[size=15]Messages here will be posted automatically as the automated system finds popups.[/size]
[b][size=12]Please do not @ADAROSS when replying[/size][/b]
Number: (888) 978-6209
Link: http://holdconnive.icu/tam/2/?n=KDg4OCkgOTc4LTYyMDk=
[img]https://cdn.discordapp.com/attachments/572954145628225537/595656559712010260/adaross_temp_scam_site_image_4.png[/img]
[size=10]there is a extremely small chance the image above is wrong but nothing else should be wrong with the information[/size]
[size=12]The following information was found by the automated system called ADAROSS (Automated Detection And Removal Of Scam Sites)[/size]
[COLOR=red][b][size=14]DISCLAIMER: we nor scammer.info are responsible for anything you do or have done with this information[/size][/b][/COLOR]
[b][size=12]Please do not @ADAROSS when replying[/size][/b]
Number: 888-653-2572
Link: http://pleasureworld.xyz/
[img]https://cdn.discordapp.com/attachments/572954145628225537/595669538717040641/adaross_temp_scam_site_image_2.png[/img]
[size=10]there is a extremely small chance the image above is wrong but nothing else should be wrong with the information[/size]
[size=12]The following information was found by the automated system called ADAROSS (Automated Detection And Removal Of Scam Sites)[/size]
[COLOR=red][b][size=14]DISCLAIMER: we nor scammer.info are responsible for anything you do or have done with this information[/size][/b][/COLOR]
[b][size=12]Please do not @ADAROSS when replying[/size][/b]
Number: 866-611-5208
Link: http://windows404error.xyz/
[img]https://cdn.discordapp.com/attachments/572954145628225537/595716611340763147/adaross_temp_scam_site_image_3.png[/img]
[size=10]there is a extremely small chance the image above is wrong but nothing else should be wrong with the information[/size]
[size=12]The following information was found by the automated system called ADAROSS (Automated Detection And Removal Of Scam Sites)[/size]
[COLOR=red][b][size=14]DISCLAIMER: we nor scammer.info are responsible for anything you do or have done with this information[/size][/b][/COLOR]
[b][size=12]Please do not @ADAROSS when replying[/size][/b]
@ADAROSS#96778
Here is the begining of the data and track down. pay close attention, because they took the site down, yet, its mirrors are still up. I could have sworn i ran into this sam epop up and website many years back.
Please make sure the scam phone number is visible on your screen cap please!
DATA DROP
http://windows404error.xyz/
SC of scam: https://ibb.co/1mymfjp
103.74.54.34
SCAM PHONE NUMBER: 866-611-5208
Registrant Organization: Navmis
navmis.com <--godaddy owned! File redacted by godaddy to protect them
SC OF SITE:
1. https://ibb.co/Ms3rG9B
2. https://ibb.co/xKnVCkG
103.74.54.24 <--Public Domain Registry owned
p1: +91-141-4037876
e1: [email protected]
Registrant State/Province: Rajasthan
Registrant Country: IN
role: Network Admin
address: F-1 First Floor 702 Vivek Vihar Shyam Nagar,Jaipur,Rajasthan-302019
country: IN
phone: +91 01414024343
e-mail: [email protected]
person: SharadKumar Rathi
address: F-1 First Floor 702 Vivek Vihar Shyam Nagar,Jaipur,Rajasthan-302019
country: IN
phone: +91 01414024343
egistrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.2013775952
DATA TO PHONE START:
Data to phone^:
Daniel Keller, Age
Current Address: Po Box 639; Kirkland, WA 98083-0639
Phone Number: (201) 377-5952 - LandLine
Prior Phone Numbers: (425) 274-0657 - LandLine
Email: [email protected]
DATA TO PHONE END:
DATA TO REG NAME START:
results for Navmis
There are 4 domains that matched this search query.
These are listed below:
Domain Name Creation Date Registrar
jobsinjaipurjodhpur.com 2019-03-04 WILD WEST DOMAINS, LLC AKA GODADDY
SC of site:
1. https://ibb.co/h2xVY1f
2. https://ibb.co/j6pzhG1
This is one of the clients of "NavMis"
103.74.54.28
306, IIIrd Floor, City Pearl, Khasa Kothi, M.I. Road, Jaipur – 302 001, Rajasthan, India
+91 925 219 2521
[email protected]
mycookingdiary.us 2019-06-28 PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
103.74.54.28
navmisproduct.com 2019-03-15 WILD WEST DOMAINS, LLC AKA GODADDY
103.74.54.23
SC Of Site: https://ibb.co/MGVKpB7
wemscare.com 2019-06-24 WILD WEST DOMAINS, LLC AKA GODADDY
103.74.54.34
Same phone number seen on website: 866-611-5208
Godaddy and the scammers pulled the site before I could get the screen cap.
HOWEVER i HAVE A CACHED COPY ON MY PHONE FROM LAST NIGHT!
The top of the page stated "We Tech Care" as the man company name.
The website originally stated at the bottom of the page that it was owned by
REAL DEFENCE LLC IN CA and was a registered trade mark of UsTechSupport
Address given: 1541 ocean ave, santa monica CA 90401
Statements made on the site:
"Over 40,000 reviews"
"Us Based Techs"
"Over 1,000,000+ Tech Issues Resolved"
DATA TO REG NAME END:
DATA ON US TECH SUPPORT! THE IMAGES ARE THE EXACT SAME FROM THE OLD WEMSCARE SITE!
https://www.ustechsupport.com/
Phone: (866) 996-1025
3.217.181.185
34.199.51.57
Registrant Organization: RealDefense LLC
Registrant State/Province: CA
Registrant Country: US
Admin Organization: RealDefense LLC
Admin State/Province: CA
Admin Country: US
Tech Organization: RealDefense LLC
Tech State/Province: CA
Tech Country: US
Name Server: ns-69.awsdns-08.com
Name Server: ns-836.awsdns-40.net
Name Server: ns-1999.awsdns-57.co.uk
Name Server: ns-1152.awsdns-16.org
IP MANAGE
OrgName: Amazon Data Services NoVa
OrgId: ADSN-1
Address: 13200 Woodland Park Road
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US
RegDate: 2018-04-25
Updated: 2018-04-25
Ref: https://rdap.arin.net/registry/entity/ADSN-1
OrgTechHandle: IPMAN40-ARIN
OrgTechName: IP Management
OrgTechPhone: +1-206-266-4064
OrgTechEmail: [email protected]
OrgTechRef: https://rdap.arin.net/registry/entity/IPMAN40-ARIN
OrgAbuseHandle: IPMAN40-ARIN
OrgAbuseName: IP Management
OrgAbusePhone: +1-206-266-4064
OrgAbuseEmail: [email protected]
OrgAbuseRef: https://rdap.arin.net/registry/entity/IPMAN40-ARIN
OH MY, LOOK WHAT KINDA DOMAINS THEY OWN
results for RealDefense LLC
There are 4 domains that matched this search query.
These are listed below:
Domain Name Creation Date Registrar
getmydrivers.com 2019-01-31 MARKMONITOR INC.
50.17.164.191
52.6.100.75
(888) 631-4028
https://ibb.co/8X6LYbh
myhackedemail.com 2018-07-25 MARKMONITOR INC.
52.20.212.65
52.204.50.227
https://ibb.co/DLJbXQN
https://ibb.co/GThtXK2
https://ibb.co/pWxHVCz
https://ibb.co/TvXgXSr
myherotech.com 2018-07-17 MARKMONITOR INC.
IMAGES ON SITE ARE THE SAME AS WEMSCARE.COM
52.44.198.162
52.200.210.3
866-996-1027
https://ibb.co/mhDMB67
https://ibb.co/10MX35t
https://ibb.co/tHVG42k
https://ibb.co/JjDvJhf
https://ibb.co/S57sBq2 <----same bottom tag and everything
mypasslock.com 2018-08-24 MARKMONITOR INC.
52.202.191.157
35.168.158.221
(800) 392-2087
https://ibb.co/3rPzgTB
https://ibb.co/Rp6ySN4
https://ibb.co/4mq8vwj
https://ibb.co/h85jg1k <--- SAME BOTTOM TAG AS WEMSCARE.COM WHICH HAD THE SAME PHONE NUMBER ON IT
AS THE TECH SUPPORT SCAM POP UP DID!
Sorry for another reply to your post here man. I have finished the data file, godaddy is definately invovled as is USTECHSUPPORT.com. They have tried to create plausable deniability. It is my professional opinion that they, being godaddy, wildwest domains and all the companies named in the data drop are directly profiting and involved in the operation of the scams.
The new file with completed documentation I will not be posting, it has been handed off to authorities, I do not want to foul up their investigation efforts.