Paradigm Solutions rep in here?

[JerryMungo]

I received a social engineering scam SMS from someone using a domain registered at Paradigm Solutions this morning.

"Your cell# has been awarded $3Million USD from Halliburton/Euromillions UK. Kindly email Ray on [email protected]
For info send name, address, cell"

The cell number the sms came from was 0837427694 - according to truecaller, it's registered to Mandisa Cekiso. It could also be stolen. The whois details for the domain are below. I doubt those contact numbers for the registrant actually exist:

Domain Name: HALLIBURTONEUROMILLS.ORG
Registry Domain ID: D402200000005244478-LROR
Registrar WHOIS Server:
Registrar URL: https://www.onlinenic.com
Updated Date:
Creation Date: 2018-02-19T11:15:01Z
Registry Expiry Date: 2019-02-19T11:15:01Z
Registrar Registration Expiration Date:
Registrar: OnlineNIC Inc.
Registrar IANA ID: 82
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Reseller:
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Registry Registrant ID: C202876582-LROR
Registrant Name: Benard Gaudi
Registrant Organization: halliburtoneuromills
Registrant Street: 90 Smit St Fairland
Registrant Street: 90 Smit St Fairland
Registrant City: Randburg
Registrant State/Province: Gauteng
Registrant Postal Code: 2030
Registrant Country: ZA
Registrant Phone: +27.0838808392
Registrant Phone Ext:
Registrant Fax: +27.0866771765
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID: C202876583-LROR
Admin Name: Shadab Azeem Rahil
Admin Organization: Paradigm Business Solutions
Admin Street: Unit 4, 1 Northbank Lane, Century City
Admin Street: Unit 4, 1 Northbank Lane, Century City
Admin City: Cape Town
Admin State/Province: Western Cape
Admin Postal Code: 7441
Admin Country: ZA
Admin Phone: +27.861234477
Admin Phone Ext:
Admin Fax: +27.866771765
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID: C202876587-LROR
Tech Name: Shadab Azeem Rahil
Tech Organization: Paradigm Business Solutions
Tech Street: Unit 4, 1 Northbank Lane, Century City
Tech Street: Unit 4, 1 Northbank Lane, Century City
Tech City: Cape Town
Tech State/Province: Western Cape
Tech Postal Code: 7441
Tech Country: ZA
Tech Phone: +27.861234477
Tech Phone Ext:
Tech Fax: +27.866771765
Tech Fax Ext:
Tech Email: [email protected]
Name Server: NS1.HOST4DEVEL.COM
Name Server: NS2.HOST4DEVEL.COM
DNSSEC: unsigned

 

[^^vampire^^]

Cool story bro?

 

[JerryMungo]

Cool story bro?

You came here to revive the thread? Success bro!

Update from Paradigm...


They can't do anything because the email address attached to the domain is not sending emails and the server does not appear to have anything illegal hosted.
The client appears to have simply registered the domain name and used it to receive email, not send. They are sending SMS'
Apparently the fact that the whois details provided by the client are not legit is not a concern of Paradigms.

As long as South African service providers remain enablers for scamsters, they will continue to operate successfully in SA.

 

[JerryMungo]

*EDIT* The upstream provider, Hetzner got some action on this, thanks guys

Thank you for your patience.

In light of the medium (SMS) utilised to contact you, I suggest that you also consider reporting this matter to the Wireless Application Service Providers’ Association (WASPA), they deal with SMS scams and spam:

https://waspa.org.za/report-spam/

With regards to your complaint to us, we have informed the client who makes use of this IP address on a self-managed private server. They have advised that this domain has been suspended in light of this incident.

We trust this meets with your approval, should you require further assistance please do not hesitate to contact us.

Kind Regards,

Trust & Safety Team
Hetzner (Pty) Ltd