www.glowinner.net – another Globacom Scam website. BEWARE

A commenter on this post just informed me about a new scam website.

The SCAM / FAKE website is www.glowinner.net. It is patterned after Globacom Nigeria’s website located at http://www.gloworld.com/. FYI, www.gloworld.com / Globacom Nigeria Ltd is a Nigerian Owned Telecommunications company which provides GSM and GPRS-based mobile services locally and across West Africa.

Here is a screenshot of the scam site:

gloscam1

here are infos I just gathered:

1) URL: http://www.glowinner.net has the IP address 174.36.134.200 with the following info:

174.36.134.200
Record Type: IP Address

SoftLayer Technologies Inc. SOFTLAYER-NETBLOCK-4-7 (NET-174-36-0-0-1)
                                  174.36.0.0 – 174.37.255.255
Web4Africa NET-174-36-134-200 (NET-174-36-134-200-1)
                                  174.36.134.200 – 174.36.134.207

source: click here

2) URL: http://www.glowinner.net redirects to http://72.55.156.239/~gloverif/online/

 

 

  • The ‘Enter your phone number’ input box at the bottom of the page is an attempt by the scammers to gather phone numbers which could be used for a variety of fraudulent purposes. Tricks pulled before include:

gloscam2

a) text messages asking for credit so that you would receive information about the promo for which you have been considered.

b) further scam text messages asking for various business connections etc.

And I hope that the owners of www.glowinner.net have not hacked into / have access into Globacom’s database of customers through second/third party contacts, especially for registered GLO-phone numbers.

3) Funny enough, the domain: www.glowinner.net has Web4Africa as registrar. More about web4africa here: its a Ghanaian/Nigerian Web Hosting company.

Here is the registration info.

Registration Service Provided By: WEB4AFRICA
Contact: +233.21921912
Website: http://www.web4africa.net

Web4Africa offers affordable domain name registration and reliable web hosting services to
clients worldwide. We accept Alertpay, Paypal, Moneybookers, Liberty Reserve, credit/debit
cards & more! Domain names from only $8.5/yr!
Please report abuse issues to abuse[at]web4africa.net

Domain Name: GLOWINNER.NET

Registrant:
    None
    Biggy Smalls        (kelvinluv2004@yahoo.com)
    34 uwabu pawpaw road
    surulere
    surulere,23401
    NG
    Tel. +234.348064079547

Creation Date: 05-May-2009 
Expiration Date: 05-May-2010

Domain servers in listed order:
    ns2.web4africa.com
    ns1.web4africa.com

Administrative Contact:
    None
    Biggy Smalls        (kelvinluv2004@yahoo.com)
    34 uwabu pawpaw road
    surulere
    surulere,23401
    NG
    Tel. +234.348064079547

Technical Contact:
    None
    Biggy Smalls        (kelvinluv2004@yahoo.com)
    34 uwabu pawpaw road
    surulere
    surulere,23401
    NG
    Tel. +234.348064079547

Billing Contact:
    None
    Biggy Smalls        (kelvinluv2004@yahoo.com)
    34 uwabu pawpaw road
    surulere
    surulere,23401
    NG
    Tel. +234.348064079547

Status:ACTIVE

The data in this whois database is provided to you for information purposes only,
that is, to assist you in obtaining information about or related
to a domain name registration record. We make this information available “as is”,
and do not guarantee its accuracy. By submitting a whois query, you agree that you will
use this data only for lawful purposes and that, under no circumstances will you use this
data to:
(1) enable high volume, automated, electronic processes that stress
or load this whois database system providing you this information; or
(2) allow, enable, or otherwise support the transmission of mass unsolicited,
commercial advertising or solicitations via direct mail, electronic mail, or by telephone.
The compilation, repackaging, dissemination or other use of this data is expressly
prohibited without
prior written consent from us. The Registrar of record is Directi Internet Solutions Pvt.
Ltd. d/b/a PublicDomainRegistry.com.
We reserve the right to modify these terms at any time.
By submitting this query, you agree to abide by these terms.

source: click here

I used domain tools to gather information about the IP address: 72.55.156.239

IP Information for 72.55.156.239
IP Location:   Canada Iweb Dedicated Cl 
Resolve Host:  server12.nvhserver.com 
IP Address:  72.55.156.239      
Reverse IP:  73 other sites hosted on this server. 
Blacklist Status:  Clear 

Whois Record
OrgName:    iWeb Technologies Inc.
OrgID:      GIT-20
Address:    20, place du Commerce
City:       Montreal
StateProv:  QC
PostalCode: H3E-1Z6
Country:    CA

NetRange:   72.55.128.0 – 72.55.191.255
CIDR:       72.55.128.0/18
OriginAS:   AS32613
NetName:    IWEB-BLK-03
NetHandle:  NET-72-55-128-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.IWEB-HOSTING.COM
NameServer: NS2.IWEB-HOSTING.COM
Comment:   
RegDate:    2006-09-28
Updated:    2008-04-01

OrgAbuseHandle: ABUSE1906-ARIN
OrgAbuseName:   Abuse Coordinator
OrgAbusePhone:  +1-514-286-4242
OrgAbuseEmail: 

OrgNOCHandle: NETWO2356-ARIN
OrgNOCName:   Network Administrator
OrgNOCPhone:  +1-514-286-4242
OrgNOCEmail: 

OrgTechHandle: NETWO2356-ARIN
OrgTechName:   Network Administrator
OrgTechPhone:  +1-514-286-4242
OrgTechEmail: 

CustName:   iWeb Dedicated CL
Address:    5945, Couture
City:       St-Leonard
StateProv:  QC
PostalCode: H1P-1A8
Country:    CA
RegDate:    2008-03-28
Updated:    2008-03-28

NetRange:   72.55.156.224 – 72.55.156.255
CIDR:       72.55.156.224/27
OriginAS:   AS32613
NetName:    IWEB-CL-T062-02SH
NetHandle:  NET-72-55-156-224-1
Parent:     NET-72-55-128-0-1
NetType:    Reassigned
Comment:   
RegDate:    2008-03-28
Updated:    2008-03-28

OrgAbuseHandle: ABUSE1906-ARIN
OrgAbuseName:   Abuse Coordinator
OrgAbusePhone:  +1-514-286-4242
OrgAbuseEmail: 

OrgNOCHandle: NETWO2356-ARIN
OrgNOCName:   Network Administrator
OrgNOCPhone:  +1-514-286-4242
OrgNOCEmail: 

OrgTechHandle: NETWO2356-ARIN
OrgTechName:   Network Administrator
OrgTechPhone:  +1-514-286-4242

source: click here

Conclusion: the scammer registered his domain name with Web4Africa and redirects to an IP/server in Canada, hoping to gather phone-numbers of Nigerians in Nigeria and Scam them with Gloworld promo’s? wow, what an international merry-go-round. And I hope Canada Iweb is not another Nigerian owned………..

I believe this calls for the need for domain registrars to always do checkups on what domains registered by their companies are actually used for.

 

Dear Adama J. Adama, thanks for the info.

 

Dear readers:

BEWARE BEWARE BEWARE BEWARE BEWARE

 

Links:

Advertisements

15 responses

  1. I cannot find the means of contacting the one behind this website and thus have to post this here.

    The right thing to do when you notice a scam website is to alert the web hosting company, the domain registrar, and the law enforcement agency in the relevant country. The channel for contact Web4Africa Ltd is clearly stated in the WHOIS records you published above:

    Please report abuse issues to abuse[at]web4africa.net

    What impression were you creating by mentioning my name here. Can you answer that? It is absolutely irrelevant to mention my name in this context. It creates the wrong impression and I want you to remove my name immediately.

    You go public in this manner when you have reported and the web host refuses to take down the scam website. Web4Africa Ltd is not friendly to scammers.

  2. Dear naijatechtalk,

    What you have done here is unethical and improper.

    What was the point behind mentioning the name of the owner of Web4Africa? DId you contact Web4Africa about a scam site being hosted on their service before posting this?

    I understand your zeal in fighting scammers, but you went too far with this.

  3. @David

    dont take things too personal on this one brother.

    And what exactly did I say: that the owner of WebforAfrica.net is Mr. 123 who operates a weblog at desination456? That should not piss you off. I didn’t accuse you, did I. Besides you are a business man who put your name on your buisness, no problem with that.

    question: can you mention Microsoft without mentioning Bill-Gates, regardless of what you are talking about, whether in favor or not about the man and his buisness?

    Anyway, you definitely need to “always do checkups on what domains registered by their companies are actually used for.”

    anyway, for your info: I removed the one-liner.

    @Mr. Yomi,
    there is no other point I wanted to make, than to say that the owner of Web4Africa is Mr. David who has a weblog here and there. The problem is that you are reading a meaning to it – which I don’t mean to imply.

    Is it my responsibility to inform the WebHost of a scam site being hosted on their service? am I a staff or owner of the company?

    And why shouldn’t I post such information. Should we wait for another Nigerian/whoever to loose his fortunes?

    Lastly, why not just ask me if I have also informed Globacom HQ on the lagos Island that there is a scam website in their name as well – all before ‘posting this’?

    Grow up, its a small world.

  4. Naijatechtalk,

    Thank you. I’m sorry I “spoke”.

    Regards

  5. I’m glad to see fraudulent websites posted here. The more these scams are publicized, the more likely potential victims will find the posting and be alerted to the scam. As was already mentioned, the webhost for this site is responsive to reports of abuse. If you’d like to learn more about avenues for reporting fraudulent sites to hosters to get them shut down please visit http://www.aa419.org (Artists Against 419). Their site is dedicated to investigating, databasing and reporting fraudulent websites.

    My site, ScamWarners.com, works closely with aa419.org but we are dedicated to victim education and support. Any victims who find this post because they have searched the details of the scammer they have been targeted by can get free advice and support at http://www.ScamWarners.com.

  6. hi Jilian,

    thanks for the comment and for dropping by.

    Yes, one of the objectives of this weblog is to increase the awareness, so that a potential victim can get here before being duped.

    Nice work on your site.

    warm regards
    NTT Admin

  7. I found naijatechtalk.wordpress.com very informative. The article is professionally written and I feel like the author knows the subject very well. naijatechtalk.wordpress.com keep it that way.

  8. […] your phone number at Etisalat.com.ngThe Fall of Intercontinental Bank by Dayo Cokerwww.glowinner.net – another Globacom Scam website. BEWAREETISALAT 0809uchoose numbers redemption centers now openwhats up with m.yahoo.com and internet […]

  9. […] – WAECIranian American Alia Sabur – youngest Professor ever, Guinness Book of World Recordswww.glowinner.net – another Globacom Scam website. BEWAREHow do I visit the website of the PHCN office for my zone when I have no light in my house?FrEE […]

  10. Extremely wonderful post, very helpful information. Never believed I would find the tips I need right here. I have been hunting all over the net for a while now and had been starting to get irritated. Fortunately, I came across your blog and got precisely what I had been browsing for.

  11. Does anyone have something else on this? I’d would be interested to be told more regarding this as it’s all new to me

  12. pls i am just dey awaer of what is happen tell me about on my e-mail address sunday

  13. Yesterday found the sitewhere Band Saws For Sale are at affordable prices.

  14. I receive the message on 22-Nov-2010 10:54 :21 pm, From the number +919821900039. Congratulations me I have won N1Million,in on-going Glo Recharge & win promo. With activating code no:(0101) call 121 or help line:08059867848.

  15. If you want a Premium Minecraft Account check out this
    generator. With it you can generate a unique Minecraft Premium Account
    which no one else has! You can Download the Free Premium Minecraft Account Generator http:
    //www.minecraftfreakz.tk

    This paragraph provides clear idea in favor of the new people of blogging, that
    actually how to do running a blog.

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: