WhoIs ztomy ~ Malware Distributor

scamFRAUDalert see it appropriate to issue this ALERT that the operator of the domain is a bot master whose business practices includes spamming, malware distribution, url hijacking, etc. etc. etc.
ztomy_serverscreen shot2.PNG
ztomy_serverscreen shot.PNG

The following A records are set to 208.91.196.4:

  1. advforward.com
  2. amitaz.com
  3. buypremiumdeals.com
  4. cdn-images.com
  5. cnomy.com
  6. completefwd.com
  7. discovereddeals.com
  8. dmnfwd.com
  9. domainfwd.com
  10. domainfwding.com
  11. fastdomainfwd.com
  12. findcrazydeals.com
  13. findfreshdeals.com
  14. freeresultsguide.com
  15. freesearchresults.com
  16. globaldomainfwd.com
  17. globalizedsearch.com
  18. globalsearchdirect.com
  19. internetmadesecure.com
  20. keywordqueryresults.com
  21. malkm.com
  22. mypageresults.com
  23. mysearchcentral.com
  24. namefwd.com
  25. newsearchstation.com
  26. ns1004.ztomy.com
  27. onlinefastsearch.com
  28. pagequeryresults.com
  29. quickfwd.com
  30. rediscoversearch.com
  31. resultfwding.com
  32. sdomainparking.com
  33. searchacross.com
  34. searchdirectresults.com
  35. searchdiscovered.com
  36. searchedforward.com
  37. searchedresults.com
  38. searchedreveal.com
  39. searcheduncovered.com
  40. searchesexplored.com
  41. searchesinteractive.com
  42. searchesinvent.com
  43. searchesresult.com
  44. searchharbor.com
  45. searchhotspot.com
  46. searchignited.com
  47. searchingexplore.com
  48. searchingmagnified.com
  49. searchinguncovered.com
  50. searchinvented.com
  51. searchmagnified.com
  52. searchmagnitude.com
  53. searchmeaningful.com
  54. searchqueryresults.com
  55. searchrediscovered.com
  56. searchreinvented.com
  57. searchremagnified.com
  58. searchresultsguide.com
  59. searchtargeted.com
  60. searchtermresults.com
  61. sendfwd.com
  62. sitequeryresults.com
  63. smartseekerz.com
  64. targetedinfo.com
  65. targetedlistings.net
  66. targetedtopic.com
  67. thegreatestsearch.com
  68. theusefulsearch.com
  69. universalfwd.com
  70. usinternetsearch.com
  71. virlz.com
  72. webqueryresults.com
  73. ztomy.com *******************
  74. Name Servers: NS1642.ZTOMY.COM
  75. Name Servers: NS2642.ZTOMY.COM

Address lookup
canonical name: ztomy.com
aliases
addresses:208.91.196.4
Domain Whois record

Queried whois.internic.net with “dom ztomy.com

Domain Name: ZTOMY.COM
Registry Domain ID: 1339021575_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL: http://www.publicdomainregistry.com
Updated Date: 2016-10-28T14:14:47Z
Creation Date: 2007-11-22T13:14:45Z
Registry Expiry Date: 2017-11-22T13:14:45Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com

Registrar Abuse Contact Phone: +1.2013775952
Domain Status: clientTransferProhibited
Name Server: NS1-106.AKAM.NET
Name Server: NS1-109.AKAM.NET
Name Server: USC4.AKAM.NET
Name Server: USC5.AKAM.NET
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint

>>> Last update of whois database: 2017-08-11T23:10:08Z <<>> Last update of WHOIS database: 2017-08-11T23:10:23Z <<<

Network Whois record

Queried whois.arin.net with "n 208.91.196.4"…

NetRange: 208.91.196.0 – 208.91.197.255
CIDR: 208.91.196.0/23
NetName: CONFLUENCE-NETWORK-INC
NetHandle: NET-208-91-196-0-1
Parent: NET208 (NET-208-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS40034
Organization: Confluence Networks Inc (CN)
RegDate: 2011-04-15
Updated: 2015-11-23
Ref: https://whois.arin.net/rest/net/NET-208-91-196-0-1

OrgName: Confluence Networks Inc
OrgId: CN
Address: 3rd Floor, J & C Building, P.O. Box 362
City: Road Town
StateProv: Tortola
PostalCode: VG1110
Country: VG
RegDate: 2011-04-07
Updated: 2017-03-29
Ref: https://whois.arin.net/rest/org/CN

OrgAbuseHandle: ABUSE3065-ARIN
OrgAbuseName: Abuse Admin
OrgAbusePhone: +1-415-449-4704
OrgAbuseEmail: abuse@confluence-networks.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE3065-ARIN

OrgTechHandle: TECHA29-ARIN
OrgTechName: Tech Admin
OrgTechPhone: +1-415-358-0891
OrgTechEmail: noc@confluence-networks.com
OrgTechRef: https://whois.arin.net/rest/poc/TECHA29-ARIN

OrgNOCHandle: NOCAD51-ARIN
OrgNOCName: NOC Admin
OrgNOCPhone: +1-415-358-0891
OrgNOCEmail: noc@confluence-networks.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOCAD51-ARIN

DNS records

DNS query for 4.196.91.208.in-addr.arpa returned an error from the server: ServerFailure
name class type data time to live
ztomy.com IN TXT v=spf1 -all 86400s (1.00:00:00)
ztomy.com IN NS ns1-106.akam.net 86400s (1.00:00:00)
ztomy.com IN NS ns1-109.akam.net 86400s (1.00:00:00)
ztomy.com IN NS usc4.akam.net 86400s (1.00:00:00)
ztomy.com IN SOA
server: usc4.akam.net
email: abuse@opticaljungle.com
serial: 2015082928
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 180
86400s (1.00:00:00)
ztomy.com IN A 208.91.196.4 300s (00:05:00)

— end —
URL for this output | return to CentralOps.net, a service of Hexillion

New jobs from Kelly Services Inc and others

from: Job Alerts
to: scamfraudalert@gmail.com
date: Mon, Aug 7, 2017 at 9:37 AM
subject: New jobs from Kelly Services Inc and others
mailed-by: len.alerted.org
signed-by: len.alerted.org
Job Alerts – Monday, August 07, 2017

Manage Alerts

Jobs for Medical Billing and Coding within 20 miles of Orlando, FL 32801
Want to make extra money working for Avon? Click here!

WhoIs Alerted.org

FEATURED – Insurance Specialist
Kelly Services Inc • Orlando, FL
NEW – Posted on 08/06/17 on ZipRecruiter

FEATURED – Medical Billing Specialist – Medical Coding
Wilmington Medical Supply • Orlando, FL
Posted on 08/02/17 on cityhealthcarejobs.com

Patient Authorization Representative
Kelly Services • Orlando, FL
NEW – Posted on 08/04/17 on Beyond

Medical Office Manager
BioSpine Institute • Orlando, FL
Posted on 08/01/17 on cityhealthcarejobs.com

Billing /Payment Poster
Path Medical • Orlando, FL
NEW – Posted on 08/04/17 on Beyond

Sr. Reimbursement Associate
Express Scripts • Lake Mary, FL
NEW – Posted on 08/07/17 on LinkUp

Medical Assistant
yffmc • Orlando, FL
NEW – Posted on 08/07/17 on cityhealthcarejobs.com

Medical Office Manager
Physicians Associates LLC • Orlando, FL
Posted on 07/26/17 on CareerBuilder

Medical Accounts Receivable Specialist
Accountemps • Casselberry, FL
NEW – Posted on 08/04/17 on CareerBuilder

Medical Front Desk Rep
Healthcare Support • Orlando, FL
Posted on 08/01/17 on cityhealthcarejobs.com

50.17.222.77 resolves to ec2-50-17-222-77.compute-1.amazonaws.com.

  1. alerted.org
  2. disabledveteran.org
  3. job-search-engine.com
  4. job-search-engine.net
  5. job-search-engine.org
  6. jobsearchengine.com
  7. jobsearchengine.net
  8. jobsearchengine.org
  9. juju.com, juju.net
  10. leaddiversity.org
  11. livingdisabled.com
  12. veteransonline.com
  13. womenwork.com

Address lookup
canonical name:alerted.org
aliases
addresses :50.17.222.77
Domain Whois record

Queried whois.publicinterestregistry.net with “alerted.org”…

Domain Name: ALERTED.ORG
Registry Domain ID: D123399883-LROR
Registrar WHOIS Server:
Registrar URL: http://www.networksolutions.com
Updated Date: 2017-03-29T11:51:34Z
Creation Date: 2006-05-28T19:23:03Z
Registry Expiry Date: 2018-05-28T19:23:03Z
Registrar Registration Expiration Date:
Registrar: Network Solutions, LLC
Registrar IANA ID: 2
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Reseller:
Domain Status: clientTransferProhibited
Registry Registrant ID: C137631520-LROR
Registrant Name: Perfect Privacy, LLC
Registrant Organization:
Registrant Street: 12808 Gran Bay Parkway West
Registrant Street: care of Network Solutions
Registrant Street: PO Box 459
Registrant City: Jacksonville
Registrant State/Province: FL
Registrant Postal Code: 32258
Registrant Country: US
Registrant Phone: +1.5707088780
Registrant Email: b92qq32k6az@networksolutionsprivateregistration.com

Registry Admin ID: C137631520-LROR
Admin Name: Perfect Privacy, LLC
Admin Organization:
Admin Street: 12808 Gran Bay Parkway West
Admin Street: care of Network Solutions
Admin Street: PO Box 459
Admin City: Jacksonville
Admin State/Province: FL
Admin Postal Code: 32258
Admin Country: US
Admin Phone: +1.5707088780
Admin Email: b92qq32k6az@networksolutionsprivateregistration.com

Registry Tech ID: C137631520-LROR
Tech Name: Perfect Privacy, LLC
Tech Organization:
Tech Street: 12808 Gran Bay Parkway West
Tech Street: care of Network Solutions
Tech Street: PO Box 459
Tech City: Jacksonville
Tech State/Province: FL
Tech Postal Code: 32258
Tech Country: US
Tech Phone: +1.5707088780
Tech Email: b92qq32k6az@networksolutionsprivateregistration.com

Name Server: NS-1079.AWSDNS-06.ORG
Name Server: NS-706.AWSDNS-24.NET
Name Server: NS-422.AWSDNS-52.COM
Name Server: NS-1856.AWSDNS-40.CO.UK

DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint

Last update of WHOIS database: 2017-08-11T06:19:36Z <<<
Network Whois record

Queried whois.arin.net with "n 50.17.222.77"…

NetRange: 50.16.0.0 – 50.19.255.255
CIDR: 50.16.0.0/14
NetName: AMAZON-EC2-8
NetHandle: NET-50-16-0-0-1
Parent: NET50 (NET-50-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon.com, Inc. (AMAZO-4)
RegDate: 2010-10-07
Updated: 2014-09-03
Comment: The activity you have detected originates from a
Comment: dynamic hosting environment.
Comment: For fastest response, please submit abuse reports at
Comment: http://aws-portal.amazon.com/gp/aws/html-forms-controller/contactus/AWSAbuse
Comment: For more information regarding EC2 see:
Comment: http://ec2.amazonaws.com/
Comment: All reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email)
Comment: Without these we will be unable to identify
Comment: the correct owner of the IP address at that
Comment: point in time.
Ref: https://whois.arin.net/rest/net/NET-50-16-0-0-1

OrgName: Amazon.com, Inc.
OrgId: AMAZO-4
Address: Amazon Web Services, Inc.
Address: P.O. Box 81226
City: Seattle
StateProv: WA
PostalCode: 98108-1226
Country: US
RegDate: 2005-09-29
Updated: 2017-01-28
Comment: For details of this service please see
Comment: http://ec2.amazonaws.com/
Ref: https://whois.arin.net/rest/org/AMAZO-4

OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-266-4064
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://whois.arin.net/rest/poc/ANO24-ARIN

OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-266-4064
OrgAbuseEmail: abuse@amazonaws.com
OrgAbuseRef: https://whois.arin.net/rest/poc/AEA8-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-266-4064
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://whois.arin.net/rest/poc/AANO1-ARIN

RTechHandle: ANO24-ARIN
RTechName: Amazon EC2 Network Operations
RTechPhone: +1-206-266-4064
RTechEmail: amzn-noc-contact@amazon.com
RTechRef: https://whois.arin.net/rest/poc/ANO24-ARIN

RNOCHandle: ANO24-ARIN
RNOCName: Amazon EC2 Network Operations
RNOCPhone: +1-206-266-4064
RNOCEmail: amzn-noc-contact@amazon.com
RNOCRef: https://whois.arin.net/rest/poc/ANO24-ARIN

RAbuseHandle: AEA8-ARIN
RAbuseName: Amazon EC2 Abuse
RAbusePhone: +1-206-266-4064
RAbuseEmail: abuse@amazonaws.com
RAbuseRef: https://whois.arin.net/rest/poc/AEA8-ARIN
DNS records

name class type data time to live
alerted.org IN A 50.17.222.77 600s (00:10:00)
alerted.org IN NS ns-1079.awsdns-06.org 172800s (2.00:00:00)
alerted.org IN NS ns-1856.awsdns-40.co.uk 172800s (2.00:00:00)
alerted.org IN NS ns-422.awsdns-52.com 172800s (2.00:00:00)
alerted.org IN NS ns-706.awsdns-24.net 172800s (2.00:00:00)
alerted.org IN SOA
server: ns-422.awsdns-52.com
email: awsdns-hostmaster@amazon.com
serial: 1
refresh: 7200
retry: 900
expire: 1209600
minimum ttl: 86400
900s (00:15:00)
alerted.org IN MX
preference: 10
exchange: mx1.emailsrvr.com
86400s (1.00:00:00)
alerted.org IN MX
preference: 20
exchange: mx2.emailsrvr.com
86400s (1.00:00:00)
alerted.org IN TXT v=spf1 a mx include:sendgrid.net ~all 600s (00:10:00)
77.222.17.50.in-addr.arpa IN PTR ec2-50-17-222-77.compute-1.amazonaws.com 300s (00:05:00)
222.17.50.in-addr.arpa IN SOA
server: dns-external-master.amazon.com
email: root@amazon.com
serial: 12
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 900
900s (00:15:00)
222.17.50.in-addr.arpa IN NS pdns1.ultradns.net 3600s (01:00:00)
222.17.50.in-addr.arpa IN NS x3.amazonaws.org 3600s (01:00:00)
222.17.50.in-addr.arpa IN NS x4.amazonaws.org 3600s (01:00:00)
222.17.50.in-addr.arpa IN NS x2.amazonaws.com 3600s (01:00:00)
222.17.50.in-addr.arpa IN NS x1.amazonaws.com

Hey I want You! ~ makemoneyonlineprofits@gmail.com

from: Brian via amazonses.com
to: scamfraudalert@gmail.com
date: Mon, Aug 7, 2017 at 11:06 PM
subject: Hey I want You!
mailed-by: amazonses.com
signed-by: amazonses.com
security: Standard encryption (TLS) Learn more

We are looking for a partner for our online business. We want you to tryout our offers for FREE.
We have 2 testimonial with the best result and make $100 in 1 Day.

Pretty Cool Right ?

Let’s make you become on of our Testimonial and Get Paid INSTANTLY.

WHOIS PREDATORSREGISTRY.COM aka PERVERTREPORT.COM

scamFRAUDalert see it appropriate to ALERT consumers that Pervertreport.com is a part of a growing list of insidious sites being operated by a group of cyber criminals based in Latvia, MEDIOLEX LTD with handlers or affiliates around the the globe. We have identified that the affiliates in India or Pakistan, United Kingdom, Russia, Dayton Ohio (US), San Francisco Bay area, Orlando, Florida (US) and Los Angeles, CA (US) are the most aggressive.

The group seems to be well connected as they have clout to publish nonsense online without FEAR or REPERCUSSION youtube videos associated with news channels like FOX News with the sole purpose to distort or discredit scamFRAUDalert.

Along with these insidious sites, comes reputation management removal sites. They are dime a dozen. This is the new gold mine for these criminals.

-pervertreport-com

Below are some of the sites we’ve been able to identified to date.

  1. AngryCitizen
  2. AngryCitizen.com
  3. awfultenant.com
  4. badbizbureau.com
  5. badbizreport.com
  6. badbizreport.is
  7. badboydirectory.com
  8. badboyescort.com
  9. BadBoyreport.kr
  10. Badboyreport.kr
  11. badbizreport.is
  12. badboysreport.com
  13. badbusinessreport.com
  14. badrenterreport.com
  15. BadScapel.com
  16. blacklistreport.com
  17. Canada-Complaints.com
  18. CarComplaints.com
  19. cheatercentral.com
  20. cheatercomplaints.com
  21. Cheaterland.com
  22. cheatersrus.com ******
  23. Cheaterville.com
  24. complaintboard.com
  25. complaintboard.in
  26. Complaintboard.in
  27. ComplaintBureau.com
  28. complaintsboard.com
  29. Complaintsbureau.com
  30. complaintsbureau.com ********
  31. ComplaintsList.com
  32. Complaintslist.com
  33. ConsumerComplaints.co
  34. ConsumerComplaints.in
  35. Consumercomplaints.in
  36. Consumer-Court.in
  37. ConsumerMotion.com
  38. DatingPsychos.com
  39. DatingScams101
  40. DeadBeatDirectory
  41. deadbeatjohns.com
  42. deadbeatregistry.com
  43. Delete Mugshots
  44. DirtyScam.com
  45. exposeascam.com
  46. exposingpsychos.com
  47. godaddyrus.com
  48. gotrevenge.com
  49. GrahakSeva.com
  50. InComplaints
  51. IndianRealEstateReviews.com
  52. jailarrest.com
  53. liarcheatersrus.com
  54. LiarsCheatersAndBastards.com
  55. LiarscheatersRus.com
  56. MeasuredUp.com
  57. MeraReview.com
  58. Merareview.com
  59. MiamiComplaints.com
  60. ns2.liarsandcheaters.com
  61. OutScam.com
  62. potentialjohns.com
  63. predatorslist.com
  64. predatorsregistry.com
  65. predatorswatch.com
  66. PredatorsWatch.com
  67. Private-Complaints.com
  68. Private-Complaints.com
  69. Private-complaints.com
  70. PropertiesReviews.com
  71. PropertyScam.in
  72. realtorcomplaints.com
  73. realtor-complaints.com
  74. Remove Legal Listings
  75. Remove Negative Reviews
  76. RepDigger.com
  77. reportadoctor.com
  78. reportdeadbeats.com
  79. ReportMyEx.com
  80. reportmyex.com
  81. Reportmyex.com
  82. reportscam
  83. ReportScam.com
  84. ReviewsTalk.com
  85. Reviewstalk.com
  86. ripoffonline.com
  87. Scamadviser.com
  88. scamboard.com
  89. Scambook.com
  90. ScamBookRemoval.com
  91. ScamExposure
  92. scamfraudreport.com
  93. Scamgroup.com
  94. spaminform.com
  95. scamhandler.com
  96. scamhandlers.com
  97. ScamNumbers.info
  98. Scamorg.com
  99. Scamorg.com
  100. ScamVoid.com
  101. ShesAHomeWrecker.com
  102. crushus.com
  103. Shesahomewrecker.com
  104. stanfordtributes.com
  105. stdexposure.com *****
  106. stdregistry.com ******
  107. stinkylist.com
  108. TheDirty.Com
  109. Thedirty.com
  110. USAComplaints.com
  111. UScomplaints.com
  112. valleymetalrecyclinginc.com
  113. Whoscammedyou.com
  114. wikiwarnings
  115. Wikiwarnings.com
  116. warning-notice.com
  117. worstcomplaints.com
  118. spaminform.com
  119. sudzibas.eu.lv
  120. voteanddate.com
  121. spamcaution.com
  122. voteanddate.in
  123. pervertreport.com
  124. usapublicdata.com
  125. badreviews.site

-www-google-com-search (27)

Address lookup

canonical name :pervertreport.com
aliases
addresses :2400:cb00:2048:1::681b:a4ea
2400:cb00:2048:1::681b:a5ea
104.27.165.234
104.27.164.234

Domain Whois record

Queried whois.internic.net with “dom pervertreport.com”…

Domain Name: PERVERTREPORT.COM
Registry Domain ID: 1914117099_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tldregistrarsolutions.com
Registrar URL: http://www.tldregistrarsolutions.com
Updated Date: 2017-03-13T04:53:37Z
Creation Date: 2015-03-28T17:01:42Z

Registry Expiry Date: 2018-03-28T17:01:42Z
Registrar: TLD Registrar Solutions Ltd
Registrar IANA ID: 1564
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: DINA.NS.CLOUDFLARE.COM
Name Server: NORM.NS.CLOUDFLARE.COM
DNSSEC: unsigned

>>> Last update of whois database: 2017-07-30T03:01:15Z <> Last update of WHOIS database: 2017-07-30T03:01:04Z <<<
Network Whois record

Queried whois.arin.net with “n 104.27.165.234″…

NetRange: 104.16.0.0 – 104.31.255.255
CIDR: 104.16.0.0/12
NetName: CLOUDFLARENET
NetHandle: NET-104-16-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Assignment
OriginAS: AS13335
Organization: Cloudflare, Inc. (CLOUD14)
RegDate: 2014-03-28
Updated: 2017-02-17
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Ref: https://whois.arin.net/rest/net/NET-104-16-0-0-1

OrgName: Cloudflare, Inc.
OrgId: CLOUD14
Address: 101 Townsend Street
City: San Francisco
StateProv: CA
PostalCode: 94107
Country: US
RegDate: 2010-07-09
Updated: 2017-02-17
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Ref: https://whois.arin.net/rest/org/CLOUD14

OrgTechHandle: ADMIN2521-ARIN
OrgTechName: Admin
OrgTechPhone: +1-650-319-8930
OrgTechEmail: admin@cloudflare.com
OrgTechRef: https://whois.arin.net/rest/poc/ADMIN2521-ARIN

OrgAbuseHandle: ABUSE2916-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-650-319-8930
OrgAbuseEmail: abuse@cloudflare.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE2916-ARIN

OrgNOCHandle: NOC11962-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-650-319-8930
OrgNOCEmail: noc@cloudflare.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOC11962-ARIN

RNOCHandle: NOC11962-ARIN
RNOCName: NOC
RNOCPhone: +1-650-319-8930
RNOCEmail: noc@cloudflare.com
RNOCRef: https://whois.arin.net/rest/poc/NOC11962-ARIN

RAbuseHandle: ABUSE2916-ARIN
RAbuseName: Abuse
RAbusePhone: +1-650-319-8930
RAbuseEmail: abuse@cloudflare.com
RAbuseRef: https://whois.arin.net/rest/poc/ABUSE2916-ARIN

RTechHandle: ADMIN2521-ARIN
RTechName: Admin
RTechPhone: +1-650-319-8930
RTechEmail: admin@cloudflare.com
RTechRef: https://whois.arin.net/rest/poc/ADMIN2521-ARIN
DNS records

name class type data time to live
pervertreport.com IN HINFO
CPU: ANY obsoleted
OS: See draft-ietf-dnsop-refuse-any
3789s (01:03:09)
pervertreport.com IN NS dina.ns.cloudflare.com 86400s (1.00:00:00)
pervertreport.com IN NS norm.ns.cloudflare.com 86400s (1.00:00:00)
234.165.27.104.in-addr.arpa IN HINFO
CPU: Please stop asking for ANY
OS: See draft-ietf-dnsop-refuse-any
3

Whois scamboard.com? reportdeadbeats.com?

The site operators are the same individuals that created http://www.predatorswatch.com whose name have been altered on one of their bogus sites The DatingJudge.com and you can read complaints  Dividedstates.comThe Dating Judge and Ripoffreport.com.

A psychopath and dangerous individual.

scamboard2

Address lookup
canonical name reportdeadbeats.com
aliases
addresses 209.141.39.215
Domain Whois record

Queried whois.internic.net with “dom reportdeadbeats.com”…

Domain Name: REPORTDEADBEATS.COM
Registrar: GODADDY.COM, LLC
Sponsoring Registrar IANA ID: 146
Whois Server: whois.godaddy.com
Referral URL: http://www.godaddy.com

Name Server: NS1.LIARSANDCHEATERS.COM
Name Server: NS2.LIARSANDCHEATERS.COM

Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Updated Date: 02-feb-2016
Creation Date: 19-sep-2015
Expiration Date: 19-sep-2016

Last update of whois database: Wed, 06 Jul 2016 01:46:01 GMT

For more information on Whois status codes, please visit https://icann.org/epp
Queried whois.godaddy.com with “reportdeadbeats.com”…

Domain Name: reportdeadbeats.com
Registry Domain ID: 1961622773_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com

Update Date: 2015-09-19T02:24:13Z
Creation Date: 2015-09-19T02:24:13Z

Registrar Registration Expiration Date: 2016-09-19T02:24:13Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.4806242505

Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Domain Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited

Registry Registrant ID: Not Available From Registry
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City: Scottsdale
Registrant State/Province: Arizona
Registrant Postal Code: 85260
Registrant Country: US
Registrant Phone: +1.4806242599
Registrant Fax: +1.4806242598
Registrant Email: reportdeadbeats.com@domainsbyproxy.com
Registry Admin ID: Not Available From Registry

Admin Name: Registration Private
Admin Organization: Domains By Proxy, LLC
Admin Street: DomainsByProxy.com
Admin Street: 14747 N Northsight Blvd Suite 111, PMB 309
Admin City: Scottsdale
Admin State/Province: Arizona
Admin Postal Code: 85260
Admin Country: US
Admin Phone: +1.4806242599
Admin Fax: +1.4806242598
Admin Email: reportdeadbeats.com@domainsbyproxy.com

Registry Tech ID: Not Available From Registry
Tech Name: Registration Private
Tech Organization: Domains By Proxy, LLC
Tech Street: DomainsByProxy.com
Tech Street: 14747 N Northsight Blvd Suite 111, PMB 309
Tech City: Scottsdale
Tech State/Province: Arizona
Tech Postal Code: 85260
Tech Country: US
Tech Phone: +1.4806242599
Tech Fax: +1.4806242598
Tech Email: reportdeadbeats.com@domainsbyproxy.com

Name Server: NS1.LIARSANDCHEATERS.COM
Name Server: NS2.LIARSANDCHEATERS.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/

Last update of WHOIS database: 2016-07-06T01:00:00Z

For more information on Whois status codes, please visit https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en
Network Whois record

Queried whois.arin.net with “n 209.141.39.215″…

NetRange: 209.141.32.0 – 209.141.63.255
CIDR: 209.141.32.0/19
NetName: PONYNET-04
NetHandle: NET-209-141-32-0-1
Parent: NET209 (NET-209-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS53667
Organization: FranTech Solutions (SYNDI-5)
RegDate: 2011-01-27
Updated: 2012-03-25
Ref: https://whois.arin.net/rest/net/NET-209-141-32-0-1

OrgName: FranTech Solutions
OrgId: SYNDI-5
Address: 1621 Central Ave
City: Cheyenne
StateProv: WY
PostalCode: 82001
Country: US
RegDate: 2010-07-21
Updated: 2012-10-01
Ref: https://whois.arin.net/rest/org/SYNDI-5

OrgAbuseHandle: FDI19-ARIN
OrgAbuseName: Dias, Francisco
OrgAbusePhone: +1-778-977-8246
OrgAbuseEmail: admin@frantech.ca
OrgAbuseRef: https://whois.arin.net/rest/poc/FDI19-ARIN

OrgTechHandle: FDI19-ARIN
OrgTechName: Dias, Francisco
OrgTechPhone: +1-778-977-8246
OrgTechEmail: admin@frantech.ca
OrgTechRef: https://whois.arin.net/rest/poc/FDI19-ARIN
DNS records

name class type data time to live
reportdeadbeats.com IN SOA
server: ns1.liarsandcheaters.com
email: admin@stdregistry.com
serial: 2016050401
refresh: 3600
retry: 7200
expire: 1209600
minimum ttl: 86400
86400s (1.00:00:00)
reportdeadbeats.com IN NS ns2.liarsandcheaters.com 86400s (1.00:00:00)
reportdeadbeats.com IN NS ns1.liarsandcheaters.com 86400s (1.00:00:00)
reportdeadbeats.com IN A 209.141.39.215 14400s (04:00:00)
reportdeadbeats.com IN MX
preference: 0
exchange: reportdeadbeats.com
14400s (04:00:00)
215.39.141.209.in-addr.arpa IN PTR . 60s (00:01:00)
39.141.209.in-addr.arpa IN NS rdns1.buyvm.net 60s (00:01:00)
39.141.209.in-addr.arpa IN SOA
server: ns1.frantech.ca
email: admin@frantech.ca
serial: 1
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
86400s (1.00:00:00)
39.141.209.in-addr.arpa IN NS rdns2.buyvm.net 60s (00:01:00)
Traceroute

Tracing route to reportdeadbeats.com [209.141.39.215]…

hop rtt rtt rtt ip address fully qualified domain name
1 0 0 0 208.101.16.73 49.10.65d0.ip4.static.sl-reverse.com
2 0 0 0 66.228.118.153 ae11.dar01.sr01.dal01.networklayer.com
3 0 0 0 173.192.18.210 ae6.bbr01.eq01.dal03.networklayer.com
4 28 28 28 173.192.18.141 ae0.bbr01.cs01.lax01.networklayer.com
5 31 31 31 206.223.123.136 lax-eqx-01gw.voxility.net
6 * * *
7 35 36 32 5.254.110.1 filter-ddos
8 * * *
9 * * *
10 * * *
11 * * *
Trace aborted

— end —
URL for this output | return to CentralOps.net, a service of Hexillion

The following A records are set to 209.141.39.215:

  1. badbizreport.com
  2. badboydirectory.com
  3. badboyescort.com
  4. blacklistreport.com
  5. cheatersrus.com
  6. deadbeatregistry.com
  7. godaddyrus.com
  8. gotrevenge.com
  9. liarcheatersrus.com
  10. ns2.liarsandcheaters.com
  11. predatorslist.com
  12. predatorswatch.com
  13. reportdeadbeats.com
  14. reportmyex.com
  15. scamboard.com
  16. scamfound.com
  17. stdregistry.com
  18. valleymetalrecyclinginc.com

Cybercriminal Albert Ahdoot ~ Colocation America

Colocation America Corporation, a Nevada Corporation owned and operated by one Albert A. Ahdoot aka Albert Ahdoot dba Colocation America ColocationUSA dba Colocation America, Inc, license have been FORFEITED by the Secretary of State

Albert Ahdoot is part of a network infrastructure of IT professionals whose business practices are suspect.

His so-called Perry Mason sleazeball Attorney Paul Sigelman notoriety is to FIX lawsuits.

Attorney Richard Morse representing Albert A. Ahdoot dba Colocation America Corporation, Colocation America, Inc., Colocation America, Colocation America now Collocation America send us a threat letter.

Albert Ahdoot was accused of being a serial spammer by Earthlink and is a threat to the global internet infrastructure based on his business practices.

WebHostingTalkwells fargoWells Fargo Complaint-Colocation America

Richard Morse
Entertainment Attorney
13935 Tahiti Way Suite 337
Marina Del Rey, CA

Dear scamFRAUDalert,

I’m tied up with an urgent family matter for the rest of the day and tomorrow, so I have neither the time nor the patience to explain this more than once.
Your DDOS attack (http://en.wikipedia.org/wiki/Denial-of-service_attack) which caused Colocation America, Multacom and Cogent Communications to go down for more than an hour, cost the three companies over $250K in revenue due to their lines being SHUT OFF! You are liable for this. This is in direct violation of your AUP http://colocationamerica.com/aup.htm as clearly stated in your contract. I am being provided receipts from every customer who has to be refunded. You are in breach of your 1 year contract where he owes us the remainder of it. You and ScamAFraudlert.com must immediately stand down in your postings. They must be taken down now.

You need to speak to a criminal attorney immediately to gauge your exposure, I am not your attorney and cannot so advise you. If you and your attorney wish to work out any type of accommodation with me, it can only happen with you immediately ceasing and desisting. You need to provide notice of that within the hour.

THE INDUSTRY PRACTICES Standard Level Agreement (SLA) Mr. ALBERT ARASH AHDOOT or Albert A. Ahdoot dba Colocation America aka Colocation America, Inc. aka Colocation America Corporation refer to SLA as Legal Agreement A clue for what you are up against.

Richard Morse
Entertainment Attorney
13935 Tahiti Way Suite 337
Marina Del Rey, CA

This sleazeball Attorney Paul Sigelman is now saying that his client Albert A. Ahdoot dba Colocation America is a private citizen whose business activities as a reseller of colocation services to the general public online and lying to customers about the services being offer is not a matter of public concern. Paul Sigelman legal argument

In essence Paul Sigelman is saying that the public has no rights to know about his client past business practices.

  1. Colocation America – Demand Letter
  2. Colocation America – Better Business Complaints Las Vegas
  3. Colocation America Threat Letter – Richard Morse
  4. Legal Document Relating to Colocation America
  5. Letter From Attorney Paul S. Sigelman – Sigelmanlaw.com
  6. Attorney Paul Sigelman Letter – PAUL S. SIGELMAN LAW FIRM
  7. Paul Sigelmam Law Firm – Colocation America – 1st Complaint
  8. Paul Sigeglman Law Firm – Colocation Ammerica – 2nd Complaint
  9. Defendant – scamFRAUDalert Answer – 2nd Complaint
  10. Court Ruling – 2nd Complaint
  11. Paul Sigelman Law Firm – Colocaiton America – APPEAL BRIEFING
  12. Appelle – Respondent scamFRAUDalert – ANSWER BRIEFING
  13. Appellant’s Reply Brief ~ utterly nonsense
  14. Appellate Ruling – Affirmed
  15. Motion For Attorney Fees $133,000

Colocation America ~ Colocation America Inc ~ Collocation America

    • colocation america albert Ahdoot
    • colocation review
    • colocation americe review
    • Colocation Los Angeles
    • colocation america inc
    • Los Angeles Colocation
    • Colocation san francisco
    • colocation usa
    • colocation new york
    • colocation america hosting reviews
    • colocation america uptime
    • colocation america web hosting
    • colocation america corporation
    • colocation america inc
    • data centers colocation america
    • carrier neutral colocation america
    • colocation hosting Los Angeles
    • colocation america albert
    • Colocation Southern California
    • Colocation LA

ROKSO-200-worst-spammers

(213) 928-6929

Colocation America, Inc.
Review for Multiple Locations

  1. Colocation America, Inc.
    530 West 6th Street Suite 903
    Los Angeles, CA 90014
  2. Colocation America, Inc.
    600 West 7th Street
    Los Angeles, CA 90017
  3. Colocation America, Inc.
    624 South Grand Avenue
    Los Angeles, CA 90017
  4. Colocation America, Inc.
    650 South Grand Avenue
    Los Angeles, CA 90017
  5. Colocation America, Inc.
    707 Wilshire Avenue
    Los Angeles, CA 90017
  6. Colocation America, Inc.
    9360 W Flamingo Rd # 110-178
    Las Vegas, NV 89147-6426

Colocation America, Inc. aka UnitedLayer.com
530 West 6th Street Suite 903
Los Angeles, CA 90014

Colocation America, Inc.
600 West 7th Street
Los Angeles, CA 90017

Colocation America, Inc.
624 South Grand Avenue
Los Angeles, CA 90017

Colocation America, Inc. aka UnitedLayer.com
650 South Grand Avenue
Los Angeles, CA 90017

Colocation America, Inc. aka Multacom.com
707 Wilshire Avenue
Los Angeles, CA 90017

Colocation America, Inc. ~ Unknown
9360 W Flamingo Rd # 110-178
Las Vegas, NV 89147-6426

Los Angeles Data Centers:

Aon Center : 707 Wilshire Blvd. Los Angeles, CA 90017
One Wilshire: 624 S. Grand Ave. Los Angeles, CA 90017
Digital Realty Trust: 600 W. 7th St. Los Angeles, CA 90017
Quinby Building: 650 S. Grand Ave. Los Angeles, CA 90017
Telecom Center: 530 W. 6th St. Los Angeles, CA 90014

San Francisco Data Centers:

200 Paul Exchange: 200 Paul St. San Francisco, CA 94110

New York Data Centers:

60 Hudson Building: 60 Hudson Ave. New York, NY 10013

New Jersey Data Centers:

100 Delawanna Buiding:100 Delawanna Ave. Clifton, NJ 0701

Chicago Data Centers:

  • 350 E Cermak Rd. Chicago, IL 60616
  • 701 S Lasalle St. Chicago, IL 60605
  • 725 S Wells St. Chicago, IL 60607
  • 427 S Lasalle St. Chicago, IL 60605
  • 717 S Wells St. Chicago, IL 60607
  • 601 W Polk St. Chicago, IL 60607
  • 600 W Chicago Ave Chicago, IL 60654
  • 1331 E Business Center Dr. Mt Prospect, IL 60056
  • 800 E. Business Center Dr. Mt. Prospect, IL 60056
  • 1850 Springer Dr. Lombard, IL 60148
  • 1808 Swift Dr. Oakbrook, IL 60523
  • 360 E 22nd St. Lombard, IL 60148
  • 2425 Busse Rd. Arlington Heights, IL 60005
  • 1905 Lunt Ave. Elk Grove Village, IL 6000

Colocation America and UnitedLayer Management Ownership

  • Arman Khalili is currently the Founder, CEO and co-owner.
  • Peter Preuss[8] – Director of Systems Architecture and co-owner
  • Otto Grajeda [9]- Founder and co-owner
  • Albert A. Ahdoot – [10]- co-owner

bestgirlsxx.com

Malware infected sites

94.28.173.220 resolves to dedic.dc.besthosting.ua.

The following A records are set to 194.28.173.220:
bestgirlsrus.comScam Alert 1
bestgirlsxx.com
bestxxgirls.com
dategirlsxx.com
datewrg.com
datexxgirls.com
datilinal.com
dating-lux.com
datingruss.com
datingxxgirls.com
fishflytoy.com
girlsbestrus.com
girlsbestxx.com
girlsdatexx.com
girlsonlinerus.com
girlsrusbest.com
girlsxxbest.com
girlsxxdate.com
girlsxxdating.com
ns1.continentalcargocompany.com
ns1.premiumcargocompany.com
ns2.continentalcargocompany.com
ns2.premiumcargocompany.com
onlinegirlsrus.com
onlinerugirls.com
onlinerusgirls.com
plsdating.com
rusbestgirls.com
rusgirlsbest.com
rusgirlsonline.com
rusonlinegirls.com
russadult.com
xxbestgirls.com
xxdategirls.com
xxgirlsbest.com
xxgirlsdate.com
yoyamed.com
yoyaplst.com