Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#91531 by Oktam Thu Mar 22, 2012 2:06 pm
Hello everybody,

I have found a chinese online shopping site with cheap electronics. I thougt it might be a scam, so wanted to ask your help to determine if the company is scam or not. Company's name is shenzhen kunda trade co. ltd. It is website is www.kundatrade.com
Thank you
Advertisement

#91538 by Helen Halper Thu Mar 22, 2012 2:52 pm
Welcome to Scamwarners,Oktam!

Yes, http://www.kundatrade.com that's definitely a fake website. Although they have "Copyright ©2007" on the bottom of their homepage, the site was only set up last year and was registered for only one year.

Whois information for domain: kundatrade.com

kundatrade.com
IP address: 173.213.90.97
Registrar: XIN NET TECHNOLOGY CORPORATION
Referrer: http://www.xinnet.com
Created: 2011-03-27
Updated: 2011-03-27
Expires: 2012-03-27

Status: ok
Name Server: ns1.72dns.com
Name Server: ns2.idc1.cn


Would you please post any emails that you received from these scammers, as our resident site killers will need that to get the site shut down.

#91674 by Oktam Fri Mar 23, 2012 3:19 am
Dear Helen,

Thank you for your quick reply! Are sure thet the company is scam? When I wrote them and said that I had heard their company is scam, the sales manager wrote me the following and attached their certificate:
Dear my friend:

Thanks for your email for me.
My friend,there is a bad rumours on our company.but that is not true.we can offer you our company certificate,we do long time and good cooperation business.we can also show you our company tracking list before.please see my attachment for you.
Before there are 1 customers said he have paid to our company by Bank TT.as you know the bank tt needs some days for the payment transfer.so our company wait for the payment confirmation.then prepare the packs and send the packs.but they ask our company send the packs immdiately without the payment confirmation.so our company do not agree this.then they refund their payment and say some rumours on the internet with their friends.
Await for your early reply!


Jason cheng
#91681 by David Jansen Fri Mar 23, 2012 4:06 am
As Helen already said, it is a scam! On the fake website are their contact email addresses, which are all free webmail addresses. The reason for this is that these scammers know that their fake websites will be reported and taken down, and they would also then loose their email address with the domain name. Do not buy anything from this website!

Being a victim doesn't mean you stand alone. We're here to help you.
#91734 by vonpaso xlura Fri Mar 23, 2012 11:27 am
Could you post emails, with complete headers, either from the domain (with your previous email to the domain) or mentioning the website? We'll need those to kill the domain.

It's pointless killing the domain now. Wait five days and see if the owners renew it; then try to shoot it down. If it gets put into Client Hold, that'll keep everyone from using the domain for another year.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
#91785 by Oktam Fri Mar 23, 2012 5:49 pm
The email of the sales manager of the company Kunda trade is [email protected]
And the website is www.kundatrade.com
Now my dialog with him! His nickname is Jason Cheng.
When I asked him about thier products if they are original or copy he answered the following:
Dear my friend:

Thanks for your email for me.wish good cooperation with you.
All the products from our company are 100% authentic and brand new,we do not sell copy or used products,and come with worldwide warranty.
So please let me know what products do you want to order,then i can confirm the final amount with shipping costs of your order,for the full pricelist of our products,please see my attachment for you.
We can send the package to Saint-Petersburg, Russia,It will cost 4-6 working days for the shipment,our shipment service is DHL,UPS or TNT.
Wish our first business goes well.
Then I asked the prices and shipping free, he wrote the following:
Thanks for your nice email for me.
For the price of your interested items are as follows:
Samsung Galaxy S II Epic 4G Touch,280usd/unit,Shipping costs is 25usd/unit
Sony VAIO VPCF232FX/B 16.4" LED Notebook - Intel Core i7 i7-2670QM 2.20 GHz - Matte Black,390usd/unit,the shipping costs is 55usd/unit
So total amount of your order is 750usd,including the shipping fee already.we will use DHL for the shipment to Russia.
For the payment methods,our company do not accept visa card,we can accept bank transfer,money gram or western union.
I asked him if he accepts paypal payment, he wrote:
Thanks for your quick reply for me,i am sorry that our compay do not accept paypal payment.
When I wrote him: I found out that your business is fake and scam. Is that true?
Thanks for your email for me.
My friend,there is a bad rumours on our company.but that is not true.we can offer you our company certificate,we do long time and good cooperation business.we can also show you our company tracking list before.please see my attachment for you.
Before there are 1 customers said he have paid to our company by Bank TT.as you know the bank tt needs some days for the payment transfer.so our company wait for the payment confirmation.then prepare the packs and send the packs.but they ask our company send the packs immdiately without the payment confirmation.so our company do not agree this.then they refund their payment and say some rumours on the internet with their friends.
Await for your early reply!
That is all our messaging. I hope it will help.
#91788 by Helen Halper Fri Mar 23, 2012 6:47 pm
Hello again, Oktam!
Thanks for your additional post! What is also needed are the headers of one of the emails. Instructions for finding those are below... :D

#91876 by Oktam Sat Mar 24, 2012 2:49 am
Here are the full headers:

mDelivered-To: Removed
Received: by 10.147.51.15 with SMTP id d15csp592yak;
Thu, 22 Mar 2012 22:51:07 -0700 (PDT)
Received: by 10.180.85.70 with SMTP id f6mr3567755wiz.5.1332481866163;
Thu, 22 Mar 2012 22:51:06 -0700 (PDT)
Return-Path: <[email protected]>
Received: from blu0-omc2-s21.blu0.hotmail.com (blu0-omc2-s21.blu0.hotmail.com. [65.55.111.96])
by mx.google.com with ESMTP id s15si7476514wec.105.2012.03.22.22.50.56;
Thu, 22 Mar 2012 22:51:06 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.111.96 as permitted sender) client-ip=65.55.111.96;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.111.96 as permitted sender) [email protected]
Received: from BLU156-W44 ([65.55.111.73]) by blu0-omc2-s21.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 22 Mar 2012 22:49:10 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/mixed;
boundary="_d3871546-1a79-44ce-855e-325777c94e25_"
X-Originating-IP: [114.105.50.38]
From: JASONCHENG <[email protected]>
To: Removed
Subject: RE: Message from Kunda trade
Date: Fri, 23 Mar 2012 05:49:09 +0000
Importance: Normal
In-Reply-To:
<[email protected]om>
References:
<[email protected]>,<[email protected]>,<[email protected]om>,<[email protected]>,<[email protected]om>,<[email protected]>,<[email protected]om>
MIME-Version: 1.0
X-OriginalArrivalTime: 23 Mar 2012 05:49:10.0544 (UTC) FILETIME=[AB5A5100:01CD08B8]

--_d3871546-1a79-44ce-855e-325777c94e25_
Content-Type: multipart/alternative;
boundary="_e0af580e-26ce-4174-bf5b-8bc1be578b31_"

--_e0af580e-26ce-4174-bf5b-8bc1be578b31_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: 8bit

If you need any more info, let me know.
Best, Oktam

Mod edit: Romoved personal details - CW
#91933 by jolly_roger Sat Mar 24, 2012 10:24 am
Well done there Oktam for publishing the header. As the others have indicated it is a scam. Not sure where said company claims to be in china but any online store from the fujian area I would be most wary of. By publishing the details, you've saved someone in future.
#92057 by vonpaso xlura Sat Mar 24, 2012 10:04 pm
The IP address the mail came from is a China Telecom address in Anhui, whereas the domain is registered by someone in Fujian. Fujian is on the coast near Taiwan; Anhui is north of Fujian and does not share a border with it. Is this enough to prove to the registrar and hoster that it's a fraud?

The IP address of the website is 173.213.90.97, which is in Serverhub Cloud, Arizona.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10

Who is online

Users browsing this forum: No registered users and 41 guests