ADAROSS Scam Site list - 07/30/2019

[size=15]Messages here will be posted automatically as the automated system finds popups.[/size]

[b][size=12]Please do not @ADAROSS when replying[/size][/b]

Number: 844-516-4159

Link: http://hotelsbooking.live/4jhkjkljldfsfdsfdsfdsfdsfsdfdsf/

![](upload://1UOGXxg6SKaIVVbiXv0MMdEasZH.png)[img]https://cdn.discordapp.com/attachments/572954145628225537/605815404673106000/adaross_temp_scam_site_image_4.png[/img]
[size=10]there is a extremely small chance the image above is wrong but nothing else should be wrong with the information[/size]
[size=12]The following information was found by the automated system called ADAROSS (Automated Detection And Removal Of Scam Sites)[/size]

[COLOR=red][b][size=14]DISCLAIMER: we nor scammer.info are responsible for anything you do or have done with this information[/size][/b][/COLOR]
[b][size=12]Please do not @ADAROSS when replying[/size][/b]

Number: 844-516-4159

Link: http://www.hotelsbooking.live/2tyfffyfiiudsifduifdfbsdfbjdsfiu/

![](upload://1MMKuW3IBCBp3S9ui1iuhdj7XwC.png)[img]https://cdn.discordapp.com/attachments/572954145628225537/605818772552548356/adaross_temp_scam_site_image_1.png[/img]
[size=10]there is a extremely small chance the image above is wrong but nothing else should be wrong with the information[/size]
[size=12]The following information was found by the automated system called ADAROSS (Automated Detection And Removal Of Scam Sites)[/size]

[COLOR=red][b][size=14]DISCLAIMER: we nor scammer.info are responsible for anything you do or have done with this information[/size][/b][/COLOR]
[b][size=12]Please do not @ADAROSS when replying[/size][/b]

Number: 855-648-7444

Link: https://www.mapsupdatesus.com/1sdafgdfvsdert44bdsbfj2342x/

![](upload://blnxmjehkO5yWWbFJgjVkPKx9RF.png)[img]https://cdn.discordapp.com/attachments/572954145628225537/605829848627150911/adaross_temp_scam_site_image_1.png[/img]
[size=10]there is a extremely small chance the image above is wrong but nothing else should be wrong with the information[/size]
[size=12]The following information was found by the automated system called ADAROSS (Automated Detection And Removal Of Scam Sites)[/size]

[COLOR=red][b][size=14]DISCLAIMER: we nor scammer.info are responsible for anything you do or have done with this information[/size][/b][/COLOR]
[b][size=12]Please do not @ADAROSS when replying[/size][/b]

Number: 855-648-7444

Link: https://www.mapsupdatesus.com/cdfdxdhfdshfdsh43hffd/

![](upload://eK3vxzSe8hiG96W6sVio8pU55rr.png)[img]https://cdn.discordapp.com/attachments/572954145628225537/605829998124728331/adaross_temp_scam_site_image_4.png[/img]
[size=10]there is a extremely small chance the image above is wrong but nothing else should be wrong with the information[/size]
[size=12]The following information was found by the automated system called ADAROSS (Automated Detection And Removal Of Scam Sites)[/size]

[COLOR=red][b][size=14]DISCLAIMER: we nor scammer.info are responsible for anything you do or have done with this information[/size][/b][/COLOR]
[b][size=12]Please do not @ADAROSS when replying[/size][/b]

@ADAROSS#102079

Data drop, whoever is behind vultr.com and owns the ip and server is the one putting up the pages.

TECH SUPPORT SCAM PAGE DELIVERY SERVER AND DOMAIN!
Data collection date 7 30 2019
Tech support scam page Fake Alert 1A: Apple targeted
Screen captures of live attack:
https://ibb.co/BZ2gv5w
https://ibb.co/WGJwdsr

Attacking link: http://hotelsbooking.live/4jhkjkljldfsfdsfdsfdsfdsfsdfdsf/
Privacy enacted: Abuse goes to vultr.com
hotelsbooking.live AKA www.hotelsbooking.live
Via Trace Route: 155.138.192.57 Serving Ip is the same

<——————————————->
THERE ARE MULTIPLE SCAM PAGES ON THE SITE AND SERVER!
Attack happens upon visit to domain without being pointed to a directory.
http://hotelsbooking.live/1ffuiuluiiiuiuusdfdsfnmnjhhkjd/
SECONDARY DATA WILL BE LOGGED separately
Screens of another attacking site on the server, domain and directory.
https://ibb.co/BZHGBgf
https://ibb.co/dGwxB53
<——————————————->

Links to files in web directory: FIRST ATTACK PAGE
http://hotelsbooking.live/4jhkjkljldfsfdsfdsfdsfdsfsdfdsf/
http://hotelsbooking.live/4jhkjkljldfsfdsfdsfdsfdsfsdfdsf/index.css
http://hotelsbooking.live/4jhkjkljldfsfdsfdsfdsfdsfsdfdsf/style.min.css
http://hotelsbooking.live/4jhkjkljldfsfdsfdsfdsfdsfsdfdsf/apple.png
http://hotelsbooking.live/4jhkjkljldfsfdsfdsfdsfdsfsdfdsf/background.png
https://maxcdn.bootstrapcdn.com/bootstrap/3.4.0/js/bootstrap.min.js

DL Link to actual beep file not the empty one
http://hotelsbooking.live/4jhkjkljldfsfdsfdsfdsfdsfsdfdsf/beep.mp3

OH, LOOK WHO IS INVOLVED, AGAIN, GODADDY!

Registrar Abuse Contact Email: [email protected]

Registrar Abuse Contact Phone: +1.4806242505

To IP: 155.138.192.57

OrgTechName: Game Servers Abuse Department

OrgTechPhone: +1-973-849-0500

OrgTechEmail: [email protected]

Registrant Organization: Vultr Holdings Corporation

Registrant State/Province: New Jersey

Registrant Country: US

rgName: Vultr Holdings, LLC

OrgId: VHL-112

Address: 1033 Jefferson St NW

City: Atlanta

StateProv: GA

PostalCode: 30318

Country: US

RegDate: 2017-04-10

Updated: 2017-04-14

Ref: https://rdap.arin.net/registry/entity/VHL-112

OrgTechHandle: VULTR-ARIN

OrgTechName: Vultr Abuse

OrgTechPhone: +1-973-849-0500

OrgTechEmail: [email protected]

results for Vultr Holdings
There are 43 domains that matched this search query.
These are listed below:

Domain Name Creation Date Registrar
any.tg 2017-12-27
bancobrasil.gq 2017-12-26
chaintech.com.mt 2017-12-26
constantobjects.com 2019-02-15 GODADDY.COM, LLC
dev.tg 2017-12-27
developers.mv 2018-01-19
dfaemplea.es 2018-01-19
easypick.es 2017-12-26
elrincondemika.es 2017-12-26
exe.tg 2017-12-27
flexeatshop.gr 2017-12-26
fusspflege-nuernberg.gq 2017-12-26
fusspflege-zirndorf.gq 2017-12-26
git.tg 2017-12-27
hikingteam.gr 2017-12-26
hub-support.gq 2017-12-26
intego.rw 2017-12-26
kosmetikstudio-zirndorf.gq 2017-12-26
lilypond.es 2017-12-26
logicengineering.rw 2017-12-26
m-group.com.gr 2017-12-26
marigroup.ge 2017-12-26
mtgtr.com 2016-03-31 GODADDY.COM, LLC
now.tg 2017-12-27
ordredespharmaciens.sn 2017-12-26
pametamio.gr 2017-12-26
poker4c.es 2017-12-26
porn.tg 2017-12-27
pushpatex.gq 2018-01-19
quodlibetbadajoz.es 2017-12-26
resiasuncion.es 2017-12-26
selenahome.gr 2017-12-26
shije.al 2017-12-26
site.tg 2017-12-27
syrosaxizoume.gr 2017-12-26
thefishroom.gr 2017-12-27
vacaciones-cerdena.es 2017-12-26
vmfolk.com 2015-08-07 GODADDY.COM, LLC
vultr.kr DOTNAME KOREA CORP.(HTTP://WWW.DOTNAME.CO.KR)
vultr.net 2008-10-06 DOMAIN.COM, LLC
vultrobj.com 2019-02-15 GODADDY.COM, LLC
vultrobjects.com 2019-02-15 GODADDY.COM, LLC
zorei.es 2017-12-27

Hey there

I am looking to reach the maker of ADAROSS

I wonder if he would like to use my http://luminati.io Its residential ip’s which mean its not a datacenter proxies

If you always wondered why cant you just use a vpn its because the ip is based on a range ip which is a datacenter

Would like to reach GALIGUS but I cant find him anywhere