This is one very well done and therefore scary as hell/

Scam Number: n/a
Scammer’s Website or Email: https://cpp-assessment.com/
Additional information about this scam: Text message from Service Canada. All the phone numbers are correct but the website link is the scam.
Doing a simple online whois of the address its registered to:
GMO INTERNET, INC.
Whois Server
whois.discount-domain.com
Referral URL
http://www.onamae.com
Name
Richie Marksman (NO GOOGLE HITS FOR THIS NAME)
Organization*
Not Applicable
Address
7 First St SW
City
Leesburg
State / Province
Virginia
Postal Code
20175
Country
US
Phone
+1.8045555567 (VERIFIED FALSE NUMBER)

The website looks really good. Asks for all your personal information, has you loginto your bank (fake as random numbers work) again, nice looking page. Asks everything…even the bank machine PIN

The only real info i put in was a voip phone number (looking for a callback) and have already had someone call it saying they had a missed call from this number.

How do I battle this one ? It looks really really good.

Please be sure to write out important info so that our content is accessible to screen readers!
UPDATE: HTTP://gmo.jp and http://www.onamae.com are both chinese websites.

NUMBER IN IMAGE IS REAL. ITS THE WEBSITE THAT IS SCAMMING.

NEED HELP
Not sure how to mess with this one.
Have just been entering random information over and over again for now.
Need some legal advice…cause i think its probably illegal.
Using a macro recorder to enter the same information over and over again would be bad correct ?

UPDATE: used urlscan to report this domain to everyone i can.
also have entered about 10 false information ones now. The last one with the details they gave on the domain registration (hopefully they notice and get freaked out)

SWEET
Just went to enter some more information and get:

Hostwinds
message for the webmaster
please contact hostwinds support department.

My hats off to Hostwinds.
I reported this only about 10 minutes ago and they have already dealt with it.

UPDATE: the actual domain name has now been removed. Its now up for grabs :slight_smile: