Site logo

     


Advert.
Switch to full style
Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.
Post a reply

Re: academsurg.com

Thu Jul 13, 2017 9:18 pm

Split from viewtopic.php?f=11&t=36477&start=60

The domain academsurg.com is used only for the email address, the characters claims to be working there. The fake site become active after two other email only domains used by the same scammer got suspended.

From the fake site details:

IP: 74.208.4.196

Domain Name: academsurg.com
Updated Date: 2017-07-04
Creation Date: 2017-07-04
Registrar Registration Expiration Date: 2018-07-04
Registrar: 1&1 Internet SE

The registrant is using the privacy protection given by the registrar to hide his details and real location.

sibursurge.com

Sun Jul 16, 2017 4:28 pm

split from viewtopic.php?f=11&t=36477&start=60, where the fake site is used in a romance scam. The domain is used only for the email address.

Fake site details:
IP: 74.208.5.2

Domain Name: sibursurge.com
Updated Date: 2017-06-24
Creation Date: 2017-06-24
Registrar Registration Expiration Date: 2018-06-24
Registrar: 1&1 Internet SE
Domain Status: addPeriod
Registrant Name: Oneandone Private Registration

The registrant is using the privacy protection given by the registrar to hide his identity and location.

hospmail.com

Sun Jul 16, 2017 7:11 pm

split from viewtopic.php?f=11&t=55831 and viewtopic.php?f=11&t=59750, where the fake site is used in scams (email only) by scammers pretending to work in the allegedly hospital using that domain.

Fake site details - https://db.aa419.org/fakebanksview.php?key=125401:

Domain Name: HOSPMAIL.COM
Updated Date: 2017-04-01
Creation Date: 2017-01-30
Registrar Registration Expiration Date: 2018-01-30
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Feliks A Kuznetsov
Registrant Organization:
Registrant Street: dom 38
Registrant City: Bolishoy Shokshem
Registrant State/Province: Respublika Mariy El
Registrant Postal Code: 425462
Registrant Country: RU
Registrant Phone: +7.9371192676
Registrant Fax: +7.9371192676
Registrant Email: kuznetsoff.felix@ya.ru

postoel.com

Tue Jul 18, 2017 6:45 pm

split from viewtopic.php?f=11&t=59172&start=10, where the fake site is used in scam only for the email.

The scammers created this fake site after the previous ones used - list-bk.com and jmxmail.com - got suspended. The registrant is using the privacy protection given by the registrar to hide his identity and location.

From the fake site details:

Domain name: postoel.com
Updated Date: 2017-07-05
Creation Date: 2017-07-05
Registrar Registration Expiration Date: 2018-07-05
Registrar: Bizcn.com,Inc.
Reseller: Cnobin Technology HK Limited

prpmail.com

Sun Aug 13, 2017 8:09 pm

Split from viewtopic.php?f=11&t=59750; the domain is used only for the email address.

IP: 162.255.119.225

Domain name: prpmail.com
Updated Date: 2017-07-25
Creation Date: 2017-07-25
Registrar Registration Expiration Date: 2018-07-25
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC
Domain Status: addPeriod

Registrant Name: WhoisGuard Protected

evolaok.com

Tue Aug 15, 2017 6:46 pm

Split from viewtopic.php?f=11&t=60707 and
viewtopic.php?f=11&t=60708 - the domain is used only for the email address.

Domain name: evolaok.com
Updated Date: 2017-08-01
Creation Date: 2017-08-01
Registrar Registration Expiration Date: 2018-08-01
Registrar: Bizcn.com,Inc.

Reseller: Cnobin Technology HK Limited
Registry Registrant ID: Not Available From Registry
Registrant Name: Matthew Palazzo
Registrant Organization: NA
Registrant Street: 1885 Felosa Drive
Registrant City: Mira Loma

Registrant State/Province: CA
Registrant Postal Code: 91752
Registrant Country: us
Registrant Phone: +1.3239740958
Registrant Phone Ext:
Registrant Fax: +1.3239740958
Registrant Email: Nicketars22Walkman1981@gmail.com

Mira Loma California is a real city... but there is no street named Felosa Drive.

The same details of the registrant are associated with almost 300 domains, some already marked online for spreading malware. Same details of the registrant were reported before with a fake escrow company named dvm-express.com / DVM Express - https://db.aa419.org/fakebanksview.php?key=123752.

gmaill.ru.com

Sat Oct 14, 2017 11:25 pm

split from viewtopic.php?f=11&t=62438 & viewtopic.php?f=11&t=62434

The fake site used in scam impersonates gmail.com.

From the fake site details - the fake site maker uses the privacy protection given by the registrar to hide his real identity and location:

Domain Name: GMAILL.RU.COM
Updated Date: 2017-05-07
Creation Date: 2017-05-02
Registry Expiry Date: 2018-05-02
Registrar: Registrar of Domain Names REG.RU, LLC
Registrar IANA ID: 1606
Domain Status: ok
Registry Registrant ID: C131665378-CNIC

gmail-ru.com

Fri Nov 03, 2017 9:27 pm

Split from viewtopic.php?f=11&t=62958

The fake site impersonates gmail.com
IP: 208.91.199.202

"gmail-ru.com" in Google - About 2.410 results, mostly romance scams

From the fake site details: https://db.aa419.org/fakebanksview.php?key=128124:

Domain Name: GMAIL-RU.COM
Updated Date: 2017-02-26
Creation Date: 2016-12-27
Registrar Registration Expiration Date: 2017-12-27
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Fedya
Registrant Organization:
Registrant Street: Lenina 12
Registrant City: Moskva
Registrant State/Province: Moscow
Registrant Postal Code: 121502
Registrant Country: RU
Registrant Phone: +7.9632393150
Registrant Email: iuliiasoloveva86@gmail.com

russgmail.com

Tue Nov 14, 2017 9:17 pm

split from viewtopic.php?f=11&t=36477 & viewtopic.php?f=11&t=53690

The fake site impersonates gmail.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=128274:

Domain Name: RUSSGMAIL.COM
Updated Date: 2017-10-19
Creation Date: 2017-10-19
Registrar Registration Expiration Date: 2018-10-19
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Igori A Vedernikov
Registrant Organization:
Registrant Street: Kolomenskiy proezd, 17, kv.33
Registrant City: Moskva,
Registrant State/Province: Moskovskaya oblasti
Registrant Postal Code: 115446
Registrant Country: RU
Registrant Phone: +7.4951164353
Registrant Fax: +7.4951164353
Registrant Email: ivedernickov@yandex.ru

According to the history of the domain name, the domain was first registered in Dec 2014 for a year; the registrant identity for the previous record was hidden under privacy protection. On October 20, 2017, the domain was registered again, being used only in romance scams originated from the Former Soviet Union area.

com-ya.club

Mon Nov 27, 2017 7:01 pm

Split from viewtopic.php?f=11&t=63374


From the fake site details - https://db.aa419.org/fakebanksview.php?key=128442:

Domain Name: com-ya.club
Registrar URL: whois.publicdomainregistry.com
Updated Date: 2017-11-22
Creation Date: 2017-11-17
Registry Expiry Date: 2018-11-17
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrant Name: Vasya Vasilev
Registrant Street: Karlovo nam. 288/17
Registrant City: Praha
Registrant State/Province: Praha
Registrant Postal Code: 12000
Registrant Country: CZ
Registrant Phone: +420.603303905
Registrant Email: vasyaya3479@gmail.com
Post a reply