Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Playing between registrars

Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.

Playing between registrars

Unread postby firefly » Sat Oct 28, 2017 4:19 am

Everything started with a request asked by an almost victim:

Dear sir please I like to know about roy murphy martin hotel & suites.
its address is real or fake=Monteral Quebec,Canada-12017,boulevard pitfield, QCH4S 1R3,Canada.
phone no - +1(581)681-6780

I got offered letter from this company I want to check wheter it is true or fake
website -www. roymmhs.com/en

Thank you.

The fake site used in scam claims to be Roy Murphy Martin Hotels and Suite. The content of the site is stolen from a real hotel website.

Contact details on the fake site:

12107, Boulevard Pitfield,
QC H4S 1R3,Canada
Voice: +1 (581) 681-6780
E: info@roymmhs.com


+15816816780 - VoIP number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=124538:

Domain Name: roymmhs.com
Updated Date: 2017-06-18
Creation Date: 2017-04-25
Registrar Registration Expiration Date: 2018-04-25
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers

Registry Registrant ID:
Registrant Name: Michael Hardy
Registrant Organization:
Registrant Street: 1521 Islington Ave
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M8V 3B6
Registrant Country: CA
Registrant Phone: +1.6138136007
Registrant Email: boehm.j@yahoo.com

This is what the fake site looks like:

roymm.PNG


While researching the site used in the job scam, we realized that site is not alone. Behind, is a scam syndicate, playing between registrars with slightly similar domain names impersonating banks, companies supposedly offering jobs, so called lawyers dealing with fake inheritance scams and courier companies meant to send the nonexistent documents and money to victims willing to believe them.

Same site with a slightly different name but impersonating the same entity is registered with another registrar. Why? Because if one of the domains gets reported and suspended, the scam syndicate can easily use the other ones.

When a site is closed after being reported to the registrar for fraudulent activity, the same content of the site is back online again with a name missing a letter or having an additional dash, for example. The fake sites makers in this case were using the same contact details they had when their reported sites were suspended and no one noticed that they are active on the same registrars again. Last but not least, most of the contact details used to register the sites are fake...
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

barcbonline.com

Unread postby firefly » Sat Oct 28, 2017 4:32 am

The fake site claims to be Barclays Bank U.K Limited. The real one has over 325 years of history and expertise in banking. The fake one is active since MArch 2017.

Contact details on the fake site:

+44 703 196 2796 /
info@barcbonline.com


+447031962796 - universal phone number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127971:

Domain Name: barcbonline.com
Updated Date: 2017-10-27
Creation Date: 2017-03-10
Registrar Registration Expiration Date: 2018-03-10
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers
Status: clientTransferProhibited

Registry Registrant ID:
Registrant Name: Lantex Network
Registrant Organization:
Registrant Street: 2754 Horner Ave Toronto
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M8W 4Y4
Registrant Country: CA
Registrant Phone: +1.4169130619
Registrant Email: lantexnetwork@gmail.com

This is what the fake site looks like:

barcbonline.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

charlesicham.com

Unread postby firefly » Sat Oct 28, 2017 4:52 am

The fake site claims to be Charlie and Co British Property Lawyers and Solicitors. The content of the site is entirely stolen from a French site.

From the fake site:

As part of ECD Avocats & Solicitors, a dynamic team of Non-English speaking qualified British solicitors regulated by the British Law Society, we have acquired expert knowledge and experience in advising clients with all aspects of British property law and inheritance law.


Charlie & Co Solicitors' expertise encompasses all aspects of buying and selling property in U.K as well as dealing with British Wills and succession planning, and advising on the administration of British estates.
Specialist legal services to non-resident customers and the international community in U.K.
We are listed with the British, American and Australian Consultates in U.K.


Contact details:

Charlie Advocates & Solicitors
40 Imber Way Southampton SO19 1SF UK
Tel: +44 1864 340010
Email: legal@charlesicham.com


+441864340010
Number billable as geographic number
Country or destination United Kingdom
City or exchange location Abington

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127972:
Domain Name: CHARLESLCHAM.COM
Creation Date: 2015-04-05
Registrar Registration Expiration Date: 2018-04-05
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Roderick Murphy
Registrant Organization: Global Hub Systems
Registrant Street: 2578 Walkers Ridge Way Bensenville, IL 60106
Registrant City: Bensenville
Registrant State/Province: IL
Registrant Postal Code: 60106
Registrant Country: US
Registrant Phone: +1.6302591886
Registrant Email: technicalupgrade293@gmail.com

This is what the fake site looks like:

charleslcham.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

hsbion.com

Unread postby firefly » Sat Oct 28, 2017 5:09 am

The fake site claims to be HSBC Bank.

From the fake site:

With roots back to its establishment in UK in 1838, HSBC Bank has a proud history of innovation and support for Scottish industry and communities. The Bank has over 12.7 million customers internationally.


Contact details:

Internet Banking Helpdesk +44(179) 272-0416
Fax +44 (704) 194 7591
E-mail support@hsbion.com


+441792720416
Number billable as geographic number
Country or destination United Kingdom
City or exchange location Swansea
Original network provider* aql Wholesale Limited

+447041947591 - the phone number is already reported on our site in viewtopic.php?f=11&t=61448, while being used with another fake bank.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127973:

Domain Name: hsbion.com
Updated Date: 2017-10-24
Creation Date: 2017-08-26
Registrar Registration Expiration Date: 2018-08-26
Registrar: NameSilo, LLC

Reseller: Hostfrica Servers
Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Robert Taylor
Registrant Organization:
Registrant Street: 4733 Hiney Road
Registrant City: Las Vegas
Registrant State/Province: NV
Registrant Postal Code: 89119
Registrant Country: US
Registrant Phone: +1.7022656564
Registrant Email: taylor_r92@yahoo.com

This is what the fake site looks like:

hsbion.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

macbenoits.com

Unread postby firefly » Sat Oct 28, 2017 5:29 am

The fake site claims to be Mac Benoit Restaurants and is used in job scams. The site abuses the identity of a real company having nothing to do with the scam.

From the fake site:

Mac Benoit Kitchen and Bar offers Breakfast, Brunch, Lunch, Dinner, Drinks and Take Out in a casual-fine dining restaurant that offers a Modern American menu in a stylish intimate yet comfortable setting.
Locations at Quebec, ALBERTA & ONTARIO


Contact details:

1432 Rue Barré Montréal, QC H3C - info@macbenoits.com
65e Av Sw Calgary
Mount Royale Park Bently Dr Halifax
+1-514 500 7664


+15145007664 - VoIP number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127974:

Domain Name: macbenoits.com
Updated Date: 2017-10-21
Creation Date: 2017-07-23
Registrar Registration Expiration Date: 2018-07-23
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers

Registry Registrant ID:
Registrant Name: Lantex Network
Registrant Organization:
Registrant Street: 2754 Horner Ave Toronto
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M8W 4Y4
Registrant Country: CA
Registrant Phone: +1.4169130619
Registrant Email: lantexnetwork@gmail.com

This is what the fake site looks like:

macbenoits.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

nattiyassteels.com

Unread postby firefly » Sat Oct 28, 2017 5:42 am

The fake site claims to be NS Nattiya Suksomkorn Steel Production Company. The fake site is used in job scams. The content on the site is stolen from a real company site active online since 2009.

From the fake site:

NS NATTIYA SUKSOMKORN Steel Production Company is a private, multinational enterprise made up of more than six companies and affiliated businesses. Founded in 1985 by Mr Lee Wu Ved (CEO), the group has spent more than 32 Years building its reputation on bedrock of dedication, integrity, teamwork and continual improvement and growth.
The groups head office is based in Wattana District Bangkok Thailand, with operations and offices in Indonesia, Oman and India.


Contact details:

Office Address:
283/48(Unit 1005-3),Home Place Group Office Building,10th Floor, Soi Sukumvit, 55 SukhumvitRoad, Wattana District Bangkok,10110,Thailand.
Tel: +66-240-72-603
Email:info@nattiyassteels.com


+6624072603
Number billable as geographic number
Country or destination Thailand
City or exchange location Krung Thep Maha Nakhon (Bangkok)

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127975:

Domain Name: nattiyassteels.com
Updated Date: 2017-10-22
Creation Date: 2017-08-08
Registrar Registration Expiration Date: 2018-08-08
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers
Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Network Administrator
Registrant Organization:
Registrant Street: 4940 Cordova Street Vancouver
Registrant City: Vancouver
Registrant State/Province: BC
Registrant Postal Code: V6B 1E1
Registrant Country: CA
Registrant Phone: +1.6045057184
Registrant Email: phinxnetwork@gmail.com

This is what the fake site looks like:

nattiyassteels.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

wangcisteels.com

Unread postby firefly » Sat Oct 28, 2017 6:07 am

Same address, same phone number, another name using the same stolen content - Wangci Steel Production Company.

Wangci Steel Production Company is a private, multinational enterprise made up of more than six companies and affiliated businesses. Founded in 1985 by Mr Lee Wu Ved (CEO), the group has spent more than 32 Years building its reputation on bedrock of dedication, integrity, teamwork and continual improvement and growth.
The groups head office is based in Wattana District Bangkok – Thailand, with operations and offices in Indonesia, Oman and India.


Contact details:

Office Address: 283/48(Unit 1005-3),Home Place Group Office Building,10th Floor, Soi Sukumvit, 55 SukhumvitRoad, Wattana District Bangkok,10110,Thailand.
Tel: +66-240-72-603
Email:info@wangcisteels.com


From the fake site details - https://db.aa419.org/fakebanksview.php?key=127976:
Domain Name: wangcisteels.com
Updated Date: 2017-10-22
Creation Date: 2016-08-08
Registrar Registration Expiration Date: 2018-08-08
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers
Status: clientTransferProhibited

Registry Registrant ID:
Registrant Name: Network System
Registrant Street: 1317 Brown Street
Registrant City: Oakland
Registrant State/Province: CA
Registrant Postal Code: 94612
Registrant Country: US
Registrant Phone: +1.9259659782
Registrant Email: bjigroup86@yahoo.com

This is what the fake site looks like:

wangcisteels.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

olavdownstream.com

Unread postby firefly » Sat Oct 28, 2017 6:26 am

The fake site claims to be OLAV Downstream. The fake site is used in job scams.

From the fake site:

Olav downstream is solely owned private company established in 1992. Terek Olav leads a management team that all together has over 25 years of experience in the Oil marketing, refining, tank storage, logistics and trading business.


OLAV sources crude oil from all over the world to refine, store, trade and distribute high quality products in North West Europe.


While offering nonexistent jobs:

Apply now
We are always pleased to hear from talented individuals.
To register your interest in a career at OLAV, please send an e-mail to our HR department (info@olavdownstream.com) and attach a copy of your CV in English. Your application will be reviewed and you will be contacted should any relevant roles become available.


Contact details:

info@olavdownstream.com
Olav Downstream FrBE
Address: Chemin Départemental 12
13130 Berre-l'Étang
France.
+33 (6) 44 642112
Olav Downstream New York Liason:
+1 (347) 305-5834


+33644642112 - mobile number
+13473055834 - VoIP number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127977; the registrant uses the privacy protection given by the registrar to hide his identity and contact details:

Domain Name: olavdownstream.com
Updated Date: 2017-10-26
Creation Date: 2017-03-01
Registrar Registration Expiration Date: 2018-03-01
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers
Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Domain Administrator

This is what the fake site looks like:

olav.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

platmontravel.com

Unread postby firefly » Sat Oct 28, 2017 7:06 am

The fake site claims to be Platmon Travel.

Platmon Travels enterprises to provide business and leisure travelers with the best tour packages, hotel bookings in U.A.E., Malaysia, Singapore, Thailand, Hong Kong, Egypt, Turkey, United States, United Kingdom, Germany, Italy, Denmark, Switzerland, Cyprus, France, Spain, Portugal, Uzbekistan and Azerbaijan that are far superior then the market at affordable rates so travelers will have to compromise on neither affordability nor luxury.


Contact details:

Head Office: 18515 Interstate 635 Service Rd
Mesquite, TX 75150
+1 (409) 4491 337
info@platmontravel.com
Skype: Platmontravel


+14094491337 - VoIP number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127978 ; the registrant use the privacy protection given by the registrar to hide his details:

Domain Name: platmontravel.com
Updated Date: 2017-10-23
Creation Date: 2017-05-18
Registrar Registration Expiration Date: 2018-05-18
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers
Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Domain Administrator

This is what the fake site looks like:

platmontravel.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

securetrb.com

Unread postby firefly » Sat Oct 28, 2017 7:24 am

The fake site claims to be Secure Trust Bank UK.

From the fake site:

Secure Trust Bank is a wholly-owned subsidiary of the Secure Trust Bank of U.K (Secure Trust) that provides direct banking services to Secure Trust consumer clients with UK. banking needs, including Britons living, vacationing or working in the UK. and UK. Wealth Management clients, across all 50 states.
Our management team and operational support is primarily in Raleigh, N.C
.


Contact details:

+44 Secure Trust 0-7 (+44 (753) 712-9331), Fax: +44-(0)20 3070 0182
Email: info@securetrb.com


+447537129331
Number billable as mobile number
Country or destination United Kingdom
Original network provider* Stour Marine Limited

+442030700182
Number billable as geographic number
Country or destination United Kingdom
City or exchange location London
Original network provider* Vodafone Ltd (C&W)

We need to believe that the UK has 50 states... and also that Raleigh, N.C. in in the UK...

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127979:

Domain Name: SECURETRB.COM
Updated Date: 2017-09-03
Creation Date: 2017-07-04
Registrar Registration Expiration Date: 2018-07-04
Registrar: NetEarth One, Inc.

Registry Registrant ID: Not Available From Registry
Registrant Name: Charles Richer
Registrant Organization: Host Group.
Registrant Street: 3655 St Jean Baptiste St Perce, QC G0L 2L0 QC G0L 2L0
Registrant City: Montreal
Registrant State/Province: Quebec
Registrant Postal Code: G0L 2L0
Registrant Country: CA
Registrant Phone: +1.4187825152
Registrant Email: ba.stuart341@yahoo.com

+442030700182 - the same phone number was reported a year ago while being used with another fake site impersonating the same bank - strustonline.com.

This is what the fake site looks like:

securetrb.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71081
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Next

Return to Fake sites/Phishing sites.

Who is online

Users browsing this forum: No registered users and 48 guests