Fake online retailer - help!

Lawrence777

Well-Known Member
Joined
Nov 24, 2012
Messages
198
Apple-ZA.com

Contact Information
Registrant Contact
Name: Israfil Yilmaz
Organization:
Mailing Address: Pencarrow Crescent, Durban KZN 4051 South Africa
Phone: +27.767099875
Ext:
Fax:
Fax Ext:
Email:wwwowww.za@icloud.com
Admin Contact
Name: Israfil Yilmaz
Organization:
Mailing Address: Pencarrow Crescent, Durban KZN 4051 South Africa
Phone: +27.767099875
Ext:
Fax:
Fax Ext:
Email:wwwowww.za@icloud.com
Tech Contact
Name: Israfil Yilmaz
Organization:
Mailing Address: Pencarrow Crescent, Durban KZN 4051 South Africa
Phone: +27.767099875
Ext:
Fax:
Fax Ext:
Email:wwwowww.za@icloud.com

iwantit.co.za

0a. lastupdate :
0b. emailsource :
0c. emailposted :
0d. emailsubject :
0g. historycount :
0h. invoiceno :
0i. contracttype :
0j. rcsversion :
1a. domain : iwantit.co.za
1b. action :
1c. Registrar : Afrihost
2a. registrant : Danial Demirci
2b. registrantpostaladdress: 67 Wessels Str,Johannesburg, Gauteng, 2128, ZA
2c. registrantstreetaddress:
2d. amount :
2e. paymenttype :
2f. billingaccount :
2g. billingemail :
2i. invoiceaddress :
2j. registrantphone : +27.767077875
2k. registrantfax : +27.11612700
2l. registrantemail : wwwowww.za@icloud.com
2n. vat :
3b. cname :
3c. cnamesub1 :
3d. cnamesub2 :
3e. creationdate : 2014/09/24 12:32:14
4a. admin :
4b. admintitle :
4c. admincompany :
4d. adminpostaladdr :
4e. adminphone :
4f. adminfax :
4g. adminemail :
4h. adminnic :
5a. tec :
5b. tectitle :
5c. teccompany :
5d. tecpostaladdr :
5e. tecphone :
5f. tecfax :
5g. tecemail :
5h. tecnic :
6a. primnsfqdn : ns.dns1.co.za
6b. primnsip :
6c. primnsipv6 :
6e. secns1fqdn : ns.dns2.co.za
6f. secns1ip :
6g. secns1ipv6 :
6i. secns2fqdn : ns.otherdns.net
6j. secns2ip :
6k. secns2ipv6 :
6m. secns3fqdn : ns.otherdns.com
6n. secns3ip :
6o. secns3ipv6 :
6q. secns4fqdn :
6r. secns4ip :
6s. secns4ipv6 :
8a. netblock1start :
8b. netblock1end :
8c. netblock2start :
8d. netblock2end :
8e. netblock3start :
8f. netblock3end :
9a. description1 :
9b. description2 :
9c. description3 :
9d. description4 :
9e. description5 :
9f. description6 :

Obviously the same a-hole with the email address and similar numbers. Reported both sites to Google as phishing sites.

For future use: https://www.google.com/safebrowsing/report_phish/
 
Last edited:

DrJohnZoidberg

Honorary Master
Joined
Jul 24, 2006
Messages
21,246
All these details are fake. Pointless trying to track the names to anything meaningful.
 

LazyLion

King of de Jungle
Joined
Mar 17, 2005
Messages
102,046
All these details are fake. Pointless trying to track the names to anything meaningful.
It's not pointless. People are careless and always leave breadcrumbs all over the Internet...

1) Which business is located at Edison Way, Century City, Cape Town?
2) Which 67 Wessels address in Cape Town links to him?
3) Where is HardWorx located?
4) Has anyone tried calling those cell numbers?

He'll make a slip up somewhere...
 

Lawrence777

Well-Known Member
Joined
Nov 24, 2012
Messages
198
All these details are fake. Pointless trying to track the names to anything meaningful.
Sure, but with a court order the ISP has to divulge the IP addresses used by whoever owns the domains to connect to them. Those can be tracked to an extent. It's not impossible to find this d-bag.
 

Lawrence777

Well-Known Member
Joined
Nov 24, 2012
Messages
198
It's not pointless. People are careless and always leave breadcrumbs all over the Internet...

1) Which business is located at Edison Way, Century City, Cape Town?
2) Which 67 Wessels address in Cape Town links to him?
3) Where is HardWorx located?
4) Has anyone tried calling those cell numbers?

He'll make a slip up somewhere...
1690478.jpg

I just had to :D
 

LazyLion

King of de Jungle
Joined
Mar 17, 2005
Messages
102,046
Also check out ...
Bentley Office Park
67 Wessels Road
Sandton
2128
 

static_sa

Senior Member
Joined
Oct 3, 2011
Messages
984
Server says its under maintenance. When you proceeded to checkout, was it a pop-up window that used an API?

[br]
Then your details should be fine, however if it was on the site.... oh boy...
 

static_sa

Senior Member
Joined
Oct 3, 2011
Messages
984
As for that being his FB profile, it's not.

https://www.google.co.za/search?tbs=sbi:AMhZZitYJMrr_1pQ6bymeBcyIHRJPx44_1RJc8BzJlyXZxFXhD2nhqsEeKcDQJOwmlqnLHI5DrnrAYOlUvYCOg_1oyvM3SOHPOV6LOnLWdNGUEsgsodQsKaIPC6FYBaFCX8L0_1ALYwD4ZCEm-r_127oKl0qmwo1BYkJWfLjPlu-VCd81spbmvo2bnZiotBzDwxutdvQRLXbsNGwHpNYHYBiMNHBNThh6fhtujoixp3q5AO06aMTbZ8xsIvnAJHJ7fJfR2iTNBhwWwJb_1kRtWaXDQc2F686OHCYEnmr58NNqYpjbB2saaah8XCoAkSF7SQDJu2AZMHoywfgRjB3qN3im6f9-um1ZUmQK7mTl6Jt-QyrgO_1_1dAGYBjSHAsU0lQ5YxTFzNzUW1JUYnab7i3aXYB_16vEYR1eaAfB_1rWff_1HYhmeJhPcC1MS7Htaur0wcjbd10JXAhy_1NYsQXaPEfwk1OsK_1LtFaVB5CL6LvposZdh-FXqx8Rrd-g58Fxs5JhmWVSNsetmLzEBZO2M4wH7W8j2rbOgVh5dbw3ZwNkcgn5HLYR1Q6avPMynaxtCt61EmwdnVlHhRmI8_185x0MEZ_156GBEnZLyUPI6At4NsrGA5sWIMU1kWgbYtlrHrUFBPHmWU2AOIx9yWkBV2X83Kc2EnJne8y7gWW4di8Lv2onY-cR02caK9IIw38QCAJ9_12DFmOr7ZWDP23rhIRshD4iEpS2d07uXUPklFX03FD3l0cjIxuCi2BipqPO5aXgf02wdbThf8MqhtReBozR1_1Tizl-zr1BwN3tC5GZeSmcR6759VNFSRWf4NlFIhXON8EO-JOjMd4tMHKFguT7707YfGjllV2TT7TYLYdyleNLkn0gr0py8HT11hE7zA3sYBOkq9W3h9I0qhZls1z5VU-nMS6ZV4-W024K4RQajTC7cJTAcw3nIaqLmoN4KvZhcQoeTdEyJ9yk0w7fbl3jadRKvzMaD2G4rshjI4WrRtLQ1uAwLefOAxkRLZUuZUsD51pNctwj3yMdZdhNMPzAyquybU-LNq_1Lldin-9XZESXsE1W8IwHcGqZM_15APnJbPbOSZDZ9R4EDSfqsk-odWEllUphkQ_1CZWNFsZpgK8gPOBuRAlnOWQyzl6a_1tbMDeINw74EcNHQIjwGka65LehThEDC2sUFAjmYWoTntNNWzynW6fWcGbiJCyKzq1XKGzHMMU2byrDV5X2IaoD-X-ERy2C4OdC6yLImqs-2B_1Nj8WbFravhhB68_1CU6rWJM2xpVAXELuDiDb0cjeoaQu9FJfOj5oW712qf4EXxINGw--EwnTQK9K1vvuX1hYIU3ZOGhjlUBeofW5RUO6TSXAltCiNdT2kxr4T7OPpmhYB61NrsHskRUGUqtDFav6SFJMnAWsKXsatD2NspVjgVM-Vszq8Y-Zhy_1D3pRTZkFwNae95X8SkjNKyxPoGpm4jh8-XG_1RDutZv3rEqSFr2gmSKpM-1Q2nkvKceUPHNYtI2JtXEfl8UR_1Q-stjmVjU0bD5-DRGEwILcF0WtjxJtq3KtgclTVl2xeyGd_1gLb4uoCIPg&btnG=Search%20by%20image&hl=en-ZA
 

skimread

Executive Member
Joined
Oct 18, 2010
Messages
8,878
Looks dodge.

No phone number.
No Google Streetview for that address.
Company not found on Google.
Website duplicate at http://iwantit.co.za/
Domain: iwantit.co.za
Registrant:
Name: Danial Demirci
Organisation: private
Email: wwwowww.za@icloud.com
Tel: +27.767077875
Fax: +27.11612700
That is Afrihost's fax no. The cell number might be this person
Jabulile Fox. Lives in Soweto went to Waverley Girls High School.

11391370_1595588690729454_324706437360546705_n.jpg
*Not her if
1.the facebook post she made is incorrect
2. scammer used a false cellphone number.
3. The cell number was recycled
Jabulile Fox Jabulile fox 0767077875
Like · Reply · 11 November 2014 at 22:33
I would PM afriguy on this forum to help so they can give her a call to confirm the owner of the website is indeed this person or if the person who registered the website used fake cellular number. I don't think it will be good PR for them if they host scam websites.

The date of that post 11 Nov 2014. Website was created 2014/09/24. Less than 2 months so probably not likely cell not got recycled that fast
 
Last edited:

Arthur

Honorary Master
Joined
Aug 7, 2003
Messages
24,184
Bear in mind that scammers often use the details of genuine people and companies.
 

Arthur

Honorary Master
Joined
Aug 7, 2003
Messages
24,184
i'm sure afriguy would frown on that. Let see if he answers this thread.
Of course.

I'm not specifically referring to the website/hosting. I mean, be careful about jumping to conclusions about people and companies named, and about posting stuff here. Innocent people can get injured.
 

skimread

Executive Member
Joined
Oct 18, 2010
Messages
8,878
Of course.

I'm not specifically referring to the website/hosting. I mean, be careful about jumping to conclusions about people and companies named, and about posting stuff here. Innocent people can get injured.
Well I said *might be* and put 3 disclaimers why it would not be her. Can't see how that is jumping to conclusions.

The name Danial Demirci is 99% probably fake but that is quoted directly from the whois.
 

Loudpedal

New Member
Joined
Dec 2, 2008
Messages
3
I actually reported this to the following people on Friday:

Afrihost
Google Spam
Myistore.co.za

I did try get hold of Apple but that was nearly impossible
 

RustPuppet

Active Member
Joined
May 6, 2007
Messages
59
You guys are legends. Thanks for all the help sleuthing.

I sent a detailed mail to the various email addresses we dug up last week. I got this reply in return this morning:

Apple Za said:
Dear Dan,

Regarding the below, please note the following:

1) This is a new business in operation from August 2015. The website and two domains (iwantit.co.za and apple-za.com) were bought off from a company based in Cape Town. They also set up the site and hosting for us. Since having concluded the sale of the site and related aspects, we have not been able to get hold of them since. They were supposed to make certain amendments, specifically regarding an SSL certificate and some other functionality. We were also supposed to have been procuring stock through the channels they had available, but we are now left to our own devices in finding alternate suppliers.

2) We have no idea as to who you refer to with regards to Facebook profiles and iCloud accounts, or regarding any of the scam allegations mentioned.

3) My business partner has informed me that the bank account used for the business which is held at ABSA, has been frozen for suspicion of fraud, most likely due to a complaint lodged by you. He tried to resolve this on Friday, but it was outside of banking hours by the time he realised what had happened. He left for Hong Kong early this morning and will be out of the country until late this month. This is unfortunate since he needs to physically go into an ABSA branch in order to unlock the account, for which he did not have time. Furthermore, this will impact seriously on our capacity to conduct business, and will not allow us to reverse the payment for your order.

4) Instead of having been so presumptuous and rash in your conclusions and actions, you could have merely requested a refund from us, which we would have gladly processed for you. I can have my partner effect a refund for you via internet banking should you be able to resolve the block on the bank account in the meantime by requesting that it be uplifted. I am unsure of how this would work, and I have no authority to transact on the account or make any representations on behalf of my business partner.

5) According to our records, payment for your order was made via EFT, not by credit card as you mention. Our credit card merchant account is still under application, so this would not have been possible.

6) Subsequent to your further placing of an order through our website, we received further (obviously prank) orders containing racially offensive and threatening messages. We do not appreciate being targeted in such a manner. The IP addresses of all orders are recorded.

Regardless of the inconvenience that you may have caused in regard to the above, I can assure you that I am willing to assist in resolving your complaints.



Sincerely,


Eduart Klococi / Sales Manager
 
Top