ricadonnafin.com

by **firefly** » Sat Jul 22, 2017 4:04 am

The fake site is used in loan scams. The scammers are getting victims by posting ads on free sites from Turkey, Poland, India, Germany and Czech Republic.

From the fake site:

Through our years of experience and network of lenders we have found ways to provide quick cash to allow business owners to take advantage of immediate opportunities and grow their companies. In this age of fast growth, it is critical to be able to move quickly or your competition will pass you up. Your business requires money to grow. RICADONNA FINANCIAL CONSULTS is here to help.

Contact details:

Ricadonna Financial Consults
Offices: 1. Via Mollieres 1507, Corso Francia 61, Torino, Italy
2. Alabama, Springdale Mall, 3250 Airport Blvd, L 36606, United States
Tel: +3904251560061 & +1-858-367-6354 / +18583676354
Email
support@ricadonnafin.com
help@ricadonnafin.com
loans@ricadonnafin.com
ricadonna.finance@outlook.com

"years of experience" means less than a year...

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125562:
Domain Name: ricadonnafin.com
Updated Date: 2017-07-19
Creation Date: 2016-09-21
Registrar Registration Expiration Date: 2017-09-21
Registrar: NameSilo, LLC
Reseller: QHOSTER.COM

Registrant Name: Tilbert Steffler
Registrant Organization:
Registrant Street: 476 BH Central Avenue
Registrant City: Napoli
Registrant State/Province: NA
Registrant Postal Code: 80134
Registrant Country: IT
Registrant Phone: +39.390694803588
Registrant Email: carosab016@gmail.com

This is what the fake site is looking like:

by **firefly** » Sat Jul 22, 2017 4:14 am

The fake site impersonates a real company with the same name. A previous fake site pretending to be the same company got reported for being used in fraud last year in August and is now dead. The real Sutherland Insurance Napoil has nothing to do with the scam.

From the fake site:

Sutherland Insurance in Napoli has been an insurance broker to the Napoli area since 1870.

Contact details on the fake site:

Head Office: 476 BH Central Avenue,
P.O Box 10187
3,v.Morgantini 80134 Napoli (NA) Italy
Partita IVA 00957670153

Contact:
Phone: +39 069 480 3588 / +390694803588
info@sutherlandint.com

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125563:

Domain Name: sutherlandint.com
Updated Date: 2017-07-16
Creation Date: 2016-11-16
Registrar Registration Expiration Date: 2017-11-16
Registrar: NameSilo, LLC
Reseller: QHOSTER.COM

Registrant Name: Tilbert Steffler
Registrant Organization:
Registrant Street: 476 BH Central Avenue
Registrant City: Napoli
Registrant State/Province: NA
Registrant Postal Code: 80134
Registrant Country: IT
Registrant Phone: +39.390694803588
Registrant Email: carosab016@gmail.com

This is what the fake site is looking like:

by **firefly** » Sat Jul 22, 2017 4:29 am

The fake site claims to be Hamza Kumar Loan Company.

Hamza Kumar Loan Company is one of the leading credit brokers in the USA. We process thousands of personal loan applications each month, making us one of the largest credit brokers in the USA.

Contact details on the fake site:

USA Phone number: +1 (646) 902-5821
USA Address: 1932 Campus Drive
Newport Beach, CA 92660 Califonia,USA

India Address: NO 541,Opposite Jain Bhawan,
Shaheed Bhagat Singh Place,Sector 4,
Gole Market, New Delhi, Delhi 110001,India
Phone number; +919821336905
email: hamzakumarfinance@gmail.com

+16469025821 - Enflick VoIP number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125564:

Domain Name: hamzakumar.com
Registry Domain ID: 2101400366_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namesilo.com
Registrar URL: https://www.namesilo.com/
Updated Date: 2017-07-16
Creation Date: 2017-03-01
Registrar Registration Expiration Date: 2018-03-01
Registrar: NameSilo, LLC
Reseller: QHOSTER.COM

Registry Registrant ID:
Registrant Name: Michael Dwen
Registrant Organization: Fast Serv Inc. d.b.a. QHoster.com
Registrant Street: 1 Mapp Str.
Registrant City: Belize
Registrant State/Province: BZ
Registrant Postal Code: 00000
Registrant Country: BZ
Registrant Phone: +501.18774231155
Registrant Email: info@QHoster.com

This is what the fake site is looking like:

: hamzak.PNG (109.26 KiB) Viewed 5161 times

by **firefly** » Sat Jul 22, 2017 4:44 am

The fake site claims to be British Logistics Services and Security Company.

From the fake site:

B.L.S.S.C have been providing a quality courier service to a broad range of customers throughout the UK since 1989.

Contact details on the fake site:

British Logistics Services and Security Company
Reg no: 07537120
81 Kingsway, London,
WC2B 6AA,
United Kingdom
Phone: +44 141 280 0655 / +441412800655
Email: customer.service@blssco.com

"since 1989" is a lie - the site was created in December 2016. The scammers are using the privacy protection given by the (same) reseller, QHoster, to hide their identity and location.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=125565

This is what the fake site is looking like:

: blssco.PNG (154.46 KiB) Viewed 5160 times

by **firefly** » Sat Jul 22, 2017 5:11 am

"Reg no: 07537120" - the same registration number was previously used with another fake site, surfairlgsc.com - Surfair Logistic & Security Company, reported for being used in fraud last year in April and no more active today: https://db.aa419.org/fakebanksview.php?key=112592.

There is still active online another Surfair Logistic & Security Company domain, used only for the email address now.

Adderss : 6 Chester Rd, Holmes Chapel, Crewe,. Cheshire East CW4 7BH. United Kingdom. Reg No. 07537120. Email: support@surlsc.info

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125566:
Domain Name: SURLSC.INFO
Updated Date: 2017-06-07
Creation Date: 2017-04-08
Registry Expiry Date: 2018-04-08
Registrar Registration Expiration Date:
Registrar: Uniregistrar Corp

Registrant Name: Abby Hanson
Registrant Organization:
Registrant Street: 306 Payne Street
Registrant City: Sugar Land
Registrant State/Province: TX
Registrant Postal Code: 77487
Registrant Country: US
Registrant Phone: +1.2812439043
Registrant Email: kriz424@live.com

Back in 2015, when the email address was reported for registering a fake site named natwestonlinetransfer.com and impersonating NatWest Helping Banking, the owner of the email address was in Nigeria and had another name - https://db.aa419.org/fakebanksview.php?key=105912:

Registrant Name: Range Lance
Registrant Organization: N/A
Registrant Street: 23 mm way
Registrant City: Benin
Registrant State/Province: Edo
Registrant Postal Code: 23452
Registrant Country: NG
Registrant Phone: +234.8130683602
Registrant Email: kriz424@live.com

Same in 2016, while creating firstatlantics-gh.com while impersonating First Atlantic Bank Ghana.

Even before that, between 2013 - 2014, Range Lance / Abby Hanson was using a fake Facebook profile for romance scams as:

Macus Joel
Lives in London, United Kingdom
Divorced

I want to be love by someone

hi guys,
i just want someone who i can love and trust.

Stolen picture used:

He is not confused about his name, location or gender only while registering fake sites...

Fake characters used on skype:

live:kriz424 aka Steven Cray
Vermont, United States
54 years, BD: June 11, 1963

and

sofiagrace13 aka Sofia Grace
Benin City, Nigeria

by **firefly** » Sat Jul 22, 2017 5:56 am

The fake site claims to be Pacific Aliance Bank.

Pacific Aliance Bank is a California state-chartered bank, headquartered in Rosemead, CA. As such, it serves Rosemead, its surrounding communities, and Southern California in general. The Bank was organized by a group of business entrepreneurs, professionals, and bankers resident in this market area and opened for business in December, 2006.

Contact details on the fake site:

3890 Oliver Street.
Blue Mound, US 91770
Telephone: +1 pacificallian
E-mail: support@pacificalian.info

Pacific Aliance Bank
Human Resources
8400 E. Valley Blvd.
Rosemead, Ca 91770
Email: support@pacificalian.info
1-(415)-857-1807

+14158571807 - Google VoIP number

"opened for business in December, 2006" is a lie - the site was created in April 2014.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=125567

This is what the fake site is looking like:

: pacificalian.PNG (125.07 KiB) Viewed 5156 times

by **firefly** » Sat Jul 22, 2017 6:09 am

There is also a pacificaliance.info, having the exact same content as the previous fake one, with different contact details:

3890 Oliver Street.
Blue Mound, US 91770
Telephone: (614) 932 2955
E-mail: support@pacificaliance.info

Pacific Aliance Bank
Human Resources
8400 E. Valley Blvd.
Rosemead, Ca 91770
Email: support@pacificaliance.info

+16149322955 - TextPlus VoIP number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125568:
Domain Name: PACIFICALIANCE.INFO
Updated Date: 2017-03-04
Creation Date: 2017-01-03
Registry Expiry Date: 2018-01-03
Registrar Registration Expiration Date:
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant Name: Ward Elva
Registrant Organization: N/A
Registrant Street: 2795 Big Indian
Registrant City: Kenner
Registrant State/Province: Louisiana
Registrant Postal Code: 70062
Registrant Country: US
Registrant Phone: +1.5045837782
Registrant Email: firstalant@yahoo.com

This is what the fake site is looking like:

: pacificaliance.PNG (135.81 KiB) Viewed 5155 times

by **firefly** » Sat Jul 22, 2017 6:30 am

The fake site claims to be Xpress Delivery and Security Company.

We offer a discreet way to store your valuables securely in a non bank safe deposit box with high security vaults located in a Gotthard region and in the Canton of Zurich. Independent of the banking system and in private ownership, fully insurable and no declaration of content.

Email: info@xpressdelivery.us

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125569:

Domain Name: XPRESSDELIVERY.US
Sponsoring Registrar: BIGROCK SOLUTIONS LTD.
Domain Registration Date: Mon Jul 10 2017
Domain Expiration Date: Mon Jul 09 2018
Domain Last Updated Date: Mon Jul 10 2017

Registrant Name: James Lawrence
Registrant Address1: 2007 Spring Avenue
Registrant City: Philadelphia
Registrant State/Province: Other
Registrant Postal Code: 19123
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.2676992561
Registrant Email: kriz424@live.com

This is what the fake site is looking like:

Who is online