Wednesday, August 8, 2007

Second incident on 21st June 2006 : buyingusedcar.net

Summary : someone modified contact details of a domain buyingusedcar.net [which was not mine]. Modified contact detail was mine. Motivation of the person who did it was ugly beyond doubt. But what may be the motivation? Possibly

1. Fabrication or

2. Attempt to gain password of my GoDaddy account. I have already indicated that employer was involved in it.After mail came from GoDaddy if I would have checked my account possibly IT could have grabbed my password. But why domain account? I had made known to many people including Prasanna that I had started getting significant money from domains. I had also told Amith that I might quit my job and do full time domain business. I think this incident is related to it. Next 2 incident also points in this direction.

whatever might be the case the guy responsible for this should be questioned to get right data.

------------------------------------------------------------------------------------------
1.1 ON 21th June 2006. A domain buyingusedcar.net Administrative Contact [Appendix 10] - was modified to my name and email address. When I contacted registrar Godaddy.com and copied the mail to registrant

docreilly@yahoo.com


The person replied the mail, docreilly@yahoo.com had denied that any such thing had happened after modifying Administrative contact back to his name.[Appendix 20]. Godaddy has provided some guidance regarding how to get private information about account holder.[Appendix 30] . The owner should be grilled to tell who asked him/her to change the data the same person must had supplied my address etc.

Note : Also, soon after I mailed docreilly@yahoo.com whois of buyingusedcar.com changed to privacy services. This evidence has a possible name which in turn can give clue hence should be taken seriously and not as just another electronic crime.

1.1.1 Also, to note earlier in May there was Godaddy notification for same domain about Registrar transfer of byingusedcar.net. At that time too I had contacted owner and reported it to Godaddy. At that time I assumed it mistake. Someone by mistake can’t know my name and address and with Appendix 20 it was act of hiding the data shows malicious intent of this event.

1.2 06-23-2006, I posted info about someone tried to access my PC from Bluetooth device. I was trying to write about events happening in domainworld.I was using bootable Knoppix based Linux and Wirless radio of laptop was switched off.

Refer .\anjan.txt [TO DO - Upload this file somewhere]

It implies at that time my PC was under someone control and at least one of my neighbor premises was used for this as Bluetooth's range is limited.

APPENDIX 10

from

"support@godaddy.com"


hide details

6/21/06


reply-to

support@godaddy.com



to

anjan@anjan.org



date


20 Jun 2006 15:15:57 -0700



subject


DOMAIN CONTACT UPDATE


Dear Anjan Bhushan,

Changes to your registrant and/or administrative contact information have been initiated for the domain name(s) listed below:

BUYINGUSEDCAR.NET

You *do not* need to respond to this email.

If, however, you think these changes may have been made in error or fraudulently, please contact us within 15 days at mailto:support@godaddy.com.

Sincerely,
GoDaddy.com

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Copyright 2006 GoDaddy.com. All rights reserved.

Whois detail corresponding to above mail

Registrant:
Web Rodeo, Inc.
5710 turtle lake road
shoreview, Minnesota 55126
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: BUYINGUSEDCAR.NET
Created on: 24-Jul-02
Expires on: 24-Jul-07
Last Updated on: 20-May-06

Administrative Contact:
Bhushan, Anjan anjan@anjan.org
35$ or bestoffer http://www.bestshop.org/domains/
7 Tulip dr., Apt# 1g, 08863

+1.7322253302 Fax --

Technical Contact:
Reilly, Kevin docreilly@yahoo.com
Web Rodeo, Inc.
5710 turtle lake road
shoreview, Minnesota 55126
United States
6122706532 Fax --

Domain servers in listed order:
HEIDI.GOOKLE.NET
PAMELA.GOOKLE.NET

APPENDIX 20

Kevin Reilly


hide details

6/21/06


reply-to

Kevin Reilly



to

Anjan Bhushan



date


Jun 21, 2006 4:44 AM



subject


Re: DOMAIN CONTACT UPDATE



mailed-by


yahoo.com


i dont know how you are getting these e-mails?

here is the who is info for the domain.


Registrant:
Web Rodeo, Inc.
5710 turtle lake road
shoreview, Minnesota 55126
United States
Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: BUYINGUSEDCAR.NET
Created on: 24-Jul-02
Expires on: 24-Jul-07
Last Updated on: 20-May-06
Administrative Contact:

Reilly, Kevin docreilly@yahoo.com
Web Rodeo, Inc.
5710 turtle lake road
shoreview, Minnesota 55126
United States
6122706532
Technical Contact:
Reilly, Kevin docreilly@yahoo.com
Web Rodeo, Inc.
5710 turtle lake road
shoreview, Minnesota 55126
United States
6122706532

Domain servers in listed order:
HEIDI.GOOKLE.NET
PAMELA.GOOKLE.NET

APPENDIX 3O

Update [Incident ID: 741946] - Re: DOMAIN CONTACT UPDATE Inbox




Reply


Reply to allReply to all ForwardForward Print Add support@supportwebsite.com to Contacts list Delete this message Report phishing Show original Message text garbled?

"support@supportwebsite.com"

to me

show details

6/22/06








Images are not displayed.

Display images below - Always display images from support@supportwebsite.com


Our support staff has responded to your request, details of which are described below:

Discussion Notes

Support Staff Response

Dear Anjan,

Thank you for your reply. Due to confidentiality, we are not able to release information about our customer's accounts. If you would like to file a formal subpoena to attempt to have this information released, you may find our policy and where to submit by clicking here.

Please let us know if we can help you in any other way.

Kindest Regards,

Ashley P
Customer Support
Supervisor

Customer Inquiry


You are talking about WIPO laws I am talking about electronic crime. It
sounds to me a possible case of obstruction to justice. However, I will
reserve my comments till I am duly adviced.

On 20 Jun 2006 22:40:09 -0700, support@supportwebsite.com <




If you need further assistance with this matter, please reply to this email or contact customer service at (480) 505-8877 and reference [Incident ID: 741946].

Thanks,
GoDaddy.com

© 2006 GoDaddy.com. All rights reserved.

No comments:

Post a Comment