Decyber gang - Nigerian nest of fake sites

[firefly]

- dfbplc.com - impersonating Diamond Finance Bank. Fake site details: https://db.aa419.org/fakebanksview.php?key=123659

dfbplc.PNG (188.37 KiB) Viewed 5361 times

- eco-plc.com - impersonating EcoBank - The PanAfrican Bank. Fake site details: https://db.aa419.org/fakebanksview.php?key=123608

eco-plc.PNG (169.03 KiB) Viewed 5361 times

- ecoplc.com - impersonating the same EcoBank.

Contact details used:
TEL:
+234-907-695-2214 / +2349076952214
EMAIL:
customercare@ecoplc.com

Fake site details: https://db.aa419.org/fakebanksview.php?key=123607

ecoplc.PNG (172.04 KiB) Viewed 5361 times

- etubplc.com - impersonating Emerald Trust Union Bank

Phone number used as contact: 512-546-7354 / +15125467354 - Bandwidth SMSEnabled VoIP number.

Fake site details: https://db.aa419.org/fakebanksview.php?key=123603

etubplc.PNG (204.33 KiB) Viewed 5361 times

- fctbgroup.com - impersonating First City Trust Bank.

Fake site details: https://db.aa419.org/fakebanksview.php?key=123656

fctbgroup.PNG (185.87 KiB) Viewed 5361 times

- fedcunion.com - impersonating Federal Credit Union

Fake site details: https://db.aa419.org/fakebanksview.php?key=123598

fedcunion.PNG (149.95 KiB) Viewed 5361 times

- fedcuonline.com - impersonating the same Federal Credit Union

Fake site details: https://db.aa419.org/fakebanksview.php?key=123597

fedcuonline.PNG (149.08 KiB) Viewed 5361 times

- fedcuplc.com - again Federal Credit Union

Contact details:
Email
info@fedcuplc.com
Telephone
(269) 430-3281 Calls and SMS
(575) 578-3129 SMS Only

+12694303281 and +15755783129 are both Google VoIP numbers.

Fake site details: https://db.aa419.org/fakebanksview.php?key=123596

fedcuplc.PNG (150.13 KiB) Viewed 5361 times

- fedreservbnk.com - impersonating Federal Reserve Bank

- fidelitybnkplc.com - impersonating Fidelity Bank Nigeria

- firstusbank-org.com - impersonating First US Bank

[firefly]

- gcuplc.com - pretending to be Gentle Credit Union

Fake site details: https://db.aa419.org/fakebanksview.php?key=123587

gcuplc.PNG (150.1 KiB) Viewed 5359 times

- giantstridemfb.com - pretending to be Giant Stride Microfinance Bank Limited

Contact details used:

Cele NICA, Badagry Expressway, Ojo, Lagos
Telephone:
+2348037158784
01-3428796
E-mails:
info@giantstridemfb.com

Fake site details: https://db.aa419.org/fakebanksview.php?key=123579

giantstridemfb.PNG (228.25 KiB) Viewed 5359 times

- hallemgroup.com - pretending to be Hallem Bank. There was a Hallam Bank, not active anymore since 1990, but no Hallem Bank exists in the real world.

Fake site details: https://db.aa419.org/fakebanksview.php?key=123652

hallemgroup.PNG (182.81 KiB) Viewed 5359 times

- havannacu.com - pretending to be Havanna Credit Union

Contact details:

Email:
info@havannacu.com
Tel:
+1 970 285 3679 / +19702853679 - TextPlus VoIP number

Fake site details: https://db.aa419.org/fakebanksview.php?key=123574

havannacu.PNG (150.91 KiB) Viewed 5359 times

- hsbc-investment.org, hsbcplc-hk.com - impersonating HSBC Bank

- lakesideplc.com - impersonating Lakeside Bank

Contact details:
Email: info@lakesideplc.com
Hotline: +18164443997 - Bandwidth SMSEnabled VoIP number

Fake site details: https://db.aa419.org/fakebanksview.php?key=123562

- liberty-plc.com - impersonating Liberty Bank

Fake site details: https://db.aa419.org/fakebanksview.php?key=123648

liberty-plc.PNG (160.06 KiB) Viewed 5359 times

- lrbplc.com - impersonating Liberty Reserve Bank

Fake site details: https://db.aa419.org/fakebanksview.php?key=123561

lrbplc.PNG (150.59 KiB) Viewed 5359 times

- nationwide-co.com - impersonating Nationwide Building Society UK

Contact details:

Email
info@nation.wide-uk.com
Offices:

U.S.A Office:
1818 H Street, NW Washington, DC 20433 USA.

U.K Office:
75 King William Street London EC4N 7DT United Kingdom.

West Africa Office:
Plot No. 3297, Tiamiyu Savage Street, Victoria Island, Lagos 100272, Nigeria

East Africa Office:
Re-insurance Plaza, Taifa Road P.O Box 69562-00400 Nairobi, Kenya.

nationwide-co.PNG (216.63 KiB) Viewed 5359 times

- newyork-fed.org - newyorkfrb.com - impersonating Federal Reserve Bank of New York

- ng-keystone.com - impersonating Keystone Bank Ltd

Fake site details: https://db.aa419.org/fakebanksview.php?key=123668

ng-keystone.PNG (167.34 KiB) Viewed 5359 times

[firefly]

- ng-skye.com (email only domain) and ng-skyeplc.com - impersonating Skye Bank Nigeria.

Fake site details: https://db.aa419.org/fakebanksview.php?key=123643

ng-skyeplc.PNG (118.82 KiB) Viewed 5358 times

- ng-uba.com - impersonating United Bank for Africa

Contact details:
Email Address
customercare@ubaonline.org
Phone Number
+234 813 781 9942 / +2348137819942
Fax
+234813 781 9942

Fake site details: https://db.aa419.org/fakebanksview.php?key=123541

ng-uba.PNG (198.49 KiB) Viewed 5358 times

- ng-unionplc.com - impersonating Union Bank of Nigeria

Contact details:

UnionCare: +234-809-106-9645 / +2348091069645
Email: customerservice@ng-unionplc.com

HEAD OFFICE
Stallion Plaza 36, Marina
P.M.B 2027 Lagos, Nigeria

BENIN OFFICE
Union Bank of Benin Plc
plot 136 Akpankpa Road Cotonou,
Benin Republic
Tel: +229-9908-6591 / +22999086591

LONDON OFFICE
14–18 Copthall Avenue
London
EC2R 7BN.

Fake site details: https://db.aa419.org/fakebanksview.php?key=123540

ng-unionplc.PNG (173.17 KiB) Viewed 5358 times

- nw-ukgroup.com - impersonating Nationwide Building Society UK

Contact details:

Email
info@nation.wide-uk.com
Offices:

U.S.A Office:
1818 H Street, NW Washington, DC 20433 USA.

U.K Office:
75 King William Street London EC4N 7DT United Kingdom.

West Africa Office:
Plot No. 3297, Tiamiyu Savage Street, Victoria Island, Lagos 100272, Nigeria

East Africa Office:
Re-insurance Plaza, Taifa Road P.O Box 69562-00400 Nairobi, Kenya.

Fake site details: https://db.aa419.org/fakebanksview.php?key=123537

nw-ukgroup.PNG (217.72 KiB) Viewed 5358 times

- ny-fedreserve.com - impersonating Federal Reserve Bank of New York

Contact details:

Head Office
Federal Reserve Bank of New York
33 Liberty Street
New York, NY 10045
E-mail: info@ny-fed.com

Fake site details: https://db.aa419.org/fakebanksview.php?key=123641

ny-fedreserve.PNG (202.17 KiB) Viewed 5358 times

- scb-plc.com - impersonating Standard Chartered Bank

Contact details:

Address Standard Chartered Bank, 1 Basinghall Avenue, London, EC2V 500
Telephone Number +44 745 9223 143 / +447459223143
Fax Number 745 9228 143

Fake site details: https://db.aa419.org/fakebanksview.php?key=123640

scb-plc.PNG (177.05 KiB) Viewed 5358 times

- scbplcuk.com - impersonating the same Standard Chartered Bank

Contact details:

Address Standard Chartered Bank, 1 Basinghall Avenue, London, EC2V 500
Telephone Number +447956122812 +447399752161
Fax Number 7399752161

Fake site details: https://db.aa419.org/fakebanksview.php?key=123639

scb-plc.PNG (177.05 KiB) Viewed 5358 times

- sfsplc.com - impersonating Southford Finance & Security Plc

Contact details:

Email
info@sfsplc.com
U.K OFFICE
Southford Finance & Security Plc
Tel: +44 203 322 3767. / +442033223767

WEST AFRICAN OFFICE
Southford Finance & Security Plc
Tel: +234 902 149 7357. / +2349021497357

Fake site details: https://db.aa419.org/fakebanksview.php?key=123532

sfsplc.PNG (158.56 KiB) Viewed 5358 times

- sterling-ng.com - impersonating Sterling Bank Plc

Contact details:

Sterling Towers, 20 Marina Street,
P.M.B 12735, Lagos, Nigeria

Fake site details: https://db.aa419.org/fakebanksview.php?key=123638

- swissbank-ch.com - impersonating Swiss National Bank

[firefly]

- uba-direct.com, ubagrouplc.com, ubagroups-bn.com, unitedbankforafricas.com (email only domains) and ubafricaplc.com - impersonating United Bank for Africa

Contact details: Address:
Carrefour des trois Banques Avenue Pape Jean Paul II, Cotonou, Benin
Postal Address:
01 BP 2020 Cotonou Benin
Telephone:
+229 99 60 44 05 / +22999604405

Fake site details: https://db.aa419.org/fakebanksview.php?key=123469

- unionbankintl.com - impersonating Union Bank International

- uniontrust-group.com - impersonating Union Trust Bank

Fake site details: https://db.aa419.org/fakebanksview.php?key=123663

uniontrust-group.PNG (150.57 KiB) Viewed 5358 times

Email: customercare@uniontrust-group.com with full Header.
Also posted here:
https://scamsurvivors.com/forum/viewtop ... 61#p147361

- us-fcu.com - impersonating Federal Credit Union

Fake site details: https://db.aa419.org/fakebanksview.php?key=123456

us-fcu.PNG (150.22 KiB) Viewed 5358 times

- us-fedcu.com - impersonating US Federal Credit Union

Fake site details: https://db.aa419.org/fakebanksview.php?key=123635

us-fedcu.PNG (149.8 KiB) Viewed 5358 times

- us-fnb.com - impersonating First National Bank USA

Contact details:

536 Northern BlvdGreat
Neck, NY 11021
Tel: (315) 519-4705 / +13155194705 - TextPlus VoIP number
Director:
MR.WILLIAM CAMPBELL

Fake site details: https://db.aa419.org/fakebanksview.php?key=123454

us-fnb.PNG (146.58 KiB) Viewed 5358 times

- westernplc.com - impersonating Western Online National Bank

Phone number used for contact: 585-633-2296 / +15856332296

Fake site details: https://db.aa419.org/fakebanksview.php?key=123634

- worldbankuk.org - impersonating World Bank UK.

[firefly]

- bmwautolotto.com and bmwlotterypromo.com are no more active.

- thelottoposts.com - impersonating Texas Lottery Commission.

Fake site details: https://db.aa419.org/fakebanksview.php?key=123527

[firefly]

- alfanarlnvestment.org - impersonating Al Fanar Investment Holding Company; fake site details: https://db.aa419.org/fakebanksview.php?key=123661

- americanlabs.org - impersonating American Lab & Systems; fake site details: https://db.aa419.org/fakebanksview.php?key=123631

- eurazoe.com - impersonating Eurazeo Private equity company France; fake site details: https://db.aa419.org/fakebanksview.php?key=123601

- falakconsulting.org - impersonating Falak Consulting Bahrain; fake site details: https://db.aa419.org/fakebanksview.php?key=123657

- korral-kool.com - impersonating Korral Kool, Inc US; fake site details: https://db.aa419.org/fakebanksview.php?key=123649

- me-marsh.com - impersonating Marsh Middle East; fake site details: https://db.aa419.org/fakebanksview.php?key=123647

- miraaconsultancy.org - impersonating Mira Consultancy Bahrain; fake site details: https://db.aa419.org/fakebanksview.php?key=123646

- miraconsultancy.org - impersonating the same company; fake site details: https://db.aa419.org/fakebanksview.php?key=123671

- nnpccomdgroup.com - impersonating Nigerian National Petroleum Corporation; fake site details: https://db.aa419.org/fakebanksview.php?key=123666

[firefly]

The fake sites used in phishing by the Nigerian scam syndicate are active in various forms and under different names.

In some cases, the victims are receiving an email with the phishing link in it, supposedly sent from an entity having something to do with an amount of money the victim is expecting to receive. In other cases, the victims being in correspondence with the scammers are receiving infected files, telling they need to reconfirm their details for being able to see the content of the message - usually during the purchase of some products.

- therealfinsolusions.top - using a pdf file

- realfinsolusions.xyz - request for accessing your funds online

realfinsolusions.PNG (100.65 KiB) Viewed 5352 times

- realbixinvestmentsbuzz.top - while pretending to be Wells Fargo

- globalservltd.top - phishing link sent in the email while impersonating United Bank of Africa

from: Speed Trust Courier Service <"WW."@seagreen.ocn.ne.jp>
reply-to: Speed Trust Courier Service <speedtrustcourierservi@gmail.com>
date: 5 May 2017
subject: CALL OR TEXT NOW +1(+1-336-938-3640)
mailed-by: seagreen.ocn.ne.jp

Hello dear customer,

We are very sorry for our late response to you with your shipment tracking number (xxx) which was programmed with your email and Password by w*nk OF AMERICA (WOA) and all you need to do is to copy and paste to a window browser, once it open you put in your correct username with your correct password and tracking number to make sure you track your package Deposit by UBA GROUP and confirm it when is to arrive in your home address to make sure you be at home to sign up for the delivery immediately our agent get to your home, because it is not allow to sign by third party.

Copy and paste to a window browser once it opens for you to track your package ok.

http:// globalservltd.top/newspeedtrustcourierservicessearch/

Contact information to the UNITED BANK FOR AFRICA (UBA) GROUP that deposits the ATM CARD worth $8.3M to our service.
Email: ubagroupe@excite.com

Thanks for using our services,Speed Trust Courier Service Management.
Mr. Ronald Brown
Call or text: +1-336-938-3640

- deregulatedfxsolous.top

deregulatedfxsolous.PNG (87.49 KiB) Viewed 5352 times

- thriftfundcollector.top - while pretending to be The United Services Automobile Association (USAA); fake site details: https://db.aa419.org/fakebanksview.php?key=123476. The phishing happens when the victim is trying to update an account.

- uptowninvestments.top - while impersonating Uptown Investment Group; fake site details: https://db.aa419.org/fakebanksview.php?key=123457

uptowninvestments.PNG (106.21 KiB) Viewed 5352 times

- naccos.com - while pretending to be Francoasia International Company; fake site details:
https://db.aa419.org/fakebanksview.php?key=123645

Last, but not least: davis-stardard.com, impersonating Wells Fargo - fake site details: https://db.aa419.org/fakebanksview.php?key=116748

When it was reported and "killed", in 2016, the fake site was using Pony Trojan, a form of data stealing malware.

The scam syndicate has now a new domain named davis-starndard.com, more likely doing the same.