WhoIs ~ www.123people.com

Threat To The Global Internet Infrastructure
Public Threat Alert

_________________________

Vienna
Linke Wienzeile 8/29
Vienna, 1060, AUT

Markus Wagner
@MarkusWagner
I’m a European web 2.0 business incubator
Vienna / Austria / Europe · http://hoteurostartups.wordpress.com/%5D
i5invest’s investments include:

3united AG: (Exit to VeriSign Inc.2006)
123people.com: (Exit to Pages Jaunes Group 2010)
tripwolf.com: (Joint Venture MairDumont Media Group, Dieter von Holtzbrinck)
tupalo.com: (Joint Venture European Directories Group/Herold)
wikitude GmbH: (Grand Prize Winner of the 2010 NAVTEQ Global LBS Challenge EMEA, second at Austrian Private Equity & Venture Capital Award 2011)
adaffix GmbH: (Global Mobile Award 2010 for Best Mobile Internet Service)

Paul Weinberger
Chairman of the board
Lukas Zinnagl
Business Development

Russell Perry
CEO
Markus Wagner
Advisory Board
Stefan Kalteis
CEO

whois

Am 05.11.2010 15:48, schrieb ScamFraudAlert:

Dear scamFRAUDalert,

Thank you for your e-mail. We appreciate your feedback and we can assure you that we work very hard to answer your questions regarding data protection laws and regulations.

123people is a free real time search service that finds information that is publicly available on the Internet (i.e. social networking profiles). 123people enables users to check and control their digital footprint and find out what personal information is publicly available on the web.

Please understand that 123people provides a tool to make the search for people related information more convenient. We cannot ensure that information found on the web applies only to one person as the search is related to a name pair, not to a specific person. The more common a name pair is, i.e. “John Smith”, the less specific the information will be.

We do not store any person related profiles or information. This means we are not able to distinguish and separate between different people displayed in our search results, only between names. We comply and are registered under the Austrian Data Protection Laws as we are based in Vienna, Austria.

In every search result there is a certain degree of inaccuracy; results are not often related to a single individual. As we have developed and utilize an automated search technology, a 100% accuracy rate is not possible. We rely on the “human factor”, the user, to make the final distinction of available and relevant information.

If you do not want to be found through 123people, we recommend changing or deleting the inaccurate information that concerns your person from the original source or website. It will therefore disappear from 123people and most other search engines without our intervention. You can use 123people to identify all data sources by looking at your search results. Sources are clearly identified with either a symbol or a text link.

If however you want us to remove information that concerns you explicitly from 123people we are more than happy to follow your request.

Please send us the specific search result links that point directly to the personal information in question.

How to identify your personal links:

1. Search for the requested name pair on 123people.

2. Click on any link in the search result or on the small icon on the bottom left of the thumbnail.

3. Copy the full link displayed in the grey 123people frame within the redirected page or the link provided in the picture thumbnail preview.

4. Send us the links via e-mail along with your full name and we will restrict them on our search service, in compliance with European Guidelines and the Austrian Data Protection Law.

If you would like us to restrict your address or your phone number, please give us the exact link from the source which you can obtain by copying the link location/address (and indicate us the exact address that appears on 123people search results).

How do I copy a link to send it to 123people?

Once you’ve identified the link you would like to send, you must do the following:

- Right click on the link. A menu will appear will some options

- Selection the following option: “Copy Link Location”

- Keep in mind different browsers have slightly different variations on this, but the main text to search for is: “Copy Link…”

With the link copied, you must paste it into the email. To do this, simply create a new email, right click in the message area and select “Paste”.

Please note that although we can restrict a certain link from 123people, the information will continue to exist publicly on the Internet. This means if someone searches for the same name pair on another search engine, the link may continue to appear.

Advice: you can only request link restriction pertaining to your name.

Please visit our web site for detailed information and screenshots about how to identify the links appearing on 123people:

http://www.123people.com/page/reputation

Every month more than 40 million users rely on our people search service. 123people has in many cases been beneficial with people helping them to control and manage their digital footprint, find lost friends and family members or make new business contacts.

Kind regards,

Damian Brooks
Customer Service Specialist

Address lookup
canonical name http://www.123people.com

aliases
addresses 81.16.155.30
Domain Whois record

Queried whois.internic.net with “dom 123people.com

Domain Name: 123PEOPLE.COM
Registrar: PSI-USA, INC. DBA DOMAIN ROBOT
Whois Server: whois.psi-usa.info
Referral URL: http://www.psi-usa.info
Name Server: NS.NEXTLAYER.AT
Name Server: NS2.NEXTLAYER.AT
Status: clientTransferProhibited
Updated Date: 02-jun-2012
Creation Date: 01-jun-2004
Expiration Date: 01-jun-2013

Last update of whois database: Sun, 21 Apr 2013 14:12:12 UTC

Queried whois.psi-usa.info with “123people.com”…

============
PSI-USA, Inc.
============

This is the PSI-USA, Inc. WHOIS server.

All requests are logged.

Requesting IP: 209.200.105.157
requesting URL: http://whois.psi-usa.info
Requesting Object: domain 123people.com
Timestamp: 2013-04-21 16:12:51

You can see the policy that you agree by submitting a query to this server:
whois -h whois.psi-usa.info POLICY

domain: 123people.com
status: LOCK
owner-c: LULU-10182684
admin-c: LULU-10176046
tech-c: LULU-10176046
zone-c: LULU-10176046
nserver: ns.nextlayer.at
nserver: ns2.nextlayer.at
created: 2004-06-02 01:25:43
expire: 2013-06-02 01:25:43 (registry time)
changed: 2012-11-20 07:40:35

[owner-c] handle: 10182684
[owner-c] type: PERSON
[owner-c] title:
[owner-c] fname: Helga
[owner-c] lname: Bernold
[owner-c] org: 123people
[owner-c] address: Stronsdorf 24
[owner-c] city: Stronsdorf
[owner-c] pcode: 2153
[owner-c] country: AT
[owner-c] state: Austria
[owner-c] phone: +43-664-4398603
[owner-c] fax: +43-2526-6710
[owner-c] email: domains@123people.com
[owner-c] protection: B
[owner-c] updated: 2010-03-26 09:53:42

[admin-c] handle: 10176046
[admin-c] type: PERSON
[admin-c] title:
[admin-c] fname: Martin
[admin-c] lname: Stemeseder
[admin-c] org: 123people
[admin-c] address: Linke Wienzeile 8/29
[admin-c] city: Wien
[admin-c] pcode: 1060
[admin-c] country: AT
[admin-c] state: AT
[admin-c] phone: +43-664-4398603
[admin-c] fax: +43-2526-6710
[admin-c] email: domains@123people.com
[admin-c] protection: B
[admin-c] updated: 2010-06-15 12:02:22

[tech-c] handle: 10176046
[tech-c] type: PERSON
[tech-c] title:
[tech-c] fname: Martin
[tech-c] lname: Stemeseder
[tech-c] org: 123people
[tech-c] address: Linke Wienzeile 8/29
[tech-c] city: Wien
[tech-c] pcode: 1060
[tech-c] country: AT
[tech-c] state: AT
[tech-c] phone: +43-664-4398603
[tech-c] fax: +43-2526-6710
[tech-c] email: domains@123people.com
[tech-c] protection: B
[tech-c] updated: 2010-06-15 12:02:22

[zone-c] handle: 10176046
[zone-c] type: PERSON
[zone-c] title:
[zone-c] fname: Martin
[zone-c] lname: Stemeseder
[zone-c] org: 123people
[zone-c] address: Linke Wienzeile 8/29
[zone-c] city: Wien
[zone-c] pcode: 1060
[zone-c] country: AT
[zone-c] state: AT
[zone-c] phone: +43-664-4398603
[zone-c] fax: +43-2526-6710
[zone-c] email: domains@123people.com
[zone-c] protection: B
[zone-c] updated: 2010-06-15 12:02:22

Network Whois record

Queried whois.ripe.net with “-B 81.16.155.30″…

% Information related to ’81.16.155.0 – 81.16.155.255′

inetnum: 81.16.155.0 – 81.16.155.255
netname: YELSTERDIGITAL-NET
descr: yelster digital gmbh
descr: Linke Wienzeile 8/29
descr: 1060 Vienna
descr: Austria
country: AT
admin-c: NLNC1-RIPE
tech-c: NLNC1-RIPE
status: ASSIGNED PA
mnt-by: AS1764-MNT
changed: daniel.stricks@nextlayer.at 20130116
source: RIPE

role: NOC Next Layer
address: NEXT LAYER Telekommunikationsdienstleistungs-
address: und Beratungs GmbH
address: Mariahilfer Guertel 37/7
address: A-1150 Vienna
phone: +43(0)5 1764 110
fax-no: +43(0)5 1764 9
e-mail: noc@nextlayer.at
org: ORG-NLTU1-RIPE
admin-c: RA773-RIPE
admin-c: TF2679-RIPE
tech-c: RA773-RIPE
tech-c: MD13304-RIPE
tech-c: ASC1764-RIPE
tech-c: CG46
tech-c: SOS-RIPE
tech-c: POWO-RIPE
tech-c: DSTR-RIPE
tech-c: MR10426-RIPE
tech-c: TF2679-RIPE
nic-hdl: NLNC1-RIPE
remarks: —————————————————–
remarks: The NEXT LAYER NOC can be reached during office hours
remarks: between 0900 and 1800 (CET) at +43 5 1764 110. Outside
remarks: these hours, please use the duty-engineer mobile number
remarks: supplied in the handover document or send an email
remarks: to noc@nextlayer.at in non-urgent cases.
remarks: —————————————————–
notify: hostmaster@nextlayer.at
abuse-mailbox: abuse@nextlayer.at
mnt-by: NEXTLAYER-MNT
mnt-by: AS1764-MNT
changed: Rene.Avi@nextlayer.at 20050721
changed: Rene.Avi@nextlayer.at 20060311
changed: silvia.schuckert@nextlayer.at 20060713
changed: andreas.poiss@nextlayer.at 20070213
changed: silvia.schuckert@nextlayer.at 20080422
changed: Rene.Avi@nextlayer.at 20090510
changed: daniel.stricks@nextlayer.at 20120501
changed: Rene.Avi@nextlayer.at 20120522
source: RIPE

% Information related to ’81.16.155.0/24AS42829′

route: 81.16.155.0/24
descr: ONETWOTHREEPEOPLE-NET
descr: 123people Internetservices GmbH
origin: AS42829
mnt-by: AS1764-MNT
changed: Rene.Avi@nextlayer.at 20090825
changed: daniel.stricks@nextlayer.at 20100803
source: RIPE

% This query was served by the RIPE Database Query Service version 1.60.2 (WHOIS3)

DNS records
name class type data time to live
http://www.123people.com IN A 81.16.155.30 86400s (1.00:00:00)
123people.com IN TXT v=spf1 include:sendgrid.net ip4:81.16.155.0/24 mx a:mail.123people.com a:123people.com mx:123people.com include:123people.com ~all 3600s (01:00:00)
123people.com IN SOA
server: ns.nextlayer.at
email: hostmaster@nextlayer.at
serial: 2013031903
refresh: 1800
retry: 900
expire: 1209600
minimum ttl: 3600
86400s (1.00:00:00)
123people.com IN NS ns2.nextlayer.at 86400s (1.00:00:00)
123people.com IN NS ns.nextlayer.at 86400s (1.00:00:00)
123people.com IN A 81.16.155.30 86400s (1.00:00:00)
123people.com IN MX
preference: 200
exchange: mail2.i5invest.com
86400s (1.00:00:00)
123people.com IN MX
preference: 100
exchange: mail.123people.com
86400s (1.00:00:00)
30.155.16.81.in-addr.arpa IN PTR mail.123people.com 86400s (1.00:00:00)
155.16.81.in-addr.arpa IN SOA
server: ns.nextlayer.at
email: hostmaster@nextlayer.at
serial: 2012111501
refresh: 28800
retry: 14400
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
155.16.81.in-addr.arpa IN NS ns2.nextlayer.at 86400s (1.00:00:00)
155.16.81.in-addr.arpa IN NS ns.nextlayer.at 86400s (1.00:00:00)

– end –

http://i5invest.com/markus-wagner/

Fake Facebook Notifications

scamFRAUDalert have seen an aggressive spam campaign by spammers regarding facebook notifications. These notifications are all phishing expeditions which primary aim is steal your personal information and contain malwares.

This slideshow requires JavaScript.

Law Enforcement Affairs ~ lawenforcementaffairs.com

This individual Michael King aka Michael W. King aka Wayne Michael King aka Mike King aka MikeKingUSA and his BPO operators [Business Process Outsourceing] are a threat to society. His fascination with Law Enforcement and Guns pose a direct threat to us all.

His ONLINE ACTIVITIES SHOULD NOT GO UNNOTICED by AUTHORITIES in both Florida, North Carolina and the FEDS.

Sites We’ve Identified Associated With This Individual

  1. Potential Predators ~ potentialpredators.com
  2. The Online Predators Watch ~ theonline-watch.com
  3. Communication Unlimited ~ North Carolina
  4. Predators Watch ~ predatorswatch.com
  5. Elite Consulting Services USA ~ eliteconsultingservices.com
  6. Potential Prostitutes ~ potentialprostitutes.com
  7. Bad Renter Report ~ badrenterreport.com
  8. Mike King ~ MikeKingUSA.COM
  9. Wiki Warnings ~ wikiwarnings.com
  10. Warning Notice ~ warning-notice.com
  11. Omega Enterprises USA ~ omegaenterprisesusa.com
  12. Law Enforcement Association ~ lawenforcementassociation.com
  13. Warning Notice ~ warning-notice.com
  14. Reprenown.com
  15. Mike King Enterprises
  16. Law Enforcement Affairs ~ Lawenforcementaffairs.com
  17. Bad Renter Report ~ badrenterreport.com

lawenforcementaffairs

Related articles

OpenX Hacking ~ 173.241.250.2

Image representing OpenX as depicted in CrunchBase

According to KerbsOnSecurity, Hackers are actively exploiting a dangerous security

vulnerability in OpenX — an online ad-serving solution consumer alertfor Web sites. http://Ripoffreport.com which use OpenX to server it ads have been seeing exploit attacks coming from IP 173.241.250.2 from http://Ripoffreport.com site.

Google Say Ripoffreport.com Site May Be Unsafe

scamFRAUDalert see it appropriate to issue this ALERT as Google Safe consumer alertBrowsing Report that portion of Ripoffreport.com site may be hazardous to your computer.

The site may be compromised or infected with Malwares that deserves immediate attention. See proof below – OpenX adware publishers network is responsible.

intrusion attack3

Google Safe Browsing

Google Safe Browsing2

WikiWarnings.com aka Reprenown.com

Class Action Lawsuit Against Mugshot Websites
WikiWarnings Is A Camouflage

A Mugshot Operator Masquerading As A Consumer Complaints Site.
The reality is that WikiWarnings is just Fraud Alertanother of the many new-found gold rush online for background search or people finder websites now populating the internet.

WikiWarning.com is a website masquerading as a consumer advocate site and soliciting consumers to hire them to remove complaints and other negative comments posted online that may have been posted by wikiwarnings.com themselves.

Most complaints found on WikiWarnings.com have been retrieved from District Attorneys offices, State, Counties and Police database nationwide or can be found by doing a google search.

It appears like the reports on WikiWarnings are about DeadBeat Dads gathered from public record accessible to the public for FREE.
The operator(s) of wikiwarnings.com claim to have some association with law enforcement and have access and knowledge in retrieving these database.
Law Enforcement Association is an exclusive membership for the law enforcement community only.
July 2009Present (3 years 6 months) Raleigh-Durham, North Carolina Area
theraleighpost2

He also claim to be the Owner/Administrator Law Enforcement Association. His background and knowledge explains why these mugshots photos and Deadbeat Dad photos are appearing on wikiwarnings.com

From what we’ve investigated so far online, this Michael King is not a lone ranger. This is the same play book as www.scambook.com where all of the participating characters are surrogates which road lead us back to Los Angeles, CA.

He/She claims to have residence in both Raleigh, NC and Miami, Florida.

  1. WikiWarnings.com aka Mike King aka MikeKingUSA
    5200 summit manor lane, 107
    Raleigh, North Carolina 27613
    United States
  2. WikiWarnings.com aka Mike King aka MikeKingUSA
    18243 SW 149 Pl
    Miami, Florida 33187
    United States
  3. Elite Consulting Svcs USA
    P. O. Box 770482
    Miami, Florida 33187
  4. WikiWarnings
    5730 Plunkett Street
    Hollywood, Florida 33023
    United States
  5. Wikiwarnings.com
    3732 N.W. 16 Street
    Fort Lauderdale, FL 33311
  6. PAYCHEQUE PLUS, INC.
    King, Jennifer A.
    7623 Sw 129th Place
    Miami, FL 33183

The site blatantly post FALSE information regarding the Founder of scamFRAUDalert now populating the internet listed on Ripoffreport.com, reviewstalk.com, complaintsboard.com to name a few begin appearing on WikiWarnings.com immediately after SFA begun “Warning” the public about “Potential Predators Extortion Scam.” What a coincidence?

Our investigation begun by looking at PotentialPredators.com follow by a series of other mugshots listed below. As one of these were discovered, another pop up.

www.potentialpredators.com ~ www.potentialreal.com predators ~ www.predatorswatch.com ~ www.theonline-watch.com
www.wikiwarnings.com

1-888-658-0994
305-610-3581

Hire Wiki Warnings

LawEnforcementAffairs

Deadbeat Dad

LawEnforcement Assoc

Wiki Warnings Administrator/Founder
Member Law Enforcement Association

July 2009 – 2012-12-11 Present (3 years 6 months)
Raleigh-Durham, North Carolina Area

Address lookup
canonical name http://wikiwarnings.com
UA-28934134-1
pub-9281259263194249

Elite Consulting Svc USA

305-610-3581

18243 SW 149th Pl
Miami, FL 33187

Email Header Analysis

IP Address: 98.26.22.214 (cpe-098-026-022-214.nc.res.rr.com)
IP Address Country: United States
IP Continent: North America
IP Address City Location: Raleigh
IP Address Region: North Carolina
IP Address Latitude: 35.7721,
IP Address Longtitude: -78.6386
Organization: Road Runner

from: ceo@omegaenterprisesusa.com
to: ScamFraudAlert <scamfraudalert@gmail.com>
date: Wed, Oct 24, 2012 at 11:44 PM
subject: [Auto-Reply] http://wikiwarnings.com/archie-garga-richardson/
: Important mainly because of the people in the conversation.
from: michaelking@eliteconsultingservices.com
to: ScamFraudAlert <scamfraudalert@gmail.com>
date: Wed, Oct 24, 2012 at 11:44 PM
subject: [Auto-Reply] http://wikiwarnings.com/archie-garga-richardson/
: Important mainly because of the people in the conversation.
from: Michael King <ceo@omegaenterprisesusa.com>
to: ScamFraudAlert <scamfraudalert@gmail.com>
date: Thu, Oct 25, 2012 at 2:40 AM
subject: Re – WikiWarnings – Legal Document
: Important mainly because of the words in the message.
Today, you and your company will be hearing from our legal department in reference to your recent email sent to us and cc to some unknowns, as well as Godaddy and Google.
The information you have requested removed, will NOT be removed as per your demand.
Further more, you addressed people and companies that are not associated with WikiWarnings.
As such, our company has protected itself vigorously and aggressively with threatening emails such as yours.
Your email has been received and forwarded to our legal department for immediate action.
Regards,
WikiWarnings

aliases
addresses 97.74.141.128
Domain Whois record

Queried whois.internic.net with “dom wikiwarnings.com”…

Domain Name: WIKIWARNINGS.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS17.DOMAINCONTROL.COM
Name Server: NS18.DOMAINCONTROL.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 09-nov-2012
Creation Date: 13-dec-2010
Expiration Date: 13-dec-2013

Last update of whois database: Sun, 09 Dec 2012 02:48:19 UTC
Queried whois.godaddy.com with “wikiwarnings.com

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: WIKIWARNINGS.COM
Created on: 13-Dec-10
Expires on: 13-Dec-13
Last Updated on: 09-Nov-12

Registrant:
Omega Enterprises USA, Inc.
P.O.Box 770482
Miami, Florida 33177
United States

Administrative Contact:
King, Michael ceo@OmegaEnterprisesUSA.com
Omega Enterprises USA, Inc.
P.O.Box 770482
Miami, Florida 33177
United States
+1.8886580994

Technical Contact:
King, Michael ceo@OmegaEnterprisesUSA.com
Omega Enterprises USA, Inc.
P.O.Box 770482
Miami, Florida 33177
United States
+1.8886580994

Domain servers in listed order:
NS17.DOMAINCONTROL.COM
NS18.DOMAINCONTROL.COM

Network Whois record

Queried whois.arin.net with “n 97.74.141.128″…

NetRange: 97.74.0.0 – 97.74.255.255
CIDR: 97.74.0.0/16
OriginAS: AS26496
NetName: GO-DADDY-COM-LLC
NetHandle: NET-97-74-0-0-1
Parent: NET-97-0-0-0-0
NetType: Direct Allocation
Comment: Please send abuse complaints to abuse@godaddy.com
RegDate: 2008-08-14
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-97-74-0-0-1

OrgName: GoDaddy.com, LLC
OrgId: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US
RegDate: 2007-06-01
Updated: 2012-03-15
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: http://whois.arin.net/rest/org/GODAD

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE51-ARIN

OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com
OrgTechRef: http://whois.arin.net/rest/poc/NOC124-ARIN

OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com
OrgNOCRef: http://whois.arin.net/rest/poc/NOC124-ARIN

RAbuseHandle: ABUSE51-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-480-624-2505
RAbuseEmail: abuse@godaddy.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE51-ARIN

RTechHandle: NOC124-ARIN
RTechName: Network Operations Center
RTechPhone: +1-480-505-8809
RTechEmail: noc@godaddy.com
RTechRef: http://whois.arin.net/rest/poc/NOC124-ARIN

RNOCHandle: NOC124-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-480-505-8809
RNOCEmail: noc@godaddy.com
RNOCRef: http://whois.arin.net/rest/poc/NOC124-ARIN

DNS records
name class type data time to live
wikiwarnings.com IN A 97.74.141.128 3600s (01:00:00)
wikiwarnings.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
wikiwarnings.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
wikiwarnings.com IN NS ns17.domaincontrol.com 3600s (01:00:00)
wikiwarnings.com IN NS ns18.domaincontrol.com 3600s (01:00:00)
wikiwarnings.com IN TXT google-site-verification=k1TiFNibq-LvSgen7m64yYg88kZ-R6yW1VmF-sauLak 3600s (01:00:00)
wikiwarnings.com IN SOA
server: ns17.domaincontrol.com
email: dns@jomax.net
serial: 2012112700
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
128.141.74.97.in-addr.arpa IN PTR p3nlhg36c067.shr.prod.phx3.secureserver.net 3600s (01:00:00)
74.97.in-addr.arpa IN NS cns1.secureserver.net 134s (00:02:14)
74.97.in-addr.arpa IN NS cns2.secureserver.net 134s (00:02:14)
74.97.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 4
original ttl: 10800 (03:00:00)
signature expiration: 2012-12-18 01:01:03Z
signature inception: 2012-12-08 01:01:03Z
key tag: 38687
signer’s name: 97.in-addr.arpa
signature:
(1024 bits)
7334s (02:02:14)
74.97.in-addr.arpa IN NSEC
next domain name: 0.75.97.in-addr.arpa
record types: NS RRSIG NSEC
7334s (02:02:14)

– end –

Elite Consulting Svc USA
18243 Sw 149th Pl,
Miami, FL
(305)610-3581

Detail by Entity Name
Florida Limited Liability Company
ELITE CONSULTING SERVICES USA, LLC
Filing Information
Document Number L09000083120
FEI/EIN Number 900512373
Date Filed 08/27/2009
State FL
Status INACTIVE
Effective Date 09/01/2009
Last Event ADMIN DISSOLUTION FOR ANNUAL REPORT
Event Date Filed 09/28/2012
Event Effective Date NONE
Principal Address
18243 SW 149 PLACE
MIAMI FL 33187 US
Changed 05/02/2010
Mailing Address
18243 SW 149 PLACE
MIAMI FL 33187 US
Changed 05/02/2010
Registered Agent Name & Address
KING, MICHAEL W MGR
18243 SW 149 PLACE
MIAMI FL 33187 US
Name Changed: 05/02/2010
Manager/Member Detail
Name & Address
Title MGR
KING, MICHAEL W MGR
18243 SW 149 PLACE
MIAMI FL 33187
Title MGRM
KING, JENNIFER A MGR
18243 SW 149 PLACE
MIAMI FL 33187
Annual Reports
Report Year Filed Date
2010 05/02/2010
2011 03/16/2011
Florida Profit Corporation
OMEGA ENTERPRISES USA INC.
Filing Information
Document Number P10000096229
FEI/EIN Number APPLIED
Date Filed 11/29/2010
State FL
Status INACTIVE
Effective Date 11/24/2010
Last Event ADMIN DISSOLUTION FOR ANNUAL REPORT
Event Date Filed 09/28/2012
Event Effective Date NONE
Principal Address
18243 SW 149 PLACE
MIAMI FL 33187
Mailing Address
18243 SW 149 PLACE
MIAMI FL 33187
Registered Agent Name & Address
KING, MICHAEL
18243 SW 149 PLACE
MIAMI FL 33187 US
Officer/Director Detail
Name & Address
Title P
KING, MICHAEL
18243 SW 149 PLACE
MIAMI FL 33187 US
Title VP
KING, ADRIANA
18243 SW 149 PLACE
MIAMI FL 33187
Annual Reports
Report Year Filed Date
2011 03/16/2011
Document Images
Florida Profit Corporation
ELITE FLORIDA CATERING, INC
Filing Information
Document Number P10000050065
FEI/EIN Number APPLIED
Date Filed 06/14/2010
State FL
Status INACTIVE
Effective Date 06/14/2010
Last Event ADMIN DISSOLUTION FOR ANNUAL REPORT
Event Date Filed 09/28/2012
Event Effective Date NONE
Principal Address
18243 SW 149 PLACE
MIAMI FL 33187
Mailing Address
18243 SW 149 PLACE
MIAMI FL 33187
Registered Agent Name & Address
KING, JENNIFER A
18243 SW 149 PLACE
MIAMI FL 33187 US
Officer/Director Detail
Name & Address
Title P
KING, JENNIFER A
18243 SW 149 PLACE
MIAMI FL 33187 US
Title VP
KING, MICHAEL W
18243 SW 149 PLACE
MIAMI FL 33187 US
Annual Reports
Report Year Filed Date
2011 03/16/2011
Document Images

Address lookup
canonical name blisshosting.com
aliases
addresses 74.53.93.210
Domain Whois record

Queried whois.internic.net with “dom blisshosting.com”…

Domain Name: BLISSHOSTING.COM
Registrar: NAME.COM LLC
Whois Server: whois.name.com
Referral URL: http://www.name.com
Name Server: NS621.WEBSITEWELCOME.COM
Name Server: NS622.WEBSITEWELCOME.COM
Status: clientTransferProhibited
Updated Date: 17-jul-2012
Creation Date: 16-jul-2007
Expiration Date: 16-jul-2013

Last update of whois database: Tue, 11 Dec 2012 17:11:10 UTC

Queried whois.name.com with “blisshosting.com”…

Domain Name: blisshosting.com
Registrar: Name.com LLC

Expiration Date: 2013-07-16 06:56:42
Creation Date: 2007-07-16 06:56:42

Name Servers:
ns621.websitewelcome.com
ns622.websitewelcome.com

REGISTRANT CONTACT INFO
Fatkhul Muttakin
fatkhul muttakin
Jl. Bakti 182 A
Medan
Sumatra Utara
20216
IN
Phone: +62.85261312333
Email Address: imissuaja@yahoo.com

ADMINISTRATIVE CONTACT INFO
Fatkhul Muttakin
fatkhul muttakin
Jl. Bakti 182 A
Medan
Sumatra Utara
20216
IN
Phone: +62.85261312333
Email Address: imissuaja@yahoo.com

TECHNICAL CONTACT INFO
Fatkhul Muttakin
fatkhul muttakin
Jl. Bakti 182 A
Medan
Sumatra Utara
20216
IN
Phone: +62.85261312333
Email Address: imissuaja@yahoo.com

BILLING CONTACT INFO
Fatkhul Muttakin
fatkhul muttakin
Jl. Bakti 182 A
Medan
Sumatra Utara
20216
IN
Phone: +62.85261312333
Email Address: imissuaja@yahoo.com

Timestamp: 1355245907.1164

Network Whois record

Queried rwhois.theplanet.com with “74.53.93.210″…

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-THEPLANET-BLK-14
network:Auth-Area:74.52.0.0/14
network:Network-Name:TPIS-BLK-74-53-93-0
network:IP-Network:74.53.93.208/28
network:IP-Network-Block:74.53.93.208 – 74.53.93.223
network:Organization;I:WebsiteWelcome
network:Street-Address:N/A
network:City:Boca Raton
network:State:FL
network:Postal-Code:33496
network:Country-Code:USA
network:Tech-Contact;I:abuse@websitewelcome.com
network:Admin-Contact;I:abuse@websitewelcome.com
network:Created:20080624
network:Updated:20120501

network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.74.52.0.0/14
network:Auth-Area:74.52.0.0/14
network:Network-Name:SOFTLAYER-74.52.0.0
network:IP-Network:74.53.0.0/17
network:IP-Network-Block:74.53.0.0-74.53.127.255
network:Organization;I:SoftLayer
network:Street-Address:4849 Alpha Road
network:City:Dallas
network:State:TX
network:Postal-Code:75244
network:Country-Code:US
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:abuse@softlayer.com
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2012-06-21 11:15:10
network:Updated-By:ipadmin@softlayer.com

%ok

Queried whois.arin.net with “n 74.53.93.210″…

NetRange: 74.52.0.0 – 74.55.255.255
CIDR: 74.52.0.0/14
OriginAS: AS36420, AS30315, AS13749, AS21844
NetName: NETBLK-THEPLANET-BLK-14
NetHandle: NET-74-52-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
RegDate: 2006-02-17
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-74-52-0-0-1

OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-714-3555
OrgNOCEmail: noc@theplanet.com
OrgNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com
OrgTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com
RTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-714-3555
RNOCEmail: noc@theplanet.com
RNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

DNS records
name class type data time to live
blisshosting.com IN MX
preference: 0
exchange: blisshosting.com
14400s (04:00:00)
blisshosting.com IN A 74.53.93.210 14400s (04:00:00)
blisshosting.com IN SOA
server: ns621.websitewelcome.com
email: warnetforum@gmail.com
serial: 2009060402
refresh: 43200
retry: 7200
expire: 2400000
minimum ttl: 86400
43200s (12:00:00)
blisshosting.com IN NS ns622.websitewelcome.com 86400s (1.00:00:00)
blisshosting.com IN NS ns621.websitewelcome.com 86400s (1.00:00:00)
210.93.53.74.in-addr.arpa IN PTR patriot.websitewelcome.com 86400s (1.00:00:00)
93.53.74.in-addr.arpa IN SOA
server: ns3.arpa.networklayer.com
email: root@softlayer.com
serial: 2011083100
refresh: 7200
retry: 600
expire: 1728000
minimum ttl: 43200
86400s (1.00:00:00)
93.53.74.in-addr.arpa IN NS ns3.arpa.networklayer.com 86400s (1.00:00:00)
93.53.74.in-addr.arpa IN NS ns4.arpa.networklayer.com 86400s (1.00:00:00)

– end –

67.231.246.86 resolves to 67-231-246-86.static.turnkeyinternet.net.
The following A records are set to 67.231.246.86:

    1. 8lr.net
    2. acmilanisti.com
    3. barak.asia
    4. baraktechnology.com
    5. bloggerjakarta.com
    6. christmastree-shops.com
    7. depokpos.com
    8. first.noeonline.info
    9. first.noesite.com
    10. hamilinshinta.asia
    11. inkhapratama.com
    12. iwwj.com
    13. jualan.info
    14. karisiak.com
    15. kedaihape.com
    16. mangacode.com
    17. mellystore.com
    18. mikailsoft.com
    19. mubarak-af.info
    20. murahol.com
    21. noeonline.info
    22. noesite.com
    23. ns1.mikailsoft.com
    24. ns2.mikailsoft.com
    25. pencari.info
    26. pituluik.com
    27. poss-unp.info
    28. ricoism.com
    29. rumahkardus-outlet.com
    30. sabichul.biz
    31. samapta5.com
    32. second.noeonline.info
    33. second.noesite.com
    34. senyumcinta.com
    35. sman66.com
    36. softgunstore.info
    37. sumbarlib.net
    38. swalayan-online.com
    39. syufi.com
    40. traveldealsguide.asia
    41. undangan.us
    42. vachzar.com
    43. vbfk.com
    44. w3magz.com
    45. zaqy.asia
    46. giveusfootball.com
    47. Asian21.info
    48. seocontester.com
    49. seocontester.com
    50. w3magz.com
    51. seocontester.com
    52. jseconsultant.com
    53. PodoMoro.com
    54. umaticstudio.com
    55. piala.asia
    56. w3linux.com
    57. ngoding.com

Extortion Scam Related to Delinquent Payday Loans

Extortion Scam Related to Delinquent Payday Loans

Washington, D.C. December 07, 2010
  • FBI National Press Office (202) 324-3691

The Internet Crime Complaint Center has received many complaints from victims of payday loan telephone collection scams. Callers claim the victim is delinquent in a payday loan and must repay the loan to avoid legal consequences.

The callers purport to be representatives of the FBI, Federal Legislative Department, various law firms, or other legitimate-sounding agencies. They claim to be collecting debts for companies such as United Cash Advance, U.S. Cash Advance, U.S. Cash Net, and other Internet check-cashing services.

According to complaints received from the public, the callers have accurate data about victims, including Social Security numbers, dates of birth, addresses, employer information, bank account numbers, and the names and telephone numbers of relatives and friends. How the fraudsters obtained the personal information varies, but in some cases victims have reported they completed online applications for other loans or credit cards before the calls started.

The fraudsters relentlessly call the victim’s home, cell phone, and place of employment. They refuse to provide any details about the alleged payday loans and become abusive when questioned. The callers have threatened victims with legal actions, arrests, and, in some cases, physical violence if they do not pay. In many cases, the callers harass victims’ relatives, friends, and employers.

Some fraudsters have instructed victims to fax a statement agreeing to pay a certain amount, on a specific date, via a pre-paid Visa card. The statement further declares the victim will never dispute the debt.

If you receive these calls, do not follow the caller’s instructions. Rather, you should:

  • Notify your banking institutions.
  • Contact the three major credit bureaus and request an alert be put on your file.
  • Contact your local law enforcement agencies if you feel you are in immediate danger.
  • File a complaint at www.IC3.gov.

Tips to avoid becoming a victim of this scam:

  • Never give your Social Security number—or personal information of any kind—over the telephone or online unless you initiate the contact.
  • Be suspicious of any e-mail with urgent requests for personal financial information. The e-mail may include upsetting or exciting but false statements to get you to react immediately.
  • Avoid filling out forms in e-mail messages that request personal information.
  • Ensure that your browser is up-to-date and security patches have been applied.
  • Check your bank, credit, and debit card statements regularly to make sure that there are no unauthorized transactions. If anything looks suspicious, contact your bank and all card issuers.
  • When you contact companies, use numbers provided on the back of cards or statements

Federal Bureau of Investigation [FBI] – Payday Loans Warning

WhoIs Potential Predators ~ www.potentialpredators.com

Is Potential Predators potentialpredators.com a Scam? Answer:YES
scamalert This Site Engages In Blackmailing ~ Extortion
potentialreal predators ~ predatorswatch.com ~ theonline-watch.com ~ wikiwarnings.com Mugshots Sale

1-888-658-0994

Protect Yourself Online | Potential Predators

It has come to our attention at ~ scamFRAUDalert ~ that the operators of the website Potential Predators ~ www.potentialpredators.com are contacting the general public informing them they have been added to their database as a “potential predators.” If they seek removal, they will have to pay $99.95. These complaints can be found on Ripoffreport.com.

The common thread in these complaints is this:

My name is on potential predator for no reason.
Potential Predators Profiles


Hire Wiki Warnings

Craigslist.org have posted similar warning below

NEW SCAM http://www.potentialpredators.com (Thorndale, PA)


Date: 2012-09-20, 9:11AM EDT
cvg5x-3273091382@comm.craigslist.org [Errors when replying to ads?]


They have this site http://www.potentialpredators.com and they put anyone’s name on there and they find your name, email and picture by searching Google or wherever search site and get your profile picture and your email you have associated with the profile, and then they post it to this scum bag site/Internet and then the email you saying your email and picture has been posted to this site, and when you go to see what it’s about.
There will be a button that you click on to have your name removed from the list, when you click on the button it will take you to a place to use your credit card and pay $99.95 to have your name removed.
It’s a total Scam and they are real scum bags and have already been turned into the Attorney General’s Office and the attorney General is looking for people that have had this scam run on them. You need to contact the AGO, Contact this is the US federal Attorney Generals office- AskDOJ@usdoj.gov Also contact whatever state you’re in your state Attorney Generals Office and tell both that you’re being extorted and blackmailed!!!
But these numbers are from the site and you can email from the AGoffice site
Phone: 717-787-3391
Fax: 717-787-8242Press Office: 717-787-5211
Hotlines:
Child Predator Unit 800-385-1044
Elder Abuse Unit 866-623-2137
Consumer Protection 800-441-2555
Education & Outreach 800-525-7642
Health Care Section 877-888-4877
Do Not Call List888-777-3406
Home Improvement Consumer
Protection Act Helplines:
Consumer Helpline 888.520.6680
Contractor Helpline 717.772.2425
  • Location: Thorndale, PA
  • it’s NOT ok to contact this poster with services or other commercial interests

PostingID: 3273091382



The New WebSite

Address lookup
canonical name potentialpredators.com
aliases
addresses 178.162.233.253
Domain Whois record

Queried whois.internic.net with “dom potentialpredators.com”…

Domain Name: POTENTIALPREDATORS.COM
Registrar: INTERNET.BS CORP.
Whois Server: whois.internet.bs
Referral URL: http://www.internet.bs
Name Server: EDNA.NS.CLOUDFLARE.COM
Name Server: RICK.NS.CLOUDFLARE.COM
Status: clientTransferProhibited
Updated Date: 04-sep-2012
Creation Date: 09-jul-2012
Expiration Date: 09-jul-2013

Last update of whois database: Thu, 20 Sep 2012 19:07:02 UTC

Queried whois.internet.bs with “potentialpredators.com”…

Domain potentialpredators.com

Date Registered: 2012-7-9
Date Modified: 2012-9-4
Expiry Date: 2013-7-9

DNS1: edna.ns.cloudflare.com
DNS2: rick.ns.cloudflare.com

Registrant
Fundacion Private Whois
Domain Administrator
Email:4ffaa6d49xrzcy74@t02cduv4f7f99a255f64.privatewhois.net
Attn: potentialpredators.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877

Administrative Contact
Fundacion Private Whois
Domain Administrator
Email:4ffaa6d433rl0gq7@t02cduv4f7f99a255f64.privatewhois.net
Attn: potentialpredators.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877

Technical Contact
Fundacion Private Whois
Domain Administrator
Email:4ffaa6d4gr77eqob@t02cduv4f7f99a255f64.privatewhois.net
Attn: potentialpredators.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877

Registrar: Internet.bs Corp.
Registrar’s Website : http://www.internetbs.net/

Network Whois record

Queried whois.ripe.net with “-B 178.162.233.253″…

Information related to ’178.162.233.0 – 178.162.233.255′

inetnum: 178.162.233.0 – 178.162.233.255
netname: Zhibin-Liao-968785
descr: Virtual Servers
country: DE
admin-c: ZL283-RIPE
tech-c: LSWG-RIPE
status: ASSIGNED PA
mnt-by: NETDIRECT-MNT
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
changed: technik@netdirekt.de 20100915
changed: technik@netdirekt.de 20100930
changed: technik@netdirekt.de 20110227
changed: technik@netdirekt.de 20120509
source: RIPE

person: RIPE Mann
address: Kleyerstrasse 79 / Tor 13
address: 60326 Frankfurt am Main
address: Germany
phone: +49 69 90556880
fax-no: +49 69 9055688-22
abuse-mailbox: abuse@leaseweb.de
nic-hdl: LSWG-RIPE
mnt-by: OCOM-MNT
source: RIPE
changed: ripe@leaseweb.com 20120323

person: Zhibin Liao
address: jingzhoubaiyunlvshui4 2 102
address: hubei
address: china
e-mail: w1zx@live.cn
abuse-mailbox: 80553024@qq.com
phone: +86 13972301809
fax-no: +86 0716 8111978
mnt-by: NETDIRECT-MNT
nic-hdl: ZL283-RIPE
changed: technik@netdirekt.de 20100915
source: RIPE

% Information related to ’178.162.128.0/17AS28753′

route: 178.162.128.0/17
descr: ORG-nA8-RIPE
origin: AS28753
org: ORG-nA8-RIPE
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20100210
source: RIPE

organisation: ORG-nA8-RIPE
org-name: Leaseweb Germany GmbH
org-type: LIR
address: Leaseweb Germany GmbH Kleyer Strasse 79 / Tor 13 60326 Frankfurt Germany
phone: +496990556880
fax-no: +4969905568822
e-mail: support@leaseweb.de
mnt-ref: NETDIRECT-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT

changed: bitbucket@ripe.net 20120618
admin-c: LSWG-RIPE
admin-c: GJ907-RIPE
admin-c: SPW1-RIPE
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS1)

DNS records
name class type data time to live
http://www.potentialpredators.com IN CNAME potentialpredators.com 300s (00:05:00)
potentialpredators.com IN SOA
server: edna.ns.cloudflare.com
email: dns@cloudflare.com
serial: 2012090910
refresh: 10000
retry: 2400
expire: 604800
minimum ttl: 3600
86400s (1.00:00:00)
potentialpredators.com IN A 178.162.233.253 300s (00:05:00)
potentialpredators.com IN NS rick.ns.cloudflare.com 86400s (1.00:00:00)
potentialpredators.com IN MX
preference: 0
exchange: potentialpredators.com
300s (00:05:00)
potentialpredators.com IN NS edna.ns.cloudflare.com 86400s (1.00:00:00)
potentialpredators.com IN MX
preference: 0
exchange: potentialpredators.com
300s (00:05:00)
potentialpredators.com IN A 178.162.233.253 300s (00:05:00)
potentialpredators.com IN NS rick.ns.cloudflare.com 86400s (1.00:00:00)
potentialpredators.com IN SOA
server: edna.ns.cloudflare.com
email: dns@cloudflare.com
serial: 2012090910
refresh: 10000
retry: 2400
expire: 604800
minimum ttl: 3600
86400s (1.00:00:00)
potentialpredators.com IN NS edna.ns.cloudflare.com 86400s (1.00:00:00)
253.233.162.178.in-addr.arpa IN PTR phoenix.trex-host.com 86400s (1.00:00:00)
233.162.178.in-addr.arpa IN NS ns1.leaseweb.nl 86400s (1.00:00:00)
233.162.178.in-addr.arpa IN NS ns4.leaseweb.net 86400s (1.00:00:00)
233.162.178.in-addr.arpa IN SOA
server: ns0.leaseweb.nl
email: postmaster@leaseweb.nl
serial: 2012082203
refresh: 14400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
233.162.178.in-addr.arpa IN NS ns5.leaseweb.nl 86400s (1.00:00:00)

– end –


  1. montelwilliamsloan.us
  2. paydayloanpersonalloan.us
  3. instantcheckmate.com
  4. B2sit.com
  5. montelwilliamsloan.us
  6. paydayloanpersonalloan.us
  7. checkcreditscore888.us
  8. searscareers.us
  9. pinellascountypublicrecords.us
  10. corporatebackgroundchecks.us
  11. collincountycourtrecords.us
  12. hcsoarrestinquiry.us
  13. cookcountyjailinmatesearch.us
  14. miamidadeinmatesearch.us
  15. miamidadecriminalrecords.us
  16. bestloan1500now.us
  17. freeonlinecriminalbackgroundrecordcheck.us
  18. criminalrecordssearch.in
  19. jeffrey.farina.countypublicrecords.us
  20. instantcheckmate.com
  21. instantbgcheck.com
  22. PENISSTRETCHES.ORG
  23. ondemandcourtrecords.us
  24. Newpaydayloans247.com
  25. jobsincharlottenc.us
  26. ctinmatesearch.us
  27. cheaprollerblades1.info
  28. bestmattressforsidesleepers.info
  29. checkyourcreditscore.us
  30. CANNINGJARSFORSALE.INFO
  31. http://www.cashquickloans.info
  32. Bestspincastreel.info
  33. Bestlongboardtrucks.info
  34. winerackscheaps.info
  35. goolike.com
  36. Fast4diet.com
  37. blackfridaycybermondaysaleprices.info
  38. blackfridaycamcorders1.us
  39. jobservicend.us
  40. nco.info
  41. puppyobediencetraining101.com
  42. 11370.info
  43. truthaboutsixpackabsreviewed.com
  44. parisgraves.com
  45. caulking.biz
  46. puppyobediencetraining101.com
  47. searscareers.us
  48. parisgraves.com
  49. caulking.biz
  50. truthaboutsixpackabsreviewed.com

in our opinionis a proliferating threat.

WhoIs ~ www.sexoffenderin.com

PUBLIC RECORDS
Blackmailing and Extortion Scheme

Address lookup
canonical name sexoffenderin.com
scamalert
aliases
addresses 74.208.194.92
Domain Whois record

sexoffenderin

Queried whois.internic.net with “dom sexoffenderin.com
Domain Name: SEXOFFENDERIN.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS17.DOMAINCONTROL.COM
Name Server: NS18.DOMAINCONTROL.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 04-nov-2012
Creation Date: 30-nov-2011
Expiration Date: 30-nov-2013

Last update of whois database: Sun, 31 Mar 2013 15:08:41 UTC
Queried whois.godaddy.com with “sexoffenderin.com

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: SEXOFFENDERIN.COM
Created on: 30-Nov-11
Expires on: 30-Nov-13
Last Updated on: 03-Nov-12

Registrant:
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States

Administrative Contact:
Private, Registration SEXOFFENDERIN.COM@domainsbyproxy.com
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Technical Contact:
Private, Registration SEXOFFENDERIN.COM@domainsbyproxy.com
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Domain servers in listed order:
NS17.DOMAINCONTROL.COM
NS18.DOMAINCONTROL.COM

Network Whois record
Queried whois.arin.net with “n 74.208.194.92

NetRange: 74.208.0.0 – 74.208.255.255
CIDR: 74.208.0.0/16
OriginAS: AS8560
NetName: 1AN1-NETWORK
NetHandle: NET-74-208-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
Comment: For abuse issues, please use only abuse@1and1.com
RegDate: 2006-11-22
Updated: 2012-02-02
Ref: http://whois.arin.net/rest/net/NET-74-208-0-0-1

OrgName: 1&1 Internet Inc.
OrgId: 11INT
Address: 701 Lee Rd
Address: Suite 300
City: Chesterbrook
StateProv: PA
PostalCode: 19087
Country: US
RegDate: 2006-09-05
Updated: 2011-10-12
Comment: http://www.1and1.com
Comment: For abuse issues, please use only abuse@schlund.de
Ref: http://whois.arin.net/rest/org/11INT

OrgAbuseHandle: 1AD-ARIN
OrgAbuseName: 1and1 Abuse Department
OrgAbusePhone: +1-877-206-4253
OrgAbuseEmail: abuse@1and1.com
OrgAbuseRef: http://whois.arin.net/rest/poc/1AD-ARIN

OrgTechHandle: 1NO-ARIN
OrgTechName: 1and1 ARIN Role
OrgTechPhone: +1-610-560-1617
OrgTechEmail: arin-role@oneandone.net
OrgTechRef: http://whois.arin.net/rest/poc/1NO-ARIN

RTechHandle: 1NO-ARIN
RTechName: 1and1 ARIN Role
RTechPhone: +1-610-560-1617
RTechEmail: arin-role@oneandone.net
RTechRef: http://whois.arin.net/rest/poc/1NO-ARIN

RNOCHandle: 1NO-ARIN
RNOCName: 1and1 ARIN Role
RNOCPhone: +1-610-560-1617
RNOCEmail: arin-role@oneandone.net
RNOCRef: http://whois.arin.net/rest/poc/1NO-ARIN

RAbuseHandle: 1AD-ARIN
RAbuseName: 1and1 Abuse Department
RAbusePhone: +1-877-206-4253
RAbuseEmail: abuse@1and1.com
RAbuseRef: http://whois.arin.net/rest/poc/1AD-ARIN

DNS records
name class type data time to live
http://www.sexoffenderin.com IN CNAME sexoffenderin.com 3600s (01:00:00)
sexoffenderin.com IN A 74.208.194.92 3600s (01:00:00)
sexoffenderin.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
sexoffenderin.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
sexoffenderin.com IN NS ns17.domaincontrol.com 3600s (01:00:00)
sexoffenderin.com IN NS ns18.domaincontrol.com 3600s (01:00:00)
sexoffenderin.com IN SOA
server: ns17.domaincontrol.com
email: dns@jomax.net
serial: 2012110301
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
92.194.208.74.in-addr.arpa IN NS crns.1and1-dns.biz 3600s (01:00:00)
92.194.208.74.in-addr.arpa IN NS crns.1and1-dns.org 3600s (01:00:00)
92.194.208.74.in-addr.arpa IN NS crns.1and1-dns.de 3600s (01:00:00)
92.194.208.74.in-addr.arpa IN NS crns.1and1-dns.com 3600s (01:00:00)

– end –

bestbuyrwdcntr.com

Another Bestbuy Text Scams

Congrats Best Buy Shopper You Have Won A $1000 Giftcard! Go to scamalerthttp://bestbuyrwdcntr.com/a/?h and click continue to claim it NOW

 

 

The following A records are set to 50.97.137.50:

English:

English: (Photo credit: Wikipedia)

  1. 10dn6.com
  2. 5os.com
  3. akiba-world.co
  4. akiba.us
  5. akibanewsworld.com
  6. bestbuysms.net
  7. bestbuybunus.net
  8. bestbuycashcards.net
  9. buggybread.com
  10. bestbuywinnet.com
  11. bestbuywinmobi.net
  12. bbdailyprizes.biz
  13. bbdailyprizes.com
  14. bbcardalert.net
  15. bbdailyprizes.com
  16. bestbuycashcards.net
  17. akibaworld.com
  18. bbcardgiveaway.net
  19. giveawayalerts.net
  20. bestbuyrwdcntr.com
  21. BestBuyNotify.net
  22. bbcardrewards.net
  23. bbcashgiveaway.net
  24. bbgiveaway.com
  25. bbrewardcard.net
  26. bbspree.net
  27. bestbuygiveaways.mobi
  28. bestbuyprizes.mobi
  29. bestbuypromo.mobi
  30. bestbuyreward.mobi
  31. bestbuyrewardcard.net
  32. bestbuyrewards.mobi
  33. bestbuysurprise.com
  34. bestbuysurprise.mobi
  35. binarycredit.net
  36. binarycredit.org
  37. bitcoin2012.com
  38. cabinet-lequart.com
  39. cc.gl
  40. club-ottomobile.com
  41. fb.gd
  42. justhookup2.net
  43. myfreebbcard.net
  44. painlessloans.net
  45. pennystocknotify.net
  46. sekaitendencies.com
  47. shibuyanews.com
  48. spacepigtv.com
  49. stephane-quarre.net
  50. superbowlspeculation.net
  51. tw.gl, viagraforcheap.net
  52. worldakiba.com
  53. zbiddyauction.net

111.123.180.92

Brian Kerbs ~ KerbsOnSecurity Explains His Horrific Ordeal


It’s not often that one has the opportunity to be the target of a cyber and kinetic attack at the same time. But that is exactly what’s happened to me and my Web site over the past 24 hours. On Thursday afternoon, my site was the target of a fairly
English: A in Fairfax County, .

English: A in Fairfax County, . (Photo credit: Wikipedia)

massive denial of service attack. That attack was punctuated by a visit from a heavily armed local police unit that was tricked into responding to a 911 call spoofed to look like it came from my home.

Well, as one gamer enthusiast who follows me on Twitter remarked, I guess I’ve now “unlocked that level.”

Things began to get interesting early Thursday afternoon, when a technician from Prolexic, a company which protects Web sites (including KrebsOnSecurity.com) from denial-of-service attacks, forwarded a strange letter they’d received earlier in the day that appeared to have been sent from the FBI. The letter, a copy of which is reprinted in its entirety here, falsely stated that my site was hosting illegal content, profiting from cybercriminal activity, and that it should be shut down. Prolexic considered it a hoax, but forwarded it anyway. I similarly had no doubt it was a fake, and a short phone call to the FBI confirmed that fact.

Around the same time, my site came under a series of denial-of-service attacks, briefly knocking it offline. While Prolexic technicians worked to filter the attack traffic, I got busy tidying up the house (since we were expecting company for dinner). I heard the phone ring up in the office while I was downstairs vacuuming the living room and made a mental note to check my voicemail later. Vacuuming the rug near the front door, I noticed that some clear plastic tape I’d used to secure an extension cord for some outdoor lights was still straddling the threshold of the front door.

Fairfax County Police outside my home on 3/14/13

When I opened the door to peel the rest of the tape off, I heard someone yell, “Don’t move! Put your hands in the air.” Glancing up from my squat, I saw a Fairfax County Police officer leaning over the trunk of a squad car, both arms extended and pointing a handgun at me. As I very slowly turned my head to the left, I observed about a half-dozen other squad cars, lights flashing, and more officers pointing firearms in my direction, including a shotgun and a semi-automatic rifle. I was instructed to face the house, back down my front steps and walk backwards into the adjoining parking area, after which point I was handcuffed and walked up to the top of the street.

I informed the responding officers that this was a hoax, and that I’d even warned them in advance of this possibility. In August 2012, I filed a report with Fairfax County Police after receiving non-specific threats. The threats came directly after I wrote about a service called absoboot.com, which is a service that can be hired to knock Web sites offline.

One of the reasons that I opted to file the report was because I knew some of the young hackers who frequented the forum on which this service was advertised had discussed SWATting someone as a way of exacting revenge or merely having fun at the target’s expense. To my surprise, the officer who took my report said he had never heard of the phenomenon, but promised to read up on it.

One of the officers asked if it was okay to enter my house, and I said sure. Then an officer who was dressed more like a supervisor approached me and asked if I was the guy who had filed a police report about this eventuality about six months earlier. When I responded in the affirmative, he spoke into his handheld radio, and the police began stowing their rifles and the cuffs were removed from my wrists. He explained that they’d tried to call me on the phone number that had called them (my mobile), but that there was no answer. He apologized for the inconvenience, and said they were only doing their jobs. I told him no hard feelings. He told me that the problem of SWATting started on the West Coast and has been slowly making its way east.

The cop that took the report from me after the incident said someone had called 911 using a Caller ID number that matched my mobile phone number; the caller claimed to be me, reporting that Russians had broken into the home and shot my wife. Obviously, this was not the case, and nobody was harmed during the SWATing.

It’s difficult to believe the phony FBI letter that Prolexic received, the denial-of-service attack, and the SWATting were somehow the work of different individuals upset over something I’ve written. The letter to Prolexic made no fewer than five references to a story I published earlier this week about sssdob.ru, a site advertised in the cybercrime underground that sells access to Social Security numbers and credit reports. That story was prompted by news media attention to exposed.su, a site that has been posting what appear to be Social Security numbers, previous addresses and other information on highly public figures, including First Lady Michelle Obama and the director of the FBI.

Interestingly, there are strong indications that a site named booter.tw may have been involved in the denial-of-service attack on my site yesterday. For some bone-headed reason, the entire customer database file for booter.tw appears to be available for download if you happen to the know the link to the archive. A search through that record shows that on Thursday afternoon Eastern Time, someone paid booter.tw to launch a series of denial-of-service attacks against my Web site. The account that paid for the attack used the nickname “Starfall,” using the email address “starfall@gmail.com.”

Update, Mar. 16, 8:09 a.m. ET: It seems that I and several other folks who looked at the SQL file from booter.tw made the same mistake in misreading the table: The account that ordered the DDoS against KrebsOnSecurity.com was not Starfall but instead one that used the nickname “countonme,” and the email address “countonme@gmail.com.”

Full Story ~

You have a new direct message from Facebook Technical Support

Email Header Analysis

IP Address: 83.16.210.157 (aic157.internetdsl.tpnet.pl)
IP Address Country: Poland
IP Continent: Europe
IP Address City Location: Kalisz
IP Address Region: Wielkopolskie
IP Address Latitude: 51.7611,
IP Address Longtitude: 18.091
Organization: Polish Telecom

_______________________________

notification5

From Facebook Technical Support Fri Mar 15 18:54:32 2013
X-Apparently-To: scamFRAUDalert via 98.138.213.211; Fri, 15 Mar 2013 12:54:33 -0700
Return-Path: <foobar@aic157.internetdsl.tpnet.pl>
X-YahooFilteredBulk: 83.16.210.157
Received-SPF: none (domain of aic157.internetdsl.tpnet.pl does not designate permitted sender hosts)
X-YMailISG: hDNhEeUWLDsd.k5a1eCDk_CsQnuDSTbpWMGbhYIiLYGD_0K9
tZxCsYgFZ0d1Odo44CdWauSVWZgVKb3uGc539cKow4Vj1oIkWqo9l92AASXY
aRE6_hi2hi4yDE2uZQUnqnVC7qgZPk0mF5hz0qw57hhbMNsFd8NM7Tsm1wXC
tElN7CB7diy_qXEufd0oF59Axz3iODNo0DJo07JE8g3W4p7w9JTDOYvUDLN4
qpjqAcBJHvFE_hOkQif2bOC2NyLW._qR2qUps_JO_yByoQPB9T7ZylWqMGUt
AwSRTZmetySU5qrFcntsXAdqHEWa00XXzZrt_rzWy0xR8MoQSru7hzTqHyr8
9d8YL6z.F3TRqn.2U8MTR2XNTbQUNAHh942EHtWnh6l0HUR0rdFhgwS911a.
Dwvz7L.TAZPFa4bPAfEihSvvkxoC3lb0ETjxAapDd_7GsunRKUXBovwz74Gp
NeLIoN0olll1aU8W_P3oLeT4w0kdcFoC_m3MXR2wPYzEGJvUx_6zhydRTHTI
KZtPty__IeQDWwsSKUSmO7XcXc.ZocIGAfDcALunQKrRaTZvwQuteouovQ5j
2LvnOJUhycurKWg8H2Ls6HdO1wIPw0.Sk9V80eFWAoAgFOSzSSvYQPQMIGFX
60vYEYtNqSM30LUrrCynfFOgo.cc8KmWzxOpu3eiNi8cECkwOGOcDkn.dG7Z
X6to2Y1mAeZohY83FhJWNIHzjzasOuwSCEK8AvKjNYUySa3P2xHwDgtqR3ss
CeccrxV4ySP748iahZH8rstW9lXuxzV1OqQjfslosycLHasv8tEHcUvF.5Zg
xnCzLGoLco3erjCWOEYn5p0djjUcwFqI69xeMTycSumfsuMFGKBFw8m6jPry
DFmEK5lF8AVhLFnY1bst6dway0hBl6P_RrIoTbJNnoWYkC5UwVAj8zk8UrQZ
oVq.pUZaybM_dBGChflQPOQ5JrFiDlPFUzN_8T7w_94ujRZ5U2JABLAnT8SL
aOYzXiU9HgS4q0csHbNSrffzMHxXEKoR2OEsS5SJnPD_LgBsZtuOYeiw0TmP
xVatqe.edXKJhIsCAfPGuGQxHhcRYQdBzcS_G_cBX_NSiiS6bunE4DAduodS
4VZUfcNZ2tP0hcrgmbIdXp.GNBay7Plq9usnAVuIy60xqgPH..lm0.iJeMGF
zRkx3lAobOsqOpPhYEAo1nLXfZ62pzGsP9VYh_LZ5j3vOsM5lDxXWCk-
X-Originating-IP: [83.16.210.157]
Authentication-Results: mta1285.sbc.mail.gq1.yahoo.com from=aic157.internetdsl.tpnet.pl; domainkeys=neutral (no sig); from=aic157.internetdsl.tpnet.pl; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO aic157.internetdsl.tpnet.pl) (83.16.210.157)
by mta1285.sbc.mail.gq1.yahoo.com with SMTP; Fri, 15 Mar 2013 12:54:33 -0700
Date: 15 Mar 2013 20:54:32 -0500
To: scamFRAUDalert
From: Facebook Technical Support <foobar@aic157.internetdsl.tpnet.pl>
Subject: You have a new direct message from Facebook Technical Support

Message-ID: <a9d3f-b11c3-f47d7653f@aic157.internetdsl.tpnet.pl>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Length: 5241

cnbcnews26.com

scamFRAUDalert see it appropriate to issue this ALERT regarding text messaging from ~cnbcnews26.comscamalert

The following A records are set to 64.250.113.70:

  • com-f1.net
  • com-feb1.net
  • com-jan.net
  • com-jan31.net
  • com-january.net
  • com-news-1.net
  • com-news-5.net
  • com-news-6.net
  • com-news-9.net
  • surveywinner.net

The following A records are set to 142.0.79.138:

  • atweightloss.com
  • blogflatstomachtoday.com
  • breakthroughweightlossdietsolutions.com
  • breakthroughweightlossformula.com
  • burnfatfast4u.com
  • com-businessblog.net
  • com-businesspost.net
  • com-mnbc.net
  • com-reporter.net
  • dailyfinancereports.com
  • dietsolutionsfrompeoplewhoknow.com
  • dietweightplanmessage.com
  • flatstomachtipsblog.com
  • foodsquickflatstomach.com
  • how2loseweighttips.com
  • mygreencoffeereview.com
  • nowfatburningsecrets.com
  • quick-weightloss-review.com
  • rapiddietsecret.com
  • revolutionarydietweightloss.com
  • revolutionarydietweightloss2013.com
  • revolutionarynaturaldiet.com
  • revolutionaryweightlossdietsolutions.com
  • solutionwithweightonline.com
  • todayflatstomachquick.com
  • totaldiet4you.com
  • waystogetfitandhealthyin2013.com
  • weighlossisnotmagicpill.com
  • weight-loss-solution-online.com
  • weightlossbasics1.com
  • weightlosscorp.com
  • weightlossultrafastfformula.com

199.127.103.220 resolves to 199-127-103-220.static.avestadns.com.
The following A records are set to 199.127.103.220:

  • bestfoodsforburningfat1.com,
  • breakthroughdietplan.com,
  • breaktroughnaturaldiet.com,
  • com-cbsnews.net,
  • com-cnet.net,
  • com-cnmews.net,
  • com-cnmews2013.net,
  • com-cnnews.net,
  • com-dailynews.net,
    com-ibnews.net,
  • com-ncbnews.net,
  • com-news-guardian.net,
  • com-newspost.net,
  • com-worknews.net,
  • dietfasttoday.com,
  • dietsystemsecrets.com,
  • extradieta.com,
  • fatburning-now-secrets.com,
  • fatburningnowsecrets.com,
  • financereportsdaily.com,
  • flatstomachwaytoday.com,
  • flattenyourstomachblog.com,
  • flattenyourstomachtoday.com,
  • garciniacambogiadietclub.com,
  • getflatstomachfastplan.com,
  • getweightlossresult.com,
  • gooddietprograms.com,
  • healthyweightlossdiet2013.com,
  • how2loseweightfastandsafely.com,
  • loseweightquickmethod.com,
  • perfecthealthdietblog.com,
  • quicknaturalsolutionbutfat.com,
  • revolutionarydietloss2013.com,
  • revolutionarydietsolutions.com,
  • safeandnaturalfatburn.com,
  • safenaturalweightlossblog.com,
  • secretrapiddiet.com,
  • solutiontobutfat.com,
  • topdietweightloss2013.com,
  • topnaturalweightlosssolution.com,
  • ultrafastslimsecrets.com,
  • waystogetfitin2013.com,
  • weightlossdeals2013.com,
  • weightlossdietwork.com,
  • weightlossmaster2013.com,
  • weightlosssolutionsfrompeoplewhoknow.com
Follow

Get every new post delivered to your Inbox.