Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Fake sites used in Russian romance scams

Report any emails with fake links attempting to steal your ID, and any fake sites used by scammers.

ggmaile.com

Unread postby firefly » Mon Jun 05, 2017 3:13 pm

Split from viewtopic.php?f=11&t=36477&start=40

ggmaile.com - is an email only domain, impersonating Gmail

Fake site details - https://db.aa419.org/fakebanksview.php?key=124321:

IP: 185.26.122.57

Domain Name: GGMAILE.COM
Updated Date: 2017-05-31
Creation Date: 2017-03-31
Registrar Registration Expiration Date: 2018-03-31
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Sergey V Nikiforov
Registrant Street: ul.Myasnitskaya, 22, kv.38
Registrant City: Moskva
Registrant State/Province: russia
Registrant Postal Code: 101000
Registrant Country: RU
Registrant Phone: +7.4995302087
Registrant Email: nikifuuch@yandex.ru

The same registrant was impersonating not only gmail...

He had a qukmail.com, an email only domain, impersonating ukmail.com, no longer active.

Also maliyaho.com - email only domain, impersonating yahoo.com, no longer active.

Update - the fake site is on client hold now - the scammer will be unable to use it anymore for sending emails.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

padovka.com

Unread postby firefly » Mon Jun 05, 2017 5:06 pm

Split from viewtopic.php?f=11&t=58233

padovka.com is a fake site created only for the email address. The scammer is spoofing karyer-padovka.ru, the domain of a real company in Samara, Russia, where the fake character pretends to be working.

From the fake site details:

IP: 31.31.196.146

Domain name: PADOVKA.COM
Updated Date: 2017-03-24
Creation Date: 2017-03-24
Registrar Registration Expiration Date: 2018-03-24
Registrar: Registrar of domain names REG.RU LLC
Registrant Name: Protection of Private Person

The registrant is using the privacy protection given by the registrar to hide his identity.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

postservise.net

Unread postby firefly » Sat Jun 24, 2017 1:19 am

split from https://www.scamsurvivors.com/forum/vie ... 11&t=36477, where the fake domain is used only for the email address.

The scammer fake persona use this domain after the previously used one - ggmaile.com got suspended.

Fake site details: https://db.aa419.org/fakebanksview.php?key=124658

IP: 185.26.122.14

Domain Name: POSTSERVISE.NET
Updated Date: 2017-06-16
Creation Date: 2017-06-16
Registrar Registration Expiration Date: 2018-06-16
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Vitaliy V Ponomarev
Registrant Street: Vesennyaya, 15, kv. 19
Registrant City: Borisovka
Registrant State/Province: Russia
Registrant Postal Code: 309340
Registrant Country: RU
Registrant Phone: +7.9328965179
Registrant Fax: +7.9328965179
Registrant Email: ponomarevvitaliy296@yandex.com

Translated: even if the name, email address or location is not the same as the ones used for ggmaile.com, the registrant phone number is the same.

Note: the site got suspended.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

guardmail.com.ru

Unread postby firefly » Fri Jun 30, 2017 7:45 pm

split from viewtopic.php?f=11&t=36477&start=50,where the email address using this fake domain is reported.

Fake site details:

IP: 185.26.122.58

domain: GUARDMAIL.COM.RU
nserver: ns.hostland.ru
nserver: ns3.hostland.ru
state: REGISTERED, DELEGATED
person: Private person
e-mail: SavelevAleksey152@yandex.ru
registrar: RU-CENTER
created: 2016.10.14
paid-till: 2017.10.14
source: RU-CENTER
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

rusinet.in

Unread postby firefly » Sat Jul 01, 2017 12:10 am

split from viewtopic.php?f=11&t=59350, where the domain is reported for being used in scam only for the email:

Fake site details:

IP: 94.242.206.131

From the fake site details:

Domain Name:RUSINET.IN
Created On:28-Dec-2016
Last Updated On:26-Feb-2017
Expiration Date:28-Dec-2017
Sponsoring Registrar:Endurance Domains Technology Pvt. Ltd. (R173-AFIN)
Registrant ID:EDT_63255336
Registrant Name:Fedor Petrov
Registrant Street1:Almatinskaya
Registrant City:Moskva
Registrant State/Province:Marino
Registrant Postal Code:121000
Registrant Country:RU
Registrant Phone:+7.9193652248
Registrant Email:grizly.good@hotmail.com

There was also a ukra.net.in, using the same phone number of the registrant, no more active.

The same email address of the registrant was used back in 2015 for myhotml.com - impersonating hotmail, no more active. And ilrus.com - also dead now.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

dugmail.com

Unread postby firefly » Sat Jul 01, 2017 11:22 pm

Split from https://www.scamsurvivors.com/forum/vie ... 7&start=60 & viewtopic.php?t=48666, where the domain is reported used only for the email address.


Fake domain details - https://db.aa419.org/fakebanksview.php?key=124899:

IP: 185.26.122.4

Domain Name: DUGMAIL.COM
Updated Date: 2017-05-25
Creation Date: 2015-05-21
Registrar Registration Expiration Date: 2018-05-21
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registry Registrant ID: Not Available From Registry
Registrant Name: Fedor S Nikiforov
Registrant Organization:
Registrant Street: ul. Kiseleva, 40, kv 12
Registrant City: Saratov
Registrant State/Province: russia
Registrant Postal Code: 410012
Registrant Country: RU
Registrant Phone: +7.8452271418
Registrant Fax: +7.8452271418
Registrant Email: lopikas-salomon@rambler.ru

History of the domain:

Date Status Name Server
2017-05-25 Transferred to hostland.ru
2017-05-22 Transferred to foundationapi.com
2016-05-26 Transferred to hostland.ru
2016-05-21 Transferred to foundationapi.com
2015-06-09 Transferred to hostland.ru
2015-06-06 Transferred to suspended-domain.com
2015-05-21 New hostland.ru
2015-03-15 Deleted foundationapi.com
2015-02-01 Transferred to foundationapi.com
2013-02-22 Transferred to cassamine.com

Update: The fake site was suspended by the registrar.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

list-bk.com

Unread postby firefly » Sun Jul 02, 2017 1:04 am

split from https://www.scamsurvivors.com/forum/vie ... 11&t=59172, where the domain is reported for being used in a romance scam (email only).

From the fake site details - https://db.aa419.org/fakebanksview.php?key=124909:

IP: 185.26.122.14

Domain Name: LIST-BK.COM
Updated Date: 2017-06-16
Creation Date: 2017-06-16
Registrar Registration Expiration Date: 2018-06-16
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registry Registrant ID: Not Available From Registry
Registrant Name: Vladislav I Zorin
Registrant Organization:
Registrant Street: ul.Admirala Lazareva, 24, kv.45
Registrant City: Moskva
Registrant State/Province: Moskovskaya Oblasti
Registrant Postal Code: 113623
Registrant Country: RU
Registrant Phone: +7.9456171247
Registrant Fax: +7.9456171247
Registrant Email: vlad214578@yandex.com

Update: - the fake site is now suspended.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

ckxufm.com

Unread postby firefly » Thu Jul 06, 2017 5:50 pm

Split from viewtopic.php?f=11&t=59486, where the fake site is reported for being used in scam - email only domain.

Details of the fake site:

IP: 192.64.119.72

Domain name: ckxufm.com
Updated Date: 2017-05-05
Creation Date: 2017-05-05
Registrar Registration Expiration Date: 2018-05-05
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Domain Status: addPeriod
Registry Registrant ID:
Registrant Name: WhoisGuard Protected

The registrant is using the privacy protection given by the Registrar to hide his identity and location.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

jmxmail.com

Unread postby firefly » Sat Jul 08, 2017 2:12 am

Split from viewtopic.php?f=11&t=59172

The domain jmxmail.com is used only for the email, spoofing gmx.com.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125075:

IP: 185.26.122.57

Registrant Name: Anna n CHuvashina
Registrant Street: ul. Rozanova, 6str7, kv.56
Registrant City: Moskva
Registrant State/Province: russia
Registrant Postal Code: 123007
Registrant Country: RU
Registrant Phone: +7.4957929911
Registrant Fax: +7.4957929911
Registrant Email: ko.elenako@yandex.com
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

link-tm.com

Unread postby firefly » Sat Jul 08, 2017 2:15 am

The same person registering the previously reported fake site is also the creator of link-tm.com, another domain used only for the email address in Russian romance scams.

From the fake site details - https://db.aa419.org/fakebanksview.php?key=125076:

IP: 185.26.122.57

Registrant Name: Anna n CHuvashina
Registrant Street: ul. Rozanova, 6str7, kv.56
Registrant City: Moskva
Registrant State/Province: russia
Registrant Postal Code: 123007
Registrant Country: RU
Registrant Phone: +7.4957929911
Registrant Fax: +7.4957929911
Registrant Email: ko.elenako@yandex.com
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 48203
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

PreviousNext

Return to Fake sites/Phishing sites.

Who is online

Users browsing this forum: No registered users and 6 guests