hpHosts Blog: August 2014

My younger brother just showed me several SMS messages he's been receiving (several per day since last month alone), all from Cash Lands (cash-lands.com, cash-lands.net).

The latest of these contains;

"Take £500 today and pay back just £56.20 /mo - No credit checks.

Apply now at www.cash-lands.net - we can pay out today!

Visit www.o-t.me to opt-out."

Lovely.

In all cases, the "Sender" number is blank, and the Message Source has been +44 780 2000 332 (note: those calling the UK leave out the "0" that usually appears at the beginning of a UK number (e.g. in this case, it would be 07802 000 332, the phone company responsible for this number is Telefonica UK Limited)).

If you're receiving these as well, DO NOT UNDER ANY CIRCUMSTANCES, FOLLOW THEIR OPT-OUT INSTRUCTIONS! (you should NEVER opt-out of something you didn't even opt-in to, in the same way you should never click unsubscription links for something you didn't subscribe to). Instead, report them to your phone company, most of which have a free number* you can forward the spam messages to (if you get spammy calls or robo calls, call your phone provider and report them, or if applicable, follow your phone providers instructions for reporting them), and of course, report them to the UK ICO (Information Commissioners Office).

Cash Lands for those wondering, isn't a lender, they're a "broker", and brokers should be avoided. Going to cash-lands.com will lead you to theloanapplicationform.com. Going to cash-lands.net will lead you to apply.pingforest.com/?src=Aff101 (you notice the Aff string too?). In all cases, the domains registrant information is hidden (and nope, it's not on their site). e.g.;

Domain Name: PINGFOREST.COM
Registry Domain ID:
Registrar WHOIS Server: whois.meshdigital.com
Registrar URL: http://www.domainbox.com
Updated Date: 2014-08-19T00:00:00Z
Creation Date: 2014-07-16T00:00:00Z
Registrar Registration Expiration Date: 2015-07-16T00:00:00Z
Registrar: WEBFUSION LIMITED
Registrar IANA ID: 1515
Registrar Abuse Contact Email: support@domainbox.com
Registrar Abuse Contact Phone: +1.8779770099
Reseller: 123Reg/Webfusion
Domain Status: clientDeleteProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Identity Protection Service
Registrant Organization: Identity Protect Limited
Registrant Street: PO Box 795
Registrant City: Godalming
Registrant State/Province: Surrey
Registrant Postal Code: GU7 9GA
Registrant Country: GB
Registrant Phone: +44.1483307527
Registrant Phone Ext:
Registrant Fax: +44.1483304031
Registrant Fax Ext:
Registrant Email: pingforest.com@identity-protect.org
Registry Admin ID:
Admin Name: Identity Protection Service
Admin Organization: Identity Protect Limited
Admin Street: PO Box 795
Admin City: Godalming
Admin State/Province: Surrey
Admin Postal Code: GU7 9GA
Admin Country: GB
Admin Phone: +44.1483307527
Admin Phone Ext:
Admin Fax: +44.1483304031
Admin Fax Ext:
Admin Email: pingforest.com@identity-protect.org
Registry Tech ID:
Tech Name: Identity Protection Service
Tech Organization: Identity Protect Limited
Tech Street: PO Box 795
Tech City: Godalming
Tech State/Province: Surrey
Tech Postal Code: GU7 9GA
Tech Country: GB
Tech Phone: +44.1483307527
Tech Phone Ext:
Tech Fax: +44.1483304031
Tech Fax Ext:
Tech Email: pingforest.com@identity-protect.org
Name Server: ns-628.awsdns-14.net
Name Server: ns-2021.awsdns-60.co.uk
Name Server: ns-1288.awsdns-33.org
Name Server: ns-214.awsdns-26.com
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2014-08-22T11:03:00Z

Domain Name: CASH-LANDS.COM
Registry Domain ID: 1867637073_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2014-07-20 17:03:57Z
Creation Date: 2014-07-20 17:40:00Z
Registrar Registration Expiration Date: 2015-07-20 17:40:00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252744500
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: DOMAIN REGISTRAR
Registrant Organization: SILENTREGISTER.COM
Registrant Street: 620 TORONTO STREET
Registrant City: VICTORIA
Registrant State/Province: BC
Registrant Postal Code: V8V1P7
Registrant Country: CA
Registrant Phone: +1.2503869291
Registrant Phone Ext:
Registrant Fax: +1.2503869291
Registrant Fax Ext:
Registrant Email: VIA@SHAW.CA
Registry Admin ID:
Admin Name: DOMAIN REGISTRAR
Admin Organization: SILENTREGISTER.COM
Admin Street: 620 TORONTO STREET
Admin City: VICTORIA
Admin State/Province: BC
Admin Postal Code: V8V1P7
Admin Country: CA
Admin Phone: +1.2503869291
Admin Phone Ext:
Admin Fax: +1.2503869291
Admin Fax Ext:
Admin Email: VIA@SHAW.CA
Registry Tech ID:
Tech Name: RICHARD LANOSZKA
Tech Organization: SILENT REGISTER
Tech Street: 620 TORONTO STREET
Tech Street: APT 302
Tech City: VICTORIA
Tech State/Province: BC
Tech Postal Code: V8V1P7
Tech Country: CA
Tech Phone: +1.2503869291
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: SUPPORT@SILENTREGISTER.COM
Name Server: ns1.host-care.com
Name Server: ns2.host-care.com
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2014-07-20 17:03:57Z

Domain Name: CASH-LANDS.NET
Registry Domain ID: 1867637074_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2014-07-25 11:51:12Z
Creation Date: 2014-07-20 17:40:00Z
Registrar Registration Expiration Date: 2015-07-20 17:40:00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252744500
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: DOMAIN REGISTRAR
Registrant Organization: SILENTREGISTER.COM
Registrant Street: 620 TORONTO STREET
Registrant City: VICTORIA
Registrant State/Province: BC
Registrant Postal Code: V8V1P7
Registrant Country: CA
Registrant Phone: +1.2503869291
Registrant Phone Ext:
Registrant Fax: +1.2503869291
Registrant Fax Ext:
Registrant Email: VIA@SHAW.CA
Registry Admin ID:
Admin Name: DOMAIN REGISTRAR
Admin Organization: SILENTREGISTER.COM
Admin Street: 620 TORONTO STREET
Admin City: VICTORIA
Admin State/Province: BC
Admin Postal Code: V8V1P7
Admin Country: CA
Admin Phone: +1.2503869291
Admin Phone Ext:
Admin Fax: +1.2503869291
Admin Fax Ext:
Admin Email: VIA@SHAW.CA
Registry Tech ID:
Tech Name: RICHARD LANOSZKA
Tech Organization: SILENT REGISTER
Tech Street: 620 TORONTO STREET
Tech Street: APT 302
Tech City: VICTORIA
Tech State/Province: BC
Tech Postal Code: V8V1P7
Tech Country: CA
Tech Phone: +1.2503869291
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: SUPPORT@SILENTREGISTER.COM
Name Server: ns-1303.awsdns-34.org
Name Server: ns-1656.awsdns-15.co.uk
Name Server: ns-406.awsdns-50.com
Name Server: ns-696.awsdns-23.net
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2014-07-25 11:51:12Z

Domain Name: THELOANAPPLICATIONFORM.COM
Registry Domain ID: 1871399977_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2014-08-19 04:27:36Z
Creation Date: 2014-08-16 19:48:00Z
Registrar Registration Expiration Date: 2015-08-16 19:48:00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4252744500
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: DOMAIN REGISTRAR
Registrant Organization: SILENTREGISTER.COM
Registrant Street: 620 TORONTO STREET
Registrant City: VICTORIA
Registrant State/Province: BC
Registrant Postal Code: V8V1P7
Registrant Country: CA
Registrant Phone: +1.2503869291
Registrant Phone Ext:
Registrant Fax: +1.2503869291
Registrant Fax Ext:
Registrant Email: VIA@SHAW.CA
Registry Admin ID:
Admin Name: DOMAIN REGISTRAR
Admin Organization: SILENTREGISTER.COM
Admin Street: 620 TORONTO STREET
Admin City: VICTORIA
Admin State/Province: BC
Admin Postal Code: V8V1P7
Admin Country: CA
Admin Phone: +1.2503869291
Admin Phone Ext:
Admin Fax: +1.2503869291
Admin Fax Ext:
Admin Email: VIA@SHAW.CA
Registry Tech ID:
Tech Name: RICHARD LANOSZKA
Tech Organization: SILENT REGISTER
Tech Street: 620 TORONTO STREET
Tech Street: APT 302
Tech City: VICTORIA
Tech State/Province: BC
Tech Postal Code: V8V1P7
Tech Country: CA
Tech Phone: +1.2503869291
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: SUPPORT@SILENTREGISTER.COM
Name Server: ns-1361.awsdns-42.org
Name Server: ns-1987.awsdns-56.co.uk
Name Server: ns-705.awsdns-24.net
Name Server: ns-87.awsdns-10.com
DNSSEC: unSigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2014-08-19 04:27:36Z

And as usual with this type of rubbish, the registrant for the "opt-out" site is hidden too.

Domain ID:D13153188-ME
Domain Name:
Domain Create Date:07-Aug-2014 10:54:22 UTC
Domain Last Updated Date:07-Aug-2014 10:56:36 UTC
Domain Expiration Date:07-Aug-2015 10:54:22 UTC
Last Transferred Date:
Sponsoring Registrar:GoDaddy.com, LLC R41-ME (146)
Created by:GoDaddy.com, LLC R41-ME (146)
Last Updated by Registrar:GoDaddy.com, LLC R41-ME (146)
Domain Status:CLIENT DELETE PROHIBITED
Domain Status:CLIENT RENEW PROHIBITED
Domain Status:CLIENT TRANSFER PROHIBITED
Domain Status:CLIENT UPDATE PROHIBITED
Domain Status:TRANSFER PROHIBITED
Registrant ID:CR173941154
Registrant Name:Registration Private
Registrant Organization:Domains By Proxy, LLC
Registrant Address:DomainsByProxy.com
Registrant Address2:14747 N Northsight Blvd Suite 111, PMB 309
Registrant Address3:
Registrant City:Scottsdale
Registrant State/Province:Arizona
Registrant Country/Economy:US
Registrant Postal Code:85260
Registrant Phone:+1.4806242599
Registrant Phone Ext.:
Registrant FAX:+1.4806242598
Registrant FAX Ext.:
Registrant E-mail:O-T.ME@domainsbyproxy.com
Admin ID:CR173941156
Admin Name:Registration Private
Admin Organization:Domains By Proxy, LLC
Admin Address:DomainsByProxy.com
Admin Address2:14747 N Northsight Blvd Suite 111, PMB 309
Admin Address3:
Admin City:Scottsdale
Admin State/Province:Arizona
Admin Country/Economy:US
Admin Postal Code:85260
Admin Phone:+1.4806242599
Admin Phone Ext.:
Admin FAX:+1.4806242598
Admin FAX Ext.:
Admin E-mail:O-T.ME@domainsbyproxy.com
Tech ID:CR173941155
Tech Name:Registration Private
Tech Organization:Domains By Proxy, LLC
Tech Address:DomainsByProxy.com
Tech Address2:14747 N Northsight Blvd Suite 111, PMB 309
Tech Address3:
Tech City:Scottsdale
Tech State/Province:Arizona
Tech Country/Economy:US
Tech Postal Code:85260
Tech Phone:+1.4806242599
Tech Phone Ext.:
Tech FAX:+1.4806242598
Tech FAX Ext.:
Tech E-mail:O-T.ME@domainsbyproxy.com
Nameservers:ns1.digitalocean.com
Nameservers:ns3.digitalocean.com
Nameservers:ns2.digitalocean.com

There is a little hope however - there's quite the WhoIs history, starting back in 2012 when it was registered (up to and including late 2013) to;

Domain ID:D5222986-ME
Domain Name:O-T.ME
Domain Create Date:30-Aug-2012 17:30:21 UTC
Domain Last Updated Date:03-Oct-2013 00:59:09 UTC
Domain Expiration Date:30-Aug-2014 17:30:21 UTC
Last Transferred Date:
Sponsoring Registrar:Regional Network Information Center, JSC dba RU-CENTER R138-ME (463)
Created by:Regional Network Information Center, JSC dba RU-CENTER R138-ME (463)
Last Updated by Registrar:Regional Network Information Center, JSC dba RU-CENTER R138-ME (463)
Domain Status:CLIENT HOLD
Domain Status:CLIENT TRANSFER PROHIBITED
Domain Status:INACTIVE
Domain Status:PENDING DELETE
Status:PENDINGDELETE
Registrant ID:A5GUBZ8-RU
Registrant Name:Konstantin A Lavkin
Registrant Organization:Konstantin A Lavkin
Registrant Address:Spartakovskaya, 2
Registrant Address2:
Registrant Address3:
Registrant City:Moscow
Registrant State/Province:
Registrant Country/Economy:RU
Registrant Postal Code:105066
Registrant Phone:+7.4955448558
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant E-mail:lavkin@bk.ru
Admin ID:A5GUBZ8-RU
Admin Name:Konstantin A Lavkin
Admin Organization:Konstantin A Lavkin
Admin Address:Spartakovskaya, 2
Admin Address2:
Admin Address3:
Admin City:Moscow
Admin State/Province:
Admin Country/Economy:RU
Admin Postal Code:105066
Admin Phone:+7.4955448558
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin E-mail:lavkin@bk.ru
Tech ID:A5GUBZ8-RU
Tech Name:Konstantin A Lavkin
Tech Organization:Konstantin A Lavkin
Tech Address:Spartakovskaya, 2
Tech Address2:
Tech Address3:
Tech City:Moscow
Tech State/Province:
Tech Country/Economy:RU
Tech Postal Code:105066
Tech Phone:+7.4955448558
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech E-mail:lavkin@bk.ru

Is this individual involved? At this point, I'm not sure, I've not started digging into this yet. I am a curious type however, so watch this space.

Hillarious part of course, is their "Terms and Conditions". Why you ask? Well it leads to a 404 of course;