1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Attention BHW Sherlocks - little Girl scammed

Discussion in 'BlackHat Lounge' started by reinie, Jan 17, 2013.

  1. reinie

    reinie Elite Member

    Joined:
    Jan 16, 2009
    Messages:
    1,574
    Likes Received:
    1,040
    Hey Guys
    So one of the little 11 year old girls that I coach went online and bought some Ugg boats with her Christmas money.

    The site she bought it from is obviously a counterfeit site but how was she to know the difference.
    She received boots that seemed home made , in a size 3 sizes smaller.
    She told me the story, and she was so upset so i figured i would look into it.

    Here is the purchase details.


    Dear friend,
    Thanks for your attention to this email.
    This is customer service from http://www.uggsonsaleitem.com.
    If you have any questions about your products,
    please kindly contact this email: debbyoutlet@gmail.com.
    This is the automantically sent email by our system, please don't reply.
    Thanks for choosing us!
    Kevin

    From: kevin smith <master4brand@hotmail.com>
    Date: December 29, 2012, 4:25:49 AM EST
    Subject: 121226192717616110551 Tracking number EE885726932CN

    Dear friend,

    Hope you have a good time.

    EE885726932CN is your tracking number and you can trace your package in the website: http://www.ems.com.cn/mailtracking/e_you_jian_cha_xun.html. Please check it after 48 hours as the date is being updated.

    Best wishes
     
  2. steelballs

    steelballs BANNED BANNED

    Joined:
    Dec 5, 2008
    Messages:
    1,832
    Likes Received:
    4,562
    Not much to go on here

    Domain Name : uggsonsaleitem.com
    PunnyCode : uggsonsaleitem.com
    Creation Date : 2012-12-20 21:30:54
    Updated Date : 2012-12-20 21:30:54
    Expiration Date : 2013-12-20 21:30:54


    Registrant:
    Organization : adfad
    Name : asdfasdf
    Address : afsgfdfg
    City : yangquanshi
    Province/State : shanxisheng
    Country : china
    Postal Code : 350001

    Administrative Contact:
    Name : asdfasdf
    Organization : adfad
    Address : afsgfdfg
    City : yangquanshi
    Province/State : shanxisheng
    Country : china
    Postal Code : 350001
    Phone Number : 54-0-46546546546
    Fax : 56-4654-45466556
    Email : Email Masking

    Technical Contact:
    Name : asdfasdf
    Organization : adfad
    Address : afsgfdfg
    City : yangquanshi
    Province/State : shanxisheng
    Country : china
    Postal Code : 350001
    Phone Number : 54-0-46546546546
    Fax : 56-4654-45466556
    Email : Email Masking

    Billing Contact:
    Name : asdfasdf
    Organization : adfad
    Address : afsgfdfg
    City : yangquanshi
    Province/State : shanxisheng
    Country : china
    Postal Code : 350001
    Phone Number : 54-0-46546546546
    Fax : 56-4654-45466556
    Email : Email Masking
     
    • Thanks Thanks x 5
  3. reinie

    reinie Elite Member

    Joined:
    Jan 16, 2009
    Messages:
    1,574
    Likes Received:
    1,040
    Thanks Steelballs.
    I am trying to see what kind of payment processor they used. Waiting for her to send me here payment receipt (if she even got one)
     
    • Thanks Thanks x 1
  4. srb888

    srb888 Elite Member

    Joined:
    Jul 30, 2008
    Messages:
    3,260
    Likes Received:
    5,067
    Gender:
    Male
    Occupation:
    WebzSurfer
    Location:
    Sun, Mon, Tue, WTF, Sat!!! :)
    Site gives http error 404

    P.S.:

    The home page is still in cache >>
    http://webcache.googleusercontent.com/search?q=cache:OE7YIHiqhbYJ:www.uggsonsaleitem.com/

    Copy paste it and send it to the original ugg site and request them assistance. They will help because they too have a reputation to protect. Be firm with them and tell how a little girl not just lost money, but lost faith their name. So for her they need to act and help get her trust back. Persist in shaking them. I think she will get a refund from them or a pair of new shoes as a belated Christmas gift.
     
    • Thanks Thanks x 2
    Last edited: Jan 17, 2013
  5. JFoulds

    JFoulds Power Member

    Joined:
    Apr 22, 2011
    Messages:
    538
    Likes Received:
    480
    Occupation:
    Genius billionaire playboy philanthropist
    Looks like the salesperson is already a plaintiff in a case against them by Burberry.
    http://www.scribd.com/doc/94162664/Mot-Default-Burberry-v-John-Does

    If she bought through PayPal, you've got more than a month to charge-back the transaction and PayPal will make a decision. In most countries (US, UK, most of Europe) there is a Sale of Goods act which extends to online goods stating that if an item is returned within 2 weeks then a refund must be given because, as the goods have not been viewed in person, you do not know that they are fit for sale.

    Once she's got a refund she should be able to buy the boots from a reputable dealer! :)

    EDIT: If the payment was via a credit-card it doesn't matter who their payment processor was, report it to her bank as fraudulent items which have been returned and the credit-card company will instantly refund the payment.
     
    • Thanks Thanks x 1
    Last edited: Jan 17, 2013
  6. srb888

    srb888 Elite Member

    Joined:
    Jul 30, 2008
    Messages:
    3,260
    Likes Received:
    5,067
    Gender:
    Male
    Occupation:
    WebzSurfer
    Location:
    Sun, Mon, Tue, WTF, Sat!!! :)
    OP, I have added to my post above. I hope the girl gets justice soon.
     
    • Thanks Thanks x 1
  7. reinie

    reinie Elite Member

    Joined:
    Jan 16, 2009
    Messages:
    1,574
    Likes Received:
    1,040
    You guys are great help!

    Her mom said the CC statement reflects : "Yours pay y sho"

    I will have her take that law suite printout to the bank and tell them it was fraudulent and hopefully she can get it back!
     
  8. steelballs

    steelballs BANNED BANNED

    Joined:
    Dec 5, 2008
    Messages:
    1,832
    Likes Received:
    4,562
    They have now taken the site down

    Not Found

    HTTP Error 404. The requested resource is not found.

    If I were you I know it's wrong what they have done...

    But do not waste too much time chasing as they are smart Chinese leaving little or no footprints...

    If the site were up you could find the name of the CC payment gateway which I suspect was Chinese with English version
     
    • Thanks Thanks x 1
  9. TonySe

    TonySe Junior Member

    Joined:
    Nov 21, 2012
    Messages:
    103
    Likes Received:
    22
    Who lets 11 year old girls order something in Internet without checking?
    i would say it's parents fault and they should watch this girl better next time.

    it should be obvious that there is a lot of scam outside!

    good luck with the bank, I don't think it will be a big problem to get the money back
     
    • Thanks Thanks x 4
  10. reinie

    reinie Elite Member

    Joined:
    Jan 16, 2009
    Messages:
    1,574
    Likes Received:
    1,040
    Yea you are right.
    The bank Statement shows "Yours pay y shop...Shenzhen, cn"
    So I will tell them to take the Cache printout to the bank together with the printout of the lawsuite already against them.
    Hopefully they can refund it.
    And i will tell her to send the same info to Uggs
     
  11. srb888

    srb888 Elite Member

    Joined:
    Jul 30, 2008
    Messages:
    3,260
    Likes Received:
    5,067
    Gender:
    Male
    Occupation:
    WebzSurfer
    Location:
    Sun, Mon, Tue, WTF, Sat!!! :)
    I think they are not Chinese, only the hosting is Chinese. Those guys went in for the Christmas kill and then took down the site. The original company can track them down.

    A partner could be Chinese and handling money, but the main brain must be outside China. Just my 0.02
     
    Last edited: Jan 17, 2013
  12. reinie

    reinie Elite Member

    Joined:
    Jan 16, 2009
    Messages:
    1,574
    Likes Received:
    1,040
    You are 100% right... Spoiled Americans :p
     
    • Thanks Thanks x 1
  13. michael8t6

    michael8t6 Regular Member

    Joined:
    Apr 28, 2012
    Messages:
    285
    Likes Received:
    229
    Location:
    somewhere on this god forsaken planet
    Done a bit of digging aswell, basically tried finding who the site is hosted with or at least where! didn't really turn up alot but hope it helps ;)

    Nameservers.
    121.14.250.37 ns11.xincache.com
    121.14.250.36 ns11.xincache.com.
    121.14.250.37 ns11.xincache.com

    so I run a test on the nameservers to see who owns them and there's literally no record, I begun googleing xincache and this is all of what I fount.

    http://www.malwareurl.com/ns_listing.php?ns=ns11.xincache.com Your site is in that list

    http://reports.internic.net/cgi/whois?whois_nic=ns11.xincache.com&type=nameserver

    http://www.scam.com/showthread.php?t=124214
    http://reports.internic.net/cgi/whois?whois_nic=ns11.xincache.com&type=nameserver

    http://www.scam.com/showthread.php?t=124214

    Looks like they been running for a long time! Find out who owns ns11.xincache.com and you may be able to start digging a bit further get the name of the host, contact them to find out who owns the site. If it's a self hosted site then inform the local authoritys or something buddy.. Hope you get it sorted though.
     
    • Thanks Thanks x 1
  14. steelballs

    steelballs BANNED BANNED

    Joined:
    Dec 5, 2008
    Messages:
    1,832
    Likes Received:
    4,562
    Here is the nameserver info

    who.is/nameserver/ns11.xincache.com/

    Too much info to cut n paste here in post
     
    • Thanks Thanks x 1
  15. rickydzine

    rickydzine Regular Member

    Joined:
    Jun 6, 2011
    Messages:
    317
    Likes Received:
    163
    Location:
    Jamaica
    I agree with tony to some extent, Why does an 11yo have a credit card and is unmonitored when making a purchase =/ And then people complain about credit card theft and all that smack. I hope she gets back her money cause I remember what it was like saving and actually buying something but her parents should be there more..
     
    • Thanks Thanks x 1
  16. JFoulds

    JFoulds Power Member

    Joined:
    Apr 22, 2011
    Messages:
    538
    Likes Received:
    480
    Occupation:
    Genius billionaire playboy philanthropist
    Looks like the registrar that was holding the domain to me; not really of much use. Like finding 'GoDaddy' or w/e.
     
    • Thanks Thanks x 1
  17. moneylover

    moneylover Junior Member

    Joined:
    May 26, 2012
    Messages:
    118
    Likes Received:
    51
    • Thanks Thanks x 1
  18. ShadeDream

    ShadeDream Elite Member

    Joined:
    Nov 27, 2008
    Messages:
    2,209
    Likes Received:
    5,230
    Location:
    He who laughs last, laughs longest.
    The whois for that domain just makes me LOL.
     
    • Thanks Thanks x 1
  19. jazzc

    jazzc Moderator Staff Member Moderator Jr. VIP

    Joined:
    Jan 27, 2009
    Messages:
    2,468
    Likes Received:
    10,143
    Stop watching too much porn man, it clouds your thinking process.
     
    • Thanks Thanks x 6
  20. reinie

    reinie Elite Member

    Joined:
    Jan 16, 2009
    Messages:
    1,574
    Likes Received:
    1,040
    I hope you aren't serious...
    I have a club of about 60 kids form 6-18 and I love them like my own.
    You have some serious issues my friend
     
    • Thanks Thanks x 8