WhoIs ~ www.123people.com

Threat To The Global Internet Infrastructure
Public Threat Alert

_________________________

Vienna
Linke Wienzeile 8/29
Vienna, 1060, AUT

Markus Wagner
@MarkusWagner
I’m a European web 2.0 business incubator
Vienna / Austria / Europe · http://hoteurostartups.wordpress.com/%5D
i5invest’s investments include:

3united AG: (Exit to VeriSign Inc.2006)
123people.com: (Exit to Pages Jaunes Group 2010)
tripwolf.com: (Joint Venture MairDumont Media Group, Dieter von Holtzbrinck)
tupalo.com: (Joint Venture European Directories Group/Herold)
wikitude GmbH: (Grand Prize Winner of the 2010 NAVTEQ Global LBS Challenge EMEA, second at Austrian Private Equity & Venture Capital Award 2011)
adaffix GmbH: (Global Mobile Award 2010 for Best Mobile Internet Service)

Paul Weinberger
Chairman of the board
Lukas Zinnagl
Business Development

Russell Perry
CEO
Markus Wagner
Advisory Board
Stefan Kalteis
CEO

whois

Am 05.11.2010 15:48, schrieb ScamFraudAlert:

Dear scamFRAUDalert,

Thank you for your e-mail. We appreciate your feedback and we can assure you that we work very hard to answer your questions regarding data protection laws and regulations.

123people is a free real time search service that finds information that is publicly available on the Internet (i.e. social networking profiles). 123people enables users to check and control their digital footprint and find out what personal information is publicly available on the web.

Please understand that 123people provides a tool to make the search for people related information more convenient. We cannot ensure that information found on the web applies only to one person as the search is related to a name pair, not to a specific person. The more common a name pair is, i.e. “John Smith”, the less specific the information will be.

We do not store any person related profiles or information. This means we are not able to distinguish and separate between different people displayed in our search results, only between names. We comply and are registered under the Austrian Data Protection Laws as we are based in Vienna, Austria.

In every search result there is a certain degree of inaccuracy; results are not often related to a single individual. As we have developed and utilize an automated search technology, a 100% accuracy rate is not possible. We rely on the “human factor”, the user, to make the final distinction of available and relevant information.

If you do not want to be found through 123people, we recommend changing or deleting the inaccurate information that concerns your person from the original source or website. It will therefore disappear from 123people and most other search engines without our intervention. You can use 123people to identify all data sources by looking at your search results. Sources are clearly identified with either a symbol or a text link.

If however you want us to remove information that concerns you explicitly from 123people we are more than happy to follow your request.

Please send us the specific search result links that point directly to the personal information in question.

How to identify your personal links:

1. Search for the requested name pair on 123people.

2. Click on any link in the search result or on the small icon on the bottom left of the thumbnail.

3. Copy the full link displayed in the grey 123people frame within the redirected page or the link provided in the picture thumbnail preview.

4. Send us the links via e-mail along with your full name and we will restrict them on our search service, in compliance with European Guidelines and the Austrian Data Protection Law.

If you would like us to restrict your address or your phone number, please give us the exact link from the source which you can obtain by copying the link location/address (and indicate us the exact address that appears on 123people search results).

How do I copy a link to send it to 123people?

Once you’ve identified the link you would like to send, you must do the following:

- Right click on the link. A menu will appear will some options

- Selection the following option: “Copy Link Location”

- Keep in mind different browsers have slightly different variations on this, but the main text to search for is: “Copy Link…”

With the link copied, you must paste it into the email. To do this, simply create a new email, right click in the message area and select “Paste”.

Please note that although we can restrict a certain link from 123people, the information will continue to exist publicly on the Internet. This means if someone searches for the same name pair on another search engine, the link may continue to appear.

Advice: you can only request link restriction pertaining to your name.

Please visit our web site for detailed information and screenshots about how to identify the links appearing on 123people:

http://www.123people.com/page/reputation

Every month more than 40 million users rely on our people search service. 123people has in many cases been beneficial with people helping them to control and manage their digital footprint, find lost friends and family members or make new business contacts.

Kind regards,

Damian Brooks
Customer Service Specialist

Address lookup
canonical name http://www.123people.com

aliases
addresses 81.16.155.30
Domain Whois record

Queried whois.internic.net with “dom 123people.com

Domain Name: 123PEOPLE.COM
Registrar: PSI-USA, INC. DBA DOMAIN ROBOT
Whois Server: whois.psi-usa.info
Referral URL: http://www.psi-usa.info
Name Server: NS.NEXTLAYER.AT
Name Server: NS2.NEXTLAYER.AT
Status: clientTransferProhibited
Updated Date: 02-jun-2012
Creation Date: 01-jun-2004
Expiration Date: 01-jun-2013

Last update of whois database: Sun, 21 Apr 2013 14:12:12 UTC

Queried whois.psi-usa.info with “123people.com”…

============
PSI-USA, Inc.
============

This is the PSI-USA, Inc. WHOIS server.

All requests are logged.

Requesting IP: 209.200.105.157
requesting URL: http://whois.psi-usa.info
Requesting Object: domain 123people.com
Timestamp: 2013-04-21 16:12:51

You can see the policy that you agree by submitting a query to this server:
whois -h whois.psi-usa.info POLICY

domain: 123people.com
status: LOCK
owner-c: LULU-10182684
admin-c: LULU-10176046
tech-c: LULU-10176046
zone-c: LULU-10176046
nserver: ns.nextlayer.at
nserver: ns2.nextlayer.at
created: 2004-06-02 01:25:43
expire: 2013-06-02 01:25:43 (registry time)
changed: 2012-11-20 07:40:35

[owner-c] handle: 10182684
[owner-c] type: PERSON
[owner-c] title:
[owner-c] fname: Helga
[owner-c] lname: Bernold
[owner-c] org: 123people
[owner-c] address: Stronsdorf 24
[owner-c] city: Stronsdorf
[owner-c] pcode: 2153
[owner-c] country: AT
[owner-c] state: Austria
[owner-c] phone: +43-664-4398603
[owner-c] fax: +43-2526-6710
[owner-c] email: domains@123people.com
[owner-c] protection: B
[owner-c] updated: 2010-03-26 09:53:42

[admin-c] handle: 10176046
[admin-c] type: PERSON
[admin-c] title:
[admin-c] fname: Martin
[admin-c] lname: Stemeseder
[admin-c] org: 123people
[admin-c] address: Linke Wienzeile 8/29
[admin-c] city: Wien
[admin-c] pcode: 1060
[admin-c] country: AT
[admin-c] state: AT
[admin-c] phone: +43-664-4398603
[admin-c] fax: +43-2526-6710
[admin-c] email: domains@123people.com
[admin-c] protection: B
[admin-c] updated: 2010-06-15 12:02:22

[tech-c] handle: 10176046
[tech-c] type: PERSON
[tech-c] title:
[tech-c] fname: Martin
[tech-c] lname: Stemeseder
[tech-c] org: 123people
[tech-c] address: Linke Wienzeile 8/29
[tech-c] city: Wien
[tech-c] pcode: 1060
[tech-c] country: AT
[tech-c] state: AT
[tech-c] phone: +43-664-4398603
[tech-c] fax: +43-2526-6710
[tech-c] email: domains@123people.com
[tech-c] protection: B
[tech-c] updated: 2010-06-15 12:02:22

[zone-c] handle: 10176046
[zone-c] type: PERSON
[zone-c] title:
[zone-c] fname: Martin
[zone-c] lname: Stemeseder
[zone-c] org: 123people
[zone-c] address: Linke Wienzeile 8/29
[zone-c] city: Wien
[zone-c] pcode: 1060
[zone-c] country: AT
[zone-c] state: AT
[zone-c] phone: +43-664-4398603
[zone-c] fax: +43-2526-6710
[zone-c] email: domains@123people.com
[zone-c] protection: B
[zone-c] updated: 2010-06-15 12:02:22

Network Whois record

Queried whois.ripe.net with “-B 81.16.155.30″…

% Information related to ’81.16.155.0 – 81.16.155.255′

inetnum: 81.16.155.0 – 81.16.155.255
netname: YELSTERDIGITAL-NET
descr: yelster digital gmbh
descr: Linke Wienzeile 8/29
descr: 1060 Vienna
descr: Austria
country: AT
admin-c: NLNC1-RIPE
tech-c: NLNC1-RIPE
status: ASSIGNED PA
mnt-by: AS1764-MNT
changed: daniel.stricks@nextlayer.at 20130116
source: RIPE

role: NOC Next Layer
address: NEXT LAYER Telekommunikationsdienstleistungs-
address: und Beratungs GmbH
address: Mariahilfer Guertel 37/7
address: A-1150 Vienna
phone: +43(0)5 1764 110
fax-no: +43(0)5 1764 9
e-mail: noc@nextlayer.at
org: ORG-NLTU1-RIPE
admin-c: RA773-RIPE
admin-c: TF2679-RIPE
tech-c: RA773-RIPE
tech-c: MD13304-RIPE
tech-c: ASC1764-RIPE
tech-c: CG46
tech-c: SOS-RIPE
tech-c: POWO-RIPE
tech-c: DSTR-RIPE
tech-c: MR10426-RIPE
tech-c: TF2679-RIPE
nic-hdl: NLNC1-RIPE
remarks: —————————————————–
remarks: The NEXT LAYER NOC can be reached during office hours
remarks: between 0900 and 1800 (CET) at +43 5 1764 110. Outside
remarks: these hours, please use the duty-engineer mobile number
remarks: supplied in the handover document or send an email
remarks: to noc@nextlayer.at in non-urgent cases.
remarks: —————————————————–
notify: hostmaster@nextlayer.at
abuse-mailbox: abuse@nextlayer.at
mnt-by: NEXTLAYER-MNT
mnt-by: AS1764-MNT
changed: Rene.Avi@nextlayer.at 20050721
changed: Rene.Avi@nextlayer.at 20060311
changed: silvia.schuckert@nextlayer.at 20060713
changed: andreas.poiss@nextlayer.at 20070213
changed: silvia.schuckert@nextlayer.at 20080422
changed: Rene.Avi@nextlayer.at 20090510
changed: daniel.stricks@nextlayer.at 20120501
changed: Rene.Avi@nextlayer.at 20120522
source: RIPE

% Information related to ’81.16.155.0/24AS42829′

route: 81.16.155.0/24
descr: ONETWOTHREEPEOPLE-NET
descr: 123people Internetservices GmbH
origin: AS42829
mnt-by: AS1764-MNT
changed: Rene.Avi@nextlayer.at 20090825
changed: daniel.stricks@nextlayer.at 20100803
source: RIPE

% This query was served by the RIPE Database Query Service version 1.60.2 (WHOIS3)

DNS records
name class type data time to live
http://www.123people.com IN A 81.16.155.30 86400s (1.00:00:00)
123people.com IN TXT v=spf1 include:sendgrid.net ip4:81.16.155.0/24 mx a:mail.123people.com a:123people.com mx:123people.com include:123people.com ~all 3600s (01:00:00)
123people.com IN SOA
server: ns.nextlayer.at
email: hostmaster@nextlayer.at
serial: 2013031903
refresh: 1800
retry: 900
expire: 1209600
minimum ttl: 3600
86400s (1.00:00:00)
123people.com IN NS ns2.nextlayer.at 86400s (1.00:00:00)
123people.com IN NS ns.nextlayer.at 86400s (1.00:00:00)
123people.com IN A 81.16.155.30 86400s (1.00:00:00)
123people.com IN MX
preference: 200
exchange: mail2.i5invest.com
86400s (1.00:00:00)
123people.com IN MX
preference: 100
exchange: mail.123people.com
86400s (1.00:00:00)
30.155.16.81.in-addr.arpa IN PTR mail.123people.com 86400s (1.00:00:00)
155.16.81.in-addr.arpa IN SOA
server: ns.nextlayer.at
email: hostmaster@nextlayer.at
serial: 2012111501
refresh: 28800
retry: 14400
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
155.16.81.in-addr.arpa IN NS ns2.nextlayer.at 86400s (1.00:00:00)
155.16.81.in-addr.arpa IN NS ns.nextlayer.at 86400s (1.00:00:00)

– end –

http://i5invest.com/markus-wagner/

Fake Facebook Notifications

scamFRAUDalert have seen an aggressive spam campaign by spammers regarding facebook notifications. These notifications are all phishing expeditions which primary aim is steal your personal information and contain malwares.

This slideshow requires JavaScript.

Law Enforcement Affairs ~ lawenforcementaffairs.com

This individual Michael King aka Michael W. King aka Wayne Michael King aka Mike King aka MikeKingUSA and his BPO operators [Business Process Outsourceing] are a threat to society. His fascination with Law Enforcement and Guns pose a direct threat to us all.

His ONLINE ACTIVITIES SHOULD NOT GO UNNOTICED by AUTHORITIES in both Florida, North Carolina and the FEDS.

Sites We’ve Identified Associated With This Individual

  1. Potential Predators ~ potentialpredators.com
  2. The Online Predators Watch ~ theonline-watch.com
  3. Communication Unlimited ~ North Carolina
  4. Predators Watch ~ predatorswatch.com
  5. Elite Consulting Services USA ~ eliteconsultingservices.com
  6. Potential Prostitutes ~ potentialprostitutes.com
  7. Bad Renter Report ~ badrenterreport.com
  8. Mike King ~ MikeKingUSA.COM
  9. Wiki Warnings ~ wikiwarnings.com
  10. Warning Notice ~ warning-notice.com
  11. Omega Enterprises USA ~ omegaenterprisesusa.com
  12. Law Enforcement Association ~ lawenforcementassociation.com
  13. Warning Notice ~ warning-notice.com
  14. Reprenown.com
  15. Mike King Enterprises
  16. Law Enforcement Affairs ~ Lawenforcementaffairs.com
  17. Bad Renter Report ~ badrenterreport.com

lawenforcementaffairs

Related articles

OpenX Hacking ~ 173.241.250.2

Image representing OpenX as depicted in CrunchBase

According to KerbsOnSecurity, Hackers are actively exploiting a dangerous security

vulnerability in OpenX — an online ad-serving solution consumer alertfor Web sites. http://Ripoffreport.com which use OpenX to server it ads have been seeing exploit attacks coming from IP 173.241.250.2 from http://Ripoffreport.com site.

Google Say Ripoffreport.com Site May Be Unsafe

scamFRAUDalert see it appropriate to issue this ALERT as Google Safe consumer alertBrowsing Report that portion of Ripoffreport.com site may be hazardous to your computer.

The site may be compromised or infected with Malwares that deserves immediate attention. See proof below – OpenX adware publishers network is responsible.

intrusion attack3

Google Safe Browsing

Google Safe Browsing2

WikiWarnings.com aka Reprenown.com

Class Action Lawsuit Against Mugshot Websites
WikiWarnings Is A Camouflage

A Mugshot Operator Masquerading As A Consumer Complaints Site.
The reality is that WikiWarnings is just Fraud Alertanother of the many new-found gold rush online for background search or people finder websites now populating the internet.

WikiWarning.com is a website masquerading as a consumer advocate site and soliciting consumers to hire them to remove complaints and other negative comments posted online that may have been posted by wikiwarnings.com themselves.

Most complaints found on WikiWarnings.com have been retrieved from District Attorneys offices, State, Counties and Police database nationwide or can be found by doing a google search.

It appears like the reports on WikiWarnings are about DeadBeat Dads gathered from public record accessible to the public for FREE.
The operator(s) of wikiwarnings.com claim to have some association with law enforcement and have access and knowledge in retrieving these database.
Law Enforcement Association is an exclusive membership for the law enforcement community only.
July 2009Present (3 years 6 months) Raleigh-Durham, North Carolina Area
theraleighpost2

He also claim to be the Owner/Administrator Law Enforcement Association. His background and knowledge explains why these mugshots photos and Deadbeat Dad photos are appearing on wikiwarnings.com

From what we’ve investigated so far online, this Michael King is not a lone ranger. This is the same play book as www.scambook.com where all of the participating characters are surrogates which road lead us back to Los Angeles, CA.

He/She claims to have residence in both Raleigh, NC and Miami, Florida.

  1. WikiWarnings.com aka Mike King aka MikeKingUSA
    5200 summit manor lane, 107
    Raleigh, North Carolina 27613
    United States
  2. WikiWarnings.com aka Mike King aka MikeKingUSA
    18243 SW 149 Pl
    Miami, Florida 33187
    United States
  3. Elite Consulting Svcs USA
    P. O. Box 770482
    Miami, Florida 33187
  4. WikiWarnings
    5730 Plunkett Street
    Hollywood, Florida 33023
    United States
  5. Wikiwarnings.com
    3732 N.W. 16 Street
    Fort Lauderdale, FL 33311
  6. PAYCHEQUE PLUS, INC.
    King, Jennifer A.
    7623 Sw 129th Place
    Miami, FL 33183

The site blatantly post FALSE information regarding the Founder of scamFRAUDalert now populating the internet listed on Ripoffreport.com, reviewstalk.com, complaintsboard.com to name a few begin appearing on WikiWarnings.com immediately after SFA begun “Warning” the public about “Potential Predators Extortion Scam.” What a coincidence?

Our investigation begun by looking at PotentialPredators.com follow by a series of other mugshots listed below. As one of these were discovered, another pop up.

www.potentialpredators.com ~ www.potentialreal.com predators ~ www.predatorswatch.com ~ www.theonline-watch.com
www.wikiwarnings.com

1-888-658-0994
305-610-3581

Hire Wiki Warnings

LawEnforcementAffairs

Deadbeat Dad

LawEnforcement Assoc

Wiki Warnings Administrator/Founder
Member Law Enforcement Association

July 2009 – 2012-12-11 Present (3 years 6 months)
Raleigh-Durham, North Carolina Area

Address lookup
canonical name http://wikiwarnings.com
UA-28934134-1
pub-9281259263194249

Elite Consulting Svc USA

305-610-3581

18243 SW 149th Pl
Miami, FL 33187

Email Header Analysis

IP Address: 98.26.22.214 (cpe-098-026-022-214.nc.res.rr.com)
IP Address Country: United States
IP Continent: North America
IP Address City Location: Raleigh
IP Address Region: North Carolina
IP Address Latitude: 35.7721,
IP Address Longtitude: -78.6386
Organization: Road Runner

from: ceo@omegaenterprisesusa.com
to: ScamFraudAlert <scamfraudalert@gmail.com>
date: Wed, Oct 24, 2012 at 11:44 PM
subject: [Auto-Reply] http://wikiwarnings.com/archie-garga-richardson/
: Important mainly because of the people in the conversation.
from: michaelking@eliteconsultingservices.com
to: ScamFraudAlert <scamfraudalert@gmail.com>
date: Wed, Oct 24, 2012 at 11:44 PM
subject: [Auto-Reply] http://wikiwarnings.com/archie-garga-richardson/
: Important mainly because of the people in the conversation.
from: Michael King <ceo@omegaenterprisesusa.com>
to: ScamFraudAlert <scamfraudalert@gmail.com>
date: Thu, Oct 25, 2012 at 2:40 AM
subject: Re – WikiWarnings – Legal Document
: Important mainly because of the words in the message.
Today, you and your company will be hearing from our legal department in reference to your recent email sent to us and cc to some unknowns, as well as Godaddy and Google.
The information you have requested removed, will NOT be removed as per your demand.
Further more, you addressed people and companies that are not associated with WikiWarnings.
As such, our company has protected itself vigorously and aggressively with threatening emails such as yours.
Your email has been received and forwarded to our legal department for immediate action.
Regards,
WikiWarnings

aliases
addresses 97.74.141.128
Domain Whois record

Queried whois.internic.net with “dom wikiwarnings.com”…

Domain Name: WIKIWARNINGS.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS17.DOMAINCONTROL.COM
Name Server: NS18.DOMAINCONTROL.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 09-nov-2012
Creation Date: 13-dec-2010
Expiration Date: 13-dec-2013

Last update of whois database: Sun, 09 Dec 2012 02:48:19 UTC
Queried whois.godaddy.com with “wikiwarnings.com

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: WIKIWARNINGS.COM
Created on: 13-Dec-10
Expires on: 13-Dec-13
Last Updated on: 09-Nov-12

Registrant:
Omega Enterprises USA, Inc.
P.O.Box 770482
Miami, Florida 33177
United States

Administrative Contact:
King, Michael ceo@OmegaEnterprisesUSA.com
Omega Enterprises USA, Inc.
P.O.Box 770482
Miami, Florida 33177
United States
+1.8886580994

Technical Contact:
King, Michael ceo@OmegaEnterprisesUSA.com
Omega Enterprises USA, Inc.
P.O.Box 770482
Miami, Florida 33177
United States
+1.8886580994

Domain servers in listed order:
NS17.DOMAINCONTROL.COM
NS18.DOMAINCONTROL.COM

Network Whois record

Queried whois.arin.net with “n 97.74.141.128″…

NetRange: 97.74.0.0 – 97.74.255.255
CIDR: 97.74.0.0/16
OriginAS: AS26496
NetName: GO-DADDY-COM-LLC
NetHandle: NET-97-74-0-0-1
Parent: NET-97-0-0-0-0
NetType: Direct Allocation
Comment: Please send abuse complaints to abuse@godaddy.com
RegDate: 2008-08-14
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-97-74-0-0-1

OrgName: GoDaddy.com, LLC
OrgId: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US
RegDate: 2007-06-01
Updated: 2012-03-15
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: http://whois.arin.net/rest/org/GODAD

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE51-ARIN

OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com
OrgTechRef: http://whois.arin.net/rest/poc/NOC124-ARIN

OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com
OrgNOCRef: http://whois.arin.net/rest/poc/NOC124-ARIN

RAbuseHandle: ABUSE51-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-480-624-2505
RAbuseEmail: abuse@godaddy.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE51-ARIN

RTechHandle: NOC124-ARIN
RTechName: Network Operations Center
RTechPhone: +1-480-505-8809
RTechEmail: noc@godaddy.com
RTechRef: http://whois.arin.net/rest/poc/NOC124-ARIN

RNOCHandle: NOC124-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-480-505-8809
RNOCEmail: noc@godaddy.com
RNOCRef: http://whois.arin.net/rest/poc/NOC124-ARIN

DNS records
name class type data time to live
wikiwarnings.com IN A 97.74.141.128 3600s (01:00:00)
wikiwarnings.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
wikiwarnings.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
wikiwarnings.com IN NS ns17.domaincontrol.com 3600s (01:00:00)
wikiwarnings.com IN NS ns18.domaincontrol.com 3600s (01:00:00)
wikiwarnings.com IN TXT google-site-verification=k1TiFNibq-LvSgen7m64yYg88kZ-R6yW1VmF-sauLak 3600s (01:00:00)
wikiwarnings.com IN SOA
server: ns17.domaincontrol.com
email: dns@jomax.net
serial: 2012112700
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
128.141.74.97.in-addr.arpa IN PTR p3nlhg36c067.shr.prod.phx3.secureserver.net 3600s (01:00:00)
74.97.in-addr.arpa IN NS cns1.secureserver.net 134s (00:02:14)
74.97.in-addr.arpa IN NS cns2.secureserver.net 134s (00:02:14)
74.97.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 4
original ttl: 10800 (03:00:00)
signature expiration: 2012-12-18 01:01:03Z
signature inception: 2012-12-08 01:01:03Z
key tag: 38687
signer’s name: 97.in-addr.arpa
signature:
(1024 bits)
7334s (02:02:14)
74.97.in-addr.arpa IN NSEC
next domain name: 0.75.97.in-addr.arpa
record types: NS RRSIG NSEC
7334s (02:02:14)

– end –

Elite Consulting Svc USA
18243 Sw 149th Pl,
Miami, FL
(305)610-3581

Detail by Entity Name
Florida Limited Liability Company
ELITE CONSULTING SERVICES USA, LLC
Filing Information
Document Number L09000083120
FEI/EIN Number 900512373
Date Filed 08/27/2009
State FL
Status INACTIVE
Effective Date 09/01/2009
Last Event ADMIN DISSOLUTION FOR ANNUAL REPORT
Event Date Filed 09/28/2012
Event Effective Date NONE
Principal Address
18243 SW 149 PLACE
MIAMI FL 33187 US
Changed 05/02/2010
Mailing Address
18243 SW 149 PLACE
MIAMI FL 33187 US
Changed 05/02/2010
Registered Agent Name & Address
KING, MICHAEL W MGR
18243 SW 149 PLACE
MIAMI FL 33187 US
Name Changed: 05/02/2010
Manager/Member Detail
Name & Address
Title MGR
KING, MICHAEL W MGR
18243 SW 149 PLACE
MIAMI FL 33187
Title MGRM
KING, JENNIFER A MGR
18243 SW 149 PLACE
MIAMI FL 33187
Annual Reports
Report Year Filed Date
2010 05/02/2010
2011 03/16/2011
Florida Profit Corporation
OMEGA ENTERPRISES USA INC.
Filing Information
Document Number P10000096229
FEI/EIN Number APPLIED
Date Filed 11/29/2010
State FL
Status INACTIVE
Effective Date 11/24/2010
Last Event ADMIN DISSOLUTION FOR ANNUAL REPORT
Event Date Filed 09/28/2012
Event Effective Date NONE
Principal Address
18243 SW 149 PLACE
MIAMI FL 33187
Mailing Address
18243 SW 149 PLACE
MIAMI FL 33187
Registered Agent Name & Address
KING, MICHAEL
18243 SW 149 PLACE
MIAMI FL 33187 US
Officer/Director Detail
Name & Address
Title P
KING, MICHAEL
18243 SW 149 PLACE
MIAMI FL 33187 US
Title VP
KING, ADRIANA
18243 SW 149 PLACE
MIAMI FL 33187
Annual Reports
Report Year Filed Date
2011 03/16/2011
Document Images
Florida Profit Corporation
ELITE FLORIDA CATERING, INC
Filing Information
Document Number P10000050065
FEI/EIN Number APPLIED
Date Filed 06/14/2010
State FL
Status INACTIVE
Effective Date 06/14/2010
Last Event ADMIN DISSOLUTION FOR ANNUAL REPORT
Event Date Filed 09/28/2012
Event Effective Date NONE
Principal Address
18243 SW 149 PLACE
MIAMI FL 33187
Mailing Address
18243 SW 149 PLACE
MIAMI FL 33187
Registered Agent Name & Address
KING, JENNIFER A
18243 SW 149 PLACE
MIAMI FL 33187 US
Officer/Director Detail
Name & Address
Title P
KING, JENNIFER A
18243 SW 149 PLACE
MIAMI FL 33187 US
Title VP
KING, MICHAEL W
18243 SW 149 PLACE
MIAMI FL 33187 US
Annual Reports
Report Year Filed Date
2011 03/16/2011
Document Images

Address lookup
canonical name blisshosting.com
aliases
addresses 74.53.93.210
Domain Whois record

Queried whois.internic.net with “dom blisshosting.com”…

Domain Name: BLISSHOSTING.COM
Registrar: NAME.COM LLC
Whois Server: whois.name.com
Referral URL: http://www.name.com
Name Server: NS621.WEBSITEWELCOME.COM
Name Server: NS622.WEBSITEWELCOME.COM
Status: clientTransferProhibited
Updated Date: 17-jul-2012
Creation Date: 16-jul-2007
Expiration Date: 16-jul-2013

Last update of whois database: Tue, 11 Dec 2012 17:11:10 UTC

Queried whois.name.com with “blisshosting.com”…

Domain Name: blisshosting.com
Registrar: Name.com LLC

Expiration Date: 2013-07-16 06:56:42
Creation Date: 2007-07-16 06:56:42

Name Servers:
ns621.websitewelcome.com
ns622.websitewelcome.com

REGISTRANT CONTACT INFO
Fatkhul Muttakin
fatkhul muttakin
Jl. Bakti 182 A
Medan
Sumatra Utara
20216
IN
Phone: +62.85261312333
Email Address: imissuaja@yahoo.com

ADMINISTRATIVE CONTACT INFO
Fatkhul Muttakin
fatkhul muttakin
Jl. Bakti 182 A
Medan
Sumatra Utara
20216
IN
Phone: +62.85261312333
Email Address: imissuaja@yahoo.com

TECHNICAL CONTACT INFO
Fatkhul Muttakin
fatkhul muttakin
Jl. Bakti 182 A
Medan
Sumatra Utara
20216
IN
Phone: +62.85261312333
Email Address: imissuaja@yahoo.com

BILLING CONTACT INFO
Fatkhul Muttakin
fatkhul muttakin
Jl. Bakti 182 A
Medan
Sumatra Utara
20216
IN
Phone: +62.85261312333
Email Address: imissuaja@yahoo.com

Timestamp: 1355245907.1164

Network Whois record

Queried rwhois.theplanet.com with “74.53.93.210″…

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-THEPLANET-BLK-14
network:Auth-Area:74.52.0.0/14
network:Network-Name:TPIS-BLK-74-53-93-0
network:IP-Network:74.53.93.208/28
network:IP-Network-Block:74.53.93.208 – 74.53.93.223
network:Organization;I:WebsiteWelcome
network:Street-Address:N/A
network:City:Boca Raton
network:State:FL
network:Postal-Code:33496
network:Country-Code:USA
network:Tech-Contact;I:abuse@websitewelcome.com
network:Admin-Contact;I:abuse@websitewelcome.com
network:Created:20080624
network:Updated:20120501

network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.74.52.0.0/14
network:Auth-Area:74.52.0.0/14
network:Network-Name:SOFTLAYER-74.52.0.0
network:IP-Network:74.53.0.0/17
network:IP-Network-Block:74.53.0.0-74.53.127.255
network:Organization;I:SoftLayer
network:Street-Address:4849 Alpha Road
network:City:Dallas
network:State:TX
network:Postal-Code:75244
network:Country-Code:US
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:abuse@softlayer.com
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2012-06-21 11:15:10
network:Updated-By:ipadmin@softlayer.com

%ok

Queried whois.arin.net with “n 74.53.93.210″…

NetRange: 74.52.0.0 – 74.55.255.255
CIDR: 74.52.0.0/14
OriginAS: AS36420, AS30315, AS13749, AS21844
NetName: NETBLK-THEPLANET-BLK-14
NetHandle: NET-74-52-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
RegDate: 2006-02-17
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-74-52-0-0-1

OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-714-3555
OrgNOCEmail: noc@theplanet.com
OrgNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com
OrgTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com
RTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-714-3555
RNOCEmail: noc@theplanet.com
RNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

DNS records
name class type data time to live
blisshosting.com IN MX
preference: 0
exchange: blisshosting.com
14400s (04:00:00)
blisshosting.com IN A 74.53.93.210 14400s (04:00:00)
blisshosting.com IN SOA
server: ns621.websitewelcome.com
email: warnetforum@gmail.com
serial: 2009060402
refresh: 43200
retry: 7200
expire: 2400000
minimum ttl: 86400
43200s (12:00:00)
blisshosting.com IN NS ns622.websitewelcome.com 86400s (1.00:00:00)
blisshosting.com IN NS ns621.websitewelcome.com 86400s (1.00:00:00)
210.93.53.74.in-addr.arpa IN PTR patriot.websitewelcome.com 86400s (1.00:00:00)
93.53.74.in-addr.arpa IN SOA
server: ns3.arpa.networklayer.com
email: root@softlayer.com
serial: 2011083100
refresh: 7200
retry: 600
expire: 1728000
minimum ttl: 43200
86400s (1.00:00:00)
93.53.74.in-addr.arpa IN NS ns3.arpa.networklayer.com 86400s (1.00:00:00)
93.53.74.in-addr.arpa IN NS ns4.arpa.networklayer.com 86400s (1.00:00:00)

– end –

67.231.246.86 resolves to 67-231-246-86.static.turnkeyinternet.net.
The following A records are set to 67.231.246.86:

    1. 8lr.net
    2. acmilanisti.com
    3. barak.asia
    4. baraktechnology.com
    5. bloggerjakarta.com
    6. christmastree-shops.com
    7. depokpos.com
    8. first.noeonline.info
    9. first.noesite.com
    10. hamilinshinta.asia
    11. inkhapratama.com
    12. iwwj.com
    13. jualan.info
    14. karisiak.com
    15. kedaihape.com
    16. mangacode.com
    17. mellystore.com
    18. mikailsoft.com
    19. mubarak-af.info
    20. murahol.com
    21. noeonline.info
    22. noesite.com
    23. ns1.mikailsoft.com
    24. ns2.mikailsoft.com
    25. pencari.info
    26. pituluik.com
    27. poss-unp.info
    28. ricoism.com
    29. rumahkardus-outlet.com
    30. sabichul.biz
    31. samapta5.com
    32. second.noeonline.info
    33. second.noesite.com
    34. senyumcinta.com
    35. sman66.com
    36. softgunstore.info
    37. sumbarlib.net
    38. swalayan-online.com
    39. syufi.com
    40. traveldealsguide.asia
    41. undangan.us
    42. vachzar.com
    43. vbfk.com
    44. w3magz.com
    45. zaqy.asia
    46. giveusfootball.com
    47. Asian21.info
    48. seocontester.com
    49. seocontester.com
    50. w3magz.com
    51. seocontester.com
    52. jseconsultant.com
    53. PodoMoro.com
    54. umaticstudio.com
    55. piala.asia
    56. w3linux.com
    57. ngoding.com

Extortion Scam Related to Delinquent Payday Loans

Extortion Scam Related to Delinquent Payday Loans

Washington, D.C. December 07, 2010
  • FBI National Press Office (202) 324-3691

The Internet Crime Complaint Center has received many complaints from victims of payday loan telephone collection scams. Callers claim the victim is delinquent in a payday loan and must repay the loan to avoid legal consequences.

The callers purport to be representatives of the FBI, Federal Legislative Department, various law firms, or other legitimate-sounding agencies. They claim to be collecting debts for companies such as United Cash Advance, U.S. Cash Advance, U.S. Cash Net, and other Internet check-cashing services.

According to complaints received from the public, the callers have accurate data about victims, including Social Security numbers, dates of birth, addresses, employer information, bank account numbers, and the names and telephone numbers of relatives and friends. How the fraudsters obtained the personal information varies, but in some cases victims have reported they completed online applications for other loans or credit cards before the calls started.

The fraudsters relentlessly call the victim’s home, cell phone, and place of employment. They refuse to provide any details about the alleged payday loans and become abusive when questioned. The callers have threatened victims with legal actions, arrests, and, in some cases, physical violence if they do not pay. In many cases, the callers harass victims’ relatives, friends, and employers.

Some fraudsters have instructed victims to fax a statement agreeing to pay a certain amount, on a specific date, via a pre-paid Visa card. The statement further declares the victim will never dispute the debt.

If you receive these calls, do not follow the caller’s instructions. Rather, you should:

  • Notify your banking institutions.
  • Contact the three major credit bureaus and request an alert be put on your file.
  • Contact your local law enforcement agencies if you feel you are in immediate danger.
  • File a complaint at www.IC3.gov.

Tips to avoid becoming a victim of this scam:

  • Never give your Social Security number—or personal information of any kind—over the telephone or online unless you initiate the contact.
  • Be suspicious of any e-mail with urgent requests for personal financial information. The e-mail may include upsetting or exciting but false statements to get you to react immediately.
  • Avoid filling out forms in e-mail messages that request personal information.
  • Ensure that your browser is up-to-date and security patches have been applied.
  • Check your bank, credit, and debit card statements regularly to make sure that there are no unauthorized transactions. If anything looks suspicious, contact your bank and all card issuers.
  • When you contact companies, use numbers provided on the back of cards or statements

Federal Bureau of Investigation [FBI] – Payday Loans Warning

WhoIs Potential Predators ~ www.potentialpredators.com

Is Potential Predators potentialpredators.com a Scam? Answer:YES
scamalert This Site Engages In Blackmailing ~ Extortion
potentialreal predators ~ predatorswatch.com ~ theonline-watch.com ~ wikiwarnings.com Mugshots Sale

1-888-658-0994

Protect Yourself Online | Potential Predators

It has come to our attention at ~ scamFRAUDalert ~ that the operators of the website Potential Predators ~ www.potentialpredators.com are contacting the general public informing them they have been added to their database as a “potential predators.” If they seek removal, they will have to pay $99.95. These complaints can be found on Ripoffreport.com.

The common thread in these complaints is this:

My name is on potential predator for no reason.
Potential Predators Profiles


Hire Wiki Warnings

Craigslist.org have posted similar warning below

NEW SCAM http://www.potentialpredators.com (Thorndale, PA)


Date: 2012-09-20, 9:11AM EDT
cvg5x-3273091382@comm.craigslist.org [Errors when replying to ads?]


They have this site http://www.potentialpredators.com and they put anyone’s name on there and they find your name, email and picture by searching Google or wherever search site and get your profile picture and your email you have associated with the profile, and then they post it to this scum bag site/Internet and then the email you saying your email and picture has been posted to this site, and when you go to see what it’s about.
There will be a button that you click on to have your name removed from the list, when you click on the button it will take you to a place to use your credit card and pay $99.95 to have your name removed.
It’s a total Scam and they are real scum bags and have already been turned into the Attorney General’s Office and the attorney General is looking for people that have had this scam run on them. You need to contact the AGO, Contact this is the US federal Attorney Generals office- AskDOJ@usdoj.gov Also contact whatever state you’re in your state Attorney Generals Office and tell both that you’re being extorted and blackmailed!!!
But these numbers are from the site and you can email from the AGoffice site
Phone: 717-787-3391
Fax: 717-787-8242Press Office: 717-787-5211
Hotlines:
Child Predator Unit 800-385-1044
Elder Abuse Unit 866-623-2137
Consumer Protection 800-441-2555
Education & Outreach 800-525-7642
Health Care Section 877-888-4877
Do Not Call List888-777-3406
Home Improvement Consumer
Protection Act Helplines:
Consumer Helpline 888.520.6680
Contractor Helpline 717.772.2425
  • Location: Thorndale, PA
  • it’s NOT ok to contact this poster with services or other commercial interests

PostingID: 3273091382



The New WebSite

Address lookup
canonical name potentialpredators.com
aliases
addresses 178.162.233.253
Domain Whois record

Queried whois.internic.net with “dom potentialpredators.com”…

Domain Name: POTENTIALPREDATORS.COM
Registrar: INTERNET.BS CORP.
Whois Server: whois.internet.bs
Referral URL: http://www.internet.bs
Name Server: EDNA.NS.CLOUDFLARE.COM
Name Server: RICK.NS.CLOUDFLARE.COM
Status: clientTransferProhibited
Updated Date: 04-sep-2012
Creation Date: 09-jul-2012
Expiration Date: 09-jul-2013

Last update of whois database: Thu, 20 Sep 2012 19:07:02 UTC

Queried whois.internet.bs with “potentialpredators.com”…

Domain potentialpredators.com

Date Registered: 2012-7-9
Date Modified: 2012-9-4
Expiry Date: 2013-7-9

DNS1: edna.ns.cloudflare.com
DNS2: rick.ns.cloudflare.com

Registrant
Fundacion Private Whois
Domain Administrator
Email:4ffaa6d49xrzcy74@t02cduv4f7f99a255f64.privatewhois.net
Attn: potentialpredators.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877

Administrative Contact
Fundacion Private Whois
Domain Administrator
Email:4ffaa6d433rl0gq7@t02cduv4f7f99a255f64.privatewhois.net
Attn: potentialpredators.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877

Technical Contact
Fundacion Private Whois
Domain Administrator
Email:4ffaa6d4gr77eqob@t02cduv4f7f99a255f64.privatewhois.net
Attn: potentialpredators.com
Aptds. 0850-00056
Zona 15 Panama
Panama
Tel: +507.65995877

Registrar: Internet.bs Corp.
Registrar’s Website : http://www.internetbs.net/

Network Whois record

Queried whois.ripe.net with “-B 178.162.233.253″…

Information related to ’178.162.233.0 – 178.162.233.255′

inetnum: 178.162.233.0 – 178.162.233.255
netname: Zhibin-Liao-968785
descr: Virtual Servers
country: DE
admin-c: ZL283-RIPE
tech-c: LSWG-RIPE
status: ASSIGNED PA
mnt-by: NETDIRECT-MNT
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
changed: technik@netdirekt.de 20100915
changed: technik@netdirekt.de 20100930
changed: technik@netdirekt.de 20110227
changed: technik@netdirekt.de 20120509
source: RIPE

person: RIPE Mann
address: Kleyerstrasse 79 / Tor 13
address: 60326 Frankfurt am Main
address: Germany
phone: +49 69 90556880
fax-no: +49 69 9055688-22
abuse-mailbox: abuse@leaseweb.de
nic-hdl: LSWG-RIPE
mnt-by: OCOM-MNT
source: RIPE
changed: ripe@leaseweb.com 20120323

person: Zhibin Liao
address: jingzhoubaiyunlvshui4 2 102
address: hubei
address: china
e-mail: w1zx@live.cn
abuse-mailbox: 80553024@qq.com
phone: +86 13972301809
fax-no: +86 0716 8111978
mnt-by: NETDIRECT-MNT
nic-hdl: ZL283-RIPE
changed: technik@netdirekt.de 20100915
source: RIPE

% Information related to ’178.162.128.0/17AS28753′

route: 178.162.128.0/17
descr: ORG-nA8-RIPE
origin: AS28753
org: ORG-nA8-RIPE
mnt-lower: NETDIRECT-MNT
mnt-routes: NETDIRECT-MNT
mnt-by: NETDIRECT-MNT
changed: technik@netdirekt.de 20100210
source: RIPE

organisation: ORG-nA8-RIPE
org-name: Leaseweb Germany GmbH
org-type: LIR
address: Leaseweb Germany GmbH Kleyer Strasse 79 / Tor 13 60326 Frankfurt Germany
phone: +496990556880
fax-no: +4969905568822
e-mail: support@leaseweb.de
mnt-ref: NETDIRECT-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT

changed: bitbucket@ripe.net 20120618
admin-c: LSWG-RIPE
admin-c: GJ907-RIPE
admin-c: SPW1-RIPE
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.9 (WHOIS1)

DNS records
name class type data time to live
http://www.potentialpredators.com IN CNAME potentialpredators.com 300s (00:05:00)
potentialpredators.com IN SOA
server: edna.ns.cloudflare.com
email: dns@cloudflare.com
serial: 2012090910
refresh: 10000
retry: 2400
expire: 604800
minimum ttl: 3600
86400s (1.00:00:00)
potentialpredators.com IN A 178.162.233.253 300s (00:05:00)
potentialpredators.com IN NS rick.ns.cloudflare.com 86400s (1.00:00:00)
potentialpredators.com IN MX
preference: 0
exchange: potentialpredators.com
300s (00:05:00)
potentialpredators.com IN NS edna.ns.cloudflare.com 86400s (1.00:00:00)
potentialpredators.com IN MX
preference: 0
exchange: potentialpredators.com
300s (00:05:00)
potentialpredators.com IN A 178.162.233.253 300s (00:05:00)
potentialpredators.com IN NS rick.ns.cloudflare.com 86400s (1.00:00:00)
potentialpredators.com IN SOA
server: edna.ns.cloudflare.com
email: dns@cloudflare.com
serial: 2012090910
refresh: 10000
retry: 2400
expire: 604800
minimum ttl: 3600
86400s (1.00:00:00)
potentialpredators.com IN NS edna.ns.cloudflare.com 86400s (1.00:00:00)
253.233.162.178.in-addr.arpa IN PTR phoenix.trex-host.com 86400s (1.00:00:00)
233.162.178.in-addr.arpa IN NS ns1.leaseweb.nl 86400s (1.00:00:00)
233.162.178.in-addr.arpa IN NS ns4.leaseweb.net 86400s (1.00:00:00)
233.162.178.in-addr.arpa IN SOA
server: ns0.leaseweb.nl
email: postmaster@leaseweb.nl
serial: 2012082203
refresh: 14400
retry: 7200
expire: 604800
minimum ttl: 86400
86400s (1.00:00:00)
233.162.178.in-addr.arpa IN NS ns5.leaseweb.nl 86400s (1.00:00:00)

– end –


  1. montelwilliamsloan.us
  2. paydayloanpersonalloan.us
  3. instantcheckmate.com
  4. B2sit.com
  5. montelwilliamsloan.us
  6. paydayloanpersonalloan.us
  7. checkcreditscore888.us
  8. searscareers.us
  9. pinellascountypublicrecords.us
  10. corporatebackgroundchecks.us
  11. collincountycourtrecords.us
  12. hcsoarrestinquiry.us
  13. cookcountyjailinmatesearch.us
  14. miamidadeinmatesearch.us
  15. miamidadecriminalrecords.us
  16. bestloan1500now.us
  17. freeonlinecriminalbackgroundrecordcheck.us
  18. criminalrecordssearch.in
  19. jeffrey.farina.countypublicrecords.us
  20. instantcheckmate.com
  21. instantbgcheck.com
  22. PENISSTRETCHES.ORG
  23. ondemandcourtrecords.us
  24. Newpaydayloans247.com
  25. jobsincharlottenc.us
  26. ctinmatesearch.us
  27. cheaprollerblades1.info
  28. bestmattressforsidesleepers.info
  29. checkyourcreditscore.us
  30. CANNINGJARSFORSALE.INFO
  31. http://www.cashquickloans.info
  32. Bestspincastreel.info
  33. Bestlongboardtrucks.info
  34. winerackscheaps.info
  35. goolike.com
  36. Fast4diet.com
  37. blackfridaycybermondaysaleprices.info
  38. blackfridaycamcorders1.us
  39. jobservicend.us
  40. nco.info
  41. puppyobediencetraining101.com
  42. 11370.info
  43. truthaboutsixpackabsreviewed.com
  44. parisgraves.com
  45. caulking.biz
  46. puppyobediencetraining101.com
  47. searscareers.us
  48. parisgraves.com
  49. caulking.biz
  50. truthaboutsixpackabsreviewed.com

in our opinionis a proliferating threat.

cb3rob.net

Found 126 SBL listings for IPs under the responsibility of cb3rob.net

Address lookup
lookup failed cb3rob.net
Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom cb3rob.net”…

Domain Name: CB3ROB.NET
Registrar: CSL COMPUTER SERVICE LANGENBACH GMBH D/B/A JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.CB3ROB.NET
Name Server: NS2.CB3ROB.NET
Status: clientHold
Updated Date: 21-mar-2013
Creation Date: 04-jan-1999
Expiration Date: 04-jan-2016

Last update of whois database: Sat, 15 Jun 2013 18:26:19 UTC
Queried whois.joker.com with “cb3rob.net

domain: cb3rob.net
owner: CB3ROB Hostmaster
organization: CB3ROB Ltd. & Co. KG
email: hostmaster@cb3rob.net
address: Koloniestrasse 34
address: -
city: BERLIN
postal-code: D-13359
country: DE
phone: +31.878747479
admin-c: CNET-73324 hostmaster@cb3rob.net
tech-c: CNET-73324 hostmaster@cb3rob.net
billing-c: CNET-73324 hostmaster@cb3rob.net
nserver: ns1.cb3rob.net 84.22.96.10 2a02:880:0:a::1337
nserver: ns2.cb3rob.net 84.22.97.10 2a02:880:0:b::1337
status: hold,invalid-address
created: 1999-01-04 00:00:00 UTC
modified: 2013-03-21 08:35:20 UTC
expires: 2016-01-04 05:00:00 UTC
query-source: 63.135.123.4

contact-hdl: CNET-73324
person: CB3ROB Hostmaster
organization: CB3ROB Ltd. & Co. KG
email: hostmaster@cb3rob.net
address: Koloniestrasse 34
address: -
city: BERLIN
postal-code: D-13359
country: DE
phone: +31.878747479

source: joker.com live whois service
query-time: 0.008654
db-updated: 2013-06-15 18:26:49
NOTE: By submitting a WHOIS query, you agree to abide by the
– end –

Found 126 SBL listings for IPs under the responsibility of cb3rob.net
spamhaus
SBL178525
84.22.106.163/32 cb3rob.net
10-Mar-2013 07:16 GMT
Yambo Financials
Botnet spammer hosting

SBL178276
84.22.109.241/32 cb3rob.net
07-Mar-2013 21:01 GMT
potentialprostitutes.com extortion scam

SBL178270
84.22.108.3/32 cb3rob.net
07-Mar-2013 20:58 GMT
predatorswatch.com extortion scam

SBL178269
84.22.109.240/31 cb3rob.net
07-Mar-2013 20:58 GMT
predatorswatch.com extortion scam

SBL178013
84.22.106.162/32 cb3rob.net
05-Mar-2013 14:20 GMT
Canadian Pharmacy
Botnet spammer hosting

SBL176146
84.22.108.54/32 cb3rob.net
15-Feb-2013 08:53 GMT
Forum/Comment spam source @84.22.108.54

SBL175299
84.22.104.118/32 cb3rob.net
06-Feb-2013 19:22 GMT
Yambo pharmacy site

SBL174864
84.22.104.253/32 cb3rob.net
02-Feb-2013 09:24 GMT
Spambot botnet controller @84.22.104.253

SBL174769
84.22.104.162/32 cb3rob.net
01-Feb-2013 07:34 GMT
Grum botnet controller @84.22.104.162

SBL174369
84.22.104.82/32 cb3rob.net
29-Jan-2013 08:42 GMT
Botnet spammer hosting

SBL173651
84.22.104.120/29 cb3rob.net
23-Jan-2013 03:49 GMT
Cybercriminal spammer hosting

SBL172345
84.22.104.117/32 cb3rob.net
12-Jan-2013 13:45 GMT
Pharmacy spammer hosting

SBL171962
84.22.104.106/32 cb3rob.net
08-Jan-2013 19:39 GMT
Pharmacy spammer hosting

SBL170874
84.22.104.243/32 cb3rob.net
27-Dec-2012 18:36 GMT
Malware botnet controller @84.22.104.243

SBL170829
84.22.108.144/32 cb3rob.net
27-Dec-2012 07:25 GMT
Blackhat SEO spammer hosting @84.22.108.144

SBL170828
205.189.72.66/32 cb3rob.net
27-Dec-2012 07:25 GMT
Blackhat SEO spammer hosting @205.189.72.66

SBL170825
84.22.108.239/32 cb3rob.net
27-Dec-2012 07:24 GMT
Blackhat SEO spammer hosting @84.22.108.239

SBL170824
205.189.72.53/32 cb3rob.net
27-Dec-2012 07:23 GMT
Blackhat SEO spammer hosting @205.189.72.53

SBL170819
84.22.108.167/32 cb3rob.net
27-Dec-2012 07:23 GMT
Blackhat SEO spammer hosting @84.22.108.167

SBL170537
84.22.104.244/32 cb3rob.net
24-Dec-2012 06:50 GMT
Exploit site (malware)

SBL170301
205.189.72.28/32 cb3rob.net
20-Dec-2012 19:45 GMT
Spammer hosting @205.189.72.28

SBL170034
84.22.104.116/32 cb3rob.net
19-Dec-2012 13:46 GMT
Pharmacy spammer hosting

SBL169919
84.22.104.123/32 cb3rob.net
18-Dec-2012 12:05 GMT
Pharmacy spammer hosting

SBL169763
205.189.72.63/32 cb3rob.net
16-Dec-2012 18:13 GMT
Blackhat SEO spammer hosting @205.189.72.63

SBL169762
205.189.72.102/32 cb3rob.net
16-Dec-2012 18:13 GMT
Blackhat SEO spammer hosting @205.189.72.102

SBL169761
205.189.72.99/32 cb3rob.net
16-Dec-2012 18:13 GMT
Blackhat SEO spammer hosting @205.189.72.99

SBL169760
205.189.72.19/32 cb3rob.net
16-Dec-2012 18:13 GMT
Blackhat SEO spammer hosting @205.189.72.19

SBL169759
205.189.72.18/32 cb3rob.net
16-Dec-2012 18:13 GMT
Blackhat SEO spammer hosting @205.189.72.18

SBL169758
205.189.72.93/32 cb3rob.net
16-Dec-2012 18:12 GMT
Blackhat SEO spammer hosting @205.189.72.93

SBL169757
205.189.72.100/32 cb3rob.net
16-Dec-2012 18:12 GMT
Blackhat SEO spammer hosting @205.189.72.100

SBL169756
205.189.72.26/32 cb3rob.net
16-Dec-2012 18:12 GMT
Blackhat SEO spammer hosting @205.189.72.26

SBL169755
205.189.72.109/32 cb3rob.net
16-Dec-2012 18:12 GMT
Blackhat SEO spammer hosting @205.189.72.109

SBL169754
205.189.72.104/32 cb3rob.net
16-Dec-2012 18:12 GMT
Blackhat SEO spammer hosting @205.189.72.104

SBL169450
205.189.72.27/32 cb3rob.net
13-Dec-2012 16:07 GMT
Blackhat SEO spammer hosting @205.189.72.27

SBL169449
205.189.72.77/32 cb3rob.net
13-Dec-2012 16:07 GMT
Blackhat SEO spammer hosting @205.189.72.77

SBL169448
205.189.72.78/32 cb3rob.net
13-Dec-2012 16:07 GMT
Blackhat SEO spammer hosting @205.189.72.78

SBL169447
205.189.72.71/32 cb3rob.net
13-Dec-2012 16:07 GMT
Blackhat SEO spammer hosting @205.189.72.71

SBL169446
205.189.71.72/32 cb3rob.net
13-Dec-2012 16:07 GMT
Blackhat SEO spammer hosting @205.189.71.72

SBL169445
205.189.71.70/32 cb3rob.net
13-Dec-2012 16:06 GMT
Blackhat SEO spammer hosting @205.189.71.70

SBL169444
205.189.72.75/32 cb3rob.net
13-Dec-2012 16:06 GMT
Blackhat SEO spammer hosting @205.189.72.75

SBL169443
205.189.72.88/32 cb3rob.net
13-Dec-2012 16:06 GMT
Blackhat SEO spammer hosting @205.189.72.88

SBL169442
205.189.71.66/32 cb3rob.net
13-Dec-2012 16:06 GMT
Blackhat SEO spammer hosting @205.189.71.66

SBL169441
205.189.72.69/32 cb3rob.net
13-Dec-2012 16:06 GMT
Blackhat SEO spammer hosting @205.189.72.69

SBL169440
205.189.72.30/32 cb3rob.net
13-Dec-2012 16:06 GMT
Blackhat SEO spammer hosting @205.189.72.30

SBL166753
205.189.72.106/32 cb3rob.net
23-Nov-2012 09:46 GMT
Blackhat SEO spammer hosting @205.189.72.106

SBL166752
205.189.72.105/32 cb3rob.net
23-Nov-2012 09:46 GMT
Blackhat SEO spammer hosting @205.189.72.105

SBL166751
205.189.72.103/32 cb3rob.net
23-Nov-2012 09:46 GMT
Blackhat SEO spammer hosting @205.189.72.103

SBL166750
84.22.108.247/32 cb3rob.net
23-Nov-2012 09:45 GMT
Blackhat SEO spammer hosting @84.22.108.247

SBL166749
84.22.108.248/32 cb3rob.net
23-Nov-2012 09:45 GMT
Blackhat SEO spammer hosting @84.22.108.248

SBL166748
84.22.108.249/32 cb3rob.net
23-Nov-2012 09:45 GMT
Blackhat SEO spammer hosting @84.22.108.249

SBL166747
205.189.72.90/32 cb3rob.net
23-Nov-2012 09:45 GMT
Blackhat SEO spammer hosting @205.189.72.90

SBL166746
205.189.72.94/32 cb3rob.net
23-Nov-2012 09:45 GMT
Blackhat SEO spammer hosting @205.189.72.94

SBL166505
84.22.108.244/32 cb3rob.net
21-Nov-2012 13:12 GMT
Blackhat SEO spammer hosting @84.22.108.244

SBL166504
84.22.108.242/32 cb3rob.net
21-Nov-2012 13:12 GMT
Blackhat SEO spammer hosting @84.22.108.242

SBL166503
84.22.108.241/32 cb3rob.net
21-Nov-2012 13:12 GMT
Blackhat SEO spammer hosting @84.22.108.241

SBL166502
84.22.108.245/32 cb3rob.net
21-Nov-2012 13:12 GMT
Blackhat SEO spammer hosting @84.22.108.245

SBL166501
84.22.108.246/32 cb3rob.net
21-Nov-2012 13:11 GMT
Blackhat SEO spammer hosting @84.22.108.246

SBL166500
84.22.108.240/32 cb3rob.net
21-Nov-2012 13:11 GMT
Blackhat SEO spammer hosting @84.22.108.240

SBL166274
84.22.108.238/32 cb3rob.net
19-Nov-2012 18:50 GMT
Blackhat SEO spammer hosting @84.22.108.238

SBL166273
84.22.108.237/32 cb3rob.net
19-Nov-2012 18:50 GMT
Blackhat SEO spammer hosting @84.22.108.237

SBL166272
84.22.108.236/32 cb3rob.net
19-Nov-2012 18:50 GMT
Blackhat SEO spammer hosting @84.22.108.236

SBL166271
84.22.108.235/32 cb3rob.net
19-Nov-2012 18:50 GMT
Blackhat SEO spammer hosting @84.22.108.235

SBL166270
84.22.108.234/32 cb3rob.net
19-Nov-2012 18:49 GMT
Blackhat SEO spammer hosting @84.22.108.234

SBL165983
84.22.108.161/32 cb3rob.net
18-Nov-2012 08:28 GMT
Blackhat SEO spammer hosting @84.22.108.161

SBL165982
84.22.108.162/32 cb3rob.net
18-Nov-2012 08:28 GMT
Blackhat SEO spammer hosting @84.22.108.162

SBL165981
84.22.108.163/32 cb3rob.net
18-Nov-2012 08:28 GMT
Blackhat SEO spammer hosting @84.22.108.163

SBL165980
84.22.108.164/32 cb3rob.net
18-Nov-2012 08:28 GMT
Blackhat SEO spammer hosting @84.22.108.164

SBL165979
84.22.108.165/32 cb3rob.net
18-Nov-2012 08:28 GMT
Blackhat SEO spammer hosting @84.22.108.165

SBL165607
205.189.71.98/32 cb3rob.net
15-Nov-2012 21:24 GMT
Blackhat SEO spammer hosting @205.189.71.98

SBL165606
205.189.72.215/32 cb3rob.net
15-Nov-2012 21:24 GMT
Blackhat SEO spammer hosting @205.189.72.215

SBL165605
205.189.72.244/32 cb3rob.net
15-Nov-2012 21:24 GMT
Blackhat SEO spammer hosting @205.189.72.244

SBL165604
205.189.72.243/32 cb3rob.net
15-Nov-2012 21:24 GMT
Blackhat SEO spammer hosting @205.189.72.243

SBL165603
205.189.71.96/32 cb3rob.net
15-Nov-2012 21:24 GMT
Blackhat SEO spammer hosting @205.189.71.96

SBL165602
205.189.71.115/32 cb3rob.net
15-Nov-2012 21:23 GMT
Blackhat SEO spammer hosting @205.189.71.115

SBL165601
205.189.71.86/32 cb3rob.net
15-Nov-2012 21:23 GMT
Blackhat SEO spammer hosting @205.189.71.86

SBL165089
205.189.73.153/32 cb3rob.net
13-Nov-2012 07:16 GMT
Forum/Comment spam source @205.189.73.153

SBL163674
205.189.71.94/32 cb3rob.net
02-Nov-2012 15:44 GMT
Blackhat SEO spammer hosting @205.189.71.94

SBL163673
205.189.71.93/32 cb3rob.net
02-Nov-2012 15:44 GMT
Blackhat SEO spammer hosting @205.189.71.93

SBL163672
205.189.71.92/32 cb3rob.net
02-Nov-2012 15:44 GMT
Blackhat SEO spammer hosting @205.189.71.92

SBL163671
205.189.71.90/32 cb3rob.net
02-Nov-2012 15:43 GMT
Blackhat SEO spammer hosting @205.189.71.90

SBL163670
205.189.72.216/32 cb3rob.net
02-Nov-2012 15:43 GMT
Blackhat SEO spammer hosting @205.189.72.216

SBL163669
205.189.71.95/32 cb3rob.net
02-Nov-2012 15:43 GMT
Blackhat SEO spammer hosting @205.189.71.95

SBL163668
205.189.71.91/32 cb3rob.net
02-Nov-2012 15:43 GMT
Blackhat SEO spammer hosting @205.189.71.91

SBL163073
84.22.106.50/32 cb3rob.net
29-Oct-2012 15:45 GMT
Spammer hosting @84.22.106.50

SBL161929
205.189.72.240/32 cb3rob.net
21-Oct-2012 07:48 GMT
Blackhat SEO spammer hosting @205.189.72.240

SBL161928
205.189.72.221/32 cb3rob.net
21-Oct-2012 07:48 GMT
Blackhat SEO spammer hosting @205.189.72.221

SBL161927
205.189.71.89/32 cb3rob.net
21-Oct-2012 07:48 GMT
Blackhat SEO spammer hosting @205.189.71.89

SBL161926
205.189.72.218/32 cb3rob.net
21-Oct-2012 07:48 GMT
Blackhat SEO spammer hosting @205.189.72.218

SBL161925
205.189.72.239/32 cb3rob.net
21-Oct-2012 07:48 GMT
Blackhat SEO spammer hosting @205.189.72.239

SBL161924
205.189.72.223/32 cb3rob.net
21-Oct-2012 07:48 GMT
Blackhat SEO spammer hosting @205.189.72.223

SBL161923
205.189.71.87/32 cb3rob.net
21-Oct-2012 07:48 GMT
Blackhat SEO spammer hosting @205.189.71.87

SBL160776
84.22.127.0/24 cb3rob.net
14-Oct-2012 06:32 GMT
Andreas Pohl
Massive botnet spammer hosting, fake A/V, illegal drugs

SBL160715
84.22.127.38/32 cb3rob.net
13-Oct-2012 07:50 GMT
botnet spammer hosting

SBL158347
205.189.72.241/32 cb3rob.net
28-Sep-2012 17:54 GMT
Spammer hosting @205.189.72.241

SBL158346
205.189.72.238/32 cb3rob.net
28-Sep-2012 17:53 GMT
Spammer hosting @205.189.72.238

SBL157865
205.189.72.245/32 cb3rob.net
26-Sep-2012 13:41 GMT
Blackhat SEO spammer hosting @205.189.72.245

SBL157759
84.22.100.108/32 cb3rob.net
26-Sep-2012 00:52 GMT
Black hole site + Feodo botnet controller

SBL157411
84.22.127.37/32 cb3rob.net
24-Sep-2012 04:13 GMT
botnet spammer hosting

SBL157343
205.189.72.247/32 cb3rob.net
23-Sep-2012 07:49 GMT
Blackhat SEO spammer hosting @205.189.72.247

SBL156262
84.22.127.35/32 cb3rob.net
19-Sep-2012 23:27 GMT
botnet spammer hosting

SBL156210
84.22.127.44/32 cb3rob.net
19-Sep-2012 13:46 GMT
Canadian Health&Care Mall

SBL155067
84.22.104.162/31 cb3rob.net
12-Sep-2012 22:39 GMT
illegal pharma botnet spammers

SBL154878
84.22.127.43/32 cb3rob.net
11-Sep-2012 19:24 GMT
Yambo Financials
illegal pharma botnet spammer hosting

SBL154764
84.22.127.83/32 cb3rob.net
11-Sep-2012 04:29 GMT
Andreas Pohl
illegal pharma spammer hosting

SBL154763
84.22.127.80/32 cb3rob.net
11-Sep-2012 04:27 GMT
Andreas Pohl
illegal pharma spammer hosting

SBL153686
84.22.127.36/32 cb3rob.net
01-Sep-2012 19:46 GMT
illegal pharma spammer hosting

SBL153392
205.189.71.118/32 cb3rob.net
31-Aug-2012 08:16 GMT
Blackhat SEO spammer hosting @205.189.71.118

SBL153272
205.189.73.191/32 cb3rob.net
30-Aug-2012 06:45 GMT
Forum/Comment spam source @205.189.73.191

SBL153179
205.189.73.137/32 cb3rob.net
29-Aug-2012 08:48 GMT
Forum/Comment spam source @205.189.73.137

SBL151530
84.22.127.34/32 cb3rob.net
16-Aug-2012 08:38 GMT
illegal pharma spammer hosting

SBL144377
84.22.106.230/32 cb3rob.net
26-Jun-2012 06:16 GMT
Blackhat SEO service @84.22.106.230

SBL135789
84.22.127.8/29 cb3rob.net
11-Apr-2012 06:22 GMT
Streamdirect TV on PC a/k/a ”Adober” gang
Malware(?) fake Adobe Acrobat

SBL135216
84.22.127.26/32 cb3rob.net
05-Apr-2012 06:25 GMT
Andrew Stephens
ROKSO spammer Andrew Stephens

SBL124464
205.189.73.251/32 cb3rob.net
21-Dec-2011 05:42 GMT
Spamming financial fraud websites

SBL124270
205.189.73.252/32 cb3rob.net
18-Dec-2011 08:22 GMT
holidaycashfunds.com (SMS spam payloads)

SBL119931
205.189.73.9/32 cb3rob.net
27-Oct-2011 08:11 GMT
1000cashatm.com (SMS spam payloads)

SBL119647
84.22.106.120/32 cb3rob.net
21-Oct-2011 20:43 GMT
Malware dropper: allodream.com

SBL118028
205.189.73.73/32 cb3rob.net
03-Oct-2011 03:18 GMT
http://www.1000cashvip.com (SMS spam payloads)

SBL113975
84.22.98.27/32 cb3rob.net
18-Jul-2011 23:07 GMT
Streamdirect TV on PC a/k/a ”Adober” gang
Malware(?) fake Adobe Acrobat

SBL107456
84.22.98.24/32 cb3rob.net
12-Apr-2011 09:35 GMT
More hosting of cybercriminal spammers by AS34109 CB3ROB

SBL105804
205.189.72.0/23 cb3rob.net
21-Mar-2011 23:24 GMT
Suspect block, related to: AS34109/AS51787 (CB3ROB)

SBL105802
205.189.71.0/24 cb3rob.net
21-Mar-2011 23:11 GMT
Spammer block, related to: AS34109/AS51787 (CB3ROB)

SBL99505
84.22.96.0/19 cb3rob.net
01-Dec-2010 08:00 GMT
Spammer & cybercriminal hosting (escalation)

SBL99430
84.22.98.24/29 cb3rob.net
30-Nov-2010 04:38 GMT
Streamdirect TV on PC a/k/a ”Adober” gang
Fake PDF and more malware & fraud

SBL99421
84.22.98.16/29 cb3rob.net
30-Nov-2010 01:37 GMT
Streamdirect TV on PC a/k/a ”Adober” gang
Fake PDF and more malware & fraud

SBL97966
84.22.98.29/32 cb3rob.net
29-Oct-2010 03:18 GMT
Streamdirect TV on PC a/k/a ”Adober” gang
Malware(?) fake Adobe Acrobat

WhoIs ~ www.redstation.com

This data center is hosting several of the money mule sites we are encountering.

This slideshow requires JavaScript.

Calling from abroad

From overseas please call us on +44 1329 828224 or for technical support call +44 1329 243123
To discuss your requirements call us on: 0800 622 6655 or email sales@redstation.com

Address lookup
canonical name http://www.redstation.com

aliases
addresses 149.3.142.10
Domain Whois record

Queried whois.internic.net with “dom redstation.com

Domain Name: REDSTATION.COM
Registrar: TUCOWS DOMAINS INC.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: DNS1.REDSTATION.CO.UK
Name Server: DNS2.REDSTATION.CO.UK
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 15-oct-2010
Creation Date: 21-sep-1999
Expiration Date: 21-sep-2020

>>> Last update of whois database: Sat, 15 Jun 2013 00:45:19 UTC <<<

Queried whois.tucows.com with “redstation.com”…

Registrant:
RACKCENTRE LIMITED
Wentworth House
4400 Parkway
Whiteley, Hampshire PO15 7FJ
GB

Domain name: REDSTATION.COM

Administrative Contact:
Admin, DNS admin@redstation.com
2 Frater Gate Business Park
Aerodrome Road
Gosport, Hampshire PO13 0GW
GB
+44.1329828224
Technical Contact:
Administrator, DNS admin@redstation.com
2 Frater Gate Business Park
Aerodrome Road
Gosport, Hampshire PO13 0GW
GB
+44.1329828224

Registration Service Provider:
Redstation Limited, admin@redstation.com
+44 1329 828224

http://www.redstation.com

Registrar of Record: TUCOWS, INC.
Record last updated on 12-Jun-2013.
Record expires on 21-Sep-2020.
Record created on 21-Sep-1999.

Registrar Domain Name Help Center:

http://tucowsdomains.com

Domain servers in listed order:
DNS1.REDSTATION.CO.UK
DNS2.REDSTATION.CO.UK

Domain status: clientTransferProhibited
clientUpdateProhibited

Network Whois record

Queried whois.ripe.net with “-B 149.3.142.10″…

% Information related to ’149.3.142.8 – 149.3.142.11′

% Abuse contact for ’149.3.142.8 – 149.3.142.11′ is ‘abuse@redstation.com’

inetnum: 149.3.142.8 – 149.3.142.11
netname: REDSTATIONWEB
descr: Redstation Limited
descr: Web Server Network
country: GB
admin-c: RA1415-RIPE
tech-c: RA1415-RIPE
status: ASSIGNED PA
remarks: ABUSE REPORTS: abuse@redstation.com
mnt-by: REDSTATION-MNT
mnt-domains: REDSTATION-MNT
mnt-routes: REDSTATION-MNT
changed: ripe-admin@redstation.com 20110928
source: RIPE

role: Redstation Admin Role
address: Redstation Limited
address: 2 Frater Gate Business Park
address: Aerodrome Road
address: Gosport
address: Hampshire
address: PO13 0GW
address: UNITED KINGDOM
abuse-mailbox: abuse@redstation.com
e-mail: ripe-admin@redstation.com
admin-c: KMAC-RIPE
tech-c: PA5242-RIPE
nic-hdl: RA1415-RIPE
mnt-by: REDSTATION-MNT
changed: ripe-admin@redstation.com 20080625
source: RIPE

% Information related to ’149.3.140.0/22AS35662′

route: 149.3.140.0/22
descr: FTIP002960302 Redstation Limited
origin: AS35662
mnt-by: REDSTATION-MNT
changed: kevinmcardle@redstation.com 20110725
source: RIPE

% This query was served by the RIPE Database Query Service version 1.66.3 (WHOIS3)

DNS records
name class type data time to live
http://www.redstation.com IN A 149.3.142.10 60s (00:01:00)
redstation.com IN A 149.3.142.10 60s (00:01:00)
redstation.com IN NS dns2.redstation.co.uk 60s (00:01:00)
redstation.com IN NS dns1.redstation.co.uk 60s (00:01:00)
redstation.com IN SOA
server: dns1.redstation.co.uk
email: admin@redstation.co.uk
serial: 158
refresh: 300
retry: 600
expire: 600
minimum ttl: 60
60s (00:01:00)
redstation.com IN MX
preference: 5
exchange: mail.redstation.com
60s (00:01:00)
redstation.com IN TXT v=spf1 ip4:80.84.48.0/23 a mx include:redstationmail.co.uk -all 60s (00:01:00)
10.142.3.149.in-addr.arpa IN PTR http://www.redstation.com 3600s (01:00:00)
142.3.149.in-addr.arpa IN SOA
server: dns3.redstation.co.uk
email: admin@redstation.co.uk
serial: 2007071361
refresh: 1200
retry: 600
expire: 1728000
minimum ttl: 3600
3600s (01:00:00)
142.3.149.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-06-24 20:00:12Z
signature inception: 2013-06-14 20:00:12Z
key tag: 3017
signer’s name: 149.in-addr.arpa
signature:
(1024 bits)

382516B2216BDE33D981DCEDA76B87DD
1974F44B93E982D05DE48AAE9F5C72F8
766283F9AE625E7F88073A23F55201BD
23BB04DF6B49F068A74F989095785E57
90C88856976CD6DC3E926624FF522AF4
4DD68AE7CF785FB5600F7C0B05273B2B
BBDDD9712CDB6AB79C74862B2044AF8E
306AF43B46176656953F00F1210E8C7D

10800s (03:00:00)
142.3.149.in-addr.arpa IN NSEC
next domain name: 143.3.149.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
142.3.149.in-addr.arpa IN NS dns3.redstation.co.uk 3600s (01:00:00)
142.3.149.in-addr.arpa IN NS dns2.redstation.co.uk 3600s (01:00:00)
Traceroute

Tracing route to http://www.redstation.com [149.3.142.10]…
hop rtt rtt rtt ip address fully qualified domain name
1 1 1 1 70.84.211.97 61.d3.5446.static.theplanet.com
2 1 0 0 70.87.254.5 po101.dsr02.dllstx5.networklayer.com
3 122 3 1 70.85.127.109 po52.dsr02.dllstx3.networklayer.com
4 0 0 0 173.192.18.230 ae17.bbr02.eq01.dal03.networklayer.com
5 20 20 20 173.192.18.135 ae1.bbr01.tl01.atl01.networklayer.com
6 33 33 33 173.192.18.152 ae0.bbr01.eq01.wdc02.networklayer.com
7 34 38 53 173.192.18.195 ae7.bbr02.eq01.wdc02.networklayer.com
8 113 113 113 50.97.18.215 ae0.bbr01.eq01.ams02.networklayer.com
9 189 222 211 195.69.147.48
10 114 114 114 109.200.17.234 234-17-200-109.rackcentre.redstation.net.uk
11 120 119 120 109.200.17.250 250-17-200-109.rackcentre.redstation.net.uk
12 114 114 114 149.3.142.10 http://www.redstation.com

Trace complete

– end –

WhoIs MegaSearch.cc

scamFRAUDalert see it appropriate to issue this ALERT as investigated reports on line confirmed that MegaSearch.cc provide search services to the underground world by allowing potential buyers of stolen credit cards discover which fraud shops hold the cards they’re looking for without having to first create accounts at each store.

Members of www.mywot.com have identified similar sites hosted on IP 91.220.163.3 listed below:

91.220.163.3

  1. hack3rz.ru
  2. myexpressparcel.com
  3. series-fileserve.com
  4. backstab.biz
  5. bstab.biz
  6. d-9.cc
  7. ccants.com
  8. canal-sky.com
  9. xentime.com
  10. riffspot.info
  11. n-i.kiev.ua
  12. privateshop.biz
  13. megasearch.cc
  14. securealibaba.com
  15. sn1p3r.org
  16. b59iu.com
  17. tagsalesdepot.com
  18. pampik.com
  19. cawotte.com
  20. eiro.jp
  21. vpnbunker.co
  22. xxvideo.jp
  23. beegbet.com
  24. beegplay.com
  25. ccants.com
  26. nazcabusinessc.com
  27. owndns.biz
  28. freedom-friendly.org
  29. xentime.com
  30. diostim.com
  31. kariavka.com
  32. livarava.com
  33. ng.biz.ua
  34. chamelephon.com
  35. feelgood.com.ua
  36. feelgood.ua
  37. bamara.ru
  38. ladyloveyou.ru
  39. rudamalove.ru
  40. unmarried.com.ua
  41. 2×4.ru
  42. spamahost.com
  43. virushostr.ws
  44. mailermanic.com
  45. balaban-ivan.biz
  46. balaban-ivan.com
  47. balaban-ivan.info
  48. balaban-ivan.name
  49. balaban-ivan.net
  50. balaban-ivan.org
  51. balaban.kiev.ua
  52. balabanivan.biz
  53. balabanivan.com
  54. balabanivan.info
  55. balabanivan.name
  56. balabanivan.net
  57. balabanivan.org
  58. ivan-balaban.biz
  59. ivan-balaban.com
  60. ivan-balaban.info
  61. ivan-balaban.name
  62. ivan-balaban.net
  63. ivan-balaban.org
  64. ivanbalaban.biz
  65. ivanbalaban.com
  66. ivanbalaban.info
  67. ivanbalaban.name
  68. ivanbalaban.net
  69. ivanbalaban.org
  70. n-i.org.ua
  71. xn—-7sbaabbck0fxad11a.com
  72. xn—-7sbaabbck0fxad11a.net
  73. xn—-7sbaabbck7czaze.com
  74. xn—-7sbaabbck7czaze.net
  75. xn—-7sbbaadcc7c9ash.com
  76. xn—-7sbbaadcc7c9ash.net
  77. xn—-7sbbaadcc9fqh30a.com
  78. xn—-7sbbaadcc9fqh30a.net
  79. xn--80aaaabci1cxaxd.com
  80. xn--80aaaabci1cxaxd.net
  81. hackerspace.com.ua
  82. xn--80aaaabci2evac6y.com
  83. xn--80aaaabci2evac6y.net
  84. xn--80aaaaccc1c5arg.com
  85. xn--80aaaaccc1c5arg.net
  86. xn--80aaaaccc9epg9x.com
  87. xn--80aaaaccc9epg9x.net
  88. xn--80aaabc2dr.com
  89. xn--80aaabc2dr.net
  90. nazcabusiness.com
  91. audioefir.ru
  92. avatar-2-movie.ru
  93. booksefir.ru
  94. brosokkobry2.ru
  95. brugen.net
  96. dnevniki-vampira.net
  97. ehobbys.ru
  98. forsaj-6-online.ru
  99. game-starter.ru
  100. gamesefir.ru
  101. gostya-online.ru
  102. iron-man-three.ru
  103. karpov-serial.com
  104. krogportal.net
  105. multfan.com
  106. newsefir.ru
  107. online-efir.com
  108. padenie-olimpa.ru
  109. samouchka.net
  110. softefir.ru
  111. startrek-2.ru
  112. sumerki-twilight.com
  113. velikolepnyy-vek.com
  114. voyna-mirov-z.ru
  115. zakrytaya-shkola-online.com

Address lookup
canonical name megasearch.cc

aliases
addresses 208.73.211.169
Domain Whois record

Queried whois.nic.cc with “dom megasearch.cc”…

Domain Name: MEGASEARCH.CC
Domain ID: 103775207
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Updated Date: 2013-02-12T10:02:26Z
Creation Date: 2013-02-12T09:58:17Z
Expiration Date: 2014-02-12T09:58:17Z
Sponsoring Registrar: GODADDY.COM, LLC
Sponsoring Registrar IANA ID: 146
Domain Status: CLIENT-DELETE-PROHIBITED
Domain Status: CLIENT-RENEW-PROHIBITED
Domain Status: CLIENT-UPDATE-PROHIBITED
Domain Status: CLIENT-XFER-PROHIBITED
Name Server: NS1.DSREDIRECTION.COM
Name Server: NS2.DSREDIRECTION.COM
DNSSEC: Unsigned delegation

Last update of whois database: 2013-06-09T19:10:56Z

Queried whois.godaddy.com with “megasearch.cc”…

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: MEGASEARCH.CC
Created on: 12-Feb-13
Expires on: 12-Feb-14
Last Updated on: 12-Feb-13

Registrant:
Spiridon Strakatos
Dorizata
Argostoli, Kefalonia 28100
Greece

Administrative Contact:
Strakatos, Spiridon strakatos@windowslive.com
Dorizata
Argostoli, Kefalonia 28100
Greece
2671023094

Technical Contact:
Strakatos, Spiridon strakatos@windowslive.com
Dorizata
Argostoli, Kefalonia 28100
Greece
2671023094

Domain servers in listed order:
NS1.DSREDIRECTION.COM
NS2.DSREDIRECTION.COM

Network Whois record

Queried whois.arin.net with “n 208.73.211.169″…

NetRange: 208.73.208.0 – 208.73.215.255
CIDR: 208.73.208.0/21
OriginAS:
NetName: OVERSEE-NET-2
NetHandle: NET-208-73-208-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Assignment
RegDate: 2006-12-28
Updated: 2013-01-14
Ref: http://whois.arin.net/rest/net/NET-208-73-208-0-1

OrgName: Oversee.net
OrgId: OVERS-1
Address: 515 S. Flower St
Address: Suite 4400
City: Los Angeles
StateProv: CA
PostalCode: 90071
Country: US
RegDate: 2003-08-01
Updated: 2008-11-10
Ref: http://whois.arin.net/rest/org/OVERS-1

OrgAbuseHandle: OVERS-ARIN
OrgAbuseName: Oversee NOC
OrgAbusePhone: +1-213-408-0080
OrgAbuseEmail: abuse@oversee.net
OrgAbuseRef: http://whois.arin.net/rest/poc/OVERS-ARIN

OrgTechHandle: OVERS-ARIN
OrgTechName: Oversee NOC
OrgTechPhone: +1-213-408-0080
OrgTechEmail: abuse@oversee.net
OrgTechRef: http://whois.arin.net/rest/poc/OVERS-ARIN

DNS records

DNS query for 169.211.73.208.in-addr.arpa returned an error from the server: NameError
name class type data time to live
megasearch.cc IN NS ns2.dsredirection.com 7200s (02:00:00)
megasearch.cc IN MX
preference: 10
exchange: mx.isp-inter.net
7200s (02:00:00)
megasearch.cc IN NS ns1.dsredirection.com 7200s (02:00:00)
megasearch.cc IN A 208.73.210.203 7200s (02:00:00)

– end –

WhoIs ~ www.sexoffenderin.com

PUBLIC RECORDS
Blackmailing and Extortion Scheme

Address lookup
canonical name sexoffenderin.com
scamalert
aliases
addresses 74.208.194.92
Domain Whois record

sexoffenderin

Queried whois.internic.net with “dom sexoffenderin.com
Domain Name: SEXOFFENDERIN.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS17.DOMAINCONTROL.COM
Name Server: NS18.DOMAINCONTROL.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 04-nov-2012
Creation Date: 30-nov-2011
Expiration Date: 30-nov-2013

Last update of whois database: Sun, 31 Mar 2013 15:08:41 UTC
Queried whois.godaddy.com with “sexoffenderin.com

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: SEXOFFENDERIN.COM
Created on: 30-Nov-11
Expires on: 30-Nov-13
Last Updated on: 03-Nov-12

Registrant:
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States

Administrative Contact:
Private, Registration SEXOFFENDERIN.COM@domainsbyproxy.com
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Technical Contact:
Private, Registration SEXOFFENDERIN.COM@domainsbyproxy.com
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Domain servers in listed order:
NS17.DOMAINCONTROL.COM
NS18.DOMAINCONTROL.COM

Network Whois record
Queried whois.arin.net with “n 74.208.194.92

NetRange: 74.208.0.0 – 74.208.255.255
CIDR: 74.208.0.0/16
OriginAS: AS8560
NetName: 1AN1-NETWORK
NetHandle: NET-74-208-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
Comment: For abuse issues, please use only abuse@1and1.com
RegDate: 2006-11-22
Updated: 2012-02-02
Ref: http://whois.arin.net/rest/net/NET-74-208-0-0-1

OrgName: 1&1 Internet Inc.
OrgId: 11INT
Address: 701 Lee Rd
Address: Suite 300
City: Chesterbrook
StateProv: PA
PostalCode: 19087
Country: US
RegDate: 2006-09-05
Updated: 2011-10-12
Comment: http://www.1and1.com
Comment: For abuse issues, please use only abuse@schlund.de
Ref: http://whois.arin.net/rest/org/11INT

OrgAbuseHandle: 1AD-ARIN
OrgAbuseName: 1and1 Abuse Department
OrgAbusePhone: +1-877-206-4253
OrgAbuseEmail: abuse@1and1.com
OrgAbuseRef: http://whois.arin.net/rest/poc/1AD-ARIN

OrgTechHandle: 1NO-ARIN
OrgTechName: 1and1 ARIN Role
OrgTechPhone: +1-610-560-1617
OrgTechEmail: arin-role@oneandone.net
OrgTechRef: http://whois.arin.net/rest/poc/1NO-ARIN

RTechHandle: 1NO-ARIN
RTechName: 1and1 ARIN Role
RTechPhone: +1-610-560-1617
RTechEmail: arin-role@oneandone.net
RTechRef: http://whois.arin.net/rest/poc/1NO-ARIN

RNOCHandle: 1NO-ARIN
RNOCName: 1and1 ARIN Role
RNOCPhone: +1-610-560-1617
RNOCEmail: arin-role@oneandone.net
RNOCRef: http://whois.arin.net/rest/poc/1NO-ARIN

RAbuseHandle: 1AD-ARIN
RAbuseName: 1and1 Abuse Department
RAbusePhone: +1-877-206-4253
RAbuseEmail: abuse@1and1.com
RAbuseRef: http://whois.arin.net/rest/poc/1AD-ARIN

DNS records
name class type data time to live
http://www.sexoffenderin.com IN CNAME sexoffenderin.com 3600s (01:00:00)
sexoffenderin.com IN A 74.208.194.92 3600s (01:00:00)
sexoffenderin.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
sexoffenderin.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
sexoffenderin.com IN NS ns17.domaincontrol.com 3600s (01:00:00)
sexoffenderin.com IN NS ns18.domaincontrol.com 3600s (01:00:00)
sexoffenderin.com IN SOA
server: ns17.domaincontrol.com
email: dns@jomax.net
serial: 2012110301
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
92.194.208.74.in-addr.arpa IN NS crns.1and1-dns.biz 3600s (01:00:00)
92.194.208.74.in-addr.arpa IN NS crns.1and1-dns.org 3600s (01:00:00)
92.194.208.74.in-addr.arpa IN NS crns.1and1-dns.de 3600s (01:00:00)
92.194.208.74.in-addr.arpa IN NS crns.1and1-dns.com 3600s (01:00:00)

– end –

bestbuyrwdcntr.com

Another Bestbuy Text Scams

Congrats Best Buy Shopper You Have Won A $1000 Giftcard! Go to scamalerthttp://bestbuyrwdcntr.com/a/?h and click continue to claim it NOW

 

 

The following A records are set to 50.97.137.50:

English:

English: (Photo credit: Wikipedia)

  1. 10dn6.com
  2. 5os.com
  3. akiba-world.co
  4. akiba.us
  5. akibanewsworld.com
  6. bestbuysms.net
  7. bestbuybunus.net
  8. bestbuycashcards.net
  9. buggybread.com
  10. bestbuywinnet.com
  11. bestbuywinmobi.net
  12. bbdailyprizes.biz
  13. bbdailyprizes.com
  14. bbcardalert.net
  15. bbdailyprizes.com
  16. bestbuycashcards.net
  17. akibaworld.com
  18. bbcardgiveaway.net
  19. giveawayalerts.net
  20. bestbuyrwdcntr.com
  21. BestBuyNotify.net
  22. bbcardrewards.net
  23. bbcashgiveaway.net
  24. bbgiveaway.com
  25. bbrewardcard.net
  26. bbspree.net
  27. bestbuygiveaways.mobi
  28. bestbuyprizes.mobi
  29. bestbuypromo.mobi
  30. bestbuyreward.mobi
  31. bestbuyrewardcard.net
  32. bestbuyrewards.mobi
  33. bestbuysurprise.com
  34. bestbuysurprise.mobi
  35. binarycredit.net
  36. binarycredit.org
  37. bitcoin2012.com
  38. cabinet-lequart.com
  39. cc.gl
  40. club-ottomobile.com
  41. fb.gd
  42. justhookup2.net
  43. myfreebbcard.net
  44. painlessloans.net
  45. pennystocknotify.net
  46. sekaitendencies.com
  47. shibuyanews.com
  48. spacepigtv.com
  49. stephane-quarre.net
  50. superbowlspeculation.net
  51. tw.gl, viagraforcheap.net
  52. worldakiba.com
  53. zbiddyauction.net

111.123.180.92

Follow

Get every new post delivered to your Inbox.