This is being used by spantrix.com who are Nigerian 419 advanced fee fraud scam facilitators:
172 ...
show moreThis is being used by spantrix.com who are Nigerian 419 advanced fee fraud scam facilitators:
172.93.120.110
Name Servers:
ns1.spantrix.com
ns2.spantrix.com
https://dns.coffee/nameservers/ns1.spantrix.com
here are just some of the scam sites that they host:
olympstradeltd.com
wikitrades.org
litetradepro.com
asiablockchainfx.com
livetextrade.com
shsavings.com
globit.online
prime-realties.com
gmininghub.com
firstcbnk.com
sterlingtrustbank.com
wealthycount.com
smartcloudtrade.com
dominion-capitals.com
treasureminners.com
swingtradinglab.live
procapitalls.net
primecapitalls.com
intensinvest.com
expansioncapitals.com
stardigitaltrad.com
cryptdouble.com
themastercrep.com
crypt-double.com
firztasset.com
globalexpertiser.com
global-tradingfx.com
primecrestfinance.com
linkfex.com
bitlitespro.com
novatriax.com
crypto-boosting.com
dueprofit.com
kariox-shares.com
keystone-alliances.com
speedsbnt.com
topprofitmastery.com
wawtradesa.com
show less
afeeshost.com are 419 advanced fee fraud scam facilitators, they facilitate fraud on a massive scam ...
show moreafeeshost.com are 419 advanced fee fraud scam facilitators, they facilitate fraud on a massive scam for other Nigerian scammers.
These are the name servers that they use:
Name Servers:
dns1.afeeshost.ltd
dns2.afeeshost.ltd
dns3.afeeshost.com
We can see the scale of their fraud facilitation here: https://dns.coffee/nameservers/dns1.afeeshost.ltd
We can see a fake bank scam here:
ptbbk[.]com | fake bank scam
show less
This is a stablewebtech.com who are 419 advanced fee fraud scam facilitators, who facilitate fraud f ...
show moreThis is a stablewebtech.com who are 419 advanced fee fraud scam facilitators, who facilitate fraud for Nigerian cyber criminals
Name Servers:
ns1.stablewebtech.com
ns2.stablewebtech.com
Some of the scam sites are:
teslaworldinv.com
stockinsured.com
metrixcapitalltd.com
giantex-coin.com
assets-tradepoint.org
kucoincapital.com
coinsinternational-profits.com
trustholding-asset.com
assets-tradepro.com
peloxtrust.com
fexmoon.ltd
dailytradesltd.org
earninvest.net
netwealthinvest.com
moonfare-enterprise.com
dealnet-expresstrade.com
atanitraders.com
assets-capital.com
tecbonlinecapital.com
coinshatch.net
assurance-exchange.org
dex-financefx.ltd
digita-ventures.org
skylinktrade.net
fundrise-global.com
real-earner.ltd
qfsnetworksystem.com
paneratradeholdings.com
aicryptix.net
digitalworldlearners.org
dex-coinnexfx.com
xetalon.net
show less
This is a 419 advanced fee fraud facilitating web host, as we can see here, https://dns.coffee/names ...
show moreThis is a 419 advanced fee fraud facilitating web host, as we can see here, https://dns.coffee/nameservers/ns3.zillionkinghost.com hosting various different variants of the 419 advanced fee fraud scam, such as fake bank scams, fake investment scams, fake bank scams etc.
zillionkinghost.com = Nigerian fraud facilitating web host
We can check just a few of the latest sites that have been added such as:
qeaverunion.sbs | fake logistics scam
teslastocks.trade | fake investment scam
All being facilitated with the help of Hostseo/Centriohost/zelt.ae who are one of the biggest bulletproof hosting providers for advanced fee fraud scammers, they simply don't reply to any abuse complaints and cater to scammers, go on their chat and tell them that you want a bulletproof server and they'll be happy to oblige hosting all of your scam sites for you.
These are terrible people and enable cyber crime.
show less
This IP is being used to facilitate 419 advanced fee fraud scam sites from the following name server ...
show moreThis IP is being used to facilitate 419 advanced fee fraud scam sites from the following name server:
51.38.146.206
https://dns.coffee/nameservers/ns1.ultcloudservers.com
They are the usual fake bank scams, fake investment scams, fake logistic scams, fake celebrity booking scams, fake recovery scams etc
All those domains exist for the sole purpose of committing advanced fee fraud.
The usual suspects Hostseo/Centriohost/Zelt.ae help to facilitate these scam sites by hosting to cyber criminals in Nigeria.
show less
This is being used by Nigerian 419 advanced fee fraud scam facilitators to host 100s of 419 advanced ...
show moreThis is being used by Nigerian 419 advanced fee fraud scam facilitators to host 100s of 419 advanced fee fraud scam sites for example fake bank scams, fake investment scams, fake logistics scams, crypto wallet phishing scams, fake celebrity booking scams.
All the scam sites from https://dns.coffee/nameservers/ns1.extrahostpro.net are being migrated to new nameservers on 64.28.236.130 (ShockHosting)
ns1.penclouds.com & ns2.penclouds.com
zeus1.penclouds.com & zeus1.penclouds.com
here is a list of just some of the scam sites:
acess-management.com | fake investment scam
affluencetradingmarket.live | fake investment scam
aircargoexpress.live | fake logistics scam
aitrustedcryptoedge.com | fake investment scam
alexiarivasexchange.click | fake investment scam
alltrustbankplc.live (https://alltrustbankplc.live/home.php) | fake bank scam
alphaoptions.live | fake investment scam
full list : https://pastebin.com/CiTQ30yF
show less
This is fr1.gfireservers.in (Hostname gaganyaan.gfireservers.in)
They are a 419 advanced fee frau ...
show moreThis is fr1.gfireservers.in (Hostname gaganyaan.gfireservers.in)
They are a 419 advanced fee fraud facilitator on a massive scale. They host Nigerian 419 advanced fee fraud scam sites like fake bank scams, fake investment scams, fake logistics scams etc.
You can see all the scam sites hosted here: https://dns.coffee/nameservers/fr1.gfireservers.in
It's an absolute mess of scam sites, these criminals are prolific.
show less
This is being used by dns1.dragoservers.com to host 419 advanced fee fraud scam sites, they market t ...
show moreThis is being used by dns1.dragoservers.com to host 419 advanced fee fraud scam sites, they market themselves as a DMCA ignoring host, and connected to the following Nigerian 419 advanced fee fraud scam facilitator on dmca1.weboraclehost.com aka Danbaba aka Daniel Ajayi, who is a fraud facilitator and connected to many 419 advanced fee fraud scams.
Fake investment scam:
skylinemcp.org
Fake logistics scam:
internationalseaairshipping.online
show less
This IP is being used by the following nameservers to host 419 advanced fee fraud scams from scammer ...
show moreThis IP is being used by the following nameservers to host 419 advanced fee fraud scams from scammers in Nigeria.
ns1.afriwesthost.com
ns2.afriwesthost.com
Here is a list of some of the scam sites, for example bank bank scams, fake investment scams and fake logistics scams
apexwavecapital.com
appetrochemicalsbv.com
azalogisticscargo.com
balglobalfin.com
beaconsprivate.com
coretrustnet.com
dbackupvault.xyz
eliteactivesig-mrk.com
fartscoin.info
fclmarineagenciesbv.com
fnxgatewayelite.com
globalaxisb.com
goldbrick.online
horinsignalpro.com
icep-facilitators.com
infinity-trde.net
interactingbrokerages.com
llc-pakoil.com
normanltds.com
novarishubaffiliates.com
paycoinapp.biz
primecapitalstrust.com
primecbx.com
safererserve.online
truiststandardguaranty.com
universalworldshipping.com
valtrixcentral.com
vertex-express.info
web3networklabs.com
westerncommunitybk.com
xpressdeliv.org
zensdrops.com
show less
There seems to be a massive problem with 419 advanced fee fraud scammers on this server, it seems th ...
show moreThere seems to be a massive problem with 419 advanced fee fraud scammers on this server, it seems that all the sites on Nameservers: vivid1.gfireservers.in and vivid2.gfireservers.in seem to be a fraud facilitating scam sites.
There are various types of 419 advanced fee fraud scams here, fake investment scams and fake bank scams for example
161.129.70.235
Name servers being used in 419 advanced fee fraud scam facilitation:
Name Servers:
vivid1.gfireservers.in
vivid2.gfireservers.in
here is a list of the scam domains
247fastves.com
aetheriumxmarkets.com
affluenceaura.com
agro365estates.com
aivestsautomation.com
ajaxmarkphase.com
alcteiaglobcap.com
alliededgetrust.com
alphamines.com
alphapathfnce.com
apexiostocks.live
apexpartnersltd.org
appmanagesphere.com
arcticpipsfx.com
arenacapitals.com
assetaura.net
assetpropertylimited.com
assetvissions.com
astrexx.com
astrocorepips.com
asttrion.com
atlasintlbank.com
show less
The following IP address is being used by Nigerian 419 advanced fee fraud scam facilitators to host ...
show moreThe following IP address is being used by Nigerian 419 advanced fee fraud scam facilitators to host 419 advanced fee fraud scam sites such as fake bank scams, fake investment scams etc
64.28.236.18 - Shock Hosting LLC
Nameservers:
ns1.cyburgcloud.com
ns2.cyburgcloud.com
Some of the scam sites hosted here:
alishiamarialucas.info
aocindex.online
apexfuturemarket.com
arvionextra.com
cbaonline.biz
ccinvstcompany.org
coinstake.info
credixaonli.com
csbonlineinc.com
dgae-fin.com
dreamsaccess.info
dualsafelogin.com
elitefinmarkets.org
expertprofitsphere1.com
expesoptitra.com
fastlandsavings.com
financialtrustunion.com
giocreditfn.com
globalcapitalfrx.com
imoxvest.com
janeroykate.info
legacycheckings.com
metrofbg.com
novaracrest.org
primoracapfin.com
pvaultcredunion.top
qfs-nesara.com
revocloudmarket.com
rimptrustfn.com
staketradeway.com
swiftglobelog.com
swiftglobelogs.com
swiftmarketfirm.com
swiftprocapitals.com
show less
The following IP address is being used by Nigerian 419 advanced fee fraud scam facilitators to host ...
show moreThe following IP address is being used by Nigerian 419 advanced fee fraud scam facilitators to host 100s of 419 advanced fee fraud scam sites such as fake bank scams, fake investment scams etc
173.0.59.2
Hosted on wowrack.com
Hostname(s) bsh-gospel.blessedservers.com
Nameservers:
NS5.SAMMIEHOST.COM
NS6.SAMMIEHOST.COM
NS1.KORRECTSERVER.COM
NS2.KORRECTSERVER.COM
NS1.BEESENGINE.CO
NS2.BEESENGINE.CO
Some of the scam sites hosted here:
allianceintlcooperativeb.com
apexminersinvestment.pro
appexinvestment.com
assetfirm-brokers-capitalinvestment.com
bitedgrex.com
bitflowvault.com
bitgrovult.com
bitofxinvestments.com
bitogex.com
bitprofit-mining.com
bitspininvest.org
bittpoda.com
bixgrom.com
bonaluxoglobe.com
by-assets.com
capassures-limited.com
capinterest-inc.com
capitalacorn.com
capitalboomtrade.com
capitalfunds-investments.com
capitalglobalearning.com
capitalinterestinc.com
show less
This is hosting many 419 advanced fee fraud scam sites
Francisco Dias runs FranTech (just google ...
show moreThis is hosting many 419 advanced fee fraud scam sites
Francisco Dias runs FranTech (just google this fraud facilitator, very interesting that you find....), which is a notorious bulletproof hosting provider for cyber criminals, and provides a safe haven for scammers, phishers, malware etc without any fear of the sites getting taken down. He directly facilitates cyber crime.
for example from the following nameservers:
198.251.81.49
Name Servers:
ns1.codehubhosting.com
ns2.codehubhosting.com
For example fake bank scams, fake logistics scams, crypto wallet phishing scams.
CRYPTO WALLET PHISHING SCAM
---
backedupweb3quantumledger.com
FAKE BANK SCAMS
----
vdtrb.com
suregoldtrbk.com
bancotrb.com
uniglotrans.com
globmerchantb.com
FAKE INVESTMENT SCAMS
----
radiknoxcorporations.com
FAKE LOGISTICS SCAMS
----
instanpan-logistics.com
show less
This is being used to host 419 advanced fee fraud scam sites by Daniel Ajayi who is a Nigerian 419 a ...
show moreThis is being used to host 419 advanced fee fraud scam sites by Daniel Ajayi who is a Nigerian 419 advanced fee fraud scam facilitator and prolific fraudster who runs a "DMCA ignoring" hosting company foolishly thinking that will prevent him from getting his scam sites taken down.
On the following nameservers
dmca1.weboraclehost.com
dmca2.weboraclehost.com
Some of the scam sites include fake bank scams, fake investment scams and fake logistics scams, here are some of the scam sites they host:
FAKE BANK SCAMS:
destandardcpt.com
firstcreditunionbk.com
flowreservebank.com
------
FAKE INVESTMENT SCAMS:
globalmarketwave.com
ironviewholdings.com
remlapinv.com
crestinvest.org
cvtrds.org
trd-techcapital.com
------
FAKE LOGISTICS SCAMS:
sprintships.com
courierderoyal.com
mightywayexpress.com
------
CRYPTO WALLET PHISHING SCAMS:
w3auth.com (https://w3auth[.]com/connect.html)
show less
This is being used by Nigerian 419 advanced fee fraud scammers to host scam sites
dns1.dragoserve ...
show moreThis is being used by Nigerian 419 advanced fee fraud scammers to host scam sites
dns1.dragoservers.com
dns2.dragoservers.com
Also used by danbaba AKA Daniel Ajayi (https://danielajayi.com/ and https://ng.linkedin.com/in/daniel-ajayi01 and https://www.facebook.com/daniel.ajayi.7524/) who is a fraud facilitator from Nigeria using the following nameservers:
dns1.elitecloudserver.com
dns2.elitecloudserver.com
Some of the scam sites that are being hosted here:
crownpointfinance.online
exironix.store
kryptaplus.org
pepperstonetrades.com
securegloba.com
skylinemcp.org
vaultcoinfinance.com
show less
Being used to host 419 advanced fee fraud scams, such as fake bank scams
[email protected] and ...
show moreBeing used to host 419 advanced fee fraud scams, such as fake bank scams
[email protected] and [email protected] AKA Jonathan Amenyah is a scammer from Accra, Ghana who uses various fake names such as Martin Odoi
he has been doing this for 10 years at this point.
Some of the scam sites hosted here:
zenithfinancialholdings.com
icbtrustfinance.com
maxcryptoinvest.com
wintrustinvestment.org
apexpremiumtrustbank.com
republictrustsbank.com
show less
This belongs to Nigerian 419 fraud facilitators who provide hosting for other Nigerian 419 scammers ...
show moreThis belongs to Nigerian 419 fraud facilitators who provide hosting for other Nigerian 419 scammers (Server Managed by Hostseo Networks - hostseo.com who are part of centriohost.com - who also facilitate fraud.)
51.68.132.245
using the following nameservers
ns1.pmasteck.com
ns2.pmasteck.com
ns1.zanohosting.com
ns2.zanohosting.com
They offer DMCA ignored hosting, which just means that they allow 419 scam sites, such as fake bank scams, fake investment scams, fake logsistics scams etc all of which are used in 419 advanced fee fraud scamming by Nigerian scammers.
You can see the scam sites here:
https://dns.coffee/nameservers/ns1.pmasteck.com
https://dns.coffee/nameservers/ns1.zanohosting.com
These sites have been set up by Nigerian scammers for the sole purpose of committing advanced fee fraud
show less
This is being used by lytehosting.com - who are a prolific hoster of Nigerian 419 advanced fee fraud ...
show moreThis is being used by lytehosting.com - who are a prolific hoster of Nigerian 419 advanced fee fraud scam websites, they host 1000s of scam sites, they are facilitating fraud on a massive scale.
163.61.188.222
Name Servers:
dns1.lytehosting.com
dns2.lytehosting.com
dns3.lytehosting.com
dns4.lytehosting.com
Some of the scam sites they host:
grandoption.org
equinoxnudgecun.com
vertextb.online
digital-capitalunify.click
rivercrestalliancebk.com
nextgenprocapsol.com
tlsautosmotives.com
spakaspipstrade.online
cortelazcu.com
fastcointradepro.xyz
247flevest.com
visionarywealth-partners.com
mihcapitalpartners.com
swifthivebk.com
stexint-bank.online
imperiumtrust.online
financialapexpartner.com
axiochain.com
strata-vest.com
bridgewayshares.com
trustoptima.com
flax-glow.org
teslastocks-inc.net
speedfxpro.com
firstucb.us
uniongroupinc.com
climbcapital.online
earners-fund.com
luminatrusts.com
crescentcommercetrust.com
astleinvestment.com
show less
This is a server owned by anitahost.com (nameservers: ns1.anitahost.com ns2.anitahost.com and ns1.se ...
show moreThis is a server owned by anitahost.com (nameservers: ns1.anitahost.com ns2.anitahost.com and ns1.serverdns.org ns2.serverdns.org) who are Nigerian 419 advanced fee fraud scam facilitator who allow 419 scams to be hosted on servers that they rent. There are hundreds of scam sites hosted on this IP address.
161.97.121.66
All these scam sites have been created by Nigerian scammers for the sole purpose of committing advanced fee fraud.
Some of scam sites here:
accescryptotrader[.]com | fake investment scam
accordsminers[.]com | fake investment scam
activetradeoptions[.]info | fake investment scam
acuityquoin[.]com | fake bank scam
aetoscapitalstrade[.]com | fake investment scam
afnextrustfirm[.]com | fake bank scam
albos[.]info | fake bank scam
algonestcapital[.]com | fake investment scam
alliancecap[.]org | fake investment scam
alphaeternity[.]org | fake investment scam
anchovest[.]com | fake investment scam
annualexpert[.]com | fake investment scam
show less
This is tela-host.com (via HostBet who also facilitate fraud by ignoring and not acting on abuse com ...
show moreThis is tela-host.com (via HostBet who also facilitate fraud by ignoring and not acting on abuse complaints) who are Nigerian 419 advanced fee fraud scam facilitators, running the following name servers for their scam sites:
IP: 86.107.77.205
Name Servers:
ns1.tela-host.com
ns1a.tela-host.com
ns1b.tela-host.com
ns1c.tela-host.com
ns1d.tela-host.com
ns2d.tela-host.com
ns5.tela-host.com
ns6.tela-host.com
Here is just some of the scam sites that they host:
thetatrade.org | fake investment scam
sterlingtrustbkn.com | fake bank scam
burim-trade.com | fake bank scam
scotlandfb.com | fake bank scam
firstprimecitizen.org | fake bank scam
unityhorizonco.com | fake bank scam
show less
This is being used for 419 advanced fee fraud scam facilitation by Nigerian scammers.
Using Names ...
show moreThis is being used for 419 advanced fee fraud scam facilitation by Nigerian scammers.
Using Nameserver: ns1.ultcloudservers.com (previously ns1.utcloudsns.space - they are moving all scam sites over to new NS after being kicked off their old IP)
144.217.254.236
here is a list of some of the scam sites that they host:
fake investment scam:
--
momentumcapitalindex.org
parabolicindicies.org
profitcrest.org
apexgmarket.live
dfpmarket.live
globaltradeinnovation.live
millionairesignals.live
trademorefx.live
concrete-trade.org
uphashexpert.org
utilityfxsignal.us
capitalrise.company
blusvault.live
tradexorbit.live
tslaautostcks.online
clearbrooktrading.org
earnfromhomesidehustles.org
eliteautotrade.org
fake logistics scam:
--
unfd.email
gedc.live
allendeliveryservice.org
brith-shippings.org
eagleparcelexpress.org
crypto recovery scam: robbin-hood.org
fake bank scams:
--
globalliumtrust.com
talvio.live
pinnacles-crditunion.online
show less
Nigerian 419 fraud facilitators ifast.host are using 140.233.190.99 to host 419 advanced fee fraud s ...
show moreNigerian 419 fraud facilitators ifast.host are using 140.233.190.99 to host 419 advanced fee fraud scam sites.
Name Servers:
ns3.ifast.host
ns4.ifast.host
Name Servers:
ns1.beesengine.co
ns2.beesengine.co
Note that these are all variants of the 419 advanced fee fraud scam used to scam people. Clearly this is fraud facilitation
247altcoinglobaltrading.com | fake investment scam
accessglobalfinance.com | fake bank scam
asbplc.com | fake bank scam
autoprofitx.ltd | fake investment scam
bluevault-trust.com | fake bank scam
boxvaultelite.top | fake bank scam
capitalrisefin.com | fake bank scam
credisbnk.com | fake bank scam
dcprivate.website | fake logistics scam
dominionfxhub.art | investment scam
equiwave.top | fake investment scam
expressconceptfx.com | fake investment scam
fastentrade.com | fake investment scam
fidelityhedges.com | fake investment scam
firstheritagecrest.com | fake bank scam
forthdelivery.com | fake logistics scam
frugalcrestonline.com | fake bank scam
show less
Nigerian 419 fraud facilitators hostwatt.com and weboraclehost.com are using 23.94.190.68 to host 41 ...
show moreNigerian 419 fraud facilitators hostwatt.com and weboraclehost.com are using 23.94.190.68 to host 419 advanced fee fraud scam sites.
Hostwatt mentions this on their website:
"Offshore DMCA Ignored Shared Hosting
✔️Perfect Hosting for Crypto, Forex, Trading, Finance, Investment, Shipping & Logistics Websites. No termination.✔️"
Note that these are all variants of the 419 advanced fee fraud scam used to scam people. Clearly this is fraud facilitation.
Nameservers:
dmca1.weboraclehost.com
dmca2.weboraclehost.com
shield1.hostwatt.com
shield2.hostwatt.com
Some of the scam sites:
saxonsavingsunion.com
northprimecapital.com
recessbk.com
equinoralcub.com
transfer-co-operative.com
excelion-finance.com
atlast.capital
bamcobk.com
capedgeunion.com
heritagetrustsunionfund.com
recoveryblockx.com
affinmachantgroup.com
pealbulls.com
rubyandexfb.com
apexhubasset.com
appex-asset.pro
vaultiqbk.com
xmusk-e.com
cvtrds.com
easy-coin.pro
ferrovialshares.com
boostfxcap.com
newdbk.org
show less
These Nigerian 419 advanced fee fraud facilitators using the follow nameservers: (was previously usi ...
show moreThese Nigerian 419 advanced fee fraud facilitators using the follow nameservers: (was previously using bub1.gennetworks.in as a nameserver)
Name Servers:
vivid1.gfireservers.in
vivid2.gfireservers.in
216.244.83.203
Some of the scam sites:
oryntobank.online | fake bank scam
primechaseglobal.com | fake bank scam
stockvestglobal.com | fake investment scam
vertex-era.com | fake investment scam
https://dns.coffee/nameservers/vivid1.gfireservers.in
They are in the process of migrating their scam sites to this new IP.
show less
This scam site - truewallet[.]ac tries to download a highly obfuscation .js script - https://truewal ...
show moreThis scam site - truewallet[.]ac tries to download a highly obfuscation .js script - https://truewallet[.]ac/downloads/ipoaqu.js which is malicious and will likely try and download and run info stealers on the victims machine
On IP: 188.137.178.252
188-137-178-252.poland.vps.ac
ISP Podaon SIA
Usage Type Data Center/Web Hosting/Transit
ASN Unknown
Hostname(s) 188-137-178-252.poland.vps.ac
Domain Name podaon.com
Country 🇵🇱 Poland
City Poznan, Greater Poland
show less
Exploited Host
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.