Site logo

     


Advert.
Switch to full style
Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.
Post a reply

ya1ndex.com

Sat Dec 15, 2018 9:02 pm

split from viewtopic.php?f=11&t=72688

The fraudulent domain name impersonates Yandex. There is no option anyone can use to register any account of ya1ndex.com - there is no content on that website. The domain name is used only for the email address.

Domain Name: ya1ndex.com
Updated Date: 2018-04-29
Creation Date: 2018-04-29
Registrar Registration Expiration Date: 2019-04-29
Registrar: Onlinenic Inc

Registry Registrant ID: Not Available From Registry
Registrant Name: Domain ID Shield Service
Registrant Organization: Domain ID Shield Service CO., Limited

yundex.info - yadnex.info

Tue Dec 25, 2018 10:55 pm

split from viewtopic.php?f=11&t=72832 & viewtopic.php?f=11&t=72936

Return-Path: <boasd.mariko@yadnex.info>
Received: from yundex.info ([92.63.103.109])


Both yadnex.info & yundex.info are spoofs of yandex.com. One is used as email address while the second one is used as an apparently source of the domain used for the email address.

From the fake site details:

yundex.info

Domain name: YUNDEX.INFO
Domain idn name: YUNDEX.INFO
Updated Date: 2018-08-15
Creation Date: 2018-08-15
Registrar Registration Expiration Date: 2019-08-15
Registrar: Registrar of domain names REG.RU LLC
Registry Registrant ID:
Registrant Name: Ivan Petrov
Registrant Organization: Privat person
Registrant Street: ul.Mira 14, kv.5
Registrant City: Ufa
Registrant State/Province: Bashkiria
Registrant Postal Code: 450068
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru

yadnex.info

Domain name: YADNEX.INFO
Updated Date: 2018-08-24
Creation Date: 2018-08-24
Registrar Registration Expiration Date: 2019-08-24
Registrar: Registrar of domain names REG.RU LLC
Registry Registrant ID:
Registrant Name: Ivan Petrov
Registrant Organization: Privat person
Registrant Street: ul.Mira 14, kv.5
Registrant City: Ufa
Registrant State/Province: Bashkiria
Registrant Postal Code: 450068
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru

yunbex.info - yundex.info

Mon Jan 21, 2019 9:37 pm

split from viewtopic.php?f=11&t=73186

Authentication-Results: mx.google.com;
dkim=fail header.i=@yunbex.info header.s=dkim header.b=oc0mbxrC;
spf=pass (google.com: domain of lokobym@yunbex.info designates 92.63.103.109 as permitted sender) smtp.mailfrom=lokobym@yunbex.info
Received: from ip168.ip-91-134-219.eu ([91.134.219.168] helo=185.201.41.84) by yundex.info with esmtpsa (TLS1.0:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.84_2) (envelope-from <lokobym@yunbex.info>)


Both domain names are spoofing Yandex and are used only for email addresses.

From the fake site details:

Domain name: YUNBEX.INFO
Updated Date: 2018-08-27
Creation Date: 2018-08-27
Registrar Registration Expiration Date: 2019-08-27
Registrar: Registrar of domain names REG.RU LLC

Registry Registrant ID:
Registrant Name: Ivan Petrov
Registrant Organization: Privat person
Registrant Street: ul.Mira 14, kv.5
Registrant City: Ufa
Registrant State/Province: Bashkiria
Registrant Postal Code: 450068
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru

And:

Domain Name: YUNDEX.INFO
Updated Date: 2018-10-14
Creation Date: 2018-08-15
Registry Expiry Date: 2019-08-15
Registrar Registration Expiration Date:
Registrar: Limited Liability Company "Registrar of domain names REG.RU"

Registrant Organization: Privat person
Registrant State/Province: Bashkiria
Registrant Country: RU

goooqle.info

Tue Mar 26, 2019 7:27 pm

split from viewtopic.php?f=11&t=74689

The fake site is used only for the domain email address, spoofing Google.

From the fake site details:

Domain name: GOOOQLE.INFO
Updated Date: 2018-09-16
Creation Date: 2018-09-16
Registrar Registration Expiration Date: 2019-09-16
Registrar: Registrar of domain names REG.RU LLC

Registrant Name: Ivan Petrov
Registrant Organization: Privat person
Registrant Street: ul.Mira 14, kv.5
Registrant City: Ufa
Registrant State/Province: Bashkiria
Registrant Postal Code: 450068
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru

maramal.com - evgmal.com

Tue Mar 26, 2019 7:33 pm

split from viewtopic.php?f=11&t=36477&start=130 where the domain names are used for the email address while spamming romance scams formats.

From the fake site details:

Domain name: maramal.com
Updated Date: 2019-01-17
Creation Date: 2019-01-17
Registrar Registration Expiration Date: 2020-01-17
Registrar: CNOBIN INFORMATION TECHNOLOGY LIMITED
Reseller:

Registry Registrant ID: Not Available From Registry
Registry Registrant ID: Redacted for Privacy Purposes
Registrant Name: Redacted for Privacy Purposes

&

Domain name: evgmal.com
Updated Date: 2019-01-17
Creation Date: 2019-01-17
Registrar Registration Expiration Date: 2020-01-17
Registrar: CNOBIN INFORMATION TECHNOLOGY LIMITED
Reseller:

Registry Registrant ID: Not Available From Registry
Registry Registrant ID: Redacted for Privacy Purposes
Registrant Name: Redacted for Privacy Purposes

opros-goda2018.info

Sun Apr 28, 2019 12:15 am

split from viewtopic.php?f=11&t=73865&start=10, where the domain name opros-goda2018.info is reported for being used in mass-mailing romance scam formats.

The domain name shows no content - practically is impossible for anyone to register an email account there. The domain name is used only for the email address redirecting messages sent by fraudsters.

From the fake site details:

Domain name: OPROS-GODA2018.INFO
Updated Date: 2018-05-30
Creation Date: 2018-05-29
Registrar Registration Expiration Date: 2019-05-29
Registrar: Registrar of domain names REG.RU LLC

Registry Registrant ID:
Registrant Name: Artem Kalugin
Registrant Organization: Kalugin LTD
Registrant Street: ul.Koshkina 4
Registrant City: Moskow
Registrant State/Province: Moskow Region
Registrant Postal Code: 123456
Registrant Country: RU
Registrant Phone: +7.9874521125
Registrant Email: artemkalugin32@ya.ru

oytloock.com

Sat Dec 14, 2019 9:19 am

split from viewtopic.php?f=11&t=80896

Fraudulent domain name used: oytloock.com - spoofing outlook.com

There is no content and also no option for anyone to set up an email account on that domain name.

From the domain name registration:

Domain Name: oytloock.com
Updated Date: 2019-12-12
Creation Date: 2018-12-14
Registrar Registration Expiration Date: 2020-12-14

Registrar: Onlinenic Inc

Registry Registrant ID: Not Available From Registry
Registrant Name: Vorobev Kazemir Vitalech
Registrant Organization: Vorobev Kazemir Vitalech
Registrant Street: Novoslobodsakaya 19s1
Registrant City: Moscow
Registrant State/Province: Moscow
Registrant Postal Code: 177112
Registrant Country: RU
Registrant Phone: +7.9161229076
Registrant Fax: +7.9161229076
Registrant Email: vorobev.kazemir@yandex.com

The same faker maker operates few other fraudulent domain names spoofing known email providers:

- gm2j1.com spoofing Gmail - see https://scamsurvivors.com/forum/viewtop ... 11&t=80131
- gmma1il.com spoofing Gmail
- gmma1l.com spoofing Gmail
- gmmalil.com spoofing Gmail
- outtloock.com spoofing Outlook
- y2ndex.com spoofing Yandex
- yuand3x.com spoofing Yandex.

in-mybox.com

Sat Feb 08, 2020 9:17 pm

Split from https://scamsurvivors.com/forum/viewtop ... 11&t=81544 & viewtopic.php?f=11&t=81658 & viewtopic.php?f=11&t=81342

The domain name is used only for the email address, as it can be seen in the examples above.

From the domain name registration:

Domain Name: IN-MYBOX.COM
Updated Date: 2019-03-22
Creation Date: 2019-03-22
Registrar Registration Expiration Date: 2020-03
Registrar: REGTIME LTD.

Reseller: OOO "CHELYABINSK-SIGNAL"
Domain Status: OK
Registry Registrant ID:
Registrant Name: Albina Bikchantaeva
Registrant Organization: Private person
Registrant Street: Lenina 78
Registrant City: Blagoveshhensk
Registrant State/Province: Bashkortostan
Registrant Postal Code: 798464
Registrant Country: RU
Registrant Phone: +7.9177595963
Registrant Email: bikchantaevaal@yandex.ru

The same registrant operates as well imailru.com, mobildating.net and ya-email.com.
Post a reply