Scam Number:
Domain Used: myfix.biz
Extra Info:
@dawirad2 can you be more precise and provide more information?
Domain Name: myfix.biz
Registrar URL: publicdomainregistry.com
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Registrant State/Province: West Bengal
Registrant Country: IN
Refund pages are on aqua-amrit.com :
Domain Name: AQUA-AMRIT.COM
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: www.publicdomainregistry.com
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrant Name: Abdur Raquib
Registrant Organization: webprotech
Registrant Street: 46, Musalman Para Lane
Registrant City: Berhampore
Registrant State/Province: West Bengal
Registrant Postal Code: 742101
Registrant Country: IN
Registrant Phone: +91.9475522688
Registrant Email: [email protected]
@MKHNT Awesome catch!
Domain info for aqua-amrit.com
Name: Abdur Raquib
Organization: webprotech
Street: 46, Musalman Para Lane
City: Berhampore
State: West Bengal
Postal Code: 742101
Country: IN
Phone: +91 9475522688
Email: [email protected]
Sites containing malicious files for download / phishing forms:
- hxxps://aqua-amrit.com/refund/chsec.php
- hxxps://aqua-amrit.com/refund/chsemm.php
- hxxps://aqua-amrit.com/eA385HreJslYTU.php
- hxxps://aqua-amrit.com/refunder.exe (Virustotal scan: VirusTotal)
- hxxps://aqua-amrit.com/refund/amaznc.php
- hxxps://aqua-amrit.com/refund/amaznmm.php
Virustotal analysis of the malicious refunder executable shows it contacts another domain estate101.biz, whois hidden but shows West Bengal, India.
Domain info for infowebtek.com,
which is the name server for the above aqua-amrit.com, probably just their web host:
Name: Ajay Jain
Organization: OBizTek Group
Street: OBizTek Group
City: Nashik
State: Maharashtra
Postal Code: 422005
Country: IN
Phone: +91 9503021718
Email: [email protected]
#2, Namita , Plot No 36, D’souza Colony, Nashik, Maharashtra 422005, Indien
https://goo.gl/maps/6qiWpp8gR4BH55mh6
encryption 101
By the way: Welcome to the community!
They should be using https://www.cloudns.net/ to host their website.
https://who.is/whois/myfix.biz
See today’s Pierogi video. same scammers myfix.biz (Kolkata)
Domain Name: VIRALFASHIONISTA.COM
Registry Domain ID: 2357757035_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: www.publicdomainregistry.com
Updated Date: 2020-02-06T01:18:50Z
Creation Date: 2019-02-03T03:45:49Z
Registrar Registration Expiration Date: 2021-02-03T03:45:49Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Domain Status: clientTransferProhibited EPP Status Codes | What Do They Mean, and Why Should I Know? - ICANN
Registry Registrant ID: Not Available From Registry
Registrant Name: Abdur Raquib
Registrant Organization: webprotech
Registrant Street: 46, Musalman Para Lane
Registrant City: Berhampore
Registrant State/Province: West Bengal
Registrant Postal Code: 742101
Registrant Country: IN
Registrant Phone: +91.9475522688
also
Web Pro Tech
Shree Tower, No. 2, RAA- 36, VIP Road, Raghunathpur,
Kolkata, West Bengal (India)
Abdur Raquib (CEO)
Norton scam 801-948-5621
Well I was watching it and around the 42 minute mark is where the myfix.biz scamming began, but while watching, it suddenly went to private video, so it is no longer available.
Ah, perhaps he realized that the domain name was left in there.
Similar experience. I was able to watch partial stream.
They also have this domain:
aqua-amrit.com
https://aqua-amrit.com/eA385HreJslYTU.php
Abdur Raquib
webprotech
46, Musalman Para Lane,
Berhampore, West Bengal, 742101, in
Norton refund scam $899.99
iqexpertit.com Abdur Raquib
Street:
144A Shyambazar Kolkata
City:
Kolkata
State:
West Bengal
Postal Code:
700007
Country:
IN
Phone:
+91.9875452545
form https://iqexpertit.com/refund/nortc.php
8899.99USD is credited in account of cc with account number 3333 and Transaction ID as BDBL02R-XXXXXX.
Please check your bank account for the 6-digit verification code.
Still active