- Unresolved Namess Sale - - Page 24 - DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

**EG.domains** · 03-09-2008, 06:03 PM

New DP banned username found for 9MM .. ghost.d0wn .. BTW, this is the second has been account closed for scamming people.

He mentioned his Bank again .. TD Canada Trust.

Here is a couple of posts i found it kinda weird.

1.

Quote:

Leaving School in Ontario, CA with parental consent...

How old do you have to be with parental consent to stop going to school in Ontario, Canada.

He mentioned that he dropped out of school on NP too.

2.

Quote:

Starting a small business
Hello all, A friend and I plan on starting a small buisness that is computer-related. However, I live in Iowa and he lives in Texas. We have financial aid, however what do you think we should do that we can both take partnerships in when living in two different states?

-- ghost

I don't have any comments on the second post.

**Acroplex** · 03-09-2008, 06:04 PM

Quote:

Originally Posted by Version2

Using the IP I have at NP:

Use this pinpoint the IP to a city:
http://www.geobytes.com/IpLocator.htm

**TheLegendaryJP** · 03-09-2008, 06:08 PM

Quote:

Originally Posted by EG.domains

New DP banned username found for 9MM .. ghost.d0wn .. BTW, this is the second has been account closed for scamming people.

He mentioned his Bank again .. TD Canada Trust.

Here is a couple of posts i found it kinda weird.

1.

He mentioned that he dropped out of school on NP too.

2.

I don't have any comments on the second post.

Interesting ALEXA;s IP was traced to Dallas TX. But again maybe a coincidence seeing as proy could be used.

**EG.domains** · 03-09-2008, 06:09 PM

Quote:

Originally Posted by Version2

AlecP is NP member Frikkle:

http://www.namepros.com/member.php?u=59736

He used to own UZY.in and sold it to 9MM.

Reported to NP Management and Frikkle's account has been closed for now.

**Version2** · 03-09-2008, 06:12 PM

Quote:

Originally Posted by Acroplex

Use this pinpoint the IP to a city:
http://www.geobytes.com/IpLocator.htm

http://img84.imageshack.us/img84/2273/85575447dp1.gif

**Restecpa** · 03-09-2008, 06:20 PM

Quote:

Originally Posted by Version2

http://img84.imageshack.us/img84/2273/85575447dp1.gif

Please don't tell me his IP reflects his whois location? I mean... you go through all this trouble, then not use a proxy? Sounds too easy...

Could it be that he just used a proxy that correlates to his whois info, in order to throw people off? If not, then he's even more stupid than we thought...

**theinvestor** · 03-09-2008, 06:23 PM

Just so you guys know...there's actually a way to find out someone's real IP even from a proxy. That involves law enforcement though. Proxy addresses actually bounce off their real IP address. So it can still be found.

**Restecpa** · 03-09-2008, 06:34 PM

Quote:

Originally Posted by theinvestor

Just so you guys know...there's actually a way to find out someone's real IP even from a proxy. That involves law enforcement though. Proxy addresses actually bounce off their real IP address. So it can still be found.

Actually, as far as I know they would have to subpoena who ever runs the proxy server and only then would they check the logs for them, by comparing his proxy ip by using the date and time of posts to the actual IP on file... so good luck getting ones IP this way if proxy is located in Iran, NK or any other country that does not cooperate with the US justice system... not to mention that proxies can bounce around or should I say one through another.

**Version2** · 03-09-2008, 06:41 PM

I don't recall anyone posting this, but here is the email used to signup at NP by 9MM:

bball@live.ca

And another name he goes by: GhostNdaNBA

http://www.nettrafficchat.com/search...induser&u=4780

**EG.domains** · 03-09-2008, 06:50 PM

According to this post

I found new name for him "Tyler Johnson"

**Version2** · 03-09-2008, 06:52 PM

Quote:

Originally Posted by EG.domains

According to this post

I found new name for him "Tyler Johnson"

What's also interesting that his location/site in his profile is listed as: alexstenerson.com

http://whois.domaintools.com/alexstenerson.com

**theinvestor** · 03-09-2008, 06:54 PM

I think we just overkilled this topic. He's a 16 year old who obviously is up to no good. At that age, i can see him creating a hundred false identities thinking he can get away with it.

Banned: domain newbie · 03-09-2008, 06:56 PM

Quote:

Originally Posted by Version2

http://img84.imageshack.us/img84/2273/85575447dp1.gif

this geobytes is crap- it tells me i am in Bristol while I'm in central London

**filter** · 03-09-2008, 07:01 PM

Probably another fake address, but [b]12 lakeshore blvd[\b] in Sudbury was used in the whois of at least one of the 3 CCC.net I bought from 9MM about a month ago

http://www.dnforum.com/f27/selling-u...ml#post1365981

The 3 CCC.net were 6ik, 6iv, and 6sv (.net) registered at estDomains until June 23d 2008. Paid for with $DNF, so no other contact info (but I checked the whois before buying, so was able to find the details in my notes.) Also, I never updated the DNS, so it still has old nameservers
ie NS74.EAAHOSTING.COM ... for whatever that's worth.

Also bought about a dozen LLLL.com paid for via $NP back in December - most were originally from Johnny's EuroDNS vault (whois still showed Johnny's details for admin contact etc when I bought them) - but also 2 registered at NameScout -> RYJJ and THJW. (THJW I recently resold after transferring to GoDaddy.)

And also NoseRing.info (registered at NP)

All payments either via $DNF or $NP ...

Small potatoes and hopefully all legit transactions, but maybe there's some clue in some of the info. I don't remember seeing the "12 lakeshore blvd" mentioned in this thread yet - probably just another red herring though.

.....

whois for 6iv .net before I bought it ->

Norman Patrick
Contact: Patrick Norman
Title:
Full Address: 12 lakeshore blvd
City: sudbury Province: Ontario
Postal Code: p3c3c5 Country: Canada
Phone: 17059290555 Phone other:
Email: article.writer@hotmail.com Email

**Jacksplat** · 03-09-2008, 07:03 PM

Quote:

Originally Posted by theinvestor

Just so you guys know...there's actually a way to find out someone's real IP even from a proxy. That involves law enforcement though. Proxy addresses actually bounce off their real IP address. So it can still be found.

Server logs can be deleted by the servers admin. I delete my proxy logs all the time, not just for privacy but the stinkin files wind up taking up alot of drive space. Is there a way to track before the proxu users ip/ident gets to the actual server ?

**gorlov** · 03-09-2008, 07:04 PM

Quote:

Originally Posted by domain newbie

this geobytes is crap- it tells me i am in Bristol while I'm in central London

Maybe so, but the IP belongs to an ISP in Sudbury:

OrgName: Cyber Beach Communications
OrgID: CBCH
Address: 500 Barrydowne Rd
City: Sudbury
StateProv: ON
PostalCode: P3A-5W1
Country: CA

**Restecpa** · 03-09-2008, 07:06 PM

Certain IP blocks change frequently... that's why these geolocators can't always tell. It's a bit of a big coincidence though that it places him in the Sudburry, don't you think?

I'm referring to the domain newbie's post above...

**EG.domains** · 03-09-2008, 07:13 PM

On 11-05-2007, someone else collected info about 11 accounts on different forums used by 9MM in scamming.

That guy has a hell of scamming history.

**liberator** · 03-09-2008, 07:18 PM

All persona IPS state sudburry, we use persona here and my ip comes up as sudburry as well although I'm just outside of Peterborough.

**amcdonald** · 03-09-2008, 08:12 PM

i would not trust geo locators for canadian based ips. it shows mine as being 440 miles from where I actually am.