WhoIs www.dmanualpdf.com

Address lookup
canonical name dmanualpdf.com
aliases
addresses 67.222.29.44
Domain Whois record

Queried whois.internic.net with “dom dmanualpdf.com”…

Domain Name: DMANUALPDF.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.DMANUALPDF.COM
Name Server: NS2.DMANUALPDF.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 30-jul-2012
Creation Date: 29-jul-2011
Expiration Date: 29-jul-2013

Last update of whois database: Fri, 17 Aug 2012 17:21:35 UTC
Queried whois.godaddy.com with “dmanualpdf.com

Registrant:
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: DMANUALPDF.COM
Created on: 29-Jul-11
Expires on: 29-Jul-13
Last Updated on: 30-Jul-12

Administrative Contact:
Private, Registration DMANUALPDF.COM@domainsbyproxy.com
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Technical Contact:
Private, Registration DMANUALPDF.COM@domainsbyproxy.com
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Domain servers in listed order:
NS1.DMANUALPDF.COM
NS2.DMANUALPDF.COM

Network Whois record

Queried whois.arin.net with “n ! NET-67-222-24-0-1″…

NetRange: 67.222.24.0 – 67.222.31.255
CIDR: 67.222.24.0/21
OriginAS: AS30496
NetName: PRIVATE-TX-2
NetHandle: NET-67-222-24-0-1
Parent: NET-67-222-0-0-1
NetType: Reallocated
RegDate: 2011-06-05
Updated: 2011-06-05
Ref: http://whois.arin.net/rest/net/NET-67-222-24-0-1

OrgName: PrivateSystems Networks TX
OrgId: PNT-5
Address: Colo4 c/o PrivateSystems Networks
Address: 3000 Irving Blvd
City: Dallas
StateProv: TX
PostalCode: 75247
Country: US
RegDate: 2011-06-03
Updated: 2011-08-23
Ref: http://whois.arin.net/rest/org/PNT-5

OrgTechHandle: NOC2915-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-866-332-9894
OrgTechEmail: noc@privatesystems.net
OrgTechRef: http://whois.arin.net/rest/poc/NOC2915-ARIN

OrgAbuseHandle: PNA44-ARIN
OrgAbuseName: PrivateSystems Networks Abuse
OrgAbusePhone: +1-866-332-9894
OrgAbuseEmail: abuse@privatesystems.net
OrgAbuseRef: http://whois.arin.net/rest/poc/PNA44-ARIN

DNS records

DNS query for 44.29.222.67.in-addr.arpa returned an error from the server: NameError
name class type data time to live
http://www.dmanualpdf.com IN CNAME dmanualpdf.com 14400s (04:00:00)
dmanualpdf.com IN MX
preference: 0
exchange: dmanualpdf.com
14400s (04:00:00)
dmanualpdf.com IN SOA
server: ns1.keybusinessplan.com
email: dudigiriyana@msn.com
serial: 2012080200
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
dmanualpdf.com IN NS ns2.dmanualpdf.com 86400s (1.00:00:00)
dmanualpdf.com IN NS ns1.dmanualpdf.com 86400s (1.00:00:00)
dmanualpdf.com IN A 67.222.29.44 14400s (04:00:00)

— end —

BBB WARNS – centerlinefinancial.org

St. Louis, Mo., June 11, 2007 – A Miami, Fla., mother sent $1,830 for a $5,000 loan to a company that uses a St. Louis address and received nothing in return, she told the Better Business Bureau (BBB).

The consumer applied for the loan in an effort to pay for her child’s surgery. She accepted the loan on May 31, 2007, from Centerline Financial Group, which uses the address of 1001 Craig Rd., St. Louis, Mo. After faxing the agreement to the company she said she was called by a person identifying himself as Ben Fisher, customer service manager. She said he told her to wire payments totaling $1,830 in collateral for the loan. She wired the money to the “head of accounting,” Alice Workman, in Ontario, Canada.

The loan proceeds didn’t arrive as promised. She said, “I was in tears and contacted the company. They said that a refund had been activated. I never received it. I was so desperate and they took advantage of it. I was trying to pay for my daughter’s surgery. I have three kids and my refrigerator is empty. They have stripped me of everything.”

Recently, the BBB has received 17 complaints and reports against the company. Complainants report that they searched for loans online and came across the firm’s Web site at

http://www.centerlinefinancial.org. Consumers who completed the online application, said they received phone calls from firm representatives identifying themselves as Peter Debow, Mark Gardener, Jason Fleming or Ben Fisher, who asked them to wire amounts ranging from $900 to $2,300 to representatives in Canada with the names Melanie Thames, Christine Flocher, Diane C. Parker, Nancy Salem or Alice Workman. Consumers report the company requested the payments as security deposits, because of poor credit scores.

A Montclair, N.J., consumer said she was promised a $25,000 personal loan from Centerline Financial Group. The consumer accepted the loan, and received a phone call on May 25, 2007, from Peter Debow who told her to wire $1,960 to representatives in Alberta, Canada, for collateral to secure the loan. The consumer complied and was told the loan would be deposited in her account the following day. She said, “That was our rent money. It has placed a great financial hardship on us.”

A Bayside, N.Y., consumer sent $1,200 to secure a loan for $7,000. He received a call from a representative named Jason Fleming who told him to wire the money to Alberta to complete the process. He wired the funds via money gram, and the loan proceeds were never placed in his bank account. When he contacted the company, they promised a refund, but it has not shown up. He said, “I visited the Web site and it seemed legit, so I didn’t think twice.”

The registrant of the Web site, http://www.centerlinefinancial.org, is listed as Steven Strickler, 36 Sandfield Rd., Wardensville, W.V. The address listed on the company’s loan agreement is an office building in a suburb of St. Louis. A spokesperson for the property management company said she has never heard of the company.

The firm is not registered with the state, according to the Missouri secretary of state’s Web site. A representative of the Missouri Division of Finance told the BBB that Centerline Financial Group is not licensed by its office. A loan agreement identifies Allen J. Watson as the CEO of Centerline Financial Group.

The BBB offers the following general tips regarding advance fee loans:

  • Reputable lenders never guarantee or promise that you will receive a loan before you apply, or before they have checked your credit report, especially if you have bad credit or no credit record.
  • It is illegal for companies doing business by phone to promise you a loan and ask you to pay a fee for it before they deliver.
  • Don’t give your credit card, bank account, or Social Security number on the telephone, by fax, or via the Internet unless you are familiar with the company and know why the information is necessary.
  • When entering personal data on a Web site, look for a “locked padlock” in the browser or “https” at the beginning of the Web site address to make sure the site is secure.
  • Don’t send money or money orders for a loan by wire. You have little recourse if there’s a problem with a wire transaction. Reputable lenders don’t pressure you to wire funds.
  • Make sure the company’s physical address and phone number are available on its Web site. If they’re not available, ask the broker for this information. If the loan broker hesitates to tell you the physical location of the company, beware this is a common ploy to avoid law enforcement detection. Refuse to do business with the broker until you have obtained and verified its physical address or location.
  • Obtain the company’s number in the phone book or from directory assistance, and call it to make sure you’re dealing with the company you think you are.
  • If the broker claims to have connections to established financial institutions, ask which lender the company deals with, and ask for the physical address of the lender.
  • If you think you’ve been victimized by an advance fee loan scam, you may file a complaint with the BBB at 314-645-3300 or by visiting www.contactbbb.org or with the Federal Trade Commission at 1-877-382-4357 or by visiting www.ftc.gov.  If the company is located in Canada, you may report it to “Phonebusters, the Canadian Anti-Fraud Call Center” at 1-888-495-8501 or by visiting www.phonebusters.com.

Please contact GeGe Mix, BBB, at (314) 645-4636 for information regarding complainants who are available for media contact.

http://stlouis.bbb.org/article/mother-seeks-loan-for-childs-surgery-and-falls-victim-to-loan-scam-2742

Goldcomllc – goldcomllc.com

Steven Christopher (2 first names) 1st red flag called me and said he was from goldcomllc – goldcomllc.com a grant company and he was responding to my request for a grant. i told him i was a start up green energy company and i wanted to build my proto/types, and i needede trucks, tools, and a warehouse. he asked me if i had a business plan and i said yes, then he asked me some questions about how much money i needed, and it came to $271,000.00

He said he would call me back in 1 hour and tell me if i was approved, so i called back 15 minutes later and a different person answered the phone with a southern accent and and said he was steven christopher and i went along with it, and then I googled goldcomllc and found a scam alert on the company, they switched names in january from direct business company , compass national, interlan, etc,etc, and there website was just put up in january 2012, and they already have 2 complaints in feb 2012, they get you to bank wire $3999.00 for a business plan that any moron can write and when he called me back in the next hour he said congradulations you were approved for $217,000.00 grant and i said great how long before i can receive it, and he said 4 to 6 months i would have the money, the states attorney of Albuquerque new Mexico has been informed that they will seize the server of there website and shut down their bank account wells fargo 11199 montgomery blvd n.e. albuquerque, new mexico routing # 107002192 account # 5790173446.

They are a total scam working from prepaid cell phones. they must be stopped.

WhoIs DressSale.com

Address lookup
canonical name dresssale.com
scamalert
aliases
addresses 66.147.244.132
Domain Whois record

Queried whois.internic.net with dom dresssale.com

Domain Name: DRESSSALE.COM
Registrar: MONIKER ONLINE SERVICES, INC.
Whois Server: whois.moniker.com
Referral URL: http://www.moniker.com
Name Server: NS1.BLUEHOST.COM
Name Server: NS2.BLUEHOST.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 01-aug-2012
Creation Date: 18-mar-1999
Expiration Date: 18-mar-2013

Last update of whois database: Fri, 17 Aug 2012 15:56:45 UTC
Queried whois.moniker.com with “dresssale.com

Domain Name: DRESSSALE.COM
Registrar: MONIKER

Registrant [459507]:
josh burke john@hunterdon.com
2 sebring round
hillsborough
NJ
08844
US

Administrative Contact [459507]:
josh burke john@hunterdon.com
2 sebring round
hillsborough
NJ
08844
US
Phone: +1.908-938-0479

Billing Contact [459507]:
josh burke john@hunterdon.com
2 sebring round
hillsborough
NJ
08844
US
Phone: +1.908-938-0479

Technical Contact [459507]:
josh burke john@hunterdon.com
2 sebring round
hillsborough
NJ
08844
US
Phone: +1.908-938-0479

Domain servers in listed order:

NS1.BLUEHOST.COM
NS2.BLUEHOST.COM

Record created on: 1999-03-18 00:00:00.0
Database last updated on: 2012-08-01 18:07:32.553
Domain Expires on: 2013-03-18 00:00:00.0

Network Whois record

Queried whois.arin.net with “n 66.147.244.132″…

NetRange: 66.147.240.0 – 66.147.255.255
CIDR: 66.147.240.0/20
OriginAS: AS46606
NetName: BLUEHOST-NETWORK-4
NetHandle: NET-66-147-240-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
RegDate: 2008-05-05
Updated: 2011-11-29
Ref: http://whois.arin.net/rest/net/NET-66-147-240-0-1

OrgName: Bluehost Inc.
OrgId: BLUEH-2
Address: 1958 South 950 East
City: Provo
StateProv: UT
PostalCode: 84606
Country: US
RegDate: 2006-08-08
Updated: 2011-09-27
Ref: http://whois.arin.net/rest/org/BLUEH-2

OrgAbuseHandle: NOC2320-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-801-765-9400
OrgAbuseEmail: abuse@bluehost.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

OrgTechHandle: NETWO2081-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-801-765-9400
OrgTechEmail: netops@bluehost.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

RTechHandle: NETWO2081-ARIN
RTechName: Network Operations
RTechPhone: +1-801-765-9400
RTechEmail: netops@bluehost.com
RTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

RAbuseHandle: NOC2320-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-801-765-9400
RAbuseEmail: abuse@bluehost.com
RAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

RNOCHandle: TECHN497-ARIN
RNOCName: Technical Operations
RNOCPhone: +1-801-765-9400
RNOCEmail: support@bluehost.com
RNOCRef: http://whois.arin.net/rest/poc/TECHN497-ARIN

DNS records
name class type data time to live
dresssale.com IN NS ns1.bluehost.com 86400s (1.00:00:00)
dresssale.com IN TXT v=spf1 a mx ptr include:bluehost.com ?all 14400s (04:00:00)
dresssale.com IN MX
preference: 0
exchange: mail.dresssale.com
14400s (04:00:00)
dresssale.com IN SOA
server: ns1.bluehost.com
email: root@box832.bluehost.com
serial: 2012080107
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)
dresssale.com IN NS ns2.bluehost.com 86400s (1.00:00:00)
dresssale.com IN A 66.147.244.132 14400s (04:00:00)
132.244.147.66.in-addr.arpa IN PTR box832.bluehost.com 86400s (1.00:00:00)
244.147.66.in-addr.arpa IN SOA
server: ns1.bluehost.com
email: abuse@bluehost.com
serial: 2009101601
refresh: 28800
retry: 14400
expire: 3600000
minimum ttl: 300
83586s (23:13:06)
244.147.66.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-08-27 12:02:18Z
signature inception: 2012-08-17 12:02:18Z
key tag: 25970
signer’s name: 66.in-addr.arpa
signature:
(1024 bits)

2919s (00:48:39)
244.147.66.in-addr.arpa IN NSEC
next domain name: 245.147.66.in-addr.arpa
record types: NS RRSIG NSEC
2919s (00:48:39)
244.147.66.in-addr.arpa IN NS ns2.bluehost.com 83586s (23:13:06)
244.147.66.in-addr.arpa IN NS ns1.bluehost.com 83586s (23:13:06)

— end —

Coast Capital Financial Services

The Purpose of this post is to ALERT you that the job you are about to apply for or may scamalert2have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of individuals or a business entity have been stolen along with fund from their bank accounts.

These job postings are an attempt to lure you into accepting wire transfers and cashing counterfeit checks into your bank accounts. You are being recruited to wire transfer these funds via WESTERN UNION or MONEYGRAM from your bank into a DOMESTIC BANK or OFFSHORE BANK ACCOUNT.

Essentially You Become A Money or Repackage Mule

  1. Money Mule Explained
  2. Understanding The Cyber Theft Ring
  3. Protecting Yourself Against Money Mule
  4. KrebsOnSecurity – Cyberheist
  5. Washingtonpost.com by Brian Krebs
  6. Interview With A Money Mule
  7. Bobbear.co.UK ~ Historical Money Mule Sites

____________________

I received a typed unsigned letter from Paul Morgan, Promotion Manager with Coast Capital Financial Services with an address at 1350 Lonsdale Street, Los Angeles, CA 90015. The envelope did not have any return address but the stamps indicated it was mailed from Ireland.

The letter indicated that I was a 2nd prize winner in the 2nd category of the USA Mega draw, and assigned me the numbers 51-20-26-37-40, and that I won $255,000.00. Enclosed with the letter was a check from

The Wasserstrom Company
477 S. Front St.
Columbus, OH 43215

in the amount of $4,685.00 to “help pay for the processing fee” of $3,950.00 drawn on the Huntington National Bank, Columbus, OH 43219.

According to the letter, I was not to act until I contacted my assigned claim agent named Allen Johnson at 1-604-367-6567 Monday-Friday 10 a.m-5 p.m. and Saturdays 10:00 a.m.-1:00 p.m. to start the claim processing and activation of the check.

I needed to sign the bottom part of the letter and provide my name, address and give to the representative AFTER I received the rest of the $255,000.00 check.

This is a scam. With an envelope having stamps from Ireland, an unsigned letter from some company in Los Angeles, CA, a 604 area code indicating the contact number was Canadian, and a check drawn on a company in Columbus, OH, this raised red flags for me.

I contacted The Wasserstrom Company, a restaurant supplier, and the representative informed me that this is a massive scam, and they are working with appropriate authorities to find the culprits and eliminate this scam that’s involved their company.

Please do not attempt to cash this check. Let me reiterate: this is a scam. By participating, you will hurt yourself financially.

Coast Capital Financial Services
1350 Lonsdale Street
Los Angeles California 90015
United States of America
604-367-6567

Cash Advance America – Cash-AdvanceAmerica.com

Collection Agency Harassing Calls


I’m oh so very glad that i did research before taking any further action to please scamalert4those scammers.  I received a phone call yesterday morning from a man with a very thick accent. He told me that he was filing a lawsuit against me for fraud and my unpaid loan of $300 plus late fees and what not, the money I “owe” them came up to $650 and they demanded that the amount should be paid NOW, he then told me that the only way to resolve this is, to send a copy of my driver’s license, the number of my debit card, and a letter that states that I allow them to take the amount of $650 I owe them but in to TWO payment.

I then told him that I was unable to give him my debit card number because I had just opened a new account and I don’t have the actual card with me. Then, he told me to go out and go to Walmart to buy a prepaid debit card and fax them my driver’s license along with the letter of authorization and the prepaid debit card number.

Me being scared, stupid, and with inability to think straight I did what they told me to do, once that was done they called back said that they were unable to charge my card because i had bought the wrong card (God has it’s way) and that I had 2 hours to pay them or they will file report on me! At that point I didn’t know what else to do, so I started asking questions and asked them what was the name of the company I owe the money to, he said it CASH ADVANCE AMERICA. I hung up the phone and went online and typed in the name on google, and the first thing that pop-ed up were scam warnings and this website. I found relief when I stared reading complaints about other people’s experience with this scam and the complaints were the same incident as of what happened to me; American name, thick indian accent where you can barely understand, the method of paying them, lawsuits, frauds, and their determination of getting MY MONEY promptly. I called them back and ask them if they can give me the account number they send the money, the date they send it, and my social security number. They couldn’t give me any of that information, the only thing they gave me were the LAST 4-DIGITS of my SSN. I told them that if they were going to file a report on me they would have all those information as evidence. I made assure that I now know what was going on, I told them that I will report this to the FBI, I knew their phone number; 860-761-3297 and his name; SCOTT WILSON.

He then hung up on me. I told my friends and warned them too, they had advice me to call the FTC and Better Business Bureau and report them so they can track them down! I should also warn you that the number they are using is from a Magic Jack, we had a Magic Jack before and trust me, when they turned it off, it had the same messaging system as my old magic jack.

SO WARN YOUR FRIENDS AND BE CAREFUL!

Address lookup
canonical name cash-advanceamerica.com.
aliases
addresses 70.87.93.2
Domain Whois record

Queried whois.internic.net with “dom cash-advanceamerica.com”…

Domain Name: CASH-ADVANCEAMERICA.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS197.WEBSITEWELCOME.COM
Name Server: NS198.WEBSITEWELCOME.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 04-feb-2012
Creation Date: 03-feb-2009
Expiration Date: 03-feb-2013

Last update of whois database: Fri, 17 Aug 2012 15:47:47 UTC
Queried whois.godaddy.com with “cash-advanceamerica.com

Registrant:
Karnab Web Marketing Services Pvt Ltd
# 402, B – Wing, Mittal Towers
M G Road
Bangalore, Karnataka 560027
India

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: CASH-ADVANCEAMERICA.COM
Created on: 03-Feb-09
Expires on: 03-Feb-13
Last Updated on: 04-Feb-12

Administrative Contact:
Sharma, Narendra kweb.sharma@gmail.com
Karnab Web Marketing Services Pvt Ltd
# 402, B – Wing, Mittal Towers
M G Road
Bangalore, Karnataka 560027
India
65316321 Fax — 25566728

Technical Contact:
Sharma, Narendra kweb.sharma@gmail.com
Karnab Web Marketing Services Pvt Ltd
# 402, B – Wing, Mittal Towers
M G Road
Bangalore, Karnataka 560027
India
65316321 Fax — 25566728

Domain servers in listed order:
NS197.WEBSITEWELCOME.COM
NS198.WEBSITEWELCOME.COM

Network Whois record

Queried rwhois.theplanet.com with “70.87.93.2”…

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-THEPLANET-BLK-13
network:Auth-Area:70.84.0.0/14
network:Network-Name:TPIS-BLK-70-87-93-0
network:IP-Network:70.87.93.0/27
network:IP-Network-Block:70.87.93.0 – 70.87.93.31
network:Organization;I:WebsiteWelcome
network:Street-Address:N/A
network:City:Boca Raton
network:State:FL
network:Postal-Code:33496
network:Country-Code:USA
network:Tech-Contact;I:abuse@websitewelcome.com
network:Admin-Contact;I:abuse@websitewelcome.com
network:Created:20051230
network:Updated:20081104

%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok

Queried whois.arin.net with “n 70.87.93.2″…

NetRange: 70.84.0.0 – 70.87.255.255
CIDR: 70.84.0.0/14
OriginAS: AS36420, AS30315, AS13749, AS21844
NetName: NETBLK-THEPLANET-BLK-13
NetHandle: NET-70-84-0-0-1
Parent: NET-70-0-0-0-0
NetType: Direct Allocation
RegDate: 2004-07-29
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-70-84-0-0-1

OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-822-4204
OrgNOCEmail: noc@theplanet.com
OrgNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com
OrgTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com
RTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-822-4204
RNOCEmail: noc@theplanet.com
RNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

DNS records
name class type data time to live
cash-advanceamerica.com IN TXT v=spf1 ip4:184.173.239.120 a mx include:websitewelcome.com ~all 14400s (04:00:00)
cash-advanceamerica.com IN MX
preference: 0
exchange: cash-advanceamerica.com
14400s (04:00:00)
cash-advanceamerica.com IN SOA
server: ns197.websitewelcome.com
email: jay@sportzvillage.com
serial: 2012061300
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
cash-advanceamerica.com IN NS ns198.websitewelcome.com 86400s (1.00:00:00)
cash-advanceamerica.com IN NS ns197.websitewelcome.com 86400s (1.00:00:00)
cash-advanceamerica.com IN A 70.87.93.2 14400s (04:00:00)
2.93.87.70.in-addr.arpa IN PTR omni.websitewelcome.com 86400s (1.00:00:00)
93.87.70.in-addr.arpa IN SOA
server: ns3.arpa.networklayer.com
email: root@softlayer.com
serial: 2011083100
refresh: 7200
retry: 600
expire: 1728000
minimum ttl: 43200
86400s (1.00:00:00)
93.87.70.in-addr.arpa IN NS ns4.arpa.networklayer.com 86400s (1.00:00:00)
93.87.70.in-addr.arpa IN NS ns3.arpa.networklayer.com 86400s (1.00:00:00)

— end —

WestView Hotel – westview-hotel.com

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

Understanding The Cyber Theft Ring  
 Money Mule Explained 
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule 

I applied in many site for a job in uk and i receives an email from company name west view hotel in london this is there web sit http://westviewhotel.tk/ the first message was like this

Dear scamFRAUDalert:

Thanks for your email and also for your interest to work here at the WestView Hotel London.

Attached herewith is an Employment Application Form & Interview Questionnaire containing some questions which the management would like you to answer.

As soon as we receive the response to our questions we will furnish you with more details as regards the job application.

Thank you for your e-mail.

Best Regards,

David Morgan
Human Resources
WestView Hotel
27c Beeston Place,
London SW1W 0JW
Tel: +44 (0) 70 1113 5540
+44 (0) 70 3596 8096
Fax: +44 (0) 20 7493 8139
Email: info.recruitment@westview-hotel.com
http://www.westviewhotel.tk
Skype: Westview.hotel
©2012 WestView Hotels International Limited. All Rights Reserved
and i did finish the Interview Questionnaire and send it back to them

and i receive another email say

Dear —————–,

Thanks for your email and for also sending back to us the answers interview questionnaire which the hotel management has found satisfactory.

Kindly find attached herewith our job offer contract letter.

You are to read carefully the employment contract letter and if everything is fine with you, sign and send back to us as an email attachment, the signed letter and also to the ”HM Revenue & Customs” office contact details given below, whom will be in charge to furnish you with more details regarding the preparation of your traveling documentations (Visa & Work Permit) you would need before your arrival here in the UK.

HM Revenue & Customs Contact Details;

Contact Person: Andrew Tims
Tel: +44 (0) 70 3592 9285
+44 (0) 70 3592 9138
Email: inquiries_hmrc@admin.in.th

For more information please do not hesitate to write back to us.

Best Regards,

David Morgan
Human Resources
WestView Hotel
27c Beeston Place,
London SW1W 0JW
Tel: +44 (0) 70 1113 5540
+44 (0) 70 3596 8096
Fax: +44 (0) 20 7493 8139
Email: info.recruitment@westview-hotel.com
http://www.westviewhotel.tk
Skype: westview.hotel
©2012 WestView Hotels International Limited. All Rights Reserved

and i did finish the contract and sign it and send it back and i receive this email

Dear scamFRAUDalert,

Thanks for your email and for also sending back to us the signed contract letter which shows that you have accepted to work in the position that has been offered to you here at the WestView Hotel and we do hope you would give in your best to work perfectly in your field.

Kindly do keep us updated as your been in contact with the ”HM Revenue & Customs” office and also, do try as much as possible to comply with them as well, in other to avoid any delay in the processing of your travelling documents, which might affect your job commencement date.

We would also inform you as soon as we have sent to them the fees for your Visa and Flight Ticket.

Note: Do not hesitate to write back to us if you would require any assistance in completing the application forms, which would be sent to you by the ”HM Revenue & Customs” office.

Thanks for your understanding and we are looking forward to shaking hands with you.

Best Regards,

David Morgan
Human Resources
WestView Hotel
27c Beeston Place,
London SW1W 0JW
Tel: +44 (0) 70 1113 5540
+44 (0) 70 3596 8096
Fax: +44 (0) 20 7493 8139
Email: info.recruitment@westview-hotel.com
http://www.westviewhotel.tk
Skype: westview.hotel
©2012 WestView Hotels International Limited. All Rights Reserved
and another email say this

ATTN: scamFRAUDalert

We are writing to you as regards to our being in contact with your employer, WestView Hotel and also to discuss with you, how you would be obtaining the Visa and Work Permit.

As a Non-EU citizen, you would require a Visa and Work Permit, so as for you to be able to travel and work here in the UK. We have also been informed by your employer, that they would be covering the expenses for your Visa and Flight Ticket, while you as the employee would be covering the expenses for the processing of your Work Permit.

In other to continue with further procedures, kindly find attached to this email, the Visa and Residence Work Permit application form which you would have to fill and send back to us as an email attachment.

You will find on the Residence Work Permit application form (section 1 – A5) the information with which you are to use in remitting the processing fee for your Work Permit, which costs £395.25 GBP and also the method of payment with which you are to use.

You are also required to scan and send back to us as an email attachment while returning the filled forms, the scanned copy of your passport and two (2) passport sized photographs, alongside the scanned copy of the payment receipt, which will show as proof of payment.

Lastly, due to the days/weeks it would take for the processing of your traveling documents to be completed, it is advised that you try and send back to us the completed application forms and all that is required unfailingly before or by Monday 20th August, so as to avoid any delay which might affect your job commencement date.

Thanks for your understanding and we would be looking forward to your response.

Kind Regards,

Andrew Tims
HMRC Consulting Officer
100 Parliament Street,
Westminster London SW1A 2BQ
United Kingdom
Tel: +44 (0) 70 3592 9285
+44 (0) 70 3592 9138
e-mail: inquiries_hmrc@admin.in.th

© 2012 Her Majesty’s Revenue & Customs
and they said Residence Work Permit application form

Method of Payment:
The only accepted means of payment is through Western Union which is to be paid to the UKBA’s branch office at St. James Park, London. Please kindly check Section 1 – A5 for payment details.
(This means of payment is temporary).

Credit Cards & Bank-to Bank Transfers (NOT ACCEPTABLE)
We do not accept the above means of payment due to the past fraudulent activities which has been going on for quite some time now, whereby our bank accounts have been hacked and used for fraudulent purposes by person(s) who are located outside the UK. We have also received fake credit cards which was been hacked
from the rightful owners account, has also been used as payment. So therefore due to this, we only accept payment from person(s) outside the UK to be made through Western Union, and this would be temporary till we have had a better security to tighten up and secure our banking account system and bank logins, before we would start giving out our banking account numbers, so do bear with us.

Please note that your application is invalid if you do not pay the specified fee in full or if you pay by any method other than the required method of payment given above. You will then be
required to make a fresh application, and any delay in doing so may affect your appeal rights if your application is subsequently refused.

Address lookup
lookup failed westview-hotel.com

Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom westview-hotel.com”…

Domain Name: WESTVIEW-HOTEL.COM
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS1.ENTRYDNS.NET
Name Server: NS2.ENTRYDNS.NET
Name Server: NS3.ENTRYDNS.NET
Status: clientTransferProhibited
Updated Date: 18-jun-2012
Creation Date: 18-jun-2012
Expiration Date: 18-jun-2013

Last update of whois database: Fri, 17 Aug 2012 10:27:44 UTC
Queried whois.publicdomainregistry.com with “westview-hotel.com

Domain Name: WESTVIEW-HOTEL.COM

Registrant:
N/A
Alan Lasneski craigwilliams544@gmail.com
4351 Hennies Rd SE
Turner
Oregon,97392
US
Tel. +1.205914834

Creation Date: 18-Jun-2012
Expiration Date: 18-Jun-2013

Domain servers in listed order:
ns1.suspended-domain.com
ns2.suspended-domain.com

Administrative Contact:
N/A
Alan Lasneski craigwilliams544@gmail.com
4351 Hennies Rd SE
Turner
Oregon,97392
US
Tel. +1.205914834

Technical Contact:
N/A
Alan Lasneski craigwilliams544@gmail.com
4351 Hennies Rd SE
Turner
Oregon,97392
US
Tel. +1.205914834

Billing Contact:
N/A
Alan Lasneski craigwilliams544@gmail.com
4351 Hennies Rd SE
Turner
Oregon,97392
US
Tel. +1.205914834

Status:SUSPENDED

Network Whois record

Don’t have an IP address for which to get a record
DNS records

DNS query for westview-hotel.com returned an error from the server: NameError

No records to display

— end —

WhoIs – www.kzeroconsult.com

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

Understanding The Cyber Theft Ring  
 Money Mule Explained 
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule 

Dear scamFRAUDalert:

I’m glad to confirm to you that your application has been approved. It is My pleasure to inform you that you will be my personal
Assistant in United States. I will be arriving in 2 weeks From now. We will meet then, guess at the airport if you wish. so I can brief you on your duties.

Your job will officially start before I leave Ontario, Canada…

Which means you will work from home two weeks before the office is
Fully furnished and opened.

The benefits that comes with this offer are as follows:
Medical, dental, visual insurance and bonuses at the end of each year.

Duration of working hours: 9am – 5pm. Monday – Friday

A “cashier’s check” will be sent to you for My hotel reservation and car rental service and other basic Things. Before I get a house to buy (Guess you will help with Getting a house and office space in the downtown of the City to rent). You are to deposit the check and deduct $300 (as part of Your wages) and then you will sort the remaining Funds with my agent. All my travel plans will be sent to
You via email.

Kindly confirm your Address so the cashier’s check can be sent out to
You.

Full Names:
Address:
City:
State:
Zip Code:
Mobile Number:

I will also be having a brief interview with you on the phone by the time You send me the details required so that we can at least have a little conversation.

I await your immediate response.

Also the company website server is down, so kindly reply to this email : kzeroconsult@yahoo.com

Regards,

Andrew katz

647 701 0923
http://www.kzeroconsult.com

Manpower Recruitment & Resettlement Agency – www.manpagencies.com


Manpower Recruitment & Resettlement Agency [M.P.A] is the partner of choice in providing customized recruiting solutions. Our mission is to deliver support that

Address lookup
lookup failed http://www.manpagencies.com

Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom manpagencies.com”…

Domain Name: MANPAGENCIES.COM
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS1.SUSPENDED-DOMAIN.COM
Name Server: NS2.SUSPENDED-DOMAIN.COM
Status: clientDeleteProhibited
Status: clientHold
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 12-aug-2012
Creation Date: 20-apr-2012
Expiration Date: 20-apr-2013

Last update of whois database: Fri, 17 Aug 2012 15:14:25 UTC
Queried whois.publicdomainregistry.com with “manpagencies.com

Domain Name: MANPAGENCIES.COM

Registrant:
Danflexhost
Daniel Oyiwe danbizwebsite@yahoo.com
19, bankole str
Shomolu
Lagos,234
NG
Tel. +234.8028931825

Creation Date: 20-Apr-2012
Expiration Date: 20-Apr-2013

Domain servers in listed order:
ns1.suspended-domain.com
ns2.suspended-domain.com

Administrative Contact:
Danflexhost
Daniel Oyiwe danbizwebsite@yahoo.com
19, bankole str
Shomolu
Lagos,234
NG
Tel. +234.8028931825

Technical Contact:
Danflexhost
Daniel Oyiwe danbizwebsite@yahoo.com
19, bankole str
Shomolu
Lagos,234
NG
Tel. +234.8028931825

Billing Contact:
Danflexhost
Daniel Oyiwe danbizwebsite@yahoo.com
19, bankole str
Shomolu
Lagos,234
NG
Tel. +234.8028931825

Status:SUSPENDED

Network Whois record

Don’t have an IP address for which to get a record
DNS records
DNS query for http://www.manpagencies.com returned an error from the server: NameError

DNS query for manpagencies.com returned an error from the server: NameError

No records to display

— end —

JDP Oriental Resources – www.jdporiental.com

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

Understanding The Cyber Theft Ring  
 Money Mule Explained 
Washingtonpost.com by Brian Kerbs
Interview With A Money Mule 

Address lookup
canonical name sbsfe.geo.mf0.yahoodns.net.
aliases
addresses 98.139.135.22
98.139.135.21
Domain Whois record

Queried whois.internic.net with “dom jdporiental.com”…

Domain Name: JDPORIENTAL.COM
Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Whois Server: whois.melbourneit.com
Referral URL: http://www.melbourneit.com
Name Server: YNS1.YAHOO.COM
Name Server: YNS2.YAHOO.COM
Status: clientTransferProhibited
Updated Date: 08-aug-2012
Creation Date: 08-aug-2012
Expiration Date: 08-aug-2013

Last update of whois database: Fri, 17 Aug 2012 14:28:48 UTC
Queried whois.melbourneit.com with “jdporiental.com”…

Domain Name………. jdporiental.com
Creation Date…….. 2012-08-08
Registration Date…. 2012-08-08
Expiry Date………. 2013-08-08
Tracking Number…… 1737821695_DOMAIN_COM-VRSN
Organisation Name…. Viengphone Phoumavong
Organisation Address. PO Box 61359
Organisation Address.
Organisation Address.
Organisation Address. Sunnyvale
Organisation Address. 94088
Organisation Address. CA
Organisation Address. US

Admin Name……….. Admin PrivateRegContact
Admin Address…….. PO Box 61359
Admin Address…….. registered post accepted only
Admin Address……..
Admin Address. Sunnyvale
Admin Address…….. 94088
Admin Address…….. CA
Admin Address…….. US
Admin Email………. contact@myprivateregistration.com
Admin Phone………. +1.5105952002
Admin Fax…………

Tech Name………… TECH PrivateRegContact
Tech Address……… PO Box 61359
Tech Address……… registered post accepted only
Tech Address………
Tech Address……… Sunnyvale
Tech Address……… 94088
Tech Address……… CA
Tech Address……… US
Tech Email……….. contact@myprivateregistration.com
Tech Phone……….. +1.5105952002
Tech Fax………….
Name Server………. yns1.yahoo.com
Name Server………. yns2.yahoo.com

Network Whois record

Queried whois.arin.net with “n 98.139.135.22″…

NetRange: 98.136.0.0 – 98.139.255.255
CIDR: 98.136.0.0/14
OriginAS:
NetName: A-YAHOO-US9
NetHandle: NET-98-136-0-0-1
Parent: NET-98-0-0-0-0
NetType: Direct Allocation
RegDate: 2007-12-07
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-98-136-0-0-1

OrgName: Yahoo! Inc.
OrgId: YHOO
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US
RegDate: 2000-10-23
Updated: 2009-05-18
Ref: http://whois.arin.net/rest/org/YHOO

OrgTechHandle: NA258-ARIN
OrgTechName: Netblock Admin
OrgTechPhone: +1-408-349-3300
OrgTechEmail: jluster@yahoo-inc.com
OrgTechRef: http://whois.arin.net/rest/poc/NA258-ARIN

OrgAbuseHandle: NETWO857-ARIN
OrgAbuseName: Network Abuse
OrgAbusePhone: +1-408-349-3300
OrgAbuseEmail: network-abuse@cc.yahoo-inc.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NETWO857-ARIN

RAbuseHandle: NETWO857-ARIN
RAbuseName: Network Abuse
RAbusePhone: +1-408-349-3300
RAbuseEmail: network-abuse@cc.yahoo-inc.com
RAbuseRef: http://whois.arin.net/rest/poc/NETWO857-ARIN

RTechHandle: NA258-ARIN
RTechName: Netblock Admin
RTechPhone: +1-408-349-3300
RTechEmail: jluster@yahoo-inc.com
RTechRef: http://whois.arin.net/rest/poc/NA258-ARIN

DNS records
name class type data time to live
http://www.jdporiental.com IN CNAME sbsfe.geo.mf0.yahoodns.net 1200s (00:20:00)
sbsfe.geo.mf0.yahoodns.net IN A 98.139.135.21 300s (00:05:00)
sbsfe.geo.mf0.yahoodns.net IN A 98.139.135.22 300s (00:05:00)
mf0.yahoodns.net IN SOA
server: mf1.yahoo.com
email: hostmaster@yahoo-inc.com
serial: 1345216272
refresh: 30
retry: 30
expire: 86400
minimum ttl: 1800
30s (00:00:30)
mf0.yahoodns.net IN NS mf2.yahoo.com 1800s (00:30:00)
mf0.yahoodns.net IN NS mf1.yahoo.com 1800s (00:30:00)
mf0.yahoodns.net IN NS mf4.yahoo.com 1800s (00:30:00)
mf0.yahoodns.net IN NS mf3.yahoo.com 1800s (00:30:00)
jdporiental.com IN TXT i=320&m=geo-g8-mx2-p9 1200s (00:20:00)
jdporiental.com IN A 98.139.135.22 1200s (00:20:00)
jdporiental.com IN A 98.139.135.21 1200s (00:20:00)
jdporiental.com IN MX
preference: 30
exchange: mx5.biz.mail.yahoo.com
1200s (00:20:00)
jdporiental.com IN MX
preference: 20
exchange: mx1.biz.mail.yahoo.com
1200s (00:20:00)
jdporiental.com IN NS yns1.yahoo.com 86400s (1.00:00:00)
jdporiental.com IN NS yns2.yahoo.com 86400s (1.00:00:00)
jdporiental.com IN SOA
server: hidden-master.yahoo.com
email: geo-support@yahoo-inc.com
serial: 2004022301
refresh: 10800
retry: 3600
expire: 7084000
minimum ttl: 28800
1200s (00:20:00)
22.135.139.98.in-addr.arpa IN PTR sbsfe-b.geo.vip.bf1.yahoo.com 1800s (00:30:00)
135.139.98.in-addr.arpa IN SOA
server: hidden-master.yahoo.com
email: hostmaster@yahoo-inc.com
serial: 2012042601
refresh: 3600
retry: 600
expire: 5184000
minimum ttl: 1800
600s (00:10:00)
135.139.98.in-addr.arpa IN TXT Contact for this domain is Yahoo! NOC, +1 408 349 5555 1800s (00:30:00)
135.139.98.in-addr.arpa IN NS ns1.yahoo.com 172800s (2.00:00:00)
135.139.98.in-addr.arpa IN NS ns2.yahoo.com 172800s (2.00:00:00)
135.139.98.in-addr.arpa IN NS ns5.yahoo.com 172800s (2.00:00:00)
135.139.98.in-addr.arpa IN NS ns4.yahoo.com 172800s (2.00:00:00)
135.139.98.in-addr.arpa IN NS ns3.yahoo.com 172800s (2.00:00:00)

— end —

getmedz.ru – 91.236.121.130 – topshipmed.ru

Active spam run in progress for this one. Spamcop says they have ‘nomaster’ for LARTing this. However, Zscaler was able to get the IP, here’s their parse of the domain topshipmed.ru that is on the IP, along with probably a lot of other pill sites.

URL: http://topshipmed.ru/

Email Header Analysis

IP Address:  37.247.93.162 (37-247-93-162.dynip.skydsl.es)
IP Address Country:  Spain
IP Continent:  Europe
IP Address City Location:
IP Address Region:
IP Address Latitude:  40,
IP Address Longtitude:  -4
Organization:  skyDSL Global GmbH


USPS – Fast Delivery Shipping 1-4 day USA
Best quality drugs
Fast Shipping USA
Professional packaging
100% guarantee on delivery
Best prices in the market
Discounts for returning customers
FDA approved productas
35000+ satisfied customers


http://oacdt.getmedz.ru

Address lookup
canonical name getmedz.ru.
aliases
addresses 91.236.121.130
Domain Whois record

Queried whois.ripn.net with “getmedz.ru

domain: GETMEDZ.RU
nserver: ns1.hamgeah.ru.
nserver: ns2.bavacsers.ru.
state: REGISTERED, DELEGATED, UNVERIFIED
person: Private Person
registrar: NAUNET-REG-RIPN
admin-contact: https://client.naunet.ru/c/whoiscontact
created: 2012.08.16
paid-till: 2013.08.16
free-date: 2013.09.16
source: TCI

Last updated on 2012.08.17 18:51:35 MSK

Network Whois record

Queried whois.ripe.net with “-B 91.236.121.130″…

% Information related to ‘91.236.121.0 – 91.236.121.255’

inetnum: 91.236.121.0 – 91.236.121.255
netname: VAIBOPROJECT-NET
descr: VAIBO PROJECT ltd.
country: UA
org: ORG-VPl8-RIPE
admin-c: KTS16-RIPE
tech-c: KTS16-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: MNT-VAIBOPROJECT
mnt-routes: MNT-VAIBOPROJECT
mnt-domains: MNT-VAIBOPROJECT
notify: support@danle.ru
changed: hostmaster@ripe.net 20120531
source: RIPE

organisation: ORG-VPl8-RIPE
org-name: VAIBO PROJECT ltd.
org-type: OTHER
address: Ukraine, Donetsk, 50-letiya SSSR str., building 143Б, app.60
e-mail: support@danle.ru
mnt-ref: MNT-VAIBOPROJECT
mnt-by: MNT-VAIBOPROJECT
changed: support@danle.ru 20120601
source: RIPE

person: Korobov Taras Sergeevich
address: Ukraine, Donetsk, 50-letiya SSSR str., building 143Б, app.60
phone: +380 62 3110611
nic-hdl: KTS16-RIPE
mnt-by: MNT-VAIBOPROJECT
changed: support@danle.ru 20120601
source: RIPE

% Information related to ‘91.236.121.0/24AS58246’

route: 91.236.121.0/24
descr: VAIBOPROJECT-NET-2012
origin: AS58246
mnt-by: MNT-VAIBOPROJECT
changed: hostmaster@ripe.net 20120712
source: RIPE

% This query was served by the RIPE Database Query Service version 1.19.5 (WHOIS1)

DNS records

DNS query for 130.121.236.91.in-addr.arpa returned an error from the server: NameError
name class type data time to live
oacdt.getmedz.ru IN CNAME getmedz.ru 1799s (00:29:59)
getmedz.ru IN A 91.236.121.130 1800s (00:30:00)
getmedz.ru IN SOA
server: ns.getmedz.ru
email: admin@getmedz.ru
serial: 2012081601
refresh: 1800
retry: 1800
expire: 14400
minimum ttl: 1800
1800s (00:30:00)
getmedz.ru IN NS ns1.hamgeah.ru 345599s (3.23:59:59)
getmedz.ru IN NS ns2.bavacsers.ru 345599s (3.23:59:59)

— end —

Whois canzo.ru

MaxPenis Pills – Penis Pill 95% Success Rate. MaxPenis is Powerful! Click For Details http://canzo.ru

Address lookup
canonical name canzo.ru

aliases
addresses 180.71.45.76
Domain Whois record

Queried whois.ripn.net with “canzo.ru
domain: CANZO.RU
nserver: ns1.headhosting.ru.
nserver: ns1.urbanhost.ru.
nserver: ns2.headhosting.ru.
nserver: ns2.urbanhost.ru.
state: REGISTERED, DELEGATED, VERIFIED
person: Private Person
registrar: NAUNET-REG-RIPN
admin-contact: https://client.naunet.ru/c/whoiscontact
created: 2012.05.08
paid-till: 2013.05.08
free-date: 2013.06.08
source: TCI

Last updated on 2012.08.17 18:41:34 MSK

Network Whois record

Queried whois.apnic.net with “180.71.45.76”…

inetnum: 180.64.0.0 – 180.71.255.255
netname: broadNnet
descr: Hanaro Telecom
descr: Shindongah Bldg, 43, Taepyeongno2ga, Junggu, Seoul
descr: ****************************************
descr: Allocated to KRNIC Member.
descr: If you would like to find assignment
descr: information in detail please refer to
descr: the KRNIC Whois Database at:
descr: http://whois.nic.or.kr/english/index.htm
descr: ****************************************
country: KR
admin-c: HL196-AP
tech-c: JK250-AP
status: ALLOCATED PORTABLE
remarks: http://www.skbroadband.com
mnt-by: MNT-KRNIC-AP
mnt-lower: MNT-KRNIC-AP
changed: hm-changed@apnic.net 20090707
source: APNIC

person: Han Lee
nic-hdl: HL196-AP
e-mail: ip-adm@hanaro.com
address: 726-1, Janghang2-dong, Goyang-si, Ilsan-gu, Seoul
phone: +82-2-106
fax-no: +82-2-6266-6483
country: KR
changed: hostmaster@nic.or.kr 20040326
mnt-by: MNT-KRNIC-AP
source: APNIC

person: Jinyoung Kim
nic-hdl: JK250-AP
e-mail: ip-adm@hanaro.com
address: 726-1, Janghang2-dong, Goyang-si, Ilsan-gu, Seoul
phone: +82-2-106
fax-no: +82-2-6266-6483
country: KR
changed: hostmaster@nic.or.kr 20040326
mnt-by: MNT-KRNIC-AP
source: APNIC

inetnum: 180.64.0.0 – 180.71.255.255
netname: broadNnet-KR
descr: SK Broadband Co Ltd
country: KR
admin-c: IM12-KR
tech-c: IM12-KR
status: ALLOCATED PORTABLE
mnt-by: MNT-KRNIC-AP
mnt-irt: IRT-KRNIC-KR
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.krnic.net.
changed: hostmaster@nic.or.kr
source: KRNIC

DNS records

DNS query for 76.45.71.180.in-addr.arpa returned an error from the server: NameError
name class type data time to live
canzo.ru IN SOA
server: ns1.headhosting.ru
email: admin@canzo.ru
serial: 1345214409
refresh: 600
retry: 300
expire: 900
minimum ttl: 600
600s (00:10:00)
canzo.ru IN NS ns1.headhosting.ru 600s (00:10:00)
canzo.ru IN NS ns2.headhosting.ru 600s (00:10:00)
canzo.ru IN NS ns1.urbanhost.ru 600s (00:10:00)
canzo.ru IN NS ns2.urbanhost.ru 600s (00:10:00)
canzo.ru IN A 180.71.45.76 600s (00:10:00)

— end —

The following A records are set to 180.71.45.76:

  1. 8channelnewz.com
  2. africanweightproduct.com
  3. awesomepowermedia.com
  4. berrydrawer.com
  5. bestonlinenewz.com
  6. channel-8-webnews.com
  7. channel20media.com
  8. channel3webnews.com
  9. channel7webnews.com
  10. channelnewstube.com
  11. channelwebmedia7.com
  12. chieftouch.com
  13. cottongive.com
  14. existencegive.com
  15. exlusivewebnews.com
  16. faster2012news.com
  17. fastmedianewz.com
  18. fastrapidnewz.com
  19. firstnewsmedia.com
  20. flamesolid.com
  21. hairrange.com
  22. islandand.com
  23. loudporter.com
  24. luxurysupresales.com
  25. newmaxgain.com
  26. newstext8.com
  27. northget.com
  28. roughcheap.com
  29. rxfastorder.com
  30. shakerange.com
  31. theorywool.com
  32. touchbutter.com
  33. watherverhere.com
  34. waydependent.com
  35. wordporter.com
  36. yeargold.com

MoneyGram Requests Your Feedback – Chance to Win $100 Gift Card!

Email Header Analysis

IP Address:  209.253.25.186 (209-253-25-186.ip.mcleodusa.net)
IP Address Country:  United States                          
IP Continent:  North America
IP Address City Location:  Dallas
IP Address Region:  Texas
IP Address Latitude:  32.865,
IP Address Longtitude:  -96.7914
Organization:  Keller Williams Realty


Dear scamFRAUDalert,

MoneyGram would like to offer you the opportunity for a chance to win $100 Visa Prepaid Gift Card. All you have to do is participate in our 10 minute survey. Don’t delay, this survey will only be available for a limited time.

Please participate today by clicking on the link below:

MoneyGram Survey

Our records indicate you used MoneyGram Online back in August of 2010, but have not used our online services since. We are very interested in knowing why you stopped using MoneyGram Online and how we can improve our services to better meet your needs. Your survey responses will be completely confidential and will only be used to improve our services.

As a thank you for participating, you will be added in a random drawing for a chance to win one of ten $100 gift cards. Winners will be contacted by MoneyGram via email, and will receive their gift card in the mail in September 2012. For more information, see the Sweepstakes Official Rules.*

Thank you, we truly appreciate your time and input!

Joyce Schofield
Sr. Product Manager, MoneyGram Online

Click to unsubscribe from this mailing list ==>data-specalists.com

* NO PURCHASE NECESSARY. Sweepstakes is open to legal residents of the 50 United States and the District of Columbia, age 18 or older at time of entry and to whom this offer is addressed. See Official Rules for entry deadline and prize details.

Registrar Information

Domain-name: data-specialists.com
Domain-ip: 65.110.86.2    
Domain-tld: COM
Domain-registrar:
Domain-lock: LOCKED
Creation: 2000-01-03
Update: 2011-12-31
Expiration: 2015-01-03

Nameservers

Domain Record

Domain Domain Name: DATA-SPECIALISTS.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Registrar Registrar URL: http://www.networksolutions.com/en_US/
Name Servers: WEBTERMINATOR1.CRYSTALTECH.COM
Name Servers: WEBTERMINATOR2.CRYSTALTECH.COM
Domain Status: clientTransferProhibited
Updated: 31-dec-2011
Created: 03-jan-2000
Expires: 03-jan-2015

Whois information for data-specialists.com:

DATA-SPECIALISTS.COM IP: 65.110.86.2
The IP belongs to ISP CRYSTALTECH WEB HOSTING INC
ISP domain: DONNACHEVRIER.COM

Address lookup
canonical name futuremr.com
aliases
addresses 216.109.216.179
Domain Whois record

Queried whois.internic.net with “dom futuremr.com”…

Domain Name: FUTUREMR.COM
Registrar: REGISTER.COM, INC.
Whois Server: whois.register.com
Referral URL: http://www.register.com
Name Server: NS1.KINESISSURVEY.COM
Name Server: NS2.KINESISSURVEY.COM
Status: clientTransferProhibited
Updated Date: 10-jan-2012
Creation Date: 09-jan-2012
Expiration Date: 09-jan-2013

>>> Last update of whois database: Fri, 17 Aug 2012 14:37:28 UTC <<<

Queried whois.register.com with “futuremr.com”…

Registrar Name….: Register.com
Registrar Whois…: whois.register.com
Registrar Homepage: http://www.register.com

Domain Name: futuremr.com
Created on…………..: 2012-01-09
Expires on…………..: 2013-01-09

Administrative Contact:
Domain Discreet Privacy Service
ATTN: futuremr.com
12808 Gran Bay Pkwy, West
Jacksonville, FL 32258
US
Phone: 1-902-7492701
Email: 238c0ad00a1612335cb08df73e6ff2dd@domaindiscreet.com

Technical Contact:
Domain Discreet Privacy Service
ATTN: futuremr.com
12808 Gran Bay Pkwy, West
Jacksonville, FL 32258
US
Phone: 1-902-7492701
Email: 238c0ad20a16123312a4b66e52063c80@domaindiscreet.com

DNS Servers:
ns1.kinesissurvey.com
ns2.kinesissurvey.com

Network Whois record

Queried rwhois.onr.com with “216.109.216.179”…

%rwhois V-1.5:003eff:00 rwhois.onr.com (by Network Solutions, Inc. V-1.5.7.3)
network:Class-Name:network
network:ID:ONR
network:Auth-Area:216.109.208.0/20
network:Network-Name:ONR.net-216.109.208.0-20
network:IP-Network:216.109.208.0/20
network:Organization;I:org.onr.com
network:Tech-Contact;I:support@onr.com
network:Admin-Contact;I:networking@onr.com
network:Created:20070319
network:Updated:20070319
network:Updated-By:networking@onr.com

%ok

Queried whois.arin.net with “n 216.109.216.179″…

NetRange: 216.109.208.0 – 216.109.223.255
CIDR: 216.109.208.0/20
OriginAS:
NetName: ONR
NetHandle: NET-216-109-208-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
RegDate: 2004-09-10
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-216-109-208-0-1

OrgName: Onramp Access Inc.
OrgId: ONR
Address: 2916 Montopolis Dr.
Address: Suite 300
City: Austin
StateProv: TX
PostalCode: 78741
Country: US
RegDate: 1994-07-25
Updated: 2010-07-01
Comment: http://www.onr.com
Ref: http://whois.arin.net/rest/org/ONR

ReferralServer: rwhois://rwhois.onr.com:4321

OrgTechHandle: DW660-ARIN
OrgTechName: west, don
OrgTechPhone: +1-512-322-9200
OrgTechEmail: donwest@onr.com
OrgTechRef: http://whois.arin.net/rest/poc/DW660-ARIN

OrgNOCHandle: ONRAM-ARIN
OrgNOCName: Onramp Support
OrgNOCPhone: +1-512-322-9200
OrgNOCEmail: support@onr.com
OrgNOCRef: http://whois.arin.net/rest/poc/ONRAM-ARIN

OrgAbuseHandle: ONRAM-ARIN
OrgAbuseName: Onramp Support
OrgAbusePhone: +1-512-322-9200
OrgAbuseEmail: support@onr.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ONRAM-ARIN

DNS records
name class type data time to live
futuremr.com IN TXT v=spf1 mx a ip4:207.200.56.128/27 ip4:216.109.216.144 ~all 38400s (10:40:00)
futuremr.com IN MX
preference: 10
exchange: mail.futuremr.com
38400s (10:40:00)
futuremr.com IN SOA
server: ns1.kinesissurvey.com
email: itdistro@kinesissurvey.com
serial: 2012051401
refresh: 86400
retry: 3600
expire: 3600000
minimum ttl: 432000
38400s (10:40:00)
futuremr.com IN NS ns1.kinesissurvey.com 38400s (10:40:00)
futuremr.com IN NS ns2.kinesissurvey.com 38400s (10:40:00)
futuremr.com IN A 216.109.216.179 38400s (10:40:00)
179.216.109.216.in-addr.arpa IN PTR community.kinesissurvey.com 14400s (04:00:00)
216.109.216.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2012-08-27 12:01:34Z
signature inception: 2012-08-17 12:01:34Z
key tag: 53729
signer’s name: 216.in-addr.arpa
signature:
(1024 bits)

03C4B5C5FE687A69AE896A48CBFB48FE
883FA813B64F1E521D800716DC48D731
4BD0ACFC8CE89613DD4A5324C64D5241
3609B148C017343F0DAD9849FCBEBDE5
D52C3D47DC05279F7228F880C636E8EE
62DE3F6D5A0F9F85640A00AD2A9866C5
26D591C7912B99E6506C72C59556CC55
19E3F39134275EAD2BCD0613D693DC15

10800s (03:00:00)
216.109.216.in-addr.arpa IN NSEC
next domain name: 217.109.216.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
216.109.216.in-addr.arpa IN NS ns1.onr.com 14400s (04:00:00)
216.109.216.in-addr.arpa IN NS ns2.onr.com 14400s (04:00:00)
216.109.216.in-addr.arpa IN NS sierra.onr.com 14400s (04:00:00)

— end —

Google Inc. v. Trademark Worx LLC a/k/a Richard Yaming

national arbitration forum

DECISION

 

Google Inc. v. Trademark Worx LLC a/k/a Richard Yaming

Claim Number: FA1101001370035

PARTIES

Complainant is Google Inc. (“Complainant”), represented by Meredith M. Pavia of Fenwick & West LLP, California, USA.  Respondent is Trademark Worx LLC a/k/a Richard Yaming (“Respondent”), Korea.

REGISTRAR AND DISPUTED DOMAIN NAME

The domain name at issue is <googlebrowser.com>, registered with Domainfighter.ca Inc.

PANEL

The undersigned certifies that he or she has acted independently and impartially and to the best of his or her knowledge has no known conflict in serving as Panelist in this proceeding.

John J. Upchurch as Panelist.

PROCEDURAL HISTORY

Complainant submitted a Complaint to the National Arbitration Forum electronically on January 28, 2011; the National Arbitration Forum received payment on January 28, 2011.

On February 8, 2011, Domainfighter.ca Inc. confirmed by e-mail to the National Arbitration Forum that the <googlebrowser.com> domain name is registered with Domainfighter.ca Inc. and that Respondent is the current registrant of the name.  Domainfighter.ca Inc. has verified that Respondent is bound by the Domainfighter.ca Inc. registration agreement and has thereby agreed to resolve domain disputes brought by third parties in accordance with ICANN’s Uniform Domain Name Dispute Resolution Policy (the “Policy”).

On February 8, 2011, the Forum served the Complaint and all Annexes, including a Written Notice of the Complaint, setting a deadline of February 28, 2011 by which Respondent could file a Response to the Complaint, via e-mail to all entities and persons listed on Respondent’s registration as technical, administrative, and billing contacts, and to postmaster@googlebrowser.com.  Also on February 8, 2011, the Written Notice of the Complaint, notifying Respondent of the email addresses served and the deadline for a Response, was transmitted to Respondent via post and fax, to all entities and persons listed on Respondent’s registration as technical, administrative and billing contacts.

Having received no response from Respondent, the National Arbitration Forum transmitted to the parties a Notification of Respondent Default.

On March 4, 2011, pursuant to Complainant’s request to have the dispute decided by a single-member Panel, the National Arbitration Forum appointed John J. Upchurch as Panelist.

Having reviewed the communications records, the Administrative Panel (the “Panel”) finds that the National Arbitration Forum has discharged its responsibility under Paragraph 2(a) of the Rules for Uniform Domain Name Dispute Resolution Policy (the “Rules”) “to employ reasonably available means calculated to achieve actual notice to Respondent” through submission of Electronic and Written Notices, as defined in Rule 1 and Rule 2. Therefore, the Panel may issue its decision based on the documents submitted and in accordance with the ICANN Policy, ICANN Rules, the National Arbitration Forum’s Supplemental Rules and any rules and principles of law that the Panel deems applicable, without the benefit of any response from Respondent.

RELIEF SOUGHT

Complainant requests that the domain name be transferred from Respondent to Complainant.

PARTIES’ CONTENTIONS

A.  Complainant makes the following assertions:

1.    Respondent’s <googlebrowser.com> domain name is confusingly similar to Complainant’s GOOGLE mark.

2.    Respondent does not have any rights or legitimate interests in the <googlebrowser.com> domain name.

3.    Respondent registered and used the <googlebrowser.com> domain name in bad faith.

B.  Respondent failed to submit a Response in this proceeding.

FINDINGS

Complainant, Google Inc., operates a search engine that provides an easy-to-use interface, advanced search technology, and a comprehensive array of search tools. Complainant owns numerous trademark registrations for the GOOGLE mark with trademark authorities around the world, including the United States Patent and Trademark Office (“USPTO”) and the Korean Intellectual Property Office (“KIPO”):

USPTO

  • Reg. No. 2,806,075  issued January 20, 2004;
  • Reg. No. 2,884,502  issued September 14, 2004;
  • Reg. No. 2,954,071  issued May 24, 2005;
  • Reg. No. 3,140,793  issued September 12, 2006;
  • Reg. No. 3,570,103  issued February 3, 2009; and

KIPO

Reg. No. 1,291         issued June 2, 2000.

Respondent, Trademark Worx LLC aka Richard Yaming, registered the <googlebrowser.com> domain name on July 1, 2010. The disputed domain name resolves to an unrelated pay-per-click links page.

DISCUSSION

Paragraph 15(a) of the Rules instructs this Panel to “decide a complaint on the basis of the statements and documents submitted in accordance with the Policy, these Rules and any rules and principles of law that it deems applicable.”

In view of Respondent’s failure to submit a response, the Panel shall decide this administrative proceeding on the basis of Complainant’s undisputed representations pursuant to paragraphs 5(e), 14(a) and 15(a) of the Rules and draw such inferences it considers appropriate pursuant to paragraph 14(b) of the Rules.  The Panel is entitled to accept all reasonable allegations and inferences set forth in the Complaint as true unless the evidence is clearly contradictory.  See Vertical Solutions Mgmt., Inc. v. webnet-marketing, inc., FA 95095 (Nat. Arb. Forum July 31, 2000) (holding that the respondent’s failure to respond allows all reasonable inferences of fact in the allegations of the complaint to be deemed true); see also Talk City, Inc. v. Robertson, D2000-0009 (WIPO Feb. 29, 2000) (“In the absence of a response, it is appropriate to accept as true all allegations of the Complaint.”).

Paragraph 4(a) of the Policy requires that Complainant must prove each of the following three elements to obtain an order that a domain name should be cancelled or transferred:

(1)  the domain name registered by Respondent is identical or confusingly similar to a trademark or service mark in which Complainant has rights; and

(2)  Respondent has no rights or legitimate interests in respect of the domain name; and

(3)  the domain name has been registered and is being used in bad faith.

Identical and/or Confusingly Similar

Complainant owns numerous trademark registrations for the GOOGLE mark with trademark authorities around the world, including the USPTO and the KIPO:

USPTO

  • Reg. No. 2,806,075  issued January 20, 2004;
  • Reg. No. 2,884,502  issued September 14, 2004;
  • Reg. No. 2,954,071  issued May 24, 2005;
  • Reg. No. 3,140,793  issued September 12, 2006;
  • Reg. No. 3,570,103  issued February 3, 2009; and

KIPO

Reg. No. 1,291         issued June 2, 2000.

The Panel finds that Complainant’s extensive trademark registrations with trademark authorities around the world, including the USPTO and the KIPO, provides substantial evidence that Complainant has rights in the GOOGLE mark pursuant to Policy ¶ 4(a)(i). See Metro. Life Ins. Co. v. Bonds, FA 873143 (Nat. Arb. Forum Feb. 16, 2007) (finding that a trademark registration adequately demonstrates a complainant’s rights in a mark under Policy ¶ 4(a)(i)); see also Google, Inc. v. DktBot.org, FA 286993 (Nat. Arb. Forum Aug. 4, 2004) (finding that the complainant had established rights in the GOOGLE mark through its holding of numerous trademark registrations around the world).

Complainant argues that Respondent’s <googlebrowser.com> domain name is confusingly similar to Complainant’s GOOGLE mark because the disputed domain name consists of Complainant’s mark combined with the descriptive term “browser” and the generic top-level domain (“gTLD”) “.com.” The Panel finds that adding a descriptive term to Complainant’s mark does not negate a finding of confusing similarity. See AOL LLC v. AIM Profiles, FA 964479 (Nat. Arb. Forum May 20, 2007) (finding that the respondent failed to differentiate the <aimprofiles.com> domain name from the complainant’s AIM mark by merely adding the term “profiles”); see also Vance Int’l, Inc. v. Abend, FA 970871 (Nat. Arb. Forum June 8, 2007) (finding that by adding the term “security” to the complainant’s VANCE mark, which described the complainant’s business, the respondent “very significantly increased” the likelihood of confusion with the complainant’s mark). The Panel also finds that a gTLD does not differentiate the disputed domain name as it is a required element of domain names. See Gardline Surveys Ltd. v. Domain Fin. Ltd., FA 153545 (Nat. Arb. Forum May 27, 2003) (“The addition of a top-level domain is irrelevant when establishing whether or not a mark is identical or confusingly similar, because top-level domains are a required element of every domain name.”). The Panel concludes that Respondent’s <googlebrowser.com> domain name is confusingly similar to Complainant’s GOOGLE mark according to Policy ¶ 4(a)(i).

The Panel finds the elements of Policy ¶ 4(a)(i) have been satisfied.

Rights or Legitimate Interests

Complainant alleges that Respondent lacks rights and legitimate interests in the disputed domain name. Once Complainant has put forth a prima facie case, the burden shifts to Respondent to demonstrate its rights or legitimate interests in the disputed domain name pursuant to Policy ¶ 4(a)(ii). The Panel finds that Complainant has adequately established a prima facie case in these proceedings. Since Respondent has failed to respond to the allegations against it, the Panel may assume that Respondent lacks any rights or legitimate interests in the disputed domain name. See Intel Corp. v. Macare, FA 660685 (Nat. Arb. Forum Apr. 26, 2006) (finding that “complainant must first make a prima facie case that [the] respondent lacks rights and legitimate interests in the disputed domain names under Policy ¶ 4(a)(ii), and then the burden shifts to [the] respondent to show it does have rights or legitimate interests.”); see also Am. Express Co. v. Fang Suhendro, FA 129120 (Nat. Arb. Forum Dec. 30, 2002) (“[B]ased on Respondent’s failure to respond, it is presumed that Respondent lacks all rights and legitimate interests in the disputed domain name.”). Although the presumption against Respondent’s rights and legitimate interests is valid based on Respondent’s default, the Panel will nevertheless consider the evidence according to the Policy ¶ 4(c) factors.

Complainant contends that Respondent is not commonly known by the <googlebrowser.com> domain name. Complainant asserts that it has not authorized or licensed Respondent to use its mark in a domain name. The WHOIS information for the disputed domain name lists the registrant as “Trademark Worx LLC aka Richard Yaming,” a name which has no facial relation to the disputed domain name. The Panel finds that this evidence supports the holding that Respondent is not commonly known by the disputed domain name and accordingly lacks rights and legitimate interests under Policy ¶ 4(c)(ii). See IndyMac Bank F.S.B. v. Eshback, FA 830934 (Nat. Arb. Forum Dec. 7, 2006) (finding that the respondent failed to establish rights and legitimate interests in the <emitmortgage.com> domain name as the respondent was not authorized to register domain names featuring the complainant’s mark and failed to submit evidence that it is commonly known by the disputed domain name); see also Coppertown Drive-Thru Sys., LLC v. Snowden, FA 715089 (Nat. Arb. Forum July 17, 2006) (concluding that the respondent was not commonly known by the <coppertown.com> domain name where there was no evidence in the record, including the WHOIS information, suggesting that the respondent was commonly known by the disputed domain name).

Complainant alleges that Respondent uses the <googlebrowser.com> domain name to resolve to a generic website that has been monetized with unrelated click-through ads that presumably generate revenue for Respondent. The Panel finds that Respondent’s maintenance of a website with no function other than listing presumed pay-per-click links is not a bona fide offering of goods or services according to Policy ¶ 4(c)(i) or a legitimate noncommercial or fair use under Policy ¶ 4(c)(iii). See Fox News Network, LLC v. Reid, D2002-1085 (WIPO Feb. 18, 2003) (finding that the respondent’s use of the disputed domain name to generate revenue via advertisement and affiliate fees is not a bona fide offering of goods or services); see also Disney Enters., Inc. v. Kamble, FA 918556 (Nat. Arb. Forum Mar. 27, 2007) (holding that the operation of a pay-per-click website at a confusingly similar domain name was not a bona fide offering of goods or services under Policy ¶ 4(c)(i) or a legitimate noncommercial or fair use under Policy ¶ 4(c)(iii)).

Complainant also asserts that Respondent has attempted to sell the <googlebrowser.com> domain  name to Complainant. Complainant states that on January 19, 2011, Respondent sent an email to Complainant offering the disputed domain name for sale in exchange for $970.00. After Complainant responded and refused to pay the excessive amount for the domain name containing its trademark, Respondent again contacted Complainant, this time requesting $550.00 in exchange for the disputed domain name. The Panel concludes that Respondent’s offers to sell the <googlebrowser.com> domain name to Complainant indicate that Respondent does not have rights and legitimate interests in the disputed domain name under Policy ¶ 4(a)(ii). See Reese v. Morgan, FA 917029 (Nat. Arb. Forum Apr. 5, 2007) (finding that the respondent’s willingness to sell a contested domain name for more than its out-of-pocket costs provided additional evidence that Respondent had no rights or legitimate interests in the contested domain name); see also Am. Nat’l Red Cross v. Domains, FA 143684 (Nat. Arb. Forum Mar. 4, 2003) (“Respondent’s lack of rights and legitimate interests in the domain name is further evidenced by Respondent’s attempt to sell its domain name registration to Complainant, the rightful holder of the RED CROSS mark.”).

The Panel finds the elements of Policy ¶ 4(a)(ii) have been satisfied.

Registration and Use in Bad Faith

Complainant contends that Respondent offered to sell the <googlebrowser.com> domain name to Complainant two times, first for $970.00 and later for $550.00. Complainant alleges that these amounts are well in excess of Respondent’s estimated out-of-pocket expenses. The Panel accordingly determines that Respondent’s offer to sell the disputed domain name shows bad faith registration and use for the purposes of Policy ¶ 4(b)(i). See George Weston Bakeries Inc. v. McBroom,FA 933276 (Nat. Arb. Forum Apr. 25, 2007) (concluding that the respondent registered and was using the <gwbakeries.mobi> domain name in bad faith according to Policy ¶ 4(b)(i) where it offered it for sale for far more than its estimated out-of-pocket costs it incurred in initially registering the disputed domain name); see also Little Six, Inc. v. Domain For Sale, FA 96967 (Nat. Arb. Forum Apr. 30, 2001) (finding the respondent’s offer to sell the domain name at issue to the complainant was evidence of bad faith).

Complainant argues that Respondent’s incorporation of the GOOGLE mark into the <googlebrowser.com> domain name attracts Internet users seeking Complainant to Respondent’s generic pay-per-click website. As the pay-per-click advertisements create profit for Respondent when clicked, the Panel determines that Respondent aims to commercially benefit from the likelihood of confusion created by the presence of Complainant’s mark in the disputed domain name. The Panel finds that these activities demonstrate Respondent’s bad faith registration and use pursuant to Policy ¶ 4(b)(iv). See Bank of Am. Fork v. Shen, FA 699645 (Nat. Arb. Forum June 11, 2006) (holding that the respondent’s previous use of the <bankofamericanfork.com> domain name to maintain a web directory was evidence of bad faith because the respondent presumably commercially benefited by receiving click-through fees for diverting Internet users to unrelated third-party websites); see also T-Mobile USA, Inc. v. utahhealth,FA 697821 (Nat. Arb. Forum June 7, 2006) (holding that the registration and use of a domain name confusingly similar to a complainant’s mark to direct Internet traffic to a commercial “links page” in order to profit from click-through fees or other revenue sources constitutes bad faith under Policy ¶ 4(b)(iv)).

The Panel finds the elements of Policy ¶ 4(a)(iii) have been satisfied.

DECISION

Having established all three elements required under the ICANN Policy, the Panel concludes that relief shall be GRANTED.

 Accordingly, it is Ordered that the <googlebrowser.com> domain name be TRANSFERRED from Respondent to Complainant.

John J. Upchurch, Panelist

Dated:  March 16, 2010

Click Here to return to the main Domain Decisions Page.

Click Here to return to our Home Page


Richard Yaming Is Associated With 19 Domains

  1. dentalrecruitment.com
  2. designtuning.com
  3. drawingoffice.com
  4. evomag.com
  5. ilovedog.com
  6. iq360.com
  7. korea2008.com
  8. mksport.com
  9. neostory.com
  10. netmarketinginfosite.com
  11. onforum.com
  12. oviz.com
  13. pensylvanniahotel.com
  14. personalautosales.com
  15. robocore.com
  16. royaltv.com
  17. stylecompany.com
  18. vajinaestetigi.com
  19. vivasocial.com
  20. vivaspa.com
  21. downloadnewmoviesnow.com
  22. medical-royale-choice.com
  23. officeathomefurniture.com