WorldTrans Inc.

WorldTrans Inc. Fraud

Don't Bear Internet Fraud

WorldTrans Inc. is just another scam financial website that exists to draw the unwary into the world of money laundering fraud. Text identicalities link it to other fraudulent financial websites such as Intertrans Inc., Palmer Inc., FranklinCo Inc., Columbia Inc., Transfex Inc. all of which have been shut down, and Optimus Inc. The DNS data proves that criminal's website is zombie botnet hosted which in turn proves its criminal nature even without the rest of the clear evidence - no legitimate company uses a zombie botnet to host its website.

This fraudster should not be confused with any legitimate company of the same or similar name - the above website graphics and the included money laundering job clearly identify the fake website and these fraudsters.

WorldTrans Inc. : Evidence of Criminal Fraud

i) WorldTrans Inc. claim on this website page, (screenshot below), "Todd Stern joined WorldTrans Inc. in May 2004.", however, the criminal's domain worldt.st was only registered with Nic.st on 27-Apr-2008.

ii) The above claim also appears identically on the Transfex Inc. and Optimus Inc. websites, inextricably linking the three frauds.

iii) The above page is entitled 'Privacy Policy" - they have obviously got their wires crossed; also notice that half the time they refer to one of their previous fraudster aliases - FranklinCo Inc. This is a common mistake with these fraudsters as they use the same text for different aliases but don't take a great deal of care when changing alias.

iv) Their domain worldt.st is hosted on a zombie botnet as clearly evidenced by the DNS details below. No legitimate company uses a zombie botnet to host its website so this alone proves the fraudulent nature of the operation beyond doubt.

v) Website text identicalities link it to other recognised fraudulent financial websites such as Intertrans Inc., Palmer Inc., FranklinCo Inc., Columbia Inc. and Transfex Inc., (all of which have been shut down), and also Optimus Inc.

vi) Spam as received:

Work from home the days and hours that suit you best -
Experience is not required!

HIRING NOW, Full Time/Part Time,

Paid training provided. The most remarkable thing about this position
is that anyone can make money with it. It doesn't require any special skills,
training, education or previous business experience. You only need access
to the Internet and basic typing skills. It is the perfect work at home job
for stay at home moms, students, home makers, retirees or anyone that is
in need of some extra cash.

These positions involve providing superior customer care and sales with
the intent of providing customer satisfaction and retention, and meeting
our sales goals.

Requirements

Applicants must be 18years of age or over, Australian citizen or resident.
No previous experience is necessary...full paid training is available
if required.

A successful candidate will have the ability to continue to learn in
whatever role they assume and take the initiative to get to the next level.

Company Overview

Work from home with World Trans: Stay-at-home parent, part-timers, and
entrepreneurs. You can start working with us, by either working full time
or part time. We are a service based company, so there are no products,
no inventory, no parties, no cold calling. In addition, our company will
pay you while you train working for us.

Experience in internet is not necessary. We invest time and money on you
so please, only people that are serious and are willing to work minimum
of 10 hours a week or more need request an interview. For more information
about starting working for us, please click on link below, and to request
an interview, leave your full contact details on our website.
This is a legitimate employment position and is not multilevel and does
not require an upfront payment or deposits. To find out more, please
click on the Register button:

http://wwww.worldt.st/index-4.html

The Company Advantage

Lifetime Residual Income
No Major Investments
Save Money! No Commuting.
Step By Step Training
Unlimited Monthly Income
Daily Pay
Direct deposit available
No cold calling
No selling to friends and family

This business is giving regular people like stay at home mom/parent,
school bus drivers, fast food workers, and construction workers an opportunity
to out perform Executive salaries!

Welcome on board.

Regards,
Jim Peters

vii) Their website contact details are all fake:

WorldTrans Inc.
42 Adler Street,
London, E1 1EE,
United Kingdom

Telephone:     +44 (0)20 7958 5005
FAX:              +44 (0)20 7958 5015

Customer Service:
Telephone:   ++44 (0)20 7958 7058
E-mail: customers@WorldTrans.com

Risk management dept:
Telephone:   ++44 (0)20 7958 7074
E-mail: risk@WorldTrans.com

The telephone numbers & address have all been checked and are all bogus - +44 (0)20 7958 5005 goes dead after one ring, +44 (0)20 7958 5015 is not a fax number but is the telephone number of Collete Fardoe, of Hobsons PLC who are the genuine company at 42 Adler Street, London and the numbers +44 (0)20 7958 7058 and +44 (0)20 7958 7074 both report as non-existent on ringing. All this is clear, checkable evidence of fraud.

viii) WorldTrans Inc. are not registered at the UK 'Companies House' as a UK trading company. This is clear evidence that they are bogus.

ix) A search of the Financial Services Authority (FSA) database shows that theres is no registration in the UK for WorldTrans Inc. which they would have to have to trade legally in the financial area. This is clear evidence that they are bogus.

x) A Google search for "WorldTrans Inc." shows no internet presence for these fraudsters.

The above evidence clearly demonstrates beyond any doubt that the WorldTrans Inc. zombie botnet hosted website has been set up by fraudsters purely for the purpose of deception and spamvertising an illegal job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

WorldTrans Inc. Fraudsters - current hosting details

Current Main Domains, Hosts and Registrars

Domain

worldt.st

Registrar

Nic.st (27-Apr-2008)

Nameserver Host Network

PoundHost Internet Services Ltd

Botnet Nameserver Host IPs

85.234.155.103

Nameserver Domains

Domain

modecox.com

Registrar

REGISTER.COM, INC. (01-Apr-2008)

Please notify me of any other current domains used by this criminal.

DNS Data (worldt.st)
How I am searching:

Searching for worldt.st A record at m.root-servers.net [202.12.27.33]: Got referral to SUNIC.SUNET.SE. (zone: st.)
Searching for worldt.st A record at SUNIC.SUNET.SE. [192.36.125.2]: Got referral to ns1.modecox.com. (zone: worldt.st.)
Searching for worldt.st A record at ns1.modecox.com. [85.234.155.103]: Reports worldt.st. Response:

Domain	Type	Class	TTL	Answer
worldt.st.	A	IN	1800	142.177.231.194
worldt.st.	A	IN	1800	77.81.1.134
worldt.st.	A	IN	1800	85.217.201.213
worldt.st.	A	IN	1800	89.114.134.3
worldt.st.	A	IN	1800	92.36.246.253
worldt.st.	NS	IN	1800	ns2.modecox.com.
worldt.st.	NS	IN	1800	ns1.modecox.com.
ns1.modecox.com.	A	IN	1800	85.234.155.103
ns2.modecox.com.	A	IN	1800	83.80.50.10

Looking up at the 2 worldt.st parent servers:

Zombie Botnet Nameserver	Botnet Nameserver 'A' Records (Zombie Site Host IPs)
ns1.modecox.com [85.234.155.103]	142.177.231.194 77.81.1.134 85.217.201.213 89.114.134.3 92.36.246.253
ns2.modecox.com [83.80.50.10]	Timeout - Fake nameserver, (never resolves).

The data shows a standard 5-IP site hosting zombie botnet where the nameserver ns1.modecox.com hosted by PoundHost Internet Services Ltd on IP 85.234.155.103 is acting as a zombie botnet controller 'herding' the rotating zombies, (as determined by RDNS), in the 'A' records list which are hosting the fraud site (as determined by TRACERT).

Web Page setup 29th. April 2008