Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Fake sites used in Russian romance scams

Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.

ya1ndex.com

Unread postby firefly » Sat Dec 15, 2018 9:02 pm

split from viewtopic.php?f=11&t=72688

The fraudulent domain name impersonates Yandex. There is no option anyone can use to register any account of ya1ndex.com - there is no content on that website. The domain name is used only for the email address.

Domain Name: ya1ndex.com
Updated Date: 2018-04-29
Creation Date: 2018-04-29
Registrar Registration Expiration Date: 2019-04-29
Registrar: Onlinenic Inc

Registry Registrant ID: Not Available From Registry
Registrant Name: Domain ID Shield Service
Registrant Organization: Domain ID Shield Service CO., Limited
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

yundex.info - yadnex.info

Unread postby firefly » Tue Dec 25, 2018 10:55 pm

split from viewtopic.php?f=11&t=72832 & viewtopic.php?f=11&t=72936

Return-Path: <boasd.mariko@yadnex.info>
Received: from yundex.info ([92.63.103.109])


Both yadnex.info & yundex.info are spoofs of yandex.com. One is used as email address while the second one is used as an apparently source of the domain used for the email address.

From the fake site details:

yundex.info

Domain name: YUNDEX.INFO
Domain idn name: YUNDEX.INFO
Updated Date: 2018-08-15
Creation Date: 2018-08-15
Registrar Registration Expiration Date: 2019-08-15
Registrar: Registrar of domain names REG.RU LLC
Registry Registrant ID:
Registrant Name: Ivan Petrov
Registrant Organization: Privat person
Registrant Street: ul.Mira 14, kv.5
Registrant City: Ufa
Registrant State/Province: Bashkiria
Registrant Postal Code: 450068
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru

yadnex.info

Domain name: YADNEX.INFO
Updated Date: 2018-08-24
Creation Date: 2018-08-24
Registrar Registration Expiration Date: 2019-08-24
Registrar: Registrar of domain names REG.RU LLC
Registry Registrant ID:
Registrant Name: Ivan Petrov
Registrant Organization: Privat person
Registrant Street: ul.Mira 14, kv.5
Registrant City: Ufa
Registrant State/Province: Bashkiria
Registrant Postal Code: 450068
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

yunbex.info - yundex.info

Unread postby firefly » Mon Jan 21, 2019 9:37 pm

split from viewtopic.php?f=11&t=73186

Authentication-Results: mx.google.com;
dkim=fail header.i=@yunbex.info header.s=dkim header.b=oc0mbxrC;
spf=pass (google.com: domain of lokobym@yunbex.info designates 92.63.103.109 as permitted sender) smtp.mailfrom=lokobym@yunbex.info
Received: from ip168.ip-91-134-219.eu ([91.134.219.168] helo=185.201.41.84) by yundex.info with esmtpsa (TLS1.0:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.84_2) (envelope-from <lokobym@yunbex.info>)


Both domain names are spoofing Yandex and are used only for email addresses.

From the fake site details:

Domain name: YUNBEX.INFO
Updated Date: 2018-08-27
Creation Date: 2018-08-27
Registrar Registration Expiration Date: 2019-08-27
Registrar: Registrar of domain names REG.RU LLC

Registry Registrant ID:
Registrant Name: Ivan Petrov
Registrant Organization: Privat person
Registrant Street: ul.Mira 14, kv.5
Registrant City: Ufa
Registrant State/Province: Bashkiria
Registrant Postal Code: 450068
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru

And:

Domain Name: YUNDEX.INFO
Updated Date: 2018-10-14
Creation Date: 2018-08-15
Registry Expiry Date: 2019-08-15
Registrar Registration Expiration Date:
Registrar: Limited Liability Company "Registrar of domain names REG.RU"

Registrant Organization: Privat person
Registrant State/Province: Bashkiria
Registrant Country: RU
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

goooqle.info

Unread postby firefly » Tue Mar 26, 2019 7:27 pm

split from viewtopic.php?f=11&t=74689

The fake site is used only for the domain email address, spoofing Google.

From the fake site details:

Domain name: GOOOQLE.INFO
Updated Date: 2018-09-16
Creation Date: 2018-09-16
Registrar Registration Expiration Date: 2019-09-16
Registrar: Registrar of domain names REG.RU LLC

Registrant Name: Ivan Petrov
Registrant Organization: Privat person
Registrant Street: ul.Mira 14, kv.5
Registrant City: Ufa
Registrant State/Province: Bashkiria
Registrant Postal Code: 450068
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

maramal.com - evgmal.com

Unread postby firefly » Tue Mar 26, 2019 7:33 pm

split from viewtopic.php?f=11&t=36477&start=130 where the domain names are used for the email address while spamming romance scams formats.

From the fake site details:

Domain name: maramal.com
Updated Date: 2019-01-17
Creation Date: 2019-01-17
Registrar Registration Expiration Date: 2020-01-17
Registrar: CNOBIN INFORMATION TECHNOLOGY LIMITED
Reseller:

Registry Registrant ID: Not Available From Registry
Registry Registrant ID: Redacted for Privacy Purposes
Registrant Name: Redacted for Privacy Purposes

&

Domain name: evgmal.com
Updated Date: 2019-01-17
Creation Date: 2019-01-17
Registrar Registration Expiration Date: 2020-01-17
Registrar: CNOBIN INFORMATION TECHNOLOGY LIMITED
Reseller:

Registry Registrant ID: Not Available From Registry
Registry Registrant ID: Redacted for Privacy Purposes
Registrant Name: Redacted for Privacy Purposes
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

opros-goda2018.info

Unread postby firefly » Sun Apr 28, 2019 12:15 am

split from viewtopic.php?f=11&t=73865&start=10, where the domain name opros-goda2018.info is reported for being used in mass-mailing romance scam formats.

The domain name shows no content - practically is impossible for anyone to register an email account there. The domain name is used only for the email address redirecting messages sent by fraudsters.

From the fake site details:

Domain name: OPROS-GODA2018.INFO
Updated Date: 2018-05-30
Creation Date: 2018-05-29
Registrar Registration Expiration Date: 2019-05-29
Registrar: Registrar of domain names REG.RU LLC

Registry Registrant ID:
Registrant Name: Artem Kalugin
Registrant Organization: Kalugin LTD
Registrant Street: ul.Koshkina 4
Registrant City: Moskow
Registrant State/Province: Moskow Region
Registrant Postal Code: 123456
Registrant Country: RU
Registrant Phone: +7.9874521125
Registrant Email: artemkalugin32@ya.ru
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

oytloock.com

Unread postby firefly » Sat Dec 14, 2019 9:19 am

split from viewtopic.php?f=11&t=80896

Fraudulent domain name used: oytloock.com - spoofing outlook.com

There is no content and also no option for anyone to set up an email account on that domain name.

From the domain name registration:

Domain Name: oytloock.com
Updated Date: 2019-12-12
Creation Date: 2018-12-14
Registrar Registration Expiration Date: 2020-12-14

Registrar: Onlinenic Inc

Registry Registrant ID: Not Available From Registry
Registrant Name: Vorobev Kazemir Vitalech
Registrant Organization: Vorobev Kazemir Vitalech
Registrant Street: Novoslobodsakaya 19s1
Registrant City: Moscow
Registrant State/Province: Moscow
Registrant Postal Code: 177112
Registrant Country: RU
Registrant Phone: +7.9161229076
Registrant Fax: +7.9161229076
Registrant Email: vorobev.kazemir@yandex.com

The same faker maker operates few other fraudulent domain names spoofing known email providers:

- gm2j1.com spoofing Gmail - see https://scamsurvivors.com/forum/viewtop ... 11&t=80131
- gmma1il.com spoofing Gmail
- gmma1l.com spoofing Gmail
- gmmalil.com spoofing Gmail
- outtloock.com spoofing Outlook
- y2ndex.com spoofing Yandex
- yuand3x.com spoofing Yandex.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

in-mybox.com

Unread postby firefly » Sat Feb 08, 2020 9:17 pm

Split from https://scamsurvivors.com/forum/viewtop ... 11&t=81544 & viewtopic.php?f=11&t=81658 & viewtopic.php?f=11&t=81342

The domain name is used only for the email address, as it can be seen in the examples above.

From the domain name registration:

Domain Name: IN-MYBOX.COM
Updated Date: 2019-03-22
Creation Date: 2019-03-22
Registrar Registration Expiration Date: 2020-03
Registrar: REGTIME LTD.

Reseller: OOO "CHELYABINSK-SIGNAL"
Domain Status: OK
Registry Registrant ID:
Registrant Name: Albina Bikchantaeva
Registrant Organization: Private person
Registrant Street: Lenina 78
Registrant City: Blagoveshhensk
Registrant State/Province: Bashkortostan
Registrant Postal Code: 798464
Registrant Country: RU
Registrant Phone: +7.9177595963
Registrant Email: bikchantaevaal@yandex.ru

The same registrant operates as well imailru.com, mobildating.net and ya-email.com.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

emailnica.com

Unread postby firefly » Sat Jul 18, 2020 4:55 pm

Split from viewtopic.php?f=11&t=80446&start=30

Date: Tue, 14 Jul 2020
From: Elena <lenkayagoda@emailnica.com>
Message-ID: <1488355194.20200714100700@emailnica.com>


There is no content - the domain name is used only for the email address.

From the domain name registration:

Domain Name: EMAILNICA.COM
Updated Date: 2020-04-20
Creation Date: 2020-02-19
Registrar Registration Expiration Date: 2021-02-19
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Timofey YUrievich Petrov
Registrant Organization: none
Registrant Street: Lineynaya, d.40, kv. 23
Registrant City: YAroslavl
Registrant State/Province: YAroslavskiy
Registrant Postal Code: 150000
Registrant Country: RU
Registrant Phone: +7.9680054036
Registrant Email: davesinq35@gmail.com
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

pochtamp.org

Unread postby firefly » Tue Aug 18, 2020 6:12 pm

Split from viewtopic.php?f=11&t=81544 where the domain name used only for the email address is reported for being used in a romance scam

From the domain name registration:

Domain Name: pochtamp.org
Updated Date: 2020-08-02
Creation Date: 2020-08-02
Registrar Registration Expiration Date: 2021-08-02
Registrar: ENOM, INC.

Registrant Name: REDACTED FOR PRIVACY
Registrant Organization: REDACTED FOR PRIVACY
Registrant Street: REDACTED FOR PRIVACY
Registrant City: REDACTED FOR PRIVACY
Registrant State/Province: REDACTED FOR PRIVACY
Registrant Postal Code: REDACTED FOR PRIVACY
Registrant Country: RU
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70851
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

PreviousNext

Return to Fake sites/Phishing sites.

Who is online

Users browsing this forum: No registered users and 9 guests

cron