Here's a phishing page you guys can destroy

Hi Guys,
An update on this phone number:
I fell for their trick today. They have a fake profile on Tinder with a telegram username shown. You start chatting with a “girl” pretending to live in your city which invite you to go to the theater. They are running a fake theater tickets selling service at https://teatro-italiano.com/, they pretend to sell tickets for italian theaters shows through a paypal donation but it is clearly fake. Btw the address and phone number shown on whois are related to REGUS which is a coworking company, so they clearly rented a virtual office at the Regus building in Iceland but they are russian (they sent me mocking gifs in russian when I releaved the scam to them).

2 Mi Piace

Okay. What username… What number… Something about your link…

1 Mi Piace

I don’t remember the Tinder username but the telegram username is Octaviolz.
I got deeper into this stuff and found that they own the following domains:
spain-opera.art
theaterderneuzeit.de
german-theatre.de
teatro-italiano.com
teatro-italiano.it
I also found their server ip and that they use FastPanel, here is their login page: https://193.233.18.148:8888/

1 Mi Piace

Just found another site they are using to scam people. But shopify is protecting them. The site is FabledStitches.com. Same number +354.4212434 most of the info is protected for “privacy” but whatever. Just a heads up

I got scammed by him 2 months ago for THOUSANDS cause he tricked me so damn well, today the banks dispute answer came negative, I am willing to do anything for anyone who finds him, any real info about him will be useful

1 Mi Piace

I have an update, one of their scam website use to steal credit cards information.
I am a developer I work everyday with these things, I could see where these guys send information of the stolen bank info.
I studied all the payment process and they made an API call to a specificic domain where they send all the stolen data.

POST https://api.okallpay.com/prod/api/v1/GetPayCardUrl

Then I searched the domain of this strange url, if you search api.okallpay.com the website redirects you to a fake paypal admin login page.
I believe they store all the stolen data on this website.
They stole my father’s credit card and phoned him to steal him more money, they speak italian and the accent is from the south, so I think this is a large criminal group based in south of Italy, i’m not sure of course but I think this could be italian mafia.

I don’t have much time but if I have updates, i’ll share that.

Does anybody has a new update on this? My mom got contacted trough a dating site and a guy is pretending to run a big company in solar panels. He is coming up with the strangest stories and I don’t trust it.

When researching his website (https://dolfenergy.com/) on Whois, the same information is visible as mentioned in earlier post.

I am getting pretty concerned at this point.

2 Mi Piace

Any more info you could share? Maybe name, age, location or some of the stories he told? In the same boat, ended up on this page, know I’m lot crazy now to kno something was up! Wonder if it’s same person or a team

Hi Alejandra,

He says his name is Dolf Savvas and is originally from Cyprus. He lives in London but also has a house in Amsterdam.

He is working on a big solar project in Ukraine?? But always is coming up with these strange stories that they became hostage or ended up in hospital etc.

@Alejandra can you share a bit more on your experience?

Hi Bubke,

Dolf also contacted me through a site and request money for his project in Ukraine.

I didn’t gave him anything.

How did your story ended?

They’re running a financial scam operation from quantumaiplatform.com and inmarkets.io leveraging botvana.net (which seems legitimate, perhaps they make people use fake accounts on it).

Hi everyone, I got contacted by him as well, he claims he is a widower since 9 years, lives in London and border of Belgium, is now currently in Ukraine for the Solar Panel Project, did not ask for money yet, but texted me that he was attacked and lost his mobile and wristwatch… I am wondering - if you click on the photos of his website, who this is. Anyway, be carefull!

They also have an open Job posting on SmartRecruiters, their Domain is oranjeborbv.com

https://jobs.smartrecruiters.com/JobsForHumanity/744000088714275-remote-customer-support-representative

Seems like these guys want to do money laundering or something else.

Unfortunately this stories is still going on. My mother doesn’t listen to me or anyone else. It is getting to the point her social life is almost gone and she is heavily influenced by this guy.

@eri1972 how were you contacted?

@ivy how did you get in touch with him?

My mom told me a similar story that he was attacked and stabbed but that is already some months ago…very suspicious this!

Apparently he now sold his company!