Orion Logistic Group

Orion Logistic Group Fraud

Don't Bear Internet Fraud

Orion Logistic Group screenshot - 12-Sep-2009

This fraudster must not be confused with any other company that coincidentally may have the same or a similar name. The above website graphics, the posted fraud job and the evidence documented below identify this criminal alone and no other company.

Orion Logistic Group is a re-shipping fraud job spamvertising website.It has several other criminal aliases, including International Logistic Company, HHT Logistic Company, Centurion Logistic Group and others that have been taken down. The posted part-time, work-from-home job on the website under the 'Vacancies' tab consists of accepting parcels to your home address and forwarding them on the an address specified by the crooks. This is the classic re-shipping fraud function that will earn you a visit from the police and could get you a criminal record. The criminals totally unrelated domain parabellum.us was first registered in 2003 to a different registrant and the domain history shows that it changed hands in spring 2009 and is set to expire on Jul 13 2010. Notice the «quotation marks» in the text that these criminals always use as the markers where they 'cut & paste' in their various aliases. They are not a registered company in the UK and their address and telephone numbers are fake.

Evidence of Criminal Fraud:

i) The criminals domain parabellum.us is totally unrelated to the fake company name. That is because the crook has acquired the domain by transfer before expiry such that the original registration date still appears in the whois data, although it was originally registered by a totally different person/organisation in 2003.

ii) The content and the template of the fake website is the same as the criminal's previous aliases as listed above, (which incidentally were botnet hosted and 'Rockphish' related).

iii) Notice that the site is hosted free by GoDaddy - not a sign of a genuine business that has "been on the market since 1997" (Notice the 'Runglish' in the above screenshot)

iii) A Google search for "Orion Logistic Group" shows no web presence whatsoever for this particular company apart from their own fake site. (Not to be confused with other firms of the same name). Had they genuinely been in business since 1997 there would be plenty of third party listings - there are none.

iv) The website job:

Transportation manager, logist
Main responsibilities:

    * Reception/sending of the goods from clients
    * Documentary registration of process of transportation

Requirements:

    * Two or three hours of spare time per day
    * Knowledge of personal computer.

We offer:

    * Competitive salary
    * Bonuses according to the results of work
    * Social welfare
    * Medical insurance
    * Seminars and trainings at the expense of the company

If you are interested in our offer please send your CV to job-department@orion-logistic.info

The above phrase 'Reception/sending of the goods from clients' betrays it is a part-time, work from home job accepting parcels to your private address and forwarding them on to these crooks. It is the well recognised function of "re-shipping fraud". There is no genuine requirement for such a service and what the unfortunate 'dupe' may not realise is that the goods he has reshipped have been purchased by fraud, e.g. stolen credit card details or auction fraud and he will be the only traceable link in the chain. This fraud is well documented by many authoritative agencies, e.g. the United States Postal Service detail it here in a press release dating back to February 2005.

It amounts to handling stolen goods and such criminal activity will get you a visit from the police and possibly a criminal record - don't be tempted. Such a job is clear evidence of fraud - no legitimate company is going to entrust the job of 'shipping agent' to any John/Jane Doe recruited at random from the general public.

v) False website Contact Details

Address:
Orion Logistic Group
Suite 9, Woodside House,
Woodside Avenue,
Eastleigh, Hampshire,
SO50 9NA

Phone numbers:
Tel: 0-238-0641112
Fax: 1-610-6437193

E-mail:
Administration: admin@parabellum.us
Support: support@parabellum.us
Job: job@parabellum.us
Webmaster: webmaster@parabellum.us

• - A Google Search for the address "Suite 9, Woodside House, Woodside Avenue, Eastleigh, Hampshire" shows it to be the address of a company called FORWARD CARGO SERVICES LIMITED - clear evidence of fraud.
• - The telephone number "0-238-0641112" is answered by a Fax. Machine or a modem.
• - The Fax. number "1-610-6437193" is certainly not a UK number and returns the message "The number you have dialled has not been recognised".

vi) There is no company by the name of "Orion Logistic Group" registered at the UK Companies House - it is irrefutably a fake company.

See the criminal's previous Centurion Logistic Group alias for more details related to this fraud.

The above evidence clearly demonstrates that the Orion Logistic Group website is a fraudulent website set up with intent to deceive. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is usually false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Known Website Domains

parabellum.us

Registrar

GODADDY.COM, INC. (14-Jul-2003) [Transferred domain]

Active
Suspended/Disabled
Parked

Domain Whois Data

Domain Name:                                 PARABELLUM.US
Domain ID:                                   D4476698-US
Sponsoring Registrar:                        GODADDY.COM, INC.
Sponsoring Registrar IANA ID:                146
Registrar URL (registration services):       whois.godaddy.com
Domain Status:                               ok
Registrant ID:                               CR5086427
Registrant Name:                             fake contact details removed at request of owner.
Registrant Address1:                         fake contact details removed at request of owner.
Registrant City:                             LAWRENCEVILLE
Registrant State/Province:                   GA
Registrant Postal Code:                      30044
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     fake contact details removed at request of owner.
Registrant Email:                            fake contact details removed at request of owner.
Registrant Application Purpose:              P3
Registrant Nexus Category:                   C11
Administrative Contact ID:                   CR5086436
Administrative Contact Name:                 fake contact details removed at request of owner.
Administrative Contact Address1:             fake contact details removed at request of owner.
Administrative Contact City:                 LAWRENCEVILLE
Administrative Contact State/Province:       GA
Administrative Contact Postal Code:          30044
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:
Administrative Contact Email:                fake contact details removed at request of owner.
Administrative Application Purpose:          P3
Administrative Nexus Category:               C11
Billing Contact ID:                          CR5086440
Billing Contact Name:                        fake contact details removed at request of owner.
Billing Contact Address1:                    fake contact details removed at request of owner.
Billing Contact City:                        LAWRENCEVILLE
Billing Contact State/Province:              GA
Billing Contact Postal Code:                 30044
Billing Contact Country:                     United States
Billing Contact Country Code:                US
Billing Contact Phone Number:
Billing Contact Email:                      fake contact details removed at request of owner.
Billing Application Purpose:                 P3
Billing Nexus Category:                      C11
Technical Contact ID:                        CR5086432
Technical Contact Name:                     fake contact details removed at request of owner.
Technical Contact Address1:                  fake contact details removed at request of owner.
Technical Contact City:                      LAWRENCEVILLE
Technical Contact State/Province:            GA
Technical Contact Postal Code:               30044
Technical Contact Country:                   United States
Technical Contact Country Code:              US
Technical Contact Phone Number:
Technical Contact Email:                    fake contact details removed at request of owner.
Technical Application Purpose:               P3
Technical Nexus Category:                    C11
Name Server:                                 NS51.DOMAINCONTROL.COM
Name Server:                                 NS52.DOMAINCONTROL.COM
Created by Registrar:                        GODADDY.COM, INC.
Last Updated by Registrar:                   GODADDY.COM, INC.
Domain Registration Date:                    Mon Jul 14 17:21:04 GMT 2003
Domain Expiration Date:                      Tue Jul 13 23:59:59 GMT 2010
Domain Last Updated Date:                    Thu Jul 09 19:21:41 GMT 2009

DNS Lookup: parabellum.us A record
Searching for parabellum.us A record at m.root-servers.net [202.12.27.33]: Got referral to B.GTLD.BIZ. (zone: us.)
Searching for parabellum.us A record at B.GTLD.BIZ. [209.173.57.162]: Got referral to NS51.DOMAINCONTROL.COM. (zone: parabellum.us.)
Searching for parabellum.us A record at NS51.DOMAINCONTROL.COM. [216.69.185.26]: Reports parabellum.us.
Response:

Domain	Type	Class	TTL	Answer
parabellum.us.	A	IN	3600	97.74.144.182
parabellum.us.	NS	IN	3600	ns51.domaincontrol.com.
parabellum.us.	NS	IN	3600	ns52.domaincontrol.com.

Looking up at the 2 parabellum.us. parent servers:

Server	Response
ns51.domaincontrol.com [216.69.185.26]	97.74.144.182
ns52.domaincontrol.com [208.109.255.26]	97.74.144.182

The host of this criminal fraudster is GoDaddy.com, Inc. on IP address 97.74.144.182

***Latest News*** 12th. September 2009 - Webpage published

***Latest News*** 16th. September 2009 - Webpage published
News from Simon Bear: Go Daddy appear to have taken some sort of action against the domain parabellum.us as it is currently returning a 403 Forbidden error. Please notify me of any active domains for this criminal.