Stop 419 Advance Fee Fraud: March 2021

Wednesday, March 31, 2021

npzholding.com (Russian Oil Scan)

For further information on the Russian Oil Scam, please Read Russian Oil Scam Fraud, Identifying Scammers and Scam Websites! and Never Wire Money to Strangers

Also Read http://www.gazprom-neft.com/company/con ... k/warning/

The Port of Rotterdam Cyber Security Centre posted details on the fake oil storage offers, Please Read...
https://ferm-rotterdam.nl/nl/nieuws/cau ... sh-version
https://ferm-rotterdam.nl/nl/nieuws/cau ... od-be-true
http://ferm-rotterdam.nl/nl/blacklist

As an example of what you could be dealing with, here are West African scammers that has been identified as doing oil scams from Russia:

Richard Addo (2010 president of The National Union of Ghanaian Students in Russia - NUGS-Russia) and Stanley Uzeh

Mbega Steven Etienne, sentenced to 5 years in prison in Russia

Adeniyi Akinnuwa

Nelson Adesina Tosin and Olajumoke Mayaki

Alain Blaise Atah Tcheguie

Mbah Eugene Awah

Chukwunagorom Richard Chijioke

Dereak Graf Mela

Ilori Evans Johnson

Otuvie Otuojano Patrick

Momoh Jeffery Fidelis

Adebola Olayeye

Kingston Young/Obi

Details: List of Cameroon Scammers and List of Nigerian Scammers

Npz-Holding Refinery
Legal Address: 142703, Moscow region, Leninsky district, Vidnoye, Belokamennoye highway, 20, room 1009
Tel: +7 495-208-7634
Fax: +7 495-208-7639
INN: 7840465100 KPP:500301001
Email: export@npzholding.com
Website: https://npzholding.com/

Scam Domain - Read Identifying Scam Websites

Domain Name: NPZHOLDING.COM
Registry Domain ID: 2599155370_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-03-19T22:10:00Z
Creation Date: 2021-03-19T18:29:16Z
Registry Expiry Date: 2023-03-19T18:29:16Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.NAMECHEAPHOSTING.COM
Name Server: DNS2.NAMECHEAPHOSTING.COM

Wednesday, March 24, 2021

lawyens.com / Fake Law Firm

This is a fake law firm scam site. Fake job scammers use them to collect fake visa, medical examination, security fees, work permit and other immigration fees for fake jobs mainly in the United Emigrates, Australia, United Kingdom and Canada. No real employer would ask you to pay money to a law firm for any reasons. Of course, no real employer ever asks you to pay money for any reasons. This scam legal firm websites are part of a fake job scam! There is no job! Do not send documents or money! If you are not interviewed face to face, in person, the job offer is Always a scam! If you are asked to pay fees for a visa or work permit or anything else, the job offer is a scam! No real company or embassy ever uses a free email address! Read Why Most Emails Offering Jobs Are Scams! to learn how to tell when a job offer is fake and Never Wire Money to Strangers! and Identifying Scam Websites! or click on the images below:

Hi,

Hope you are doing well !!!

Visa for Australia | Employer : DEMAX PTY LTD CORP PTY LTD

We confirm here that we are in receipt of your candidature for visa process. We would like to inform you that as per your employer we “Lawyens“ legal agency need to complete your visa process. We request you to call us to confirm the procedure in order to get all the process done.

We thank you in advance for giving an opportunity to serve you.

Warm Regards,
Team – Lawyens
Documentation Agency- Bar Council Reg.- WB-2009/2163

Contact:
Garima | +91 8009211551
Neeta | +91 7388436729
Vani | +91 7380635459
Mansi | +91 7460911481

Address: Temple Chambers, 6 Postal Office Street, Kolkata, West Bengal, 700001
Website: http://lawyens.com/, Email Us: info@lawyens.com,

This is a "legacy" domain which was registered by another company long ago. Godaddy sells them. Scammers buy and register them for their scams because, since the "created" date shows when the domain was first created by a legitimate company, the scammers can appear to be a longstanding company. However if you look at " updated" date you can see when the scam company actually started their scam. That will always be a recent date.

Scam Domain - Read Identifying Scam Websites

184.168.97.153
Domain Name: LAWYENS.COM
Registry Domain ID: 2201027164_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2021-02-04T16:33:40Z
Creation Date: 2017-12-17T17:18:02Z
Registry Expiry Date: 2021-12-17T17:18:02Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: 480-624-2505
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Name Server: NS13.DOMAINCONTROL.COM
Name Server: NS14.DOMAINCONTROL.COM

Sunday, March 21, 2021

transmwamiintl.com - Kelvin Essoa Nkoy (Gold Scam)

For further information on these Scams, please Read Trying to Make a Gold Deal with African Suppliers?, Identifying Scammmers and Scam Websites!, Never Wire Money to Strangersand All That Glitters Is NOT Gold

As an example of what you could be dealing with, here are some Gold scammers that have been identified:

Theophilus Wlah Johnson (Sierra Leone)

Alvin Msoffe (Tanzania)

Taofeek Oluwashola Kazeem Ajisafe & Mark Adijum Latif under arrest in Ghana

Frank Okatta , scamming from Uganda

Anolue Kenneth, currently in Cotonou, Benin

Amoussou Fabrice (Benin)

Donoumassou Stephane (Benin)

Eric Dangbé & Léger Zinsou (Benin)

Mohammad Dubadain Dukuray (Sierra Leone)

Kennedy Nhliziyo (Zambia)

https://transmwamiintl.com (Gold Scam)
TRANSMWAMI INTERNATIONAL LTD.
Nairobi Main Office
Vihiga Close, Off Vihiga Road,
Kileleshwa, Nairobi
P.O BOX 52793-00100 Nairobi-Kenya
Tel: +254 789 977 700/ +254 718 228 809/ +254 718 870 524
+254789977700/ +254718228809/ +254718870524
Uganda Branch Office
Plot 5825, Kironde Road,
Muyenga, Kampala- Uganda
Tel: +256 392 974 488/ +256 392 974 477
256392974488/ +256392974477
Congo DRC – Kinshasa
Tel: +243 999 977 700/ +243 844 497 700
243999977700 243844497700

.
transmwamiintl.com has been re-registered after being exposed as a scam in 2017
https://419advancefeefraud.blogspot.com ... -scam.html
Domain Name: TRANSMWAMIINTL.COM
Creation Date: 04-jan-2017
Expiration Date: 04-jan-2018
Registrant Name: KENNETH OTIENO
Registrant Phone: +254.716882139
Registrant Email: KENNETH@PMMCKENYA.CO.KE
(pmmckenya.co.ke (Gold scam) *Dead*

243999977700 is used here:
https://twitter.com/nkoy33
nkoy essoa kelvis @nkoy33 Businesman +243999977700 groupfnk.com

.
Please read this article in a Kenyan newspaper about Mr Kelvin Essoa Nkoy (Congolese) and Mr Kayombya Gormon alias Timothy Mureithi (Ugandan) http://www.kenya24news.com/kenya/congol ... 44642-news

https://nairobitimez.co.ke/2019/10/18/r ... is-lifted/
The accused is charged alongside Cameronian Kelvis Essoa Nkoy and Benson Muhanji.
They are accused on December 19 , 2016 in Nairobi ,jointly with others not before court obtained USD 570,00 equivalent to Ksh57 million from Prakash Robert Deeplal Baichan by falsely pretending they were in position to ship 435 kilogram of gold from Jomo Kenyatta International Airport in Nairobi to Dubai International Airport on behalf of Prakash .
Prosecution accuses the trio that on December 20,2016 in Nairobi County , with intent to defraud with others not before court obtained USD51,100 from Robert by falsely pretending they were in position to ship for him 125 kilograms of gold from JKIA in Nairobi to Dubai international airport in united Arab Emirates a fact they to be false.
The three accused persons are out on a cash bail of Kshs500,000 each.
Sikanda has another havw similar gold fraud case pending in different courts.
He is another charge alongside flamboyant businessman Jared Otieno, lawyer Munzala Rumili, Philip Nahashon Aroko , Roy Shirekuli and Ugandan Kayombya Gorman alias Timothy Mureithi. They are accused of defrauding investor Samir Entorno (Brazilian national) Ksh. 23 million pretending they would ship for 8 kilograms of gold from Dubai.
The five are alleged to have committed the offences on diverse dates between May 5 and June 9,2018 at different places in Nairobi county jointly with others not before court.
Kayomba Gorman alias Timothy Mureithi, a Ugandan is being sought by police after he jumped bail and warrant of arrest was issued against him.
Prosecution alleges that the transaction was carried out at Aroko’s company, AVAALA Mentals limited.

254718870524 was used to register jezreelholdings.com (Gold Scam) https://www.stop419scams.com/viewtopic.php?t=10078
256392974477 and 256392974488 where both used with hatytaholdings.com (Gold Scam) https://www.stop419scams.com/viewtopic.php?t=10094

Same scammer, different name...
DERRICK ODHIAMBO
Phone: +254.0716882139
kenysantoz@hotmail.com
.
Jared Otieno out on Sh1.5m bail in fake gold scam

198.23.62.74
Domain Name: TRANSMWAMIINTL.COM
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2020-04-16T09:04:08Z
Creation Date: 2019-04-16T08:58:12Z
Registry Expiry Date: 2021-04-16T08:58:12Z
Name Server: NS243.KENYAWEBEXPERTS.COM
Name Server: NS244.KENYAWEBEXPERTS.COM
Registrant Name: kenneth otieno
Registrant Organization: careertimes
Registrant Street: 146
Registrant City: nairobi
Registrant State/Province: nairobi
Registrant Postal Code: 00100
Registrant Country: KE
Registrant Phone: +254.0716882139
Registrant Email: kenysantoz@gmail.com
transmwamiintl.com IN SOA
server: dns1.supremepanel.com
email:  cpanel@resellerspanel.com

ATTACHMENTS

Wednesday, March 17, 2021

Scammers Impersonating SYSCO International / Fake Job Scam Fraud

These scammers willl interview you by telephone several times, and then with no face to face, personal interview, offer you a job. They take the name of a legitimate company registered in the U.K or Australia. They also take over a domain that has been previously registered but has expired. The domain information shows when the domain was originally registered which can be many years ago. So, the domain creation date shows the date it was originally registered. If you look at the updated date though, you can see that the scammers just started to use it. The scammers do this so that they can appear to be in business for a long time. Many scam advisors look at the date when a domain is registered to decide if its is a scam domain.

The scammers will then send you to another fake company that impersonates an Indian employee verification company. That scam company will email or call you and ask for money for document verification, then for a visa or a security deposit, etc. If you make the mistake of paying them they well simply ask for money for some fake fee.

Do not pay! There is no job! It is just a scam.

These scammers have run this scam many times before. Click on the links below to see the other companies they have impersonated.:

Read
http://www.stop419scams.com/viewtopic.php?f=9&t=6794
https://www.consumercomplaints.in/xnet- ... d-c2210114
https://www.consumercomplaints.in/sesl- ... m-c2123632
http://www.stop419scams.com/viewtopic.php?t=6037
https://www.consumercomplaints.in/dove- ... d-c2047849
https://www.consumercomplaints.in/dae-s ... m-c2009500
https://www.consumercomplaints.in/vbm-s ... r-c1958199
https://www.consumercomplaints.in/keh-s ... d-c1966635
https://www.consumercomplaints.in/tech- ... s-c1577119
https://www.consumercomplaints.in/greec ... r-c1612993
https://www.consumercomplaints.in/unipo ... r-c1432887
https://www.scamwarners.com/forum/viewt ... 4&t=137606
https://www.consumercomplaints.in/john- ... n-c1778362
https://www.cybercrimecomplaints.in/thr ... -letter-4/
https://www.consumercomplaints.in/eye-2 ... y-c1709616
https://www.consumercomplaints.in/dura- ... m-c1640420
https://www.scamwarners.com/forum/viewt ... 4&t=137606
https://www.scamwarners.com/forum/viewt ... 4&t=171427
https://www.consumercomplaints.in/jg-li ... 1#c3434172
https://www.stop419scams.com/viewtopic.php?f=9&t=7797
https://www.stop419scams.com/viewtopic.php?f=9&t=8553
https://www.stop419scams.com/viewtopic.php?t=9125
https://www.stop419scams.com/viewtopic.php?t=9092

They have also used these fake domain names
hpclegal.com
quipservices.com
netosolutions.com
bluesealltd.com
ifalegal.com
atelimited.com
gembaltd.com
dacelimited.com
cadalimited.com
slklegal.com
gklimited.com

SYSCO International
207 Kent Street Sydney NSW 2000
contact@syscolimited.com
www.syscolimited.com
+612 7228 6377

147.135.50.86
Domain Name: SYSCOLIMITED.COM
Registry Domain ID: 1892485843_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2021-02-20T08:37:29Z
Creation Date: 2014-12-26T14:14:18Z
Registry Expiry Date: 2021-12-26T14:14:18Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: 480-624-2505
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Name Server: NS315.OWNMYSERVER.COM
Name Server: NS316.OWNMYSERVER.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/

Monday, March 15, 2021

Scammers Impersonating Inter-Continental Hospital / Fake Job Scam Fraud

This is a fake job scam! There is no job! Do not send documents or money! If you are not interviewed face to face, in person, the job offer is Always a scam! If you are asked to pay fees for a visa or work permit or anything else, the job offer is a scam, even if they say they will reimburse you! No real company or embassy ever uses a free email address! Read Why Most Emails Offering Jobs Are Scams! to learn how to tell when a job offer is fake and Never Wire Money to Strangers! and Identifying Scam Websites! or click on the images below:

Read also Scam Alert: Fake UAE Job Offers!

There are many West African scammers in UAE. Here is a Cameroonian fake job scammer in Dubai who has been identified as Eugene Armand Essombe. He is an example of who you could be dealing with and exactly how the scam works:

Here are a list of more Cameroon scammers operating in the UAE.

Tamanji Martin Suh

Fongon Dominic Tah

Denco White

Mbua Elvis Lyonga

Tebeck Ransome Ajeck

Eugene Armand Essombe

List of identified Cameroon Scammers

Inter-Continental Hospital
+971 5239 56024
www.interhospitaluae.com

Scam Domain - Read Identifying Scam Websites

185.174.174.220
Domain Name: INTERHOSPITALUAE.COM
Registry Domain ID: 2581991003_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.name.com
Registrar URL: http://www.name.com
Updated Date: 2021-01-01T06:23:14Z
Creation Date: 2021-01-01T06:23:14Z
Registry Expiry Date: 2022-01-01T06:23:14Z
Registrar: Name.com, Inc.
Registrar IANA ID: 625
Registrar Abuse Contact Email: abuse@name.com
Registrar Abuse Contact Phone: 7202492374
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NS1MTW.NAME.COM
Name Server: NS2JQZ.NAME.COM
Name Server: NS3QTY.NAME.COM
Name Server: NS4CJP.NAME.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/

Sunday, March 14, 2021

Scammers Impersonating Amuna School / Fake Job Scam Fraud

Read also Scam Alert: Fake UAE Job Offers!

There are many West African scammers in UAE. Here is a Cameroonian fake job scammer in Dubai who has been identified as Eugene Armand Essombe. He is an example of who you could be dealing with and exactly how the scam works:

Here are a list of more Cameroon scammers operating in the UAE.

Tamanji Martin Suh

Fongon Dominic Tah

Denco White

Mbua Elvis Lyonga

Tebeck Ransome Ajeck

Eugene Armand Essombe

List of identified Cameroon Scammers

Amuna School
P.O. Box 413845, Al Hebiah Fourth, Sports City, Dubai, UAE
+971588595831
admissions@amunaschooldubai.com
www.amunaschooldubai.com

Scam Domain - Read Identifying Scam Websites

192.64.117.57
Domain Name: AMUNASCHOOLDUBAI.COM
Registry Domain ID: 2590744227_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2021-02-11T19:07:39Z
Creation Date: 2021-02-11T19:07:21Z
Registry Expiry Date: 2022-02-11T19:07:21Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.NAMECHEAPHOSTING.COM
Name Server: DNS2.NAMECHEAPHOSTING.COM

Scammers Impersonating White Horse Canada Ltd / Fake Job Scam Fraud

White Horse Canada Ltd
White Horse Oil and Gas Ltd
125, Central Square,New York
+1 431 800 3686
complain@whitehorsecanada.com
info@whitehorsecanada.com
www.whitehorsecanada.com

Scam Domain - Read Identifying Scam Websites

162.213.251.80
Domain Name: WHITEHORSECANADA.COM
Registry Domain ID: 2565323216_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-10-21T01:23:58Z
Creation Date: 2020-10-12T13:33:15Z
Registry Expiry Date: 2021-10-12T13:33:15Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DNS1.NAMECHEAPHOSTING.COM
Name Server: DNS2.NAMECHEAPHOSTING.COM

Scammers Impersonating Naspio Construction / Fake Job Scam Fraud

Naspio Construction Inc.
Naspio Group
Avenue Orly H9P 1G1 Montreal Dorval, QC Canada
+1 (514) 448-1257 / +1 (514) 448-1287
official@naspio.com
Mr. William Braston (Lead HR Manager)
HR Department ( International)
www.naspio.com

Scam Domain - Read Identifying Scam Websites

72.167.191.69
Domain Name: NASPIO.COM
Registry Domain ID: 2549314180_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2020-07-28T19:17:43Z
Creation Date: 2020-07-28T19:17:43Z
Registry Expiry Date: 2021-07-28T19:17:43Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: 480-624-2505
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Name Server: NS57.DOMAINCONTROL.COM
Name Server: NS58.DOMAINCONTROL.COM