Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by rosanerofan Tue May 03, 2011 10:40 am
Hello everybody
I'm Davide from Italy and my business is to sell wine. At the end of march I received by e-mail from Singapore a request about wine. The e-mail is arrived from this e-mail account: [email protected]
When I replied at this e-mail I always received an error and I found that the original e-mail was: [email protected]

Today this contact send me an e-mail from [email protected]
I have some doubts now, because he's asking me to send to Singapore some samples.
Somebody can help me to know if it's a scam or not ?
Thanks in advance

Davide
Advertisement

by GomerPyle Tue May 03, 2011 11:30 am
Welcome to Scamwarners rosanerofan

You haven't provided a lot of detail but that's enough

Have you visited the website ?

http://www.winefriends.info/

It's the worst website I've ever seen - and I've seen some bad ones. It's also less than a week old.

There even appears to be a picture of a sick person in a hospital bed there.

I tried viewing the pages by magnifying them but they are low resolution and very poor quality and cannot be viewed.

Domain ID:D37806466-LRMS
Domain Name:WINEFRIENDS.INFO
Created On:28-Apr-2011 01:42:34 UTC
Last Updated On:28-Apr-2011 01:42:35 UTC
Expiration Date:28-Apr-2012 01:42:34 UTC
Sponsoring Registrar:GoDaddy.com Inc. (R171-LRMS)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CR81632734
Registrant Name:Charles Tidswell
Registrant Organization:
Registrant Street1:62 Circular Road
Registrant Street2:
Registrant Street3:
Registrant City:Singapore
Registrant State/Province:Singapore
Registrant Postal Code:049416
Registrant Country:SG
Registrant Phone:+65.98383849
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:<Removed to protect from spammers>
Admin ID:CR81632736
Admin Name:Charles Tidswell
Admin Organization:
Admin Street1:62 Circular Road
Admin Street2:
Admin Street3:
Admin City:Singapore
Admin State/Province:Singapore
Admin Postal Code:049416
Admin Country:SG
Admin Phone:+65.98383849
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:<Removed to protect from spammers>
Billing ID:CR81632737
Billing Name:Charles Tidswell
Billing Organization:
Billing Street1:62 Circular Road
Billing Street2:
Billing Street3:
Billing City:Singapore
Billing State/Province:Singapore
Billing Postal Code:049416
Billing Country:SG
Billing Phone:+65.98383849
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:<Removed to protect from spammers>
Tech ID:CR81632735
Tech Name:Charles Tidswell
Tech Organization:
Tech Street1:62 Circular Road
Tech Street2:
Tech Street3:
Tech City:Singapore
Tech State/Province:Singapore
Tech Postal Code:049416
Tech Country:SG
Tech Phone:+65.98383849
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:<Removed to protect from spammers>
Name Server:NS71.DOMAINCONTROL.COM
Name Server:NS72.DOMAINCONTROL.COM


It would be foolsih to waste time on anyone who gives you a link to such a poorly produced website.

Non-EU citizens should go here to find out about obtaining a visa to work as an au pair in the UK
http://www.ukvisas.gov.uk/en/doineedvisa/
Whenever payment is requested by Western Union you're dealing with a scammer
by rosanerofan Tue May 03, 2011 12:39 pm
thanks for the reply. I checked the register file of winefriends.info and I saw that the domain was created last week.

This is the e-mail header:


From - Tue May 3 15:52:38 2011
X-Account-Key: account3
X-UIDL: 1304430725.23527.mxavas1.ad.aruba.it,S=1346
X-Mozilla-Status: 0003
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <[email protected]>
Delivered-To:
Received: (qmail 23522 invoked by uid 89); 3 May 2011 13:52:05 -0000
Received: by simscan 1.2.0 ppid: 23143, pid: 23449, t: 0.3817s
scanners:none
Received: from unknown (HELO sg2plwbeout19-2.prod.sin2.secureserver.net) (182.50.144.36)
by mxavas1.ad.aruba.it with SMTP; 3 May 2011 13:52:05 -0000
Received: (qmail 14609 invoked from network); 3 May 2011 13:51:51 -0000
Received: from unknown (HELO localhost) (182.50.144.112)
by sg2plwbeout19-2.prod.sin2.secureserver.net with SMTP; 3 May 2011 13:51:51 -0000
Received: (qmail 14771 invoked by uid 99); 3 May 2011 13:51:51 -0000
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
X-Originating-IP: 220.255.2.156
User-Agent: Web-Based Email 5.4.06
Message-Id: <20110503065151.b167c59b4415e9226cbdbc32a3d1617a.1cdb807510.wbe@email19.asia.secureserver.net>
From: <[email protected]>
To:
Subject: To <name>
Date: Tue, 03 May 2011 06:51:51 -0700
Mime-Version: 1.0
X-Spam-Rating: mxavas1.ad.aruba.it 1.6.2 0/1000/N
Last edited by Michael on Tue May 03, 2011 2:36 pm, edited 1 time in total. Reason: Removal personal data

Who is online

Users browsing this forum: Bing [Bot], ClaudeBot, Google [Bot] and 25 guests