firstcitytrust.com

[firefly]

Posted on the behalf of the victim.

The victim was contacted online and the scammer requested her to contact firstcitytrust.com. The link the victim received for the bank is leading to a fake site.

Content:

GENERAL MANAGER:
B1866 Thames St, Baltimore,
Maryland, USA
Tel:+1 (240) 252 7561
Email: info@ firstcitytrust.com

+12402527561
Owner is based in Gaithersburg, MD
VoIP - Level3

Details of the fake site:

IP: 111.90.144.20

Whois:

Domain Name: FIRSTCITYTRUST.COM
Registrar: NAMESILO, LLC
Updated Date: 03-feb-2016
Creation Date: 30-jan-2016
Expiration Date: 30-jan-2017
Updated Date: 2016-03-18
Creation Date: 2016-01-30
Reseller: QHOSTER.COM

Registry Registrant ID:
Registrant Name: Mark Dawson
Registrant Organization:
Registrant Street: 893b Suite 305 Robinson Ave.
Registrant City: Torrance
Registrant State/Province: CA
Registrant Postal Code: 90503
Registrant Country: US
Registrant Phone: +1.4242715633
Registrant Email: markdawson472@yahoo.com


+14242715633
Owner is based in Torrance, CA
VoIP - Google Voice

[firefly]

Posted on the behalf of the victim:

I wanted to know if the astoriatrust
bank really exists. I got Loggin data where I could see what deserved
those who wrote to me. Now someone should have hacked the account and
all money was gone. I do not believe it. He is called Kelly Timothy is
a soldier in Syria. At the bank comes his name but the email is
gordon.hyde@yahoo.com

The location the scammer pretends to live: 6001 Pelican Bay Blvd Apt 703 Naples, Pl 34108-711.

The fake site used in scam claims to be Astoria Trust Bank. The real Astoria is part of Sterling Bancorp and the real bank site point their clients to Sterling. The fake one doesn't...

From the fake site:

Astoria Trust Bank opened for business in December 2005 dedicated to meeting the banking needs of businesses, professionals, and successful individuals in Central Philadelphia.

Contact details on the fake site:

Phone: +1 203.941.2128
Email: info@astoriatrust.com
Address: 116 S 3rd St,Philadelphia,
United States

+12039412128 - VoIP number

"opened for business in December 2005 " is a lie - the domain was created in July 2016. On October 14, 2017, the fake site activity was extended for another year.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=120794:
Domain Name: astoriatrust.com
Updated Date: 2017-10-14
Creation Date: 2016-07-01
Registrar Registration Expiration Date: 2018-07-01
Registrar: NameSilo, LLC
Reseller: QHOSTER.COM
Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Mark Dawson
Registrant Street: 893b Suite 305 Robinson Ave.
Registrant City: Torrance
Registrant State/Province: CA
Registrant Postal Code: 90503
Registrant Country: US
Registrant Phone: +1.4242715633
Registrant Email: markdawson472@yahoo.com

This is what the fake site looks like:

So far, the same registrant is reported for other 44 fake sites he created for being used in online fraud.

For some of the fake characters used in scam see viewtopic.php?f=11&t=62624 & viewtopic.php?f=11&t=62626.