Job offer spam: Planett-design.com / Artur Vovan (FRAUD)
Planett-design.com is fake webdesign company whose only purpose is to recruit job seekers to trick them into assisting in criminal fraud. It is part of the same series of fraudulent job offers as alpenantique.com, ppharm.com, etc. The website is ripped off from a real webdesign company in the UK.
With these fraudulent job offers, the "employee" may receive an illegal fund transfer from a bank account or PayPal account that was the target of a "phishing" attack. Or he may collect a payment from an unsuspecting eBay-buyer who will never receive the goods, while the "employee" already sends the money to virtually untraceable criminals in another country.
The key to cracking this type of crime, other than warning the public, is to monitor these crimes while they are in progress, before the money has disappeared.
Here's the initial spam to lure in job seekers:
Sent: Sunday, 19 December, 2004 7:00
Subject: Hello Friends
You can earn from $300 to $2000 per week easily !
You shouldn't invest or purchase anything, it will not cost even $1 for you
You should just spend some time, about 1-2 hours per day and even in the first week you will start to receive your earned money.
If you are interested in that, just write us to the following e-mail email@example.com .
It is obligatory to indicate in the letter what country are you from and we will send you a detailed description how you can earn those money.
Sincerely yours, Artur Vovan
Your mail is emailaddress
When contacted at firstname.lastname@example.org, the scammer replied:
Sunday, December 19, 2004, 12:24:05 AM, you wrote:
XY> please send me more information.
XY> I live in country.
Thank you for the interest to our proposal.
Our company www.planett-design.com produces different programs, web sites and scripts for the Internet and a lot of other things. We constantly seek more convenient kinds of payment for our clients.
A lot of our clients want to pay for the services through payment system www.paypal.com, it is the best and the easiest way for the clients to pay for our services, but unfortunately www.paypal.com company refuses to work with the eastern Europe countries and we seek a representative in one of the countries with which paypal works.
We will offer you 20% from the money turnover on your paypal account, in average the turnover totals about $1500-4000 per week and you can easily earn $300-800 per week. Our company develops very fast and money turnover will constantly raise.
If you are interested we are waiting for your reply and we'll send you more detailed description how all of it will be working.
In the future please use the following e-mail email@example.com for correspondence.
Best regards, Artur Vovan
Here is the WHOIS record for the domain:
The domain was registered two days before the job advertisement went out.
As in most of the other fraudulent job offers, the bogus website is based on a real website, of which it is a rip-off. Compare these passages:
6 Okipna ul
Kyiv, NA 02002
Domain name: PLANETT-DESIGN.COM
Vovan, Artur firstname.lastname@example.org
6 Okipna ul
Kyiv, NA 02002
Polyakov, Alex email@example.com
1105 Terminal way
Reno, NV 89502
+1.8886164598 Fax: +1.3202102398
Registrar of Record: TUCOWS, INC.
Record last updated on 17-Dec-2004.
Record expires on 17-Dec-2005.
Record created on 17-Dec-2004.
Domain servers in listed order:
...versus the original
Planett-Design specialise in web sites that are more than online brochures. Our database and programming technology enables your web site to really work for you. After all, whilst the Web is great at providing information, its real value lies in automation that gives visitors what they need, when they need it. Whatever the services that you would like to provide to your customers, Planett-Design can probably provide a solution.
T-Soft specialise in web sites that are more than online brochures. Our database and programming technology enables your web site to really work for you. After all, whilst the Web is great at providing information, its real value lies in automation that gives visitors what they need, when they need it. Whatever the services that you would like to provide to your customers, T-Soft can probably provide a solution.
If you have been recruited by "Planett-Design", contact us!
jwSpamSpy is our spam filter (free evaluation version available for download)
Anti-spam domain blacklist – list of domains that I refuse to receive mail from
Recent additions to domain blacklist (with whois details)
"419" scam sender/contact addresses ("Nigeria connection" address book)
DNS-based IP and domain name blacklists
IP address ranges
Dynamic IP addresses (700 KB!)
Name server / Registrar combinations
Free email providers
AOL dial-up address ranges and mail servers
How to trace senders of spam
Frequently asked questions (FAQ)
Lookup an IP address on blacklists (http://dnsbl.net.au/lookup/)
Clueless virus filters spam innocent third parties
Challenge and Response spam filters: A selfish idea for selfish times
Smyrnagroup spammers (in German)
Kaplan College spam
Stock Price Manipulation Spam ("Pump & Dump")
What's the deal with "OEM software"?
'Phishing' for your wallet
Job spam for payment processors
Spam phone numbers ("diploma" spam, etc.)
"Joe job" information
Link exchange offer spam
Getting creative with spam
Link exchange spam: allcarpictures.com
Xenophobia, Spam and Viruses: The "German Spam" (Sober.H)
Sober.H – Racist German email spam spread by virus (in German)
"Joe job" against joewein.de
Porn spam: watchsound.com
Porn spam: hotsalza.com
Name servers used by spammers: joker.com
Rogue name servers: mediadreamland.com
Rogue name servers: airmaramba.biz
Rogue name servers: bonafidecash.com
Rogue name servers: maileasy.biz
Browser hijacking: heretofind.com