Beware: eurex-trade.com redirects to pishing site!

[moneyfreak]

Hi guys,

I've got a mail today from a guy who wanted to invest in "eurex-trade.com". Please stay away from that site! They are not only using fake monitoring images - no monitor lists them, they are als redirecting to a pishing site when you try to pay via LR. The pishing domain is: sci.libertyrescrve.com

You can check it yourself. Log in at eurex-trade.com with the following data:
User: barbarasalesch
Pass: barbarasalesch
Then try to deposit, but please DO NOT ENTER YOU REAL DATA!!!

Proof screenshots:




Please always check URL and green bar before you enter any information on a payment site.

[moneyfreak]

I have to say the registrar "publicdomainregistry" is unbelievable. I tried to get the domain shut down. Here is my mail conversation with them. I can not believe how they just ignore all facts in order to not loose a customer. Please read from bottom to top!

Hello,

Are you guys dumb or what? Of course you can not direct access it as this is prohibited per htaccess! I gave you login data and a tutorial on how to check this. Unbelievable….

AGAIN!
Login at "www.eurex-trade.com" using the name "barbarasalesch" and the password "barbarasalesch".
--> Click on "Make Deposit" on the right side
--> Enter any amount below, choose "Spend funds from LibertyReserve" and click on "Send".
--> Click on "Process"

Now you should be on the fake LR website. Check the domain name, it is http://sci.libertyrescrve.com/.

Regards,

C*********

================================================== ==

Von: "Publicdomainregistry.com Abuse Desk" <abuse@publicdomainregistry.com>
Antworten an: <abuse@publicdomainregistry.com>
Datum: Dienstag, 3. Juli 2012 12:18
An: <website@publicdomainregistry.com>
Betreff: [#NBH-861-40386]: PublicDomainRegistry Abuse Report Form for - www.libertyrescrve.com

Hello,

As per our investigation, we have not been able to find any instances of abuse on the domain name 'libertyrescrve.com'.

In addition, the URL http://sci.libertyrescrve.com/ resolves to a blank page.

If you still feel that the domain name is involved in any form of abuse you may update us with the active URL and we shall review your case.

Regards,
Abuse Mitigation Team
Public Domain Registry



Ticket Details
Ticket ID: NBH-861-40386
Status: Closed

================================================== ==

Hello,

I put 2 screenshots as attachment.
On the first one you can see the email where I got the complaint. On the second you can see the pushing site. If you want to check it out for yourself please try to deposit money on eurex-trade.com. Here is how you can do it:
Login at "www.eurex-trade.com" using the name "barbarasalesch" and the password "barbarasalesch".
--> Click on "Make Deposit" on the right side
--> Enter any amount below, choose "Spend funds from LibertyReserve" and click on "Send".
--> Click on "Process"

Now you should be on the fake LR website. Check the domain name, it is http://sci.libertyrescrve.com/.

Yours sincerely,

C**********

================================================== ==

Von: "Publicdomainregistry.com Abuse Desk" <abuse@publicdomainregistry.com>
Antworten an: <abuse@publicdomainregistry.com>
Datum: Montag, 2. Juli 2012 16:14
An: C********* <info@hyip-pulse.com>
Betreff: [~NBH-861-40386]: PublicDomainRegistry Abuse Report Form for - www.libertyrescrve.com

Hello,

Thank you for alerting us about this issue. Your complaint states that the domain name libertyrescrve.com is involved in 'Phishing', however, we were unable to find any such activities on the website in question. We could also not find any evidence against it through cursory investigations.

If you believe this to be incorrect, kindly send us any evidence you find for this domain name being used for phishing, such as -
1. a screen shot of the web page.
2. the exact URL(s) on which the offensive content is being displayed.

Once we have this information, we shall review the case again and take all necessary measures to stop the abusive activity.

Regards,

PDR Abuse Mitigation Team.



Ticket Details
Ticket ID: NBH-861-40386
Status: Closed

Support Center:

[moneyfreak]

Registrar reacted now and shut the domain down!

Hello,

Apologies for our previous response. We have suspended the domain name "libertyrescrve.com".

Thank you!

Regards,
PDR Abuse Desk

[Not_A_Newbie]

Good work. Thanks for the update.

[moneyfreak]

eurex-trade.com changed the pishing domain now to "libertyrecerve.com". This time they domain is registered through "enom". I already contacted them with the request to shut the domain down. Lets see how long this will go .

[moneyfreak]

The new domain is now also suspended. Now eurex-trade.com uses the original LR website to scam money from people. PLEASE NEVER DEPOSIT ANY MONEY THERE!