Scamalytics have released the March 2020 list of the top 100 high risk ISPs for dating fraud. The list is compiled based on ISPs used by reported scammers in March 2020 across the Scamalytics network. ISPs must meet a minimum traffic level to make the list. They are then ranked by the proportion of traffic coming through that ISP’s network which is reported to be fraudulent.
Dating services can use the list to supplement their existing ISP blacklists. An updated list is released each month, based on the previous month’s scammer activity.
The top ten highest risk ISPs are listed in the table below.
Dating fraud: Top ten high risk ISPs – February 2020
Click an ISP to see the full fraud report for that ISP.
You can see the full list of 100 high risk ISPs here.
What’s changed since February 2020?
We have some key changes in our top ten this month. Our previous number one, Net-style Atarim Ltd, has been deposed by Simply Transit Ltd. Bandwidth Technologies Ltd and Hostroyale Glasgow Network are no longer in the top ten, although Hostroyale’s Finnish operation is still at the foot of the table, as it was last month.
Simply Transit Ltd is a UK network provider registered in Worcester and has been trading for 12 years. Its parent company, REGISTER, operates multiple domain and hosting brands across Europe encompassing 2.1 million domains across 500 TLDs, 750,000 active customers and 700,000 hosted websites.
Net-style Atarim is now the second highest risk ISP. It operates two websites, http://www.netstyle.co.il in Hebrew and a secondary one in English, and its offices are in a science park in Israel. Founded in 1998 as a web design operation it became a RIPE LIR in 2013 and began “supporting and accepting any crypto currency payments” in 2015. The site promises testimonials from the VPN provider HideMyAss and the IP address provider VPNStaticIP.com, but the appropriate section is not on the site.
At number three we have another new entrant, Saddam Hossain, trading as Asian Network. The company operates 255 IP addresses, some of which run public proxies. The company is based in Gazipur in Bangladesh.
Fourth in this week’s table is Region40 LLC, another new arrival. The firm operates from the Russian Federation and also uses the name Quality Network; it appears to be connected to the FineProxy DDOS service.
At number seven and eight we have two more new entrants, UGB Hosting OU and LT-Rackray. UGB Hosting OU operates from Narva in Estonia and offers a mix of dedicated and virtual servers. It relies heavily on affiliate marketing to widen its customer base. Rackray is a Lithuanian provider and again operates a partner programme to promote its operations.
Number nine, Hostroyale, started in Pune, India in 2009, where its head office is still located, and has 33 colocation units around the world – which is why it features more than once in this month’s top ten, with high levels of fraudulent activity detected across multiple partners. The company offers the familiar mix of dedicated and virtual servers and domains.
Last but not least there’s a new entrant at number ten, Almouroltec Servicos De Informatica E Internet LDA. It’s a Portuguese hosting provider that operates under the PTISP brand. It operates three data centres and caters for 14,000 active customers.
IP lookup tools
The top 100 list builds on Scamalytics’ IP fraud risk lookup tool and ISP risk reports. Their IP lookup tool allows dating services to lookup an IP address and see information such as whether that IP address is running a proxy server. Their ISP risk reports show information such as the distribution of proxy servers across the ISP’s range of IP addresses.
Scamalytics maintain the world’s largest anti-scammer blacklists dedicated to the dating industry, including IP addresses, ISPs, photos, profiles, email addresses and chat handles used by reported scammers.
Visit Scamalytics.com for more information.