Potential scam site but could be ITP

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 19 Jul 2011 Posts: 10

I emailed a loan scammer and during our back and forth, he sent me this site

http://fundnincln.com/index.pyc

Do you guys think this could be an ITP? Is there a way to check if this is a legit company in India?

Master Baiter Joined: 07 Sep 2012 Posts: 100

If in doubt, drop it. Lots of scammers to bait out there.

Posted: Sat Sep 21, 2013 2:06 am

Given that the registration is in Panama, the IP is in the Czech Republic and the site is less than two months old, I'd be plenty suspicious. There's no actual website at that domain, so it's being used just for the email.

If it walks like a duck and sounds like a duck...

Posted: Sat Sep 21, 2013 2:42 am

Hidden registrant + one year registration = fake. There is a website, but for some strange reason, it's written in compiled Python.

What's in Panama is Private Whois. We don't know where the registrant is.

Posted: Sat Sep 21, 2013 4:56 am

Their contacts page has:

Quote:

SIR RAMA CHANDRAN FUNDING LOAN COMPANY INC.
Headquarters

SIR RAMA CHANDRAN FUNDING LOAN COMPANY INC
32 Forest Drive,
GOVERNMENT ACCREDITED LICENSED!!
UNDER THE DATA PROTECTION ACT OF:
Registration (623704)
INDIA

Contact Emails:
[email protected]
[email protected]
[email protected]
[email protected]

MOBILE NUMBER:
+919910594127
+918527372286

Looks like they're hedging their bets with the free email addies, as if they are expecting their domain to be killed.

Looks hinkey to me, but needs further investigation.

Posted: Sat Sep 21, 2013 5:23 am

The site is total BS. Mentions Seattle location with no US Contact information.

http://fundnincln.com/leadership.pyc

Copied from

http://investorscapitalgroup.com/leadership <<< legit site

The faker claims to be in Seattle on this page http://fundnincln.com/index%20pyc

Bait away and if you have email9s) showing AFF post the information in the fake bank forum.

Hello I'm New here! Joined: 19 Jul 2011 Posts: 10

Is it a good candidate for killing? These sites are way too easy to backup and put back on a different domain but it might cause our scammer some pain.

How do I submit it for killing? I have a running thread of emails claiming that this is a lending business. I am continuing to bait. This site is definitely actively being used to scam people.

What's AFF?

Posted: Sat Sep 21, 2013 3:30 pm

^^Greetings Sir!

AFF = Advance Fee Fraud. In order to get a "loan" the lad will milk a victim for fees upfront. There is no real loan, and the fees disappear with the lad.

I'm happy to help, as are any of the other sitekillers. Just drop one of us a PM and we'll help you sort it. Smile

Posted: Sat Sep 21, 2013 5:42 pm

The site you have there is definitely dirty.

To submit it for killing, simply post a thread with a link to the site in the fake sites forum, give a few reasons why you think it's fake, and set the status on the thread to Need Help. We'll take it from there.

Edit: Don't worry about having to post it in the fake sites forum. I sent the site to El Capitan Borracho, who entered it in the Fake Sites Database at Artists Against 419.

The scam site you found is registered with internet.bs. That company that suspends any domains registered with them that are in the database. The site should go down very quickly, and I'll update you when it does.

Posted: Sat Sep 21, 2013 9:12 pm

Dead

Posted: Sat Sep 21, 2013 9:33 pm

Sweet.

Hello I'm New here! Joined: 19 Jul 2011 Posts: 10

You are amazingly quick. My first sig icon is a site kill. Yay.

Edit: BTW how do I add an indian flag to my sig?

Posted: Mon Sep 23, 2013 1:42 am

You don't get a flag unless you write a report. If the registrar kills it just for being added to the database, no flag. But I do have a flag that I scored by reporting a site to Directi (who normally kills sites just for being in the DB) while aa419 was under a DoS attack.

It's

. For most countries you type "flag_" and the two-letter country code, then put colons around it.

Posted: Mon Sep 23, 2013 2:42 am

See: http://forum.419eater.com/forum/viewtopic.php?t=118861

Quote:

Flags are for killing fake banks or sites used for fraud. You do this by writing an abuse report (sometimes more than 1) to the hoster. When the site goes 404, 403, or suspended, you get to put a flag in your sig for the country where the bank or company claimed to be located. Please see the fake sites forum for further explanation.

There are a few internet registrars who have deals in place with Artists Against 419. For these companies, if a domain registered with them gets a database entry in AA419's database of fraudulent domains, they will suspend that domain without an abuse report needing to be written (which was the case here). In that case, no flags awarded as an abuse report wasn't needed to be written or sent.

If you would like to learn more about the fake sites finding/reporting process, there are several regular contributors to the fake sites forum that I'm sure would be happy to help you learn how to score some little flag icons for your signature.

Take care,
El Capt.

Potential scam site but could be ITP	View next topic View previous topic