The victims receive a link to a tracking page on the fake site and a code, for tracking their parcel.
Type of message received after few days:
Onhold Shipment On Hold at the xxx International Airport at Cargo section xxx for Import Duty Clearance, before Release for final destination please Payment should be effected Soon.
or:
Landed Shipment Landed waiting for duty/Import Clearance.
From the fake site:
Founded in 1997 as a messenger company, Thyssenkrupp has grown into a multi-billion-dollar company by clearly focusing on the goal of enabling commerce around the globe. Today, Thyssenkrupp is a global company with one of the most recognized and admired brands in the world.
Contact details:
+077 8373 3518
info@thyssenkrupp-logistics.com
110 princes street,
City Rock Ferry,Zip code CH42 2UB London
+447783733518 - mobile number.
Thyssenkrupp is the trademark name of a German multinational conglomerate with focus on industrial engineering and steel production. The legit company has no courier/delivery activities.
"Founded in 1997" is another lie - the fake site was created in June 2015.
The location of the co called company is another lie - Rock Ferry is on one side of the UK, London on the other side:
From the fake site details:
Domain Name: thyssenkrupp-logistics.com
Updated Date: 2018-08-31
Creation Date: 2015-06-02
Registrar Registration Expiration Date: 2019-06-02
Registrar: NameSilo, LLC
Reseller: CONSULT HOSTING SERVICE
Registry Registrant ID:
Registrant Name: Domain Administrator
Registrant Organization: See PrivacyGuardian.org
This is what the fake site looks like:
We cannot see who the registrant is, because he uses the privacy protection given by NameSilo.
The person behind this fraudulent domain name is not so hard to find. Consult Hosting Service is a Nigerian entity. One of their clients is DcommNG group. The person behind this group is Ngenge Niklauz Liljoe. And he is the "trademark" identity hidden behind all the fake sites reported in this topic.
The victims details - name, location, phone number, email address - are posted on unsecured pages of the fake site. Anyone can get those details and abuse the victims further.
Because of that we consider fair to expose the faker maker identity as well. Proxy or not, he cannot hide forever while exposing victims defrauded with the fake sites he creates.
Few of the fake characters used in scam:
Fake characters used in scam:
Richard Philip
Address 101, Naberezhnaya Reki Karpovki, St. Petersburg, 197136, Russia
Email z9kej20ica@thrubay.com - throwaway email address
Phone +79653449132 - mobile number
Arnold Walter
Address 144 Kuhl Avenue,Atlanta, Georgia United State of America,30329.
Email arnoldwr1965@hotmail.com
Phone +1(229)-598-8182 / +12295988182 - Non-Fixed VoIP (e.g. Skype or Google Voice); Original carrier: Neutral Tandem-georgia, Llc - Ga
Hallen Morgan
Address 3044 Round Table Drive,West Chester ,45069 Ohio
Email Hellenmorgan@aol.com
Phone 513-777-6705 / +15137776705 (could be spoofed)
Edward Thomas
Address 105 Thirsk Road, Liverpool, United Kingdom.
Email Edwardthomas21@yahoo.com
Phone +4470 7778 6462 / +447077786462 - universal phone number
Kent Gary
Address Abu Ghraib, US Military Bases in Baghdad, Iraq
Email kentgary0987@aol.com
Phone +17754553276 - Non-Fixed VoIP (e.g. Skype or Google Voice); Original carrier: At&t Corp. - Nv
Jose Selomar
Address A41 Chester Road Liverpool,United Kingdom
Email joseselomar2177@gmail.com
Phone +4915219319453 - German mobiile number
or
Selomar Rami Luca
Address United Kingdom Liverpool
Email Ramiselomar217@gmail.com
Phone +4915219319453
Topic Concerning Selomar Rami Luca here:
viewtopic.php?f=12&t=72132&p=176524#p176524
Dominic Thomas Christopher
Address Syria,Damascus
Email Christthomas23897@gmail.com
Phone 21-2218240
Walton Korolenko
Address 82 Cheriton Rd,WEST PARK United Kingdom.
Email WALTONKOROLENKO@hotmail.com
Phone 079 8906 6685 / +447989066685 - mobile number
David / Ryan /
Address 3037 Round Table Drive,West Chester,Ohio,United State.
Email david2@aol.com
Phone 513-777-6595 / +15137776595 (could be spoofed)
Cairo Johan
Address 22 Cunnery Rd,MANCHESTER,M60 3WG London
Email cairojohan6512@hotmail.com
Phone 6232267399 / +16232267399 - Non-Fixed VoIP (e.g. Skype or Google Voice); Original carrier: Metro Pcs, Inc.
Thomas Schulz
Address Syria Military Camp, Aleppo
Email thomasschulz002@gmail.com
Phone 963551876645
Johnson James Ojeda
Address United States Military Base,Camp Leatherneck, Helmand Province, Kabul, Afghanistan
Email johnjames081@hotmail.com
Thomas Schulz
Address United States Military Base,Camp Leatherneck
Email thomasschulzlive@gmail.com
David Lucas
Address Military Base Kabul, Afghanistn
Email davidlucas77741@gmail.com
Sargent Shawn Murphy / Sargent Ruthie Hendryck
Address United States Army, Kabul, Afghanistan
Ivan Marcos
46 Morningside Road Edinburgh Scotland EH10 4BF
Glasgow, Scotland
0117 366 0081 / +441173660081 - geographic number