WhoIs ~ jailarrest.com aka Ripoffonline.com

JailArrest Scott Breitenstein

6/30/12

to me, ProxiedDomain.., legal, GoDaddy, invalidwhois, abuse, consumerconcer., GoDaddy.com, heimerlawfirm
Hello. ScamFraudAlert

We are a very legitimate web design and programming business and have done 100’s of web projects over the last 3 years. We try and handle every client with respect and try to complete all jobs to the clients specs.

I am the owner, president and CEO of HOSTGECCO.COM and HideMyDomains.com.

We build websites for our clients and we offer them Private, Registration service but the Private, Registration service information comes back to us and are Address

22 WEST MUMMA AVE
DAYTON, Ohio 45405

United States AND email consumeronlineprotection@gmail.com and the DNS servers same information that is listed at the whois, Soon we will have our new web hosting site HOSTGECCO.COM up and runing soon.

The only thing that is holding us back is a program called whmcs there website is http://www.whmcs.com we are learning how to work it. So as we learn how to work it then our website will be up and running were clients can buy domains, they can create support tickes and ETC, The email on file consumeronlineprotection@gmail.com will change when the new hosting site opens up it will be called Ripoffonline.com@HideMyDomains.com, or what ever the domain name is that we buy for our client for exspanle yoursite.com@HideMyDomains.com

NOTE: our client by name Dzianis Beltyukov has a website by the name of Ripoffonline.com
We do receive alot of complaints about that website Ripoffonline.com we send all information over to the owner of that website.

We have investigated that domain Ripoffonline.com and that site operates under Communications Decency Act

The CDA is part of our federal laws.

http://en.wikipedia.org/wiki/Communications_Decency_Act

*************************************
We purchase the domains for our clients
Domain Name: Ripoffonline.com
Client Name: Dzianis Beltyukov
Email: miketxoh@gmail.com
Phone: 937-660-7343
Account No: 2010Ripoffonline6539com
*************************************

Note: Hostgator.com sometimes send us lot of emails and we always respond back but there was a email we did not get it went in our spam box so Hostgator suspended our account. So when we got back to hostgator they told us we will have to wait untill tuseday at 10.30 to get services restore. That was to long for us to wait. So we moved to other hosting company

Thank you
________________________

Scott Breitenstein lives at
22 w mumma ave.
Dayton, Ohio 45405

It is a duplex he lives in the upstairs unit
(937)660-7343

His partner is Preston Lawson
3508 Le Juene Drive in
Dayton, OH 45405
his number is (937)830-0377

ripoffonline

Address lookup
canonical name jailarrest.com

aliases
addresses:74.218.93.170
Domain Whois record

Queried whois.internic.net with “dom jailarrest.com

Domain Name: JAILARREST.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.WEBSITEDOMAINCONTROL.COM
Name Server: NS2.WEBSITEDOMAINCONTROL.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 24-jan-2013
Creation Date: 23-jan-2012
Expiration Date: 23-jan-2014

>>> Last update of whois database: Thu, 31 Jan 2013 05:11:34 UTC <<<

Queried whois.godaddy.com with “jailarrest.com”…

Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
Domain Name: JAILARREST.COM
Created on: 23-Jan-12
Expires on: 23-Jan-14
Last Updated on: 24-Jan-13

Registrant:
Hide My Domains, LLC
22 west mumma ave
Dayton, Ohio 45405
United States

Administrative Contact:
Private, Registration consumeronlineprotection@gmail.com
Hide My Domains, LLC
22 west mumma ave
Dayton, Ohio 45405
United States
+1.9376607343

Technical Contact:
Private, Registration consumeronlineprotection@gmail.com
Hide My Domains, LLC
22 west mumma ave
Dayton, Ohio 45405
United States
+1.9376607343

Domain servers in listed order:
NS1.WEBSITEDOMAINCONTROL.COM
NS2.WEBSITEDOMAINCONTROL.COM

Network Whois record

Queried ipmt.rr.com with “74.218.93.170”…

%rwhois V-1.5:0020b0:00 ipmt.rr.com (by Time Warner Cable, Inc. V-1.0)
network:Class-Name:network
network:ID:NETBLK-ISRC-74.218.0.0-17
network:Auth-Area:74.218.0.0/17
network:Org-Name:Road Runner Commercial
network:Tech-Contact:ipaddreg@rr.com
network:Updated:2013-01-30 10:33:41
network:IP-Network:74.218.0.0/17
network:Admin-Contact:IPADD-ARIN
network:IP-Network-Range:74.218.0.0 – 74.218.127.255

organization:Class-Name:organization
organization:ID:NETBLK-ISRC-74.218.0.0-17
organization:Auth-Area:74.218.0.0/17
organization:Org-Name:Road Runner Commercial
organization:Tech-Contact:ipaddreg@rr.com
organization:Street-Address:13820 Sunrise Valley Drive
organization:City:Herndon
organization:State:VA
organization:Postal-Code:20171
organization:Country-Code:US
organization:Phone:703-345-3151
organization:Updated:2013-01-30 10:33:41
organization:Created:2013-01-30 10:33:41
organization:Admin-Contact:IPADD-ARIN

%ok

Queried whois.arin.net with “n 74.218.93.170″…

NetRange: 74.218.0.0 – 74.219.255.255
CIDR: 74.218.0.0/15
OriginAS:
NetName: RCMS
NetHandle: NET-74-218-0-0-1
Parent: NET-74-0-0-0-0
NetType: Direct Allocation
RegDate: 2006-12-05
Updated: 2007-07-24
Ref: http://whois.arin.net/rest/net/NET-74-218-0-0-1

OrgName: Road Runner HoldCo LLC
OrgId: RCMS
Address: 13820 Sunrise Valley Drive
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US
RegDate: 2001-09-26
Updated: 2011-03-23
Comment: Allocations for this OrgID serve Road Runner commercial customers out of the Columbus, OH, Herndon, VA and Raleigh, NC RDCs.
Ref: http://whois.arin.net/rest/org/RCMS

ReferralServer: rwhois://ipmt.rr.com:4321

OrgTechHandle: IPTEC-ARIN
OrgTechName: IP Tech
OrgTechPhone: +1-703-345-3416
OrgTechEmail: abuse@rr.com
OrgTechRef: http://whois.arin.net/rest/poc/IPTEC-ARIN

OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-703-345-3416
OrgAbuseEmail: abuse@rr.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE10-ARIN

DNS records
name class type data time to live
jailarrest.com IN SOA
server: ns1.websitedomaincontrol.com
email: root@jailarrest.com
serial: 2013011800
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
jailarrest.com IN A 74.218.93.170 14400s (04:00:00)
jailarrest.com IN TXT v=spf1 a mx ip4:74.218.93.170 ~all 14400s (04:00:00)
jailarrest.com IN MX
preference: 0
exchange: jailarrest.com
14400s (04:00:00)
jailarrest.com IN NS ns1.websitedomaincontrol.com 14400s (04:00:00)
jailarrest.com IN NS ns2.websitedomaincontrol.com 14400s (04:00:00)
170.93.218.74.in-addr.arpa IN PTR hostgecco.com 86400s (1.00:00:00)
93.218.74.in-addr.arpa IN SOA
server: ns1.biz.rr.com
email: dnsadmin@rr.com
serial: 2003101308
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
93.218.74.in-addr.arpa IN NS ns2.biz.rr.com 3600s (01:00:00)
93.218.74.in-addr.arpa IN NS dns4.rr.com 3600s (01:00:00)
93.218.74.in-addr.arpa IN NS ns1.biz.rr.com 3600s (01:00:00)

— end —

9 thoughts on “WhoIs ~ jailarrest.com aka Ripoffonline.com

  1. SFA Reporter says:

    Address lookup
    canonical name scamfound.org
    aliases
    addresses 128.127.111.104
    Domain Whois record

    Queried whois.publicinterestregistry.net with “scamfound.org”…

    Domain ID:D160117004-LROR
    Domain Name:SCAMFOUND.ORG
    Created On:10-Sep-2010 22:40:40 UTC
    Last Updated On:16-Jun-2012 16:47:12 UTC
    Expiration Date:10-Sep-2012 22:40:40 UTC
    Sponsoring Registrar:Wild West Domains, LLC (R120-LROR)
    Status:CLIENT DELETE PROHIBITED
    Status:CLIENT RENEW PROHIBITED
    Status:CLIENT TRANSFER PROHIBITED
    Status:CLIENT UPDATE PROHIBITED

    Registrant ID:CR62377855
    Registrant Name:Registration Private
    Registrant Organization:Domains By Proxy, LLC
    Registrant Street1:DomainsByProxy.com
    Registrant Street2:14747 N Northsight Blvd Suite 111, PMB 309
    Registrant City:Scottsdale
    Registrant State/Province:Arizona
    Registrant Postal Code:85260
    Registrant Country:US
    Registrant Phone:+1.4806242599
    Registrant FAX:+1.4806242598
    Registrant Email:SCAMFOUND.ORG@domainsbyproxy.com

    Admin ID:CR62377857
    Admin Name:Registration Private
    Admin Organization:Domains By Proxy, LLC
    Admin Street1:DomainsByProxy.com
    Admin Street2:14747 N Northsight Blvd Suite 111, PMB 309
    Admin City:Scottsdale
    Admin State/Province:Arizona
    Admin Postal Code:85260
    Admin Country:US
    Admin Phone:+1.4806242599
    Admin FAX:+1.4806242598
    Admin Email:SCAMFOUND.ORG@domainsbyproxy.com

    Tech ID:CR62377856
    Tech Name:Registration Private
    Tech Organization:Domains By Proxy, LLC
    Tech Street1:DomainsByProxy.com
    Tech Street2:14747 N Northsight Blvd Suite 111, PMB 309
    Tech City:Scottsdale
    Tech State/Province:Arizona
    Tech Postal Code:85260
    Tech Country:US
    Tech Phone:+1.4806242599
    Tech FAX:+1.4806242598
    Tech Email:SCAMFOUND.ORG@domainsbyproxy.com

    Name Server:NS1.ALTUSHOST.COM
    Name Server:NS2.ALTUSHOST.COM

    DNSSEC:Unsigned
    Network Whois record

    Queried whois.ripe.net with “-B 128.127.111.104″…
    Information related to ‘128.127.110.0 – 128.127.111.255’

    inetnum: 128.127.110.0 – 128.127.111.255
    netname: AS51430-NL
    descr: AltusHost Inc.
    remarks: AW-INFRA
    country: NL
    admin-c: AHN-RIPE
    tech-c: AHN-RIPE
    status: ASSIGNED PA
    mnt-by: ALTUSHOST-MNT
    mnt-by: ALTUSHOST-MNT
    mnt-lower: ALTUSHOST-MNT
    mnt-routes: ALTUSHOST-MNT
    changed: noc@altushost.com 20111027
    source: RIPE

    role: AltusHost – Contact Role
    address: ALTUSHOST INC.
    address: Artillerigatan 6
    address: SE-114 51 Stockholm
    address: Sweden
    phone: +46.852506060
    fax-no: +46.844680015
    e-mail: info@altushost.com
    abuse-mailbox: abuse@altushost.com
    admin-c: AHN-RIPE
    tech-c: AHN-RIPE
    nic-hdl: AHN-RIPE
    mnt-by: ALTUS-MNT
    changed: noc@altushost.com 20110813
    source: RIPE

    Information related to ‘128.127.110.0/23AS51430’

    route: 128.127.110.0/23
    descr: ALTUSHOST INC.
    origin: AS51430
    mnt-by: ALTUSHOST-MNT
    changed: noc@altushost.com 20120315
    source: RIPE

    This query was served by the RIPE Database Query Service version 1.16 (WHOIS3)

    DNS records
    name class type data time to live
    scamfound.org IN TXT v=spf1 a mx include:websitewelcome.com ~all 14400s (04:00:00)
    scamfound.org IN MX
    preference: 0
    exchange: scamfound.org
    14400s (04:00:00)
    scamfound.org IN SOA
    server: ns1.altushost.com
    email: techs@altushost.com
    serial: 2012061601
    refresh: 86400
    retry: 7200
    expire: 3600000
    minimum ttl: 86400
    86400s (1.00:00:00)
    scamfound.org IN NS ns1.altushost.com 86400s (1.00:00:00)
    scamfound.org IN NS ns2.altushost.com 86400s (1.00:00:00)
    scamfound.org IN A 128.127.111.104 14400s (04:00:00)
    104.111.127.128.in-addr.arpa IN PTR hosted-by.altushost.com 7200s (02:00:00)
    111.127.128.in-addr.arpa IN SOA
    server: ns1.rtd.altushost.com
    email: info@altushost.com
    serial: 2012030603
    refresh: 10800
    retry: 3600
    expire: 1814400
    minimum ttl: 7200
    7200s (02:00:00)
    111.127.128.in-addr.arpa IN RRSIG
    type covered: NSEC (47)
    algorithm: RSA/SHA-1 (5)
    labels: 5
    original ttl: 10800 (03:00:00)
    signature expiration: 2012-07-23 12:00:05Z
    signature inception: 2012-07-13 12:00:05Z
    key tag: 64724
    signer’s name: 128.in-addr.arpa
    signature:
    (1024 bits)

    AE6BF7CD5C1D93908024B4DBAF3CA9D9
    8B18230C1BA00A2F6AE0D6E3CC4EEE42
    57280B2F160EE94CA5B1CF60009611FE
    C70C754141AE76F8EBE7546732E5FCDA
    2AF638AB1DDDAD2B09FF2E06809889CB
    D06937425EB834FE342C8249304AA492
    2807F5A67C86972F621AE114EFD10298
    A006D761BD9166961603486044AF7313

    10800s (03:00:00)
    111.127.128.in-addr.arpa IN NSEC
    next domain name: 112.127.128.in-addr.arpa
    record types: NS RRSIG NSEC
    10800s (03:00:00)
    111.127.128.in-addr.arpa IN NS ns1.rtd.altushost.com 7200s (02:00:00)
    111.127.128.in-addr.arpa IN NS ns2.rtd.altushost.com 7200s (02:00:00)

    — end —

  2. SFA Reporter says:

    91.223.82.43 resolves to green.warez-host.com.

    The following A records are set to 91.223.82.43:
    3dsemulatorx.com,
    3xrls.net,
    accountshack.com,
    bajale.net,
    batammarinesupply.com,
    bestjapan-adult-video.com,
    bestjapaneseadultvideo.com,
    cocksmoker.net,
    completos.net,
    dailynotes.info,
    descargacineclasico.com,
    dev-popcorn.com,
    diagnostic55.com,
    djtoolsonline.com,
    doocute.com,
    dostilive.com,
    dostzaade.com,
    dragoncitycheathack.com,
    e-businessmail.com,
    eflirtbook.com,
    facebookjuegostrucos.com,
    facecreditshack.com,
    facehacks.net,
    fbcheats.com,
    fbcredits.us,
    film-telechargement.com,
    filmefacil.com,
    freegtav.net,
    frndzlive.com,
    ganadora.net,
    geekdescargas.net,
    giveaways2013.com,
    guadagnovero.net,
    hackdownload.us,
    hackwifi2013.com,
    hackwifipassword.net,
    hellodosti.com,
    hellodosti.net,
    hellodosti.org,
    horrorfilmdownload.com,
    howtohackwifipassword.com,
    imagens-baixenamoleza.info,
    imagens-downloadsfacil.info,
    impalapua.com,
    importarroupas.org,
    indopapermill.com,
    javasaxstore.com,
    jeuxfacebookastuces.com,
    kgb-site.net,
    kinghacks.com,
    klara-shop.com,
    konkorazmoon.ir,
    lampiweb.com,
    libura.net,
    linkadownloads.com,
    linkafilmes.com,
    livelife.ir,
    loli-hentai.net,
    marketmilitia.org,
    marvelavengerscheatshack.com,
    megaw.org, moborkut.com,
    moshimonstercodes.info,
    moshimonstercodes.us,
    multifichier.com,
    nanohostpro.com,
    novenadimension.com,
    nutrimat.com,
    ornil.info,
    ornilmail.com,
    pcfriends.biz,
    planetapost.com,
    planetofwarez.org,
    planetofwrestling.com,
    projectrs06.net,
    psvitaemulator.net,
    putasafada.net,
    qmir.net,
    route34hacks.net,
    sabsabionline.com,
    satprohd.com,
    steamhackz.com,
    studio-miranda.com,
    susnja.net,
    tecnovips.com,
    telecharger2013.com,
    torushost.com,
    ultimatehacks.net,
    userpornxxx.com,
    vetsbooks.com,
    wickedspot.org,
    wifihack2013.com,
    wifihacker.org,
    wifipasswordhack.org,
    xflirt-fr.com,
    zeusprivate.com,
    zonabeta.net

    % This is the RIPE Database query service.
    % The objects are in RPSL format.
    %
    % The RIPE Database is subject to Terms and Conditions.
    % See http://www.ripe.net/db/support/db-terms-conditions.pdf

    % Note: this output has been filtered.
    % To receive output for a database update, use the “-B” flag.

    % Information related to ‘91.223.82.0 – 91.223.82.255’

    inetnum: 91.223.82.0 – 91.223.82.255
    netname: IWS-NETWORK
    descr: International Widespread Services Limited
    country: NL
    org: ORG-IWSL2-RIPE
    admin-c: IWS-RIPE
    tech-c: IWS-RIPE
    status: ASSIGNED PI
    mnt-by: RIPE-NCC-END-MNT
    mnt-lower: RIPE-NCC-END-MNT
    mnt-by: AINT-MNT
    mnt-routes: AINT-MNT
    mnt-domains: AINT-MNT
    source: RIPE # Filtered

    organisation: ORG-IWSL2-RIPE
    org-name: International Widespread Services Limited
    org-type: other
    address: Ras Al Khaimah
    address: P.O. Box 10559
    address: UAE
    phone: +98 915 509 6085
    phone: +971 56 653 9955
    remarks: *************************************************************
    remarks: | We are Internet Services Provider
    remarks: *———————————————————–*
    remarks: | In case of Spam/Virus/Portscans/Attacks/Fraud Activity etc
    remarks: | please send an email to abuse@iws.co
    remarks: | for any other questions info@iws.co
    remarks: | Be friendly …!
    remarks: | Unfriendly emails will be ignored!
    remarks: *************************************************************
    mnt-ref: IWS-NETWORK
    mnt-by: IWS-NETWORK
    source: RIPE # Filtered

    person: Navid Emrozian
    address: International Widespread Services Limited
    address: Ras Al Khaimah
    address: P.O. Box 10559
    address: UAE
    phone: +98 915 509 6085
    phone: +971 56 653 9955
    abuse-mailbox: abuse@iws.co
    abuse-mailbox: abuse@hostplay.com
    nic-hdl: IWS-RIPE
    mnt-by: IWS-NETWORK
    source: RIPE # Filtered

    % Information related to ‘91.223.82.0/24AS51430’

    route: 91.223.82.0/24
    descr: IWS Networks Ltd.
    origin: AS51430
    mnt-by: AINT-MNT
    source: RIPE # Filtered

  3. SFA Reporter says:

    Address lookup
    canonical name kinghacks.com.
    aliases
    addresses 91.223.82.43
    Domain Whois record

    Queried whois.internic.net with “dom kinghacks.com”…

    Domain Name: KINGHACKS.COM
    Registrar: 1 & 1 INTERNET AG
    Whois Server: whois.schlund.info
    Referral URL: http://REGISTRAR.SCHLUND.INFO
    Name Server: DNS5.WAREZ-HOST.COM
    Name Server: DNS6.WAREZ-HOST.COM
    Status: ok
    Updated Date: 22-sep-2012
    Creation Date: 28-jun-2012
    Expiration Date: 28-jun-2013

    >>> Last update of whois database: Thu, 31 Jan 2013 06:36:54 UTC <<<

    Queried whois.schlund.info with "kinghacks.com"…

    domain: kinghacks.com
    created: 28-Jun-2012
    last-changed: 22-Sep-2012
    registration-expiration: 28-Jun-2013

    nserver: dns5.warez-host.com 91.223.82.40
    nserver: dns6.warez-host.com 91.223.82.41

    status: CLIENT-TRANSFER-PROHIBITED

    registrant-firstname: Oneandone
    registrant-lastname: Private Registration
    registrant-organization: 1&1 Internet, Inc. – http://1and1.com/contact
    registrant-street1: 701 Lee Road, Suite 300
    registrant-street2: ATTN: kinghacks.com
    registrant-pcode: 19087
    registrant-state: PA
    registrant-city: Chesterbrook
    registrant-ccode: US
    registrant-phone: +1.8772064254
    registrant-email: proxy3483070@1and1-private-registration.com

    admin-c-firstname: Oneandone
    admin-c-lastname: Private Registration
    admin-c-organization: 1&1 Internet, Inc. – http://1and1.com/contact
    admin-c-street1: 701 Lee Road, Suite 300
    admin-c-street2: ATTN: kinghacks.com
    admin-c-pcode: 19087
    admin-c-state: PA
    admin-c-city: Chesterbrook
    admin-c-ccode: US
    admin-c-phone: +1.8772064254
    admin-c-email: proxy3483070@1and1-private-registration.com

    tech-c-firstname: Oneandone
    tech-c-lastname: Private Registration
    tech-c-organization: 1&1 Internet, Inc. – http://1and1.com/contact
    tech-c-street1: 701 Lee Road, Suite 300
    tech-c-street2: ATTN: kinghacks.com
    tech-c-pcode: 19087
    tech-c-state: PA
    tech-c-city: Chesterbrook
    tech-c-ccode: US
    tech-c-phone: +1.8772064254
    tech-c-email: proxy3483070@1and1-private-registration.com

    bill-c-firstname: Oneandone
    bill-c-lastname: Private Registration
    bill-c-organization: 1&1 Internet, Inc. – http://1and1.com/contact
    bill-c-street1: 701 Lee Road, Suite 300
    bill-c-street2: ATTN: kinghacks.com
    bill-c-pcode: 19087
    bill-c-state: PA
    bill-c-city: Chesterbrook
    bill-c-ccode: US
    bill-c-phone: +1.8772064254
    bill-c-email: proxy3483070@1and1-private-registration.com

    Network Whois record

    Queried whois.ripe.net with "-B 91.223.82.43"…

    % Information related to '91.223.82.0 – 91.223.82.255'

    inetnum: 91.223.82.0 – 91.223.82.255
    netname: IWS-NETWORK
    descr: International Widespread Services Limited
    country: NL
    org: ORG-IWSL2-RIPE
    admin-c: IWS-RIPE
    tech-c: IWS-RIPE
    status: ASSIGNED PI
    mnt-by: RIPE-NCC-END-MNT
    mnt-lower: RIPE-NCC-END-MNT
    mnt-by: AINT-MNT
    mnt-routes: AINT-MNT
    mnt-domains: AINT-MNT
    notify: info@iws.co
    changed: hostmaster@ripe.net 20110203
    source: RIPE

    organisation: ORG-IWSL2-RIPE
    org-name: International Widespread Services Limited
    org-type: other
    address: Ras Al Khaimah
    address: P.O. Box 10559
    address: UAE
    phone: +98 915 509 6085
    phone: +971 56 653 9955
    e-mail: info@hostplay.com
    remarks: *************************************************************
    remarks: | We are Internet Services Provider
    remarks: *———————————————————–*
    remarks: | In case of Spam/Virus/Portscans/Attacks/Fraud Activity etc
    remarks: | please send an email to abuse@iws.co
    remarks: | for any other questions info@iws.co
    remarks: | Be friendly …!
    remarks: | Unfriendly emails will be ignored!
    remarks: *************************************************************
    e-mail: info@hostplay.com
    e-mail: info@iws.co
    mnt-ref: IWS-NETWORK
    mnt-by: IWS-NETWORK
    changed: info@iws.co 20110208
    source: RIPE

    person: Navid Emrozian
    address: International Widespread Services Limited
    address: Ras Al Khaimah
    address: P.O. Box 10559
    address: UAE
    phone: +98 915 509 6085
    phone: +971 56 653 9955
    abuse-mailbox: abuse@iws.co
    abuse-mailbox: abuse@hostplay.com
    nic-hdl: IWS-RIPE
    mnt-by: IWS-NETWORK
    changed: info@iws.co 20110208
    source: RIPE

    % Information related to '91.223.82.0/24AS51430'

    route: 91.223.82.0/24
    descr: IWS Networks Ltd.
    origin: AS51430
    mnt-by: AINT-MNT
    changed: info@iws.co 20100813
    source: RIPE

    % This query was served by the RIPE Database Query Service version 1.51.1 (WHOIS2)

    DNS records
    name class type data time to live
    kinghacks.com IN TXT v=spf1 +a +mx +ip4:91.223.82.43 ?all 14400s (04:00:00)
    kinghacks.com IN MX
    preference: 0
    exchange: kinghacks.com
    14400s (04:00:00)
    kinghacks.com IN SOA
    server: dns5.warez-host.com
    email: help@persianhosting.gmail.com
    serial: 2012122900
    refresh: 86400
    retry: 7200
    expire: 3600000
    minimum ttl: 86400
    86400s (1.00:00:00)
    kinghacks.com IN NS dns5.warez-host.com 86400s (1.00:00:00)
    kinghacks.com IN NS dns6.warez-host.com 86400s (1.00:00:00)
    kinghacks.com IN A 91.223.82.43 14400s (04:00:00)
    43.82.223.91.in-addr.arpa IN PTR green.warez-host.com 7200s (02:00:00)
    82.223.91.in-addr.arpa IN SOA
    server: ns1.rdns.iws.co
    email: info@iws.co
    serial: 2012080400
    refresh: 10800
    retry: 3600
    expire: 1814400
    minimum ttl: 7200
    7200s (02:00:00)
    82.223.91.in-addr.arpa IN NS ns2.rdns.iws.co 7200s (02:00:00)
    82.223.91.in-addr.arpa IN NS ns1.rdns.iws.co 7200s (02:00:00)

    — end —

  4. SFA Reporter says:

    Reverse IP Lookup DMCAA.COM

    warezgroup.com – warezgroup.com
    callofduty4you.com – callofduty4you.com
    kinghacks.com – kinghacks.com
    e-cigsnow.com – e-cigsnow.com
    microsoftofficefreetrial.net – microsoftofficefreetrial.net
    microsoftoffice2010.co – microsoftoffice2010.co
    facerob.net – facerob.net
    scene4you.com – scene4you.

  5. SFA Reporter says:

    Address lookup
    canonical name dmcaa.com.
    aliases
    addresses 74.218.93.170
    Domain Whois record

    Queried whois.internic.net with “dom dmcaa.com”…

    Domain Name: DMCAA.COM
    Registrar: WILD WEST DOMAINS, LLC
    Whois Server: whois.wildwestdomains.com
    Referral URL: http://www.wildwestdomains.com
    Name Server: NS1480.ALLTOHOST.COM
    Name Server: NS1481.ALLTOHOST.COM
    Status: clientDeleteProhibited
    Status: clientRenewProhibited
    Status: clientTransferProhibited
    Status: clientUpdateProhibited
    Updated Date: 18-aug-2012
    Creation Date: 23-jun-2012
    Expiration Date: 23-jun-2013

    >>> Last update of whois database: Thu, 31 Jan 2013 06:15:42 UTC <<<

    Queried whois.wildwestdomains.com with "dmcaa.com"…

    Registered through: DownDoggy.com
    Domain Name: DMCAA.COM
    Created on: 23-Jun-12
    Expires on: 23-Jun-13
    Last Updated on: 18-Aug-12

    Registrant:
    Digital Millennium Copyright Act Agent Ltd. (DMCAA.com)
    22 WEST MUMMA AVE
    DAYTON, Ohio 45405
    United States

    Administrative Contact:
    Davis, Jarvis support@dmcaa.com
    Digital Millennium Copyright Act Agent Ltd. (DMCAA.com)
    22 WEST MUMMA AVE
    DAYTON, Ohio 45405
    United States
    +1.9373013962

    Technical Contact:
    Davis, Jarvis support@dmcaa.com
    Digital Millennium Copyright Act Agent Ltd. (DMCAA.com)
    22 WEST MUMMA AVE
    DAYTON, Ohio 45405
    United States
    +1.9373013962

    Domain servers in listed order:
    NS1480.ALLTOHOST.COM
    NS1481.ALLTOHOST.COM

    Network Whois record

    Queried ipmt.rr.com with "74.218.93.170"…

    %rwhois V-1.5:0020b0:00 ipmt.rr.com (by Time Warner Cable, Inc. V-1.0)
    network:Class-Name:network
    network:ID:NETBLK-ISRC-74.218.0.0-17
    network:Auth-Area:74.218.0.0/17
    network:Org-Name:Road Runner Commercial
    network:Tech-Contact:ipaddreg@rr.com
    network:Updated:2013-01-30 10:33:41
    network:IP-Network:74.218.0.0/17
    network:Admin-Contact:IPADD-ARIN
    network:IP-Network-Range:74.218.0.0 – 74.218.127.255

    organization:Class-Name:organization
    organization:ID:NETBLK-ISRC-74.218.0.0-17
    organization:Auth-Area:74.218.0.0/17
    organization:Org-Name:Road Runner Commercial
    organization:Tech-Contact:ipaddreg@rr.com
    organization:Street-Address:13820 Sunrise Valley Drive
    organization:City:Herndon
    organization:State:VA
    organization:Postal-Code:20171
    organization:Country-Code:US
    organization:Phone:703-345-3151
    organization:Updated:2013-01-30 10:33:41
    organization:Created:2013-01-30 10:33:41
    organization:Admin-Contact:IPADD-ARIN

    %ok

    Queried whois.arin.net with "n 74.218.93.170"…

    NetRange: 74.218.0.0 – 74.219.255.255
    CIDR: 74.218.0.0/15
    OriginAS:
    NetName: RCMS
    NetHandle: NET-74-218-0-0-1
    Parent: NET-74-0-0-0-0
    NetType: Direct Allocation
    RegDate: 2006-12-05
    Updated: 2007-07-24
    Ref: http://whois.arin.net/rest/net/NET-74-218-0-0-1

    OrgName: Road Runner HoldCo LLC
    OrgId: RCMS
    Address: 13820 Sunrise Valley Drive
    City: Herndon
    StateProv: VA
    PostalCode: 20171
    Country: US
    RegDate: 2001-09-26
    Updated: 2011-03-23
    Comment: Allocations for this OrgID serve Road Runner commercial customers out of the Columbus, OH, Herndon, VA and Raleigh, NC RDCs.
    Ref: http://whois.arin.net/rest/org/RCMS

    ReferralServer: rwhois://ipmt.rr.com:4321

    OrgTechHandle: IPTEC-ARIN
    OrgTechName: IP Tech
    OrgTechPhone: +1-703-345-3416
    OrgTechEmail: abuse@rr.com
    OrgTechRef: http://whois.arin.net/rest/poc/IPTEC-ARIN

    OrgAbuseHandle: ABUSE10-ARIN
    OrgAbuseName: Abuse
    OrgAbusePhone: +1-703-345-3416
    OrgAbuseEmail: abuse@rr.com
    OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE10-ARIN

    DNS records
    name class type data time to live
    dmcaa.com IN A 74.218.93.170 14400s (04:00:00)
    dmcaa.com IN SOA
    server: ns1.websitedomaincontrol.com
    email: root@dmcaa.com
    serial: 2013011800
    refresh: 14400
    retry: 3600
    expire: 1209600
    minimum ttl: 86400
    14400s (04:00:00)
    dmcaa.com IN TXT v=spf1 a mx ip4:74.218.93.170 ~all 14400s (04:00:00)
    dmcaa.com IN MX
    preference: 0
    exchange: dmcaa.com
    14400s (04:00:00)
    dmcaa.com IN NS ns1.websitedomaincontrol.com 14400s (04:00:00)
    dmcaa.com IN NS ns2.websitedomaincontrol.com 14400s (04:00:00)
    170.93.218.74.in-addr.arpa IN PTR hostgecco.com 86400s (1.00:00:00)
    93.218.74.in-addr.arpa IN SOA
    server: ns1.biz.rr.com
    email: dnsadmin@rr.com
    serial: 2003101308
    refresh: 10800
    retry: 3600
    expire: 604800
    minimum ttl: 3600
    3600s (01:00:00)
    93.218.74.in-addr.arpa IN NS dns4.rr.com 3600s (01:00:00)
    93.218.74.in-addr.arpa IN NS ns1.biz.rr.com 3600s (01:00:00)
    93.218.74.in-addr.arpa IN NS ns2.biz.rr.com 3600s (01:00:00)

    — end —

  6. SFA Reporter says:

    Address lookup
    canonical name scamexposure.com

    aliases
    addresses 178.159.252.125
    Domain Whois record

    Queried whois.internic.net with “dom scamexposure.com”

    Domain Name: SCAMEXPOSURE.COM
    Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
    Whois Server: whois.PublicDomainRegistry.com
    Referral URL: http://www.PublicDomainRegistry.com

    Name Server: NS1.REG.RU
    Name Server: NS2.REG.RU

    Status: clientTransferProhibited
    Updated Date: 10-dec-2012
    Creation Date: 07-dec-2011
    Expiration Date: 07-dec-2013

    Last update of whois database: Thu, 31 Jan 2013 05:59:41 UTC
    Queried whois.publicdomainregistry.com with scamexposure.com

    Registration Service Provided By: DOMAIN NAMES REGISTRAR REG.RU LTD.

    Domain Name: SCAMEXPOSURE.COM

    Registration Date: 07-Dec-2011
    Expiration Date: 07-Dec-2013

    Status:LOCKED
    Note: This Domain Name is currently Locked. In this status the domain name cannot be transferred, hijacked, or modified. The Owner of this domain name can easily change this status from their control panel.

    This feature is provided as a security measure against fraudulent domain name hijacking.

    Name Servers:
    ns1.reg.ru
    ns2.reg.ru

    Registrant Contact Details:
    PrivacyProtect.org
    Domain Admin (contact@privacyprotect.org)
    ID#10760, PO Box 16
    Note – All Postal Mails Rejected, visit Privacyprotect.org
    Nobby Beach
    null,QLD 4218
    AU
    Tel. +45.36946676

    Administrative Contact Details:
    PrivacyProtect.org
    Domain Admin (contact@privacyprotect.org)
    ID#10760, PO Box 16
    Note – All Postal Mails Rejected, visit Privacyprotect.org
    Nobby Beach
    null,QLD 4218
    AU
    Tel. +45.36946676

    Technical Contact Details:
    PrivacyProtect.org
    Domain Admin (contact@privacyprotect.org)
    ID#10760, PO Box 16
    Note – All Postal Mails Rejected, visit Privacyprotect.org
    Nobby Beach
    null,QLD 4218
    AU
    Tel. +45.36946676

    Billing Contact Details:
    PrivacyProtect.org
    Domain Admin (contact@privacyprotect.org)
    ID#10760, PO Box 16
    Note – All Postal Mails Rejected, visit Privacyprotect.org
    Nobby Beach
    null,QLD 4218
    AU
    Tel. +45.36946676

    PRIVACYPROTECT.ORG
    Network Whois record
    Queried whois.ripe.net with "-B 178.159.252.125"…
    Information related to '178.159.240.0 – 178.159.255.255'

    inetnum: 178.159.240.0 – 178.159.255.255
    netname: ACTIVEHOST-RU-NET
    tech-c: SR6636-RIPE
    admin-c: SR6636-RIPE
    tech-c: AG13638-RIPE
    admin-c: AG13638-RIPE
    descr: Activehost RU Ltd.
    country: RU
    country: BY
    org: ORG-ARL5-RIPE
    status: ASSIGNED PI
    mnt-by: RIPE-NCC-END-MNT
    mnt-lower: RIPE-NCC-END-MNT
    mnt-by: MNT-ACTIVEHOST-RU
    mnt-routes: AS6697-MNT
    mnt-routes: MNT-ACTIVEHOST-RU
    mnt-domains: MNT-ACTIVEHOST-RU
    mnt-routes: softline-trade-mnt
    changed: rommer@active.by 20120312
    source: RIPE

    organisation: ORG-ARL5-RIPE
    org-name: Activehost RU Ltd.
    org-type: OTHER
    address: 119991, Moscow
    address: 8, Gubkina str.
    e-mail: ab@activecloud.ru
    abuse-mailbox: abuse@active.by
    mnt-ref: MNT-ACTIVEHOST-RU
    mnt-by: MNT-ACTIVEHOST-RU
    changed: rommer@active.by 20110427
    source: RIPE

    person: Alexey Galaev
    address: 119991, Moscow
    address: 8, Gubkina str.
    address: Activehost RU Ltd.
    phone: +74952320065 ext. 1272
    nic-hdl: AG13638-RIPE
    mnt-by: MNT-ACTIVEHOST-RU
    changed: rommer@active.by 20120312
    source: RIPE

    person: Shishniou Raman
    address: 220033, Minsk
    address: 32-8, 2nd Velosipedniy str.
    address: Active Technologies Ltd.
    mnt-by: MNT-ACTIVEHOST-RU
    phone: +375172911511 ext. 308
    fax-no: +375172114470
    e-mail: rommer@active.by
    nic-hdl: SR6636-RIPE
    changed: rommer@active.by 20110427
    source: RIPE

    Information related to '178.159.248.0/21AS49628'

    route: 178.159.248.0/21
    descr: Activehost RU Ltd.
    origin: AS49628
    mnt-by: softline-trade-mnt
    changed: lexeresser@active.by 20101021
    source: RIPE

    % Information related to '178.159.248.0/21AS51698'

    route: 178.159.248.0/21
    descr: Activehost RU Ltd.
    origin: AS51698
    mnt-by: MNT-ACTIVEHOST-RU
    changed: rommer@active.by 20111014
    source: RIPE

    % This query was served by the RIPE Database Query Service version 1.51.1 (WHOIS3)

    DNS records

    DNS query for scamexposure.com returned an error from the server: ServerFailure
    name class type data time to live
    125.252.159.178.in-addr.arpa IN PTR ru111.activeby.net 43200s (12:00:00)
    252.159.178.in-addr.arpa IN SOA
    server: ns1.activeby.net
    email: hotline@active.by
    serial: 2010101938
    refresh: 10800
    retry: 3600
    expire: 2419200
    minimum ttl: 3600
    43200s (12:00:00)
    252.159.178.in-addr.arpa IN RRSIG
    type covered: NSEC (47)
    algorithm: RSA/SHA-1 (5)
    labels: 5
    original ttl: 7200 (02:00:00)
    signature expiration: 2013-03-01 10:04:16Z
    signature inception: 2013-01-30 09:04:16Z
    key tag: 9093
    signer's name: 178.in-addr.arpa
    signature:
    (1024 bits)

    1D5BBEC04D6FCC4B0E1F44A2574C6D98
    7DF520288EAEFF1DCA472D9CBD25718F
    5320A4B6975CCD24ACC8FDC5B5CF78B1
    6E046ACC6C7DE9B420B08BFDC72D8BA1
    249116AC73865AF87FA4F26CF7898A53
    3A2BFD90B8D4E42197D8A347D57C5B41
    6F1CCFCAE4B57BDE279180E7E8334C30
    CAB7FC0D13D9A089A0775BC0FA0F303A

    7200s (02:00:00)
    252.159.178.in-addr.arpa IN NSEC
    next domain name: 253.159.178.in-addr.arpa
    record types: NS RRSIG NSEC
    7200s (02:00:00)
    252.159.178.in-addr.arpa IN NS ns2.activeby.net 43200s (12:00:00)
    252.159.178.in-addr.arpa IN NS ns1.activeby.net 43200s (12:00:00)
    252.159.178.in-addr.arpa IN NS ns3.activeby.net 43200s (12:00:00)

    — end —

  7. SFA Reporter says:

    74.218.93.170 resolves to hostgecco.com
    The following A records are set to 74.218.93.170

    • alltohost.com
    • awfultenant.com
    • complaintsbureau.com
    • dmcaa.com
    • dmcabase.com
    • exposeascam.com
    • jailarrest.com
    • ns1.websitedomaincontrol.com
    • ns1480.alltohost.com
    • ns1481.alltohost.com
    • ns2.websitedomaincontrol.com
    • ripoffonline.com

    Address lookup
    canonical name scaminformer.com

    aliases
    addresses 178.159.252.125
    Domain Whois record

    Queried whois.internic.net with “dom scaminformer.com”…

    Domain Name: SCAMINFORMER.COM
    Registrar: PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
    Whois Server: whois.PublicDomainRegistry.com
    Referral URL: http://www.PublicDomainRegistry.com
    Name Server: NS1.REG.RU
    Name Server: NS2.REG.RU
    Status: clientTransferProhibited
    Updated Date: 28-jan-2013
    Creation Date: 31-jan-2011
    Expiration Date: 31-jan-2015

    >>> Last update of whois database: Thu, 31 Jan 2013 05:58:41 UTC <<<

    Queried whois.publicdomainregistry.com with "scaminformer.com"…

    Registration Service Provided By: DOMAIN NAMES REGISTRAR REG.RU LTD.

    Domain Name: SCAMINFORMER.COM

    Registration Date: 31-Jan-2011
    Expiration Date: 31-Jan-2015

    Status:LOCKED
    Note: This Domain Name is currently Locked. In this status the domain name
    cannot be transferred, hijacked, or modified. The Owner of this domain name
    can easily change this status from their control panel.

    This feature is provided as a security measure against fraudulent domain name hijacking.

    Name Servers:
    ns1.reg.ru
    ns2.reg.ru

    Registrant Contact Details:
    Private Person
    Eugene Selihov (stango17emu19g@yahoo.com)
    Sevanskaja 46, 93
    Moscow
    Moscow,115516
    RU
    Tel. +356.35505083

    Administrative Contact Details:
    Private Person
    Eugene Selihov (stango17emu19g@yahoo.com)
    Sevanskaja 46, 93
    Moscow
    Moscow,115516
    RU
    Tel. +356.35505083

    Technical Contact Details:
    Private Person
    Eugene Selihov (stango17emu19g@yahoo.com)
    Sevanskaja 46, 93
    Moscow
    Moscow,115516
    RU
    Tel. +356.35505083

    Billing Contact Details:
    Private Person
    Eugene Selihov (stango17emu19g@yahoo.com)
    Sevanskaja 46, 93
    Moscow
    Moscow,115516
    RU
    Tel. +356.35505083

    Network Whois record

    Queried whois.ripe.net with "-B 178.159.252.125"…

    % Information related to '178.159.240.0 – 178.159.255.255'

    inetnum: 178.159.240.0 – 178.159.255.255
    netname: ACTIVEHOST-RU-NET
    tech-c: SR6636-RIPE
    admin-c: SR6636-RIPE
    tech-c: AG13638-RIPE
    admin-c: AG13638-RIPE
    descr: Activehost RU Ltd.
    country: RU
    country: BY
    org: ORG-ARL5-RIPE
    status: ASSIGNED PI
    mnt-by: RIPE-NCC-END-MNT
    mnt-lower: RIPE-NCC-END-MNT
    mnt-by: MNT-ACTIVEHOST-RU
    mnt-routes: AS6697-MNT
    mnt-routes: MNT-ACTIVEHOST-RU
    mnt-domains: MNT-ACTIVEHOST-RU
    mnt-routes: softline-trade-mnt
    changed: rommer@active.by 20120312
    source: RIPE

    organisation: ORG-ARL5-RIPE
    org-name: Activehost RU Ltd.
    org-type: OTHER
    address: 119991, Moscow
    address: 8, Gubkina str.
    e-mail: ab@activecloud.ru
    abuse-mailbox: abuse@active.by
    mnt-ref: MNT-ACTIVEHOST-RU
    mnt-by: MNT-ACTIVEHOST-RU
    changed: rommer@active.by 20110427
    source: RIPE

    person: Alexey Galaev
    address: 119991, Moscow
    address: 8, Gubkina str.
    address: Activehost RU Ltd.
    phone: +74952320065 ext. 1272
    nic-hdl: AG13638-RIPE
    mnt-by: MNT-ACTIVEHOST-RU
    changed: rommer@active.by 20120312
    source: RIPE

    person: Shishniou Raman
    address: 220033, Minsk
    address: 32-8, 2nd Velosipedniy str.
    address: Active Technologies Ltd.
    mnt-by: MNT-ACTIVEHOST-RU
    phone: +375172911511 ext. 308
    fax-no: +375172114470
    e-mail: rommer@active.by
    nic-hdl: SR6636-RIPE
    changed: rommer@active.by 20110427
    source: RIPE

    % Information related to '178.159.248.0/21AS49628'

    route: 178.159.248.0/21
    descr: Activehost RU Ltd.
    origin: AS49628
    mnt-by: softline-trade-mnt
    changed: lexeresser@active.by 20101021
    source: RIPE

    % Information related to '178.159.248.0/21AS51698'

    route: 178.159.248.0/21
    descr: Activehost RU Ltd.
    origin: AS51698
    mnt-by: MNT-ACTIVEHOST-RU
    changed: rommer@active.by 20111014
    source: RIPE

    % This query was served by the RIPE Database Query Service version 1.51.1 (WHOIS3)

    DNS records
    name class type data time to live
    scaminformer.com IN NS ns2.reg.ru 86400s (1.00:00:00)
    scaminformer.com IN SOA
    server: ns1.reg.ru
    email: hostmaster@ns1.reg.ru
    serial: 1352924333
    refresh: 14400
    retry: 3600
    expire: 604800
    minimum ttl: 43200
    86400s (1.00:00:00)
    scaminformer.com IN A 178.159.252.125 86400s (1.00:00:00)
    scaminformer.com IN NS ns1.reg.ru 86400s (1.00:00:00)
    125.252.159.178.in-addr.arpa IN PTR ru111.activeby.net 43200s (12:00:00)
    252.159.178.in-addr.arpa IN SOA
    server: ns1.activeby.net
    email: hotline@active.by
    serial: 2010101938
    refresh: 10800
    retry: 3600
    expire: 2419200
    minimum ttl: 3600
    43200s (12:00:00)
    252.159.178.in-addr.arpa IN RRSIG
    type covered: NSEC (47)
    algorithm: RSA/SHA-1 (5)
    labels: 5
    original ttl: 7200 (02:00:00)
    signature expiration: 2013-03-01 10:04:16Z
    signature inception: 2013-01-30 09:04:16Z
    key tag: 9093
    signer's name: 178.in-addr.arpa
    signature:
    (1024 bits)

    1D5BBEC04D6FCC4B0E1F44A2574C6D98
    7DF520288EAEFF1DCA472D9CBD25718F
    5320A4B6975CCD24ACC8FDC5B5CF78B1
    6E046ACC6C7DE9B420B08BFDC72D8BA1
    249116AC73865AF87FA4F26CF7898A53
    3A2BFD90B8D4E42197D8A347D57C5B41
    6F1CCFCAE4B57BDE279180E7E8334C30
    CAB7FC0D13D9A089A0775BC0FA0F303A

    7200s (02:00:00)
    252.159.178.in-addr.arpa IN NSEC
    next domain name: 253.159.178.in-addr.arpa
    record types: NS RRSIG NSEC
    7200s (02:00:00)
    252.159.178.in-addr.arpa IN NS ns3.activeby.net 43200s (12:00:00)
    252.159.178.in-addr.arpa IN NS ns1.activeby.net 43200s (12:00:00)
    252.159.178.in-addr.arpa IN NS ns2.activeby.net 43200s (12:00:00)

    — end —

Leave A Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.