WhoIs tweetiz.com – Malware Infestation

tweetiz

tweetiz.png

79.137.105.126 resolves to ip126.ip-79-137-105.eu.
The following A records are set to 79.137.105.126:

  1. ns1.tweetiz.com
  2. ns2.tweetiz.com
  3. tweetiz.com

Address lookup
canonical name:tweetiz.com
aliases
addresses:79.137.105.126
Domain Whois record

Queried whois.internic.net with “dom tweetiz.com”…

Domain Name: TWEETIZ.COM
Registry Domain ID: 2125549765_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.isimtescil.net
Registrar URL: http://www.isimtescil.net

Updated Date: 2017-05-20T14:53:40Z
Creation Date: 2017-05-18T16:05:53Z

Registry Expiry Date: 2018-05-18T16:05:53Z
Registrar: FBS Inc.
Registrar IANA ID: 1110
Registrar Abuse Contact Email: abuse@domaintime.biz
Registrar Abuse Contact Phone: 90.8502000444
Domain Status: clientTransferProhibited

Name Server: NS1.TWEETIZ.COM
Name Server: NS2.TWEETIZ.COM

DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint
Last update of whois database: 2017-08-31T04:39:33Z
Queried whois.isimtescil.net with “tweetiz.com

Domain Name: TWEETIZ.COM
Registry Domain ID: 2125549765_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.isimtescil.net
Registrar URL: http://www.isimtescil.net

Updated Date: 2017-07-18T02:29:54Z
Creation Date: 2017-05-18T16:05:53Z

Registrar Registration Expiration Date: 2018-05-18T16:05:53Z
Registrar: FBS Inc.
Registrar IANA ID: 1110
Domain Status: clientTransferProhibited

Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin ContactID 3577497
Registrant Organization: FBS INC / Whoisprotection biz
Registrant Street: Atasehir Goztepe Nida Kule Is Merkezi Bora Sokak N
Registrant City: Istanbul
Registrant State/Province: Istanbul
Registrant Postal Code: 34704
Registrant Country: TR
Registrant Phone: +90.8502000444
Registrant Email: 3577497@whoisprotection.biz

Registry Admin ID: Not Available From Registry
Admin Name: Domain Admin ContactID 3577497
Admin Organization: FBS INC / Whoisprotection biz
Admin Street: Atasehir Goztepe Nida Kule Is Merkezi Bora Sokak N
Admin City: Istanbul
Admin State/Province: Istanbul
Admin Postal Code: 34704
Admin Country: TR
Admin Phone: +90.8502000444
Admin Email: 3577497@whoisprotection.biz

Registry Tech ID: Not Available From Registry
Tech Name: Domain Admin ContactID 3577497
Tech Organization: FBS INC / Whoisprotection biz
Tech Street: Atasehir Goztepe Nida Kule Is Merkezi Bora Sokak N
Tech City: Istanbul
Tech State/Province: Istanbul
Tech Postal Code: 34704
Tech Country: TR
Tech Phone: +90.8502000444
Tech Email: 3577497@whoisprotection.biz

Name Server: ns1.tweetiz.com
Name Server: ns2.tweetiz.com

DNSSEC:Unsigned
Registrar Abuse Contact Email: abuse@domaintime.biz
Registrar Abuse Contact Phone: +90.8502000444
URL of the ICANN WHOIS Data

>>> Last update of WHOIS database: 2017-08-31T04:39:45Z <<<
Network Whois record

Queried whois.ripe.net with “-B 79.137.105.126″…

Information related to ‘79.137.105.0 – 79.137.105.255’

Abuse contact for ‘79.137.105.0 – 79.137.105.255’ is ‘abuse@ovh.net’

inetnum: 79.137.105.0 – 79.137.105.255
netname: OVH-DEDICATED-FO
country: FR
descr: Failover IPs
org: ORG-OS3-RIPE
admin-c: OTC2-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
created: 2017-01-11T11:00:00Z
last-modified: 2017-01-11T11:00:00Z
source: RIPE

organisation: ORG-OS3-RIPE
org-name: OVH SAS
org-type: LIR
address: 2 rue Kellermann
address: 59100
address: Roubaix
address: FRANCE
phone: +33972101007
abuse-c: AR15333-RIPE
admin-c: OTC2-RIPE
admin-c: OK217-RIPE
admin-c: GM84-RIPE
mnt-ref: OVH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
mnt-by: OVH-MNT
abuse-mailbox: abuse@ovh.net
created: 2004-04-17T11:23:17Z
last-modified: 2017-05-30T07:24:52Z
source: RIPE
e-mail: lir@ovh.net

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
e-mail: noc@ovh.net
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
notify: noc@ovh.net
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE

% Information related to ‘79.137.64.0/18AS16276’

route: 79.137.64.0/18
origin: AS16276
mnt-by: OVH-MNT
created: 2017-01-09T09:27:47Z
last-modified: 2017-01-09T09:27:47Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.89.2 (ANGUS)
DNS records

name class type data time to live
tweetiz.com IN SOA
server: ns1.tweetiz.com
email: salla@salla.com
serial: 2017062702
refresh: 3600
retry: 7200
expire: 1209600
minimum ttl: 86400
86400s (1.00:00:00)
tweetiz.com IN NS ns2.tweetiz.com 86400s (1.00:00:00)
tweetiz.com IN NS ns1.tweetiz.com 86400s (1.00:00:00)
tweetiz.com IN A 79.137.105.126 14400s (04:00:00)
tweetiz.com IN MX
preference: 0
exchange: tweetiz.com
14400s (04:00:00)
126.105.137.79.in-addr.arpa IN PTR ip126.ip-79-137-105.eu 86400s (1.00:00:00)
105.137.79.in-addr.arpa IN SOA
server: dns109.ovh.net
email: tech@ovh.net
serial: 2017082902
refresh: 43200
retry: 4320
expire: 2419200
minimum ttl: 86400
86400s (1.00:00:00)
105.137.79.in-addr.arpa IN NS dns109.ovh.net 86400s (1.00:00:00)
105.137.79.in-addr.arpa IN NS ns109.ovh.net 86400s (1.00:00:00)
105.137.79.in-addr.arpa IN TXT v=spf1 include:mx.ovh.com ~all 600s (00:10:00)
— end —

WhoIs Elly’s World Professional Steam Hair Straightener ~ ellysworld.com

scamFRAUDalert see it appropriate to issue this ALERT as consumers online have complained that they saw a Facebook advertisement offering hair straightener and ordered the product paying $49.97. The product was never delivered.

Based on what we are seeing, this is the same operation as Jody’s Adjustable Bra scam. We strongly recommend that you IMMEDIATELY file a complaint with

Internet Crime Complaint Center IC3

 
elyworld coupon


elly’s steam hair straightener
elly’s steam straightener reviews
elly’s professional steam hair straightener review
remington steam straightener review
ellys professional steam hair straightener reviews
elly’s steam hair straightener reviews
elly’s world reviews
ellys professional steam straightener reviews


Address lookup
canonical name:ellysworld.com
aliases
addresses: 23.227.38.32
Domain Whois record

Queried whois.internic.net with “dom Ellysworld.com

Domain Name: ELLYSWORLD.COM
Registry Domain ID: 2144574100_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2017-07-18T22:19:32Z
Creation Date: 2017-07-18T22:17:54Z
Registry Expiry Date: 2018-07-18T22:17:54Z
Registrar: NameCheap Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Domain Status: clientTransferProhibited
Name Server: PDNS1.REGISTRAR-SERVERS.COM
Name Server: PDNS2.REGISTRAR-SERVERS.COM
DNSSEC: unsigned

URL of the ICANN Whois Inaccuracy

Last update of whois database: 2017-08-30T17:31:04Z
Queried whois.namecheap.com with “Ellysworld.com

Domain name: Ellysworld.com
Registry Domain ID: 2144574100_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com

Updated Date: 2017-07-18T22:19:32.00Z
Creation Date: 2017-07-18T22:17:54.00Z

Registrar Registration Expiration Date: 2018-07-18T22:17:54.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Reseller: NAMECHEAP INC
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: addPeriod https://icann.org/epp#addPeriod

Registry Registrant ID:
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.
Registrant Street: P.O. Box 0823-03411
Registrant City: Panama
Registrant State/Province: Panama
Registrant Postal Code:
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Fax: +51.17057182
Registrant Email: 3e28a08302c344f98fcd3046494925d1.protect@whoisguard.com

Registry Admin ID:
Admin Name: WhoisGuard Protected
Admin Organization: WhoisGuard, Inc.
Admin Street: P.O. Box 0823-03411
Admin City: Panama
Admin State/Province: Panama
Admin Postal Code:
Admin Country: PA
Admin Phone: +507.8365503
Admin Fax: +51.17057182
Admin Email: 3e28a08302c344f98fcd3046494925d1.protect@whoisguard.com

Registry Tech ID:
Tech Name: WhoisGuard Protected
Tech Organization: WhoisGuard, Inc.
Tech Street: P.O. Box 0823-03411
Tech City: Panama
Tech State/Province: Panama
Tech Postal Code:
Tech Country: PA
Tech Phone: +507.8365503
Tech Fax: +51.17057182

TTech Email: 3e28a08302c344f98fcd3046494925d1.protect@whoisguard.com

Name Server: pdns1.registrar-servers.com
Name Server: pdns2.registrar-servers.com
DNSSEC: unsigned

URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2017-08-30T11:31:20.81Z <<<

WhoIs ScamExperts.com

scamFRAUDalert see it appropriate to issue this ALERT as consumers have reported that Alert_logo.pngthey have been contacted by phone by individuals with foreign accents regarding complaints online removal service being offered. The caller requested that consumers immediately contact them to remove complaints.

We visited the website scamexperts.com and see that they recommended consumer filed complaints on ScamGuard.com.

The WhoIs information below says the Registrant Name: Boris Razmiki.
ScamExperts.com and ScamGuard as well as Angrycitizen.com and reportscam.com all share the same Google Publisher ID:6306449039720879.
They are all own by Marketing Space LLC a timeshare marketing group whose addresses are below:
340 S Lemon Ave Walnut, CA 91789
2007 E Robinson St Orlando, FL 32803


scamexperts
screencapture-scamexperts-about-1504108037393


Address lookup
canonical name :scamexperts.com
aliases
addresses :2400:cb00:2048:1::6819:f163
2400:cb00:2048:1::6819:f263
104.25.242.99
104.25.241.99
Domain Whois record

Queried whois.internic.net with “dom scamexperts.com

Domain Name: SCAMEXPERTS.COM
Registry Domain ID: 1426508589_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2017-04-26T07:28:22Z
Creation Date: 2008-03-19T03:53:38Z
Registry Expiry Date: 2018-03-19T03:53:38Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: 480-624-2505
Domain Status: ok https://icann.org/epp#ok
Name Server: DAWN.NS.CLOUDFLARE.COM
Name Server: MAX.NS.CLOUDFLARE.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2017-08-30T15:40:57Z <<<
Queried whois.godaddy.com with “scamexperts.com”…

Domain Name: scamexperts.com
Registrar URL: http://www.godaddy.com
Registrant Name: Boris Razmiki
Registrant Organization:

Name Server: DAWN.NS.CLOUDFLARE.COM
Name Server: MAX.NS.CLOUDFLARE.COM

DNSSEC: unsigned

For complete domain details go to:
http://who.godaddy.com/whoischeck.aspx?domain=scamexperts.com
Network Whois record

Queried whois.arin.net with “n 104.25.242.99″…

NetRange: 104.16.0.0 – 104.31.255.255
CIDR: 104.16.0.0/12
NetName: CLOUDFLARENET
NetHandle: NET-104-16-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Assignment
OriginAS: AS13335
Organization: Cloudflare, Inc. (CLOUD14)
RegDate: 2014-03-28
Updated: 2017-02-17
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Ref: https://whois.arin.net/rest/net/NET-104-16-0-0-1

OrgName: Cloudflare, Inc.
OrgId: CLOUD14
Address: 101 Townsend Street
City: San Francisco
StateProv: CA
PostalCode: 94107
Country: US
RegDate: 2010-07-09
Updated: 2017-02-17
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Ref: https://whois.arin.net/rest/org/CLOUD14

OrgNOCHandle: NOC11962-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-650-319-8930
OrgNOCEmail: noc@cloudflare.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOC11962-ARIN

OrgTechHandle: ADMIN2521-ARIN
OrgTechName: Admin
OrgTechPhone: +1-650-319-8930
OrgTechEmail: admin@cloudflare.com
OrgTechRef: https://whois.arin.net/rest/poc/ADMIN2521-ARIN

OrgAbuseHandle: ABUSE2916-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-650-319-8930
OrgAbuseEmail: abuse@cloudflare.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE2916-ARIN

RNOCHandle: NOC11962-ARIN
RNOCName: NOC
RNOCPhone: +1-650-319-8930
RNOCEmail: noc@cloudflare.com
RNOCRef: https://whois.arin.net/rest/poc/NOC11962-ARIN

RAbuseHandle: ABUSE2916-ARIN
RAbuseName: Abuse
RAbusePhone: +1-650-319-8930
RAbuseEmail: abuse@cloudflare.com
RAbuseRef: https://whois.arin.net/rest/poc/ABUSE2916-ARIN

RTechHandle: ADMIN2521-ARIN
RTechName: Admin
RTechPhone: +1-650-319-8930
RTechEmail: admin@cloudflare.com
RTechRef: https://whois.arin.net/rest/poc/ADMIN2521-ARIN

  1. 855-550-3722
  2. 937-660-4045
  3. 636-224-3292
  4. 805-681-4986

 

scamFRAUDalert.ORG cybersquatting WARNING

A Cybercriminal has registered one of our domain name scamFRAUDalert.org and isshutterstock_344117816-1 hijacking indexed urls  of ours and redirecting traffic. Essentially what this CRIMINAL (samirnet2@gmail.com) is doing is to hijack scamFRAUDaler.org urls and  twitter URLs redirecting traffic

scamFRAUDalert.org
REDIRECT WEB TRAFFIC

To MALWARE INFESTATION sites

sfa-for sale.png

whoismark_

We were able to identify the criminal publisher ID as Pub-2955686772232536. This practice is known as cybersquatting.

Cybersquatting is a common practice online. Stealing brand names via registering domains or hijacking links or urls and redirecting traffics.

scamFRAUDalert is no exception. What is increasing becoming annoying is the amount of interest in our domain name. Dozens of so called scam ALERT sites have emerged. A cyber criminal has purchased the domain name scamfraudalert.org and is actively attempting to infect as many computers as possible.

SCAMMERS  have reinvented themselves to now providing ALERTS in all world to confused, muddy and discredit legitimate scam sites as ours.

Cybersquatting is a practice of registering, selling or using a domain name with the intent of profiting from the goodwill of someone else’s trademark. It generally refers to the practice of buying up domain names that use the names of existing businesses with the intent to sell the names for a profit to those businesses.

Below is the latest attempt of this squatter – URL discarded t.co / iB1oliNuVY
SFA_org_T.co Squatter
You get redirected to a Malware Infested Site
SFA_org_T.co Squatter2

Read About the Phishing and Malware Expedition with domain scamFRAUDalert.org (screenshot below)

SFA_phishinggoogle-translate-1504195331710
SFA_Google_For SALE


screencapture-google-search-1507908626744
t.co_ibolinuvy=malware3
t.co_ibolinuvy=malware2


Domain Whois record
Queried whois.internic.net with “dom scamfraudalerts.com”…

Domain Name: SCAMFRAUDALERTS.COM
Registry Domain ID: 2096067633_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namebright.com
Registrar URL: http://www.NameBright.com
Updated Date: 2017-02-08T13:08:54Z
Creation Date: 2017-02-07T19:14:41Z
Registry Expiry Date: 2018-02-07T19:14:41Z
Registrar: DropCatch.com 808 LLC
Registrar IANA ID: 2567
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: NSG1.NAMEBRIGHTDNS.COM
Name Server: NSG2.NAMEBRIGHTDNS.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2017-08-30T08:44:49Z <<<


Address lookup
canonical name:scamfraudalert.org

aliases
addresses:192.184.12.62
Domain Whois record

Queried whois.publicinterestregistry.net with “scamfraudalert.org”…

Domain Name: SCAMFRAUDALERT.ORG
Registry Domain ID: D402200000001715160-LROR
Registrar WHOIS Server:
Registrar URL: http://www.sitename.com
Updated Date: 2017-05-04T03:46:53Z
Creation Date: 2017-03-04T14:30:24Z
Registry Expiry Date: 2018-03-04T14:30:24Z
Registrar Registration Expiration Date:
Registrar: SiteName Ltd.
Registrar IANA ID: 437
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Reseller:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited

Registry Registrant ID: C136922651-LROR
Registrant Name: Domain Manager
Registrant Organization: samirnet -domain names for sale
Registrant Street: Flat No. 48 Cunningham Apts Edward Road
Registrant City: Bangalore
Registrant State/Province:
Registrant Postal Code: 560052
Registrant Country: IN
Registrant Phone: +91.802260640
Registrant Email: samirnet2@gmail.com

Registry Admin ID: C136922651-LROR
Admin Name: Domain Manager
Admin Organization: samirnet -domain names for sale
Admin Street: Flat No. 48 Cunningham Apts Edward Road
Admin City: Bangalore
Admin State/Province:
Admin Postal Code: 560052
Admin Country: IN
Admin Phone: +91.802260640
Admin Email: samirnet2@gmail.com

Registry Tech ID: C136922651-LROR
Tech Name: Domain Manager
Tech Organization: samirnet -domain names for sale
Tech Street: Flat No. 48 Cunningham Apts Edward Road
Tech City: Bangalore
Tech State/Province:
Tech Postal Code: 560052
Tech Country: IN
Tech Phone: +91.802260640

Tech Email: samirnet2@gmail.com
Name Server: NS15.ABOVE.COM
Name Server: NS16.ABOVE.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of WHOIS database: 2017-08-30T08:45:24Z


from: James Ashmore [abuse@trellian.com]
to: scamFRAUDalert [scamfraudalert@gmail.com]
______________________________________
Hello,

Thank you for your message.

Acknowledgement that written correspondence has been received.

Above.com Monetization AutoPilot is a routing/redirection service only; we do not host any of the content of the domain/s or IP addresses in question. As this is the case, we dispute any claim of hosting any copyrighted content.

As we are not the governing body for these disputes, any cancellation of services will be done in accordance to the outcome of a UDRP from WIPO.

Kind regards,
James Ashmore
__________________________
Trellian.com Abuse Team :abuse@trellian.com
USA: +1 310-736-4230
Australia::+61- 3-9589-7946
http://www.above.com
http://www.above.com


AUSTRALIA

Office Hours:
M-F 9:00 am to 5:00 pm
Australian Eastern Std Time

Phone: + 61-3-9589-7946
Fax: + 61-3-9589-7951

USA Office
Trellian Direct Search Network
Above.com
5220 Pacific Concourse Dr
Suite 100
Los Angeles, CA 90045

WhoIs hashblock.net

FINRA say High Yield Investment Program known as HYIP are unregistered investments created and FINRAtouted by unlicensed individuals. Typically offered through slick (and sometimes not-so-slick) websites, HYIPs dangle the contradictory promises of safety coupled with high, unsustainable rates of return 20%, 30%, 100% or more percent per day—through vague or murky trading strategies.

ABOUT THE COMPANY
Hash Block Limited has been offering a modern and safe asset management service in the Bitcoin mining market and cryptocurrency trading since 2015. During its existence, the company has established itself as a reliable financial partner, which focuses on long-term and fruitful cooperation. The quality of customer service, compliance with the principles of market trading and the actual fulfillment of promises on our part are the hallmark of Hash Block Limited. We offer our clients the opportunity to receive a stable daily income with instant profit withdrawal.

hashblock.png
Address lookup

canonical name: hashblock.net
aliases
addresses : 91.220.101.13
Domain Whois record

Queried whois.internic.net with “dom hashblock.net

Domain Name: HASHBLOCK.NET
Registry Domain ID: 2126790106_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2017-05-22T09:52:50Z
Creation Date: 2017-05-22T08:47:03Z
Registry Expiry Date: 2027-05-22T08:47:03Z
Registrar: NameCheap Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Domain Status: clientTransferProhibited

Name Server: NS12.STRONGNS.NET
Name Server: NS26.STRONGNS.NET
Name Server: NS5.STRONGNS.NET
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy
>>> Last update of whois database: 2017-08-26T21:42:38Z <<<
Queried whois.namecheap.com with "hashblock.net"…

Domain name: hashblock.net
Registry Domain ID: 2126790106_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com

Updated Date: 2017-05-22T09:52:50.00Z
Creation Date: 2017-05-22T08:47:03.00Z

Registrar Registration Expiration Date: 2027-05-22T08:47:03.00Z
Registrar: NAMECHEAP INC
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.6613102107
Reseller: NAMECHEAP INC
Domain Status: clientTransferProhibited
Domain Status: addPeriod

Registry Registrant ID:
Registrant Name: Stuart Goodman
Registrant Organization: Hash Block Limited
Registrant Street: Phoenix Business Park, Hazel Court
Registrant City: York
Registrant State/Province: North Yorkshire
Registrant Postal Code: YO10 3DQ
Registrant Country: GB
Registrant Phone: +44.1904211083
Registrant Fax: +44.1904211083
Registrant Email: admin@hashblock.net

Registry Admin ID:
Admin Name: Stuart Goodman
Admin Organization: Hash Block Limited
Admin Street: Phoenix Business Park, Hazel Court
Admin City: York
Admin State/Province: North Yorkshire
Admin Postal Code: YO10 3DQ
Admin Country: GB
Admin Phone: +44.1904211083
Admin Fax: +44.1904211083
Admin Email: admin@hashblock.net

Registry Tech ID:
Tech Name: Stuart Goodman
Tech Organization: Hash Block Limited
Tech Street: Phoenix Business Park, Hazel Court
Tech City: York
Tech State/Province: North Yorkshire
Tech Postal Code: YO10 3DQ
Tech Country: GB
Tech Phone: +44.1904211083
Tech Fax: +44.1904211083
Tech Email: admin@hashblock.net

Name Server: ns12.strongns.net
Name Server: ns26.strongns.net
Name Server: ns5.strongns.net

DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System

Last update of WHOIS database: 2017-08-26T08:42:44.01Z <<<
Network Whois record

Queried whois.ripe.net with "-B 91.220.101.13"…

Information related to '91.220.101.0 – 91.220.101.255'
Abuse contact for '91.220.101.0 – 91.220.101.255' is 'abuse@antiddos.biz'

inetnum: 91.220.101.0 – 91.220.101.255
netname: ANTIDDOS-NET2
country: NL
org: ORG-APL10-RIPE
admin-c: SM18795-RIPE
tech-c: SM18795-RIPE
status: ASSIGNED PI
mnt-by: MNT-ADDOS
notify: noc@antiddos.biz
mnt-by: RIPE-NCC-END-MNT
mnt-routes: MNT-ADDOS
mnt-domains: MNT-ADDOS
created: 2010-11-02T13:26:28Z
last-modified: 2017-03-29T20:23:22Z
source: RIPE
sponsoring-org: ORG-DL91-RIPE

organisation: ORG-APL10-RIPE
org-name: Antiddos Protections Ltd
org-type: OTHER
address: c/o Eastbiz Corp.
address: 2964 Columbia St.
address: Suite
address: Torrance, CA 90503
address: USA
phone: +3(712) 225 30 94
fax-no: +3(712) 225 30 94
e-mail: info@antiddos.biz
abuse-c: AR18411-RIPE
abuse-mailbox: abuse@antiddos.biz
notify: noc@antiddos.biz
remarks: http://antiddos.biz
admin-c: SM18795-RIPE
tech-c: SM18795-RIPE
mnt-ref: MNT-ADDOS
mnt-by: MNT-ADDOS
created: 2012-08-20T13:14:50Z
last-modified: 2014-02-20T10:40:57Z
source: RIPE

person: Sergej Matros
e-mail: info@antiddos.biz
address: c/o Eastbiz Corp.
address: 2964 Columbia St.
address: Suite #27307
address: Torrance, CA 90503
address: USA
phone: +380954098433
abuse-mailbox: abuse@antiddos.biz
nic-hdl: SM18795-RIPE
mnt-by: MNT-ADDOS
created: 2012-09-13T10:02:35Z
last-modified: 2012-09-13T10:05:12Z
source: RIPE

% Information related to '91.220.101.0/24AS49704'

route: 91.220.101.0/24
descr: DC2
origin: AS49704
mnt-by: MNT-ADDOS
notify: noc@antiddos.eu
created: 2010-11-17T14:39:16Z
last-modified: 2012-09-13T11:52:43Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.89.2 (HEREFORD)
DNS records

name class type data time to live
hashblock.net IN SOA
server: ns5.strongns.net
email: root@strongns.net
serial: 1456855309
refresh: 1800
retry: 1200
expire: 259200
minimum ttl: 86400
600s (00:10:00)
hashblock.net IN NS ns12.strongns.net 600s (00:10:00)
hashblock.net IN NS ns26.strongns.net 600s (00:10:00)
hashblock.net IN NS ns5.strongns.net 600s (00:10:00)
hashblock.net IN A 91.220.101.13 600s (00:10:00)
hashblock.net IN MX
preference: 10
exchange: mail.hashblock.net
600s (00:10:00)
13.101.220.91.in-addr.arpa IN PTR srv-s13.antiddos.eu 604800s (7.00:00:00)
101.220.91.in-addr.arpa IN NS ns3.antiddos.eu 604800s (7.00:00:00)
101.220.91.in-addr.arpa IN NS ns1.antiddos.eu 604800s (7.00:00:00)
101.220.91.in-addr.arpa IN NS ns2.antiddos.eu 604800s (7.00:00:00)
101.220.91.in-addr.arpa IN SOA
server: ns1.antiddos.eu
email: root@antiddos.eu
serial: 2012032902
refresh: 10800
retry: 900
expire: 604800
minimum ttl: 86400

WATCH ADS MAKE MONEY (North Hollywood)

You can work from home or anywhere you have access to a computer!
Get paid through paypal or directly to your bank account.
Really simple and you can make money today!

do NOT contact me with unsolicited services or offers
post id: 6268869367 posted: 9 days ago
watch and make money
WATCH ADS MAKE MONEY

This is what the Securities & Exchange Commission have to say:

High-Yield Investment Programs (HYIP) are unregistered investments typically run by unlicensed individuals – and they are often frauds. The hallmark of an HYIP scam is the promise of incredible returns at little or no risk to the investor. A HYIP website might promise annual (or even monthly, weekly, or daily!) returns of 30 or 40 percent – or more. Some of these scams may use the term “prime bank” program. If you are approached online to invest in one of these, you should exercise extreme caution – they are likely frauds.

This is what Financial Industry Regulatory Authority (FINRA) have to say:

High-yield investment programs (HYIPs) are unregistered investments created and touted by unlicensed individuals. Typically offered through slick (and sometimes not-so-slick) websites, HYIPs dangle the contradictory promises of safety coupled with high, unsustainable rates of return—20, 30, 100 or more percent per day—through vague or murky trading strategies. According to law enforcement cases, many operate as Ponzi schemes, using payments from today’s recruits to pay “interest payments” to yesterday’s investors or “referral” fees to those who recruit new members. The Federal Bureau of Investigation reported that the number of new investigations in this area during fiscal year 2009 increased 105 percent over fiscal year 200

Below are some .club we’ve identified:

  1. bezmoney.club
  2. BezMoney.club
  3. CepMoney.club
  4. Datmoney.club
  5. DavMoney.club
  6. DobMoney.club
  7. DobMoney.club
  8. dollarjob.club
  9. DonMoney.club
  10. DuhMoney.club
  11. DuhMoney.club
  12. DumMoney.club
  13. DuzMoney.club
  14. FumDengi.club
  15. GarMoney.club
  16. GasMoney.club
  17. GatMoney.club
  18. GecMoney.club
  19. GecMoney.club
  20. HatMoney.club
  21. HeyMoney.club
  22. hudmoney.club
  23. HudMoney.club
  24. KetMoney.club
  25. KopMoney.club
  26. KurMoney.club
  27. MakMoney.club
  28. MasMoney.club
  29. MesMoney.club
  30. MevMoney.club
  31. MopMoney.club
  32. Netduty.club
  33. NocMoney.club
  34. normoney.club
  35. NorMoney.club
  36. NowMoney.club
  37. NowMoney.club
  38. NucMoney.club
  39. PatMoney.club
  40. pefmoney.club
  41. PefMoney.club
  42. PevMoney.club
  43. prymoney.club
  44. PryMoney.club
  45. ptrvipclub.com
  46. PurMoney.club
  47. RazMoney.club
  48. RazMoney.club
  49. realmonitor.club
  50. RegMoney.club
  51. RoxMoney.club
  52. RugMoney.club
  53. RunMoney.club
  54. RunMoney.club
  55. RuzMoney.club
  56. Ruzmoney.club
  57. SagMoney.club
  58. SerMoney.club
  59. SlyMoney.club
  60. SoxMoney.club
  61. Submoney.club
  62. tafmoney.club
  63. TafMoney.club
  64. TaskMine.club
  65. TazMoney.club
  66. TefMoney.club
  67. TheInviteClub.com
  68. TokMoney.club
  69. TosMoney.club
  70. TrustPay.club
  71. VadMoney.club
  72. VamMoney.club
  73. VapMoney.club
  74. VegMoney.club
  75. VodMoney.club
  76. wevmoney.club
  77. WevMoney.club
  78. WexMoney.club
  79. WhoMoney.club
  80. WhoMoney.club
  81. WotMoney.club
  82. ZatMoney.club
  83. ZekMoney.club
  84. ZumMoney.club

RazMoney.club ~ NowMoney.club

scamFRAUDalert see it appropriate to issue this ALERT as scammers have now migrated to the TLD .club to entice investors. It used to be called High-Yield Investment Program (HYIP)and it’s now http://www.something.club.
2017-08-26-11-28-ruzmoney.club
This is what the Securities & Exchange Commission have to say:

High-Yield Investment Programs (HYIP) are unregistered investments typically run by unlicensed individuals – and they are often frauds. The hallmark of an HYIP scam is the promise of incredible returns at little or no risk to the investor. A HYIP website might promise annual (or even monthly, weekly, or daily!) returns of 30 or 40 percent – or more. Some of these scams may use the term “prime bank” program. If you are approached online to invest in one of these, you should exercise extreme caution – they are likely frauds.

This is what Financial Industry Regulatory Authority (FINRA) have to say:

High-yield investment programs (HYIPs) are unregistered investments created and touted by unlicensed individuals. Typically offered through slick (and sometimes not-so-slick) websites, HYIPs dangle the contradictory promises of safety coupled with high, unsustainable rates of return—20, 30, 100 or more percent per day—through vague or murky trading strategies. According to law enforcement cases, many operate as Ponzi schemes, using payments from today’s recruits to pay “interest payments” to yesterday’s investors or “referral” fees to those who recruit new members. The Federal Bureau of Investigation reported that the number of new investigations in this area during fiscal year 2009 increased 105 percent over fiscal year 200

Below are some .club we’ve identified:

  1. bezmoney.club
  2. BezMoney.club
  3. CepMoney.club
  4. Datmoney.club
  5. DavMoney.club
  6. DobMoney.club
  7. DobMoney.club
  8. dollarjob.club
  9. DonMoney.club
  10. DuhMoney.club
  11. DuhMoney.club
  12. DumMoney.club
  13. DuzMoney.club
  14. FumDengi.club
  15. GarMoney.club
  16. GasMoney.club
  17. GatMoney.club
  18. GecMoney.club
  19. GecMoney.club
  20. HatMoney.club
  21. HeyMoney.club
  22. hudmoney.club
  23. HudMoney.club
  24. KetMoney.club
  25. KopMoney.club
  26. KurMoney.club
  27. MakMoney.club
  28. MasMoney.club
  29. MesMoney.club
  30. MevMoney.club
  31. MopMoney.club
  32. Netduty.club
  33. NocMoney.club
  34. normoney.club
  35. NorMoney.club
  36. NowMoney.club
  37. NowMoney.club
  38. NucMoney.club
  39. PatMoney.club
  40. pefmoney.club
  41. PefMoney.club
  42. PevMoney.club
  43. prymoney.club
  44. PryMoney.club
  45. ptrvipclub.com
  46. PurMoney.club
  47. RazMoney.club
  48. RazMoney.club
  49. realmonitor.club
  50. RegMoney.club
  51. RoxMoney.club
  52. RugMoney.club
  53. RunMoney.club
  54. RunMoney.club
  55. RuzMoney.club
  56. Ruzmoney.club
  57. SagMoney.club
  58. SerMoney.club
  59. SlyMoney.club
  60. SoxMoney.club
  61. Submoney.club
  62. tafmoney.club
  63. TafMoney.club
  64. TaskMine.club
  65. TazMoney.club
  66. TefMoney.club
  67. TheInviteClub.com
  68. TokMoney.club
  69. TosMoney.club
  70. TrustPay.club
  71. VadMoney.club
  72. VamMoney.club
  73. VapMoney.club
  74. VegMoney.club
  75. VodMoney.club
  76. wevmoney.club
  77. WevMoney.club
  78. WexMoney.club
  79. WhoMoney.club
  80. WhoMoney.club
  81. WotMoney.club
  82. ZatMoney.club
  83. ZekMoney.club
  84. ZumMoney.club

WhoIs lowrateloanlenders.com ~ 410-200-8987

scamFRAUDalert see it appropriate to issue this ALERT as consumers have reported they have been contacted via text messages and phone calls regarding loans from
lowrateloanlenders.com.

It has also been reported that the area code (410)have become the primary area codes for being used by scammers. Listed below are some numbers we’ve identified.

410-200-8767 410-200-8987 410-200-0500
410-200-4531 410-200-9020 410-200-9036
410-200-9044 410-200-9487 410-200-9488
410-200-9558 410-200-9871 410-200-9877
410-200-9878 410-200-8987 410-200-9877

Address lookup
canonical name :lowrateloanlenders.com
aliases
addresses :203.124.117.1
Domain Whois record

Queried whois.internic.net with “dom lowrateloanlenders.com

Domain Name: LOWRATELOANLENDERS.COM
Registry Domain ID: 1745868400_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com

Updated Date: 2017-08-02T18:48:17Z
Creation Date: 2012-09-18T15:28:28Z
Registry Expiry Date: 2017-09-18T15:28:28Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146

Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: 480-624-2505

Name Server: NS75.DOMAINCONTROL.COM
Name Server: NS76.DOMAINCONTROL.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint

>>> Last update of whois database: 2017-08-26T17:14:34Z
Queried whois.godaddy.com with “lowrateloanlenders.com”…

Domain Name: LOWRATELOANLENDERS.COM
Registrar URL: http://www.godaddy.com
Registrant Name: James Will
Registrant Organization:
Name Server: NS75.DOMAINCONTROL.COM
Name Server: NS76.DOMAINCONTROL.COM
DNSSEC: unsigned

For complete domain details go to:
http://who.godaddy.com/whoischeck.aspx?domain=LOWRATELOANLENDERS.COM
Network Whois record

Queried whois.apnic.net with “203.124.117.1
Information related to ‘203.124.96.0 – 203.124.127.255’
Abuse contact for ‘203.124.96.0 – 203.124.127.255’ is ‘abuse@godaddy.com’

inetnum: 203.124.96.0 – 203.124.127.255
netname: GODADDY-NET-AP
descr: Godaddy.com
descr: 15 Pioneer Walk, Pioneer Hub, #03-03, Singapore 627753
country: SG
admin-c: GNA32-AP
tech-c: GNA32-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-GODADDY-NET-SG
mnt-routes: MAINT-GODADDY-NET-SG
mnt-irt: IRT-GODADDY-NET-SG
remarks: ——————————————————–
changed: hm-changed@apnic.net 20100419
changed: hm-changed@apnic.net 20120123
changed: hm-changed@apnic.net 20151209
changed: hm-changed@apnic.net 20160426
source: APNIC

irt: IRT-GODADDY-NET-SG
address: 15 Pioneer Walk, Pioneer Hub, #03-03, Singapore 627753
e-mail: abuse@godaddy.com
abuse-mailbox: abuse@godaddy.com
admin-c: GNA32-AP
tech-c: GNA32-AP
auth: # Filtered
mnt-by: MAINT-GODADDY-NET-SG
changed: abuse@godaddy.com 20101221
changed: hm-changed@apnic.net 20151209
changed: hm-changed@apnic.net 20160426
source: APNIC

role: GODADDYCOM – network administrator
address: 15 Pioneer Walk, Pioneer Hub, #03-03, Singapore 627753
country: SG
phone: +011-1-480-505-8800
remarks: extension number 4673
e-mail: noc@godaddy.com
admin-c: GNA32-AP
tech-c: GNA32-AP
nic-hdl: GNA32-AP
mnt-by: MAINT-GODADDY-NET-SG
changed: hm-changed@apnic.net 20100226
changed: hm-changed@apnic.net 20151209
changed: hm-changed@apnic.net 20160426
source: APNIC

This query was served by the APNIC Whois Service version 1.88.15-37 (WHOIS-US3)
DNS records

name class type data time to live
lowrateloanlenders.com IN A 203.124.117.1 3600s (01:00:00)
lowrateloanlenders.com IN NS ns75.domaincontrol.com 3600s (01:00:00)
lowrateloanlenders.com IN NS ns76.domaincontrol.com 3600s (01:00:00)
lowrateloanlenders.com IN SOA
server: ns75.domaincontrol.com
email: dns@jomax.net
serial: 2017080390
refresh: 28800
retry: 7200
expire: 604800
minimum ttl: 600
3600s (01:00:00)
lowrateloanlenders.com IN MX
preference: 10
exchange: mailstore1.secureserver.net
3600s (01:00:00)
lowrateloanlenders.com IN MX
preference: 0
exchange: smtp.secureserver.net
3600s (01:00:00)
1.117.124.203.in-addr.arpa IN PTR sg2nlhg560c1560.shr.prod.sin2.secureserver.net 3600s (01:00:00)
117.124.203.in-addr.arpa IN SOA
server: cns1.secureserver.net
email: dns@jomax.net
serial: 2015070701
refresh: 3600
retry: 600
expire: 1209600
minimum ttl: 3600
3600s (01:00:00)
117.124.203.in-addr.arpa IN NS cns1.secureserver.net 3600s (01:00:00)
117.124.203.in-addr.arpa IN NS cns2.secureserver.net 3600s (01:00:00)

WhoIs Bustedescorts.com ~ escortspolice.com

scamFRAUDalert see it appropriate to issue this ALERT as reports online suggest the operator(s) are scraping content from adult entertaining sites along with falsely accusing innocent individuals of being part of the sex industry.

This does not surprised us as we are seeing more and more of these insidious sites being erected online. The following sites below are affiliated with the site’s operator. A records are set to 104.24.0.89:

  1. bodyrubhistory.com
  2. escortspolice.com
  3. Escortsting.com
  4. Escortpolice.com
  5. Bustedescorts.com
  6. Bustedescort.com

-www-bustedescorts-com.png
-www-escortspolice-com
Address lookup
canonical name :escortpolice.com
aliases
addresses :2400:cb00:2048:1::681b:940e
2400:cb00:2048:1::681b:950e
104.27.149.14
104.27.148.14
Domain Whois record

Queried whois.internic.net with “dom Escortpolice.com”…

Domain Name: ESCORTPOLICE.COM
Registry Domain ID: 1921862432_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2017-06-19T00:50:56Z
Creation Date: 2015-04-21T02:58:58Z
Registry Expiry Date: 2019-04-21T02:58:58Z
Registrar: eNom, Inc.
Registrar IANA ID: 48
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Domain Status: clientTransferProhibited
Name Server: MATT.NS.CLOUDFLARE.COM
Name Server: VITA.NS.CLOUDFLARE.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint

Last update of whois database: 2017-08-20T21:41:04Z
Queried whois.enom.com with “Escortpolice.com”…

Domain Name: ESCORTPOLICE.COM
Registry Domain ID: 1921862432_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2015-04-20T19:59:00.00Z
Creation Date: 2015-04-21T02:59:00.00Z
Registrar Registration Expiration Date: 2019-04-21T02:59:00.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Fax: +51.17057182
Registrant Email: BF8A0833D123456C9A2E02A28FDB55DD.PROTECT@WHOISGUARD.COM

Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Fax: +51.17057182
Admin Email: BF8A0833D123456C9A2E02A28FDB55DD.PROTECT@WHOISGUARD.COM

Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Fax: +51.17057182
Tech Email: BF8A0833D123456C9A2E02A28FDB55DD.PROTECT@WHOISGUARD.COM

Name Server: MATT.NS.CLOUDFLARE.COM
Name Server: VITA.NS.CLOUDFLARE.COM

DNSSEC: unSigned
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252982646
URL of the ICANN WHOIS Data Problem Reporting System:

Last update of WHOIS database: 2015-04-20T19:59:00.00Z
Network Whois record

Queried whois.arin.net with “n 104.27.149.14″…

NetRange: 104.16.0.0 – 104.31.255.255
CIDR: 104.16.0.0/12
NetName: CLOUDFLARENET
NetHandle: NET-104-16-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Assignment
OriginAS: AS13335
Organization: Cloudflare, Inc. (CLOUD14)
RegDate: 2014-03-28
Updated: 2017-02-17
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Ref: https://whois.arin.net/rest/net/NET-104-16-0-0-1

OrgName: Cloudflare, Inc.
OrgId: CLOUD14
Address: 101 Townsend Street
City: San Francisco
StateProv: CA
PostalCode: 94107
Country: US
RegDate: 2010-07-09
Updated: 2017-02-17
Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse
Ref: https://whois.arin.net/rest/org/CLOUD14

OrgTechHandle: ADMIN2521-ARIN
OrgTechName: Admin
OrgTechPhone: +1-650-319-8930
OrgTechEmail: admin@cloudflare.com
OrgTechRef: https://whois.arin.net/rest/poc/ADMIN2521-ARIN

OrgNOCHandle: NOC11962-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-650-319-8930
OrgNOCEmail: noc@cloudflare.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOC11962-ARIN

OrgAbuseHandle: ABUSE2916-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-650-319-8930
OrgAbuseEmail: abuse@cloudflare.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE2916-ARIN

RNOCHandle: NOC11962-ARIN
RNOCName: NOC
RNOCPhone: +1-650-319-8930
RNOCEmail: noc@cloudflare.com
RNOCRef: https://whois.arin.net/rest/poc/NOC11962-ARIN

RAbuseHandle: ABUSE2916-ARIN
RAbuseName: Abuse
RAbusePhone: +1-650-319-8930
RAbuseEmail: abuse@cloudflare.com
RAbuseRef: https://whois.arin.net/rest/poc/ABUSE2916-ARIN

RTechHandle: ADMIN2521-ARIN
RTechName: Admin
RTechPhone: +1-650-319-8930
RTechEmail: admin@cloudflare.com
RTechRef: https://whois.arin.net/rest/poc/ADMIN2521-ARIN
DNS records

name class type data time to live
escortpolice.com IN HINFO
CPU: ANY obsoleted
OS: See draft-ietf-dnsop-refuse-any
3789s (01:03:09)
escortpolice.com IN NS matt.ns.cloudflare.com 86400s (1.00:00:00)
escortpolice.com IN NS vita.ns.cloudflare.com 86400s (1.00:00:00)
14.149.27.104.in-addr.arpa IN HINFO
CPU: ANY obsoleted
OS: See draft-ietf-dnsop-refuse-any
3789s (01:03:09)
e.0.4.9.b.1.8.6.0.0.0.0.0.0.0.0.1.0.0.0.8.4.0.2.0.0.b.c.0.0.4.2.ip6.arpa IN HINFO
CPU: ANY obsoleted
OS: See draft-ietf-dnsop-refuse-any
3789s (01:03:09)
0.0.b.c.0.0.4.2.ip6.arpa IN NS chloe.ns.cloudflare.com 73385s (20:23:05)
0.0.b.c.0.0.4.2.ip6.arpa IN NS scott.ns.cloudflare.com 73385s (20:23:05)
— end —
URL for this output | return to CentralOps.net, a service of Hexillion


Queried whois.internic.net with “dom Bustedescorts.com”…

Domain Name: BUSTEDESCORTS.COM
Registry Domain ID: 2043924716_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2017-06-29T07:21:33Z
Creation Date: 2016-07-18T09:07:41Z
Registry Expiry Date: 2019-07-18T09:07:41Z
Registrar: eNom, Inc.
Registrar IANA ID: 48
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Domain Status: clientTransferProhibited

Name Server: MATT.NS.CLOUDFLARE.COM
Name Server: VITA.NS.CLOUDFLARE.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2017-08-20T21:22:59Z <> Last update of WHOIS database: 2016-07-18T02:07:41.00Z <<<

WhoIs Cenkings Capital ~ cenkingscapital.com

scamFRAUDalert see it appropriate to issue this ALERT as this may be a fraudulent website. The whois information below differ from the address listed on site.

CENKINGSCAPITAL.COM
1st Floor, 2911 Nixon Avenue
Knoxville, TN
Knoxville Tennessee USA

-cenkingscapital-com.png

Address lookup
canonical name: cenkingscapital.com
aliases
addresses :185.186.52.19
Domain Whois record

Queried whois.internic.net with “dom cenkingscapital.com

Domain Name: CENKINGSCAPITAL.COM
Registry Domain ID: 2099385191_DOMAIN_COM-VRSN

Registrar WHOIS Server: whois.domain.com
Registrar URL: http://www.domain.com

Updated Date: 2017-03-10T19:49:20Z
Creation Date: 2017-02-21T15:15:08Z

Registry Expiry Date: 2018-02-21T15:15:08Z
Registrar: Domain.com, LLC
Registrar IANA ID: 886
Registrar Abuse Contact Email: compliance@domain-inc.net
Registrar Abuse Contact Phone: 602-226-2389
Domain Status: ok https://icann.org/epp#ok
Name Server: NS1.DOMAIN.COM
Name Server: NS2.DOMAIN.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint

>>> Last update of whois database: 2017-08-20T21:04:11Z <<<

Queried whois.domain.com with "cenkingscapital.com"…

Domain Name: CENKINGSCAPITAL.COM
Domain ID: 2099385191_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.domain.com
Registrar URL: http://www.domain.com
Updated Date: 2017-03-10T19:47:56Z
Creation Date: 2017-02-21T15:15:08Z
Registrar Registration Expiration Date: 2018-02-21T15:15:08Z
Registrar: Domain.com, LLC
Registrar IANA ID: 886
Registrar Abuse Contact Email: compliance@domain-inc.net
Registrar Abuse Contact Phone: +1.6027165396
Reseller: Domain.com
Domain Status: ok https://icann.org/epp#ok
Registry Registrant ID:
Registrant Name: Jeffrey Mccaffrey
Registrant Organization: Jeffrey Mccaffrey
Registrant Street: 14 louisille avenue
Registrant City: bamberg county
Registrant State/Province: SC
Registrant Postal Code: 29003
Registrant Country: US
Registrant Phone: +1.8038677591
Registrant Email: jeffreykmccaffrey@gmail.com

Registry Admin ID:
Admin Name: Jeffrey Mccaffrey
Admin Organization: Jeffrey Mccaffrey
Admin Street: 14 louisille avenue
Admin City: bamberg county
Admin State/Province: SC
Admin Postal Code: 29003
Admin Country: US
Admin Phone: +1.8038677591
Admin Email: jeffreykmccaffrey@gmail.com

Registry Tech ID:
Tech Name: Jeffrey Mccaffrey
Tech Organization: Jeffrey Mccaffrey
Tech Street: 14 louisille avenue
Tech City: bamberg county
Tech State/Province: SC
Tech Postal Code: 29003
Tech Country: US
Tech Phone: +1.8038677591
Tech Email: jeffreykmccaffrey@gmail.com

Name Server: NS2.DOMAIN.COM
Name Server: NS1.DOMAIN.COM

DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting

Last update of WHOIS database: 2017-03-10T19:47:56Z <<<
Network Whois record

Queried whois.ripe.net with "-B 185.186.52.19"…

% Information related to '185.186.52.0 – 185.186.52.255'

% Abuse contact for '185.186.52.0 – 185.186.52.255' is 'abuse@geniusguard.com'

inetnum: 185.186.52.0 – 185.186.52.255
netname: Genius-Security-Ltd
country: GB
admin-c: MB43264-RIPE
tech-c: MB43264-RIPE
status: ASSIGNED PA
mnt-by: GSLTD-MNT
created: 2017-01-28T07:01:46Z
last-modified: 2017-02-11T04:50:59Z
source: RIPE
geoloc: 51.530705 -0.093708
language: EN

person: Mohsen Binaei
address: 20-22 Wenlock Road
address: N1 7GU
address: London
address: UNITED KINGDOM
phone: +442037691442
nic-hdl: MB43264-RIPE
mnt-by: GSLTD-MNT
created: 2017-02-03T21:58:46Z
last-modified: 2017-02-03T22:00:46Z
source: RIPE

% Information related to '185.186.52.0/24AS206397'

route: 185.186.52.0/24
origin: AS206397
mnt-by: GSLTD-MNT
created: 2017-01-28T07:00:17Z
last-modified: 2017-02-03T22:26:21Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.89.2 (HEREFORD)
DNS records

DNS query for 19.52.186.185.in-addr.arpa returned an error from the server: NameError

name class type data time to live
cenkingscapital.com IN A 185.186.52.19 3600s (01:00:00)
cenkingscapital.com IN NS ns1.domain.com 3600s (01:00:00)
cenkingscapital.com IN NS ns2.domain.com 3600s (01:00:00)
cenkingscapital.com IN SOA
server: ns1.domain.com
email: dnsadmin@domain.com
serial: 2017022175
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
cenkingscapital.com IN MX
preference: 30
exchange: mx.cenkingscapital.com
3600s (01:00:00)
cenkingscapital.com IN TXT v=spf1 ip4:66.96.128.0/18 ?all 3600s (01:00:00)

COLOCATION AMERICA INC VS UNITEDLAYER LLC ~ BC588400

Case Summary

Case Number: BC588400
COLOCATION AMERICA INC VS UNITEDLAYER LLC
Filing Date: 07/17/2015
Case Type: Breach Contract/Warranty-Negligence (General Jurisdiction)
Status: Dismissed – Other 08/11/2017

ColocationAmerica


Parties
AHDOOT ALBERT – Cross-Defendant

BREMER WHYTE BROWN & O’MEARA LLP – Attorney for Cross-Defendant
COLOCATION AMERICA INC. – Plaintiff and Cross-Defendant
DOES 1 TO 10 – Defendant/Respondent
GORDON & REES LAW OFFICES OF – Attorney for Cross-Complainant
MACHLER BRIAN P. – Attorney for Cross-Complainant
MEYERSON LAWRENCE C. ESQ. – Former Attorney for Pltf & X-Deft
PHANSE ABHIJIT – Cross-Complainant
UNITEDLAYER LLC – Defendant and Cross-Complainant
WAINER MAURICE ESQ. – Atty for Plaintiff and Cross-Deft
Case Information | Party Information | Proceeding Information


Documents Filed (Filing dates listed in descending order)
Click on any of the below link(s) to see documents filed on or before the date indicated:
10/02/2015
08/11/2017 Request for Dismissal (WITH PREJUDICE AS TO ENTIRE ACTION OF ALL PARTIES & ALL CAUSES OF ACTION )
Filed by Attorney for Plaintiff/Petitioner
11/02/2016 Opposition Document (OPPOSITION TO MOTION FOR ATTORNEYS FEES )
Filed by Atty for Defendant and Cross-Compl
10/31/2016 Notice (NOTICE OF STATUS OF APPEAL )
Filed by Atty for Defendant and Cross-Compl
08/12/2016 Notice (OF DEFAULT ON APPEAL )
Filed by Clerk
08/05/2016 Notice of Designation of Record
Filed by Attorney for Appellant
08/04/2016 Statement-Case Management
Filed by Attorney for Cross-Defendant
08/03/2016 Statement-Case Management
Filed by Attorney for Defendant/Respondent
07/29/2016 Motion (FOR ATTORNEYS FEES )
Filed by Attorney for Cross-Defendant
07/27/2016 Notice-Case Management Conference
Filed by Attorney for Plaintiff/Petitioner
07/27/2016 Ntc to Atty re Notice of Appeal
Filed by Clerk
07/26/2016 Notice of Appeal
Filed by Attorney for Deft/Respnt
07/19/2016 Notice-Case Management Conference
Filed by Clerk
06/10/2016 Answer to Cross-Complaint
Filed by Attorney for Cross-Defendant
06/01/2016 Order (RULING ON ANTI-SLAPP MOTION )
Filed by Court
06/01/2016 Order (RULING ON X-DFTS DEMURRER )
Filed by Court
05/19/2016 Notice of Continuance
Filed by Atty for Plaintiff and Cross-Deft
05/17/2016 Reply to Motion (ANTI-SLAPP MOTION TO STRIKE )
Filed by Attorney for Cross-Defendant
05/17/2016 Reply to Motion (TO DEMURRER TO CROSS-COMPLAINT )
Filed by Attorney for Cross-Defendant
05/16/2016 Statement-Case Management
Filed by Attorney for Defendant/Respondent
05/11/2016 Opposition Document (TO SPECIAL MOTION TO STRIKE (ANTI-SLAPP) TO THE X-COMPLAINT )
Filed by Atty for Defendant and Cross-Compl
05/11/2016 Opposition Document (TO DEMURRER CROSS-COMPLAINT )
Filed by Atty for Defendant and Cross-Compl
05/09/2016 Statement-Case Management (FILED BY BREMER WHYTE BROWN & O’MEARA )
Filed by Attorney for Cross-Defendant
04/06/2016 Notice (NOTICE OF WITHDRAWAL OF CO-COUNSEL OF RECORD FOR PLAINTIFF AND CROSS-DEFENDANTS )
Filed by Atty for Plaintiff and Cross-Deft
11/13/2015 Statement-Case Management
Filed by Attorney for Defendant/Respondent
11/13/2015 Statement-Case Management
Filed by Atty for Plaintiff and Cross-Deft
Click on any of the below link(s) to see documents filed on or before the date indicated:
TOP 10/02/2015
10/02/2015 Notice (OF CASE MANAGEMENT CONFERENCE AND OSC )
Filed by Attorney for Plaintiff/Petitioner
09/21/2015 Demurrer (TO CROSS-COMPLAINT )
Filed by Atty for Plaintiff and Cross-Deft
09/10/2015 Notice of Change of Address
Filed by Atty for Plaintiff and Cross-Deft
08/18/2015 Summons Filed
Filed by Attorney for Cross-Complainant
08/18/2015 Answer to Complaint
Filed by Attorney for Defendant/Respondent
08/18/2015 Cross-complaint
Filed by Attorney for Cross-Complainant
08/07/2015 Proof of Service
Filed by Attorney for Plaintiff/Petitioner
08/07/2015 Notice-Case Management Conference
Filed by Attorney for Plaintiff/Petitioner
07/29/2015 Summons Filed (SECOND AMENDED )
Filed by Attorney for Plaintiff/Petitioner
07/20/2015 Summons Filed (FIRST AMENDED SUMMONS )
Filed by Attorney for Plaintiff/Petitioner
07/20/2015 OSC-Failure to File Proof of Serv
Filed by Clerk
07/17/2015 Complaint


Case Information | Party Information | Documents Filed

Proceedings Held (Proceeding dates listed in descending order)
11/16/2016 at 08:31 am in Department 42, Holly E. Kendig, Presiding
MOTION – ATTORNEY FEES (MOTION OF CROSS-DEFENDANTS,COLOCATION AMERICA INC. AND ALBERTAHDOOT, FOR ATTORNEY’S FEES ANDCOSTS) – Court makes order
10/31/2016 at 08:30 am in Department 42, Holly E. Kendig, Presiding
Non-Appearance (Case Review) (RE: STATUS OF APPEAL) – Completed
08/18/2016 at 08:30 am in Department 42, Holly E. Kendig, Presiding
Conference-Case Management – Matter continued
06/01/2016 at 08:30 am in Department 42, Holly E. Kendig, Presiding
Court Order – Court makes order
05/27/2016 at 08:31 am in Department 42, Holly E. Kendig, Presiding
Hearing on Demurrer (DEMURRER OF PLAINTIFF ANDCROSS-DEFENDANT TO X-COMPLAINT – ANTI-SLAPP MOTION TO STRIKE PORTIONS OF CROSS-COMPLAINT CONFERENCE-CASE MANAGEMENT) – Submitted
05/24/2016 at 08:30 am in Department 42, Holly E. Kendig, Presiding
Hearing on Demurrer – Matter continued
11/17/2015 at 08:30 am in Department 42, Holly E. Kendig, Presiding
OSC-Failure to File Proof of Serv (AND CASE MANAGEMENT CONFERENCE) – Matter continued

Work-at-Home Scheme ~ Work At Home EDU Temporarily Halted By FTC

Defendants falsely Promised Consumers They Could Earn Thousands of Dollars From Home


FOR RELEASE
August 17, 2017

At the Federal Trade Commission’s request, a federal court entered a temporary restraining order halting a deceptive work-at-home scheme. The defendants allegedly lured consumers into buying an online system, falsely promising that they would earn thousands of dollars in their spare time working from home.

According to the FTC, the defendants operated under various brand names, including Work At Home EDU, Work At Home Program, Work At Home Ecademy, Work At Home University, Work At Home Revenue and Work at Home Institute. They routinely claimed people could earn “hundreds of dollars per hour from home, without any special skills or experience.”

The defendants used online “native” advertising – promotional content that resembles the non-advertising material beside it – to reach consumers who were researching work-at-home opportunities on the internet. For example, they placed a link to their Work At Home EDU website near an article about working from home on the website Forbes.com.

Bobby J. Robinson, Michael Sirois, Bob Robinson LLC, Mega Export 2005 Inc., Mega Export USA Inc. and Netcore Solutions LLC are charged with violating the FTC Act and the FTC’s Business Opportunity Rule. The Rule requires business opportunity sellers to make certain disclosures to help consumers evaluate the opportunity, and prohibits such sellers from making earnings claims without adequate substantiation.

The Commission vote authorizing the staff to file the complaint was 2-0. The U.S. District Court for the Southern District of Texas, Houston Division, entered a temporary restraining order against the defendants on August 8, 2017. The FTC has requested the entry of a preliminary injunction that would halt the scheme until trial. An evidentiary hearing on the request is set for August 24, 2017.

NOTE: The Commission files a complaint when it has “reason to believe” that the law has been or is being violated and it appears to the Commission that a proceeding is in the public interest. The case will be decided by the court.

The Federal Trade Commission works to promote competition, and protect and educate consumers. You can learn more about consumer topics, including business opportunity scams and what you need to know before starting your own business, and file a consumer complaint online or by calling 1-877-FTC-HELP (382-4357). Small business owners can also learn more at ftc.gov/SmallBusiness. Like the FTC on Facebook(link is external), follow us on Twitter(link is external), read our blogsand subscribe to press releases for the latest FTC news and resources.

CONTACT INFORMATION

MEDIA CONTACT:
Frank Dorman(link sends e-mail)
Office of Public Affairs
202-326-2674

STAFF CONTACT:
Roberto Anguizola
Bureau of Consumer Protection
202-326-3284

WhoIs BusinessLoansFunded.com

scamFRAUDalert see it appropriate to issue this ALERT as the operators are contacting consumers offering business loans. These are fraudulent websites

Faster, Easier Loans for Your Business
What Could Your Business Do Today
With an Additonal $2,000 to $350,000?

BusinessLoansFunded.com fundingteam@businessloansfunded.com
BusinessFunds365.com fundingteam@businessfunds365.com
GetaBusinessFunded247.com sttropez.com@getabusinessfunded247.com
FastFundingAdvisors.com fundingteam@fastfundingadvisors.com
BusinessLoansFundedNow.com fundingteam@businessloansfundednow.com
FindBusinessFunding365.com fundingteam@getabusinessloan365.com
GetMy BusinessFundedNow.com fundingteam@getmybusinessfundednow.com
GetaBusinessLoan365.com fundingteam@getabusinessloan365.com
FindFastBusinessFunds.com fundingteam@findfastbusinessfunds.com
GetBusinessFunded fundingteam@getbusinessfunded.com molonlabeforum.com@getbusinessfunded.com
hemitruckclub.com@findfastbusinessfunds.com theshrinkingmanproject.com@findfastbusinessfunds.com
greenandgoldrugby.com@businessfunds365.com fundingteam@profunding247.com

Address lookup
canonical name :businessloansfunded.com
aliases
addresses : 98.124.199.71
Domain Whois record

Queried whois.internic.net with “dom BusinessLoansFunded.com”…

Domain Name: BUSINESSLOANSFUNDED.COM
Registry Domain ID: 1845463191_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com
Updated Date: 2017-03-06T12:13:22Z
Creation Date: 2014-02-05T12:03:11Z
Registry Expiry Date: 2018-02-05T12:03:11Z
Registrar: eNom, Inc.
Registrar IANA ID: 48

Domain Status: clientTransferProhibited

Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint

Last update of whois database: 2017-08-19T19:08:03Z

Queried whois.enom.com with “BusinessLoansFunded.com

Domain Name: BUSINESSLOANSFUNDED.COM
Registry Domain ID: 1845463191_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: http://www.enom.com

Updated Date: 2017-02-13T09:04:11.00Z
Creation Date: 2014-02-05T12:03:00.00Z

Registrar Registration Expiration Date: 2018-02-05T12:03:11.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Reseller: NAMECHEAP.COM
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: 7A94A1E3DBE64FC6B6954716DA249EA3.PROTECT@WHOISGUARD.COM

Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Fax: +51.17057182
Admin Email: 7A94A1E3DBE64FC6B6954716DA249EA3.PROTECT@WHOISGUARD.COM

Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Fax: +51.17057182
Tech Email: 7A94A1E3DBE64FC6B6954716DA249EA3.PROTECT@WHOISGUARD.COM

Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM

DNSSEC: unSigned
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252982646
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2017-02-13T09:04:11.00Z <<<
Network Whois record

Queried whois.arin.net with “n 98.124.199.71″…

NetRange: 98.124.192.0 – 98.124.255.255
CIDR: 98.124.192.0/18
NetName: ENOM-BLOCK-2
NetHandle: NET-98-124-192-0-1
Parent: NET98 (NET-98-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS21740
Organization: eNom, Incorporated (ENOM)
RegDate: 2008-06-17
Updated: 2017-05-30
Ref: https://whois.arin.net/rest/net/NET-98-124-192-0-1

OrgName: eNom, Incorporated
OrgId: ENOM
Address: 5808 Lake Washington Blvd. Suite 300
City: Kirkland
StateProv: WA
PostalCode: 98033
Country: US
RegDate: 2001-06-15
Updated: 2017-06-20
Comment: Domain Related inquiries please contact our helpdesk at 425-274-4500 (http://www.enom.com/help/).
Ref: https://whois.arin.net/rest/org/ENOM

OrgAbuseHandle: AST147-ARIN
OrgAbuseName: Abuse Security Team
OrgAbusePhone: +1-416-535-0123
OrgAbuseEmail: arin-abuse@tucows.com
OrgAbuseRef: https://whois.arin.net/rest/poc/AST147-ARIN

OrgTechHandle: OPERA26-ARIN
OrgTechName: Operations Team
OrgTechPhone: +1-416-531-5584
OrgTechEmail: dnstech@tucows.com
OrgTechRef: https://whois.arin.net/rest/poc/OPERA26-ARIN

OrgNOCHandle: NOC12422-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-416-531-5584
OrgNOCEmail: arin-noc@tucows.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOC12422-ARIN

OrgTechHandle: BB1753-ARIN
OrgTechName: Bronczyk, Bruce
OrgTechPhone: +1-425-974-4799
OrgTechEmail: bruce@enom.com
OrgTechRef: https://whois.arin.net/rest/poc/BB1753-ARIN

OrgTechHandle: DIACO-ARIN
OrgTechName: Diaconita, Dragos
OrgTechPhone: +1-416-535-0123
OrgTechEmail: ddiaconita@tucows.com
OrgTechRef: https://whois.arin.net/rest/poc/DIACO-ARIN

RTechHandle: BB1753-ARIN
RTechName: Bronczyk, Bruce
RTechPhone: +1-425-974-4799
RTechEmail: bbronczyk@tucows.com
RTechRef: https://whois.arin.net/rest/poc/BB1753-ARIN
DNS records

DNS query for 71.199.124.98.in-addr.arpa returned an error from the server: NameError

name class type data time to live
businessloansfunded.com IN A 98.124.199.71 1800s (00:30:00)
businessloansfunded.com IN NS dns1.name-services.com 3600s (01:00:00)
businessloansfunded.com IN NS dns2.name-services.com 3600s (01:00:00)
businessloansfunded.com IN NS dns3.name-services.com 3600s (01:00:00)
businessloansfunded.com IN NS dns4.name-services.com 3600s (01:00:00)
businessloansfunded.com IN NS dns5.name-services.com 3600s (01:00:00)
businessloansfunded.com IN SOA
server: dns1.name-services.com
email: info@name-services.com
serial: 1499398261
refresh: 172800
retry: 900
expire: 1814400
minimum ttl: 3600
3600s (01:00:00)
businessloansfunded.com IN MX
preference: 10
exchange: mx.businessloansfunded.com.cust.a.hostedemail.com
1800s (00:30:00)
businessloansfunded.com IN TXT v=spf1 include:_spf.emfwd.name-services.com mx ?all

NORTH AMERICA MEGA SWEEPSTAKES

These scams keep evolving and changing names. Reports online suggest that most sweepstakes scams originate out of Jamaica and target elderly Americans.

NORTH AMERICA MEGA SWEEPSTAKES

The D.A.’s office has announced a fraud alert
Posted on May 09, 2013
The D.A.’s office has announced a fraud alert. In a press release, a scam was detailed after being brought to light by a Lawrence County resident. In the scam known as “American Mega-Million Lottery Sweepstakes,” victims are informed that they are winners of 250 thousand dollars.

A check for several thousand dollars in enclosed. The victim is then instructed to contact a claims manager who in-turn asks a number of questions about banking information in hopes of accessing the account.

The District Attorney’s office is asking that anyone with information or anyone contacted about the scam call their office at 762-7777.
http://www.wdxe.com/wdxe.php?rfc=narticle.php&id=20551

WhoIs searchingmagnified.com

scamfraudalertdotorg redirects to a MALWARE DISTRIBUTOR
http://www.searchingmagnified.com/?dn=scamfraudalert.org&pid=7POS8W0N0
SFA_searchinggmagnified
SFA_searchinggmagnified2.PNG

ns2004.ztomy.com

Address lookup
canonical name:www.searchingmagnified.com
aliases
addresses:208.91.196.4
Domain Whois record

Queried whois.internic.net with “dom searchingmagnified.com”…

Domain Name: SEARCHINGMAGNIFIED.COM
Registry Domain ID: 1858468524_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.PublicDomainRegistry.com
Registrar URL: http://www.publicdomainregistry.com

Updated Date: 2017-05-31T17:10:52Z
Creation Date: 2014-05-13T10:19:45Z

Registry Expiry Date: 2020-05-13T10:19:45Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com
Registrar Abuse Contact Phone: +1.2013775952
Domain Status: clientTransferProhibited
Name Server: NS1004.ZTOMY.COM
Name Server: NS2004.ZTOMY.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form:

Last update of whois database: 2017-08-19T16:04:42Z
Queried whois.publicdomainregistry.com with “searchingmagnified.com

Domain Name: SEARCHINGMAGNIFIED.COM
Registry Domain ID: 1858468524_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: http://www.publicdomainregistry.com

Updated Date: 2017-05-31T17:10:52Z
Creation Date: 2014-05-13T10:19:45Z

Registrar Registration Expiration Date: 2020-05-13T10:19:45Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
Registrar IANA ID: 303
Domain Status: clientTransferProhibited

Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin
Registrant Organization: Privacy Protect, LLC (PrivacyProtect.org)
Registrant Street: 10 Corporate Drive
Registrant City: Burlington
Registrant State/Province: MA
Registrant Postal Code: 01803
Registrant Country: US
Registrant Phone: +1.8022274003
Registrant Email: contact@privacyprotect.org
Registry Admin ID: Not Available From Registry

Admin Name: Domain Admin
Admin Organization: Privacy Protect, LLC (PrivacyProtect.org)
Admin Street: 10 Corporate Drive
Admin City: Burlington
Admin State/Province: MA
Admin Postal Code: 01803
Admin Country: US
Admin Phone: +1.8022274003
Admin Email: contact@privacyprotect.org
Registry Tech ID: Not Available From Registry

Tech Name: Domain Admin
Tech Organization: Privacy Protect, LLC (PrivacyProtect.org)
Tech Street: 10 Corporate Drive
Tech City: Burlington
Tech State/Province: MA
Tech Postal Code: 01803
Tech Country: US
Tech Phone: +1.8022274003
Tech Email: contact@privacyprotect.org

Name Server: ns1004.ztomy.com
Name Server: ns2004.ztomy.com

DNSSEC:Unsigned
Registrar Abuse Contact Email: abuse-contact@publicdomainregistry.com
Registrar Abuse Contact Phone: +1.2013775952
URL of the ICANN WHOIS Data Problem Reporting System:

Last update of WHOIS database: 2017-08-19T16:04:49Z

Network Whois record
Queried whois.arin.net with “n 208.91.196.4″…

NetRange: 208.91.196.0 – 208.91.197.255
CIDR: 208.91.196.0/23
NetName: CONFLUENCE-NETWORK-INC
NetHandle: NET-208-91-196-0-1
Parent: NET208 (NET-208-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS40034
Organization: Confluence Networks Inc (CN)
RegDate: 2011-04-15
Updated: 2015-11-23
Ref: https://whois.arin.net/rest/net/NET-208-91-196-0-1

OrgName: Confluence Networks Inc
OrgId: CN
Address: 3rd Floor, J & C Building, P.O. Box 362
City: Road Town
StateProv: Tortola
PostalCode: VG1110
Country: VG
RegDate: 2011-04-07
Updated: 2017-03-29
Ref: https://whois.arin.net/rest/org/CN

OrgAbuseHandle: ABUSE3065-ARIN
OrgAbuseName: Abuse Admin
OrgAbusePhone: +1-415-449-4704
OrgAbuseEmail: abuse@confluence-networks.com
OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE3065-ARIN

OrgNOCHandle: NOCAD51-ARIN
OrgNOCName: NOC Admin
OrgNOCPhone: +1-415-358-0891
OrgNOCEmail: noc@confluence-networks.com
OrgNOCRef: https://whois.arin.net/rest/poc/NOCAD51-ARIN

OrgTechHandle: TECHA29-ARIN
OrgTechName: Tech Admin
OrgTechPhone: +1-415-358-0891
OrgTechEmail: noc@confluence-networks.com
OrgTechRef: https://whois.arin.net/rest/poc/TECHA29-ARIN
DNS records

DNS query for 4.196.91.208.in-addr.arpa returned an error from the server: ServerFailure

name class type data time to live
http://www.searchingmagnified.com IN TXT v=spf1 a -all 300s (00:05:00)
http://www.searchingmagnified.com IN SOA
server: ns1004.ztomy.com
email: abuse@opticaljungle.com
serial: 2011062801
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 86400
300s (00:05:00)
http://www.searchingmagnified.com IN NS ns2004.ztomy.com 300s (00:05:00)
http://www.searchingmagnified.com IN NS ns1004.ztomy.com 300s (00:05:00)
http://www.searchingmagnified.com IN PTR ns1004.ztomy.com 300s (00:05:00)
http://www.searchingmagnified.com IN A 208.91.196.4 300s (00:05:00)
searchingmagnified.com IN NS ns2004.ztomy.com 300s (00:05:00)
searchingmagnified.com IN SOA
server: ns1004.ztomy.com
email: abuse@opticaljungle.com
serial: 2011062801
refresh: 3600
retry: 900
expire: 604800
minimum ttl: 86400
300s (00:05:00)
searchingmagnified.com IN PTR ns1004.ztomy.com 300s (00:05:00)
searchingmagnified.com IN A 208.91.196.4 300s (00:05:00)
searchingmagnified.com IN TXT v=spf1 a -all 300s (00:05:00)
searchingmagnified.com IN NS ns1004.ztomy.com 300s (00:05:00)
— end —
URL for this output | return to CentralOps.net, a service of Hexillion


The following A records are set to 208.91.196.4:

  1. advforward.com
  2. amitaz.com
  3. buypremiumdeals.com
  4. cdn-images.com
  5. cnomy.com
  6. completefwd.com
  7. discovereddeals.com
  8. dmnfwd.com
  9. domainfwd.com
  10. domainfwding.com
  11. fastdomainfwd.com
  12. findcrazydeals.com
  13. findfreshdeals.com
  14. freeresultsguide.com
  15. freesearchresults.com
  16. globaldomainfwd.com
  17. globalizedsearch.com
  18. globalsearchdirect.com
  19. internetmadesecure.com
  20. keywordqueryresults.com
  21. malkm.com
  22. mypageresults.com
  23. mysearchcentral.com
  24. namefwd.com
  25. newsearchstation.com
  26. ns1004.ztomy.com
  27. onlinefastsearch.com
  28. pagequeryresults.com
  29. quickfwd.com
  30. rediscoversearch.com
  31. resultfwding.com
  32. sdomainparking.com
  33. searchacross.com
  34. searchdirectresults.com
  35. searchdiscovered.com
  36. searchedforward.com
  37. searchedresults.com
  38. searchedreveal.com
  39. searcheduncovered.com
  40. searchesexplored.com
  41. searchesinteractive.com
  42. searchesinvent.com
  43. searchesresult.com
  44. searchharbor.com
  45. searchhotspot.com
  46. searchignited.com
  47. searchingexplore.com
  48. searchingmagnified.com
  49. searchinguncovered.com
  50. searchinvented.com
  51. searchmagnified.com
  52. searchmagnitude.co
  53. searchmeaningful.com
  54. searchqueryresults.com
  55. searchrediscovered.com
  56. searchreinvented.com
  57. searchremagnified.com
  58. searchresultsguide.com
  59. searchtargeted.com
  60. searchtermresults.com
  61. sendfwd.com
  62. sitequeryresults.com
  63. smartseekerz.com
  64. targetedinfo.com
  65. targetedlistings.net
  66. targetedtopic.com
  67. thegreatestsearch.com
  68. theusefulsearch.com
  69. universalfwd.com
  70. usinternetsearch.com
  71. virlz.com
  72. webqueryresults.com
  73. ztomy.com