Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

centurydrilling.com

Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.

hr@aikengroups.com

Unread postby firefly » Mon Jul 31, 2017 6:56 pm

The fake site pretends to be Aiken Group Limited. The real company has nothing to do with the scam.

After receiving an email from them, the (almost) victim checked the real company site - the scammers are using the real company site while sending bogus job offers.

There is no vacancies at their website now. Besides they mention jobs from ziprecruiter and Linkedin are fraud. Please be aware about the email address they used. The fake one ended in @aikengroups.com instead of @aikengroup.com.

The fake site was created in September 2016. The registrant is using the privacy protection given by the registrar to hide his identity and location.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=125874
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

career@borrdriling.com

Unread postby firefly » Mon Jul 31, 2017 7:25 pm

The fake site claims to be Borr Drilling Limited. The real company having this name is active in Norway and has nothing to do with the scam.

The fake domain the scammers created redirects to the real company site. The main difference: the real company has two "l" letters in their domain name, while the scammers have only one.

While sending bogus job offers to their victims, the scammers are using the email address career@borrdriling.com.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=125877
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

crestwellsdrilling.com

Unread postby firefly » Mon Jul 31, 2017 8:08 pm

The fake site claims to be Crestwells Offshore Drilling.

From the fake site:

Crestwells Offshore Drilling brings energy to the world as a global provider of offshore drilling services to the petroleum industry. For over two decades, we have focused on operating safely and exceeding customer expectations.


Contact details on the fake site:

6200 Savoy Dr #630, Houston, TX 77036, USA
TEL: +1 281 220 3562 – FAX: +1 863 582 5451
info@crestwellsdrilling.com


+12812203562 / +18635825451

Except the name, the site is a clone of derbyshiredrilling.com. They have even the same "management team" using the same stolen pictures with the same fake names. In the previous case, the "team" was in Norway. Now they are in USA...

crestwellsmanagement.PNG


For the fake site details: https://db.aa419.org/fakebanksview.php?key=125879

This is what the fake site looks like:

crestwells.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

careers@heerema-hmcuk.com

Unread postby firefly » Mon Jul 31, 2017 8:31 pm

The fake site claims to be Heerema Marine Contractors UK Ltd.

The real company name was abused in various type of scams during the years. Now it is abused in a job scam using the email address careers@heerema-hmcuk.com.

The fraud domain was created 2 weeks ago.

The real company has a warning on their site about the fraudsters impersonating the company: https://hmc.heerema.com/contact/

Heerema Marine Contractors (HMC) has recently been the victim of a number of fraud attempts where law firms, purchase departments and potential recruits are fraudulently approached by individuals alleging to represent HMC. These attempts often originate from (but not limited to) Outlook, Hotmail, Gmail or .net addresses. For the avoidance of doubt: HMC’s domain name is hmc-heerema.com and HMC does not use the aforementioned e-mail addresses for any of its correspondence.

In case you have received any suspicious e-mails from the addresses above or any new addresses that you deem unusual or odd, please contact us immediately at communications@hmc-heerema.com, or call +31[0]71 579 9000 and ask to speak to the Communications Department.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

intertekcorp.com

Unread postby firefly » Mon Jul 31, 2017 9:13 pm

The fake site claims to be Intertek Corporation.

The real Intertek Group plc was founded in 1888, being headquartered in London, United Kingdom.

The fake one is active since December 2016. The scammers are using the privacy protection given by the Registrar, LiquidNet Ltd., to hide their identity and location.

From the fake site:

Intertek Corporation is a leading independent oil and natural gas exploration and production company. Intertek’s operations are focused onshore in the United States and Offshore worldwide.


Have Questions about our vacant positions??
Send a mail to our Human Resource team
hr.dept@intertekcorp.com
stevencarter@intertekcorp.com


Contact details on the fake site:

HEAD OFFICE
10101 Southwest Freeway
Suite 400
Houston, Texas 77074, USA
+19406033595
info@intertekcorp.com

UK OFFICE
81 Victoria Street, London, SW1H 0HW
+447839131170
info@intertekcorp.com


Few months ago, the UK phone number was reported by one of the LinkedIn users, while it was used impersonating another company in a job scam:

Beware of an email coming from Frank Smith out of the UK for job offer for Facility Manager position in Houston on Indeed the information on the email is as follows: Frank Smith Regional Human Resource Manager, Lutech Resources UK limited tel: +447839131170 50 Eastbourne Terrace, Paddington, London England, W2 6LG United Kingdom


For the fake site details: https://db.aa419.org/fakebanksview.php?key=125884

This is what the fake site looks like:

intertek.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

lifeplusassurance.com

Unread postby firefly » Tue Aug 01, 2017 8:54 pm

The fake site is used after the victim get the confirmation for the bogus job. Life Plus Assurance is the "company" pretending to get the needed insurance documents needed to travel overseas to their new workplace that doesn't exist.

According to the fake site:

Life Plus Assurance helps people preserve and protect what they earn, build, own, and cherish. Keeping this promise means we are there when our customers need us most.
Throughout our operations around the world, we are committed to providing insurance products and services to meet the needs of individuals, families, and businesses; offering a diverse and dynamic work environment for our employees; and supporting our communities.


Contact details on the fake site:

26 South Street Baltimore, Maryland 21202, U.S.A.
(+1)202.688.5214 (+44) 703.595.4380
info@lifeplusassurance.com


+12026885214 - Bandwidth.com VoIP number
+447035954380 - universal phone number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125916; the registrant is using the privacy protection given by the registrar to hide his real identity and location:
Domain Name: LIFEPLUSASSURANCE.COM
Updated Date: 2016-10-19
Creation Date: 2016-10-19
Registry Expiry Date: 2017-10-19
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

This is what the fake site looks like:

lifeplus.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

palinsurancegroup.com

Unread postby firefly » Fri Aug 04, 2017 4:24 pm

The fake site claims to be Pal Insurance Group.

From the fake site:

At Pal Insurance Group, coverage is what we are in the business of providing. So we take the time to learn about our clients' needs. We work for our clients, to get them the best coverage at the best price.


Contact details on the fake site:

300 E. Lombard St. Suite 820 Baltimore, Maryland 21202
(+1)202.688.5214 - (+44) 703.595.4380
info@palinsurancegroup.com


The same phone numbers were previously used with the above reported fake site, now suspended, lifeplusassurance.com.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=126015; the registrant is using the privacy protection given by the registrar to hide his real identity and location:
Domain Name: PALINSURANCEGROUP.COM
Updated Date: 2016-11-30
Creation Date: 2016-11-30
Registrar Registration Expiration Date: 2017-11-30
Registrar: LIQUIDNET Ltd.
Domain Status: addPeriod
Registrant Name: Whois Agent LiquidNet US LLC

This is what the fake site looks like:

palins.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

premier-oilplc.com

Unread postby firefly » Fri Aug 04, 2017 5:01 pm

The fake site claims to be Premier Oil. The domain is used only for the email address.

The real company posted a warning on their site - http://www.premier-oil.com/careers/aler ... job-offers:

We are aware of emails circulating containing "job offers" purporting to come from Premier Oil, asking people to provide personal details (e.g. bank account or passport details) or payment to cover immigration fees or similar.
Any such communication has absolutely no connection with Premier Oil.
Premier will only offer you a role after a formal recruitment process involving the candidate, HR and hiring managers. Face to face interviews are always conducted prior to making job offers.

We never request money transfers from job candidates.

We urge anyone who has received any such communication not to respond nor divulge any information, and to contact our corporate Human Resources team by email recruitment@premier-oil.com or on +44 (0)20 7730 1111.


Contact details used in scam:

mike.fleming@premier-oilplc.com
careers@premier-oilplc.com
legal.dept@premier-oilplc.com

For the fake site details: https://db.aa419.org/fakebanksview.php?key=126016.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

rockwellsoffshore.com

Unread postby firefly » Fri Aug 04, 2017 5:21 pm

The fake site claims to be Rockwells Offshore / Rockwells Drilling.

From the fake site:

ROCKWELLS Drilling activities in the field of supplying rigs, technical services drilling and wells, manpower supply services in the field of drilling and oil and gas wells (offshore and onshore). Over the past decade, ROCKWELLS Drilling has experienced strong growth, becoming one of the leading corporations in the United Kingdom Oil and Gas Corporation, a drilling contractor and service provider market reputation wells bare.


Contact details on the fake site:

The Point West Building 10101 Harwin Drive Houston, TX, 77036
+1 281 220 3562
+1 863 582 5451
info@rockwellsoffshore.com


+12812203562 / +18635825451 - the same phone numbers were used also with another fkae site reported above, crestwellsdrilling.com.

Back in 2014, the first phone number was used with another fake site impersonating a company in a job scam - ryancompnies.com.

"Over the past decade" ... the site was created in February 2017.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=126017.

This is what the fake site looks like:

rockwells.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

sparfforddriling.com

Unread postby firefly » Fri Aug 04, 2017 6:00 pm

The fake site claims to be Sparfford Drilling.

From the fake site:

Spafford is a pioneer when it comes to drilling in environmentally sensitive areas. We drilled an initial discovery well on Alaska’s North Slope and have a history of successful operations in this closely regulated area. Spafford has also drilled in Canadian national forests and in wildlife and bird sanctuaries throughout North America.


Their entire management team is created with stolen an renamed pictures of people having nothing to do with the oil industry.

spafford-team.PNG


Contact details on the fake site:

5850 San Felipe Street, Houston, TX 77057, USA
Email Us
info@sparfforddriling.com
Call Us
(+1) 281 2203562


+12812203562 - the "company shares the phone number with the previously reported rockwellsoffshore.com.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=126018

This is what the fake site looks like:

sparfford1.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

PreviousNext

Return to Fake sites/Phishing sites.

Who is online

Users browsing this forum: No registered users and 23 guests