Joe Wein
Fighting spam and scams
on the Internet

Home / Blog / About us
Spam
419/Nigeria
Online fraud
jwSpamSpy
Contact

Email Spam Filter:
jwSpamSpy
Try it for free!

Google
 

Fraudulent Job offer: ultra-co.com

Scam domain ultra-co.com (created 2005-01-31)
The "ULTRACO S.A." job offer is part of a series of scams designed to trick third parties into assisting the criminal laundering of stolen money. It has many similarities to the alpenantiqe.com and a-i-c-d.org frauds. For example, the website is a copy of an existing legitimate website, with the addition of a job offer page. As in the "
Alpen Antique" scam the website is hosted by Yahoo, Inc.

See more information about this type of scam here:

Here is the message:

Dear Mr./Mrs.

We are writing you on behalf of ULTRACO S.A., well-known prestigious Swiss company which main field of operation lies in selling elite watches collections and jewelry series. We are glad to propose you interesting and highly paid job in financial sphere. At this moment we are in need of new regional financial agents whose work consists of collecting the payments from the customers from the same country and forwarding them to our companys main office. Due to our operating employees inability to handle the sales volume we decided to open additional vacancies in each European country as well as in the USA, Canada, Australia and New Zealand.
Regional financial managers are needed because we accept bank wire transfers only and as you know international wire transfer could take more than 3 or even 5 days, thus increasing term of delivery up to 5-8 days. Such long term of delivery adversely affects our sales volume that's why we provide our agent's account details to the customer who is in the same country. Bank transfer within the same country takes 1-2 days only. After we receive confirmation that the amount has been received we send purchased items to the customer immediately. These actions let us to diminish term of delivery to 3-4 days.
Please visit our webpage at www.ultra-co.com/vacancies.html to get to know our proposal in greater detail and if you are interested please send an email to vacancy@ultra-co.com and we will send you an Application Form back. If you have any questions don't hesitate to contact us at info@ultra-co.com and we will reply you for sure. Thanks for reading our proposal.

Chief Executive Officer,
Jose Ansari,
ULTRACO S.A.

The website is a rip-off of http://www.ultraco.ch, a Swiss jewelers that has had a website since 1997. By contrast, the fraudulent domain "ultra-co.com" was only registered a couple of days before the above spam was sent, using a postal address in the USA.

Reponse to a job application email: Compare the following portion of a reply to a job applicant for "ultra-co.com" to a similar reply during the "alpen-antique.com" fraud: "ultra-co.com" response:

Greetings,

We are glad that you are interested in our proposal. 
For beginning our collaboration we suggest you to sign 
"Digital contract". This process is quite simple - just 
fill in the following form and send it back to us. 
Within 1-2 business days we will contact you and inform 
of our reply. As usual we approve all the applications 
with the only exception if past-due loans or similar 
negative facts are disclosed during examining of your 
credit history which will be provided to us by a proper 
organization in your country. Usually we launch thorough 
verification procedure because you will be responsible 
for handling a good deal of money. Criminal records will 
be the reason for denial too. 
We engage ourselves to issue payments for your work 
(5% of each payment that has been sent to your account 
immediately after the payment is received) but only if 
the payment is successfully transferred according to our 
instructions within 12 hours since the payment is available 
on your account. If you fail to complete the specified 
operation your commission will be voided.
After the verification period (2 weeks since you have 
received the first transaction) we will send an official 
printed contract to your mailing address with our CEO’s 
signature. You position of financial manger will be 
specified in this document. The verification period is 
required for testing your abilities and disposition 
towards this work. Practice showed that it is possible 
to handle such money transferring tasks within few hours 
but sometimes candidates are not able to cope with a task 
successfully within specified deadline. Since this form is 
filled by you, it means that you engage to commit yourself 
to make proper transfers without any delay during the 12 
hours since the funds are available on your account. 
Mobile phone is also required so that you could be informed 
regarding the recent transfers efficiently.

Agent form.

1. Personal information:
Country/State:
City:
Postal address:
Full name:
Age (or DOB):
Home phone number:
Cellular phone number:
Email:
Education:
Work expirience:
Current occupation:

2. Information required for making transactions:

Bank name:
Routing Number:
Account Number:
Account name:

------------------------------------------------------------------

Please try to be very attentive filling your bank account 
number, because all the payments will be sent to it in 
future and you are personally liable for its accuracy.
All the information provided to us will be used for our 
cooperation only and will not be ever disclosed to 3rd 
parties or companies with the exception of your account 
number (it will be sent to our customer’s for issuing 
payments to it). You can either open new account or use 
an existing one for receiving the payment. If you decide 
to open new account for your work, please let us know and 
we will wait for 10 banking days until new account is ready. 
Please send the filled form to our email: vacancy@ultra-co.com 
or via fax. If you prefer to send it by fax please send us 
printed form, hand-written applications won’t be accepted.

Sincerly yours,

Jose Ansari
Chief Executive Office
ULTRACO S.A.
Email: vacancy@ultra-co.com

"alpen-antique.com" reponse:
Greetings,

For further cooperation we ask you to fill up the
following form. Your private information will not be
transmitted or sold to any companies, parties or
persons without your prior permission. This
registration form will be processed within a 4 days
and you'll be notified as soon as this process is
finished.
Please notice, that You are not in any way responsible
for our goods' quality and terms of its' delivery. As
soon as you have filled and sent us the form and was
notified about successful registration, you can
consider to be employed. It means that You're obliged
to proceed the transaction we'll make to your account
and make the appropriate payments within 24 hours
according to the instructions you'll be sent (with the
only exception of weekends and holidays).

Agent form.

Country:
State:
City:
Address:
ZIP (postal code):
First name:
Middle Name:
Last name:
Age:
Home phone number:
Cellular phone number:
Email:
Current occupation
Bank Name:

Please fill this form carefully as you're fully
responsible for the information you've submitted to
us. Payments will be made to the specified account
that's why all the information and account properties
should be provided correctly. You can use either you
existing account or open a new one. If you decide to
open a new account, please let us know and we'll be
able to wait for the new account information for 2
banking days.

As soon as the formed is filled please send it  to:
job@alpen-antique.com .
Visit our website to get more detailed information
about our company
and this job opportunity at www.alpen-antique.com.

Best regards,
Karl Schallmeiner,
Alpen-Antique GmbH
job@alpen-antique.com

WHOIS details for ultra-co.com

Request: ultra-co.com
connected to whois.melbourneit.com [203.27.227.114:43] ... 

Domain Name.......... ultra-co.com
  Creation Date........ 2005-01-31
  Registration Date.... 2005-01-31
  Expiry Date.......... 2006-01-31
  Organisation Name.... David Ortiz
  Organisation Address. 21673 mary dee ct.
  Organisation Address. 
  Organisation Address. Hayward
  Organisation Address. 94541
  Organisation Address. CA
  Organisation Address. UNITED STATES

Admin Name........... David Ortiz
  Admin Address........ 21673 mary dee ct.
  Admin Address........ 
  Admin Address........ Hayward
  Admin Address........ 94541
  Admin Address........ CA
  Admin Address........ UNITED STATES
  Admin Email.......... ajb30nws@yahoo.com
  Admin Phone.......... +1.5107543348
  Admin Fax............ 

Tech Name............ YahooDomains TechContact
  Tech Address......... 701 First Ave.
  Tech Address......... 
  Tech Address......... Sunnyvale
  Tech Address......... 94089
  Tech Address......... CA
  Tech Address......... UNITED STATES
  Tech Email........... domain.tech@YAHOO-INC.COM
  Tech Phone........... +1.6198813096
  Tech Fax............. +1.6198813010
  Name Server.......... yns1.yahoo.com
  Name Server.......... yns2.yahoo.com


Anti-Spam Resources:
jwSpamSpy is our spam filter (free evaluation version available for download)
Anti-spam domain blacklist – list of domains that I refuse to receive mail from
Recent additions to domain blacklist (with whois details)
"419" scam sender/contact addresses ("Nigeria connection" address book)
DNS-based IP and domain name blacklists
IP address ranges
Dynamic IP addresses (700 KB!)
Name server / Registrar combinations
Free email providers
AOL dial-up address ranges and mail servers
How to trace senders of spam
Frequently asked questions (FAQ)
Lookup an IP address on blacklists (http://dnsbl.net.au/lookup/)

Clueless virus filters spam innocent third parties
Challenge and Response spam filters: A selfish idea for selfish times

ShareYourExperiences.com spammers
Smyrnagroup spammers (in German)
Kaplan College spam
Stock Price Manipulation Spam ("Pump & Dump")
What's the deal with "OEM software"?
'Phishing' for your wallet
Job spam for payment processors
Spam phone numbers ("diploma" spam, etc.)
"Joe job" information

Link exchange offer spam
Getting creative with spam
Link exchange spam: allcarpictures.com

Xenophobia, Spam and Viruses: The "German Spam" (Sober.H)
Sober.H – Racist German email spam spread by virus (in German)

"Joe job" against joewein.de
Porn spam: watchsound.com
Porn spam: hotsalza.com
Name servers used by spammers: joker.com
Rogue name servers: mediadreamland.com
Rogue name servers: airmaramba.biz
Rogue name servers: bonafidecash.com
Rogue name servers: maileasy.biz

Browser hijacking: heretofind.com

Computer Viruses