poirot
17 June 2006, 17:16
Version Francaise ici (http://www.fraudwatchers.org/forums/showthread.php?t=2269)
We have discovered a site that host multiple fake banks and businesses. At the time of this writing, they are still there but hopefully will be removed in the near future. We are taking the necessary steps to inform the server administrators at salifa.com. (This information has been forwarded to www.aa419.org to add to their fake bank database).
*EDIT: The site has been totally shut down including all the subfolders with the fake banks etc.., We wish to thank salifa.com, africa-web.org & africacomputing.org for acting so quickly. It's really appreciated.
*Another fake bank site belonging to the same scammers but hosted at another account, has also been closed: Banque Centrale de Côte d'Ivoire http://www.bcci.site.tc
*Same situation with: http://www .ruthtondey.euro.tm (http://www.hkko.salifa.com/ruthtondey) , now shut down.
and http://www.boosterimage.euro.tm also shut down.
The criminal site is (*was) at this address:
http://www.hkko.salifa.com
Here are the details followed by screen shots captured on June 10 2006.
These fake banks and companies use a redirecting service to camouflage the real address where they are hosted. Here is the list of URLs as used in the scams:
*Edit. Since our publication, these URL's have been redirected to the original redirection service to prevent current victims of these fake banks from seeing salifa.com's abuse page.
These URL can be directed to new webhostings at any time, something we are keeping an eye on.
http://www.bii.site.tc/ La Banque Internationale d'Investissement
http://www.blecci.site.tc/ La Banque Locale d'Epargne et de Crédit de Côte d'Ivoire
http://www.dpsfc.euro.tm/ DENTON PRIMER SECURITY AND FINANCE COMPANY
http://www.finabank.site.tc/ FINABANK ou Fina Bank
http://www.itrapam-firestom.site.tc/ (http://recs.fraudwatchers.org/images/p-itrapam2.jpg) ITRAPAM-FIRESTOM
http://www.universalsecurity.site.tc/ UNIVERSAL SECURITY
and others...
Here are the actual URLs where the various sites are hosted:
*Edit. salifa.com has redirected these addresses to their abuse page.
http://www.hkko.salifa.com/bii/Presentation.htm
http://www.hkko.salifa.com/blecci/
http://www.hkko.salifa.com/dpsfc/
http://www.hkko.salifa.com/finabank/Presentation.htm
http://www.hkko.salifa.com/itrapam/index2.htm (http://recs.fraudwatchers.org/images/p-itrapam2.jpg)
http://www.hkko.salifa.com/us/
http://www.hkko.salifa.com/bi/
http://www.hkko.salifa.com/sendmail/
http://www.hkko.salifa.com/ruthtondey
http://www.hkko.salifa.com/
E-mails, names and telephone numbers found on this site on June 10, 2006:
hervega@bi.euro.tm
nfo@bi.euro.tm
clientele@bi.euro.tm
sce.juridique@bi.euro.tm
fret@universalsecurity.site.tc
info@universalsecurity.site.tc
direction@universalsecurity.site.tc
info@finabank.site.tc
clientele@finabank.site.tc
remittance.dept@finabank.site.tc
assistance_info2000@consultant.com
info@dpsfc.euro.tm
maitre-didier.robert@laposte.net
info@blecci.site.tc
clientele@bii.site.tc
info@bii.site.tc
================
Booster Image
Hervé G A
MAITRE DIDIER ROBERT
Dr Franck VERA
Henry KOUASSI
Benovitch KENOV
eric KASMANI
Marc FANGBA
Berté MAKAYA
Beskoni KAFINOVA
Hassan REDA
Ali ZEMOGO
Alain MOGONINI
Catherine KOUAME
Dr Edmond Fallet
Dr Armand Yapi
Pr Anderson Koffi
Me Larie Boulragal
==================
+225 21 27 92 53
+225 07 45 57 48
+225 083 903 26
+225 224 264 40
+225 224 255 42
+225 064 038 63
+225 224 144 59
+225 075 687 33
+225 083 389 53
+225 212 795 97
+225 085 600 56
+225 085 185 51
+225 212 885 37
Fake sites such as fake banks, fake security companies and fake commercial sites are an integral part of the 419 advance fee fraud. At times used to reinforce their scams. For example by giving the victim an account and pin number to the site so that they can verify their account, and be convinced that the $millions in heritage really do exist, in an account that bears their name, just waiting for that "last" document that will permit the transfer into their own bank account.
Naturally, the document's costs have to be paid as soon as possible. This could be an anti-terrorist or anti-drug document, or other. You pay for that document and there will always be another because that is the nature of this type of fraud.
Another aspect of this fraud are the charges requested for opening an account. And also the personal details requested. On the site of La Banque Locale d'Epargne et de Crédit de Côte d'Ivoire, they ask you for details on your bank account, passport, visa, 2 i.d. photos, your home address, 3 pay slips from your employment, business licence for the self-employed, etc..,
Fake Internet bank sites are often used for collecting information with the purpose of identity theft.
The images below were captured on June 10, 2006:
http://recs.fraudwatchers.org/images/p-index.jpg
http://recs.fraudwatchers.org/images/p-webmaster.jpg
http://recs.fraudwatchers.org/images/p-bii.jpg
http://recs.fraudwatchers.org/images/p-blecci.jpg
http://recs.fraudwatchers.org/images/p-denton.jpg
http://recs.fraudwatchers.org/images/p-finabank.jpg
http://recs.fraudwatchers.org/images/p-universal.jpg
http://recs.fraudwatchers.org/images/p-mailer.jpg
http://recs.fraudwatchers.org/images/p-ruthtondey.jpg
We have discovered a site that host multiple fake banks and businesses. At the time of this writing, they are still there but hopefully will be removed in the near future. We are taking the necessary steps to inform the server administrators at salifa.com. (This information has been forwarded to www.aa419.org to add to their fake bank database).
*EDIT: The site has been totally shut down including all the subfolders with the fake banks etc.., We wish to thank salifa.com, africa-web.org & africacomputing.org for acting so quickly. It's really appreciated.
*Another fake bank site belonging to the same scammers but hosted at another account, has also been closed: Banque Centrale de Côte d'Ivoire http://www.bcci.site.tc
*Same situation with: http://www .ruthtondey.euro.tm (http://www.hkko.salifa.com/ruthtondey) , now shut down.
and http://www.boosterimage.euro.tm also shut down.
The criminal site is (*was) at this address:
http://www.hkko.salifa.com
Here are the details followed by screen shots captured on June 10 2006.
These fake banks and companies use a redirecting service to camouflage the real address where they are hosted. Here is the list of URLs as used in the scams:
*Edit. Since our publication, these URL's have been redirected to the original redirection service to prevent current victims of these fake banks from seeing salifa.com's abuse page.
These URL can be directed to new webhostings at any time, something we are keeping an eye on.
http://www.bii.site.tc/ La Banque Internationale d'Investissement
http://www.blecci.site.tc/ La Banque Locale d'Epargne et de Crédit de Côte d'Ivoire
http://www.dpsfc.euro.tm/ DENTON PRIMER SECURITY AND FINANCE COMPANY
http://www.finabank.site.tc/ FINABANK ou Fina Bank
http://www.itrapam-firestom.site.tc/ (http://recs.fraudwatchers.org/images/p-itrapam2.jpg) ITRAPAM-FIRESTOM
http://www.universalsecurity.site.tc/ UNIVERSAL SECURITY
and others...
Here are the actual URLs where the various sites are hosted:
*Edit. salifa.com has redirected these addresses to their abuse page.
http://www.hkko.salifa.com/bii/Presentation.htm
http://www.hkko.salifa.com/blecci/
http://www.hkko.salifa.com/dpsfc/
http://www.hkko.salifa.com/finabank/Presentation.htm
http://www.hkko.salifa.com/itrapam/index2.htm (http://recs.fraudwatchers.org/images/p-itrapam2.jpg)
http://www.hkko.salifa.com/us/
http://www.hkko.salifa.com/bi/
http://www.hkko.salifa.com/sendmail/
http://www.hkko.salifa.com/ruthtondey
http://www.hkko.salifa.com/
E-mails, names and telephone numbers found on this site on June 10, 2006:
hervega@bi.euro.tm
nfo@bi.euro.tm
clientele@bi.euro.tm
sce.juridique@bi.euro.tm
fret@universalsecurity.site.tc
info@universalsecurity.site.tc
direction@universalsecurity.site.tc
info@finabank.site.tc
clientele@finabank.site.tc
remittance.dept@finabank.site.tc
assistance_info2000@consultant.com
info@dpsfc.euro.tm
maitre-didier.robert@laposte.net
info@blecci.site.tc
clientele@bii.site.tc
info@bii.site.tc
================
Booster Image
Hervé G A
MAITRE DIDIER ROBERT
Dr Franck VERA
Henry KOUASSI
Benovitch KENOV
eric KASMANI
Marc FANGBA
Berté MAKAYA
Beskoni KAFINOVA
Hassan REDA
Ali ZEMOGO
Alain MOGONINI
Catherine KOUAME
Dr Edmond Fallet
Dr Armand Yapi
Pr Anderson Koffi
Me Larie Boulragal
==================
+225 21 27 92 53
+225 07 45 57 48
+225 083 903 26
+225 224 264 40
+225 224 255 42
+225 064 038 63
+225 224 144 59
+225 075 687 33
+225 083 389 53
+225 212 795 97
+225 085 600 56
+225 085 185 51
+225 212 885 37
Fake sites such as fake banks, fake security companies and fake commercial sites are an integral part of the 419 advance fee fraud. At times used to reinforce their scams. For example by giving the victim an account and pin number to the site so that they can verify their account, and be convinced that the $millions in heritage really do exist, in an account that bears their name, just waiting for that "last" document that will permit the transfer into their own bank account.
Naturally, the document's costs have to be paid as soon as possible. This could be an anti-terrorist or anti-drug document, or other. You pay for that document and there will always be another because that is the nature of this type of fraud.
Another aspect of this fraud are the charges requested for opening an account. And also the personal details requested. On the site of La Banque Locale d'Epargne et de Crédit de Côte d'Ivoire, they ask you for details on your bank account, passport, visa, 2 i.d. photos, your home address, 3 pay slips from your employment, business licence for the self-employed, etc..,
Fake Internet bank sites are often used for collecting information with the purpose of identity theft.
The images below were captured on June 10, 2006:
http://recs.fraudwatchers.org/images/p-index.jpg
http://recs.fraudwatchers.org/images/p-webmaster.jpg
http://recs.fraudwatchers.org/images/p-bii.jpg
http://recs.fraudwatchers.org/images/p-blecci.jpg
http://recs.fraudwatchers.org/images/p-denton.jpg
http://recs.fraudwatchers.org/images/p-finabank.jpg
http://recs.fraudwatchers.org/images/p-universal.jpg
http://recs.fraudwatchers.org/images/p-mailer.jpg
http://recs.fraudwatchers.org/images/p-ruthtondey.jpg