Law Enforcement Association ~ Lawenforcementassociation.com

December 31, 2012August 19, 201320 Comments

A Threat To The Global Internet Infrastructure

PredatorsWatch.com Owner’s Bio

The websites Law Enforcement Association http://lawenforcementassociation.com now Law Enforcement Affairs http://lawenforcementaffairs.com are own by an individual whose aliases is Michael King, Michael Wayne King or MIKEKINGUSA.com. This individual based on his training and education harvest public records. He came on our radar when we posted an ALERT regarding Potential Predators http://potentialpredators.com whose name immediately changed to http://predatorswatch.com

The website potential predator was erected primarily to EXTORT and BLACKMAIL those whose online activities engages in predatory practices. But also to EXTORT money from anyone who have had a mugshot taken.

After complaints mounted, the operator Michael King aka Wayne Michael King aka Michael Wayne King shut down potential predator and started http://theonline-watch.com. That too got shut down. Next he then started http://predatorswatch.com. It appears like predatorswatch.com is offline and online.

Our investigation of this individual turn out that this Michael King aka Mike King is the operator of http://wikiwarnings.com.
According to the site, http://wikiwarnings.com was The World’s Number One Consumer Protection Site. It is now The World’s Number One Consumer Complaintboard Site. A Camouflage for EXTORTION and BLACKMAIL

Michael Wayne King aka Wayne Michael King aka Michael W. King is a Mugshot OPERATOR that harvests public record databases and post mugshots of DEADBEAT Dads and others and try to EXTORT money from these folks. His websites are full of tirade against people including his boss and co-workers. WHAT A SLIME.

This Michael King is also associated with Elite Consulting Services USA, LLC., Elite Florida Catering, Omega Enterprises USA, LLC. and also goes by Wayne Michael King which is his LEGAL NAME or a relative. There is also a Michael A. King that has been identified to be associated with Jennifer A. King of Florida.

In retaliation, Michael Wayne King and his Associates registered domains using my name and populating the internet with LIES. Among the lies circulated, scamfraudalert own http://predatorswatch.com.

These are dangerous people with an army of affiliates around the GLOBE capable of undertaking massive destruction.

Below is an example of comments Michael Wayne King posted online about his former employer.

Who is Adam H. Putnam

Adam H. Putnam is the commissioner of the agency Florida Department of Agriculture in Tallahassee, Florida. As a former employee of Adam H. Putnam, I can tell you first hand what he is like. Adam H. Putnam is not an honest person. He was provided information that some of his employees were acting inappropriately and in some cases acting in violation of the law.

_______________________

Pacific Corporate Services

December 31, 2012December 31, 20121 Comment

Based on the number of complaints filed against this firms, scamFRAUDalert see it fitting to issue this ALERT.

ADVANCED BUSINESS ADVISORS GROUP
900 Karen Ave.,Suite D220
Las Vegas NV 89109
Phone:(888) 877-3885
Email:info@freedomdebtgroup.com
http://www.pacificcorporateservices.com

Pacific Corporate Services
3225 McLeod Dr., Ste 100
Las Vegas, NV 89121
Phone:888-877-3885
Fax: 702-388-0510
E-mail:info@pacificcorporateservices.com

Other Names Associated With This Organization

Advanced Business Advisors Group
Company Funds
Ein Credit Group
SBA Consulting Services
Small Business Funding Company
Small Business Advisers
CORPORATE BUSINESS FUNDING, INC.
JAYHAWK MARKETING, INC.
THE AMMO PLACE, INC.
GOLDFIELD OIL AND GAS, LTD.
K.G. BUSH, LLC
EXECUTIVE RESEARCH GROUP, INC.,
Freedom Debt Group
SAGEBRUSH CORPORATE SERVICES LLC.
EXECUTIVE RESEARCH GROUP, INC
PROFESSIONAL BUSINESS CONSULTING, LLC

The firm claim to offer services in the categories listed below.

Small Business Administration Loan Finder
Business Loan Consultings Services
Grant – Scholarship
Financial Aid Finder Service

DEBBIE GLEASON
P: (775) 684-7162
F: (775) 684-5725
Email: DMGEASON@SOS.NV.Gov

The firm contact small business owners telling them they are approved for loans up to $185,000 with the small business administration. They lated asked for a retainer of $2,850.00 upwards $10,000.00 depending how much they can take you to the cleaners.

Capital Trust Investment Bank ~ capitaltrustin.com

December 31, 2012August 19, 20131 Comment

This is a fraudulent website ALERT. Please proceed with care and caution.

UK Regional Office: +447508369146
Email: accountsuk@capitaltrustin.com
Email: accountsmy@capitaltrustin.com
Asian Regional Office:
Phone:+60-163962538
Phone:+60-129322181

Address lookup
canonical name capitaltrustin.com
aliases
addresses: 69.65.33.49
Domain Whois record

Queried whois.internic.net with “dom capitaltrustin.com

Domain Name: CAPITALTRUSTIN.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.WEBHOSTINGPAD.COM
Name Server: NS2.WEBHOSTINGPAD.COM
Status: clientTransferProhibited
Updated Date: 13-feb-2012
Creation Date: 13-feb-2012
Expiration Date: 13-feb-2013

Last update of whois database: Mon, 31 Dec 2012 19:01:13 UTC
Queried whois.enom.com with “capitaltrustin.com

Domain name: capitaltrustin.com

Registrant Contact:
Webhostingpad.com
DNS Admin
5005 Newport Dr
Rolling Meadows, IL 60008
US

Administrative Contact:
Webhostingpad.com
DNS Admin dns@webhostingpad.com
+1.8473429199
Fax:
5005 Newport Dr
Rolling Meadows, IL 60008
US

Technical Contact:
Webhostingpad.com
DNS Admin dns@webhostingpad.com
+1.8473429199
Fax:
5005 Newport Dr
Rolling Meadows, IL 60008
US

Status: Locked

Name Servers:
ns1.webhostingpad.com
ns2.webhostingpad.com

Creation date: 13 Feb 2012 17:51:00
Expiration date: 13 Feb 2013 09:51:00
Network Whois record

Queried rwhois.servernap.net with “69.65.33.49”…

%rwhois V-1.5:003fff:00 whois.gigenet.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:net-69.65.33.0/25
network:Auth-Area:69.65.0.0/18
network:Network-Name:gigenet-69.65.33.0/25
network:IP-Network:69.65.33.0/25
network:Organization;I:WebHostingPad.com
network:Tech-Contact;I:IPADMIN152-ARIN
network:Admin-Contact;I:IPADMIN152-ARIN
network:Created:1344502824
network:Updated:1344502824
network:Updated-By:ip-admin@coloquest.com

network:Class-Name:network
network:ID:net-69.65.0.0/18
network:Auth-Area:69.65.0.0/18
network:Network-Name:ECOMDEVEL-69.65.0.0/18
network:IP-Network:69.65.0.0/18
network:Organization;I:GigeNET
network:Tech-Contact;I:IPADMIN152-ARIN
network:Admin-Contact;I:IPADMIN152-ARIN
network:Created:1331877119
network:Updated:1331877119
network:Updated-By:hostmaster@gigenet.com

referral rwhois://root.rwhois.net:4321/auth-area=.
ok

Queried whois.arin.net with “n 69.65.33.49″…

NetRange: 69.65.0.0 – 69.65.63.255
CIDR: 69.65.0.0/18
OriginAS:
NetName: IPNAP
NetHandle: NET-69-65-0-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
Comment: http://www.gigenet.com
RegDate: 2003-07-30
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-69-65-0-0-1

OrgName: GigeNET
OrgId: DMPL
Address: 545 E Algonquin Rd
Address: Suite D
City: Arlington Heights
StateProv: IL
PostalCode: 60005
Country: US
RegDate: 2011-03-04
Updated: 2011-06-23
Comment: http://www.gigenet.com
Ref: http://whois.arin.net/rest/org/DMPL

ReferralServer: rwhois://rwhois.servernap.net:4321

OrgTechHandle: IPADM152-ARIN
OrgTechName: IP Administrator
OrgTechPhone: +1-800-561-2656
OrgTechEmail: ip-admin@coloquest.com
OrgTechRef: http://whois.arin.net/rest/poc/IPADM152-ARIN

OrgNOCHandle: IPADM152-ARIN
OrgNOCName: IP Administrator
OrgNOCPhone: +1-800-561-2656
OrgNOCEmail: ip-admin@coloquest.com
OrgNOCRef: http://whois.arin.net/rest/poc/IPADM152-ARIN

OrgAbuseHandle: ABUSE2935-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-800-561-2656
OrgAbuseEmail: abuse@gigenet.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE2935-ARIN

DNS records
name class type data time to live
capitaltrustin.com IN MX
preference: 0
exchange: capitaltrustin.com
7200s (02:00:00)
capitaltrustin.com IN SOA
server: ns1.webhostingpad.com
email: techsupport@webhostingpad.com
serial: 2012021302
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
capitaltrustin.com IN NS ns1.webhostingpad.com 86400s (1.00:00:00)
capitaltrustin.com IN NS ns2.webhostingpad.com 86400s (1.00:00:00)
capitaltrustin.com IN A 69.65.33.49 7200s (02:00:00)
49.33.65.69.in-addr.arpa IN PTR server210.webhostingpad.com 3600s (01:00:00)
33.65.69.in-addr.arpa IN NS ns1.servernap.com 3600s (01:00:00)
33.65.69.in-addr.arpa IN NS ns2.servernap.com 3600s (01:00:00)
33.65.69.in-addr.arpa IN SOA
server: ns1.servernap.com
email: hostmaster@servernap.com
serial: 2011062503
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)

— end —

Achobank ~ www.achobank.com

December 31, 2012January 18, 20141 Comment

This is a fraudulent website ALERT. Please proceed with care and caution.

Address lookup
canonical name achobank.com
aliases
addresses 67.228.248.35
Domain Whois record

Queried whois.internic.net with “dom achobank.com

Domain Name: ACHOBANK.COM
Registrar: THE REGISTRY AT INFO AVENUE, LLC D/B/A SPIRIT COMMUNICATIONS
Whois Server: whois.iaregistry.com
Referral URL: http://www.spiritdomains.com
Name Server: NS23.SYSKAY.COM
Name Server: NS24.SYSKAY.COM
Status: clientTransferProhibited
Updated Date: 09-nov-2012
Creation Date: 09-nov-2012
Expiration Date: 09-nov-2013

Last update of whois database: Mon, 31 Dec 2012
Please Report Abuse to abuse@nameservers.com.ng

Domain Name: ACHOBANK.COM

Registrant:
Achobank.com
Nwabueze Emmanuel iheanacho
acho_don_12000@yahoo.com
No.26 jemila road ikpobahill Benin city
OUI ile ife sun state
Benin
Anambra,234
NG
Tel. +234.08034292648

Creation Date: 09-Nov-2012
Expiration Date: 09-Nov-2013

Domain servers in listed order:
ns23.syskay.com
ns24.syskay.com

Administrative Contact:
Achobank.com
Nwabueze Emmanuel iheanacho email:acho_don_12000@yahoo.com
No.26 jemila road ikpobahill Benin city
OUI ile ife sun state
Benin
Anambra,234
NG
Tel. +234.08034292648

Technical Contact:
Achobank.com
Nwabueze Emmanuel iheanacho emil:acho_don_12000@yahoo.com
No.26 jemila road ikpobahill Benin city
OUI ile ife sun state
Benin
Anambra,234
NG
Tel. +234.08034292648

Billing Contact:
Achobank.com
Nwabueze Emmanuel iheanacho acho_don_12000@yahoo.com
No.26 jemila road ikpobahill Benin city
OUI ile ife sun state
Benin
Anambra,234
NG
Tel. +234.08034292648

Status:LOCKED
Network Whois record
Queried rwhois.softlayer.com with “67.228.248.35

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.67.228.224.0/19
network:Auth-Area:67.228.224.0/19
network:Network-Name:SOFTLAYER-67.228.224.0
network:IP-Network:67.228.248.32/28
network:IP-Network-Block:67.228.248.32-67.228.248.47
network:Organization;I:Syskay Systems
network:Street-Address:7 Alabiyamo Street Old Bodija
network:City:Ibadan
network:Postal-Code:200212
network:Country-Code:NG
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:admin@syskay.com
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2010-11-19 15:04:32
network:Updated:2011-06-09 08:21:17
network:Updated-By:ipadmin@softlayer.com

referral rwhois://root.rwhois.net:4321/auth-area=.
ok
Queried whois.arin.net with “n 67.228.248.35″…

NetRange: 67.228.0.0 – 67.228.255.255
CIDR: 67.228.0.0/16
OriginAS: AS36351
NetName: SOFTLAYER-4-5
NetHandle: NET-67-228-0-0-1
Parent: NET-67-0-0-0-0
NetType: Direct Allocation
Comment: The IP addresses in this block are the envy of all of their IP address neighbors… The SoftLayer network is where all IPs want to be.
RegDate: 2007-11-07
Updated: 2012-03-28
Ref: http://whois.arin.net/rest/net/NET-67-228-0-0-1

OrgName: SoftLayer Technologies Inc.
OrgId: SOFTL
Address: 4849 Alpha Rd.
City: Dallas
StateProv: TX
PostalCode: 75244
Country: US
RegDate: 2005-10-26
Updated: 2012-10-24
Ref: http://whois.arin.net/rest/org/SOFTL

ReferralServer: rwhois://rwhois.softlayer.com:4321

OrgTechHandle: IPADM258-ARIN
OrgTechName: IP Admin
OrgTechPhone: +1-214-442-0601
OrgTechEmail: ipadmin@softlayer.com
OrgTechRef: http://whois.arin.net/rest/poc/IPADM258-ARIN

OrgAbuseHandle: ABUSE1025-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-214-442-0605
OrgAbuseEmail: abuse@softlayer.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE1025-ARIN

RTechHandle: IPADM258-ARIN
RTechName: IP Admin
RTechPhone: +1-214-442-0601
RTechEmail: ipadmin@softlayer.com
RTechRef: http://whois.arin.net/rest/poc/IPADM258-ARIN

RNOCHandle: IPADM258-ARIN
RNOCName: IP Admin
RNOCPhone: +1-214-442-0601
RNOCEmail: ipadmin@softlayer.com
RNOCRef: http://whois.arin.net/rest/poc/IPADM258-ARIN

RAbuseHandle: ABUSE1025-ARIN
RAbuseName: Abuse
RAbusePhone: +1-214-442-0605
RAbuseEmail: abuse@softlayer.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE1025-ARIN

DNS records
name class type data time to live
http://www.achobank.com IN CNAME achobank.com 14400s (04:00:00)
achobank.com IN MX
preference: 0
exchange: achobank.com
14400s (04:00:00)
achobank.com IN SOA
server: ns23.syskay.com
email: syskaysystems@yahoo.com
serial: 2012110902
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
achobank.com IN NS ns24.syskay.com 86400s (1.00:00:00)
achobank.com IN NS ns23.syskay.com 86400s (1.00:00:00)
achobank.com IN A 67.228.248.35 14400s (04:00:00)
35.248.228.67.in-addr.arpa IN PTR akure.syskay.com 86400s (1.00:00:00)
248.228.67.in-addr.arpa IN SOA
server: ns1.arpa.global-datacenter.com
email: root@softlayer.com
serial: 2012120700
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
248.228.67.in-addr.arpa IN NS ns1.arpa.global-datacenter.com 3600s (01:00:00)
248.228.67.in-addr.arpa IN NS ns2.arpa.global-datacenter.com 3600s (01:00:00)

— end —

FINANCIAL AGENT ~ secure-affiliates.com

December 31, 2012Leave a comment

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT.

These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

The identity of an individual or entity have been stolen along with fund from their bank accounts. You are being recruited to wire transfer these funds either by WESTERN UNION, MONEYGRAM, into your bank, a DOMESTIC BANK or FOREIGN BANK ACCOUNT

FINANCIAL AGENT

Location: Australia, United States, Canada, United Kingdom
Status: Open
Employee Type: Part-Time Employee

Major operational duties are prompt receiving and processing stockbrokers’ payments for their further transfer according to the specified method. Detailed work scheme will be provided upon request.

Requirements:
* Expert skills in managing payments and transfers between our company and clients
* Knowledge of basic payment systems
* Ability to schedule working hours effectively
* Availability for 3-4 hours a day
* Minimum 18 y.o.

Payment basis:
During the trial period you will be paid AUD, CAD, USD, GPB 2,300 per month. You will also receive 8% commission for each payment received from our client. With current volume of clients, on average, your overall income will amount up to AUD, CAD, USD, GPB 5,000 per month. After the trial period your base salary will be as high as AUD, CAD, USD, GPB 3,000 per month plus 8% commission.

Benefits:
* Flexible working schedule
* Possibility to combine this part time job with your primary occupation
* Free training courses

Important Info:
Our analysts have been observing pronounced economic growth in all the departments of Secure Affiliates PLC during the latest quarter of this year. This became possible due to perfect and well coordinated work of our team! According to statistical data, 98% of Secure Affiliates PLC financial managers being employed for less than three months are completely satisfied with their earnings and would like to improve their professional skills and advance their careers with our Company. The management of Secure Affiliates PLC is striving for strengthening and expanding our corporation to get a hold in the major part of today’s financial services market.

If you would like to apply for this position and learn more, please email us at job@secure-affiliates.com.
Time spent for consideration of your application can be drastically reduced if you attach your resume to your email.

Domain Name: secure-affiliates.com
Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE
Expiration Date: 2011-01-12
Creation Date: 2010-01-12
Last Update Date: 2010-01-12
Name Servers:
yns1.yahoo.com
yns2.yahoo.com
IP: 98.136.50.138
IP Location: Sunnyvale, United States
Admin Name……….. neville clewley
Admin Address…….. 9 Grimstone Street
Admin Address…….. KEPERRA
Admin Address…….. 4054
Admin Address…….. Queensland
Admin Address…….. AUSTRALIA
Admin Email………. nevilleclewley@yahoo.com
Admin Phone………. +61.408748870

WhoIs ~ supportkfs.com

December 31, 2012January 24, 2013Leave a comment

Based on the number of complaints regarding unauthorized ACH withdrawals of $39.99 from consumers bank accounts, scamFRAUDalert see it fitting to issue this ALERT. They are asked to call the number listed below and are later told it is related to LifestyleDeals.com

888-382-9311

Address lookup
canonical name supportkfs.com
aliases
addresses:89.32.149.184
Domain Whois record

The following A records are set to 89.32.149.184:
supportkfs.com, titsassandfunxxx.com

Queried whois.internic.net with “dom supportkfs.com

Domain Name: SUPPORTKFS.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.WEBTECHSTANDARD.COM
Name Server: NS2.WEBTECHSTANDARD.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 10-dec-2012
Creation Date: 24-may-2012
Expiration Date: 24-may-2013

Last update of whois database: Mon, 31 Dec 2012 16:56:00 UTC
Queried whois.godaddy.com with “supportkfs.com

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: SUPPORTKFS.COM
Created on: 24-May-12
Expires on: 24-May-13
Last Updated on: 10-Dec-12

Registrant:
Kaldir Financial Services ltd
West Malling Ground Floor 26
Kings Hill Avenue
Maidstone, ME19 4AE
United Kingdom

Administrative Contact:
Merckaert, Juan kfs@KaldirFinancialServices.com
Kaldir Financial Services ltd
West Malling Ground Floor 26
Kings Hill Avenue
Maidstone, ME19 4AE
United Kingdom
+1.4077926298

Technical Contact:
Merckaert, Juan kfs@KaldirFinancialServices.com
Kaldir Financial Services ltd
West Malling Ground Floor 26
Kings Hill Avenue
Maidstone, ME19 4AE
United Kingdom
+1.4077926298

Domain servers in listed order:
NS1.WEBTECHSTANDARD.COM
NS2.WEBTECHSTANDARD.COM

Network Whois record
Queried whois.ripe.net with “-B 89.32.149.184
Information related to ‘89.32.144.0 – 89.32.151.255

inetnum: 89.32.144.0 – 89.32.151.255
netname: SC-ELVSOFT-SRL
descr: SC Elvsoft SRL
descr: Unit 3 Trade City
descr: Crown Road Enfield
descr: EN1 1TX UK
country: gb
admin-c: AA2783-RIPE
tech-c: AA2783-RIPE
status: ASSIGNED PA
remarks: Registered through http://www.ip.ro/ip.html
mnt-by: RO-MNT
mnt-lower: RO-MNT
mnt-routes: COREIX-MNT
changed: hostmaster@ip.ro 20111111
source: RIPE

person: ADRIAN ANDREIAS
address: ELVSOFT SRL
address: Str Traian Mosoiu Nr 48 Ap 7
address: Cluj-Napoca Cluj Romania 400132
phone: +40-364-566777
e-mail: office@elvsoft.com
abuse-mailbox: abuse@elvsoft.com
nic-hdl: AA2783-RIPE
notify: office@elvsoft.com
mnt-by: ELVSOFT-MNT
changed: office@elvsoft.com 20091209
source: RIPE

Information related to ‘89.32.144.0/21AS31708’

route: 89.32.144.0/21
descr: SC Elvsoft SRL via Coreix Limited
origin: AS31708
mnt-by: COREIX-MNT
changed: p.davies@coreix.net 20111116
source: RIPE

This query was served by the RIPE Database Query Service version 1.47.5 (WHOIS3)

DNS records
name class type data time to live
supportkfs.com IN TXT v=spf1 +a +mx +ip4:89.32.145.92 ?all 14400s (04:00:00)
supportkfs.com IN MX
preference: 0
exchange: supportkfs.com
14400s (04:00:00)
supportkfs.com IN SOA
server: ns1.webtechstandard.com
email: tech@blue.cr
serial: 2012121003
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
supportkfs.com IN NS ns1.webtechstandard.com 86400s (1.00:00:00)
supportkfs.com IN NS ns2.webtechstandard.com 86400s (1.00:00:00)
supportkfs.com IN A 89.32.149.184 14400s (04:00:00)
184.149.32.89.in-addr.arpa IN PTR 184.149.32.89.static.intovps.com 14400s (04:00:00)
149.32.89.in-addr.arpa IN NS ns1.intovps.com 86400s (1.00:00:00)
149.32.89.in-addr.arpa IN SOA
server: ns1.intovps.com
email: admin@intovps.com
serial: 1
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
86400s (1.00:00:00)

— end —

LifeStyleDeal.com ~ pgbincsupport.com

December 30, 2012December 31, 2012Leave a comment

Consumers continued to complaint about unauthorized ACH withdrawals from their bank accounts. They are asked to contact PGHINCSUPPORT.COM which inform them that the transaction in question is associated with Lifestyledeals.com

LifeStyleDeal.com aka LifeStyleDeals.com aka pgbincsupport.com

Address lookup
canonical name lifestyledeals.com
aliases
addresses 82.98.86.173
Domain Whois record

This slideshow requires JavaScript.

Customer service is available 24/7 via toll free phone:
877-550-8428

Queried whois.internic.net with “dom lifestyledeals.com”…

Domain Name: LIFESTYLEDEALS.COM
Registrar: TUCOWS.COM CO.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: NS1.SEDOPARKING.COM
Name Server: NS2.SEDOPARKING.COM
Status: ok
Updated Date: 18-jul-2012
Creation Date: 16-aug-2007
Expiration Date: 16-aug-2013

>>> Last update of whois database: Mon, 31 Dec 2012 07:13:46 UTC <<<

Queried whois.tucows.com with “lifestyledeals.com”…

Registrant:
Contact Privacy Inc. Customer 0117342532
96 Mowat Ave
Toronto, ON M6K 3M1
CA

Domain name: LIFESTYLEDEALS.COM

Administrative Contact:
Contact Privacy Inc. Customer 0117342532, lifestyledeals.com@contactprivacy.com
96 Mowat Ave
Toronto, ON M6K 3M1
CA
+1.4165385457
Technical Contact:
Contact Privacy Inc. Customer 0117342532, lifestyledeals.com@contactprivacy.com
96 Mowat Ave
Toronto, ON M6K 3M1
CA
+1.4165385457

Registration Service Provider:
WEB IMPACT INC., info@webimpact.com
416-815-2000
http://www.webimpact.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.

Registrar of Record: TUCOWS, INC.
Record last updated on 17-Dec-2012.
Record expires on 16-Aug-2013.
Record created on 16-Aug-2007.

Registrar Domain Name Help Center:
http://tucowsdomains.com

Domain servers in listed order:
NS1.SEDOPARKING.COM
NS2.SEDOPARKING.COM

Domain status: ok

This domain’s privacy is protected by contactprivacy.com. To reach the domain contacts, please go to http://www.contactprivacy.com and follow the instructions.

Network Whois record

Queried whois.ripe.net with “-B 82.98.86.173″…

% Information related to ‘82.98.86.0 – 82.98.86.255’

inetnum: 82.98.86.0 – 82.98.86.255
netname: SEDO-1-NET
descr: Sedo Domain Parking
descr: c/o Plusline
country: DE
admin-c: UP448-RIPE
tech-c: PLN
status: ASSIGNED PA
remarks: ——————————–
remarks: For abuse issues, please contact abuse@fhe3.com
remarks: For networking Issues, please contact notdienst@fhe3.com
remarks: ——————————–
mnt-by: PLUSLINE-MNT
changed: al@plusline.net 20070615
source: RIPE

role: Plus.Line Noc
address: Plus.line AG
address: Mainzer Landstr. 199
address: 60326 Frankfurt
address: Germany
phone: +49 69 758915 0
fax-no: +49 69 758915 33
e-mail: hostmaster@plusline.net
admin-c: RG72-RIPE
tech-c: RG72-RIPE
tech-c: MBPL-RIPE
tech-c: GSPL
nic-hdl: PLN
notify: hostmaster@plusline.net
mnt-by: PLUSLINE-MNT
source: RIPE
changed: cn@plusline.de 20090727
changed: gs@plusline.de 20091016
changed: gs@plusline.de 20110117

person: Ulrich Priesner
address: Sedo GmbH
address: Im Mediapark 6
address: 50670 Koeln
address: Germany
phone: +49 221 34030-0
e-mail: info@sedo.de
nic-hdl: UP448-RIPE
mnt-by: PLUSLINE-MNT
changed: al@plusline.net 20070615
source: RIPE

% Information related to ‘82.98.86.0/24AS47846’

route: 82.98.86.0/24
descr: Sedo GmbH
descr: c/o Plus.line AG
origin: AS47846
mnt-by: PLUSLINE-MNT
changed: mb@plusline.net 20090616
source: RIPE

% This query was served by the RIPE Database Query Service version 1.47.5 (WHOIS1)

Address lookup
lookup failed lifestyledeal.com
Could not find an IP address for this domain name.
Domain Whois record

Queried whois.internic.net with “dom lifestyledeal.com”…

Domain Name: LIFESTYLEDEAL.COM
Registrar: TUCOWS.COM CO.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: NS1.MDNSSERVICE.COM
Name Server: NS2.MDNSSERVICE.COM
Name Server: NS3.MDNSSERVICE.COM
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 29-oct-2012
Creation Date: 04-nov-2011
Expiration Date: 04-nov-2013

>>> Last update of whois database: Mon, 31 Dec 2012 07:20:57 UTC <<<

Queried whois.tucows.com with “lifestyledeal.com”…

Registrant:
Evolusent Inc.
5955 Airport Rd
Suite 306
Mississauga, ON L4V 1R9
CA

Domain name: LIFESTYLEDEAL.COM

Administrative Contact:
McGuire, James james.mcguire@evolusent.com
5955 Airport Rd
Suite 306
Mississauga, ON L4V 1R9
CA
+1.4168152000×228
Technical Contact:
McGuire, James james.mcguire@evolusent.com
5955 Airport Rd
Suite 306
Mississauga, ON L4V 1R9
CA
+1.4168152000×228 Fax: +1.4168152001

Registrar of Record: TUCOWS, INC.
Record last updated on 29-Oct-2012.
Record expires on 04-Nov-2013.
Record created on 04-Nov-2011.

Registrar Domain Name Help Center:
http://tucowsdomains.com

Domain servers in listed order:
NS1.MDNSSERVICE.COM
NS3.MDNSSERVICE.COM
NS2.MDNSSERVICE.COM

Domain status: clientTransferProhibited
clientUpdateProhibited

WhoIs ~ supportbcltd.com

December 30, 2012February 13, 20132 Comments

888-396-0750

support@supportbcltd.com

Address lookup
canonical name supportbcltd.com
aliases
addresses 89.32.149.114
Domain Whois record

The following A records are set to 89.32.149.114:
supportbcltd.com, whoresincharge.com

This slideshow requires JavaScript.

Queried whois.internic.net with “dom supportbcltd.com

Domain Name: SUPPORTBCLTD.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.WEBTECHSTANDARD.COM
Name Server: NS2.WEBTECHSTANDARD.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 10-dec-2012
Creation Date: 24-may-2012
Expiration Date: 24-may-2013

Last update of whois database: Mon, 31 Dec 2012 05:46:54 UTC
Queried whois.godaddy.com with “supportbcltd.com

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: SUPPORTBCLTD.COM
Created on: 24-May-12
Expires on: 24-May-13
Last Updated on: 10-Dec-12

Registrant:
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States

Administrative Contact:
Private, Registration SUPPORTBCLTD.COM@domainsbyproxy.com
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Technical Contact:
Private, Registration SUPPORTBCLTD.COM@domainsbyproxy.com
Domains By Proxy, LLC
DomainsByProxy.com
14747 N Northsight Blvd Suite 111, PMB 309
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2598

Domain servers in listed order:
NS1.WEBTECHSTANDARD.COM
NS2.WEBTECHSTANDARD.COM

Network Whois record
Queried whois.ripe.net with “-B 89.32.149.114″…

% Information related to ‘89.32.144.0 – 89.32.151.255’

% Information related to ‘89.32.144.0/21AS31708’

route: 89.32.144.0/21
descr: SC Elvsoft SRL via Coreix Limited
origin: AS31708
mnt-by: COREIX-MNT
changed: p.davies@coreix.net 20111116
source: RIPE

% This query was served by the RIPE Database Query Service version 1.47.5 (WHOIS2)

DNS records
name class type data time to live
supportbcltd.com IN TXT v=spf1 +a +mx +ip4:89.32.145.92 ?all 14400s (04:00:00)
supportbcltd.com IN MX
preference: 0
exchange: supportbcltd.com
14400s (04:00:00)
supportbcltd.com IN SOA
server: ns1.webtechstandard.com
email: tech@blue.cr
serial: 2012121003
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
supportbcltd.com IN NS ns2.webtechstandard.com 86400s (1.00:00:00)
supportbcltd.com IN NS ns1.webtechstandard.com 86400s (1.00:00:00)
supportbcltd.com IN A 89.32.149.114 14400s (04:00:00)
114.149.32.89.in-addr.arpa IN PTR 114.149.32.89.static.intovps.com 14400s (04:00:00)
149.32.89.in-addr.arpa IN NS ns1.intovps.com 86400s (1.00:00:00)
149.32.89.in-addr.arpa IN SOA
server: ns1.intovps.com
email: admin@intovps.com
serial: 1
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
86400s (1.00:00:00)

— end —

apple.ca.islands.us

December 30, 2012December 30, 20121 Comment

Scammers are now text messaging consumers regarding 1K giveaway in Apple Overstock Winnings

“You have been randomly chosen as Apple’s Over-Stock iwinner! Click http://ie.appleoverstock.cc & submit code [0000] to win your Free Macbook now!” ~ http://nz.ioverstock.cc
http/apple.ca.islands.us

216-282-5676
770-809-3254
602-329-7686
631-428-6600
318-936-2250
605-413-1142
44-7557504371
713-815-5611
713-815-5668
713-815-5690
856-409-0367
813-769-0659
876-445-0531
469-404-9712
256-677-9829
416-912-9283

appleoverstock text messages =SPAM

The following A records are set to 141.101.124.218:

18upclub.com
everestlaser.com
hcrhealth.com
lamiavitacongiorgio.com
mangapay.com
photopeach.com
poetipoesia.info

The following A records are set to 141.101.125.218:

donnaklan.com
ilborghese.info
ittapiros.com
mncwatch.com
sensiblevps.com
umbrasystems.com
vitamindna.com
zamantunelindenhemenkurtulun.com

Target-Prizes.com

December 29, 20121 Comment

Is targetcontests.com a hoax website? YES

scamFRAUDalert see it necessary to issue this ALERT as consumers are complaining receiving text messages stating they had just won a $1,000.00 Gift Card.

The recipients are then directed to go to http://Targetcontest.com and enter some code xxxx to claim their prize. They are further instructed to act within 24 hrs. The phone numbers listed to call are

1-832-726-2867
616-573-5992
909-764-7694
619-972-6122
323-240-6914
619-481-8220
612-750-4220
909-524-8136
619-346-5565
647-206-9285
909-538-6507
619-961-0201
619-985-5943
857-444-5568
877-397-6780
619-876-0993
619-573-5992
732-362-0042
804-389-6606
804 389 6606
985-259-0107
985-718-7784
404-558-2989
909-762-5224
(951)902-5827
909-762-4729
951-902-5827
951-992-2043
985-259-2058
307-094-6190
951-856-2387
218-282-7922
405-321-3375
612-750-4220
612-719-4496
612-751-7898
760-310-7292
951-965-7201
612-719-4496
608-318-4442
612-751-7898
424-202-4292
800-945-6596
909-524-8136

Target Sweepstakes

67.222.12.216 resolves to host.mygt.org.
The following A records are set to 67.222.12.216:

bestbuycontests.com
bluewave-inc.com
bluewavemarketinginc.com
mygt.org
ns1-admescor.ahwebhost.com
ns1.bluewavemarketinginc.com
ns1.mygt.org
ns2.mygt.org
walmartcontests.com

Other associated sites

Best Buy – bestbuy.thegiftcarddeal.com
Disney – disney.thegiftcarddeal.com
iPad2 – iPad2.thegiftcarddeal.com
iPhone5 – iphone5.thegiftcarddeal.com
Starbucks – starbucks.thegiftcarddeal.com
Subway – subway.thegiftcarddeal.com
Target – target.thegiftcarddeal.com
Victoria’s Secret – victoriassecret.thegiftcarddeal.com
Walmart – walmart.thegiftcarddeal.com”

The following A records are set to 192.162.102.240:

dj-alex-kssa.com
targetprizes.com
targetwinners.com

92.241.168.200 resolves to dns1.2×4.ru.

The following A records are set to 92.241.168.200:

dns1.combatmusic.org
ns1.lubovnik.info
ns1.multikulti-crew.info
ns1.takhzen.com
ns1.uspenie.info
ns1.x-sh0p.info
ns2.multikulti-crew.info
ns2.oneload.org
ns5.passwordbay.org

Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.2X4HOSTING.RU
Name Server: NS2.2X4HOSTING.RU
Status: clientTransferProhibited
Updated Date: 09-nov-2012
Creation Date: 09-nov-2012
Expiration Date: 09-nov-2013

Address lookup
canonical name targetcontests.com
aliases
addresses 67.222.12.216
Domain Whois record

Queried whois.internic.net with “dom targetcontests.com”…

Domain Name: TARGETCONTESTS.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.TARGETCONTESTS.COM
Name Server: NS2.TARGETCONTESTS.COM
Status: clientTransferProhibited
Updated Date: 11-nov-2012
Creation Date: 10-nov-2012
Expiration Date: 10-nov-2013

Last update of whois database: Mon, 12 Nov 2012 12:28:06 UTC
Queried whois.enom.com with “targetcontests.com

Registration Service Provided By: Namecheap.com
Contact: support@namecheap.com
Visit: http://namecheap.com

Domain name: targetcontests.com

Registrant Contact:
WhoisGuard
WhoisGuard Protected ()

Fax:
11400 W. Olympic Blvd. Suite 200
Los Angeles, CA 90064
US

Administrative Contact:
WhoisGuard
WhoisGuard Protected (52a46e0f427e40cc8b54c8654c609cdc.protect@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
11400 W. Olympic Blvd. Suite 200
Los Angeles, CA 90064
US

Technical Contact:
WhoisGuard
WhoisGuard Protected (52a46e0f427e40cc8b54c8654c609cdc.protect@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
11400 W. Olympic Blvd. Suite 200
Los Angeles, CA 90064
US

Status: Locked

Name Servers:
ns1.targetcontests.com
ns2.targetcontests.com

Creation date: 11 Nov 2012 00:40:00
Expiration date: 10 Nov 2013 16:40:00

Network Whois record
Queried whois.arin.net with “n ! NET-67-222-8-0-1

NetRange: 67.222.8.0 – 67.222.15.255
CIDR: 67.222.8.0/21
OriginAS: AS558
NetName: PRIVATE-CA-1
NetHandle: NET-67-222-8-0-1
Parent: NET-67-222-0-0-1
NetType: Reallocated
RegDate: 2011-06-03
Updated: 2011-06-03
Ref: http://whois.arin.net/rest/net/NET-67-222-8-0-1

OrgName: PrivateSystems Networks CA
OrgId: PNC-28
Address: Net2EZ c/o PrivateSystems Networks
Address: 600 West 7th Street Ste 550
City: Los Angeles
StateProv: CA
PostalCode: 90017
Country: US
RegDate: 2011-06-03
Updated: 2011-08-23
Ref: http://whois.arin.net/rest/org/PNC-28

OrgTechHandle: NOC2915-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-866-332-9894
OrgTechEmail: noc@privatesystems.net
OrgTechRef: http://whois.arin.net/rest/poc/NOC2915-ARIN

OrgAbuseHandle: PNA44-ARIN
OrgAbuseName: PrivateSystems Networks Abuse
OrgAbusePhone: +1-866-332-9894
OrgAbuseEmail: abuse@privatesystems.net
OrgAbuseRef: http://whois.arin.net/rest/poc/PNA44-ARIN

DNS records
name class type data time to live
targetcontests.com IN TXT v=spf1 +a +mx +ip4:67.222.12.216 ?all 14400s (04:00:00)
targetcontests.com IN MX
preference: 0
exchange: targetcontests.com
14400s (04:00:00)
targetcontests.com IN SOA
server: ns1.targetcontests.com
email: 951ryan@gmail.com
serial: 2012111103
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
targetcontests.com IN NS ns2.targetcontests.com 86400s (1.00:00:00)
targetcontests.com IN NS ns1.targetcontests.com 86400s (1.00:00:00)
targetcontests.com IN A 67.222.12.216 14400s (04:00:00)
216.12.222.67.in-addr.arpa IN PTR host.mygt.org 86400s (1.00:00:00)
12.222.67.in-addr.arpa IN SOA
server: ns1.privatesystems.net
email: dns@privatesystems.net
serial: 2012111202
refresh: 10800
retry: 1800
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
12.222.67.in-addr.arpa IN NS ns1.privatesystems.net 86400s (1.00:00:00)
12.222.67.in-addr.arpa IN NS ns2.privatesystems.net 86400s (1.00:00:00)

— end —

BestBuyPrizes.net (onlinecomplaintsboard.wordpress.com)
fastusacashloan.com (onlinecomplaintsboard.wordpress.com)
Potential Predators Scam (onlinecomplaintsboard.wordpress.com)
LifeStyleDealsNow.com (onlinecomplaintsboard.wordpress.com)

Evolution World Wide Limited

December 29, 2012January 3, 20132 Comments

scamFRAUDalert see it necessary to issue this ALERT as Evolution World Wide Limited aka HiddenCemeraPen http://www.hiddencamerapen.com/ engages in deceptive practices and false advertisement.

Is freebirdtablets.com a scam? YES

Evolution World Wide Limited
NW 66th St # 3030,
Miami, FL 33166-2626
Phone: (888) 529-0022
Fax: (561) 258-82708345

This slideshow requires JavaScript.

23 complaints closed with BBB in last 3 years | 23 closed in last 12 months

Complaint Type	Total Closed Complaints
Advertising / Sales Issues	1
Delivery Issues	6
Problems with Product / Service	16
Billing / Collection Issues	0
Guarantee / Warranty Issues	0
Total Closed Complaints	23

Reports online indicates that this is a Hong Kong China operation in spite of the Miami, Florida address.

17C 235 Wing Lok Street
Sheung Wan,HONG kONG

Address lookup
canonical name http://www.freebirdtablets.com.
aliases
addresses 184.172.43.56
Domain Whois record

Queried whois.internic.net with “dom freebirdtablets.com”…

Domain Name: FREEBIRDTABLETS.COM
Registrar: TUCOWS.COM CO.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: NS1.SYSTEMDNS.COM
Name Server: NS2.SYSTEMDNS.COM
Name Server: NS3.SYSTEMDNS.COM
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 17-apr-2012
Creation Date: 17-apr-2012
Expiration Date: 17-apr-2013

Last update of whois database: Sat, 29 Dec 2012 21:09:39 UTC <<<

Queried whois.tucows.com with “freebirdtablets.com”…

Registrant:
Contact Privacy Inc. Customer 0130968678
96 Mowat Ave
Toronto, ON M6K 3M1
CA

Domain name: FREEBIRDTABLETS.COM

Administrative Contact:
Contact Privacy Inc. Customer 0130968678, freebirdtablets.com@contactprivacy.com
96 Mowat Ave
Toronto, ON M6K 3M1
CA
+1.4165385457
Technical Contact:
Contact Privacy Inc. Customer 0130968678, freebirdtablets.com@contactprivacy.com
96 Mowat Ave
Toronto, ON M6K 3M1
CA
+1.4165385457

Registrar of Record: TUCOWS, INC.
Record last updated on 17-Apr-2012.
Record expires on 17-Apr-2013.
Record created on 17-Apr-2012.

Registrar Domain Name Help Center:
http://tucowsdomains.com

Domain servers in listed order:
NS2.SYSTEMDNS.COM
NS3.SYSTEMDNS.COM
NS1.SYSTEMDNS.COM

Domain status: clientTransferProhibited
clientUpdateProhibited

This domain’s privacy is protected by contactprivacy.com. To reach the domain contacts, please go to http://www.contactprivacy.com and follow the instructions.

Network Whois record

Queried rwhois.theplanet.com with “184.172.43.56”…

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.184.172.0.0/18
network:Auth-Area:184.172.0.0/18
network:Network-Name:SOFTLAYER-184.172.0.0
network:IP-Network:184.172.43.56/29
network:IP-Network-Block:184.172.43.56-184.172.43.63
network:Organization;I:evolution world wide limited
network:Street-Address:Unit 708, Cyberport 1
network:City:100 Cyberport Road
network:State:VV
network:Postal-Code:1000
network:Country-Code:HK
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:sales@evolutionworldwide.com
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2010-11-19 14:59:46
network:Updated:2012-03-26 13:04:28
network:Updated-By:ipadmin@softlayer.com

%ok

Queried whois.arin.net with “n 184.172.43.56″…

NetRange: 184.172.0.0 – 184.173.255.255
CIDR: 184.172.0.0/15
OriginAS: AS36420, AS30315, AS13749, AS21844
NetName: NETBLK-THEPLANET-BLK-17
NetHandle: NET-184-172-0-0-1
Parent: NET-184-0-0-0-0
NetType: Direct Allocation
RegDate: 2010-10-06
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-184-172-0-0-1

OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com
OrgTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-822-4204
OrgNOCEmail: noc@theplanet.com
OrgNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com
RTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-822-4204
RNOCEmail: noc@theplanet.com
RNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

Is This A False Alarm or Not ~ APPSPOT.COM?

December 29, 2012December 29, 20124 Comments

I am being attack by usawebproxy0.appspot.com The WHOIS below shows it belongs to Google.com. Is This A False Alarm or NOT?

Address lookup
canonical name appspot.l.google.com
aliases
addresses 2607:f8b0:4003:c01::8d
173.194.64.141
Domain Whois record

Queried whois.internic.net with “dom appspot.com

Domain Name: APPSPOT.COM
Registrar: MARKMONITOR INC.
Whois Server: whois.markmonitor.com
Referral URL: http://www.markmonitor.com
Name Server: NS1.GOOGLE.COM
Name Server: NS2.GOOGLE.COM
Name Server: NS3.GOOGLE.COM
Name Server: NS4.GOOGLE.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Status: serverDeleteProhibited
Status: serverTransferProhibited
Status: serverUpdateProhibited
Updated Date: 07-feb-2012
Creation Date: 09-mar-2005
Expiration Date: 09-mar-2013

>>> Last update of whois database: Sat, 29 Dec 2012 17:01:50 UTC <<<

Queried whois.markmonitor.com with "appspot.com"…

Registrant:
DNS Admin
Google Inc.
2400 E. Bayshore Pkwy
Mountain View CA 94043
US
dns-admin@google.com +1.6503300100 Fax: +1.6506188571

Domain Name: appspot.com

Registrar Name: Markmonitor.com
Registrar Whois: whois.markmonitor.com
Registrar Homepage: http://www.markmonitor.com

Administrative Contact:
DNS Admin
Google Inc.
1600 Amphitheatre Parkway
Mountain View CA 94043
US
dns-admin@google.com +1.6506234000 Fax: +1.6506188571
Technical Contact, Zone Contact:
DNS Admin
Google Inc.
1600 Amphitheatre Parkway
Mountain View CA 94043
US
dns-admin@google.com +1.6506234000 Fax: +1.6506188571

Created on…………..: 2005-03-09.
Expires on…………..: 2013-03-09.
Record last updated on..: 2012-02-07.

Domain servers in listed order:

ns2.google.com
ns4.google.com
ns3.google.com
ns1.google.com

MarkMonitor is the Global Leader in Online Brand Protection.

Domain Management
MarkMonitor Brand Protection™
MarkMonitor AntiPiracy™
MarkMonitor AntiFraud™
Professional and Managed Services

Visit MarkMonitor at http://www.markmonitor.com
Contact us at 1 (800) 745-9229
In Europe, at +44 (0) 203 206 2220

—

Network Whois record

Queried whois.arin.net with "n 173.194.64.141"…

NetRange: 173.194.0.0 – 173.194.255.255
CIDR: 173.194.0.0/16
OriginAS: AS15169
NetName: GOOGLE
NetHandle: NET-173-194-0-0-1
Parent: NET-173-0-0-0-0
NetType: Direct Allocation
RegDate: 2009-08-17
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-173-194-0-0-1

OrgName: Google Inc.
OrgId: GOGL
Address: 1600 Amphitheatre Parkway
City: Mountain View
StateProv: CA
PostalCode: 94043
Country: US
RegDate: 2000-03-30
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/GOGL

OrgAbuseHandle: ZG39-ARIN
OrgAbuseName: Google Inc
OrgAbusePhone: +1-650-253-0000
OrgAbuseEmail: arin-contact@google.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ZG39-ARIN

OrgTechHandle: ZG39-ARIN
OrgTechName: Google Inc
OrgTechPhone: +1-650-253-0000
OrgTechEmail: arin-contact@google.com
OrgTechRef: http://whois.arin.net/rest/poc/ZG39-ARIN

DNS records

DNS query for 194.173.in-addr.arpa returned an error from the server: ServerFailure
name class type data time to live
http://www.appspot.com IN CNAME appspot.l.google.com 5s (00:00:05)
appspot.l.google.com IN A 74.125.129.141 300s (00:05:00)
appspot.l.google.com IN AAAA 2607:f8b0:400e:c02::8d 300s (00:05:00)
appspot.l.google.com IN MX
preference: 40
exchange: alt4.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.l.google.com IN MX
preference: 20
exchange: alt2.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.l.google.com IN MX
preference: 10
exchange: alt1.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.l.google.com IN MX
preference: 30
exchange: alt3.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.l.google.com IN MX
preference: 5
exchange: gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.l.google.com IN A 74.125.129.141 300s (00:05:00)
appspot.l.google.com IN AAAA 2607:f8b0:400e:c02::8d 300s (00:05:00)
appspot.l.google.com IN MX
preference: 30
exchange: alt3.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.l.google.com IN MX
preference: 10
exchange: alt1.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.l.google.com IN MX
preference: 20
exchange: alt2.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.l.google.com IN MX
preference: 40
exchange: alt4.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.l.google.com IN MX
preference: 5
exchange: gmr-smtp-in.l.google.com
300s (00:05:00)
l.google.com IN SOA
server: ns4.google.com
email: dns-admin@google.com
serial: 1507490
refresh: 900
retry: 900
expire: 1800
minimum ttl: 60
5s (00:00:05)
l.google.com IN NS ns4.google.com 5s (00:00:05)
l.google.com IN NS ns1.google.com 5s (00:00:05)
l.google.com IN NS ns2.google.com 5s (00:00:05)
l.google.com IN NS ns3.google.com 5s (00:00:05)
appspot.com IN AAAA 2607:f8b0:400e:c02::8d 300s (00:05:00)
appspot.com IN A 74.125.129.141 300s (00:05:00)
appspot.com IN SOA
server: ns1.google.com
email: dns-admin@google.com
serial: 2012042600
refresh: 21600
retry: 3600
expire: 1038800
minimum ttl: 60
86400s (1.00:00:00)
appspot.com IN NS ns3.google.com 345600s (4.00:00:00)
appspot.com IN NS ns4.google.com 345600s (4.00:00:00)
appspot.com IN NS ns1.google.com 345600s (4.00:00:00)
appspot.com IN TXT IPROTA_D29304-XXX 300s (00:05:00)
appspot.com IN NS ns2.google.com 345600s (4.00:00:00)
appspot.com IN MX
preference: 20
exchange: alt2.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.com IN MX
preference: 40
exchange: alt4.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.com IN MX
preference: 10
exchange: alt1.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.com IN MX
preference: 30
exchange: alt3.gmr-smtp-in.l.google.com
300s (00:05:00)
appspot.com IN MX
preference: 5
exchange: gmr-smtp-in.l.google.com
300s (00:05:00)
141.64.194.173.in-addr.arpa IN PTR oa-in-f141.1e100.net 5s (00:00:05)
d.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.c.0.3.0.0.4.0.b.8.f.7.0.6.2.ip6.arpa IN PTR ob-in-x8d.1e100.net 5s (00:00:05)
0.b.8.f.7.0.6.2.ip6.arpa IN SOA
server: ns1.google.com
email: dns-admin@google.com
serial: 2012092501
refresh: 21600
retry: 3600
expire: 1209600
minimum ttl: 10800
5s (00:00:05)
0.b.8.f.7.0.6.2.ip6.arpa IN NS ns1.google.com 5s (00:00:05)
0.b.8.f.7.0.6.2.ip6.arpa IN NS ns3.google.com 5s (00:00:05)
0.b.8.f.7.0.6.2.ip6.arpa IN NS ns2.google.com 5s (00:00:05)
0.b.8.f.7.0.6.2.ip6.arpa IN NS ns4.google.com 5s (00:00:05)

— end —

nz.ioverstock.cc

December 29, 201218 Comments

Scammers are now text messaging consumers regarding 1K giveaway in Apple Overstock Winnings

“You have been randomly chosen as Apple’s Over-Stock iwinner! Click http://ie.appleoverstock.cc & submit code [0000] to win your Free Macbook now!” ~ http://nz.ioverstock.cc

216-282-5676
770-809-3254
602-329-7686
631-428-6600
318-936-2250
605-413-1142
44-7557504371
713-815-5611
713-815-5668
713-815-5690

appleoverstock text messages =SPAM

The following A records are set to 141.101.124.218:

18upclub.com
everestlaser.com
hcrhealth.com
lamiavitacongiorgio.com
mangapay.com
photopeach.com
poetipoesia.info

The following A records are set to 141.101.125.218:

donnaklan.com
ilborghese.info
ittapiros.com
mncwatch.com
sensiblevps.com
umbrasystems.com
vitamindna.com
zamantunelindenhemenkurtulun.com

fda-canadian-pharmacy.com

December 29, 2012December 29, 2012Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who’s Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.

Before making a purchase that can affect your health, we strongly recommend that you consult your physician & DO NOT self-medicate.

Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.

The following A records are set to 67.215.244.231:

24apoteket.com
24h-pillsmarket.com
bestpharmatoday.com
fda-canadian-pharmacy.com
health-trust.biz
helpillstock.com
mderos.com
menopaus.org
myherbalhealth.com
onlinepharmplace.com
overnight4you.com
pastiglieperamore.com
pill-pharmacy.com
purchasetablets.net
trustymedshop.com

Address lookup
canonical name pillathand.com
aliases
addresses 67.215.244.231
Domain Whois record

Queried whois.internic.net with “dom pillathand.com

Domain Name: PILLATHAND.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com
Name Server: NS1.NS4FREEHOST.COM
Name Server: NS2.NS4FREEHOST.COM
Name Server: NS3.SECNSSERVER.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Updated Date: 26-jul-2012
Creation Date: 26-jul-2012
Expiration Date: 26-jul-2013

Last update of whois database: Sat, 29 Dec 2012 11:13:22 UTC
Queried whois.bizcn.com with “pillathand.com

Domain name: pillathand.com

Registrant Contact:
Whois Privacy Protection Service
Whois Agent gmvjcxkxhs@whoisservices.cn
+86.05922577888 fax: +86.05922577111
No. 61 Wanghai Road, Xiamen Software Park
xiamen fujian 361008
cn

Administrative Contact:
Whois Agent gmvjcxkxhs@whoisservices.cn
+86.05922577888 fax: +86.05922577111
No. 61 Wanghai Road, Xiamen Software Park
xiamen fujian 361008
cn

Technical Contact:
Whois Agent gmvjcxkxhs@whoisservices.cn
+86.05922577888 fax: +86.05922577111
No. 61 Wanghai Road, Xiamen Software Park
xiamen fujian 361008
cn

Billing Contact:
Whois Agent gmvjcxkxhs@whoisservices.cn
+86.05922577888 fax: +86.05922577111
No. 61 Wanghai Road, Xiamen Software Park
xiamen fujian 361008
cn

DNS:
ns1.ns4freehost.com
ns2.ns4freehost.com
ns3.secnsserver.com

Created: 2012-07-26
Expires: 2013-07-26

Network Whois record

Whois query for 67.215.244.231 failed: CouldNotResolveServerName
Queried whois.arin.net with “n 67.215.244.231″…

NetRange: 67.215.224.0 – 67.215.255.255
CIDR: 67.215.224.0/19
OriginAS: AS22298
NetName: SPN3W
NetHandle: NET-67-215-224-0-1
Parent: NET-67-0-0-0-0
NetType: Direct Allocation
RegDate: 2007-10-18
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-67-215-224-0-1

OrgName: Secured Private Network
OrgId: SPNW
Address: 1740 East Garry Ave.
Address: Suite 234
City: Santa Ana
StateProv: CA
PostalCode: 92705
Country: US
RegDate: 2002-06-18
Updated: 2011-07-08
Ref: http://whois.arin.net/rest/org/SPNW

ReferralServer: rwhois://rwhois.securedprivatenetwork.net:4321

OrgAbuseHandle: ABUSE2604-ARIN
OrgAbuseName: Abuse Team
OrgAbusePhone: +1-877-434-2378
OrgAbuseEmail: noc@securedprivatenetwork.net
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE2604-ARIN

OrgNOCHandle: ABUSE2604-ARIN
OrgNOCName: Abuse Team
OrgNOCPhone: +1-877-434-2378
OrgNOCEmail: noc@securedprivatenetwork.net
OrgNOCRef: http://whois.arin.net/rest/poc/ABUSE2604-ARIN

OrgTechHandle: ABUSE2604-ARIN
OrgTechName: Abuse Team
OrgTechPhone: +1-877-434-2378
OrgTechEmail: noc@securedprivatenetwork.net
OrgTechRef: http://whois.arin.net/rest/poc/ABUSE2604-ARIN

RNOCHandle: HOSTM519-ARIN
RNOCName: Network Operations
RNOCPhone: +1-000-000-0000
RNOCEmail: noc@securedprivatenetwork.net
RNOCRef: http://whois.arin.net/rest/poc/HOSTM519-ARIN

RTechHandle: HOSTM519-ARIN
RTechName: Network Operations
RTechPhone: +1-000-000-0000
RTechEmail: noc@securedprivatenetwork.net
RTechRef: http://whois.arin.net/rest/poc/HOSTM519-ARIN

RAbuseHandle: HOSTM519-ARIN
RAbuseName: Network Operations
RAbusePhone: +1-000-000-0000
RAbuseEmail: noc@securedprivatenetwork.net
RAbuseRef: http://whois.arin.net/rest/poc/HOSTM519-ARIN

DNS records
name class type data time to live
pillathand.com IN NS ns2.ns4freehost.com 3600s (01:00:00)
pillathand.com IN A 95.211.9.41 3600s (01:00:00)
pillathand.com IN SOA
server: ns1.ns4freehost.com
email: postmaster@pillathand.com
serial: 2012031501
refresh: 86400
retry: 7200
expire: 604800
minimum ttl: 86400
3600s (01:00:00)
ns3.secnsserver.com IN A 95.211.9.52 3600s (01:00:00)
pillathand.com IN NS ns3.secnsserver.com 3600s (01:00:00)
pillathand.com IN NS ns1.ns4freehost.com 3600s (01:00:00)
ns2.ns4freehost.com IN A 95.211.9.46 3600s (01:00:00)
ns1.ns4freehost.com IN A 95.211.9.41 3600s (01:00:00)
231.244.215.67.in-addr.arpa IN PTR 67.215.244.231.static.quadranet.com 38400s (10:40:00)
244.215.67.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-01-08 01:00:37Z
signature inception: 2012-12-29 01:00:37Z
key tag: 62630
signer’s name: 67.in-addr.arpa
signature:
(1024 bits)

10800s (03:00:00)
244.215.67.in-addr.arpa IN NSEC
next domain name: 245.215.67.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
244.215.67.in-addr.arpa IN NS ns2.quadranet.com 38400s (10:40:00)
244.215.67.in-addr.arpa IN NS ns1.quadranet.com 38400s (10:40:00)

— end —

pillathand.com

December 29, 2012April 29, 2013Leave a comment

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration

National Association of Boards of Pharmacy (NABP)

Warning

Who’s Behind Online Pharmacy

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

Before making a purchase that can affect your health, we strongly recommend that you consult your physician & DO NOT self-medicate.

The following A records are set to 67.215.244.231:

24apoteket.com
24h-pillsmarket.com
bestpharmatoday.com
fda-canadian-pharmacy.com
health-trust.biz
helpillstock.com
mderos.com
menopaus.org
myherbalhealth.com
onlinepharmplace.com
overnight4you.com
pastiglieperamore.com
pill-pharmacy.com
purchasetablets.net
trustymedshop.com