This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ign ...
show moreThis is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ignores all abuse complaints and help facilitate fraud on MASSIVE scale by hosting scam sites for cybercriminals, botnet C2 servers, malware, phishing, scams, you name it and they will host it no problem, no takedowns, no response on abuse complaints, a veritable hive of scum and villainy.
Here are some of the sites hosted on this IP:
axion-access.com
beacon-global-investments.xyz
bkofficial.live
capitalstonebridgemining.com
digitaldexltd.com
equatrust.ltd
infernumglobalreserve.com
luxorachain.com
northspringcapitalbank.com
stockexchangemarketing.com
swiftpaycreditun.com
ultimextradex.live
ultrafintradex.live
velorian-capital.com
wealthholdingsempire.com
wfonline.biz
zodorx.live
show less
This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ign ...
show moreThis is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ignores all abuse complaints and help facilitate fraud on MASSIVE scale by hosting scam sites for cybercriminals, botnet C2 servers, malware, phishing, scams, you name it and they will host it no problem, no takedowns, no response on abuse complaints, a veritable hive of scum and villainy.
Here are some of the sites hosted on this IP:
afxsignal.top
ascuonlinebanking.com
brisbroker.com
crescenttrustbnk.com
digitalmarketingencompass.com
elitemint.top
finstrisemine.net
grandcoreinvest.com
nextrds.top
okxtrades.net
primefinanceoptions.com
remgroinvt.top
sovereigntrdplatform.click
terrapips.top
teslatreasury.com
trdsolutiontd.top
trdswave.click
show less
This is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ign ...
show moreThis is the bulletproof hosting provider Frantech/BuyVM (The guy behind this is Fransisco Dias), ignores all abuse complaints and help facilitate fraud on MASSIVE scale by hosting scam sites for cybercriminals, botnet C2 servers, malware, phishing, scams, you name it and they will host it no problem, no takedowns, no response on abuse complaints, a veritable hive of scum and villainy.
Here are some of the sites hosted on this IP:
avasignal.top
bestsimplexmarkets.com
bitmaxappglobal.pro
brightgrowths.live
capital-lite.live
citymendmanagements.live
coasterfund.pro
digitaltradechainplc.com
elitewavetradingplatform.com
finurawealthventure.pro
gain-bullish.com
globalfirmelite.pro
gloptions.top
litwave.live
novasignals.top
point72asset-trade.net
puremingx.pro
swiftfund.live
terraeco.top
teslastocks.net
uniquegoals.live
zenithgurus.pro
show less
This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, ...
show moreThis is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, who help facilitate fraud for other Nigerian cybercriminals by not shutting down scam sites and allowing them to operate with impunity.
Name Servers:
dns1.lytehosting.com
dns2.lytehosting.com
dns3.lytehosting.com
dns4.lytehosting.com
https://dns.coffee/nameservers/dns1.lytehosting.com
https://dns.coffee/nameservers/dns2.lytehosting.com
https://dns.coffee/nameservers/dns3.lytehosting.com
https://dns.coffee/nameservers/dns4.lytehosting.com
Also using the following IPs to host scam sites:
163.61.188.2 / 163.61.188.5 / 163.61.188.7 / 163.61.188.9 / 163.61.188.105
This is AS153568 NEW DHAKA HARDWARE AS who have multiple SBL listings on Spamaush :
newdhaka.net currently has 6 SBL listings for IPs under its responsibility.
https://check.spamhaus.org/sbl/listings/newdhaka.net/
show less
This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, ...
show moreThis is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, who help facilitate fraud for other Nigerian cybercriminals by not shutting down scam sites and allowing them to operate with impunity.
Name Servers:
dns1.lytehosting.com
dns2.lytehosting.com
dns3.lytehosting.com
dns4.lytehosting.com
https://dns.coffee/nameservers/dns1.lytehosting.com
https://dns.coffee/nameservers/dns2.lytehosting.com
https://dns.coffee/nameservers/dns3.lytehosting.com
https://dns.coffee/nameservers/dns4.lytehosting.com
Also using the following IPs to host scam sites:
163.61.188.2 / 163.61.188.5 / 163.61.188.7 / 163.61.188.9 / 163.61.188.105
This is AS153568 NEW DHAKA HARDWARE AS who have multiple SBL listings on Spamaush :
newdhaka.net currently has 6 SBL listings for IPs under its responsibility.
https://check.spamhaus.org/sbl/listings/newdhaka.net/
show less
This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ...
show moreThis IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters.
They use the following IPs:
86.107.77.91
86.107.77.95
86.107.77.98
86.107.77.108
86.107.77.112
86.107.77.119
86.107.77.213
We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com
We can see some of the fake investment scam sites here:
alphaequity.ltd
extremassets.com
1world-cryp2.us
amtefis.pro
bridgewayshares.com
m36digital.com
forexoption.info
goldpocketoption.com
finance-markex.info
pocketoptionsinvestmentcompany.info
monumentaccess.com
hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports.
show less
This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ...
show moreThis IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters.
They use the following IPs:
86.107.77.91
86.107.77.95
86.107.77.98
86.107.77.108
86.107.77.112
86.107.77.119
86.107.77.213
We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com
We can see some of the fake investment scam sites here:
alphaequity.ltd
extremassets.com
1world-cryp2.us
amtefis.pro
bridgewayshares.com
m36digital.com
forexoption.info
goldpocketoption.com
finance-markex.info
pocketoptionsinvestmentcompany.info
monumentaccess.com
hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports.
show less
This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ...
show moreThis IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters.
They use the following IPs:
86.107.77.91
86.107.77.95
86.107.77.98
86.107.77.108
86.107.77.112
86.107.77.119
86.107.77.213
We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com
We can see some of the fake investment scam sites here:
alphaequity.ltd
extremassets.com
1world-cryp2.us
amtefis.pro
bridgewayshares.com
m36digital.com
forexoption.info
goldpocketoption.com
finance-markex.info
pocketoptionsinvestmentcompany.info
monumentaccess.com
hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports.
show less
This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ...
show moreThis IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters.
They use the following IPs:
86.107.77.91
86.107.77.95
86.107.77.98
86.107.77.108
86.107.77.112
86.107.77.119
86.107.77.213
We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com
We can see some of the fake investment scam sites here:
alphaequity.ltd
extremassets.com
1world-cryp2.us
amtefis.pro
bridgewayshares.com
m36digital.com
forexoption.info
goldpocketoption.com
finance-markex.info
pocketoptionsinvestmentcompany.info
monumentaccess.com
hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports.
show less
This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ...
show moreThis IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters.
They use the following IPs:
86.107.77.91
86.107.77.95
86.107.77.98
86.107.77.108
86.107.77.112
86.107.77.119
86.107.77.213
We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com
We can see some of the fake investment scam sites here:
alphaequity.ltd
extremassets.com
1world-cryp2.us
amtefis.pro
bridgewayshares.com
m36digital.com
forexoption.info
goldpocketoption.com
finance-markex.info
pocketoptionsinvestmentcompany.info
monumentaccess.com
hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports.
show less
This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ...
show moreThis IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters.
We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com
We can see some of the fake investment scam sites here:
alphaequity.ltd
extremassets.com
1world-cryp2.us
amtefis.pro
bridgewayshares.com
m36digital.com
forexoption.info
goldpocketoption.com
finance-markex.info
pocketoptionsinvestmentcompany.info
monumentaccess.com
hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports.
show less
This IP is being used by 419 advanced fee fraud scam facilitators to host scam sites for other Niger ...
show moreThis IP is being used by 419 advanced fee fraud scam facilitators to host scam sites for other Nigerian scammers
The following nameservers are being used
ns1.redhosta.com
ns2.redhosta.com
We can see all of the scam sites here: https://dns.coffee/nameservers/ns1.redhosta.com
Here are some of the scam sites hosted on this server:
truistherionline.com | fake bank scam
thewestbkkonline.com | fake bank scam
lexonumdelivery.com | fake logistics scam
fedcargologistics.com | fake logistics scam
primaxaitrade.com | fake investment scam
show less
sailexhost.com - who are a 419 advanced fee fraud facilitating host, people who run sailexhost.com a ...
show moresailexhost.com - who are a 419 advanced fee fraud facilitating host, people who run sailexhost.com are in Nigeria.
They host scam sites for Nigerian scammers, such as fake investment scams, fake bank scams, crypto wallet phishing scams, fake logistics scams and various other 419 advanced fee fraud scams designed to get the victim to pay an advanced fee for something that doesn't exist.
We can see some of the scam sites on one of their many nameservers: https://dns.coffee/nameservers/ns23.sailexhosting.com
alphaprocoinbot.com
assetmanfaat.com
bitormine.com
bitormining.com
blinancetrades.com
evertrustinvest.live
exchangemarketcoin.com
fastigiumoption.com
firmatrustbnk.com
fxtmtrade.com
globalhedgemarketingfund.com
habitatgrouppanama.com
investaroprofit.com
leexoratradesystem.com
miltacticalhub.com
novaraheritage.com
octaconnectledger.com
ogtrx.org
oxadigitals.com
primecapitals.us
primehubcapital.com
show less
This is being used by lytehosting.com as one of the many servers they use to host 419 advanced fee f ...
show moreThis is being used by lytehosting.com as one of the many servers they use to host 419 advanced fee fraud scams on a massive scale
lytehosting.com are Nigerian 419 advanced fee fraud scam facilitators and host scam sites for Nigerian scammers.
They use the following nameservers:
Name Servers:
dns1.lytehosting.com
dns2.lytehosting.com
dns3.lytehosting.com
dns4.lytehosting.com
Here are some of the scam sites being hosted here
autintl.online | fake bank scam
coinbinoz.sbs | fake investment scam
earnflow.top | fake crypto investment scam
fidshore.com | fake logistics scam
flaress.network | crypto scam
hbaz.org | fake bank scam
natiopayx.org | fake bank scam
omnimusk.live | fake investment scam
promusk.top | fake investment scam
prosevex.com | fake investment scam
show less
hosting a large amount of 419 advanced fee fraud scams, I believe this is being run by hostcreed.com ...
show morehosting a large amount of 419 advanced fee fraud scams, I believe this is being run by hostcreed.com who are Nigerian 419 advanced fee fraud scam facilitators.
We can see the scam sites listed here: https://dns.coffee/nameservers/ns1.hlogicdock.cloud
Here are some of the scam sites being hosted here, all sites verified as 419 advanced fee fraud scam sites and flagged as malicious by Netcraft:
fake investment scams:
----------------------
astrieycapital.com
crypishrre.com
fortifdue.online (flagged as malicious in Chrome)
nobitsventure.com
rdmprotocol.online
smartwaveportfolio.com
stickoinai.com
fake bank scams:
----------------------
bluecresttbs.com
bluepillarstone.com
coasmerb.com
dierechnungen.com
goldbridgeplc.com
grandccrest.com
harborridgeway.com
haventobnk.com
kytrdoffshore-portal.online
meritcapinc.com
montconcap.com
noblepayz.com
pacwestbcp.com
regionfinancials.com
squaremaxences.com
standardstrust.com
torodfb.com
unit5577privatedept.online
untitytcu.online
show less
This is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud orig ...
show moreThis is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud originating from West Africa on a MASSIVE scale
They use the following IPs to host: 163.61.188.5 / 163.61.188.7 / 163.61.188.9
We can see the huge amount of scam sites that get added every day here: https://dns.coffee/nameservers/dns1.lytehosting.com
IP is listed on Spamhaus with 3 listings:
Spamhaus Blocklist (SBL), eXploits Blocklist (XBL) & CSS Blocklist (CSS)
https://check.spamhaus.org/results/?query=163.61.188.9
show less
This is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud orig ...
show moreThis is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud originating from West Africa on a MASSIVE scale
They use the following IPs to host: 163.61.188.5 / 163.61.188.7 / 163.61.188.9
We can see the huge amount of scam sites that get added every day here: https://dns.coffee/nameservers/dns1.lytehosting.com
show less
Massive fraud host,
Hosts 419 advanced fee fraud scam sites such as algotradehive.com
https:/ ...
show moreMassive fraud host,
Hosts 419 advanced fee fraud scam sites such as algotradehive.com
https://urlscan.io/ip/198.251.89.220
Ignores all abuse reports.
show less
This is zencorehost.com who are a 419 advanced fee fraud scam facilitating web host and facilitate o ...
show moreThis is zencorehost.com who are a 419 advanced fee fraud scam facilitating web host and facilitate other Nigerian scammers.
https://dns.coffee/nameservers/ns1.zencorehost.com
Some of the scam sites that they host:
qfsworldvault.net
busefin.icu
cloud-asset.ltd
farosonglobaltrade.ltd
farossonglobaltrade.ltd
futuremoneysystem.ltd
quantumfinanceguide.ltd
rigstock-exchange.ltd
spikeultimate.ltd
trustypath.ltd
uniqueassets.ltd
veritasinvestment.ltd
globalexpress-logistics.ltd
ama-invest.org
arbcapital.org
aureclimited.org
bankabillions.org
coinstonelimited.org
gdinvestmentltd.org
globalfundsxchange.org
kizvest.org
prandoxx.org
promentumlimited.org
qfsassestssecuritybackup.org
qfsglobals.org
qfsnesaravault.org
qfsworldvault.org
web3insight.org
web3securewallet.org
zenixglobaltrade.org
abextradelimited.com
absglobalinvest.com
affiliateledgerasset.com
alatuscap.com
allegro-invest.com
allegro-investment.com
alpcotcapmanagement.com
show less
This is being used by lytehosting.com to host 419 advanced fee fraud scam sites, lytehosting are a N ...
show moreThis is being used by lytehosting.com to host 419 advanced fee fraud scam sites, lytehosting are a Nigerian 419 advanced fee fraud scam facilitating host and help other Nigerian fraudsters to host scam sites and ignore all abuse complaints.
This IP and many others that lytehosting use are already on the SBL at Spamhaus: https://check.spamhaus.org/results?query=163.61.188.9
We can see the huge amount of scam sites being added per day using the following nameserver:
https://dns.coffee/nameservers/dns1.lytehosting.com
IP is from "NEW DHAKA HARDWARE"
Any email to [email protected] is ignored.
show less
This is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com (servers via scam f ...
show moreThis is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com (servers via scam facilitators: hostseo.com / centriohost / zelt.ae)
They advertise themselves on social media as a DMCA ignoring web host, what this means in practise is that they allow 419 advanced fee fraud scam sites to be hosted their without the fear of being terminated.
This is hosting the following nameserver:
dns1.geebytesdns.com
dns2.geebytesdns.com
We can see the scam sites here: https://dns.coffee/nameservers/dns1.geebytesdns.com
show less
This is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com (servers via scam f ...
show moreThis is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com (servers via scam facilitators: hostseo.com / centriohost / zelt.ae)
They advertise themselves on social media as a DMCA ignoring web host, what this means in practise is that they allow 419 advanced fee fraud scam sites to be hosted their without the fear of being terminated. Except for the fact that they use OVH servers who do mind!
This is hosting the following nameserver:
dns24.geebyteserver.com
dns25.geebyteserver.com
This is one of their newer nameservers and we can see them start to move their scam sites over to this nameserver: https://dns.coffee/nameservers/dns24.geebyteserver.com
For example we have:
bankofameric.org (fake bank scam)
51.89.157.43 Malicious Activity!
https://urlscan.io/result/019df92d-1885-7090-96b0-80d6f6a7bddc/
show less
This is being used by Nigerian 419 advanced fee fraud scammers.
This is hosting the following nam ...
show moreThis is being used by Nigerian 419 advanced fee fraud scammers.
This is hosting the following nameserver: ns1.controlpanel.sbs
Who are dedicated to hosting 419 advanced fee fraud scam sites as we can see here:
https://dns.coffee/nameservers/ns1.controlpanel.sbs
ns1.controlpanel.sbs ex-lytehosting / hostcreed (hlogicdock.cloud) junk. These scammers have just started using a new nameserver and are moving some of their scam sites over.
show less
The fraud facilitators at Hostcreed.com are moving their scam sites to a new nameserver here:
Thi ...
show moreThe fraud facilitators at Hostcreed.com are moving their scam sites to a new nameserver here:
This nameserver only exists for the sole reason of facilitating 419 advanced fee fraud scams.
Proof: https://dns.coffee/nameservers/ns1.hlogicdock.cloud
ISP Ultahost Inc
Usage Type Data Center/Web Hosting/Transit
ASN AS214036
Hostname(s) nls.hostcreed.com
Domain Name ultahost.com
Country 🇳🇱 Netherlands
City Amsterdam, North Holland
Name Servers:
ns1.hlogicdock.cloud
ns2.hlogicdock.cloud
advancedonlineportal.com
alltrustsplc.com
almapharmaceuticalcompany.com
assetcreditunion.com
assetsgain.com
assuredcryptogains.com
auspostandservice.com
authenticprimestransit.com
baclinksolves.top
beastxdev.pro
benchsmp.xyz
bluepillarstone.com
brightremit.com
capitalviax.com
cargohaste.com
cargowaydelivery.com
chatdesco.app
coinblazes.com
coincloudtrading.com
continentallfinance.com
continentcrystal.com
credimicrofinance.com
cresttickets.com
show less
This is geebytescloud.com & geebytes.com who are yet another Nigerian 419 advanced fee fraud facilit ...
show moreThis is geebytescloud.com & geebytes.com who are yet another Nigerian 419 advanced fee fraud facilitator
And offering the following on their instagram page: "NO FEAR OF TAKEDOWN OR SUSPENSION OF PHISHING WEBSITE"
https://dns.coffee/nameservers/dns24.geebyteserver.com
IP 51.89.157.40 - HostSeo/centriohost/zelt.ae again helping to facilitate fraud.
Here is some of the scam sites that they host here:
bluewaveiso.com
crestgloballogistics.com
crestleadlogistics.com
crimsonfluxfinlbk.com
forwardmintbknet.com
globalskycarrier.com
ikebubekkuy.site
intlcargoservices.com
millernbiytyrify.site
ms-teams-meetings-join.site
nexusfinbkt.com
nexusprimebkt.com
odgwuhtnskwlofity.site
palsf.site
pixelchainartspace.com
realesttips.com
secureonbk.com
shathletes.shop
shathletes.us
steadykeyob.com
surelanedeliveryos.com
top10investments.org
ultpromachine.com
xteamfxtrades.com
xtmfinbk.com
yamatodigitalbk.com
show less
Phishing
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.