The fake site is impersonating the Gulf Bank - Kuwait, founded in 1960. The domain is used only for the email addres for another fake site impersonating the same bank.
From the fake site details -
https://db.aa419.org/fakebanksview.php?key=122045:
Domain Name: EGBKUWAIT.COM
Updated Date: 2017-01-08
Creation Date: 2016-11-08 Registrar Registration Expiration Date: 2017-11-08
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registry Registrant ID: Not Available From Registry
Registrant Name: gab
Registrant Organization: are
Registrant Street: block 114 flat 15, jakande estate, ajah
Registrant City: lagos
Registrant State/Province: Other
Registrant Postal Code: 234
Registrant Country: NG
Registrant Phone: +234.8022072016
Registrant Email:
gbegab2@yahoo.comThe main site using the fake domain as a contact details is e-gbkuwait.com.
Contact details on the fake site:
Address:#3 Groynd floor, 800470 Abdulaziz Hamad Al Saqer Street, Kuwait City, Kuwait
Email Address:
info@egbkuwait.com
From the fake site details -
https://db.aa419.org/fakebanksview.php?key=122046:
Domain Name: E-GBKUWAIT.COM
Updated Date: 2017-01-07
Creation Date: 2016-11-07 Registrar Registration Expiration Date: 2017-11-07
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registry Registrant ID: Not Available From Registry
Registrant Name: victor debo
Registrant Street: iweka road, Onitsha
Registrant City: onitsha
Registrant State/Province: anambra
Registrant Postal Code: 234
Registrant Country: NG
Registrant Phone: +234.234809957
Registrant Email:
victordeborah802@yahoo.com This is what the fake site is looking like:
To login on the fake bank, the victim receives a link to another domain: dareglogdatahtml.website.
From the fake site details -
https://db.aa419.org/fakebanksview.php?key=122047; the scammers are using the privacy protection given by the registrar to hide their identity:
Domain Name: DAREGLOGDATAHTML.WEBSITE
Updated Date: 2017-02-14
Creation Date: 2017-01-31
Registry Expiry Date: 2018-01-31
Sponsoring Registrar: Namecheap
Registrant ID: C115552312-CNIC
Registrant Name: WhoisGuard Protected
This is what the fake site is looking like: