| 
 
 | 
 Beware of Fraud: wise-pay.com escrow service
 Be careful when using escrow services to pay for expensive items from remote sellers, such as cars, motor bikes or computers. Only use well known escrow services with a proven track record. 
See also: We received a spam email claiming to be from a large electronics company in Italy that recommends using wise-pay.com, a fraudulent escrow service. As it turns out the domain of the sender was only registered the day before using a bogus postal address and the email was sent from Romania. Here you go: Thank you for reply. Here's the message header: Received: from [82.77.205.26] (helo=P4) by #####.#########.### with esmtp (Exim 4.43) id 1CcYln-0005eK-WE for ##################; Fri, 10 Dec 2004 01:36:28 +0100 From: "salesdepartament@mediaworldshop.com" <salesdepartament@mediaworldshop.com> Subject: Offer from Media World Shop To: ################## Content-Type: text/plain;iso-8859-1 Reply-To: salesdepartament@mediaworldshop.com Date: Fri, 10 Dec 2004 02:36:29 +0200 X-Priority: 3 X-Library: Indy 8.0.25 X-MailScanner-SpamCheck: spam, SpamAssassin (score=5.656, required 5, BAYES_50 0.00, MSGID_FROM_MTA_HEADER 0.05, MSGID_FROM_MTA_ID 1.72, PRIORITY_NO_NAME 1.10, UPPERCASE_25_50 0.03, X_LIBRARY 2.75) 
      Domain Name.......... wise-pay.com
       Creation Date........ 2004-05-17
       Registration Date.... 2004-05-17
       Expiry Date.......... 2005-05-17
       Organisation Name.... Wise Pay Molton inc.
       Organisation Address. 4605 Destiny's Gate
       Organisation Address. 
       Organisation Address. Austin
       Organisation Address. 78727
       Organisation Address. Texas
       Organisation Address. UNITED STATES
     
     Admin Name........... Nina Raudy
       Admin Address........ 4605 Destiny's Gate
       Admin Address........ 
       Admin Address........ Austin
       Admin Address........ 78727
       Admin Address........ Texas
       Admin Address........ UNITED STATES
       Admin Email.......... wisepays@yahoo.com
       Admin Phone.......... +1.5128361021
       Admin Fax............ 
     
     Tech Name............ Nina Raudy
       Tech Address......... 4605 Destiny's Gate
       Tech Address......... 
       Tech Address......... Austin
       Tech Address......... 78727
       Tech Address......... Texas
       Tech Address......... UNITED STATES
       Tech Email........... wisepays@yahoo.com
       Tech Phone........... +1.5128361021
       Tech Fax............. 
       Name Server.......... ns3.ip01-dns.net
       Name Server.......... ns4.ip01-dns.net
This spam email comes from Romania, not from Italy.     inetnum:      82.77.205.0 - 82.77.205.31
     netname:      RO-VL-MODAVL
     descr:        Socom Moda Sarguinta
     country:      RO
     admin-c:      NM1100-RIPE
     tech-c:       NM1100-RIPE
     tech-c:       RDS-RIPE
     status:       ASSIGNED PA
     remarks:      +-----------------------------------------------------------+
     remarks:      | ABUSE CONTACT: abuse@rdsnet.ro IN CASE OF HACK ATTACKS,   |
     remarks:      | ILLEGAL ACTIVITY, VIOLATION, SCANS, PROBES, SPAM, ETC.    |
     remarks:      +-----------------------------------------------------------+
     notify:       notify-ripe@rdsnet.ro
     mnt-by:       AS8708-MNT
     mnt-lower:    AS8708-MNT
     changed:      liviu.pislaru@rdsnet.ro 20040928
     source:       RIPE
     
     route:        82.76.0.0/14
     descr:        RDSNET
     origin:       AS8708
     mnt-by:       AS8708-MNT
     changed:      bcd@rdsnet.ro 20040909
     source:       RIPE
     
     role:         Romania Data Systems NOC
     address:      71-75 Dr. Staicovici
     address:      Bucharest / ROMANIA
     phone:        +40 21 30 10 888
     fax-no:       +40 21 30 10 892
     e-mail:       contact-tech@rdsnet.ro
     admin-c:      AS1385-RIPE
     tech-c:       BCD-RIPE
     tech-c:       MIHV1-RIPE
     tech-c:       GEPU1-RIPE
     nic-hdl:      RDS-RIPE
     remarks:      ---------------------------------
     remarks:      Abuse reports: abuse@rdsnet.ro
     remarks:      NOC Phone 24x7: +40 21 30 10 888
     remarks:      NOC E-mail: contact-tech@rdsnet.ro
     remarks:      ---------------------------------
     notify:       notify-ripe@rdsnet.ro
     mnt-by:       AS8708-MNT
     changed:      gepu@rdsnet.ro 20041112
     source:       RIPE
     
     person:       Nitu Maria
     address:      Calea lui Traian 127 street, 2nd floor
     address:      Ramnicu Valcea / ROMANIA
     phone:        +40-250-737561
     fax-no:       +40-250-737561
     e-mail:       moda_s_vl@yahoo.com
     nic-hdl:      NM1100-RIPE
     notify:       notify-ripe@rdsnet.ro
     mnt-by:       AS8708-MNT
     changed:      liviu.pislaru@rdsnet.ro 20040928
     source:       RIPE
The sending domain was only created the day before the spam was sent and is registered with a bogus address (UK address in Ohio? US phone number in the UK? Give me a break!):     Domain Name.......... mediaworldshop.com
       Creation Date........ 2004-12-09
       Registration Date.... 2004-12-09
       Expiry Date.......... 2005-12-09
       Organisation Name.... John Sykes
       Organisation Address. 10 LODGE AVENUE
       Organisation Address. 
       Organisation Address. ELLAND
       Organisation Address. HX59PU
       Organisation Address. OH
       Organisation Address. UNITED KINGDOM
     
     Admin Name........... John Sykes
       Admin Address........ 10 LODGE AVENUE
       Admin Address........ 
       Admin Address........ ELLAND
       Admin Address........ HX59PU
       Admin Address........ OH
       Admin Address........ UNITED KINGDOM
       Admin Email.......... radu8hk@yahoo.com
       Admin Phone.......... +1.3309958774
       Admin Fax............ 
wise-pay.com is listed as a fraudulent escrow on eBay. 
 
 |