Property identity fraud

Author
Discussion

TROOPER88

Original Poster:

1,767 posts

179 months

Tuesday 14th March 2017
quotequote all
Hi Guys
Not a massive update but to keep you in the loop.

One letter; junk mail came addressed to x-binary and nothing else at all apart from a letter that I sent which did arrive - no re-direction currently in place.

I spoke with companies house on Friday; they have a back log...

They are currently opening mail from the end of Feb so it will be circa next week before my correspondence is looked at.
They will then write to all addresses they have for x-binary and give 28 days for a reply.

After the 28 days is up they will remove all my details from the register.

I called at the other Surbiton address on Saturday. An old gentleman answered and was visibly distressed. I think he thought I was there as an investor. He simply said the Police have been notified as well as companies house and I was to deal with the Police rather than them.

I was pleased tbh that the Police and companies house have now been contacted by them as well.

I noticed yesterday that the Facebook page appears to be down. Can someone else confirm this?

Thanks

MockingJay

1,311 posts

129 months

Tuesday 14th March 2017
quotequote all
TROOPER88 said:
Hi Guys
Not a massive update but to keep you in the loop.

One letter; junk mail came addressed to x-binary and nothing else at all apart from a letter that I sent which did arrive - no re-direction currently in place.

I spoke with companies house on Friday; they have a back log...

They are currently opening mail from the end of Feb so it will be circa next week before my correspondence is looked at.
They will then write to all addresses they have for x-binary and give 28 days for a reply.

After the 28 days is up they will remove all my details from the register.

I called at the other Surbiton address on Saturday. An old gentleman answered and was visibly distressed. I think he thought I was there as an investor. He simply said the Police have been notified as well as companies house and I was to deal with the Police rather than them.

I was pleased tbh that the Police and companies house have now been contacted by them as well.

I noticed yesterday that the Facebook page appears to be down. Can someone else confirm this?

Thanks
Yeah, it's been deleted.

TROOPER88

Original Poster:

1,767 posts

179 months

Friday 24th March 2017
quotequote all
Red Devil said:
Which one, the Swiss financier or the American director? The former was also involved with Bitex Ltd (with its Secretary also registered at the 17b address).

Cryptocoins Ltd was subject to compulsory strike off on 10th March 2015.
Bitex Ltd was subject to compulsory strike off on 19th May 2015.
No accounts ever filed for either entity.

Can of worms springs to mind...
Hi guys
A letter arrived today address to Jeremy Moeder. It's from the government court services. It's relating to an ongoing court case and their inability to make contact with Jeremy.

I've researched him online. This is his Facebook page:

https://m.facebook.com/xyjer

Likely to be linked or no way of knowing?

Strange why he would be using my address.

I've found his online CV and have attempted to call him but no reply.

I will try later

Dan_M5

615 posts

143 months

Friday 24th March 2017
quotequote all
He has cryptocoins on his profile, so i'd say thats the link. People that gamble in binary deal in cryptocurrency 99% of the time too

Red Devil

13,060 posts

208 months

Friday 24th March 2017
quotequote all
TROOPER88 said:
Red Devil said:
Which one, the Swiss financier or the American director? The former was also involved with Bitex Ltd (with its Secretary also registered at the 17b address).

Cryptocoins Ltd was subject to compulsory strike off on 10th March 2015.
Bitex Ltd was subject to compulsory strike off on 19th May 2015.
No accounts ever filed for either entity.

Can of worms springs to mind...
Hi guys
A letter arrived today address to Jeremy Moeder. It's from the government court services. It's relating to an ongoing court case and their inability to make contact with Jeremy.

I've researched him online. This is his Facebook page:

https://m.facebook.com/xyjer

Likely to be linked or no way of knowing?

Strange why he would be using my address.

I've found his online CV and have attempted to call him but no reply.

I will try later
Can't be many US citzens with that name living in the UK.
Take the train to town and see if you can corner him to ask for an explanation?
http://www.nsis.co.uk/contact-us/

Cliams to be a 'Certified Ethical Hacker' acording to LinkedIn.

Looks like the other guy is his b/f.

Either his entire CV is an elaboate scam or HM Courts and Tribunal Service aren't trying hard enough in their efforts to find him,

leshkin

48 posts

179 months

Friday 24th March 2017
quotequote all
Well, this got me interested in doing a bit of digging. It looks like the crooks behind this have gone to some lengths to protect their identity, maybe some of this will help...

Its definitely a scam (we know that ) - http://submitscams.com/x-binary-review/

x-binary.com whois data is protected by an online WHOIS privacy protection service based out of OZ, so is likely a dead-end... - https://www.whois.com/whois/x-binary.com

Checking the site's DNS entry points at IP 190.115.24.42
PS C:\> nslookup x-binary.com
Server: router
Address: 192.168.11.1

Non-authoritative answer:
Name: x-binary.com
Address: 190.115.24.42

The IP block in question seems to belong to a web hosting company DANCOM LTD (http://dancom.com.my/), but the IP is allocated to a company that is registered in Belize

http://iptool.xyz/190.115.26.90/

The address above is linked to an offshore company 'The LT (Belize) Ltd', which has been mentioned in the recent Panama Papers leak https://offshoreleaks.icij.org/nodes/14000316

The LT (Belize) Ltd looks like a shell company that is linked to Lava Systems Corp.

Lava Systems Corp itself is also linked to a number of different corporate entities: https://offshoreleaks.icij.org/nodes/10139499

THE LT CORPORATE SERVICES LIMITED based in Dubai (https://offshoreleaks.icij.org/nodes/11008960), which looks like a financial services company that administers this shell company and Dorchester International Inc (https://offshoreleaks.icij.org/nodes/12173338) linked here, but that looked like a dead end....

At this point I got bored and realised that the IP we're dealing with likely belongs to the denial of service mitigation service that these crooks are using - DDOS-GUARD.NET

I would try to contact the DDOS-GUARD.NET company as it is kinda the gatekeeper of any traffic to x-binary.com and see if it can be taken down via some form of AUP complaint process (https://ddos-guard.net/en/info/aboutus) This scam web site is likely violating some form of AUP agreement, so worth a shot to get your home address off the internet.

TROOPER88

Original Poster:

1,767 posts

179 months

Monday 10th April 2017
quotequote all
x-binary.com is now down.

Hope this is a permanent thing smile

I will continue to chase companies house to have my details removed.

daveinhampshire

531 posts

126 months

daveinhampshire

531 posts

126 months

Monday 10th April 2017
quotequote all
Looking into this in a bit more detail.

Jeremy looks legit to me, he mined bitcoins, I did it for a time, I've got over £10k in them for my £400 spend, it's perfectly legit. He's also held some pretty solid roles in IT which all involve DV clearance. Looking at his linked in and his partners numerous details I doubt that's the same person, police would take 2 mins to locate him.

Binary trading is always dodgy, part of the problem is FSA regulations are reducing risk exposure from legitimate places which makes places like X Binary attractive. Most people lose their money.

It's very easy to set a company up in the UK, it's the only process that involves no ID whatsoever. They often look for empty properties online to reduce the chances of a letter being returned to Companies House. This will not affect your sale in anyway, it's not yours or your prospective buyers problem, just keep returning the letters.

As for the what a mole website setup, it's pretty standard and you're pretty much beating your head against a brick wall. DDOS Guard are no different to Cloudflare, they are simply a protection for sites against Denial of Service, if you contact them they'll come back with the 'mere conduit' defence, that's if they bother to reply.

For now keep sending the letters back.

Du1point8

21,607 posts

192 months

Tuesday 11th April 2017
quotequote all
someone spammed his FB with this thread on the 24th March.