Email Spam Filter:
jwSpamSpy
Try it for free!


About spam / "419" / Blog
jwSpamSpy
Recent spam domains
Spam domain blacklist

Software
Links
joewein.de
joewein.net
Contact
Google

 

Job offer spam: Planett-design.com / Artur Vovan (FRAUD)

Planett-design.com is fake webdesign company whose only purpose is to recruit job seekers to trick them into assisting in criminal fraud. It is part of the same series of fraudulent job offers as alpenantique.com, ppharm.com, etc. The website is ripped off from a real webdesign company in the UK.

With these fraudulent job offers, the "employee" may receive an illegal fund transfer from a bank account or PayPal account that was the target of a "phishing" attack. Or he may collect a payment from an unsuspecting eBay-buyer who will never receive the goods, while the "employee" already sends the money to virtually untraceable criminals in another country.

The key to cracking this type of crime, other than warning the public, is to monitor these crimes while they are in progress, before the money has disappeared.

Here's the initial spam to lure in job seekers:

From: <christopheberton11@yahoo.it>
To: <emailaddress>
Sent: Sunday, 19 December, 2004 7:00
Subject: Hello Friends


Hello emailaddress

You can earn from $300 to $2000 per week easily !

You shouldn't invest or purchase anything, it will not cost even $1 for you You should just spend some time, about 1-2 hours per day and even in the first week you will start to receive your earned money.
If you are interested in that, just write us to the following e-mail artur@freelance-biz.info . It is obligatory to indicate in the letter what country are you from and we will send you a detailed description how you can earn those money.

Sincerely yours, Artur Vovan

Your mail is emailaddress
Your fax

h xcvxc2gv3df32gh3h32df3g2s3d2f3d2f3s2fx.c0v32fds3g3sd2gfs3d2g3s2dg32sg32s

When contacted at artur@freelance-biz.info, the scammer replied:

Hello firstname,

Sunday, December 19, 2004, 12:24:05 AM, you wrote:


XY> please send me more information.

XY> I live in country.

Thank you for the interest to our proposal.

Our company www.planett-design.com produces different programs, web sites and scripts for the Internet and a lot of other things. We constantly seek more convenient kinds of payment for our clients. A lot of our clients want to pay for the services through payment system www.paypal.com, it is the best and the easiest way for the clients to pay for our services, but unfortunately www.paypal.com company refuses to work with the eastern Europe countries and we seek a representative in one of the countries with which paypal works.
We will offer you 20% from the money turnover on your paypal account, in average the turnover totals about $1500-4000 per week and you can easily earn $300-800 per week. Our company develops very fast and money turnover will constantly raise.
If you are interested we are waiting for your reply and we'll send you more detailed description how all of it will be working.

In the future please use the following e-mail artur@planett-design.com for correspondence.

Best regards, Artur Vovan

--
Best regards,
Artur mailto:artur@planett-design.com

Here is the WHOIS record for the domain:

     Registrant:
      Artur Vovan
      6 Okipna ul
      Kyiv, NA 02002
      UA
     
      Domain name: PLANETT-DESIGN.COM
     
      Administrative Contact:
         Vovan, Artur  kunihikosim@yahoo.de
         6 Okipna ul
         Kyiv, NA 02002
         UA
         +3.800445176248
      Technical Contact:
         Polyakov, Alex  sales@bbasafehosting.com
         1105 Terminal way
         Suite #202
         Reno, NV 89502
         US
         +1.8886164598    Fax: +1.3202102398
     
     
     
      Registrar of Record: TUCOWS, INC.
      Record last updated on 17-Dec-2004.
      Record expires on 17-Dec-2005.
      Record created on 17-Dec-2004.
     
      Domain servers in listed order:
         NS1.SAFEDNS.BIZ   
         NS2.SAFEDNS.BIZ   
The domain was registered two days before the job advertisement went out. As in most of the other fraudulent job offers, the bogus website is based on a real website, of which it is a rip-off. Compare these passages:

The fake...
...versus the original
Planett-Design specialise in web sites that are more than online brochures. Our database and programming technology enables your web site to really work for you. After all, whilst the Web is great at providing information, its real value lies in automation that gives visitors what they need, when they need it. Whatever the services that you would like to provide to your customers, Planett-Design can probably provide a solution.
http://www.planett-design.com/Applications.htm
T-Soft specialise in web sites that are more than online brochures. Our database and programming technology enables your web site to really work for you. After all, whilst the Web is great at providing information, its real value lies in automation that gives visitors what they need, when they need it. Whatever the services that you would like to provide to your customers, T-Soft can probably provide a solution.

http://www.tsoft.co.uk/applications.htm

If you have been recruited by "Planett-Design", contact us!


Anti-Spam Resources:
jwSpamSpy is our spam filter (free evaluation version available for download)
Anti-spam domain blacklist – list of domains that I refuse to receive mail from
Recent additions to domain blacklist (with whois details)
"419" scam sender/contact addresses ("Nigeria connection" address book)
DNS-based IP and domain name blacklists
IP address ranges
Dynamic IP addresses (700 KB!)
Name server / Registrar combinations
Free email providers
AOL dial-up address ranges and mail servers
How to trace senders of spam
Frequently asked questions (FAQ)
Lookup an IP address on blacklists (http://dnsbl.net.au/lookup/)

Clueless virus filters spam innocent third parties
Challenge and Response spam filters: A selfish idea for selfish times

ShareYourExperiences.com spammers
Smyrnagroup spammers (in German)
Kaplan College spam
Stock Price Manipulation Spam ("Pump & Dump")
What's the deal with "OEM software"?
'Phishing' for your wallet
Job spam for payment processors
Spam phone numbers ("diploma" spam, etc.)
"Joe job" information

Link exchange offer spam
Getting creative with spam
Link exchange spam: allcarpictures.com

Xenophobia, Spam and Viruses: The "German Spam" (Sober.H)
Sober.H – Racist German email spam spread by virus (in German)

"Joe job" against joewein.de
Porn spam: watchsound.com
Porn spam: hotsalza.com
Name servers used by spammers: joker.com
Rogue name servers: mediadreamland.com
Rogue name servers: airmaramba.biz
Rogue name servers: bonafidecash.com
Rogue name servers: maileasy.biz

Browser hijacking: heretofind.com

Computer Viruses