Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

renny_r001@yahoo.com - globalconcord.com.ng

Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.

renny_r001@yahoo.com - globalconcord.com.ng

Unread postby firefly » Sun Apr 14, 2019 6:10 pm

Split from https://www.scamsurvivors.com/forum/vie ... 8&start=50, where the fake site robertandbrooksassociates.com is reported while being used in a refugee scam.

The fake website used in fraud claims to be an attonery office named Robert & Brooks Associates. The domain name is sourced from a Nigerian website named globalconcord.com.ng. The faker maker uses a simple and efficient strategy: he creates a WorldPress blog and he saves there pages for all the fake sites he creates and uses. After registering domain names for those fake sites, he is sourcing the content of those fake sites from that WorldPress blog alike domain pages. If the fraudulent websites get reported and suspended, he will be always able to register yet another domain and source the same content since that content is not on the main domain name used in scam. This game has been going on since 2012.

The initial blog in this case claims to be an online newspaper named Global Concord. Under the pretense of the blog are hidden numerous pages, each one being the source shown on a fake bank, courier or lawyer office.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137191.

From the fake site details:

Domain Name: globalconcord.com.ng
Updated Date: 2019-01-31
Creation Date: 2018-02-13
Registry Expiry Date: 2020-02-13
Registrar: smartweb

Registrar Address: 28/30 Bukuru Bypass Opp Airtel Office by British America Junction. Jos, Plateau State
Registrar Country: NG
Registrar Phone: 08035905422
Registrar Customer Service Contact: Smart Web Nigeria Limited

Registrant ID: 1031542-NIRA
Registrant Name: Abdul Lawan
Registrant Organization: Example Inc.
Registrant Street: 121, Broad Street
Registrant City: Lagos island
Registrant State/Province: Lagos
Registrant Postal Code: 23401
Registrant Country: NG
Registrant Phone: 08056479799
Registrant Email: renny_r001@yahoo.com

This is what the fake blog looks like:

globalconcord.JPG


There were / are the origin points for content shown on 8 different fake websites:
- metroglobalexpress.com - Metro Global Express;
- krediyapi.com - Yapi Kredi Financial Service;
- hampdenbnk.com - Hampden Bank;
- mrwdelivery.com - MRW Posts and Delivery Company;
- gbexpress-tk.com - Global Express Delivery Company;
- dunclawrie.com - Duncan Lawrie Private Bank;
- uphveterinary.com - Unique Pharmaceutical And Veterinary Pvt Ltd;
- robertandbrooksassociates.com - Robert & Brooks Associates.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: robertandbrooksassociates.com

Unread postby firefly » Sun Apr 14, 2019 6:20 pm

From the fake site:

We have the unique advantage of operating as part of a global network of commercial and corporate law attorneys. Many of our partners belong to the International Bar Association, and we are members of influential international intellectual property law organisations such as AIPPI (International Association for the Protection of Intellectual Property), the Licensing Executives Society, and FICPI (International Federation of Intellectual Property Attorneys). The firm's directors also attend International Trade Mark Association, Marqes, Chartered Institute of Patent Agents and the Asian Patent Attorneys Association meetings on a regular basis.


Contact details:

Madrid Office : Paseo de la Castellana, 51. 28046, Madrid, Spain
Barcelona Office: Avenida Diagonal, 08028, Barcelona, Spain
Castellon Office: Passeig de Morella, 12004, Castellon De la Plana, Castellon, Spain
Johannesburg Office : 203 Jan Smuts Avenue, Park town North, 2193, Johannesburg - South Africa
Phone Number : +34-91-123-57-13
Email : info@robertandbrooksassociates.com


+34911235713
Number billable as geographic number
Country or destination Spain -
Original network provider* Voxbone, S.a.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137316.

From the fake site details:
Domain Name: ROBERTANDBROOKSASSOCIATES.COM
Updated Date: 2018-09-03
Creation Date: 2018-07-04
Registrar Registration Expiration Date: 2019-07-04
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Oyakhire Kennedy
Registrant Organization: Zisat Web Solutions
Registrant Street: 424 Teton Pl
Registrant City: Corona
Registrant State/Province: California
Registrant Postal Code: 92879
Registrant Country: US
Registrant Phone: +1.8645014234
Registrant Email: paisner.h@gmail.com

This is what the fake site looks like:

randd.JPG


The content comes from here:

randb1.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: uphveterinary.com

Unread postby firefly » Sun Apr 14, 2019 6:44 pm

The fake site claims to be a medical institution named Unique Pharmaceutical And Veterinary Pvt Ltd.

From the fake site:

Unique Pharmaceutical And Veterinary Pvt Ltd is built up based on joint venture capital in Britain; we are proud to be a leading business in outstanding technology and remarkable improvement in Veterinary Medicine industry of Britain in particular and of America generally. With enthusiasm and unremitting efforts, we have been researching and combining with the most excellent innovative veterinary solutions from Thailand and Vietnam to launch products that achieved world-class standards, which creates UPV’s brand and prestige in domestic and international market.


Contact details:

64 Victoria ST, Westminster
London SW1E
BRANCH office:
61 AIdwych,
London WC2B 4AE, UK
+447452286546
1616 Redwood Highway
Corte Madera, CA 94925
+12092482167
info@uphveterinary.com


+447452286546
Number billable as mobile number
Country or destination Isle of Man
Original network provider* Manx Telecom Trading Limited

+12092482167
Type: Non-Fixed VoIP (e.g. Skype or Google Voice)
Original carrier: Bandwidth.com Clec, Llc - Ca

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137315.

From the fake site details:

Domain Name: UPHVETERINARY.COM
Updated Date: 2019-02-18
Creation Date: 2018-12-19
Registrar Registration Expiration Date: 2019-12-19
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Oyakhire Kennedy
Registrant Organization: Zisat Web Solutions
Registrant Street: 424 Teton Pl
Registrant City: Corona
Registrant State/Province: California
Registrant Postal Code: 92879
Registrant Country: US
Registrant Phone: +1.8645014234
Registrant Email: paisner.h@gmail.com

This is what the fake site looks like:

uph.JPG


The content comes from here:

upv.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: dunclawrie.com

Unread postby firefly » Sun Apr 14, 2019 7:32 pm

The domain name claimed to be a bank named Duncan Lawrie Private Bank. The fraudulent domain expired.

The real bank with that name is in the process of winding down its operations - see https://en.wikipedia.org/wiki/Duncan_Lawrie.

The sourced content is very much alive on the Nigerian "news" blog, and can be reused any time on another domain name or straight from the blog, with the victim receiving a direct link to the hidden content.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137195.

From the fake site details:

Domain Name: DUNCLAWRIE.COM
Updated Date: 2019-03-14
Creation Date: 2018-03-14
Registrar Registration Expiration Date: 2019-03-14
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Oyakhire Kennedy
Registrant Organization: Zisat Web Solutions
Registrant Street: 424 Teton Pl
Registrant City: Corona
Registrant State/Province: California
Registrant Postal Code: 92879
Registrant Country: US
Registrant Phone: +1.8645014234
Registrant Email: paisner.h@gmail.com

From the source content hidden on the blog:

Duncan Lawrie Private Bankwas the first charted bank south of Eglin Air Force Base. Through the efforts of the entire community, the bank was charted by and for the citizens in South Okaloosa County. Today, Duncan Lawrie Private Bankremains the oldest independent bank on the Emerald Coast.
The first account opened on November 17, 1948 was entered by Ray O. Deal for the Fort Walton Kiwanis Club in the amount of $50.00.


Contact details:

United Kingdom
1 Hobart Place, B
‎Belgravia, London
England, United Kingdom
Phone: +44 7883 838842
Email: info@dunclawrie.com
Sweden
Klostergatan 23
Statistics Sweden
SE-701 89 Örebro
Phone: +46 76 261 02 84
Email: info@dunclawrie.com


+447883838842
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Hutchison 3G UK Ltd

+46762610284
Number billable as mobile number
Country or destination Sweden
Original network provider* Tele2 Sverige AB

This is what the fake bank looks like:

dunc.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: gbexpress-tk.com

Unread postby firefly » Sun Apr 14, 2019 7:56 pm

The fake site claimed to be a delivery company named Global Express Delivery Company. The domain name was suspended for being used in fraudulent activities online.

The content hidden on the Nigerian blog is still very much alive and can be used anytime.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137194.

From the fake site details:

Domain Name: GBEXPRESS-TK.COM[Image][/Image]
Updated Date: 2018-08-01
Creation Date: 2016-07-28
Registrar Registration Expiration Date: 2019-07-28
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Domain Status: clientHold

Registry Registrant ID: Not Available From Registry
Registrant Name: Kaycee
Registrant Organization: Omenka Gallery
Registrant Street: 24, Ikoyi Crescent
Registrant City: Ikoyi
Registrant State/Province: Lagos
Registrant Postal Code: 100901
Registrant Country: NG
Registrant Phone: +234.8056479799
Registrant Email: mccounty@yahoo.com

From the hidden content:

Global Express Delivery Company is a newly formed company and is being managed by Team of Professionals having vast experience in delivery industry.
Global Express Delivery Company has started delivery Parcel Services in the whole world.


Contact details:

Office
Aerop A.Suarez., Ctro Carga aerea
Avda Central 35, 28042 Madrid, Spain
Phone: +9053856053448
Email: courier@gbexpress-tk.com


+9053856053448
Number billable as mobile number
Country or destination Turkey
Original network provider* Turkcell Iletisim Hizmetleri AS

This is what the fake site looks like:

gex.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: mrwdelivery.com

Unread postby firefly » Sun Apr 14, 2019 8:14 pm

And now another fake courier company pretending to be MRW Posts and Delivery Company. It is the same template as the one reported above, only using blue instead of green.

The domain pages content is sourced from the same blog.

From the fake website:

MRW Posts and Delivery Company is a newly formed company and is being managed by Team of Professionals having vast experience of delivery Industry. Global Express Delivery Company has started delivery Parcel Services in all around the world.


Contact details:

Office
Barrio Zoña 36
Bajo Izquierda
39193 Castillo
CANTABRIA - SPAIN
Phone: +34-62-595-4906
Email: info@mrwdelivery.com


+34625954906
Number billable as mobile number
Country or destination Spain
Original network provider* Mas Movil Telecom 3.0, S.a.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137193.

From the fake site details:

Domain Name: MRWDELIVERY.COM
Updated Date: 2018-11-08
Creation Date: 2018-09-08
Registrar Registration Expiration Date: 2019-09-08
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Oyakhire Kennedy
Registrant Organization: Zisat Web Solutions
Registrant Street: 424 Teton Pl
Registrant City: Corona
Registrant State/Province: California
Registrant Postal Code: 92879
Registrant Country: US
Registrant Phone: +1.8645014234
Registrant Email: paisner.h@gmail.com

This is what the fake site looks like:

mr.JPG


The content comes from here:

mr1.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: hampdenbnk.com

Unread postby firefly » Sun Apr 14, 2019 8:37 pm

The fake site claimed to be a financial institution named Hampden Bank. After being reported for fraud, the domain name got suspended.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=1371924

From the fake site details:

Domain Name: HAMPDENBNK.COM
Updated Date: 2019-03-21
Creation Date: 2018-03-19
Registrar Registration Expiration Date: 2020-03-19
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Domain Status: clientHold

Registry Registrant ID: Not Available From Registry
Registrant Name: Odipe Emmanuel
Registrant Organization: Bowman Solicitors
Registrant Street: Office 290, Dunkeld West Centre
Registrant City: Dunkeld West
Registrant State/Province: Johannesburg
Registrant Postal Code: 2196
Registrant Country: ZA
Registrant Phone: +27.733303864
Registrant Email: secatmcbn@aol.com

The content is very much active from the same Nigerian blog.

The scammer stole the content from First City Bank and adjusted while impersonating Hampden Bank. The real Hampden Bank was established in 1852. In 2015, Hampden Bank was acquired by another bank and their previous domain name hampdenbank.com is no longer active.

No longer active in the real world. In the scam world nothing goes away forever.

From the fake site:

Hampden Bankwas the first charted bank south of Eglin Air Force Base. Through the efforts of the entire community, the bank was charted by and for the citizens in South Okaloosa County. Today, Hampden Bankremains the oldest independent bank on the Emerald Coast.
The first account opened on November 17, 1948 was entered by Ray O. Deal for the Fort Walton Kiwanis Club in the amount of $50.00.


Contact details:

United States of America
220 Westfield St
West Springfield
MA 01089
USA
Phone: +1 614 517-1476
Email: info@hampdenbnk.com
United Kingdom
Third Floor
36 Dover Street
London W1S 4NH
England, United Kingdom
Phone: +44 7466 912496
Sweden
Klostergatan 23
Statistics Sweden
SE-701 89 Örebro
Sweden
Phone: +46 76 261 02 84


+16145171476
Type: Non-Fixed VoIP (e.g. Skype or Google Voice)
Original carrier: Neutral Tandem-michigan, Llc - Oh

+447466912496
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Lycamobile UK Limited

+46 76 261 02 84 / +46762610284 was also used on the above mentioned dunclawrie.com.

This is what the fake bank looks like:

hamp.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: krediyapi.com

Unread postby firefly » Sun Apr 14, 2019 8:52 pm

The fake site claimed to be yet another financial institution named Yapi Kredi Financial Service. After being reported, the domain name was suspended. The content is still active form the Nigerian blog mentioned above.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137182.

From the fake site details:

Domain Name: KREDIYAPI.COM
Updated Date: 2019-04-01
Creation Date: 2017-09-08
Registry Expiry Date: 2019-09-08
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Domain Status: clientHold

Registry Registrant ID: Not Available From Registry
Registrant Name: General
Registrant Organization: Bowman Solicitors
Registrant Street: SA
Registrant City: Pretoria
Registrant State/Province: Free State
Registrant Postal Code: 12321
Registrant Country: ZA
Registrant Phone: +27.12313321
Registrant Email: secatmcbn@aol.com

It is the same web content stolen from First City Bank and adjusted to impersonate a Turkish entity. The real Yapi Kredi was founded in 1944.

From the fake bank website:

Yapi Kredi Financial Servicewas the first charted bank south of Eglin Air Force Base. Through the efforts of the entire community, the bank was charted by and for the citizens in South Okaloosa County. Today, Yapi Kredi Financial Service remains the oldest independent bank on the Emerald Coast.
The first account opened on November 17, 1948 was entered by Ray O. Deal for the Fort Walton Kiwanis Club in the amount of $50.00.


Contact details:

Cemil Topuzly Cad. Ozkan
13/B 35226 Kadikoy
Yapi Krediates
Istanbul, Turkey
Telephone: +90 (531) 598 94 68
E-Mail: info@krediyapi.com


+905315989468
Number billable as mobile number
Country or destination Turkey
Original network provider* Turkcell Iletisim Hizmetleri AS

This is what the fake bank looks like:

yapi.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re:metroglobalexpress.com

Unread postby firefly » Sun Apr 14, 2019 9:09 pm

And we have another fake delivery company pretending to be Metro Global Express. Same story: after being reported for fraudulent activities, the domain name gost suspended. The content is alive from the blog.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137181.

From the fake site details:

Domain Name: METROGLOBALEXPRESS.COM
Updated Date: 2019-04-04
Creation Date: 2018-03-13
Registry Expiry Date: 2020-03-13
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Domain Status: clientHold

Registry Registrant ID: Not Available From Registry
Registrant Name: Odipe Emmanuel
Registrant Organization: Bowman Solicitors
Registrant Street: Office 290, Dunkeld West Centre
Registrant City: Dunkeld West
Registrant State/Province: Johannesburg
Registrant Postal Code: 2196
Registrant Country: ZA
Registrant Phone: +27.733303864
Registrant Email: secatmcbn@aol.com

Again, same template, also blue.

From the fake website:

Metro Global Express Delivery Company is a newly formed company and is being managed by Team of Professionals having vast experience of delivery Industry. Global Express Delivery Company has started delivery Parcel Services in all around the world.


Contact details:

Office
87, Kingsway Road, Falomo
Ikoyi, Lagos. Nigeria
Phone: +234 (0) 811 739 5837
Email: info@metroglobalexpress.com


+2348117395837
Number billable as mobile number
Country or destination Nigeria
Original network provider* Globacom Ltd (Glo)

This is what the fake courier looks like:

metro.JPG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe


Return to Fake sites/Phishing sites.

Who is online

Users browsing this forum: No registered users and 32 guests