Fake banks, couriers, law firms, escrow and other fake sites used in scams.
by cdgerard Tue Jan 07, 2014 12:37 am
Hello...

I just found out that my website http://www.wineshopasia.com has another URL (which I don't own) being mapped/masked to it!

http://www.wineasia.net are the culprits - if you go to this URL, it will take you to my website, and every page you click on thereafter still has wineasia.net as the URL, ie: it's cloaking the entire site (i think).

I'm guessing these guys are aiming to steal credit card info off customers who are checking out?

Can anyone help please?!
I've since complained to wineasia.net's registrants.

Thanks!
Chris
Advertisement

by Mumbles Tue Jan 07, 2014 12:51 am
Contact your own webhost and ask how it can be fixed.

“If a man is called to be a street sweeper, he should sweep streets even as a Michaelangelo painted, or Beethoven composed music or Shakespeare wrote poetry. He should sweep streets so well ...”

Martin Luther King Jr.
by Jillian Tue Jan 07, 2014 1:38 am
Hi cdgerard, and welcome here. I'm sorry you're having to go through this!

This other site is loading your content. Their page is just a frame, with the coding set up to copy and load the content of your site. Here is the info on the copycat site: http://whois.domaintools.com/wineasia.net

We will investigate and report the site. Please do continue to report it yourself, to their hoster and registrar, which can be found in the domaintools info I linked.

Have you sent a payment to a scammer with Western Union and now realize it's a scam? If the payment has not been picked up, you can cancel it immediately! 1-800-448-1492

Follow ScamWarners on Twitter: http://twitter.com/ScamWarners
by vonpaso xlura Tue Jan 07, 2014 1:47 am
It's a frame site. (You've been framed! :)) That means that wineasia.net just draws a rectangle and brings up wineshopasia.com inside it. When you click on a link, it brings up the page of wineshopasia.com, but the URL on top of the browser window is still wineasia.net.

Possibly this is being used as an email-only domain. Maybe someone is advertising a fake job that pretends to be at your shop.

Here's the whois record:
[whois.namesilo.com]
http://www.namesilo.com


Domain Name: wineasia.net
Created On: 2008-02-28
Expiration Date: 2014-02-28


Name Server: ns2.netfirms.com
Name Server: ns1.netfirms.com


Registrant Name: Domain Administrator See PrivacyGuardian.org
Registrant Organization: PrivacyGuardian.org
Registrant Street1: 1928 E. Highland Ave. Ste F104
Registrant Street2: PMB# 255
Registrant City: Phoenix
Registrant State/Province: Arizona
Registrant Postal Code: 85016
Registrant Country: US
Registrant Phone: 347-871-7726
Registrant Email: [email protected]


Admin Name: Domain Administrator See PrivacyGuardian.org
Admin Organization: PrivacyGuardian.org
Admin Street1: 1928 E. Highland Ave. Ste F104
Admin Street2: PMB# 255
Admin City: Phoenix
Admin State/Province: Arizona
Admin Postal Code: 85016
Admin Country: US
Admin Phone: 347-871-7726
Admin Email: [email protected]


Billing Name: Domain Administrator See PrivacyGuardian.org
Billing Organization: PrivacyGuardian.org
Billing Street1: 1928 E. Highland Ave. Ste F104
Billing Street2: PMB# 255
Billing City: Phoenix
Billing State/Province: Arizona
Billing Postal Code: 85016
Billing Country: US
Billing Phone: 347-871-7726
Billing Email: [email protected]


Tech Name: Domain Administrator See PrivacyGuardian.org
Tech Organization: PrivacyGuardian.org
Tech Street1: 1928 E. Highland Ave. Ste F104
Tech Street2: PMB# 255
Tech City: Phoenix
Tech State/Province: Arizona
Tech Postal Code: 85016
Tech Country: US
Tech Phone: 347-871-7726
Tech Email: [email protected]

IP addresses:
$ host wineasia.net
wineasia.net has address 66.96.160.147 EIG
wineasia.net mail is handled by 30 mx.wineasia.net.
$ host mx.wineasia.net
mx.wineasia.net has address 66.96.142.52
mx.wineasia.net has address 66.96.142.50
mx.wineasia.net has address 66.96.142.51

I suggest you ask Namesilo, Netfirms, and EIG ([email protected]) to investigate. I wouldn't report it myself, as six-year domains are usually not fraudulent and we don't have evidence of fraudulent email use, but you have good reason to be suspicious: it's framing your site, and it has a hidden registrant.

ETA: Jillian, that contact address is the OP's; it's on the content, which is his site. The frame site has no content of its own.
Admin edit: Thank you, temporary brain malfunction. I have edited my post to remove the info -Jillian

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
by cdgerard Tue Jan 07, 2014 2:34 am
Hey everyone,

Thanks very much for your comments and insight to this issue!

You all rock!

Who is online

Users browsing this forum: ClaudeBot and 14 guests