Forum Übersicht - 2.8 Fake Webseiten » 17 Fake-Websites von "Frank Nero LLC"

Von 2014 bis 2019 wurden insgesamt 17 Fake-Websites auf die Firma "Frank Nero LLC" registriert.

https://www.whoxy.com/company/1547570
 

Dabei wurden folgende Registrierungsdaten verwendet:

Zitat

---

private2jeffscott@gmail.com

1
2
3
4
 

Num	Domain Name	Registrar	Created	Updated	Expiry
1	federalministryofinance.org	PDR Ltd. d/b/a PublicDomainRegistry.com	2 Feb 2016	2 Feb 2016	2 Feb 2017
2	capitaloneofshore.com	PDR Ltd. d/b/a PublicDomainRegistry.com	9 Dec 2015	9 Dec 2015	9 Dec 2016
3	ab-sa.com	PDR Ltd. d/b/a PublicDomainRegistry.com	18 Nov 2015	18 Nov 2015	18 Nov 2016
 

---

Zitat

---

darlingtonanyi@gmail.com

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
 

Num	Domain Name	Registrar	Created	Updated	Expiry
1	fbius.us	PDR Ltd. d/b/a PublicDomainRegistry.com	25 Feb 2019	2 Mar 2019	25 Feb 2020
2	uba-staff.org	PDR Ltd. d/b/a PublicDomainRegistry.com	1 Jun 2017	1 Aug 2017	1 Jun 2018
3	b-d-b-c.org	PDR Ltd. d/b/a PublicDomainRegistry.com	14 Sep 2017	14 Sep 2017	14 Sep 2018
4	absa-bank.com	PDR Ltd. d/b/a PublicDomainRegistry.com	28 Jun 2015	28 Jun 2015	28 Jun 2016
5	irs-dc.com	PDR Ltd. d/b/a PublicDomainRegistry.com	7 Sep 2015	8 Sep 2015	7 Sep 2016
6	fatfgaf.org	PDR Ltd. d/b/a PublicDomainRegistry.com	5 Sep 2015	5 Sep 2015	5 Sep 2016
7	aglowfinanciers.org	PDR Ltd. d/b/a PublicDomainRegistry.com	21 Jan 2015	31 Aug 2015	21 Jan 2016
8	hst-bering.com	PDR Ltd. d/b/a PublicDomainRegistry.com	23 Aug 2014	31 Aug 2015	23 Aug 2016
9	intercontinentaltrustinvestmentbank.org	PDR Ltd. d/b/a PublicDomainRegistry.com	6 Feb 2015	31 Aug 2015	6 Feb 2016
10	regionbank-ga.com	PDR Ltd. d/b/a PublicDomainRegistry.com	18 Mar 2015	31 Aug 2015	18 Mar 2016
11	ukforexcapital.com	PDR Ltd. d/b/a PublicDomainRegistry.com	1 Feb 2015	31 Aug 2015	1 Feb 2016
12	ecobank-nigeria.org	PDR Ltd. d/b/a PublicDomainRegistry.com	10 Mar 2015	10 Mar 2015	10 Mar 2016
13	cenbanknigeria.org	PDR Ltd. d/b/a PublicDomainRegistry.com	15 Jan 2015	15 Jan 2015	15 Jan 2016
14	department-homelandsecurity.us	PDR Ltd. d/b/a PublicDomainRegistry.com	29 Dec 2014	29 Dec 2014	28 Dec 2015
 

---

Bereits bekannt als betrügerische website:

1 fbius.us db.aa419.org/fakebanksview.php?key=137720

4 absa-bank.com db.aa419.org/fakebanksview.php?key=102243

12 ecobank-nigeria.org db.aa419.org/fakebanksview.php?key=102336

13 cenbanknigeria.org db.aa419.org/fakebanksview.php?key=123417

14 department-homelandsecurity.us db.aa419.org/fakebanksview.php?key=102335

Zitat

---

Who owned fbius.us in the past? (2 records)

28 FEB 2019
Owner: Darlington Anyi (14 domains)
Company: Frank Nero LLC (17 domains)
Geolocation: Lagos, Sachsen-Anhalt, Germany
Email: darlingtonanyi@gmail.com (14 domains)
Nameservers: monovm.earth.orderbox-dns.com, monovm.mars.orderbox-dns.com, monovm.mercury.orderbox-dns.com, monovm.venus.orderbox-dns.com
Status: addPeriod, clientTransferProhibited

23 MAY 2019
Owner: Darlington Anyi (14 domains)
Company: Frank Nero LLC (17 domains)
Geolocation: Lagos, Sachsen-Anhalt, Germany
Email: darlingtonanyi@gmail.com (14 domains)
Nameservers: monovm.earth.orderbox-dns.com, monovm.mars.orderbox-dns.com, monovm.mercury.orderbox-dns.com, monovm.venus.orderbox-dns.com
Status: clientTransferProhibited UPDATED

---

Beispiel-eMail:

Das "FBI Office" meldet sich beim potentiellen Opfer um 10,5 Mio USD auszuschütten. Vorher sollen aber 950 USD für ein "Clearance Document" bezahlt werden.
Die Scammer bedienen sich an der Identität des echten FBI-Direktors Christopher Asher Wray de.wikipedia.org/wiki/Christopher_A._Wray

Zitat

---

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
 

Delivered-To: xxx
Received: by 2002:a4a:91c6:0:0:0:0:0 with SMTP id e6csp4461909ooh;
        Sat, 25 May 2019 02:02:02 -0700 (PDT)
X-Google-Smtp-Source: APXvYqxUj6Di2cu8EO2zUiwCmveV5Q99DnCk7Ue/WhiW+5qLrtU0nI9hUgDxBUKPsiL0Z6kAEvVf
X-Received: by 2002:a05:6830:2145:: with SMTP id r5mr11011537otd.226.1558774921914;
        Sat, 25 May 2019 02:02:01 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1558774921; cv=none;
        d=google.com; s=arc-20160816;
        b=aOcFBdeNvGXMhX8/duhz7ArJs6PaTPBEQF32ib2R4zbT/4+8v1ime886hYWwguXeOD
         +8k7uoN7j1H+myD3p82KEAR02TntBxk0iiHEXuYIk+lMo53aEOE8rHDHgkFM8k1qJyGF
         U4fsiVtT2O/EHztBn9hcjGtkYTNTdM4csgM2rEDz9aQ0HQCXMLPNYqh3UJWm7BaB0GTd
         Tjd6A0Wp5gQuHHHNPleFDID7+WBKHEGfZIvFsmT4XCswshyeBCOnOUKma5F/iXBsmJAI
         wkm12P11kp6E5hRBCh9QSXL1nr1M+2v2XlXrzpdF1ByU8acBr+P3/P+kXCqFbGQw7Am4
         iU1A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=importance:mime-version:subject:message-id:to:reply-to:from:date
         :dkim-signature;
        bh=yk0Ewd3cOoMWmzBbVbHn2WxIJTgN0FuvT6H2nA+Hzgw=;
        b=A6etdsu4YQlFIOTHRfztTioNFpciuVyHvsTX2W6XXOA5zipijMQL9H7qYrWvrIRPZ1
         8pAqcJiEjy7fIhxOQ3MNN0VoP62l1aFEG4smFmO01G+bkLTyPfNw7g/C+ZSgvd07m3mR
         aHgbT47ubD+WlT6aJ/GpfZInSlhJgIZeujAwsy+Hz3bZKfjrT5DfIDDWty/OdPdtpjvC
         PwlnI7S6SvxADQNER9XQ7xaU7rK5xoe0CKfjhFvG7JHmU0JruL7+uHeww4MXrQwiKLqu
         SF/aNPUQ90x7/8A7Ti1ipAnOaaso9z9dX2jLCILeJOCI9wN06Y6LWnLuPibLWngkeFqj
         KnPw==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@fbius.us header.s=20190225 header.b=dUcSYXgs;
       spf=pass (google.com: domain of info@fbius.us designates 162.210.70.54 as permitted sender) smtp.mailfrom=info@fbius.us
Return-Path: <info@fbius.us>
Received: from us2-ob2-2.mailhostbox.com (us2-ob2-2.mailhostbox.com. [162.210.70.54])
        by mx.google.com with ESMTPS id p17si2727843oto.109.2019.05.25.02.02.01
        for <xxx>
        (version=TLS1 cipher=AES128-SHA bits=128/128);
        Sat, 25 May 2019 02:02:01 -0700 (PDT)
Received-SPF: pass (google.com: domain of info@fbius.us designates 162.210.70.54 as permitted sender) client-ip=162.210.70.54;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@fbius.us header.s=20190225 header.b=dUcSYXgs;
       spf=pass (google.com: domain of info@fbius.us designates 162.210.70.54 as permitted sender) smtp.mailfrom=info@fbius.us
Received: from 172.16.214.65 (unknown [172.16.214.65])
	(using TLSv1 with cipher AES256-SHA (256/256 bits))
	(No client certificate requested)
	(Authenticated sender: info@fbius.us)
	by us2.outbound.mailhostbox.com (Postfix) with ESMTPSA id F0CE7781B04
	for <xxx>; Sat, 25 May 2019 09:02:00 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fbius.us;
	s=20190225; t=1558774921;
	bh=yk0Ewd3cOoMWmzBbVbHn2WxIJTgN0FuvT6H2nA+Hzgw=;
	h=Date:From:Reply-To:To:Subject;
	b=dUcSYXgsaIykRtLcIyTDWYvprHHWqYFtxm69/Tev0Buw+gJU/iuADRc0BAIbT7yQP
	 f+DicCZJTFsHCAJyY1YsYkQj8NNw2ZkNEiiC+IS60HEX4cUfjlEwZ97fNvscckGgKo
	 TT9u5yEvH9ogt6omkh7ZRaw7WB6viSR1Qy6EoU1s=
Date: Sat, 25 May 2019 14:32:00 +0530 (IST)
From: "F.B.I OFFICE" <info@fbius.us>
Reply-To: "F.B.I OFFICE" <info@fbius.us>
To: xxx
Message-ID: <1887120802.41487.1558774920901@webmail.fbius.us>
Subject: RESPONSE
MIME-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_41485_1609758416.1558774920891"
X-Priority: 3
Importance: Medium
X-Mailer: Open-Xchange Mailer v7.8.3-Rev22
X-Originating-Client: open-xchange-appsuite
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.2 cv=epKv9shX c=1 sm=1 tr=0
	a=nf9kGWJ/Yk0yo5ZsUxXxOw==:117 a=MKtGQD3n3ToA:10 a=1oJP67jkp3AA:10
	a=tBECafcS_8cA:10 a=ZZnuYtJkoWoA:10 a=iHtH0PdAaoWACH3-BSgA:9
	a=0bXxn9q0MV6snEgNplNhOjQmxlI=:19 a=0WXe6SRiMNlFkkey:21
	a=BI_d2ENJBAdZVLeR:21 a=QEXdDO2ut3YA:10 a=HlbRjTc7z_4A:10
	a=qzvpmk0StYVGSBar2hMA:9 a=IRmncTrPa-yIKN4w:21 a=krr3Ae0EHcMhDu3u:21
	a=jyMYns0syVWhmG1Z:21 a=_W_S_7VecoQA:10 a=cXMhboawFu4cD8RPOr8A:9
	a=a32_rIl7bOK5s01c:18 a=KQqxNPgzF0kA:10 a=VEiTNn8F7TgA:10
	a=Wgka1Am38Z8lA2fPtFwA:9 a=Q1VWTrCv8OiDVSDZ:18 a=RZ4utfrMEcGvO8IUlDWh:22
 

Date: Sat, 25 May 2019 14:32:00 +0530 (IST)
From: "F.B.I OFFICE" info@fbius.us
Reply-To: "F.B.I OFFICE" info@fbius.us
To: xxx
ANTI-TERRORIST AND MONETARY CRIMES DIVISION
FBI HEADQUARTERS IN WASHINGTON, D.C.
FEDERAL BUREAU OF INVESTIGATION
J. EDGAR HOOVER BUILDING
935 PENNSYLVANIA AVENUE, NW WASHINGTON, D.C. 20535-0001


Attn: xxx xxx.

FBI and IRS need FIRC document to allow this $10.5Million Dollars to be released into your account.

You do not have FUND IDENTIFICATION RECORD CERTIFICATE (F.I.R.C) that's the reason why the transfer OF $10.5M is being held at bank of America.
FBI WILL GO TO ANY LENGTH IN HELPING YOU RECEIVING THIS FUND AS SOON AS YOU SECURE DOCUMENT TO PROOF THAT THE FUND IS GENUINE.

YOUR TRANSACTION WAS ROUTED THROUGH NIGERIA EARLIER, YOU SHOULD NOT SEND YOUR MONEY TO ANY OTHER PERSON EVEN HERE IN USA IF YOU REALLY WANT YOUR MONEY TO BE RELEASE TO YOU WITHIN 48HRS, YOU'RE ONLY AUTHORIZED TO SEND YOUR FEE OF $950 TO MR JOHNSON'S IN NIGERIA BECAUSE HE WAS APPROVED BY PRESIDENT TRUMP OF USA AND PRESIDENT BUHARI OF NIGERIA THAT HE SHOULD HANDLE ALL THE PROCEEDING PAYMENT AND ISSUE THE LEGAL CLEARANCE DOCUMENT TO YOU.

YOUR FUND WILL BE RELEASE TO YOU BY MONDAY IF YOU CAN CONTACT HIM TODAY TO GET THE CLEARANCE DOCUMENT WITH THE SUM OF $950.


You have to produce legal proof of the below frozen wired transaction number AZQV9007 owned by you.
We have done our verification on your payment release, the only document required is FUND IDENTIFICATION RECORD CERTIFICATE (F.I.R.C) Which should be issue to you from Nigeria Financial Crimes Enforcement Network to obtain the above required document, find below their contact information:


Contact Name; Mr Adebuti Johnson
E mail : fctadejohnson@gmail.com mailto: fctadejohnson@gmail.com
TELL: +234-80-566-2610 (+234805662610)
Office Address: PLOT 74B WEDRAL RAOD OWERRI IMO STATE NIGERIA.


Furthermore, be advice that according to the United State Law together with the FBI rules and regulations, you are to obtain the document from the above office' Also Note that you are to take care of the Document to be issued to you right away, it will cost you the sum of $950.00 Dollars only for the issuing of the document right away by the above office and your $10.5 million will be release to you. This is the only cost to secure the legal clearance document to claim your fund because they are going to issue you the Authentic and Original copy of the document for the release of your fund.
You are here by advised to Contact them through the email address above to inquire from them on how you are going to send the fee for release of (F.I.R.C) DOCUMENT. Note you are to do this immediately since We have already informed Mr. ADEBUTI JOHNSON'S office about the present situation.

Mr. Gareth Reese
For: Christopher A. Wray
FBI Director

Privacy: the information in this email contains confidential information and is intended only for user of the addressee(s). It may not be disclosed to any person without authorization of this office . you are not to disclose, copy, of this message to anybody for your own good.

---