Mitglied

Her story is that she is moving from Boston to Canada and she will be working with her uncle on running his business I searched and found Rita Lee scams online and that she worked for IDG. Few days later she told me she worked for them as a financial project manager; I called them, no Rita Lee there. she called me many times and then video called. I recorded her voice and videos. Her video calls are short and she sent me a daily picture of herself and what she is doing. I work in cyber security so I managed to trace her IP address - it was in Thailand. I believe that it’s a group of people who are chatting using – and when voice or call is needed, they will make her call. I counted more than 50 mistakes that are obvious that they are scammers throughout the week. My last message to her was that I contacted the authority in Thailand with and contacted the authority in Canada

Rita Lee says she also goes by her "real name" Li FangHua. I managed to track her IP address using a disguised link from Grabify: Rita Lee 203.156.28.80 I found this email within JavaScript on the bogus crypto platform from CoinWba.com (probably a way to reroute: BTC funds to their email) tieg886@gmail.com I also managed to get the IP address from the fake customer service of CoinW using Grabify: 149.154.161.221 CoinWba.com IP address: 139.177.153.2 After using Burp, an ethnical hacker program designed for education, I found out the website uses a fake SSL in its HTML to disguise its non secure connection. Do NOT enter any personal information on this site or any website with a similar name. Login credentials are in plain sight for a man-in-the-middle attack. The fraudulent crypto exchange uses artificial gains altered by the scammer to make you think you are actually making money but it's not, it's fake. Other fake sites include: CoinWba, CoinWib, CoinWch, and CoinWkt Some of these have been deactivated now after the scammer moved on. I sent an email to Dynadot Inc (abuse@dynadot.com), the parent registrar for the domain informing them of the fraudulent website and hope they will take it down soon.