Author

Topic: [FRAUD ALERT] rent-vps.net (Read 3381 times)

vip
Activity: 756
Merit: 504
April 11, 2013, 10:16:11 PM
#1
Suspicious fraudulent Internet page detected: rent-vps.net

The Internet page http://rent-vps.net/ was duplicate from the template used by the http://www.gigavps.eu/ page.

Beware! This Internet page:

- ask for deposits in advance
- come from a duplicated design
- Do not have Terms of Service
- Do not offer contact by telephone
- Do not offer contact by post mail
- Do not inform company ID
- Do not inform personal ID

Bitcoin address cited:
https://blockchain.info/address/1EAoj8kVJxi48v7cw5ESmjYQB7VLrWmenH

Captured page image:
https://i.imgur.com/UGAqDuk.png

WHOIS record:
Code:
Domain Dossier Investigate domains and IP addresses

canonical name rent-vps.net.

addresses 184.173.192.191
Domain Whois record

Queried whois.internic.net with "dom rent-vps.net"...

   Domain Name: RENT-VPS.NET
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: NS1423.WEBSITEWELCOME.COM
   Name Server: NS1424.WEBSITEWELCOME.COM
   Status: clientTransferProhibited
   Updated Date: 21-jan-2013
   Creation Date: 30-jan-2012
   Expiration Date: 30-jan-2014

>>> Last update of whois database: Fri, 12 Apr 2013 02:27:13 UTC <<<
Queried whois.enom.com with "rent-vps.net"...

Domain name: rent-vps.net

Registrant Contact:
  
   scott Davie ()
  
   Fax:
   2 FLAT 5 Moray Park Terrace
   Edinburgh, scotland Eh57th
   GB

Administrative Contact:
   HostGator
   Adam Farrar ([email protected])
   +1.7135745287
   Fax: +1.2814767800
   11251 Northwest Fwy suite 400
   Houston, TX 77092
   US

Technical Contact:
   HostGator
   Adam Farrar ([email protected])
   +1.7135745287
   Fax: +1.2814767800
   11251 Northwest Fwy suite 400
   Houston, TX 77092
   US

Status: Locked

Name Servers:
   ns1423.websitewelcome.com
   ns1424.websitewelcome.com
  
Creation date: 31 Jan 2012 02:42:00
Expiration date: 31 Jan 2014 02:42:40


  
Get Noticed on the Internet!  Increase visibility for this domain name by listing it at www.whoisbusinesslistings.com
Network Whois record

Queried rwhois.theplanet.com with "184.173.192.191"...

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.184.173.192.0/18
network:Auth-Area:184.173.192.0/18
network:Network-Name:SOFTLAYER-184.173.192.0
network:IP-Network:184.173.192.160/27
network:IP-Network-Block:184.173.192.160-184.173.192.191
network:Organization;I:Website Welcome
network:Street-Address:11251 Northwest Freeway Suite 400
network:City:Houston
network:State:TX
network:Postal-Code:77092
network:Country-Code:US
network:Tech-Contact;I:[email protected]
network:Abuse-Contact;I:[email protected]
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2010-10-28 17:56:39
network:Updated:2012-05-01 07:08:17
network:Updated-By:[email protected]

%ok
Queried whois.arin.net with "n 184.173.192.191"...

NetRange:       184.172.0.0 - 184.173.255.255
CIDR:           184.172.0.0/15
OriginAS:       AS36420, AS30315, AS13749, AS21844
NetName:        NETBLK-THEPLANET-BLK-17
NetHandle:      NET-184-172-0-0-1
Parent:         NET-184-0-0-0-0
NetType:        Direct Allocation
RegDate:        2010-10-06
Updated:        2012-02-24
Ref:            http://whois.arin.net/rest/net/NET-184-172-0-0-1


OrgName:        ThePlanet.com Internet Services, Inc.
OrgId:          TPCM
Address:        315 Capitol
Address:        Suite 205
City:           Houston
StateProv:      TX
PostalCode:     77002
Country:        US
RegDate:        1999-08-31
Updated:        2010-10-13
Ref:            http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName:   The Planet Abuse
OrgAbusePhone:  +1-281-714-3560
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE271-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName:   Technical Support
OrgTechPhone:  +1-281-714-3000
OrgTechEmail:  [email protected]
OrgTechRef:    http://whois.arin.net/rest/poc/TECHN33-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName:   The Planet NOC
OrgNOCPhone:  +1-281-714-3000
OrgNOCEmail:  [email protected]
OrgNOCRef:    http://whois.arin.net/rest/poc/THEPL-ARIN

RTechHandle: TECHN33-ARIN
RTechName:   Technical Support
RTechPhone:  +1-281-714-3000
RTechEmail:  [email protected]
RTechRef:    http://whois.arin.net/rest/poc/TECHN33-ARIN

RNOCHandle: THEPL-ARIN
RNOCName:   The Planet NOC
RNOCPhone:  +1-281-714-3000
RNOCEmail:  [email protected]
RNOCRef:    http://whois.arin.net/rest/poc/THEPL-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName:   The Planet Abuse
RAbusePhone:  +1-281-714-3560
RAbuseEmail:  [email protected]
RAbuseRef:    http://whois.arin.net/rest/poc/ABUSE271-ARIN
DNS records

name class type data time to live
rent-vps.net IN TXT v=spf1 ip4:184.173.239.120 a mx include:websitewelcome.com ~all 14400s (04:00:00)
rent-vps.net IN MX
preference: 0
exchange: rent-vps.net
14400s (04:00:00)
rent-vps.net IN SOA
server: ns1423.websitewelcome.co
email: [email protected]
serial: 2012042802
refresh: 86400
retry: 7200
expire: 3600000
minimum ttl: 86400
86400s (1.00:00:00)
rent-vps.net IN NS ns1424.websitewelcome.com 86400s (1.00:00:00)
rent-vps.net IN NS ns1423.websitewelcome.com 86400s (1.00:00:00)
rent-vps.net IN A 184.173.192.191 14400s (04:00:00)
191.192.173.184.in-addr.arpa IN PTR 184.173.192.191-static.reverse.softlayer.com 86400s (1.00:00:00)
192.173.184.in-addr.arpa IN SOA
server: ns1.softlayer.com
email: [email protected]
serial: 2013021200
refresh: 7200
retry: 600
expire: 1728000
minimum ttl: 43200
86400s (1.00:00:00)
192.173.184.in-addr.arpa IN NS ns2.arpa.global-datacenter.com 86400s (1.00:00:00)
192.173.184.in-addr.arpa IN NS ns1.arpa.global-datacenter.com 86400s (1.00:00:00)
-- end --
Jump to: