ambnkm.com - impersonating American Bank

[firefly]

Fake site impersonating the same bank as in the above mentioned cases.

Fake site details - http://db.aa419.org/fakebanksview.php?key=111255:
Domain Name: ONLINEMAYBANK2U.COM
Registry Domain ID: 2002988721_DOMAIN_COM-VRSN
Updated Date: 2016-02-15T16:12:25Z
Creation Date: 2016-02-15T16:06:01Z
Registrar Registration Expiration Date: 2017-02-15T16:06:01Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant details:
Registrant Name: Mike
Registrant Organization: WPLOT
Registrant Street: Jalan PKNK 3, Kawasan Perindustrian Sungai Petani,
Registrant City: Sungai Petani
Registrant State/Province: Kedah
Registrant Postal Code: 08000
Registrant Country: MY
Registrant Phone: +062.46284052
Registrant Email: gottschalkgottlieb@hotmail.com

[firefly]

The real CIMB Group is a universal bank headquartered in Kuala Lumpur, Malaysia and was founded in 1924.

The fake one the scammers impersonates was registered this year.

Fake site details - http://db.aa419.org/fakebanksview.php?key=116356:
Domain Name: ONLINECIMB.COM
Registry Domain ID: 2015554232_DOMAIN_COM-VRSN
Registrar URL: LaunchPad.com
Updated Date: 2016-03-24T20:11:13Z
Creation Date: 2016-03-24T20:11:12Z
Registrar Registration Expiration Date: 2017-03-24T20:11:12Z
Registrar: Launchpad, Inc. (HostGator)

Registrant details:
Registrant Name: Celler Host
Registrant Organization: Cellerhost
Registrant Street: Jalan PKNK 3, Kawasan Perindustrian
Registrant City: Sungai Petani
Registrant State/Province: Kedah
Registrant Postal Code: 80000
Registrant Country: MY
Registrant Phone: +1.601139462719
Registrant Email: g_celler@yahoo.com

[firefly]

Same scammer net, same bank impersonated - using another fake site.

Fake site details - http://db.aa419.org/fakebanksview.php?key=111877:
Domain Name: ONLINECIMBK.COM
Registry Domain ID: 2019378380_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Updated Date: 2016-04-06T16:12:22Z
Creation Date: 2016-04-06T16:11:34Z
Registrar Registration Expiration Date: 2017-04-06T16:11:34Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant details:
Registrant Name: Barthoald
Registrant Organization: N/A
Registrant Street: 36, Jalan 6/100A, Cheras, 56100, Kuala Lumpur, Wilayah Persekutu
Registrant City: Cheras
Registrant State/Province: Selangor
Registrant Postal Code: 56100
Registrant Country: MY
Registrant Phone: +60.1139462719
Registrant Email: barthold_eduard@outlook.com

[firefly]

And another fake one:

Fake site details - http://db.aa419.org/fakebanksview.php?key=111927:
Domain Name: ONLINECIMBMY.COM
Registry Domain ID: 2015639832_DOMAIN_COM-VRSN
Updated Date: 2016-04-01T09:15:05Z
Creation Date: 2016-03-25T16:26:22Z
Registrar Registration Expiration Date: 2017-03-25T16:26:22Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant details:
egistrant Organization: WPLOT
Registrant Street: Jalan PKNK 3, Kawasan Perindustrian Sungai Petani,
Registrant City: Sungai Petani
Registrant State/Province: Kedah
Registrant Postal Code: 08000
Registrant Country: MY
Registrant Phone: +061.139462719
Registrant Email: mikeanthony97@yahoo.com

Later on, the registrant details were changed:
Registrant Name: CMBR
Registrant Organization: WPLOT
Registrant Street: Jalan PKNK 3, Kawasan Perindustrian Sungai Petani,
Registrant City: Sungai Petani
Registrant State/Province: Kedah
Registrant Postal Code: 08000
Registrant Country: MY
Registrant Phone: +061.139462719
Registrant Email: cmbr@onlinecimbmy.com

[firefly]

- impersonating South Carolina Transportation Infrastructure Bank. The real one is active since 1997. The fake one was registered online few months ago... and it is not in South Carolina.

Fake site details - http://db.aa419.org/fakebanksview.php?key=116354:
Domain Name: STIBNK.COM
Registry Domain ID: 2002174960_DOMAIN_COM-VRSN
Updated Date: 2016-04-02T11:54:58Z
Creation Date: 2016-02-12T14:06:36Z
Registrar Registration Expiration Date: 2017-02-12T14:06:36Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant details:
Registrant Name: Mike
Registrant Organization: WPLOT
Registrant Street: Jalan PKNK 3, Kawasan Perindustrian Sungai Petani,
Registrant City: Sungai Petani
Registrant State/Province: Kedah
Registrant Postal Code: 08000
Registrant Country: MY
Registrant Phone: +062.46284052
Registrant Email: mikeanthony97@yahoo.com

[firefly]

stnchat.com - impersonating Standard Chartered Bank

Contact details from the fake site:

Phone banking numbers:
Call Centre Local 0783-7421-873


Address
756 gt globel Place,
CD-Road,M 07 435.
Telephone: +1 (215) 475 9652
FAX: +1 (442)233 1950
E-mail : info@stnchat.com
Copyrights © 2015 Standard Chartered Bank

Fake site details: http://db.aa419.org/fakebanksview.php?key=116347:
Domain Name: STNCHAT.COM
Registry Domain ID: 2021526108_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2016-06-14T02:39:37Z
Creation Date: 2016-04-14T11:29:29Z
Registrar Registration Expiration Date: 2017-04-14T11:29:29Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Name Server: ns1.cellerhost.website

For how the scam works see http://scamsurvivors.com/forum/viewtopi ... =6&t=50772.

[Big Al]

stnchat.com

According to one of the victims, the scammer is using the fake identity of:

Jason Samuelson from Manchester U.K.
Engineer in Indonesia


More information for Owen Wati and Yunita Lestari Here:
http://scamsurvivors.com/forum/viewtopi ... 11&t=54260

[firefly]

Anyone believes that killing their fake sites will stop the scammers from what they are doing? Wrong.

After having all the above fake bank sites suspended, the scammer was just setting up another one.

© 2001-11 Malayan Banking Berhad (Company No, 3813-K). All rights reserved.

Domain Name: ONLINEMBEASY.COM
Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Sponsoring Registrar IANA ID: 303
Name Server: NS1.GCELLERHOST.COM
Name Server: NS2.GCELLERHOST.COM
Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Updated Date: 15-sep-2016
Creation Date: 13-sep-2016
Expiration Date: 13-sep-2017

The registrant details are hidden under privacy protection... but we know already who this one is: http://scamsurvivors.com/forum/viewtopi ... 8&p=114273

This is what the fake site is looking like:

[firefly]

Shortly after the previous fake site stnchat.com got suspended, the scammer registered another one: stndchat.com - impersonating the same bank.

756 gt globel Place,
CD-Road,M 07 435.
Toll Free Tel: +44-800 STANCHART
E-mail : info@stndchat.com

Fake site details:
Domain Name: STNDCHAT.COM
Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Sponsoring Registrar IANA ID: 303
Name Server: NS1.GCELLERHOST.COM
Name Server: NS2.GCELLERHOST.COM
Updated Date: 30-aug-2016
Creation Date: 30-aug-2016
Expiration Date: 30-aug-2017

This is what the fake site is looking like:

[firefly]

From the fake site - contact details:

756 gt globel Place,
CD-Road,M 07 435.
Telephone: ....
FAX: ...1
E-mail : info@aacimbcheck.com

Fake site details - http://db.aa419.org/fakebanksview.php?key=117098 :

Domain Name: AACIMBCHECK.COM
Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Sponsoring Registrar IANA ID: 303
Name Server: NS1.GCELLERHOST.COM
Name Server: NS2.GCELLERHOST.COM
Updated Date: 15-sep-2016
Creation Date: 13-sep-2016
Expiration Date: 13-sep-2017

This is what the fake site is looking like: