Taurus Business Consulting scam

Taurus Business Consulting Fraud

Don't Bear Internet Fraud

This fraud should not be confused with any other company of the same or similar name - the following screenshot and the fraud evidence defines and refers to this fake company alone and no other.

Taurus Business Consulting scam screenshot - 20-Mar-2010

Taurus Business Consulting is just another fake financial site used as a vehicle to legitimise a Russian money laundering mule recruiting fraud scam spamming campaign. It's the usual stock glossy 'flash' template that these crooks tend to use, but the evidence is clear that they are fraudsters, for a start, their domain taurus-bc.com was only registered on 08-feb-2010 for the usual 'criminal's domain' period of only one year with Directi Internet Solutions Pvt. Ltd. d/b/a PublicDomainRegistry.com (Openhosting.ru) and they are hosted by the Russian host, openhosting.ru on IP address 81.176.236.12, an IP which has been previously used for many other frauds, including AGS Consult Ltd., Finance, AmexFinance, NTI Consult, Milet Business, Inc., Liram Delivery Service, Mirax Cargo and Vexmarc - this is clearly a serial fraudster. The sole purpose of the website is to lend a spurious air of credibility to the usual money mule spamming campaign, evidence of which can be seen on many job websites, (example below). The payload of the site is a very familiar money mule 'job' of 'Customer Manager' located under the 'Careers' menu option. They have no web presence, their location and contact details are all bogus and they are not a registered business entity in their supposed locations of New York, the UK and Italy. Why would a supposedly US company use a Russian registrar and a Russian host?

The same or very similar website part-time, work from home money mule job of "Customer Manager" has also appeared on numerous other fraud pages, I won't list them all, (there are just too many) - just click on this Google search for "Making simple financial operations" from the 'Careers' page and you will see what a huge serial criminal operation this is. Other current criminal frauds from the same gang noted on IP address 81.176.236.12: Vedex Business, Warding Business Group.

Evidence of Criminal Fraud:

i) Looking closely at the above Taurus Business Consulting home page grammatical structure I can only assume that they have stolen their website content from Russian sources and run it through Google translation, e.g. "Such cooperation includes not only talking to the customers and none but true professionals can help to organize such delicate and important procedure" and "Approaches developed by our specialists will help your to establish a contact with your customers". They make absolutely no claims about when they were founded or how long they have been in business, but they do say, "Taurus Business Consulting company is one of the leading companies providing consulting service in the field of cooperation with customers", which is surprising as their website domain, (taurus-bc.com) was only registered with Directi Internet Solutions Pvt. Ltd. d/b/a PublicDomainRegistry.com (Openhosting.ru) on 08-feb-2010 for one year only. A clear indication of a fake website.

ii) A Google search for "Taurus Business Consulting" shows that these criminals have no genuine web presence, (ignoring their own fake website, of course), which makes nonsense of their above claim, but there is evidence of job website spamming.

iii) There is no company by the name of "Taurus Business Consulting" registered at any of their claimed locations - they are not listed in the UK Companies House register, they are not listed in the New York business entity register and they are not listed in the European, (Italian) company register - irrefutable evidence of a fake company and fraud.

iv) The true purpose of the website is to lend legitimacy to a job website and email spamming campaign attempting to recruit money laundering mules. Here is the abbreviated fraud job that they publish on their own website:

Customer Manager
Manage personal assets; Making simple financial operations.
Pay: $ 36 000/year
APPLY NOW

v) The job is defined by the sentences:
- Manage personal assets;
- Making simple financial operations.

and has appeared on numerous other websites for these criminal fraudster as a Google search for "Making simple financial operations" makes clear. Irrefutable evidence of serial criminal fraud.

Do not be fooled - the job involves accepting stolen funds to your personal bank account and transferring a balance to these crooks. Don't be tempted or you will end up losing a lot of money, having your bank account and your assets frozen and possibly ending up with a criminal record as this is the classic illegal money laundering mule function.

Here's a typical job website spam from these crooks as seen on Totaljobs.com:

vi) The TotalJobs Website spam:

FLEXIBLE PART TIME, DAILY CASH PAYMENT FOR ENTHUSIASTIC

Location:
    London
Salary:
    £800-2000 PER MONTH
Company:
    Taurus Business Consulting
Job type:
    Part Time
Date posted:
    20/03/2010 20:00
Job id:
    46915458
Contact:
    Jerome Avril
Ref:
    Totaljobs

We are offering customer service job for friendly, outgoing persons, that have free time in the first part of the day and looking for second income.

WE PAY CASH DAILY (£30-150) AND FIXED MONTHLY PAYROLL (WIRE), YOU CAN COUNT ON £800-2000 PER MONTH TOTALLY.

SCHEDULE:

- Flexible
- 1-3 days per week

DUTIES:

-Support in private services and financial assistant of our customers.

REQUIREMENTS:

-Location: only UK persons
-Age: 20+
-Home computer, e-mail address and Microsoft Word
-Responsibility

To apply for job please send us your CV or the following information:
__________
FULL NAME:
HOME ADDRESS:
CITY, COUNTY, POST CODE:
Phone number (home or cell, but SHOULD BE available any day time):
E-MAIL:
AGE:
OCCUPATION:
EDUCATION:
AVAILABLE HOUR TO WORK WITH US:
___________

As soon as we revise your application we will contact you within 3 days.

If you have any additional questions, feel free to ask.

Awaiting for your application: taurus@postpro.net

Notice such nonsense as "As soon as we revise your application we will contact you within 3 days". The job is clearly part time, work from home as a "Financial Assistant of our customers". What that means is accepting stolen funds to your bank account and transferring a balance back to these criminals. As described above, it is the illegal 'Money mule' function. Do not be fooled.

vii) No legitimate company is going to advertise for this sort of illegal part time, work from home - "Support in private services and financial assistant of our customers" job among the untrained, inexperienced and uncertified general population overseas. It will cost you a lot of money and eventually the police will come knocking at your door. Do not be tempted.

viii) The Spam:

Dear xxxxxx,

Please send us your resume. You can find additional information about
your salary, work schedule and duties in the attached file.

Note: We are looking for employee from US and UK. This position is
limited!
It is home-based job (Internet-office) with flexible and convenient
schedule.

To register:

1. Read the job specifications and descriptions. If you have any
questions - ask me or write a reply with your confirmation.
2. I will send you the employee's Registration form and Labor
Agreement. You should fill it in correctly, sign it and send
it back.
3. Send a scanned image of your Driver's License or your Passport
for your identification.

The procedure is simple and will not take more than 2 days.

Note:
You can easily find additional information on our website or feel free
to ask any questions about your duties and salary.

Right now we are at the very start of the process.
Read the job specifications and descriptions. If you have any
questions - ask me or write a reply with your confirmation

I am here to help you and I will do my best to help you get along with
this.

Best regards,
Mr. Hall
Manager, Taurus Business Consulting
Phone(USA): (347) 274-8790
Phone(UK): 020 3287 5764
Phone(IT): (02) 898 66 348
Fax: +1 (347) 368-0529
WEB: taurusbc.com

ix) the Fake contact details from the website: (Remember that these criminals are not registered in either the UK's Companies House register or the New York business entity register, or the European (Italian) Register (check for yourself), so their location details are not going to be genuine).

HEADQUARTERS

UNITED STATES:
225 Park Avenue South,
New York, NY 10003

Phone: (347) 274-8790
Fax: (347) 368-0529

UNITED KINGDOM:
37 Great Queen Street,
London WC2B 5AA

Phone: 020 3287 5764
Fax: 020 3287 5764

ITALIA:
Via Giuseppe Sacchi, 7,
20121 Milano

Telefono: (02) 898 66 348
Fax: (02) 898 66 348

• - A Google search for the address "225 Park Avenue South, New York, NY" returns no hits for these crooks.
• - A Google Maps Business search for the address "225 Park Avenue South, New York, NY" shows no such business at the address.
• - A Google Search for the US telephone number "(347) 274-8790" returns no results for these criminals, (ignoring the criminal's own website, of course).
• - A Google Search for the US Fax. number "(347) 368-0529" returns no results for these criminals, (ignoring the criminal's own website, of course).
• - A Google Search for the address "37 Great Queen Street, London WC2B 5AA" returns no results for these criminals, (ignoring the criminal's own website, of course).
• - A Google Maps Business Search for the address "37 Great Queen Street, London WC2B 5AA" shows no such business at the address.
• - A Google search for the address "Via Giuseppe Sacchi, 7, Milano" returns no hits for these crooks.
• - A Google Maps Business search for the address "Via Giuseppe Sacchi, 7, Milano" shows no such business at the address.
• - A Google Search for the UK telephone number "020 3287 5764", (notice it's the usual crook's common voice and fax. number), returns no results for these criminals, (ignoring the criminal's own website, of course).
• - Calling the UK telephone number 020 3287 5764 results in the message "The person you are trying to reach is not available" in the usual highly distinctive female Skype or whatever voicemail voice.
All clear evidence of fake details and fraud.

x) They are not a business listed in the UK telephone directory in London - check for yourself - clear evidence of a fake company.

The above evidence clearly demonstrates beyond any doubt that the Taurus Business Consulting website has been set up very recently by money laundering criminals purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal activity - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Main Website Domains

taurus-bc.com
taurusbc.com

Registrar

Directi Internet Solutions Pvt. Ltd. d/b/a PublicDomainRegistry.com/Openhosting.ru - 08-feb-2010
Directi Internet Solutions Pvt. Ltd. d/b/a PublicDomainRegistry.com/Openhosting.ru - 22-mar-2010

Host

-
Openhosting.ru

IP Address

-
81.176.236.12

Active
Suspended/Disabled
Parked

Domain Whois Data: [N.B. These are criminal fraud domains - the whois data is always either fake or stolen so the registrant details may be redacted]

Registrar:     DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Status:        clientTransferProhibited
Dates:         Created 08-feb-2010   Updated 08-feb-2010 Expires 08-feb-2011
DNS Servers:   NS.OPENHOSTING.RU NS2.OPENHOSTING.RU

Registration Service Provided By: OPENHOSTING
Contact: +111.1111111111

Domain Name: TAURUS-BC.COM

Registrant:
    n/a
    ************       (taurusbc@yahoo.de)
    **** Murry Street
    Norfolk
    Virginia,23502
    US
    Tel. +757.4695555

Creation Date: 08-Feb-2010
Expiration Date: 08-Feb-2011

Domain servers in listed order:
    ns2.openhosting.ru
    ns.openhosting.ru

Administrative Contact:
    n/a
    ************        (taurusbc@yahoo.de)
    **** Murry Street
    Norfolk
    Virginia,23502
    US
    Tel. +757.4695555

Technical Contact:
    n/a
    ************        (taurusbc@yahoo.de)
    **** Murry Street
    Norfolk
    Virginia,23502
    US
    Tel. +757.4695555

Billing Contact:
    n/a
    ************        (taurusbc@yahoo.de)
    **** Murry Street
    Norfolk
    Virginia,23502
    US
    Tel. +757.4695555

Status:LOCKED

Registrar:     DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Status:        clientTransferProhibited
Dates:         Created 22-mar-2010   Updated 22-mar-2010 Expires 22-mar-2011
DNS Servers:   NS.OPENHOSTING.RU NS2.OPENHOSTING.RU

Registration Service Provided By: OPENHOSTING
Contact: +111.1111111111

Domain Name: TAURUSBC.COM

Registrant:
    n/a
    ************        (taurusbc@yahoo.de)
    **** Murry Street
    Norfolk
    Virginia,23502
    US
    Tel. +757.4695555

Creation Date: 22-Mar-2010
Expiration Date: 22-Mar-2011

Domain servers in listed order:
    ns2.openhosting.ru
    ns.openhosting.ru

Administrative Contact:
    n/a
    ************        (taurusbc@yahoo.de)
    **** Murry Street
    Norfolk
    Virginia,23502
    US
    Tel. +757.4695555

Technical Contact:
    n/a
    ************        (taurusbc@yahoo.de)
    **** Murry Street
    Norfolk
    Virginia,23502
    US
    Tel. +757.4695555

Billing Contact:
    n/a
    ************        (taurusbc@yahoo.de)
    **** Murry Street
    Norfolk
    Virginia,23502
    US
    Tel. +757.4695555

Status:LOCKED

DNS Lookup: taurus-bc.com A record (also valid for taurusbc.com)
Searching for taurus-bc.com A record at e.root-servers.net [192.203.230.10]: Got referral to D.GTLD-SERVERS.NET. (zone: com.)
Searching for taurus-bc.com A record at D.GTLD-SERVERS.NET. [192.31.80.30]: Got referral to ns.openhosting.ru. (zone: taurus-bc.com.)
Searching for taurus-bc.com A record at ns.openhosting.ru. [81.176.236.10]: Reports taurus-bc.com.
Response:

Domain	Type	Class	TTL	Answer
taurus-bc.com.	A	IN	10800	81.176.236.12
taurus-bc.com.	NS	IN	10800	ns2.openhosting.ru.
taurus-bc.com.	NS	IN	10800	ns.openhosting.ru.
ns.openhosting.ru.	A	IN	10800	81.176.236.10
ns2.openhosting.ru.	A	IN	10800	81.176.237.10

Looking up at the 2 taurus-bc.com. parent servers:

Server	Response
ns2.openhosting.ru [81.176.237.10]	81.176.236.12
ns.openhosting.ru [81.176.236.10]	81.176.236.12

The host for this criminal fraudster is OPENHOSTING-RT (VPS Hosting) on IP address 81.176.236.12. This is the same host IP as used for all of the criminal frauds as listed above. Other current frauds noted on the IP: Vedex Business, Warding Business Group.

***Latest News*** 20th. March 2010
Webpage created

***Latest News*** 21st. March 2010
News from Simon Bear - the criminal's domain taurus-bc.com has been deleted. Please notify me of any active domains for this criminal.

***Latest News*** 24th. March 2010
News from site contact - the criminal has registered a new domain - taurusbc.com hosted as before on the above network.