Playing between registrars

by **firefly** » Sat Oct 28, 2017 9:39 am

The fake site claims to be United Bank.

From the fake site:

Founded in 1904, United Bank has a rich history of serving the communities of Southwest Alabama and Northwest Florida as only a community bank can.

Contact details:

Tel: (205) 340-8959
e-mail: info@united-bon.com

+12053408959 - mobile number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127990:

Domain Name: UNITED-BON.COM
Updated Date: 2017-10-24
Creation Date: 2017-08-24
Registrar Registration Expiration Date: 2018-08-24
Registrar: NetEarth One, Inc.

Registry Registrant ID: Not Available From Registry
Registrant Name: Charles Richer
Registrant Organization: Host Group.
Registrant Street: 3655 St Jean Baptiste St Perce 0
Registrant City: Montreal
Registrant State/Province: Quebec
Registrant Postal Code: G0L 2L0
Registrant Country: CA
Registrant Phone: +1.4187825152
Registrant Email: ba.stuart341@yahoo.com

This is what the fake site looks like:

by **firefly** » Sat Oct 28, 2017 9:56 am

Another fake site impersonating the same United Bank.

Founded in 1904, United Bank has a rich history of serving the communities of Southwest Alabama and Northwest Florida as only a community bank can.

Contact details:

Tel: (205) 392-2952
e-mail: info@unitedbon.com

+12053922952 - VoIP number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127991:

Domain Name: unitedbon.com
Updated Date: 2017-10-24
Creation Date: 2017-03-08
Registrar Registration Expiration Date: 2018-03-08
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers

Registry Registrant ID:
Registrant Name: Lantex Network
Registrant Organization:
Registrant Street: 2754 Horner Ave Toronto
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M8W 4Y4
Registrant Country: CA
Registrant Phone: +1.4169130619
Registrant Email: lantexnetwork@gmail.com

This is what the fake site looks like:

by **firefly** » Sat Oct 28, 2017 10:13 am

The fake site claims to be Virginia National Bank.

From the fake site:

VIRGINIA NATIONAL BANK OPENED IN CHARLOTTESVILLE IN JULY 1998 WITH MORE THAN 900 LOCAL SHAREHOLDERS.

Contact details:

+1-717-745-1019
info@vnbionline.com

+17177451019 - VoIP number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127992:

Domain Name: vnbionline.com
Updated Date: 2017-10-24
Creation Date: 2017-08-16
Registrar Registration Expiration Date: 2018-08-16
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers
Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Robert Taylor
Registrant Street: 4733 Hiney Road
Registrant City: Las Vegas
Registrant State/Province: NV
Registrant Postal Code: 89119
Registrant Country: US
Registrant Phone: +1.7022656564
Registrant Email: taylor_r92@yahoo.com

This is what the fake site looks like:

by **firefly** » Sat Oct 28, 2017 10:52 am

The fake site claims to be ABN AMRO Bank N.V.

Contact details on the fake site:

1062 PP Amsterdam
The Netherlands
0900-0020 (local charges)
+31 (9700) 5032-682 (from outside the Netherlands)
Email: info@amrbn.com

+319000020 / +31975032682 - invalid phone numbers

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127993:

Domain Name: AMRBN.COM
Updated Date: 2017-09-28
Creation Date: 2017-09-16
Registrar Registration Expiration Date: 2018-09-16
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin
Registrant Organization: Privacy Protect, LLC (PrivacyProtect.org)

This is what the fake site looks like:

by **firefly** » Sat Oct 28, 2017 11:18 am

Victim complaint on an Indian consumer site:

Hai everyone this complaint is about analyst hr services, valasaravakkam, chennai.
They told me about a canadian seafood company, auqa daylight seafoods and farm corp. And offer me a job there as a supervisor if i pay a certain amount of money. Then i checked about the seafood company, there website www. aquadaylight.com seems ok to normal people but if you have a general knowledge about companies and websites you can find few problems there. Then i search the company address in google map there was a marking as aqua daylight but it is in the trees there is no building.
Then i ask few people in montreal they said there is no company in the given address.
So i mail the company and said "i got an offer letter from you can i go forward" with out asking my name, consultant or any id number they ask me to go forward with the visa process.
The mail was poorly written there was nothing professional about it they don't even add regards at the end.
Then i contacted few canadian government authorities they are also unclear about the aqua daylight.
So i call analyst hr again and they said they have send many people to aqua daylight this is not the first time.

I am 95%sure that the company aqua daylight seafoods and farm corp does not exist in canada.
It means analyst hr services is cheating people telling about a company that doesn't exist.

The "company" has even a topic on https://www.canadavisa.com/canada-immig ... ke.511623/

The fake site used in scam claims to be Aqua Daylight Seafood & Farm Corp.

From the fake site:

Established in 1993, Aqua Daylight Seafood & Farm Corp., is a leading provider of fresh and frozen seafood in Montreal, Quebec.

Fake job offers on the site:

Fish Packer (Seafood)
Location: Canada

Seafood Sales Executive
Location: Canada
Required Skills: Excellent communication skills, business acumen and driving license is mandatory.

Logistic Supervisor
Description: Talented and experienced individual with Logistic experience in Food industry with hands on experience in Route planning, Fleet Management, vehicle and equipment maintenance. Should have Leadership & Supervisory skills
Location: Canada
Required Skills: Computer Literate, Oracle/SAP or any other ERP system experience.

Should you be interested in working with us, kindly upload your resume following the instructions given below. Your resume will be stored in our database and we will contact you as and when an available opportunity, that best suits your profile and objectives,is available.
Alternatively, email us at the following address: hr@aquadaylight.com

Contact details:

International Sales and Marketing
Operations
12530 Rue Crevier Montréal, QC H4K 1R3 Canada
Telephone: +1-581-781-9970
Fax: 1-581-800-6541
Email: info@aquadaylight.com

+15817819970 - VoIP number
+15818006541 - landline

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127994:

Domain Name: aquadaylight.com
Updated Date: 2017-10-23
Creation Date: 2016-08-08
Registrar Registration Expiration Date: 2018-08-08
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers
Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Network System
Registrant Street: 1317 Brown Street
Registrant City: Oakland
Registrant State/Province: CA
Registrant Postal Code: 94612
Registrant Country: US
Registrant Phone: +1.9259659782
Registrant Email: bjigroup86@yahoo.com

This is what the fake site looks like:

by **firefly** » Sat Oct 28, 2017 11:37 am

The fake site claims to be Christos Property Management Ltd

From the fake site:

We are a different kind of property management company
The company was formed by a number of experienced professionals who had become disillusioned with the poor service being offered to residents from the larger companies in the industry.

Contact details:

Address: 2346 7th St SW, Winter Haven, Florida 33880
Tel: +1-(850)-290-3455
Email:info@christospromgt.com

+18502903455 - VoIP number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=127995:

Domain Name: christospromgt.com
Updated Date: 2017-10-27
Creation Date: 2017-02-09
Registrar Registration Expiration Date: 2018-02-09
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers

Registry Registrant ID:
Registrant Name: Lantex Network
Registrant Organization:
Registrant Street: 2754 Horner Ave Toronto
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M8W 4Y4
Registrant Country: CA
Registrant Phone: +1.4169130619
Registrant Email: lantexnetwork@gmail.com

This is what the fake site looks like:

by **firefly** » Sat Oct 28, 2017 8:35 pm

The fake site claims to be Clydesdale Bank.

With roots back to its establishment in Glasgow in 1838, Clydesdale Bank has a proud history of innovation and support for Scottish industry and communities. The Bank has over 12.7 million customers internationally.

Contact details:

Internet Banking Helpdesk + (44) 203 318 2134
Fax +44-703 194 7591
E-mail enquiries@clydbon.com

+442033182134
Number billable as geographic number
Country or destination United Kingdom
City or exchange location London
Original network provider* Voxbone SA

+447031947591 - universal phone number

From the fake site details - https://db.aa419.org/fakebanksview.php?key=128004:

Domain Name: CLYDBON.COM
Registry Domain ID: 2083399102_DOMAIN_COM-VRSN
Updated Date: 2017-02-19
Creation Date: 2016-12-20
Registrar Registration Expiration Date: 2017-12-20
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Lantex Network
Registrant Organization: Lantex Network Systems
Registrant Street: 2754 Horner Ave Toronto
Registrant City: Toronto
Registrant State/Province: Ontario
Registrant Postal Code: M8W 4Y4
Registrant Country: CA
Registrant Phone: +1.4169130619
Registrant Email: lantexnetwork@gmail.com

This is what the fake site looks like:

by **firefly** » Sat Oct 28, 2017 9:08 pm

The fake site claims to be Crédit Foncier.

The real Credit Foncier is a national mortgage bank of France. According to the fake one:

Crédit Foncier plc is registered in Spain with number 5575298 and is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority.
Crédit Foncier plc 2016, ABN 37 034 957 734 AFSL 774563.

Contact details:

Corporate & Institutional Banking - info@creditfon.com
Human Resources - humanresources@creditfon.com
Treasury & Capital Markets - GB-Treasury@creditfon.com

SWIFT: SpanishGB2L
Sortcode: 60 83 09

Spain
Head Office
Madrid
Paseo de la Castellana 31,
Planta baja
28046 Madrid
Tel +34 967 800 309
Fax +34 91 30 86 308

+34967800309
Number billable as geographic number
Country or destination Spain
City or exchange location Albacete

+34913086308
Number billable as geographic number
Country or destination Spain
City or exchange location Madrid
Original network provider* Telefónica De España, S.a.u.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=128006; the registrar uses the privacy protection given by the registrar to hide his real identity and location:

Domain Name: CREDITFON.COM
Updated Date: 2017-09-29
Creation Date: 2017-09-21
Registrar Registration Expiration Date: 2018-09-21
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin

This is what the fake site looks like:

by **firefly** » Sat Oct 28, 2017 9:39 pm

The fake site claims to be Global Link Courier. Similar to some previously reported cases here, the scammers stole the site from a genuine company, changing only the name and some few minor other details.

From the fake site:

Providing courier and delivery services to the New York area for over 30 years
A proud American Company, Global Link Delivery Messenger Service was conceived in 1980 by our founder & President, Mr. Dave Boer. Over the years, Dave has started and operated many other delivery companies including Bluestone International Courier. In 2005 Dave re-purchased the New York branch and returned back to the initial branding roots ofGlobal Link.

Contact details:

USA Office
Global Link Delivery.
# 30 East End Ave New York,
NY 10028, USA,
Email: shipment@globallinkdel.com
Place an Order: +1 (719) 297-1276
Europe Office
Global Link Delivery.
# Industriezone Bosstraat N71 3930
Hamont-Achel
Belgium
Email: support@globallinkdel.com
Place an Order: +32-460-217-082

+17192971276 - VoIP number
+32460217082 - mobile number

The so called US location belongs to a private person having no connected activities with the type of activity the fake company pretends to have.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=128010; the registrant uses the privacy protection given by the registrar to hide his identity and location:

Domain Name: GLOBALLINKDEL.COM
Updated Date: 2017-09-26
Creation Date: 2017-09-25
Registrar Registration Expiration Date: 2018-09-25
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin

This is what the fake site looks like:

by **firefly** » Sat Oct 28, 2017 10:38 pm

The fake site claims to be HSBC Bank.

From the fake site:

With roots back to its establishment in UK in 1838, HSBC Bank has a proud history of innovation and support for Scottish industry and communities. The Bank has over 12.7 million customers internationally.

Contact details:

Internet Banking Helpdesk +44 (122) 558 - 1333
Fax +44 (704) 194 7591
E-mail info@hsbionline.com

+441225581333
Number billable as geographic number
Country or destination United Kingdom
City or exchange location Bath
Original network provider* aql Wholesale Limited

+447041947591 - universal phone number, already reported with fake sites impersonating the same bank: hs-beonline.com, hsbeonline.com and hsbion.com.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=128014:

Domain Name: hsbionline.com
Updated Date: 2017-10-26
Creation Date: 2016-12-07
Registrar Registration Expiration Date: 2017-12-07
Registrar: NameSilo, LLC
Reseller: Hostfrica Servers

Registry Registrant ID:
Registrant Name: Lantex Network
Registrant Organization:
Registrant Street: 2754 Horner Ave Toronto
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M8W 4Y4
Registrant Country: CA
Registrant Phone: +1.4169130619
Registrant Email: lantexnetwork@gmail.com

This is what the fake site looks like:

Who is online