12-19
Registration Date.... 2009-12-19
Expiry Date.......... 2010-12-19
Organisation Name.... Bernadette Ogrady
Organisation Address. PO Box 61359
Organisation Address.
Organisation Address. Sunnyvale
Organisation Address. 94088
Organisation Address. CA
Organisation Address. US

Admin Name........... Admin PrivateRegContact
Admin Address........ PO Box 61359
Admin Address........
Admin Address........ Sunnyvale
Admin Address........ 94088
Admin Address........ CA
Admin Address........ US
Admin Email.......... contact@myprivateregistration.com
Admin Phone.......... +1.5105952002
Admin Fax............

Tech Name............ TECH PrivateRegContact
Tech Address......... PO Box 61359
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94088
Tech Address......... CA
Tech Address......... US
Tech Email........... contact@myprivateregistration.com
Tech Phone........... +1.5105952002
Tech Fax.............
Name Server.......... yns1.yahoo.com
Name Server.......... yns2.yahoo.com

   Domain Name: ONLINECOMPANYSITE.COM
   Registrar: ALANTRON BLTD.
   Whois Server: whois.alantron.com
   Referral URL: http://www.alantron.com.tr
   Name Server: NS1.ONLINECOMPANYSITE.COM
   Name Server: NS2.ONLINECOMPANYSITE.COM
   Status: clientTransferProhibited
   Updated Date: 24-nov-2009
   Creation Date: 22-nov-2009
   Expiration Date: 22-nov-2010

Data timeout

DNS Lookup: onlinecompany-site.com A record
Searching for onlinecompany-site.com A record at k.root-servers.net [193.0.14.129]: Got referral to f.gtld-servers.net. (zone: com.)
Searching for onlinecompany-site.com A record at f.gtld-servers.net. [192.35.51.30]: Got referral to yns1.yahoo.com. (zone: onlinecompany-site.com.)
Searching for onlinecompany-site.com A record at yns1.yahoo.com. [98.136.43.32]: Reports onlinecompany-site.com.
Response:

Domain	Type	Class	TTL	Answer
onlinecompany-site.com.	A	IN	1200	68.180.151.76
onlinecompany-site.com.	NS	IN	86400	ns8.san.yahoo.com.
onlinecompany-site.com.	NS	IN	86400	yns1.yahoo.com.
onlinecompany-site.com.	NS	IN	86400	ns9.san.yahoo.com.
onlinecompany-site.com.	NS	IN	86400	yns2.yahoo.com.

Looking up at the 2 onlinecompany-site.com. parent servers:

Server	Response
yns2.yahoo.com [66.196.84.168]	68.180.151.76
yns1.yahoo.com [98.136.43.32]	68.180.151.76

The host of this criminal fraudster is Yahoo on IP address 68.180.151.76

***Latest News*** Initial entry 21st. December 2009

***Latest News*** 8th. January 2010
The domain onlinecompany-site.com has been parked. New domains notified by site contact - onlinecompanysite.org and online-companysite.com. Network details:

DNS Lookup: onlinecompanysite.org A record
Searching for onlinecompanysite.org A record at g.root-servers.net [192.112.36.4]: Got referral to C0.ORG.AFILIAS-NST.INFO. (zone: org.)
Searching for onlinecompanysite.org A record at C0.ORG.AFILIAS-NST.INFO. [199.19.53.1]: Got referral to yns2.yahoo.com. (zone: onlinecompanysite.org.)
Searching for onlinecompanysite.org A record at yns2.yahoo.com. [66.196.84.168]: Reports onlinecompanysite.org.
Response:

Domain	Type	Class	TTL	Answer
onlinecompanysite.org.	A	IN	7200	69.147.83.188
onlinecompanysite.org.	A	IN	7200	69.147.83.187
onlinecompanysite.org.	A	IN	7200	98.136.50.138
onlinecompanysite.org.	NS	IN	86400	ns9.san.yahoo.com.
onlinecompanysite.org.	NS	IN	86400	ns8.san.yahoo.com.
onlinecompanysite.org.	NS	IN	86400	yns2.yahoo.com.
onlinecompanysite.org.	NS	IN	86400	yns1.yahoo.com.

Looking up at the 2 onlinecompanysite.org. parent servers:

Server	Response
yns2.yahoo.com [66.196.84.168]	69.147.83.187 69.147.83.188 98.136.50.138
yns1.yahoo.com [98.136.43.32]	69.147.83.187 69.147.83.188 98.136.50.138

The host of this criminal fraudster is Yahoo on IP addresses 69.147.83.187 69.147.83.188 98.136.50.138

DNS Lookup: online-companysite.com A record
Searching for online-companysite.com A record at h.root-servers.net [128.63.2.53]: Got referral to k.gtld-servers.net. (zone: com.)
Searching for online-companysite.com A record at k.gtld-servers.net. [192.52.178.30]: Got referral to yns1.yahoo.com. (zone: online-companysite.com.)
Searching for online-companysite.com A record at yns1.yahoo.com. [98.136.43.32]: Reports online-companysite.com.
Response:

Domain	Type	Class	TTL	Answer
online-companysite.com.	A	IN	1200	69.147.83.188
online-companysite.com.	A	IN	1200	69.147.83.187
online-companysite.com.	A	IN	1200	98.136.50.138
online-companysite.com.	NS	IN	86400	ns9.san.yahoo.com.
online-companysite.com.	NS	IN	86400	ns8.san.yahoo.com.
online-companysite.com.	NS	IN	86400	yns1.yahoo.com.
online-companysite.com.	NS	IN	86400	yns2.yahoo.com.

Looking up at the 2 online-companysite.com. parent servers:

Server	Response
yns2.yahoo.com [66.196.84.168]	69.147.83.187 69.147.83.188 98.136.50.138
yns1.yahoo.com [98.136.43.32]	69.147.83.187 69.147.83.188 98.136.50.138

The host of this criminal fraudster is Yahoo on IP addresses 69.147.83.187 69.147.83.188 98.136.50.138

DNS Lookup: onlinecompanysite.com A record
Searching for onlinecompanysite.com A record at l.root-servers.net [199.7.83.42]: Got referral to h.gtld-servers.net. (zone: com.)
Searching for onlinecompanysite.com A record at h.gtld-servers.net. [192.54.112.30]: Got referral to ns2.onlinecompanysite.com. (zone: onlinecompanysite.com.)
Searching for onlinecompanysite.com A record at ns2.onlinecompanysite.com. [212.117.185.75]: Reports onlinecompanysite.com.
Response:

Domain	Type	Class	TTL	Answer
onlinecompanysite.com.	A	IN	14400	212.117.185.75
onlinecompanysite.com.	NS	IN	14400	ns2.onlinecompanysite.com.
onlinecompanysite.com.	NS	IN	14400	ns1.onlinecompanysite.com.

Looking up at the 2 onlinecompanysite.com. parent servers:

Server	Response
ns2.onlinecompanysite.com [212.117.185.75]	212.117.185.75
ns1.onlinecompanysite.com [212.117.185.75]	212.117.185.75

The host of this criminal fraudster is LU-ROOT-20071108 (root eSolutions) on IP address 212.117.185.75