The victims receive a link to a tracking page on the fake site and a code, for tracking their parcel.
Type of message received after few days:
Onhold Shipment On Hold at the xxx International Airport at Cargo section xxx for Import Duty Clearance, before Release for final destination please Payment should be effected Soon.
Landed Shipment Landed waiting for duty/Import Clearance.
From the fake site:
Founded in 1997 as a messenger company, Thyssenkrupp has grown into a multi-billion-dollar company by clearly focusing on the goal of enabling commerce around the globe. Today, Thyssenkrupp is a global company with one of the most recognized and admired brands in the world.
+077 8373 3518
110 princes street,
City Rock Ferry,Zip code CH42 2UB London
+447783733518 - mobile number.
Thyssenkrupp is the trademark name of a German multinational conglomerate with focus on industrial engineering and steel production. The legit company has no courier/delivery activities.
"Founded in 1997" is another lie - the fake site was created in June 2015.
The location of the co called company is another lie - Rock Ferry is on one side of the UK, London on the other side:
From the fake site details:
Domain Name: thyssenkrupp-logistics.com
Updated Date: 2018-08-31
Creation Date: 2015-06-02
Registrar Registration Expiration Date: 2019-06-02
Registrar: NameSilo, LLC
Reseller: CONSULT HOSTING SERVICE
Registry Registrant ID:
Registrant Name: Domain Administrator
Registrant Organization: See PrivacyGuardian.org
This is what the fake site looks like:
We cannot see who the registrant is, because he uses the privacy protection given by NameSilo.
The person behind this fraudulent domain name is not so hard to find. Consult Hosting Service is a Nigerian entity. One of their clients is DcommNG group. The person behind this group is Ngenge Niklauz Liljoe. And he is the "trademark" identity hidden behind all the fake sites reported in this topic.
The victims details - name, location, phone number, email address - are posted on unsecured pages of the fake site. Anyone can get those details and abuse the victims further.
Because of that we consider fair to expose the faker maker identity as well. Proxy or not, he cannot hide forever while exposing victims defrauded with the fake sites he creates.
Few of the fake characters used in scam:
Fake characters used in scam:
Address 101, Naberezhnaya Reki Karpovki, St. Petersburg, 197136, Russia
Email firstname.lastname@example.org - throwaway email address
Phone +79653449132 - mobile number
Address 144 Kuhl Avenue,Atlanta, Georgia United State of America,30329.
Phone +1(229)-598-8182 / +12295988182 - Non-Fixed VoIP (e.g. Skype or Google Voice); Original carrier: Neutral Tandem-georgia, Llc - Ga
Address 3044 Round Table Drive,West Chester ,45069 Ohio
Phone 513-777-6705 / +15137776705 (could be spoofed)
Address 105 Thirsk Road, Liverpool, United Kingdom.
Phone +4470 7778 6462 / +447077786462 - universal phone number
Address Abu Ghraib, US Military Bases in Baghdad, Iraq
Phone +17754553276 - Non-Fixed VoIP (e.g. Skype or Google Voice); Original carrier: At&t Corp. - Nv
Address A41 Chester Road Liverpool,United Kingdom
Phone +4915219319453 - German mobiile number
Selomar Rami Luca
Address United Kingdom Liverpool
Topic Concerning Selomar Rami Luca here:
Dominic Thomas Christopher
Address 82 Cheriton Rd,WEST PARK United Kingdom.
Phone 079 8906 6685 / +447989066685 - mobile number
David / Ryan /
Address 3037 Round Table Drive,West Chester,Ohio,United State.
Phone 513-777-6595 / +15137776595 (could be spoofed)
Address 22 Cunnery Rd,MANCHESTER,M60 3WG London
Phone 6232267399 / +16232267399 - Non-Fixed VoIP (e.g. Skype or Google Voice); Original carrier: Metro Pcs, Inc.
Address Syria Military Camp, Aleppo
Johnson James Ojeda
Address United States Military Base,Camp Leatherneck, Helmand Province, Kabul, Afghanistan
Address United States Military Base,Camp Leatherneck
Address Military Base Kabul, Afghanistn
Sargent Shawn Murphy / Sargent Ruthie Hendryck
Address United States Army, Kabul, Afghanistan
46 Morningside Road Edinburgh Scotland EH10 4BF
0117 366 0081 / +441173660081 - geographic number