From: All Company Formation [email@example.com]The spam originates from 126.96.36.199 which belongs to Internet Connect Company in Orlando, Florida.. Orlando being a hotbed of fraud which would make it ideal for twinning with Lagos. The spam then bounces through a WebSiteWelcome IP of 188.8.131.52. None of those IP give a clue as the the real ownership of the site.
Date: 7 July 2014 12:58
Subject: [Info] Worldwide Company Formation Services - EV SSL Approval Services
We have a team of agents in different countries we are providing Company Registration services in the following Countries:
If you need other than above countries so please contact us for more information..we are also providing offshore bank account services:
Bank locations are :
-St. Vincent & Grenadines
-Brokerage Account in Panama
-Nevis Bank Account
-Comodo EV ssl Approval and documentation
-Geo Trust ssl Approval and documentation
-Symantec ssl Approval and documentation
-Veri Sign Approval and documentation
-Trustwave Approval and documentation
-Trust Guard Approval and documentation
-Valid safe Approval and documentation
-Truste Approval and documentation
-Others (as per your request)
For order and need more informations kindly contact us : www.allcompanyformation.com
skype : companiesformations
The spamvertised site of allcompanyformation.com (also mirrored at businessformation247.com) looks generic but professional.
It is plastered with logos from legitimate organisations, presumably to give it an air of respectability.
OK Pay: firstname.lastname@example.org
Perfect Money: U3128238
I wouldn't bet on "ondrejpavilic" being a real person, it sounds suspiciously like this ice hockey player.
The contact information seems deliberately vague and there are no physical contact addresses or company registration details anywhere on the website:
The telephone number looks like a US one, but on closer examination appears to be a Bandwidth.com VOIP forwarder to another number (which could be anywhere in the world). These 315-944 numbers seem to be often abused by scammers.
The WHOIS details are anonymous, and the website has been carefully excised of any identifying information.
Most of the text (and indeed the whole concept) has been copy-and-pasted from Slogold.net who seem to be a real company with real contact details. They even go so far as to warn people of various scams using the Slogold name.
The following factors indicate that this is a scam, and sending them money would be a hugely bad idea:
- The site is promoted through spam (this sample was sent to a spamtrap)
- The domain allcompanyformation.com has anonymous registration details and was created only in December 2013.
- There are no real contact details anywhere on the site.
- The text is copy and pasted (i.e. stolen) from other sites, primarily Slogold.net.