Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Lucky strike

Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.

Lucky strike

Unread postby firefly » Sun Jan 28, 2018 12:19 am

Posted on behalf of the victim.

The victim met the scammer on Facebook. He claimed to be the General John William Nicholson, living on 1000 Avenue J South Houston, 77587 Texas.

Contact details used:

Email address: lieut.genjohnwnicholson@gmail.com
Phone number used: (318) 392-2557

+13183922557 - Google VoIP number.

After few months of romantic conversation, "the general" asked for financial help, saying that he can not access his bank account while being in a war field. As a sign of faith, he gave the victim his login details for his bank account. She checked and that's what she saw on her screen:

account1.PNG


Not feeling confident about the entire matter, the victim decided to think before sending the money. Two days later, checking again "the general" bank account, she noticed on the page an email address with a different domain name as the one of the "bank". She copied that email address in Google and searched. She found another login page of a "bank" using the same email address, onlinebanking.aktf-online.com / Westfield Bank - no longer active. And she found a second login page of a 3rd bank - westfield-llc.com. From that last one, she moved ahead and landed on a 4th login page of another "bank" - aktf-tr.com. She decided to use the credentials given by "the general" on this last one. That's what she saw on her screen.

account2.PNG


In that moment she knew exactly what is going on. She decided to check "the general" pictures online and she found those pictures reported for being used in romance scams. One of the links she found was viewtopic.php?f=11&t=44850.

All the banks she found are fake. And there are more.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

rezyltd@gmail.com

Unread postby firefly » Sun Jan 28, 2018 12:41 am

Behind those fake sites used in scam is a person creating and registering the sites. The faker maker was reported first time back in 2016, with a fake site impersonating Exxon - see https://db.aa419.org/fakebanksview.php?key=116791. At that time claimed to be:

Registrant Name: Excel Servers
Registrant Street: 9609 Timber Hawk Circle, 21,
Registrant City: Highlands Ranch
Registrant State/Province: CO

Registrant Postal Code: 80126
Registrant Country: US
Registrant Phone: +1.14175989545
Registrant Email: rezyltd@gmail.com

For some of his recently created sites he claims to be:

Registrant Name: Excel Servers
Registrant Street: 2305 Southwest Freeway
Registrant City: Houston
Registrant State/Province: TX

Registrant Postal Code: 77001
Registrant Country: US
Registrant Phone: +1.18321256788
Registrant Email: rezyltd@gmail.com

and...

Registrant Name: Excel Servers
Registrant Organization: Rezy Nigeria Limited
Registrant Street: Shop 25 Main Market
Registrant City: Oleh
Registrant State/Province: Delta

Registrant Postal Code: 110001
Registrant Country: NG
Registrant Phone: +234.08165501112
Registrant Email: rezyltd@gmail.com

On skype he is active as bright.esibe / Bright Esibe.

The real identity:

Bright Orezimena Esibe Jnr
CEO at Rezy Nigeria Limited
Peer Educator at UNESCO POP/FLE
Song writer and Artiste at BRITeSTAR Entertainment
Former Administrative Secretary at Frao Oil Nigeria LTD
Studied Botany at Delta State University, Abraka
Studied International Diploma in Computer Studies at D+T MANAGEMENT KONSULT
Went to St Michael's College
Lives in Warri, Nigeria
In a relationship
From Warri, Nigeria

Some of his pictures (family and friends not included):

bright2.jpg

bright.jpg

bright1.jpg

bright3.jpg


Skype ID: Bright Esibe
bright.esibe
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

citizensdeposits.com

Unread postby firefly » Sun Jan 28, 2018 12:53 am

The fake site claims to be Citizens Deposits Bank. There is only a login page the victim need to type an username and a password for getting access to the bank account. After the valid details are typed and the bank account shows, the contact details mentioned on the site are:

customercare@citizensdeposits.com
Contact us (customercare@westfield-llc.com)
Westfield Bank LLC


From the fake site details - https://db.aa419.org/fakebanksview.php?key=129370:

Domain Name: CITIZENSDEPOSITS.COM
Updated Date: 2017-04-20
Creation Date: 2017-02-18
Registrar Registration Expiration Date: 2018-02-18
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Excel Servers
Registrant Organization:
Registrant Street: 2305 Southwest Freeway
Registrant City: Houston
Registrant State/Province: TX
Registrant Postal Code: 77001
Registrant Country: US
Registrant Phone: +1.18321256788
Registrant Email: rezyltd@gmail.com

This is what the fake site looks like:

login1.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

westfield-llc.com

Unread postby firefly » Sun Jan 28, 2018 1:08 am

Same story under another domain name - westfield-llc.com, pretending to be Westfield Bank LLC.

Contact details:

Contact us (customercare@westfield-llc.com)
Westfield Bank LLC 2005 - 2017
johnbaker@westfield-llc.com


From the fake site details - https://db.aa419.org/fakebanksview.php?key=129375:

Domain Name: WESTFIELD-LLC.COM
Updated Date: 2017-08-14
Creation Date: 2017-06-14
Registrar Registration Expiration Date: 2018-06-14
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Excel Servers
Registrant Organization:
Registrant Street: 2305 Southwest Freeway
Registrant City: Houston
Registrant State/Province: TX
Registrant Postal Code: 77001
Registrant Country: US
Registrant Phone: +1.18321256788
Registrant Email: rezyltd@gmail.com

This is what the fake site looks like:

login2.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

aktf-tr.com

Unread postby firefly » Sun Jan 28, 2018 1:13 am

And again - this time pretending to be AKTF Bank.

Contact details:

Contact us (customercare@aktf-tr.com)
AKTF Bank 2005 - 2017


From the fake site details - https://db.aa419.org/fakebanksview.php?key=129376:

Domain Name: AKTF-TR.COM
Updated Date: 2017-09-07
Creation Date: 2017-07-08
Registrar Registration Expiration Date: 2018-07-08
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant Name: Excel Servers
Registrant Organization:
Registrant Street: 2305 Southwest Freeway
Registrant City: Houston
Registrant State/Province: TX
Registrant Postal Code: 77001
Registrant Country: US
Registrant Phone: +1.18321256788
Registrant Email: rezyltd@gmail.com

This is what the fake site looks like:

login3.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

vkfbk.com

Unread postby firefly » Sun Jan 28, 2018 1:18 am

The fake site claims to be VakifBank.

From the fake site:

VakıfBank was first established with an initial capital of 50 million TL on the 11th of January 1954 and later startedoperating on the 13th of April 1954, for the purpose of best utilizing the foundations’ monies.


Contact details:



From the fake site details - https://db.aa419.org/fakebanksview.php?key=129374:

Domain Name: VKFBK.COM
Updated Date: 2017-12-30
Creation Date: 2017-10-30
Registrar Registration Expiration Date: 2018-10-30
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Excel Servers
Registrant Organization: Rezy Nigeria Limited
Registrant Street: Shop 25 Main Market
Registrant City: Oleh
Registrant State/Province: Delta
Registrant Postal Code: 110001
Registrant Country: NG
Registrant Phone: +234.08165501112
Registrant Email: rezyltd@gmail.com

This is what the fake site looks like:

vakif.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

firstpremieronline.co.uk

Unread postby firefly » Sun Jan 28, 2018 2:26 am

The fake site claims to be First Premier Bank. The content is stolen from a real company while impersonating another real company.

From the fake site:

Monex began its operations in 1993 as Monex Exchange Company when it was registered with MOIC and approved by Central Bank of Bahrain as a Money Changer.


Contact details:

UNITED STATES
Boxer Avenuem, Rameewz Usmani, New York
+343 5434 54345
usa@firstpremieronline.co.uk

GERMANY
ISac Avenuem, Risota Avenue, Buston, Germany.
+2154 21 0032
gm@firstpremieronline

UNITED KINGDOM
Romaina Ave., Local att 25, Block 35, UK
+44 43521 0032
uk@firstpremieronline.co.uk

MIDDLE EAST
King Fahad Cuaseway, Damama, Block 35, SA
+961 54 21 0032
sa@firstpremieronline.co.uk


+343543454345 / +2154210032 / +44435210032 / +96154210032

From the fake site details - https://db.aa419.org/fakebanksview.php?key=129371:

Domain name:
firstpremieronline.co.uk

Registrant:
ESIBE BRIGHT

Registrant's address:
Shop 25 Main Market Plaza
OLEH
DELTA
334101
Nigeria

Registrar:
GoDaddy.com, LLP. [Tag = GODADDY]


Relevant dates:
Registered on: 29-Dec-2016
Expiry date: 29-Dec-2018
Last updated: 15-Dec-2017

This is what the fake site looks like:

firstp.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

ktpb-tronline.com

Unread postby firefly » Sun Jan 28, 2018 2:41 am

The fake site claims to be Kuveyt Turk, while impersonating the real bank with the same name.

Kuveyt Turk Participation Bankasi was established in 1989 as a Private Financial Institution for the purpose of operating in accordance with the principles set as at then.




From the fake site details - https://db.aa419.org/fakebanksview.php?key=129372:

Domain Name: KTPB-TRONLINE.COM
Updated Date: 2018-01-06
Creation Date: 2018-01-06
Registrar Registration Expiration Date: 2019-01-06
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Excel Servers
Registrant Organization: Rezy Nigeria Limited
Registrant Street: Shop 25 Main Market
Registrant City: Oleh
Registrant State/Province: Delta
Registrant Postal Code: 110001
Registrant Country: NG
Registrant Phone: +234.08165501112
Registrant Email: rezyltd@gmail.com

This is what the fake site looks like:

kuvey.PNG
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

ktpb-tr.com

Unread postby firefly » Sun Jan 28, 2018 3:05 am

The domain name used for the email address on the above mentioned site is the contribution of another faker maker part of the group.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=129377:

Domain Name: KTPB-TR.COM
Updated Date: 2017-07-09
Creation Date: 2017-05-09
Registrar Registration Expiration Date: 2018-05-09
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant Name: randy william
Registrant Organization:
Registrant Street: No 5 Airport Road, Effurun
Registrant City: Warri
Registrant State/Province: Delta State
Registrant Postal Code: 330102
Registrant Country: NG
Registrant Phone: +234.07014301843
Registrant Email: randy247willy@gmail.com

Back in 2016, he got himself reported while creating a fake site named Godwin Chamber (see https://db.aa419.org/fakebanksview.php?key=117213).

Same year, while pretending to be Josi Marlon he was also reported while registering a fake site impersonating ING Direct (see https://db.aa419.org/fakebanksview.php?key=108840).

First online report associated with his details was made in 2015, while impersonating the same ING, pretending to be Harry Virks (see https://db.aa419.org/fakebanksview.php?key=107443).

The real one:

josephfb.JPG


Joseph Mark ( The Best or Nothing)
Studied Soil & Water Science at University of Benin (UNIBEN), Edo State.

mark.jpg
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

vakifonlines.com

Unread postby firefly » Sun Jan 28, 2018 3:23 am

There is also vakifonlines.com, impersonating the same VakifBank. The fake site is used only for the email address.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=129378:

Domain Name: VAKIFONLINES.COM
Updated Date: 2017-11-01
Creation Date: 2017-09-01
Registrar Registration Expiration Date: 2018-09-01
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Josi Marlon
Registrant Organization:
Registrant Street: Southwest freeway
Registrant City: Houston
Registrant State/Province: TX
Registrant Postal Code: 77001
Registrant Country: US
Registrant Phone: +1.2179311754
Registrant Email: josimarlon20@gmail.com
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71069
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Next

Return to Fake sites/Phishing sites.

Who is online

Users browsing this forum: No registered users and 17 guests