Get Paid Forum - Get Paid Discussion > Warning!! GMTech/Veraline upto no good again.

Full Version: Warning!! GMTech/Veraline upto no good again.

Get Paid Forum - Get Paid Discussion > Get Paid To Programs > Complaints

Zombie Master

Jul 20 2003, 06:47 PM

Okay. I got spammed by someone on this forum, they hit my spamtrap, plus my PTR email account. I decided to email the spam report addy for that site using another email address. And guess what I found, a known person who is known to be a fraud. None other than GM Tech.

CODE

?by mail1.ihug.com.au with SMTP; 20 Jul 2003 23:24:43 -0000
Received: from washdc3-ar10-4-62-168-116.washdc3.dsl-verizon.net (local) [4.62.168.116]
 by grunt22.ihug.com.au with smtp (Exim 3.35 #1 (Debian))
 id 19eNXm-0007Ub-00; Mon, 21 Jul 2003 09:24:43 +1000
Received: From me (unverified [me]) by me [me]
(SKRTgan SMTP Receiver v6.0y) with SMTP id <local>;
me
Reply-To: <reply@mail.com>
From: "Tim Norris"<reply@mail.com>
Subject: Thanks, Tim Norris. ? ? ? ?DCMXQHZRBE
Date: Mon, 21 Jul 2003 03:24:26 +0400
MIME-Version: 1.0
Content-Type: text/plain;
 charset="Windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <E19eNXm-0007Ub-00@grunt22.ihug.com.au>

Hello, dear e-businessmen!

We want to introduce you the new opportunities of e-business. We can provide you the new service, that fits better with you.
We can offer you anonumous Cirrus debit card in offshore bank. You can fund your debit card in our bank 24 hours a day and 7 days a week with E-Gold, EVOcash, E-Bullion, NetPay, Bank Wire, MoneyGram, Western Union.
Also you can withdraw funds from your account with E-Gold, EVOcash, E-Bullion, NetPay, MoneyGram, Bank Wire and Western Union.
We can create Virtual Visa card for you and provide personal address in Spain for you to receive checks, Western Union, MoneyGram and Bank Wires.
We are bank so we provide investment services.
There are 2 rules:
- you can make $2000 deposit (or more) and you will be able to get your debit card for free
- you can receive interests for your account balance

Advantages of our system:
- instant funding with the most popular e-currencies
- instant debit card funding
- instant virtual card funding
- instant internal transfers
- receiving Western Union, MoneyGram, Checks, Bank Wires directly to your account
- sending Western Union, MoneyGram, Checks, Bank Wires from your account
- our system works 24 hours a day and 7 days a week
- we have great support team wihich is available in ICQ 24/7
- investment opportunity & exchange provider service
- full control of your money and the high level security
- proftable referral program

Click <a href="http://211.160.14.47">here</a> to find out and sign up!

Best wishes,
Wizard Finance S. A.

BWZJGXFGWDTVNJNJNIPRIVNOBUJSFKWZESSGZG

That relays to wizard-finance.com.

CODE

Registrant:
?PleaseFillYourName admin@wizard-finance.com +598.29025627
?Wizard Finance S A
?Florida srt 1485
?Montevideo,NotApplicable,UY 11000

Domain Name:wizard-finance.com
Record last updated at 2003-07-19 20:10:52
Record created on 2003/7/19
Record expired on 2004/7/19

Domain servers in listed order:
?ns1.ispvds.com 66.111.38.181 ? ? ?
?ns2.ispvds.com 209.170.123.62 ? ?

Administrator:
?Alex Fisher admin@wizard-finance.com +598.29025627
?Wizard Finance S. A.
?Florida srt 1485
?Montevideo,Not Applicable,UY 11000

Technical Contactor:
?Alex Fisher admin@wizard-finance.com +598.29025627
?Wizard Finance S. A.
?Florida srt 1485
?Montevideo,Not Applicable,UY 11000

Billing Contactor:
?1240 admin@wizard-finance.com +598.29025627
?Wizard Finance S. A.
?Florida srt 1485
?Montevideo,Not Applicable,UY 11000

The email I got back:

CODE

Return-Path: <12321@wizard-finance.com>
Received: (qmail 2303 invoked from network); 21 Jul 2003 00:08:41 -0000
Received: from grunt22.ihug.com.au (203.109.249.142)
?by mail3.ihug.com.au with SMTP; 21 Jul 2003 00:08:41 -0000
Received: from (wmstock.biz) [66.111.33.36]
 by grunt22.ihug.com.au with esmtp (Exim 3.35 #1 (Debian))
 id 19eOEL-0002DC-00; Mon, 21 Jul 2003 10:08:41 +1000
Received: from wizard-finance.com (localhost [66.111.33.36] (may be forged))
 by wmstock.biz (8.12.9/8.12.8) with ESMTP id h6L08bMv012737
 for <x>; Mon, 21 Jul 2003 00:08:38 GMT
From: "12321" <12321@wizard-finance.com>
To: "" <x>
Subject: Re: Spammer
Date: Mon, 21 Jul 2003 00:08:37 +0000
Message-Id: <20030721000813.M23489@wizard-finance.com>
In-Reply-To: <008101c34f1b$542c3340$6937ddcb@x>
References: <008101c34f1b$542c3340$6937ddcb@x>
X-Mailer: Open WebMail 2.10 20030617
X-OriginatingIP: 66.111.59.80 (12321)
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----=OPENWEBMAIL_ATT_0.575960435279743"

This is a multi-part message in MIME format.

------=OPENWEBMAIL_ATT_0.575960435279743
Content-Type: text/plain;
 charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by wmstock.biz id h6L08bMv012737

Thanks for your repot.

His account is already frozen.

On Mon, 21 Jul 2003 09:32:01 +0930, wrote
> The site it goes to redirects to your site. It also asks that you put i=
n ref number : F016522=20
> =A0=20
> herehttp://211.160.14.47=20
> =A0=20
> =A0=20
> Return-Path: <reply@mail.com>
> Received: (qmail 6877 invoked from network); 20 Jul 2003 23:31:50 -0000
> Received: from grunt22.ihug.com.au (203.109.249.142)
> =A0 by mail1.ihug.com.au with SMTP; 20 Jul 2003 23:31:50 -0000
> Received: from cpe-66-168-116-14.ma.charter.com (local) [66.168.116.14]=
=20
> =A0by grunt22.ihug.com.au with smtp (Exim 3.35 #1 (Debian))
> =A0id 19eNef-0001Jl-00; Mon, 21 Jul 2003 09:31:49 +1000
> Received: From me (unverified [me]) by me [me]
> =A0(SKRTgan SMTP Receiver v6.0y) with SMTP id <local>;
> =A0me
> Reply-To: <reply@mail.com>
> From: "Tim Norris"<reply@mail.com>
> Subject: Thanks, Tim Norris.=A0=A0=A0=A0=A0=A0=A0 QZSJUSSHDY
> Date: Mon, 21 Jul 2003 03:31:31 +0400
> MIME-Version: 1.0
> Content-Type: text/plain;
> =A0charset=3D"Windows-1250"
> Content-Transfer-Encoding: 7bit
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 5.50.4522.1200
> X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
> Message-Id: <E19eNef-0001Jl-00@grunt22.ihug.com.au>=20
> =A0=20
> Hello, dear e-businessmen!=20
> =A0=20
> We want to introduce you the new opportunities of e-business. We can pr=
ovide you the new service, that fits better with you.
> We can offer you anonumous Cirrus debit card in offshore bank. You can =
fund your debit card in our bank 24 hours a day and 7 days a week with E-=
Gold, EVOcash, E-Bullion, NetPay, Bank Wire, MoneyGram, Western Union.
> Also you can withdraw funds from your account with E-Gold, EVOcash, E-B=
ullion, NetPay, MoneyGram, Bank Wire and Western Union.
> We can create Virtual Visa card for you and provide personal address in=
Spain for you to receive checks, Western Union, MoneyGram and Bank Wires.
> We are bank so we provide investment services.
> There are 2 rules:
> - you can make $2000 deposit (or more) and you will be able to get your=
debit card for free
> - you can receive interests for your account balance=20
> =A0=20
> Advantages of our system:
> - instant funding with the most popular e-currencies
> - instant debit card funding
> - instant virtual card funding
> - instant internal transfers
> - receiving Western Union, MoneyGram, Checks, Bank Wires directly to yo=
ur account
> - sending Western Union, MoneyGram, Checks, Bank Wires from your accoun=
t
> - our system works 24 hours a day and 7 days a week
> - we have great support team wihich is available in ICQ 24/7
> - investment opportunity & exchange provider service
> - full control of your money and the high level security
> - proftable referral program=20
> =A0=20
> Click <a href=3D"herehttp://211.160.14.47">here</a> to find out and sig=
n up!=20
> =A0=20
> Best wishes,
> Wizard Finance S. A.
> =A0
> GFREHGZLKXBFNBPVFOFDYPOXWRRXXLDNFDMUXQ=20
> =A0=20
> =A0

--=20
Open WebMail Project (http://openwebmail.org)

------=OPENWEBMAIL_ATT_0.575960435279743
Content-Type: text/html;
 charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<HTML>
<HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" http-equiv=3DContent-Type>
<META content=3D"Open WebMail 2.10 20030617" name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>

Thanks for your repot.

His account is already frozen.<=
/p>

On Mon, 21 Jul 2003 09:32:01 +0930, wr=
ote
 > The site it goes to redirects to=
your site. It also asks that you put in ref number : F016522=20
 > =A0=20
 > <a href=3D"http://211.160.14.47"=
>here</a">http://211.160.14.47</a>=20
 > =A0=20
 > =A0=20
 > Return-Path: <<a href=3D"mail=
to:reply@mail.com">reply@mail.com</a>>
 > Received: (qmail 6877 invoked from network); 20 Jul 2003 23:31:5=
0 -0000
 > Received: from grunt22.ihug.com.au (203.109.249.142)
 > =A0 by mail1.ihug.com.au with SMTP; 20 Jul 2003 23:31:50 -0000
 > Received: from cpe-66-168-116-14.ma.charter.com (local) [66.168.=
116.14]=20
 > =A0by grunt22.ihug.com.au with smtp (Exim 3.35 #1 (Debian))
 > =A0id 19eNef-0001Jl-00; Mon, 21 Jul 2003 09:31:49 +1000
 > Received: From me (unverified [me]) by me [me]
 > =A0(SKRTgan SMTP Receiver v6.0y) with SMTP id <local>;
 > =A0me
 > Reply-To: <<a href=3D"mailto:reply@mail.com">reply@mail.com</=
a>>
 > From: "Tim Norris"<<a href=3D"mailto:reply@mail.com=
">reply@mail.com</a>>
 > Subject: Thanks, Tim Norris.=A0=A0=A0=A0=A0=A0=A0 QZSJUSSHDY
 > Date: Mon, 21 Jul 2003 03:31:31 +0400
 > MIME-Version: 1.0
 > Content-Type: text/plain;
 > =A0charset=3D"Windows-1250"
 > Content-Transfer-Encoding: 7bit
 > X-Priority: 3
 > X-MSMail-Priority: Normal
 > X-Mailer: Microsoft Outlook Express 5.50.4522.1200
 > X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
 > Message-Id: <<a href=3D"mailto:E19eNef-0001Jl-00@grunt22.ihug=
.com.au">E19eNef-0001Jl-00@grunt22.ihug.com.au</a>>=20
 > =A0=20
 > Hello, dear e-businessmen!</font=
>=20
 > =A0=20
 > We want to introduce you the new=
opportunities of e-business. We can provide you the new service, that fits=
better with you.
 > We can offer you anonumous Cirrus debit card in offshore bank. Y=
ou can fund your debit card in our bank 24 hours a day and 7 days a week wi=
th E-Gold, EVOcash, E-Bullion, NetPay, Bank Wire, MoneyGram, Western Union.
 > Also you can withdraw funds from your account with E-Gold, EVOca=
sh, E-Bullion, NetPay, MoneyGram, Bank Wire and Western Union.
 > We can create Virtual Visa card for you and provide personal add=
ress in Spain for you to receive checks, Western Union, MoneyGram and Bank =
Wires.
 > We are bank so we provide investment services.
 > There are 2 rules:
 > - you can make $2000 deposit (or more) and you will be able to g=
et your debit card for free
 > - you can receive interests for your account balance=20
 > =A0=20
 > Advantages of our system:
 > - instant funding with the most popular e-currencies
 > - instant debit card funding
 > - instant virtual card funding
 > - instant internal transfers
 > - receiving Western Union, MoneyGram, Checks, Bank Wires directl=
y to your account
 > - sending Western Union, MoneyGram, Checks, Bank Wires from your=
account
 > - our system works 24 hours a day and 7 days a week
 > - we have great support team wihich is available in ICQ 24/7
 > - investment opportunity & exchange provider service
 > - full control of your money and the high level security
 > - proftable referral program=20
 > =A0=20
 > Click <a href=3D"<a href=
=3D"http://211.160.14.47">here</a">http://211.160.14.47">here</a=
</a>> to find out and sign up!=20
 > =A0=20
 > Best wishes,
 > Wizard Finance S. A.
 > =A0
 > GFREHGZLKXBFNBPVFOFDYPOXWRRXXLDNFDMUXQ=20
 > =A0=20
 > =A0=20
 
 
 --=20
 Open WebMail Project (<a href=3D"http://openwebmail.org/" target=3D"_=
blank">http://openwebmail.org</a>)=20
 
 

</BODY>
</HTML>

------=OPENWEBMAIL_ATT_0.575960435279743--

Take note of the IP and host name here:

CODE

Received: from (wmstock.biz) [66.111.33.36]
by grunt22.ihug.com.au with esmtp (Exim 3.35 #1 (Debian))
id 19eOEL-0002DC-00; Mon, 21 Jul 2003 10:08:41 +1000

That IP belongs to an ISP which is known to host scam sites. I have been tracking all the scam/spam that I get in reguards to fake egold sites and such. They all end up leading back to that site there, or a site within Russia.

CODE

NetRange: ? 66.111.32.0 - 66.111.63.255
CIDR: ? ? ? 66.111.32.0/19
NetName: ? ?ASN-UNCGI-EXC-01
NetHandle: ?NET-66-111-32-0-1
Parent: ? ? NET-66-0-0-0-0
NetType: ? ?Direct Allocation
NameServer: NS1.UNITEDCOLO.NET
NameServer: NS2.UNITEDCOLO.NET
Comment: ? ?ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: ? ?2002-08-06
Updated: ? ?2003-03-24

CODE

whois.nic.biz]
Domain Name: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? WMSTOCK.BIZ
Domain ID: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? D4617973-BIZ
Sponsoring Registrar: ? ? ? ? ? ? ? ? ? ? ? ?MELBOURNE IT D/B/A ?INTERNET NAMES WORLD WIDE
Domain Status: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ok
Registrant ID: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? B105199116670088
Registrant Name: ? ? ? ? ? ? ? ? ? ? ? ? ? ? WMSTOCK
Registrant Organization: ? ? ? ? ? ? ? ? ? ? WMSTOCK
Registrant Address1: ? ? ? ? ? ? ? ? ? ? ? ? Michurinskiy pr. d. 88
Registrant City: ? ? ? ? ? ? ? ? ? ? ? ? ? ? Moscow
Registrant State/Province: ? ? ? ? ? ? ? ? ? Moscow
Registrant Postal Code: ? ? ? ? ? ? ? ? ? ? ?101052
Registrant Country: ? ? ? ? ? ? ? ? ? ? ? ? ?Russian Federation
Registrant Country Code: ? ? ? ? ? ? ? ? ? ? RU
Registrant Phone Number: ? ? ? ? ? ? ? ? ? ? +7.0953648645
Registrant Email: ? ? ? ? ? ? ? ? ? ? ? ? ? ?a1exey@mail.ru
Administrative Contact ID: ? ? ? ? ? ? ? ? ? B105199116670082
Administrative Contact Name: ? ? ? ? ? ? ? ? Victor Kalashnikov
Administrative Contact Organization: ? ? ? ? WMSTOCK
Administrative Contact Address1: ? ? ? ? ? ? Michurinskiy pr. d. 88
Administrative Contact City: ? ? ? ? ? ? ? ? Moscow
Administrative Contact State/Province: ? ? ? Moscow
Administrative Contact Postal Code: ? ? ? ? ?101052
Administrative Contact Country: ? ? ? ? ? ? ?Russian Federation
Administrative Contact Country Code: ? ? ? ? RU
Administrative Contact Phone Number: ? ? ? ? +7.0953648645
Administrative Contact Facsimile Number: ? ? +7.0953648645
Administrative Contact Email: ? ? ? ? ? ? ? ?a1exey@mail.ru
Billing Contact ID: ? ? ? ? ? ? ? ? ? ? ? ? ?B105199116670084
Billing Contact Name: ? ? ? ? ? ? ? ? ? ? ? ?Victor Kalashnikov
Billing Contact Organization: ? ? ? ? ? ? ? ?WMSTOCK
Billing Contact Address1: ? ? ? ? ? ? ? ? ? ?Michurinskiy pr. d. 88
Billing Contact City: ? ? ? ? ? ? ? ? ? ? ? ?Moscow
Billing Contact State/Province: ? ? ? ? ? ? ?Moscow
Billing Contact Postal Code: ? ? ? ? ? ? ? ? 101052
Billing Contact Country: ? ? ? ? ? ? ? ? ? ? Russian Federation
Billing Contact Country Code: ? ? ? ? ? ? ? ?RU
Billing Contact Phone Number: ? ? ? ? ? ? ? ?+7.0953648645
Billing Contact Facsimile Number: ? ? ? ? ? ?+7.0953648645
Billing Contact Email: ? ? ? ? ? ? ? ? ? ? ? a1exey@mail.ru
Technical Contact ID: ? ? ? ? ? ? ? ? ? ? ? ?B105199116670086
Technical Contact Name: ? ? ? ? ? ? ? ? ? ? ?Victor Kalashnikov
Technical Contact Organization: ? ? ? ? ? ? ?WMSTOCK
Technical Contact Address1: ? ? ? ? ? ? ? ? ?Michurinskiy pr. d. 88
Technical Contact City: ? ? ? ? ? ? ? ? ? ? ?Moscow
Technical Contact State/Province: ? ? ? ? ? ?Moscow
Technical Contact Postal Code: ? ? ? ? ? ? ? 101052
Technical Contact Country: ? ? ? ? ? ? ? ? ? Russian Federation
Technical Contact Country Code: ? ? ? ? ? ? ?RU
Technical Contact Phone Number: ? ? ? ? ? ? ?+7.0953648645
Technical Contact Facsimile Number: ? ? ? ? ?+7.0953648645
Technical Contact Email: ? ? ? ? ? ? ? ? ? ? a1exey@mail.ru
Name Server: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? NS1.WMSTOCK.BIZ
Name Server: ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? NS2.WMSTOCK.BIZ
Created by Registrar: ? ? ? ? ? ? ? ? ? ? ? ?MELBOURNE IT D/B/A ?INTERNET NAMES WORLD WIDE
Last Updated by Registrar: ? ? ? ? ? ? ? ? ? MELBOURNE IT D/B/A ?INTERNET NAMES WORLD WIDE
Domain Registration Date: ? ? ? ? ? ? ? ? ? ?Sat May 03 19:49:58 GMT 2003
Domain Expiration Date: ? ? ? ? ? ? ? ? ? ? ?Sun May 02 23:59:59 GMT 2004
Domain Last Updated Date: ? ? ? ? ? ? ? ? ? ?Sun May 11 18:34:36 GMT 2003

I will point out the email address:

CODE

Technical Contact Email: ? ? ? ? ? ? ? ? ? ? a1exey@mail.ru

That email address was used by Verlain. See more by following these links, it's not the first scam stuff run by them.

http://www.getpaidforum.com/forums/index.p...ey%40mail%5C.ru

behappy

Jul 20 2003, 07:37 PM

I got that same email today! I didn't even open it!

mmamamel

Jul 20 2003, 08:57 PM

Got it too and reported it!

moonieb

Jul 21 2003, 05:16 AM

I got it too grrrrrrrrrrr

sobak

Jul 21 2003, 05:30 AM

######! I wanted to give them $12,000 to cash out.

Huh...I didn't do it. Thanks!

Cool_Dee

Jul 21 2003, 08:52 AM

Got it as well

sobak

Jul 21 2003, 11:35 AM

Be careful! :ph34r:

Spammers and scammers must die!!!

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.