Rimm Systems Inc.

Rimm Systems Inc. Fraud

Don't Bear Internet Fraud

Rimm Systems Inc. screenshot (04-Oct-2008):

This fraudster should not be confused with any other company that may have a similar name. The website graphics and the evidence below identify this criminal.

Rimm Systems Inc. is a very elaborately dressed up fraud job spamvertising fake logistics website. Some website content has been stolen from the UK based logistics company 'Synergy Logistics', (e.g. the Rimm Systems home page), and most other pages are stolen from the US registered logistics company Global Ocean Freight Inc. In fact their 'find & replace' technique has failed them in places for instance the second letter on the crooks 'References' page contains the line "I got a call yesterday evening from David, from Global Freight" which rather gives the game away as it is all copied from the Global Ocean Freight 'References' page. They claim to have been in business since April 4, 2004 on their 'About Us' page, but their website domain rimmsystem.com was only registered with the Russian registrar ESTDOMAINS, INC. (WP Hosting) on 03-Sep-2008. That has since been suspended and their new domain rimmsystems.com was only registered with ANO REGIONAL NETWORK INFORMATION CENTER DBA RU on (06-Oct-2008).They have an identical stolen alias of A-Logistics Inc. and their shared location details are bogus. It is an identical follow on fraud to Eric Ager Logistics Inc. All clear evidence of fraud.

These criminals are the same criminals that are currently behind dating spams that are currently being received in huge numbers, (see *** Latest News*** 16th. October 2008).

Evidence of Criminal Fraud:

i) They claim to have been in business since April 4, 2004 on their 'About Us' page, but their website domain rimmsystem.com was only registered with the Russian registrar ESTDOMAINS, INC. (WP HOSTING) on 03-Sep-2008. That has since been suspended and their new domain rimmsystems.com was only registered with ANO REGIONAL NETWORK INFORMATION CENTER DBA RU on (06-Oct-2008). Clear evidence of fraud.

ii) Stolen website content - their home page content is stolen from the UK based logistics company 'Synergy Logistics' and most of the rest of the website pages content is stolen from the US registered logistics company Global Ocean Freight Inc. In fact their 'find & replace' technique has failed them in places for instance second letter on the crooks 'References' page contains the line "I got a call yesterday evening from David, from Global Freight" which rather gives the game away as it is all copied from the Global Ocean Freight 'References' page. The crooks 'Auto Shipping', 'International' etc. pages are similarly copied from the Global Ocean Freight Inc. 'Auto Shipping and 'International' pages etc. Clear evidence of site theft and fraud.

iii) About Us detail:

Licenses

OTI/NVOCC (Federal Maritime Commission)
Shipping License(Special/General 11) No. 4025

In fact a simple check on the Federal Maritime Commission webpage shows that the company Rimm Systems Inc. is not listed in their database and the license number 4025 does not belong to them - that claim is completely bogus. Clear evidence of fraud.

iv) 'Contact Us' Details from the website:

Corporate Headquarters:

RIMM SYSTEM
10601-215 Tierrasanta Blvd
San Diego, CA 92124
phone: (760) 297 4740
fax: (760) 297 4740
e-mail: office@rimmsystem.com

HR Department: (760) 297 4744

Rimm Systems Group /EUR Dept/

Leutschenbachstrasse 95
CH-8050 Zurich, Switzerland
phone: (44) 30-823-811
e-mail: switz@rimmsystems.com

and

Zamkowy Square 1/13, 00-262 Warsaw, Poland
phone: (48) 222 195 222
e-mail: poland@rimmsystems.com

• - A USPS Zipcode check on the address 10601-215 Tierrasanta Blvd, San Diego, CA 92124 lists no suite #215 at the address.
• - The supposed European location details for Rimm Systems Inc. are identical to the location details for their other alias A-Logistics Inc.
• - Their supposed Swiss telephone number is in fact shown as a UK (+44) number and is also an invalid number.
• - Their supposed Swiss address of "Leutschenbachstrasse 95 CH-8050 Zurich" Googles as the address of Xounts. and there's no third party
confirmation of this company existing at that address.
• - The supposed address "Zamkowy Square 1/13, 00-262 Warsaw, Poland" Googles as the address of the Warsaw Information Centre

All clear evidence of fraud.

v) A simple webcheck shows that Rimm Systems Inc. are not listed in the California state company register - Clear evidence of a fake company.

vi) A simple webcheck shows that Rimm Systems Inc. are not listed in the Dun & Bradstreet database.

vii) A Google search for "Rimm Systems Inc." shows that this particular company has no Google internet presence at all apart from their own website listing which makes a nonsense of their claims on their 'About Us' page to have capital of $17,578,900.04 and 595 employees.

The above evidence clearly demonstrates that the Rimm Systems Inc. website has been stolen from a genuine company and is a fraudulent website set up with intent to deceive. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all of their whois data is invariably false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Known Website Domains

rimmsystem.com
rimmsystems.com
superlop.com

Registrar

ESTDOMAINS, INC. (WP HOSTING) 03-Sep-2008
ANO REGIONAL NETWORK INFORMATION CENTER DBA RU (06-Oct-2008)
XIN NET TECHNOLOGY CORPORATION (18-sep-2008)

Active
Suspended/Disabled

DNS Data: (rimmsystem.com)

How I am searching:

Searching for rimmsystem.com A record at j.root-servers.net [192.58.128.30]: Got referral to E.GTLD-SERVERS.NET. (zone: com.)
Searching for rimmsystem.com A record at E.GTLD-SERVERS.NET. [192.12.94.30]: Got referral to ns2.wp-host.com. (zone: rimmsystem.com.)
Searching for rimmsystem.com A record at ns2.wp-host.com. [74.86.115.16]: Reports rimmsystem.com. Response:

Domain	Type	Class	TTL	Answer
rimmsystem.com.	A	IN	14400	67.228.130.45
rimmsystem.com.	NS	IN	86400	ns2.wp-host.com.
rimmsystem.com.	NS	IN	86400	ns1.wp-host.com.
ns1.wp-host.com.	A	IN	14400	67.228.130.40
ns2.wp-host.com.	A	IN	14400	74.86.115.16

Looking up at the 2 rimmsystem.com. parent servers:

Server	Response
ns2.wp-host.com [74.86.115.16]	67.228.130.45
ns1.wp-host.com [67.228.130.40]	67.228.130.45

The host of this criminal fraudster is listed as SoftLayer Technologies Inc./Innovation IT Solutions Corp. on IP 67.228.130.45 These are exactly the same hosting details as for their other alias A-Logistics Inc.

Fraud Log

Webpage created 4th. October 2008

*** Latest News*** 5th. October 2008
The criminal's domain rimmsystem.com has been suspended by Estdomains. WP Hosting report that they removed the criminals from their server as soon as they were made aware of the activity as they watch for such activity and value their reputation. Please notify me of any active URLs for this criminal.

*** Latest News*** 13th. October 2008
New domain notified by site contact - rimmsystems.com registered with ANO REGIONAL NETWORK INFORMATION CENTER DBA RU (06-Oct-2008) and hosted on the following network:
How I am searching:

Searching for rimmsystems.com A record at f.root-servers.net [192.5.5.241]: Got referral to I.GTLD-SERVERS.NET. (zone: com.)
Searching for rimmsystems.com A record at I.GTLD-SERVERS.NET. [192.43.172.30]: Got referral to ns1.1gb.ru. (zone: rimmsystems.com.)
Searching for rimmsystems.com A record at ns1.1gb.ru. [81.176.69.150]: Reports rimmsystems.com. Response:

Domain	Type	Class	TTL	Answer
rimmsystems.com.	A	IN	3600	81.177.24.7

Looking up at the 2 rimmsystems.com. parent servers:

Server	Response
ns1.1gb.ru [81.176.69.150]	81.177.24.7
ns2.1gb.ru [195.161.112.91]	81.177.24.7

The host for this criminal is In-Solve/1Gb.ru hosting services provider on IP address 81.177.24.7

*** Latest News*** 14th. October 2008
1Gb.ru have disabled the hosting of the criminal's domain rimmsystems.com. Please notify me of any active website links for this criminal.

*** Latest News*** 16th. October 2008
New domain notified by site contact - superlop.com registered with XIN NET TECHNOLOGY CORPORATION (18-sep-2008) and hosted on the following network:

How I am searching:

Searching for superlop.com A record at g.root-servers.net [192.112.36.4]: Got referral to M.GTLD-SERVERS.NET. (zone: com.)
Searching for superlop.com A record at M.GTLD-SERVERS.NET. [192.55.83.30]: Got referral to ns2.droreal.com. (zone: superlop.com.)
Searching for superlop.com A record at ns2.droreal.com. [79.135.168.36]: Reports superlop.com. Response:

Domain	Type	Class	TTL	Answer
superlop.com.	A	IN	300	79.135.168.36
superlop.com.	NS	IN	300	ns1.superlop.com.
superlop.com.	NS	IN	300	ns2.superlop.com.
ns1.superlop.com.	A	IN	300	79.135.168.36
ns2.superlop.com.	A	IN	300	79.135.168.36

Looking up at the 2 superlop.com. parent servers:

Server	Response
ns2.droreal.com [79.135.168.36]	79.135.168.36
ns1.droreal.com [79.135.168.36]	79.135.168.36

The host for this criminal is listed as LB-NET (Lebanon private dedicated service) on IP 79.135.168.36
The nameserver domain droreal.com appears to be a rogue nameserver used by the criminals for his own DNS. It was only registered with XIN NET TECHNOLOGY CORPORATION on 02-Jun-2008, is blacklisted on uribl.com and is linked with dating fraud spammers. The fact that RIMM Systems and the dating spammers and scammers are one and the same is confirmed by the fact that the response email address of "ROBERTINA@superlop.com", (among many others), is used by the "how are you?) do you have a second?)..." dating spammers. The "Dating! She is waiting for you" spammers, (elite-russian-girls-for-you.net), are also coincidentally hosted on the same network on the adjacent IP 79.135.168.38.

*** Latest News*** 10th. December 2008
This crook has now changed his name to SB Systems Inc. using exactly the same domain (superlop.com) and the same host above.