"Unpaid toll" scam domains SEIZED, scammers remain active

MAJOR UPDATE: The domains nyaccounttoll.com and tollwebmail518ny.com have been SEIZED by the District Attorney’s Office of Kings County, New York and an associated domain, geaupass.org, was SEIZED by the Kenner, Louisiana Police Department and the United States Dept. of Homeland Security. The scammers, however, are still active under a Russian IP Address.

Additionally, the domain http://tollbymailsnyinvoice.com/ was seized on February 20, 2025.

https://www.nola.com/news/crime_police/geauxpass-toll-tag-scam-website-text-message/article_5a16ac0c-7b7e-11ef-8d71-937beb17e721.html

Popup - This Website Has Been Seized

Registered by Sefir Lemone of Foody in Gatineau, Quebec, Canada via PublicDomainRegistry on July 1, 2024 - Whois nyaccounttoll.com

The text message falsely claims I was recently charged for driving my nonexistent vehicle on a state toll road, urging me to pay the amount or risk a late fee of $34.75 by going to a sketchy website, which falsely claims I owe $125. But in order to pay, I must provide my

  • Full name
  • Birthday
  • Home address
  • Email address
  • Phone number
  • Credit card details

Associated Email Address - [email protected]

Associated IP Address - 45.8.92.141 :us: (urlscan.io)/ :bulgaria: (whatismyipaddress.com)

OTHER DOMAINS HOSTED ON THE IP ADDRESS:

2 Likes

NEW POPUP - tollbymails.com

Registered in Colorado via Nicenic International on October 14, 2024 - Whois tollbymails.com

Associated IP Address - 82.147.84.221 :ru:

OTHER DOMAINS HOSTED ON THE IP ADDRESS:

2 Likes

NEW POPUP - https://iltags.com/

Registered in Alaska via NiceNic International on November 29, 2024 - Whois iltags.com

Associated IP Address - 195.211.124.156 :netherlands: / :hong_kong: (Also hosts iltollw.com)

2 Likes

NEW DOMAIN: https://sheilaa.loan/pay/#/

Registered in Hangzhou, China via Dominet (HK) Limited on January 27, 2025 - Whois sheilaa.loan

The website can only be accessed on mobile devices, otherwise users will be redirected to google.com

2 Likes

ANOTHER MAJOR UPDATE: The domain http://tollbymailsnyinvoice.com/ was just seized by the King’s County District Attorney.

2 Likes