Web Productions Limited Fraud
Report
Active
Domain
Don't Bear Internet Fraud
Home
Bobbear Icon
Web Productions Limited scam screenshot (07-Apr-2009)
Web Productions Limited scam screenshot (07-Apr-2009)

This fraudster should not be confused with any legitimate company of the same or similar name - the above website graphics and the following evidence clearly identify the fake website and these criminal fraudsters. The website has been stolen from the Cygnet Infotech Pvt Ltd™ company.

Web Productions Limited This is just a standard scam website that has been set up to form a front for a money laundering job spamming campaign using fake Careerbuilder spams. The site content has been stolen from a company called Cygnet Infotech Pvt Ltd™. The domain has only been registered very recently for a one year period and the company is a hijacked UK company.

Web Productions Limited  : Evidence of Criminal Fraud

i) The criminal's website has been stolen in its entirety from the company called Cygnet Infotech Pvt Ltd™. That much is self-evident and clear evidence of criminal fraud.

ii
) As the site is stolen, it doesn't really apply to the criminals, however,
they  claim on their 'About Us' page "Our repertoire of knowledge gained over a period of 13 years", but the criminal's domain webprolim.com was only registered with Directi Internet Solutions (PublicDomainRegistry.com), on 16-Mar-2009 for the usual criminal domain period of only one year. A clear indication of a fraudulent registration.

iii) A Google search shows absolutely no internet presence at all for this particular Web Productions Limited with the above website, although it is clear that they have hijacked a UK company registration for a company, (Company No. 03127554), listed by the UK Companies House as being involved in the field of "9211 - Motion picture and video production". This is certainly not the activity the above stolen website is involved in. From the complete lack of Google presence, even the stolen company does not appear to be active. They also do not appear to be listed in the telephone directory - check for yourself.

iv) They claim to be a member of NASSCOM. A company search on the NASSCOM website proves this to be false, (check for yourself), which is not surprising as NASSCOM is the premier trade body and the chamber of commerce of the IT-BPO industries in India, and these crooks are claiming to be London based with no India connection.

v) The Spam:



Message from Job Poster  
Customer Service Manager  


Dear xxxxx:


Thank you that you got interested in our organization. We will give you necessary information about our company and the prospective position. The WPL PLC provides services in the field of offshore software engineering. We receive orders from clients in the United States to develop software. To satisfy their demand we hire people who offer cheaper but qualified service. That's why we employ programmers from all over the world and they develop the software all together. After that we provide the final product to the client.

We offer you a position of WPL PLC Customer Service Manager on the territory of the USA as we do not have an office there yet. The position is created to instruct our clients, to help us in drawing up internal and tax reports, banking procedures and to arrange payments from clients to programmers via general money transfer systems.
Earlier the payment procedure to programmers was performed as following. The client paid us for the final product via international bank transfers and we paid the employees via international money transfer systems by ourselves. At the present complex economic conditions the payments are often delayed, many banks have become unstable. We've decided to develop another payment system to reduce expenses and save our time and the time of our employees. Now the client will make payments via domestic wire transfer to the nearest WPL PLC Customer Service Manager (it usually takes about 3-4 hours to be fully processed). Our Customer Service Manager then withdraws the payment and remits it to our programmers via any method of instant transfer.

You work from your computer at home. You have to follow a two-week probation period during which we examine learning capability and your skills. You don't need special economic education to perform any services or financial operations, we will provide you all the information. You do not need to buy anything or invest. For the probation period you are paid a fixed salary 2500 USD per month (as the Probation Period lasts only 2 weeks, you will actually get 1300USD). You can get bonus payments as well.
After a successful probation period you become an official Customer Service Manager of our company and will be paid 3500 USD.

All instructions will be provided before any transaction is made. General requirements for the position:
- Be 21+;
- Good computer skills, available phone, Internet access;
- To be hard-working, determined, responsible, able to work in team;
- Positive attitude and willingness to learn;

If you are interested and would like to get started, please, REPLY us. As soon as we receive your answer well send you the Application Form.

Please, provide us with your contact information:

Your first name:
Your last name:
Your phone #:
Your cell phone #:
Your full address:
Your e-mail:

We offer you a great opportunity to earn extra money. We hope to hear from you soon.

Best Regards,
Human Resources Department,
Web Productions Limited PLC.
You are receiving this employment opportunity email because you uploaded your resume on CareerBuilder. This email is used for hiring process only to prevent the company from spam messages.
If your employment status has changed or you no longer wish to receive these emails, you can update your privacy and communication preferences from your resume by logging onto CareerBuilder.com:
http://www.careerbuilder.com/jobseeker/emails/emailsubcenter.aspx

Or you can Block this employer from viewing your resume and sending you candidate emails.

This email was sent from Account ID AVGZOWZJQ0UDFF3WS66 and by this logged in User UB9FEWRJ36DROMDOCQ5
DISCLAIMER
The content of this email has been reviewed and approved by CareerBuilder. This email is intended for the use of the individual address named above and may contain information that is confidential, privileged or unsuitable for overly sensitive persons with low self-esteem, no sense of humour or irrational religious beliefs. If you are not the intended recipient, any dissemination, distribution or copying of this email is not authorised and constitutes an irritating social faux pas.




vi) Spam Headers:
Received: from abraxas.tchmachines.com ([208.76.80.115])
          by isp.att.net (frfwmxc10) with SMTP
          id <xxxxxxxxxxxxxxx>; Tue, 7 Apr 2009 13:34:33 +0000
X-Originating-IP: [208.76.80.115]
Received: from qgjxv (25.53.150.159)
    by abraxas.tchmachines.com; Tue, 7 Apr 2009 09:34:31 -0400
Date: Tue, 7 Apr 2009 09:34:31 -0400
From: "Elizabeth Horne" <elizabethhorne@webprolim.com>
X-Mailer: aspNetEmail ver 3.2.0.18
X-CBEID: EN32C971570KD28XVNL
X-CBOrig: MAILSM3
X-CBEmailType: CandidateEmail
X-CBEmailPriority: CampaignEmail
X-CBLocaleCountry: US
X-CBLocaleLanguage: USEnglish
Reply-To: Elizabeth Horne <elizabethhorne@webprolim.com>
X-Priority: 3 (Normal)
Message-ID: <6445971852.20090223012617@webprolim.com>
To: xxxxxx
Subject: Re: CareerBuilder: Customer Service Manager. Please proceed to further application process.
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="----------27DD30A44C5"

vii) As you can see - the spam did not come from Careerbuilder and the 'Reply-To' address is to the fake website domain - clear evidence of fraud. They sign themselves as "Web Productions Limited PLC" - that is incorrect. It should be either "Web Productions Limited" or "Web Productions PLC" but not both. Also note the dreadful English such as "Thank you that you got interested in our organization". As the host is Leaseweb of Amsterdam I would imagine that this one is a Nigerian effort.

viii) The above spam contains the clear money laundering mule solicitation that will get your account and your assets frozen, will lose you a lot of money and could lead to your arrest - do not be tempted.

The above evidence clearly demonstrates beyond any doubt that the Web Productions Limited website has been set up by money laundering criminal fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.
Web Productions Limited Fraudsters - hosting details

Main Domains, Registrars and Hosts  
Domain

webprolim.com
Registrar

Directi Internet Solutions (PublicDomainRegistry.com) - 16-Mar-2009
Host Network

Leaseweb

Host IP

94.75.207.22

Key:
Active
Suspended or Inactive
Parked

Please notify me of any other current domains used by this criminal.

Network Data (webprolim.com)

How I am searching:

Searching for webprolim.com A record at e.root-servers.net [192.203.230.10]: Got referral to A.GTLD-SERVERS.NET. (zone: com.)
Searching for webprolim.com A record at A.GTLD-SERVERS.NET. [192.5.6.30]: Got referral to ns1.csedns.com. (zone: webprolim.com.)
Searching for webprolim.com A record at ns1.csedns.com. [94.75.207.22]: Reports webprolim.com. Response:
Domain Type Class TTL Answer
webprolim.com. A IN 14400 94.75.207.22
webprolim.com. NS IN 14400 ns1.csedns.com.
webprolim.com. NS IN 14400 ns2.csedns.com.

Looking up at the 2 webprolim.com. parent servers:

Server Response
ns2.csedns.com [94.75.207.22] 94.75.207.22
ns1.csedns.com [94.75.207.22] 94.75.207.22

This criminal's website is hosted by Leaseweb of Amsterdam on IP address 94.75.207.22. This IP was also used to host the First Europe Postal Service fraud, and others.
***Latest News*** Initial entry 7th. April 2009