www.bigwinterdeal.com

[eaperezh]

Prices are too good to be true about 50% off.
They even have links to eicafraud.info

**EICAFRAUD.INFO Whois Information**
Domain ID15549870-LRMS
Domain Name:EICAFRAUD.INFO
Created On:04-Dec-2006 15:46:10 UTC
Last Updated On:04-Dec-2006 15:46:13 UTC
Expiration Date:04-Dec-2007 15:46:10 UTC
Sponsoring Registrar:EstDomains, Inc. (R295-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant IDI_4947205
Registrant Name:Christian Nilsson
Registrant Organization:The International Bureau of Certified Internet Merchants
Registrant Street1:3-23 Holgate Road
Registrant Street2:
Registrant Street3:
Registrant City:Kohimarama
Registrant State/Province:Auckland
Registrant Postal Code:1071
Registrant Country:NZ
Registrant Phone:+64.18668397888
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:service@eicafraud.info
Admin IDI_4947205
Admin Name:Christian Nilsson
Admin Organization:The International Bureau of Certified Internet Merchants
Admin Street1:3-23 Holgate Road
Admin Street2:
Admin Street3:
Admin City:Kohimarama
Admin State/Province:Auckland
Admin Postal Code:1071
Admin Country:NZ
Admin Phone:+64.18668397888
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:service@eicafraud.info
Billing IDI_4947205
Billing Name:Christian Nilsson
Billing Organization:The International Bureau of Certified Internet Merchants
Billing Street1:3-23 Holgate Road
Billing Street2:
Billing Street3:
Billing City:Kohimarama
Billing State/Province:Auckland
Billing Postal Code:1071
Billing Country:NZ
Billing Phone:+64.18668397888
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:service@eicafraud.info
Tech IDI_4947205
Tech Name:Christian Nilsson
Tech Organization:The International Bureau of Certified Internet Merchants
Tech Street1:3-23 Holgate Road
Tech Street2:
Tech Street3:
Tech City:Kohimarama
Tech State/Province:Auckland
Tech Postal Code:1071
Tech Country:NZ
Tech Phone:+64.18668397888
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:service@eicafraud.info
Name Server:34157.MANAGEDNS4.ESTBOXES.COM
Name Server:34157.MANAGEDNS3.ESTBOXES.COM
Name Server:34157.MANAGEDNS2.ESTBOXES.COM
Name Server:34157.MANAGEDNS1.ESTBOXES.COM

**Whois data from estdomains.com for **
Registration Service Provided By: ESTDOMAINS INC
Contact: +1.3027224217
Website: http://www.estdomains.com

Domain Name: estboxes.com

Expiry Date: 06-May-2007
Days Left for Expiry: 152
Record Creation Date: 06-May-2005
Domain Status: Active


Domain servers in listed order:
ans2.estboxes.com
ns1.estsecure.com


RegistrantContact Details
Name Estdomains Inc
Company Estdomains Inc
Email Address support@estdomains.com
Address 110 W. Ninth Street #688
City Wilmington
State Delaware
Zip 19801
Country US
Tel No. +1.3027224217


AdministrativeContactDetails
Name Estdomains Inc
Company Estdomains Inc
Email Address support@estdomains.com
Address 110 W. Ninth Street #688
City Wilmington
State Delaware
Zip 19801
Country US
Tel No. +1.3027224217


TechnicalContactDetails
Name Estdomains Inc
Company Estdomains Inc
Email Address support@estdomains.com
Address 110 W. Ninth Street #688
City Wilmington
State Delaware
Zip 19801
Country US
Tel No. +1.3027224217


BillingContactDetails
Name Estdomains Inc
Company Estdomains Inc
Email Address support@estdomains.com
Address 110 W. Ninth Street #688
City Wilmington
State Delaware
Zip 19801
Country US
Tel No. +1.3027224217

**Whois on bigwinterdeal.com**
Domain Name: BIGWINTERDEAL.COM
Registrar: DIRECT INFORMATION PVT LTD D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: ALPINA1.MERCURY.ORDERBOX-DNS.COM
Name Server: ALPINA1.VENUS.ORDERBOX-DNS.COM
Name Server: ALPINA1.EARTH.ORDERBOX-DNS.COM
Name Server: ALPINA1.MARS.ORDERBOX-DNS.COM
Status: REGISTRAR-LOCK
EPP Status: clientTransferProhibited
Updated Date: 01-Dec-2006
Creation Date: 01-Dec-2006
Expiration Date: 01-Dec-2007

Domain Name: BIGWINTERDEAL.COM

Registrant:
Winter Sale, Inc.
Michael Connelly (michael.connelly@bigwinterdeal.com)
203 N Washington St
Los Angeles
CA,90428
US
Tel. +877.7662864

Creation Date: 01-Dec-2006
Expiration Date: 01-Dec-2007

Domain servers in listed order:
alpina1.mars.orderbox-dns.com
alpina1.earth.orderbox-dns.com
alpina1.venus.orderbox-dns.com
alpina1.mercury.orderbox-dns.com


Administrative Contact:
Winter Sale, Inc.
Michael Connelly (michael.connelly@bigwinterdeal.com)
203 N Washington St
Los Angeles
CA,90428
US
Tel. +877.7662864

Technical Contact:
Winter Sale, Inc.
Michael Connelly (michael.connelly@bigwinterdeal.com)
203 N Washington St
Los Angeles
CA,90428
US
Tel. +877.7662864

Billing Contact:
Winter Sale, Inc.
Michael Connelly (michael.connelly@bigwinterdeal.com)
203 N Washington St
Los Angeles
CA,90428
US
Tel. +877.7662864

Status:ACTIVE

****************
And I cant find that address correctly.

It has all the the same info as the other scam websties.

Most scam sites usually: accpet wire transfers as their only form of payment, almost unbelieveable prices, toll-free number that no one answers, mailing address and billing address in two different countries, eicafraud.org fraud symbols and etc. A list of some of the scam sites, most of them shut down, are below; they all had similiar websites (targeting electronic items). The websites look legit, but they are not. Please make sure you pass this along, I would hate for more people to get ripped off.

www.bigwintersale.com or www.winter-sale.us
www.eusatech.com
www.wholesale-4all.com
www.pulastore.com
www.electronics-4all.com
www.discountsweb-encrypted.com
www.pizda-store.com
www.discountsdotcom.com
www.discount-webstore.com
www.discounts-webstore.com
www.universewebstore.com
www.onlinewintersale.com
www.webstoreuniverse.com
www.universe-electronics.com
www.universe-webstore.com
WWW.EICAFRAUD.ORG
WWW.EICAFRAUDS.ORG
WWW.EICA-FRAUD.ORG
WWW.EICAFRAUD.INFO

Here is also an example of their Order Confirmation E-Mail


Dear Mike,

Thank you for ordering @ Big Winter Deal.
Order status - Payment pending.

Payment instructions:

The payment for your order must be sent to our payments representative, Mrs. Donna Baker. Here is all necessary information:

Name: Donna Baker
Address: Piazza Barberini 42
City: Rome
Country: Italy
Total amount: Please check the invoice below payment instructions.

***(Billing Department is located in Europe for taxes purposes)***

How to make the payment?

Step 1. Locate the nearest Western Union Agent at: http://www.westernunion.com/info/agentInquiryIntl.asp
Step 2. Make the payment with cash.
Step 3. Email a scanned copy or fax us the Western Union receipt to: payments@bigwinterdeal-encrypted.com
or fax: (213) 652-1813.

Note: Do not make any marks on the transfer copy. The following information must be readable :

- MTCN ( Money Transfer Control Number ) - 10 digits number from the payment receipt
- Sender Name and Address
- Receiver Name ( agent name )
- Amount

Once the payment is confirmed and verified (within 24 hours), you will receive the UPS tracking number for your package.


Here is your invoice:

Big Winter Deal, Inc.
Piazza Barberini 42
Rome, 00136
Italy
Phone: 1-877-237-0241
Fax: (213) 652-1800
E-Mail: sales@bigwinterdeal-encrypted.com

INVOICE
Your Order: #1126129
Status: Open
Date: 12/05/2006, 08:13 AM
Payment method: Western Union Money Transfer®
Shipping method: UPS Ground





Personal information
Title: Mr.
First name: Mike
Last name: Jones
Contact information
Phone: 290-431-1028
E-Mail: mikljones@yahoo.com





Billing address
Title: Mr.
First name: Mike
Last name: Jones
Address: 4017 Uniform Place
City: Hotdale
State/province: Maryland
Country: United States
Zip/postal code: 09364
Shipping address
Title: Mr.
First name: Mike
Last name: Jones
Address: 4017 Uniform Place
City: Hotdale
State/province: Maryland
Country: United States
Zip/postal code: 09364




CODE Product Options Amount Unit price Subtotal
PSP1001K Sony PlayStation Portable (PSP)® Extended Warranty: None
3 $120.00 $360.00
JS800001 Microsoft Zune 30GB Media Player - Black 1 $170.00 $170.00


Subtotal: $530.00
Shipping cost: $0.00

Total cost: $530.00





Assuring you of our best after sales service.

[Frazzle]

This seems very strange to me.

The street addresses given on the website are in London and Paris, yet the fax number is in the USA. I'm guessing the fax number +1 (703)-991-8117 is a follow-me redirection service.

The website is registered to someone in New Zealand, yet doesn't seem to have any other connection to NZ.

Holgate Drive, Kohimarama, Auckland, NZ is a real address. I'm guessing the scammers have appropriated it at random. The phone number +64.18668397888 is not a real NZ phone number.

Googling for '23 Holgate Kohimarama' came across http://www.eicafrauds.org/PrivacyPolicy.htm in Google's cache as retrieved on 25 Nov 2006 21:06:06 GMT.

The website also has an image on it with EICAFRAUDS.ORG on it. Elsewhere it has EICA-FRAUD.ORG and eica-frauds.org -- I guess the owner hasn't yet mastered Global Search and Replace.

I couldn't find websites for eica-frauds.org or eicafrauds.org.

Here's some DNS registrations for these domains:

WEBSITE ADMINISTRATION
Business name: eica-frauds.org
Address: 3-23 Holgate Road
City: Kohimarama
State/Province: Auckland
ZIP: 1005
Country: New Zealand
Website URL: www.ibicm.org
Website e-mail: service@ibicm.org

DNSStuff says

Domain Name:EICAFRAUDS.ORG
Created On:08-Nov-2006 15:50:29 UTC
Last Updated On:29-Nov-2006 01:25:01 UTC
Expiration Date:08-Nov-2007 15:50:29 UTC
Sponsoring Registrar:EstDomains, Inc. (R1345-LROR)
Status:CLIENT HOLD
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant IDI_4030415
Registrant Name:Karri Scruggs
Registrant Organizationiscounts Webstore
Registrant Street1:31 W Washington St
Registrant Street2:
Registrant Street3:
Registrant City:Orlando
Registrant State/Province:Florida
Registrant Postal Code:32856
Registrant Country:US
Registrant Phone:+001.8772370241
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:

Domain Name:EICA-FRAUDS.ORG
Created On:09-Oct-2006 23:49:28 UTC
Last Updated On:07-Nov-2006 23:46:47 UTC
Expiration Date:09-Oct-2007 23:49:28 UTC
Sponsoring Registrar:Melbourne IT, Ltd. dba Internet Names Worldwide (R52-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:C11604376201216
Registrant Name:BRANDI L STARKS
Registrant Organization:BRANDI L STARKS
Registrant Street1:2402 Benson Road
Registrant Street2:
Registrant Street3:
Registrant City:Westminster
Registrant State/Province:MD
Registrant Postal Code:21158
Registrant Country:US
Registrant Phone:+1.4108409101

Domain Name:EICAFRAUDS.INFO
Created On:29-Nov-2006 00:26:27 UTC
Last Updated On:29-Nov-2006 00:26:31 UTC
Expiration Date:29-Nov-2007 00:26:27 UTC
Sponsoring Registrar:EstDomains, Inc. (R295-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant IDI_4800210
Registrant Name:Victoria Doran
Registrant Organization:Council of Better Business Bureaus
Registrant Street1:4200 Wilson Blvd.
Registrant Street2:Suite 800
Registrant Street3:
Registrant City:Arlington
Registrant State/Province:Virginia
Registrant Postal Code:22203
Registrant Country:US
Registrant Phone:+001.7032479349
Registrant Phone Ext.:
Registrant FAX:+001.7035258277

http://www.ibcim.org has a virtually identical website, including the same supposed street address.

Created On:10-Jun-2005 02:36:51 UTC
Last Updated On:12-May-2006 22:29:27 UTC
Expiration Date:10-Jun-2007 02:36:51 UTC
Sponsoring Registrar:Go Daddy Software, Inc. (R91-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:GODA-012276242
Registrant Name:Christian Nilsson
Registrant Street1:660 Tennis Club Drive 403
Registrant Street2:
Registrant Street3:
Registrant City:Fort Lauderdale
Registrant State/Province:Florida
Registrant Postal Code:33311
Registrant Country:US
Registrant Phone:+1.9542499447

It looks to me like EICA FRAUDS in any of its various guises is a scam, probably set up as a backup story to endorse other scams as 'legitimate'.

So I'd say that any site endorsed by EICA FRAUDS is either itself fraudulent, or has been duped into signing up with these scammers.

There's also http://www.2-tier.com/Directory-Detail.aspx?id=1100, which gives the same address, but a real Auckland landline phone number +6495781277 That is the right area code for Kohimarama, but there's no Nilsson in the phone book with that number.

[EDIT]
I've had an email from Christian Nilsson at IBCIM.ORG. I've pointed him at this thread, so hopefully he will respond here in person.

It does appear that Daneel is right... IBCIM is a legitimate organisation who have been copied by fraudsters.

[Daneel]

ibcim.org is more likely a legitimate site these scammers decided to copy. They posted here on Alibaba:
http://resources.alibaba.com/topic/1..._For_Real_.htm

[Frazzle]

I'd agree, Daneel, except that IBCIM's DNS registration includes a completely bogus phone number (+64.18668397883). A correct number for that address would look like +649578-xxxx

I'll email IBCIM and ask for an explanation.

[Frazzle]

Here's the reply from IBCIM... Make what you will of his polite refusal to confirm that +6495781277 is his phone number, or to give me a landline where I can call him. Also, the various EICA-FRAUD sites haven't been shut down at all:

I am aware of those variations but if you have visited those sites you will have noticed that they are no longer operating as I have managed to shut them down. I am continuously monitoring this situation.

We are operating out of New Zealand that is correct. The reason why we have a US fax is because our customer base is almost exclusively located in the US. As stated earlier though we do not do phone support so you cannot call.

If there is any other form of verification you would like I would be more than happy to supply that for you.

Regards

[Daneel]

Did you inform him about the .info sites? The .org site was actually shut down, that must be what he meant.

[Frazzle]

Hi Daneel,

I sent him this:

Hi Christian,

Thanks for the reply.

You should be aware that there are several variants of things like EICA-FRAUD.ORG, EICA-FRAUDS.ORG, EICAFRAUDS.INFO that are copies of your site, and still up and running.

You may find that www.aa419.org is a good place to go to get fraudulent websites shut down.

You can read our discussion on your domain at http://www.fraudwatchers.org/forums/...ead.php?t=4939

So your fax is +18668397883 -- presumably that is then routed to your NZ phone? I assume you actually physically located in Kohimarama? Is +6495781277 your landline? Could I ring you there for verification?

If not, can you give me a landline I can call you on? I would not disclose this phone number to any other person.

He replied

I am aware of those variations but if you have visited those sites you will have noticed that they are no longer operating as I have managed to shut them down. I am continuously monitoring this situation.

He doesn't seem to have read my email -- I specifically said "still up and running".

I must say, I'm bemused by his apparent lack of interest and his desire for anonymity. I'd really expected that, given that his business is all about verifying third parties, he would understand the need to be verifiable himself. If it was my business and I was told that fraudsters were passing themselves off as me, I wouldn't rest before I got them all shut down. Can't he see that this threatens his entire business?

[Daneel]

It's obviously a small operation, just a seal merchants can purchase after a few checks to improve their apparent reliability, though they make no guarantees. He could probably improve a few details, for PR if nothing else, but I don't think there's anything worth worrying about there...

www.eicafraud.info seems to be the only one still online?

I wonder what they will call their site after March 21st? :-)
Thanks for watching.

[Frazzle]

I've just had an email from Christian Nilsson's home email account, and can confirm that he is actually in NZ. As Daneel correctly said a few days ago, IBCIM.ORG is a legit company whose website has been copied by fraudsters.

I was one of the unfortunate (dumb ones) who got scammed by bigwinterdeal.com. I already filed a complaint with Western Union and the Federal Trade Commission. Is there anyone else I should contact to file a complaint?

[Daneel]

If you are in the US, you can file a complaint with www.ic3.gov

This company scammed me yesterday doing business now as www.uswintersale.com

Avoid them like the plague. I am seeking retribution. Any suggestions on how to stop these people?

I wrote to Winter sales and asked them if they could prove to me they this wasnt fraud since the only way to pay was western union, here is the response I got:

Hello,

We are an Eicafraud.info certified company. This excludes the possibility of not shipping the orders or shipping them in poor conditions. Our return policy works for every dollar you spend on our site!

Best Regards,

Lawrence Roberson
Customer Service Department
Big Winter Deal, Inc.
phone: 877-766-2864
fax: (213) 652-1813
http://www.bigwinterdeal.com

Just to let you guys know they are BIG FRAUD. I just lost $600.00. they are also operating as www.uswintersale.com.

As soon as pay for the order and told them I have paid, i stop receving the mails from them. I emailed them with different email address and received a reply with in 5mins. Guys be aware. spread the info and file complaints against them here https://complaint.ic3.gov. provide any other links if u have for complaints.

I went to the site and searched for Playstation 3, which as all you know is pretty much out of stock everywhere! Well, not only did they have one, but I was able to order 10! Naturally I didn't make the order, but clearly I would not buy anything from this site.

I just bought a link to this site on ebay (luckily for only 99cents)from '55oreo55' and when i queiried him he replied saying they were 'Eicafraud.info' certified.Thanks to you guys at least i only lost 99 cents.
Cheers

Esta compania es dedicada a la estafa, yo fui victima de esto por no informarme antes evite ser usted uno de ellos, no hay forma de comunicare por telefono con ellos y por email no responden a tus consultas cuando ellos ya an efectuado el cobro de tu dinero

PLEASE PLEASE PLEASE DO NO ORDER FROM THESE GUYS.......THEY ARE A MALICIOUS GROUP OF PEOPLE.............

I RECIEVED A TERRIBLE EMAIL..........BASICALLY SAYING THEY HAD 3 OR 4 GUYS WAITING TO F^&% ANGRY GIRLS LIKE ME .........I WAS DEVASTATED !!

WE HAVE CONTACTED INTERPOL AND WESTERN UNION TO WARN AGAINST THIS SCAM, IF I CAN HELP PREVENT ANOTHER MAKING THE SAME MISTAKE THEN I WONT FEEL SO BAD........

I HOPE THEY ALL ROT IN HELL, ONLY THING THAT MAKES ME FEEL BETTER IS I KNOW THEY WILL EVENTUALLY GET THERE COMMUPENCE !

Joanne