Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Fake sites used in Russian romance scams

Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.

Re: academsurg.com

Unread postby firefly » Thu Jul 13, 2017 9:18 pm

Split from viewtopic.php?f=11&t=36477&start=60

The domain academsurg.com is used only for the email address, the characters claims to be working there. The fake site become active after two other email only domains used by the same scammer got suspended.

From the fake site details:

IP: 74.208.4.196

Domain Name: academsurg.com
Updated Date: 2017-07-04
Creation Date: 2017-07-04
Registrar Registration Expiration Date: 2018-07-04
Registrar: 1&1 Internet SE

The registrant is using the privacy protection given by the registrar to hide his details and real location.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

sibursurge.com

Unread postby firefly » Sun Jul 16, 2017 4:28 pm

split from viewtopic.php?f=11&t=36477&start=60, where the fake site is used in a romance scam. The domain is used only for the email address.

Fake site details:
IP: 74.208.5.2

Domain Name: sibursurge.com
Updated Date: 2017-06-24
Creation Date: 2017-06-24
Registrar Registration Expiration Date: 2018-06-24
Registrar: 1&1 Internet SE
Domain Status: addPeriod
Registrant Name: Oneandone Private Registration

The registrant is using the privacy protection given by the registrar to hide his identity and location.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

hospmail.com

Unread postby firefly » Sun Jul 16, 2017 7:11 pm

split from viewtopic.php?f=11&t=55831 and viewtopic.php?f=11&t=59750, where the fake site is used in scams (email only) by scammers pretending to work in the allegedly hospital using that domain.

Fake site details - https://db.aa419.org/fakebanksview.php?key=125401:

Domain Name: HOSPMAIL.COM
Updated Date: 2017-04-01
Creation Date: 2017-01-30
Registrar Registration Expiration Date: 2018-01-30
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Feliks A Kuznetsov
Registrant Organization:
Registrant Street: dom 38
Registrant City: Bolishoy Shokshem
Registrant State/Province: Respublika Mariy El
Registrant Postal Code: 425462
Registrant Country: RU
Registrant Phone: +7.9371192676
Registrant Fax: +7.9371192676
Registrant Email: kuznetsoff.felix@ya.ru
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

postoel.com

Unread postby firefly » Tue Jul 18, 2017 6:45 pm

split from viewtopic.php?f=11&t=59172&start=10, where the fake site is used in scam only for the email.

The scammers created this fake site after the previous ones used - list-bk.com and jmxmail.com - got suspended. The registrant is using the privacy protection given by the registrar to hide his identity and location.

From the fake site details:

Domain name: postoel.com
Updated Date: 2017-07-05
Creation Date: 2017-07-05
Registrar Registration Expiration Date: 2018-07-05
Registrar: Bizcn.com,Inc.
Reseller: Cnobin Technology HK Limited
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

prpmail.com

Unread postby firefly » Sun Aug 13, 2017 8:09 pm

Split from viewtopic.php?f=11&t=59750; the domain is used only for the email address.

IP: 162.255.119.225

Domain name: prpmail.com
Updated Date: 2017-07-25
Creation Date: 2017-07-25
Registrar Registration Expiration Date: 2018-07-25
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC
Domain Status: addPeriod

Registrant Name: WhoisGuard Protected
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

evolaok.com

Unread postby firefly » Tue Aug 15, 2017 6:46 pm

Split from viewtopic.php?f=11&t=60707 and
viewtopic.php?f=11&t=60708 - the domain is used only for the email address.

Domain name: evolaok.com
Updated Date: 2017-08-01
Creation Date: 2017-08-01
Registrar Registration Expiration Date: 2018-08-01
Registrar: Bizcn.com,Inc.

Reseller: Cnobin Technology HK Limited
Registry Registrant ID: Not Available From Registry
Registrant Name: Matthew Palazzo
Registrant Organization: NA
Registrant Street: 1885 Felosa Drive
Registrant City: Mira Loma

Registrant State/Province: CA
Registrant Postal Code: 91752
Registrant Country: us
Registrant Phone: +1.3239740958
Registrant Phone Ext:
Registrant Fax: +1.3239740958
Registrant Email: Nicketars22Walkman1981@gmail.com

Mira Loma California is a real city... but there is no street named Felosa Drive.

The same details of the registrant are associated with almost 300 domains, some already marked online for spreading malware. Same details of the registrant were reported before with a fake escrow company named dvm-express.com / DVM Express - https://db.aa419.org/fakebanksview.php?key=123752.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

gmaill.ru.com

Unread postby firefly » Sat Oct 14, 2017 11:25 pm

split from viewtopic.php?f=11&t=62438 & viewtopic.php?f=11&t=62434

The fake site used in scam impersonates gmail.com.

From the fake site details - the fake site maker uses the privacy protection given by the registrar to hide his real identity and location:

Domain Name: GMAILL.RU.COM
Updated Date: 2017-05-07
Creation Date: 2017-05-02
Registry Expiry Date: 2018-05-02
Registrar: Registrar of Domain Names REG.RU, LLC
Registrar IANA ID: 1606
Domain Status: ok
Registry Registrant ID: C131665378-CNIC
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

gmail-ru.com

Unread postby firefly » Fri Nov 03, 2017 9:27 pm

Split from viewtopic.php?f=11&t=62958

The fake site impersonates gmail.com
IP: 208.91.199.202

"gmail-ru.com" in Google - About 2.410 results, mostly romance scams

From the fake site details: https://db.aa419.org/fakebanksview.php?key=128124:

Domain Name: GMAIL-RU.COM
Updated Date: 2017-02-26
Creation Date: 2016-12-27
Registrar Registration Expiration Date: 2017-12-27
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Fedya
Registrant Organization:
Registrant Street: Lenina 12
Registrant City: Moskva
Registrant State/Province: Moscow
Registrant Postal Code: 121502
Registrant Country: RU
Registrant Phone: +7.9632393150
Registrant Email: iuliiasoloveva86@gmail.com
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

russgmail.com

Unread postby firefly » Tue Nov 14, 2017 9:17 pm

split from viewtopic.php?f=11&t=36477 & viewtopic.php?f=11&t=53690

The fake site impersonates gmail.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=128274:

Domain Name: RUSSGMAIL.COM
Updated Date: 2017-10-19
Creation Date: 2017-10-19
Registrar Registration Expiration Date: 2018-10-19
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Igori A Vedernikov
Registrant Organization:
Registrant Street: Kolomenskiy proezd, 17, kv.33
Registrant City: Moskva,
Registrant State/Province: Moskovskaya oblasti
Registrant Postal Code: 115446
Registrant Country: RU
Registrant Phone: +7.4951164353
Registrant Fax: +7.4951164353
Registrant Email: ivedernickov@yandex.ru

According to the history of the domain name, the domain was first registered in Dec 2014 for a year; the registrant identity for the previous record was hidden under privacy protection. On October 20, 2017, the domain was registered again, being used only in romance scams originated from the Former Soviet Union area.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

com-ya.club

Unread postby firefly » Mon Nov 27, 2017 7:01 pm

Split from viewtopic.php?f=11&t=63374


From the fake site details - https://db.aa419.org/fakebanksview.php?key=128442:

Domain Name: com-ya.club
Registrar URL: whois.publicdomainregistry.com
Updated Date: 2017-11-22
Creation Date: 2017-11-17
Registry Expiry Date: 2018-11-17
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrant Name: Vasya Vasilev
Registrant Street: Karlovo nam. 288/17
Registrant City: Praha
Registrant State/Province: Praha
Registrant Postal Code: 12000
Registrant Country: CZ
Registrant Phone: +420.603303905
Registrant Email: vasyaya3479@gmail.com
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

PreviousNext

Return to Fake sites/Phishing sites.

Who is online

Users browsing this forum: No registered users and 2 guests