Fake sites used in Russian romance scams

Split from viewtopic.php?f=11&t=81544

The domain name emailset.org shows no content ans is used only for email address.

From the domain name registration:

Domain Name: emailset.org
Updated Date: 2020-08-09
Creation Date: 2020-08-09
Registrar Registration Expiration Date: 2021-08-09
Registrar: ENOM, INC.

Registrant Name: REDACTED FOR PRIVACY
Registrant Organization: REDACTED FOR PRIVACY
Registrant Street: REDACTED FOR PRIVACY
Registrant City: REDACTED FOR PRIVACY
Registrant State/Province: REDACTED FOR PRIVACY
Registrant Postal Code: REDACTED FOR PRIVACY
Registrant Country: RU

Split from viewtopic.php?f=11&t=85151 and viewtopic.php?f=11&t=85870 where the domain name is reported for bieng used for the email address.

From the domain name registration:

Domain name: EPOSTEGO.COM
Updated Date: 2020-06-26
Creation Date: 2019-08-26
Registrar Registration Expiration Date: 2021-08-26
Registrar: Registrar of domain names REG.RU LLC

Registrant ID:
Registrant Name: Protection of Private Person

split from viewtopic.php?f=11&t=90185 where the domain name yahaa.xyz is used for sending a fraudulent message.

The domain name yahaa.xyz is spoofing Yahoo. There is no content, the fraudulent domain name is used only for the email address.

From the domain name registration:

Domain name: YAHAA.XYZ
Updated Date: 2021-03-06
Creation Date: 2021-03-01
Registrar Registration Expiration Date: 2022-03-01
Registrar: Registrar of domain names REG.RU LLC

Status: ok
Registry Registrant ID: reg-g9e9o8j3p1ry
Registrant Name: Ivan Petrov
Registrant Organization: Private Person
Registrant Street: Lenina,4,26
Registrant City: Omsk
Registrant State/Province: --
Registrant Postal Code: 644000
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru

Similar messages are sent from yanda.rest - spoofing Yandex.

From the domain name registration:

Domain name: YANDA.REST
Updated Date: 2021-02-14
Creation Date: 2020-10-25
Registrar Registration Expiration Date: 2021-10-25
Registrar: Registrar of domain names REG.RU LLC

Status: ok
Registry Registrant ID: reg-vsckzn11fg4t
Registrant Name: Ivan Petrov
Registrant Organization: Private Person
Registrant Street: Lenina,4,26
Registrant City: Omsk
Registrant State/Province: --
Registrant Postal Code: 644000
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email: parliament55555@yandex.ru

Other active fraudulent domain name registered with the same registrant email address:

- enail.xyz, spoofing mail.com, as seen in https://scamsurvivors.com/forum/viewtop ... 52#p232030

- gnnail.xyz, spoofing gmail.com - as seen in viewtopic.php?f=11&t=89813#p231831

- nneil.xyz, spoofing mail.com

- qamail.rest, spoofing gmail.com

- qmail.rest, spoofing gmail.com, as seen in: https://scamsurvivors.com/forum/viewtop ... 11&t=86835

- qpmail.rest, spoofing gmail.com

- yahaa.rest, spoofing yahoo.com

- yanbex.xyz, spoofing yandex.com, as seen in viewtopic.php?f=11&t=83558

- yandasky.site, spoofing yandex.com, as seen in viewtopic.php?f=11&t=73502&p=226143#p226143

- yandax.rest, spoofing yandex.com, as seen in viewtopic.php?f=11&t=87233

- yandax.space, spoofing yandex.com, as seen in viewtopic.php?f=11&t=87032&p=223931#p223931

- yandax.xyz, spoofing yandex.com, as seen in viewtopic.php?f=11&t=88314.