Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Spam, Scam and Phishbusters » [Credit Card Fraud] fraud: www.prophotosland.com & www.photogey
Search Topic:
Uniqs:
21814
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
[Scam] Need some feedback on how to proceed »
« [Scam] Bogus anti-spyware site  
page: 1 · 2 · 3 · 4 · 5
AuthorAll Replies


Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:


1 edit
reply to mrchris
Re: [Credit Card Fraud] fraud: www.prophotosland.com & www.phot

said by mrchris See Profile :

Why do these folks bother making these websites when you can find what you want for free if you looked hard enough on Google?
They are not making these sites to sell anything. If you had read any of MGD See Profile's posts in detail you would see that the majority (if not all) of these fake web sites use a special ROBOTS.TXT file that hides them from search engines and web indexers on purpose as they really don't want people/customers going to their sites. They are fronts for a well organized and large criminal enterprise in the former Soviet Block than funnel up to $50,000 USD per month through each front web site making fraudulent charges to Credit Cards.
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?


mrchris
We don't miss you Bush
Premium
join:2002-10-01
North Babylon, NY
reply to jswanson
Why do these folks bother making these websites when you can find what you want for free if you looked hard enough on Google?

MGD
Premium,MVM
join:2002-07-31
Fort Lauderdale, FL

reply to MGD
Looks like Godaddy has suspended mobileglobus.com for invalid whois data. Maybe the real Bill Hutchinson of 3100 Monticello got tired of fielding calls, about the domain that he did not register.

GoDaddy Whois results:

Domain Status: On-hold

Error Message
Server response:
mobileglobus.com

This domain name has been suspended due to invalid Whois information.

If you are the registrant of this domain name please contact us at: invalidwhois[at]secureserver.net
MGD

MGD
Premium,MVM
join:2002-07-31
Fort Lauderdale, FL

reply to Almost Defrauded
said by Almost Defrauded :

...... I mentioned this to the guy from the bank and he seemed disinterested, told me the charge had been reversed and got me off the phone before I got to the juicy stuff on this thread or had a chance to insist they cancel the account and issue a new card. ....
That is a common occurence because of the amount.

said by Almost Defrauded :

...... Should I expect them to continue to charge the account? ....
Yes, guaranteed to happen.

said by Almost Defrauded :

...... I'm guessing I should be getting the card canceled and a new card issued...
Yes, that is the only way to stop the process. They have your card data and will continue to use it.

said by Almost Defrauded :

...... I went back and saw no other fraudulent activity for the last year but I did notice an authorization about 9 months ago from FRONTIER EQUITI for $1.00 that never was charged. Has anyone else seen that entity tied to this crime ring? I'm guessing it was a check to make sure the card would work.

Thanks again for posting on this topic.
I do not recall seeing that name, however, you are correct in that the cime syndicate routinely pings a portion of the hijacked card where the current status is unknown. Over the years they accomplish this validation by routinely hijacking legitimate merchant accounts of small businesses to ping them. They will run several thousand pings, usually over the weekend when the business is closed, sticking them with a hefty bill for the process.

MGD


Almost Defrauded

@wildblue.net

 reply to jswanson
I noticed a charge this morning on my account for $2.56 from IMAGESPARADISE.COM that did not look familiar so I called my bank (Bank of America) to dispute it. When I finally got a live person I happened to be doing a google search on the site and came across this thread and others indicating the fruadulent nature of the company. I mentioned this to the guy from the bank and he seemed disinterested, told me the charge had been reversed and got me off the phone before I got to the juicy stuff on this thread or had a chance to insist they cancel the account and issue a new card.

So it looks like they are trying smaller dollar amounts now.

Should I expect them to continue to charge the account? I'm guessing I should be getting the card canceled and a new card issued...I went back and saw no other fraudulent activity for the last year but I did notice an authorization about 9 months ago from FRONTIER EQUITI for $1.00 that never was charged. Has anyone else seen that entity tied to this crime ring? I'm guessing it was a check to make sure the card would work.

Thanks again for posting on this topic.

MGD
Premium,MVM
join:2002-07-31
Fort Lauderdale, FL

2 edits
reply to MGD
OOOPS !!, to see those empty contents when you click on the above links you will be redirected to a "secure login" The account is: user ID = test password = test.

Then click on "access gallery"

MGD

MGD
Premium,MVM
join:2002-07-31
Fort Lauderdale, FL

reply to MGD
If you recall in an earlier post, Mr. Allison told me that he knew of several people personally that dowloaded intangibles from the mobileglobus.com site and were "very happy" with the "products".

The problem is that there is nothing to download from the fraudulent site. The vetting standards are so low, or non existant, that there is no need to even complete the fake site.

A login gets you to here:




A generates a script error:

Warning: Smarty error: math: parameter y is empty in /home/content/g/d/f/gdfg34453/html/libs/Smarty.class.php on line 1095
The field set for a credit card number is assigned as a "text" entry, and always generates an error:


Note the "text":
Card Number
input name="card" type="text" id="card"




Sign in and review the available downloads, and you are greeted by, Nothing:




Links for all the empty graphics such as: »https://www.mobileglobus.com/themes/natu···t011.thm

yield:




You can bypass log in and see these for yourself:
»https://www.mobileglobus.com/index.php?a···e&page=2 Try any page number, any category, empty !!

»https://www.mobileglobus.com/index.php?a···=cartoon

»https://www.mobileglobus.com/index.php?a···abstract

»https://www.mobileglobus.com/index.php?a···y=animal

»https://www.mobileglobus.com/index.php?a···ery=land

»https://www.mobileglobus.com/index.php?a···ery=cars

This is all nothing new, In December of 2007, one brave soul used a virtual card to enroll in one of the fraud globus group sites just to see what was there. Of course as expected he found nothing to download:

quote:
JDDD

Re: Heard of Picture globus??

Okay, So i have one of those nifty options for my card to get a "temporary" card number for online purchases. I paid the $2.99 to see if the site was a scam. Sure enough it is. they claim to be a stock photo company. You pay a monthly fee and download as many images as you want. the charge is $9.99 a month so that is what they charged you for, 1 month of service. However (and this is the funny part) They are letting people register and sign up for subscriptions but they do not have a SINGLE image available. nothing, nada, zilch. So I would recommend staying away from this site and if you do decide to PLEASE DON'T GIVE THEM YOUR REAL CARD NUMBER AND INFO.

hope this helps save some of you some headaches.

REF: »community.mpix.com/forums/t/5825···eIndex=1

There is a posting on Fatwallet from early December 2007 where Allison's apparent partner Eric Robertson, IM's a member who complained of the fraud charges and asked him:

quote:
........I would also like to ask you to either remove the thread from the forum or delete our company's name from the topic name. We are just starting out and this thread is harming our business. I hope that you understand it is not our fault that someone used your card to register with us..........
»www.fatwallet.com/forums/finance/782097

It is hard to believe that almpst a half year later, one of these cyber-mules has not figured it out. Just searching under any of the mutiple names would produce pages of fraud data for them to see.

MGD

MGD
Premium,MVM
join:2002-07-31
Fort Lauderdale, FL


1 edit
reply to K Patterson
said by K Patterson See Profile :

Man, is he in for a surprise. .....
I hope it happens sooner than later.

said by K Patterson See Profile :

....One alternative would be to let Bill Hutchinson know how he has been implicated in this fraud. My guess is that he may have some ways of getting thru to Mr. Allison. It looks like it was his card that was used.

Kip
After reviewing my notes, apparently I missed listing one of the earlier sites on that list.

PHOTOMERIDIAN.COM »PHOTOMERIDIAN.COM

Was operating in the last quarter of 2007.
»www.google.com/search?hl=en&q=PH···e+Search


Registrant:
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States

Domain Name: PHOTOMERIDIAN.COM
Created on: 26-Aug-07
Expires on: 26-Aug-08
Last Updated on: 26-Aug-07


on 11/06/2007 a poster reported the link

quote:
Follow the link and get this message:

"This site is currently unavailable.

If you are the owner of this site, please contact us at 1-480-505-8855 at your earliest convenience."

Something's up for sure.

»www.dpchallenge.com/forum.php?ac···D=691308

Godaddy's failure to either promptly address these criminal's using their services for free, or keeping them from re-enrolling with fraudulent payments is totally irresponsible.

Worse yet, Mr. Allison's MOBILEGLOBUS.COM site is back up and running »mobileglobus.com courtesy of GoDaddy free hosting.





Support: Eric Robertson
e-mail: support@mobileglobus.com
tel: (210) 807-4272

»www.google.com/search?hl=en&q=210-807-4272+

Still not back is Mr. Allison's personal sites for Mike Allison Communications, LLC and
Mike Allison Consulting
. Those are presumably the LLCs that the authorize.net merchant accounts are under.




Nor do we know the other two sites that Allison has running. Though I see photogeyser.com »photogeyser.com is still active.

Still no return calls from Allison, so his current activity status is unknown. However with the site going back up, it is presumed that he is still firmly planted in the crime syndicates corner. He may be considered a "dream catch" recruit by any organized crime syndicate.

MGD


gant

@as43234.net


from:
Doctor Olds See Profile

reply to Doctor Olds
Thanks, here is the PDF attachment


Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

reply to gant
said by gant :

I have a PDF file that I printed off the GoDaddy WhoIs listing yesterday, to confirm what they were showing yesterday. Unfortunately I cannot see how to attach it to this post.
Type your post, hit Preview, and on the left is a new button that reads "+ upload attachments". Now click that and a new section expands with 4 spots for adding files. Browse to the file you want to attach and then click Upload attachment.




--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?


gant

@as43234.net

reply to K Patterson
said by K Patterson See Profile :

That just doesn't make sense. Bill Hutchinson is a heavy hitter - Romney's campaign committee, for instance.

did ddigital get the site name wrong? There is only a placeholder at mobileglobus.com.
...
This I did not know. In case of doubt, I have a PDF file that I printed off the GoDaddy WhoIs listing yesterday, to confirm what they were showing yesterday. Unfortunately I cannot see how to attach it to this post.

A good friend in Florida was scammed this month from "mobileglobus.com" therefore I googled this name and followed the links - and then I found this (your) web forum with lots of useful information, Also sustained hard work by MGD - well done.

K Patterson
Premium,MVM
join:2006-03-12
Columbus, OH
·RoadRunner Cable

reply to MGD
Man, is he in for a surprise.

One alternative would be to let Bill Hutchinson know how he has been implicated in this fraud. My guess is that he may have some ways of getting thru to Mr. Allison. It looks like it was his card that was used.

Kip

MGD
Premium,MVM
join:2002-07-31
Fort Lauderdale, FL

reply to K Patterson
GoDaddy has apparently taken down mobileglobus.com. In the 05/17 post above by "ddigital" the domain was privacy cloaked by GoDaddy's Domains by Proxy, Inc service. When GoDaddy pulls a site and/or revokes the domain, they remove the cloaking service. The registration posted above by "gant" is how the criminals registered the domain back on 01/28. Probably paid for with hijacked card data, and registered in the victim's name. They they used the same card to pay for the domain cloaking service to make it harder to track and shut down.

I spoke with Mike Allison several days ago, thanks to info provided by mae_aa419 See Profile Mike was running merchant accounts for three websites including mobileglobus.com. He also ran merchant accounts for several of the previous "globus" sites that are now shut down. Mike is completely duped and insisted that he is running a legit operation. When asked about the fraudulent charges on all the previous sites listed for him that are now defunct, he stated that someone hacked into them and stole their products using dozens of stolen credit cards.!! Mike stated that he was expanding his operation by hiring staff, because the business was doing so well and expanding.

Mr. Allison was adamant that he was running a legitimate business operation in partnership with Hermeselectro.com. He refused to name the other two websites that are currently in operation. Also, he refused to state where he wires the proceeds, other than to confirm it is a foreign country. He did acknowledge that they all use authorize.net as a payment gateway. Mike also stated that he was aware of several people that had purchased tangible products from the sites, and were very happy with them. I told him that this was not possible.

I sent Mike several links to show him the robust documentation of the fraud, and the crime syndicate behind it. I also gave him contact information for a Texas police officer that he should call, who would corroborate what I told him. Mike was going to digest this information and then get back with me, he has not. He also has not returned any of my subsequent calls.

At the time I contacted Mike, both mobileglobus.com and Mike's personal site: mikeallisoncommunications.reliabilitymall.com were active. Without followup contact it is impossible to know if he informed the criminals and they convinced him to go into hide mode. if so, they may have him wire funds abroad daily, to keep the account balance low.

Go here: »www.data.bbb.org/houston/search.html and enter "Mike Allison" in the search box.

MGD

K Patterson
Premium,MVM
join:2006-03-12
Columbus, OH
·RoadRunner Cable


2 edits
reply to gant
That just doesn't make sense. Bill Hutchinson is a heavy hitter - Romney's campaign committee, for instance.

did ddigital get the site name wrong? There is only a placeholder at mobileglobus.com.

Edit: Looking at cached pages in Google, it appears that it once was a fraud site.

The whois was updated today. I wonder if somebody put Hutchinson's name in there as a red herring??

Kip


gant

@as43234.net

reply to ddigital
I turned up the following:

Registrant:
Bill Hutchinson
3100 Monticello
Dallas, Texas 75205
United States
Registered through: GoDaddy.com, Inc.
www.godaddy.com)
Domain Name: MOBILEGLOBUS.COM
Created on: 28-Jan-08
Expires on: 28-Jan-09
Last Updated on: 20-May-08
Administrative Contact:
Hutchinson, Bill BillHutchinson@live.com
3100 Monticello
Dallas, Texas 75205
United States
(214) 443-4225
Technical Contact:
Hutchinson, Bill BillHutchinson@live.com
3100 Monticello
Dallas, Texas 75205
United States
(214) 443-4225
Domain servers in listed order:
NS21.DOMAINCONTROL.COM
NS22.DOMAINCONTROL.COM

Bill is one of Dunhill Partners:
»www.dunhillpartners.com/team.html

Houston BBB info links another name to "mobileglobus":

Mike Allison Communications, LLC
563 Bird Song
League City, TX 77573
(281) 332-9334
www.mobileglobus.com
www.mikeallisoncommunications.reliabilitymall.com
Mike Allison Consulting
563 Bird Song
League City, TX 77573
(281) 332-9334
www.mobileglobus.com
www.mikeallisoncommunications.reliabilitymall.com

Hope this helps!!
Discalimer: All the above are of course entirely coincidental


ddigital

@sbcglobal.net

reply to JJBrannon
I've been hit by the same scam, only it appears that there is a new domain *and* a new company to add to the mix.

The domain name is mobileglobus.com. A whois entry doesn't turn up much as they have registered it via proxy:

================
Registrant:
Domains by Proxy, Inc.

Registered through: GoDaddy.com, Inc. (»www.godaddy.com)
Domain Name: MOBILEGLOBUS.COM

Domain servers in listed order:
NS21.DOMAINCONTROL.COM
NS22.DOMAINCONTROL.COM
=================

The web site pattern matches the other scam image sites. The amount I was charged was $9.87.

The second charge was through a "P&P Services Inc". The link below (also mentioned earlier in this thread) makes reference to the same company:

»www.ripoffreport.com/reports/0/3···6667.htm

The charge in this case was less; it was $5.56. Anyone have any ideas how to investigate this "P&P Services Inc" any further? A basic Google search doesn't turn up much.

BTW, great job on tracking all of this!

JJBrannon

join:2008-03-10
Newark, DE

reply to jswanson
I was hit with a photosmix.com in my last billing cycle which I caught last evening while reviewing my accounts.

The charge stood out like a nudist at a church service because this account -- my oldest credit card -- has only been used for about the last two years for a 4% balance transfer I was paying down.

But the reaction of the card issuer's security department was worse than the charge. They sought to terminate the account and issue a new number without any guarantee that this wouldn't adversely affect my credit history.

As a former credit investigator for a credit card bank myself, I thought it likely that this action would erase my longest credit record and my FICO rating.

JJB


kooooo

@rogers.com

reply to jswanson
Don't know if it's relevant, but all of this reminds me of a scam I was reading about on the Paypal/ebay forums a few months ago. feebay removed the thread from their forum, but here's some background:

»voip-hype.com/voip-provider-beta···-a-scam/

K Patterson
Premium,MVM
join:2006-03-12
Columbus, OH
reply to pleekmo
I took the liberty of starting a new topic, hoping that others will add text or links for each of the frauds listed and that it will be stickied.

"The FBI wants you to know:"


pleekmo
Triptoe Through The Tulips
Premium
join:2001-09-14
Manchester, CT
clubs:

reply to Zenith
said by Zenith See Profile :

said by Doctor Olds See Profile :

As long as you credit it being authored by MGD See Profile and include a link back to the post,,,,,, I would guess he would not mind, but I am guessing and cannot speak for him.
I would credit it to MGD for sure. MGD is doing a good thing and deserves all credit for the impact that's been made against the bad guys.
I copied and pasted the analysis into my blog but also noted that I'd cribbed it from here and gave links to this thread and another similar one here, as well. Though perhaps I should give a more explicit credit...
--
HCN: Because you deserve a rest!

Proud member of the Free Omelas Liberation Front.
Forums » Up and Running » Security » Spam, Scam and Phishbusters[Scam] Need some feedback on how to proceed »
« [Scam] Bogus anti-spyware site  
page: 1 · 2 · 3 · 4 · 5


Saturday, 28-Nov 14:46:01 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [122] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [75] TiVo Sees Record Customer Losses
· [70] Verizon CEO: Hulu Will Be Dead Soon
· [69] In-Flight Internet Headed For Bumpy Landing?
· [62] Thanksgiving Open Thread
· [61] Weekend Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· Using DIR-615 C1/3.01 with Trendnet TEW-652BRP in N Mode [D-Link]
· [Newsgroups] Newzleech down? [Filesharing Software]
· TPIA review by Electronic Box [Canadian Broadband]
· Why would I want an e reader? [General Questions]
· Using AirMax to provide triple play services? [Wireless Service Providers]
· Gizmo5 has added a Google Voice section in its members area. [VOIP Tech Chat]
· 5 hour energy for diabetic [General Questions]
· PS3 Media Server! "Must Have" [Console Tech]