The Godaddy Garbage Fire Workingdoc

CORNER COMPUTING SOLUTIONS WOKRING EVIDENCE DOCUMENT COCERNING NEGATIVE
COMPETITORS
BY DALE JAKE CORNER
(Please note Document is not yet complete and is in a preliminary Data organizing and gathering stage)
As of 5 7 2019
GODADDY, DOES HERE BY, BY THE PERPONDERANCE OF EVIDENCE CONDUCT AND SUPPORT,
ECONOMIC TERRORISM, TECH SUPPORT SCAMS, MALWARE DSITRIBUTION, IRS SCAMMING,
SPAMMING, HACKING, LIEING, CHEATING, STEALING, CREATION AND DEPLOYMENT OF BOT NETWORKS,
ALLOWING THE CONTROL OF BOT NETWORKS USING THEIR SOFTWARE AND SYSTEMS, TREASON
AGAINST THE PEOPLE OF THE US, THE GOVERNMENT AND ITS CHOSEN REPRESENTATIVES; AND IN
GENERAL HAS PROVEN ITSELF ABSOLUTELY UNTRUSTWORTHY IN ANY RESPECT BY ITS OWN ACTION
AND INACTION, FURTHERMORE THEY ARE CRIMINALLY NEGLECTFUL, MALEFICENT, AND ARE Aiding and
abetting scam organizations, economic terrorists, tax evaders, committers of tax and business license
fraud and they themselves along with a multitude of their customers, second and third parties and
subordinate companies ARE IN VIOLATION OF UNFAIR COMPETITION LAWS IN EVERY SINGLE STATE IN
THE US AS WELL AS THE FEDERAL STANDARD! Godaddy along with other members and even customers
of the company have been on mass advertising and supplying services for free or at a severely reduced
rate for the sole purpose of lessening competition. That is just the beginning. Godaddy, its directors,
employees and subsidiaries directly profit from the distribution and use of exploitation and exploited
software and computing systems all over the planet.
Those as name above have also caused me, personally and my company enough damage and damages
since 2008 that I am now homeless amongst other hardships. Those, named above, have also made it
impossible for me to file suit against them for their actions. The evidence does not leave the possibility
of any other circumstance.
THIRD PARTY EVIDENCE OF THE ABOVE STATEMENT: Not only the link below but the entire document.
https://krebsonsecurity.com/2019/01/bomb-threat-sextortion-spammers-abused-weakness-at-
godaddy-com/
Upon calling Godaddy, sometimes you will be transferred to an outside call center. The agents there will
state that they are located "in the philipines" If you call this number here (See data below)
www.reimageplus.com>(888 844 3886), SupportHello.com>(855 204 9266) the agents there will state
the same thing. I have had multiple conversations with them over the past 5 days. The same excuses
and voices of phone operators have been used in every single one of them. What godaddy is doing is
attempting to setup plausible deniability through the use of shadow companies. All complaints are
basically trashed or excuses are made, if that fails they hide behind the "legal team".
Initial Data Collection Date on or about April 25 2019
HERE IS THE START OF THE MOUNTAIN OF DATA: The below is just a few instances of Godaddy giving
long term support to what amounts to scam, con and economic terrorist organisations.
Fake virus scanner and trojan downloader and a redirector links.
First link here shows the initial attempt at exploit. It is on the right.
SC1A: https://ibb.co/WBX0T6P
SC1B: https://ibb.co/cvBrTy9
SC1C: https://ibb.co/C709SVL
SC1D: https://ibb.co/brTtgn2
SC1E: https://ibb.co/6vwG7Kc
CONVERSATION WITH REIMAGE:
https://ibb.co/qRxZ0fQ
https://ibb.co/qxKgNRm
https://ibb.co/0Fz0Yh3
https://ibb.co/7gZ2tkq
https://ibb.co/k3vbtj9
ABOVE ATTACK CAME TO ME AT A US LIBRARY (On their equipment) and was not solicited: THAT IS AN
ATTACK ON A STATE AND FEDERAL INSTITUTION!
Site noted on the initial attack:
http://pathecididnaning.info
VT:
https://www.virustotal.com/#/url/8ab711a88ad9c227364bb7dab479f22a79562f502b19de6dc106ab517
1414933/detection
TC: https://www.threatcrowd.org/domain.php?domain=pathecididnaning.info
CLEANED UP: https://ibb.co/FJ0SNfw
104.18.52.90
VT: https://www.threatcrowd.org/ip.php?ip=104.18.52.90
? https://www.virustotal.com/#/url/undefined/detection
VT: https://www.virustotal.com/#/ip-address/104.18.52.90
104.18.53.90
? https://www.virustotal.com/#/url/undefined/detection
Initial attack and subordinate redirect attack links:
https://chomakepc.com/mltn/?lpkey=151656773120964a34&clickid=e58faghy9nt1m9e9&language=en-
US&uclick=ghy9nt1m
VT:
https://www.virustotal.com/#/url/d0a3266351487ae2936edf0b7d6a49043144bf6c051739fdf5ac7a0dfe
f5667e/detection
88.99.215.214
TC: https://www.threatcrowd.org/ip.php?ip=88.99.215.214
Cleaned up: https://ibb.co/0ZKtz0J
Next link down:

https://midtrck.pro/nlp/index.php?url_bnm_redirect=https://shakesmobi1055.com/SQtS/e58faghy9nt1
m9e9
VT:
https://www.virustotal.com/#/url/06e038bdb000ba5ff0c3da56ebffabfd37f3d635e2455f54df717e8f729
bf6ef/detection
88.99.215.214
Cleaned up: https://ibb.co/0ZKtz0J
shakesmobi1055.com
212.224.118.213
Next link down: First download delivery link: http://www.qbitboostnow.club/lp/shkmb/?fd=qbsp&x-
context=4582421991&utm_source=wskmbi&utm_campaign=wskmbi&pxl=WSK3622_WSK3550_RUNT&
utm_pubid=88491&x-at=XXXXX&override=1
VT:
https://www.virustotal.com/#/url/52a34dbcad35388c443575da328de169ca25208ad8acbc42e94af08a5
e2a0510/detection
216.245.221.228
Detection of file downloaded: QBSPSetup.exe PCVARK
VT:
https://www.virustotal.com/#/file/d85157b2bfb66392b8c299d7ccb2afd51ced55ddbe5f3065de88dd155
ce8f21d/detection
TC: Distribution point map:

https://www.threatcrowd.org/domain.php?domain=www.qbitboostnow.club
Note the whois data is deleted! godaddy owned domain name, privacy is not enacted.
"Rajasthan IN" SAME COMPANY AS BELOW: Note former IP: https://www.virustotal.com/#/ip-

address/63.143.46.130
https://www.google.com/search?q=Qbitboostnow+Rajistan&rlz=1C1GCEA_enUS847US847&oq=Qbitbo
ostnow+Rajistan&aqs=chrome..69i57.7216j0j7&sourceid=chrome&ie=UTF-8
VT: https://www.virustotal.com/#/domain/www.qbitsystems.live
THE CONNECTION IS: PCVARK TuCows is invovled as well
SEE ABOVE: https://ibb.co/rvt3C2g
32 Gopal Tower, Gopal Bari, Jaipur - 302001 Rajasthan (India)
https://ibb.co/4dsDwHV
https://malwarefixes.com/remove-qbit-optimizer-pro/
https://ibb.co/2cyNDNT
Connected subordinate node as origination point, as was demonstrated on virus total.
www.reimageplus.com
Video of scam enacted:
V1: https://www.youtube.com/watch?v=WXcAshytyPY
V2: https://www.youtube.com/watch?v=0hi4HFPsURE
(Suggestion: Contact for the original video unedited.)
ARTIMIS CONNECTED: https://www.threatcrowd.org/domain.php?domain=www.reimageplus.com
CLEANED UP: https://ibb.co/mSXGPqb
VT:
https://www.virustotal.com/#/url/02860ab28d3071f9d31c0472a56cd6862ec4a1278b4ae99a884b9664
5bed6420/detection
Reports of the scam including videos: https://techscammersunited.com/t/reimage-the-scummy-pc-

repair-software/473
161.47.7.14
VT:
https://www.virustotal.com/#/url/063160fce646d358094d1081cef41b95cd25ff919e8395a0b47a1f2d26
2ecd46/detection
https://ibb.co/9Y67c3x
HaArba'a 21
Tel Aviv, Israel
64739
Address2:
14-16 Nelson Str.
Sovereign House
IM12AL Douglas, Isle of Man
Reimage Limited AKA Reimage Ltd
1888 844 3886
SALES: 1 888 241 1278
www.reimagetechsupport.com
UK Phone: 0808-101-2728
104.130.222.111
PLEASE NOTE BELOW HOW GODADDY ALLOWS THE SCAMMERS TO KEEP THEIR MAIN DOMAIN NAMES
TO KEEP THEM RUNNING!
Reimage Limited
There are 24 domains that matched this search query.
These are listed below:
Domain Name Creation Date Registrar
anti-toolbar.com 2012-08-29 GODADDY.COM, LLC
avsoftwarereviews.com 2008-07-27 GODADDY.COM, LLC
driverscontroller.com 2018-07-01 GODADDY.COM, LLC
efixpchelp.com 2014-08-04 GODADDY.COM, LLC
efixsupport.com 2014-08-04 GODADDY.COM, LLC
efixtechsupport.com 2014-08-04 GODADDY.COM, LLC
fixerror.org 2011-12-18 GODADDY.COM, LLC
fixpcpro.com 2011-06-02 GODADDY.COM, LLC
reimageplus.com 2012-01-03 GODADDY.COM, LLC
161.47.7.14
reimagesupport.com 2014-08-04 GODADDY.COM, LLC
reimagetech.at
reimagetechsupport.com 2014-08-04 GODADDY.COM, LLC
104.130.222.111
repairsoftwarereview.com 2011-04-14 GODADDY.COM, LLC
reviewedbygeek.com 2011-12-18 GODADDY.COM, LLC
192.237.225.117
supersupport.com 2002-05-10 GODADDY.COM, LLC
23.21.224.129
top5bestregistry.com 2012-07-04 GODADDY.COM, LLC
23.23.203.214
win-guru.com 2012-11-13 GODADDY.COM, LLC
win-refresh.com 2012-11-13 GODADDY.COM, LLC
windows-fixer.com 2012-11-13 GODADDY.COM, LLC
winfix7.com 2012-11-20 GODADDY.COM, LLC

winfix8.com 2012-11-20 GODADDY.COM, LLC
winfixtablet.com 2012-11-20 GODADDY.COM, LLC
winfixvista.com 2012-11-20 GODADDY.COM, LLC
winrefresh.com 2012-11-13 GODADDY.COM, LLC
Separate to the above noted attack and connection: NOTE: this is not to state that these other data
collections and evidence are not connected to the above initial attack record and data collection and
extrapolation. If they are connected that will be noted at the top of the Data.
NOTE: The data collection will now only concentrate directly on Godaddy, that includes godaddy service
providing for servers, websites and domain names. That will not be limited, if Godaddy rents the
domain name to a scammer or scam organization and does not house on their servers the web site the
data and evidence will still be gathered. The same thing will happen with subordinate companies and
operating companies owned by Godaddy.
-----------REIMAGE LIMITED CONNECTED WEBSITES DATA START-------------------------------------------------------
------------------------------ECHO SOFT INFO COM DATA START REIMAGE LIMITED CONNECTED-------------------
SCAM CON OR ILLEGAL ACTIVITY TYPE: Tech Support Scam NOTE: Connected directly to Reimage
Limted!
DATE OF DATA COLLECTION: 5 2 2019 https://ibb.co/LhqPfXR
Video of scam enacted: SECOND PARTY
V1: https://www.youtube.com/watch?v=WXcAshytyPY
V2: https://www.youtube.com/watch?v=0hi4HFPsURE
Domain: www.EchoSoftinfoCom.com AKA: EchoSoftinfoCom.com
Reg Data: PRIVATE CURRENTLY
Domain Name Owner: Abuse@Godaddy.com
Reg Data is private currently
Subordinate data to ^ START
VT: Nothing currently noteable
TC: Legend: https://ibb.co/yphZkt1

A: https://www.threatcrowd.org/domain.php?domain=www.EchoSoftinfoCom.com
CLEANED UP MAP: Not needed small map
Subordinate data END
IP/IPS to domain: START
13.58.181.48 Physical controller: abuse@amazonaws.com
GOVERNMENT BLACK LISTED: https://portal.cybersecurity.mo.gov/util/ip_blacklist.txt
IP/IPS: END
VT:
A: https://www.virustotal.com/#/url/08332bdd96c81d25395e977b254caffb585259d76e15491e02f317
56e9168958/detection
B: https://www.virustotal.com/#/file/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991
b7852b855/relations PLEASE NOTE THE ATTEMPT TO COVER UP THE SCAM AND ISSUES! Also Scroll
down!
A: https://www.threatcrowd.org/ip.php?ip=13.58.181.48
CLEANED UP MAP: https://ibb.co/bsFnnww
Third party evidence Videos: Note they have changed the way the websites look.
SIMILAR WEBSITES OR WEBSITES CONNECTED DIRECTLY: www.goeasyrepair.com

www.supporthello.com www.MyPhoneSupport.com www.softwillinfotech.in
PHONE NUMBERS RELATED: 866-797-5534
ADDRESSES RELATED: 418 Broadway 2nd Floor Bayonne New Jersey 07002, US
PLEASE NOTE: Second floor location, above, a computer repair shop! Con nected? I bet so!
“jantechllc.com (800) 558-2613” -----------------NOTE HERE PLEASE CONNECTED COMPANT
SC1: https://ibb.co/4PHT8Wz
EMAILS RELATED: info@echosoftinfocom.com
Screen Cap evidence subordinate to directly above data:
https://ibb.co/m5yBzM8
------------------------------ECHO SOFT INFO COM DATA END REIMAGE LIMITED CONNECTED-------------------

------------------------------GO EASY REPAIR DATA START REIMAGE LIMITED CONNECTED---------------------------
DATE OF DATA COLLECTION: 5 3 2019 https://ibb.co/crZY7hY
SCAM CON OR ILLEGAL ACTIVITY TYPE: Tech Support Scam
Video of scam enacted: See reimage Limited above
Domain: www.goeasyrepair.com
Reg Data Private to hide and protect the scammers
Domain Name Owner: Abuse@godaddy.com
VT: Clean front for a dirty business!
A: https://www.threatcrowd.org/domain.php?domain=www.goeasyrepair.com
CLEANED UP MAP: https://ibb.co/prgXydh
A: 13.58.181.48 Physical controller: Amazon
B: 166.62.27.145 Physical controller: Wild West Domains GODADDY OPERATING COMPANY
C: Third IP connected: 43.255.154.38 Godaddy singapor
GOVERNMENT BLACK LISTED: https://portal.cybersecurity.mo.gov/util/ip_blacklist.txt
IP/IPS: END
VT: Note the connected node has connections to another bot net of malware!
https://www.virustotal.com/#/file/d5d52fd62cd3a53bf06e92225aad3441581174217d1d3454927a014d
18864c50/community
A: Nothing worth reporting yet!
B: https://www.virustotal.com/#/ip-address/166.62.27.145
C: https://www.virustotal.com/#/ip-address/43.255.154.38
B: Nothing to report
C: Same findings as before.
CLEANED UP MAP:
RAW UNEDITED SCREEN CAPS:
Third party evidence Videos:
SC1: See videos for reimageplus.com above, same company!
SIMILAR WEBSITES OR WEBSITES CONNECTED DIRECTLY: See sites listed for Reimage Limited
PHONE NUMBERS RELATED:
ADDRESSES RELATED: 011-4981 9797 911149819797
Softwill Infotech Pvt Ltd. ------------------- company connected to Reimage Limited

Unit 1/1, 3rd Floor,
Vishal Mega Mart Complex,
Tilak Nagar, New Delhi - 110018
CIN :U74900DL2016PTC290081
SC1: On their website https://ibb.co/0pL04mc
SC2: Of the address given: google will not give a view of it
EMAILS RELATED:
support@goeasyrepair.com
------------------------------GO EASY REPAIR DATA END REIMAGE LIMITED CONNECTED---------------------------
------------------------------ SUPPORTHELLO.COM DATA START REIMAGE LIMITED CONNECTED---------------
DATE OF DATA COLLECTION: 5 4 2019 https://ibb.co/X3K5cHq
SCAM CON OR ILLEGAL ACTIVITY TYPE: Tech support scam
Video of scam enacted: See videos listed under echo soft infocom and Reimage Limited
Domain: SupportHello.com
Reg Data: PRIVATE TO HIDE THE SCAM!
Domain Name Owner: abuse@godaddy.com
VT:
A: https://www.virustotal.com/#/domain/supporthello.com Scroll down note the files and IP changes
SC1A: https://ibb.co/VMf0GVy
SC1B: https://ibb.co/ZfqqfyS
A: https://www.threatcrowd.org/domain.php?domain=www.supporthello.com
CLEANED UP MAP: https://ibb.co/Bj7rL2S
IP: 166.62.27.63 Physical controller: abuse@wildwestdomains.com A godaddy operating company
FORMER IP ADDRESSES and history also see VT above!
2019-02-19 166.62.27.63
2019-02-09 50.63.202.44
2016-01-23 50.63.202.32
IP/IPS: END
VT:
A: https://www.virustotal.com/#/ip-address/166.62.27.63
B: https://www.virustotal.com/#/url/3336ff64b89c998b1209026eccd3e7256e1f6d762443874acbdb4f2
2d5784cee/community
C: https://www.virustotal.com/#/file/d5d52fd62cd3a53bf06e92225aad3441581174217d1d3454927a0
14d18864c50/detection
CLEANED UP MAP: https://ibb.co/gtpfPF9
SC1:
SIMILAR WEBSITES OR WEBSITES CONNECTED DIRECTLY: See echosoftinfocom and reimage section
A: 1-888-495-6142
B: 1-855-204-9266
C: 1-800-835-248
D: 0-800-652-0148
E: 0-800-995-043
SC1: https://ibb.co/tPsHM79
SC2: https://ibb.co/M9B2Jf0
ADDRESSES RELATED:
BVI
146 TRIDENT CHAMBERS,

Road Town, Tortola,
British Virgin Islands
US
418 Broadway 2nd Floor Bayonne, New Jersey 07002
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>NOTE HERE PLEASE: https://ibb.co/nn4YVTJ JanTechLLC.com
Canada
3055, Saint-Martin Ouest, Suite T500,

Laval, Quebec, H7T0J3
SC1: https://ibb.co/r2sTSj6
SC2: https://ibb.co/BCVWdSV
SC3: https://ibb.co/RbRSLnq
SC4: https://ibb.co/7Y0tsgR
SC5: https://ibb.co/y5F5kqX
SC6: https://ibb.co/9V64yMC
NOTICE THIS GUY ON THE FRONT PAGE HERE: https://ibb.co/XxtNCFL

results for Michael Davis
There are 2,423 domains that matched this search query.
EMAILS RELATED:

------------------------------ SUPPORTHELLO.COM DATA END REIMAGE LIMITED CONNECTED----------------------
------------------------------ MYPHONESUPPORT.COM DATA START REIMAGE LIMITED CONNECTED--------------
DATE OF DATA COLLECTION: 5 4 2019 https://ibb.co/cyz1yjs
Video of scam enacted: See initial data collection on Reimage Limited
Domain: myphonesupport.com
Reg Data:
Registrant Name: Domain Administrator

Registrant Organization: ConsumerSoft
Registrant Street: 41 Madison Avenue
Registrant Street: 31st Floor
Registrant City: New York
Registrant State/Province: New York
Registrant Postal Code: 10010
Registrant Country: US
Registrant Phone: +1.8773278721
Registrant Email: domains@consumersoft.com
VT:
A: https://www.virustotal.com/#/url/a77ca2bb95af29cc3159ade782d5a6b51dd50c14c869db408f1137
35fc8fa9b0/detection
B: https://www.virustotal.com/#/url/e321643e2593b6a5a428fdfcb6dc82d29daf53e10af61ee4355d512
d586825a8/detection
C: NOTE REFERING FILES (SCROLL DOWN) AND UP ADDRESS MOVES
https://www.virustotal.com/#/domain/www.myphonesupport.com
A: https://www.threatcrowd.org/domain.php?domain=myphonesupport.com
B: https://www.threatcrowd.org/domain.php?domain=www.myphonesupport.com
CLEANED UP MAP A: https://ibb.co/87j42fy
CLEANED UP MAP B: https://ibb.co/vkwrGm8

108.163.238.217 Physical controller: abuse@cloudflare.com
FORMER IP ADDRESSES:
2019-05-04
108.163.238.217
2017-11-06
192.124.249.14
2015-03-05
108.163.238.214
2015-03-05
74.86.152.178
2013-07-26
74.86.152.180
IP/IPS: END
VT:
A: https://www.virustotal.com/#/url/633c10022c871edb71128df4e9cdfa530ce49da72eedbe770c948fa
a0f182920/detection
B: https://www.virustotal.com/#/ip-address/108.163.238.217
C: FILE ON SERVER IP:

https://www.virustotal.com/#/file/ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d
777fbf0/relations
CLEANED UP MAP: https://ibb.co/YRdXPMW
PHONE NUMBERS RELATED: See the screen captures below the Address Related Section:
1-855-698-7839
(646) 202-2400
DATA CONNECTED TO PHONE:
Harry Fank, Age
Current Address: 41 Madison Ave, STE 3A; New York, NY 10010-2202
Phone Number: 646 202 2400 - LandLine
Email: admin@jeconomic.com
SC1: https://ibb.co/rZYP1Zv
ADDRESSES RELATED:
ConsumerSoft ---NOTE THIS PLEASE!

41 Madison Ave, 31st Floor
New York, New York 10010
SC1: https://ibb.co/xLSd2wY
SC2: https://ibb.co/ckNJRHq
SC3: https://ibb.co/6P480JJ
EMAILS RELATED:
------------------------------ MYPHONESUPPORT.COM DATA END REIMAGE LIMITED CONNECTED-----------------
------------------------------ SOFTWILLINFOTECH.IN DATA START REIMAGE LIMITED CONNECTED-----------------
DATE OF DATA COLLECTION: 5 6 2019 https://ibb.co/Q9dn37P
Video of scam enacted: SEE INITIAL RECORD FOR REIMAGEPLUS AT START OF DATA PLEASE!
Domain: www.softwillinfotech.in AKA softwillinfotech.in Appears down was up a few days ago. Maybe,
the hurricane got it.
canonical name goeasyrepair.com -Note here to above data directly connected!
aliases www.softwillinfotech.in
addresses 13.58.181.48 Note same Ip as goeasyrepair.com currently
Reg Data HAS BEEN RECOVERED despite the attempt at protecting them! Seen below multiple
addresses being used.
Registrant Name: Rohin Bhatia

Registrant Organization:
Registrant Street: 3501, plot no 7, sec 19B
Registrant Street: near OPG school, Dwarka
Registrant City: Delhi
Registrant State/Province: Delhi
Registrant Country: IN
Registrant Email: rohin@supporthello.com
VT: Oh look, a clean front for a very dirty business. Check the links given, concerted effort to show that
a dirty server is clean.
A: https://www.virustotal.com/#/url/a688abbacfc90e39b0cdcb238a6e6d717bf86cab5c899eef3db521c
af80efe51/detection
A: https://www.threatcrowd.org/domain.php?domain=www.softwillinfotech.in
CLEANED UP MAP: https://ibb.co/PWc4n29
Please note for the above the connected node 43.255.154.38 is on a government black list
13.58.181.48 Physical controller: Amazon and “MarkMonitor”
2019-01-31
166.62.27.56 godaddy physical controller
2018-06-26
195.39.222.145 Godaddy physical controller
IP/IPS: END
VT: Another clean front for a very dirty business
A: https://www.virustotal.com/#/url/08332bdd96c81d25395e977b254caffb585259d76e15491e02f317
56e9168958/detection
CLEANED UP MAP: https://ibb.co/bPxPpWm

PHONE NUMBERS RELATED: Website cannot be reached as of this date, use data from connected sites
and companies previous to this data collection. SEE DATA FOR GO EASY REPAIR and EchoSoft AND
SCREEN CAPTURES
ADDRESSES RELATED: Data gathered from a company info website.
Email ID: tarunvashisht3@gmail.com
Address: C-7/282 A, F.F KESHAV PURAM NEW DELHI North West DL 110035 IN
07617065 ROHIN BHATIA Director
07126372 TARUN VASHISHT Director
Directors: Amit Jain, Ankit Baluja, Amit Kumar Gandhi
------------------------------ SOFTWILLINFOTECH.IN DATA END REIMAGE LIMITED CONNECTED-----------------
THERE ARE TWO MORE COMPANY FRONTS OR ACTORS INVOLVED CURRENTLY.
ConsumerSoft & Possible Jantech AKA JanTechLLC.com
First JanTechLLC as a possible connection due to its location and address being the same as noted data
from several of the formerly mentioned connected companies.
------------------------------ JanTeckLLC.com DATA END REIMAGE LIMITED CONNECTED-----------------
DATE OF DATA COLLECTION: 5 6 2019 https://ibb.co/6D9b0Rw
SCAM CON OR ILLEGAL ACTIVITY TYPE: TECH SUPPORT SCAMS AMONGST OTHER SCAMS
Video of scam enacted: See the videos noted under Reimage plus
Domain: JanTechLLC.com aka www.JanTechLLC.com
Reg Data is private to protect the guilty and to help continue their victimization of the innocent
Domain Name Owner: abuse@Godaddy.com
VT: Another “clean” front to a very dirty organisation
A: https://www.virustotal.com/#/url/4dd88e1ebf576c6defb21381d624957ed2c648a24b1edb4d143a7
e7481f3a5c8/detection
A: https://www.threatcrowd.org/domain.php?domain=www.JanTechLLC.com
CLEANED UP MAP: https://ibb.co/k3vjQ1X
66.96.147.115 Physical controller: The Endurance International Group Inc
IP/IPS: END
VT: Looks like that server is not clean!
A: https://www.virustotal.com/#/ip-address/66.96.147.115
CLEANED UP MAP: https://ibb.co/y80QWBp
Telephone: 800-558-2613
ADDRESSES RELATED:
AddressA:
418 Broadway, STE: 2120
Bayonne, NJ 07002
SC1: https://ibb.co/0DjK12z
------------------------------ JanTechLLC.com DATA END REIMAGE LIMITED CONNECTED-----------------
------------------------------ ConsumerSoft DATA START REIMAGE LIMITED CONNECTED-----------------
DATE OF DATA COLLECTION: 5 6 2019 https://ibb.co/y55Gcm5
SCAM CON OR ILLEGAL ACTIVITY TYPE: Tech support scam among others
Video of scam enacted: See Reimageplus section near the start of this document.
Domain: ConsumerSoft.com AKA www.ConsumerSoft.com
Reg Data
Registrant Organization: ConsumerSoft

Registrant Street: 41 Madison Avenue
Registrant Street: 31st Floor
Registrant City: New York
Registrant State/Province: New York
Registrant Country: US
Registrant Email: domains@consumersoft.com
Domain Name Owner: Godaddy
VT: Please note the IP moves
A: https://www.virustotal.com/#/domain/consumersoft.com
BE SURE TO SCROLL DOWN WHEN VISITING ABOVE LINK!
SC1: https://ibb.co/BBfzKfL
A: https://www.threatcrowd.org/domain.php?domain=consumersoft.com
CLEANED UP MAP: Small map so far not needed, just a clean front for a dirty company.
184.154.149.77 Physical controller: Abuse@Enom.com
IP/IPS: END
VT: Well well well look at that, server is exploited
A: https://www.virustotal.com/#/url/ccebbd2de54a10c7b169376ebff687b3cac14eeabc2998e6c40b74
878abcf679/detection
B: https://www.virustotal.com/#/file/ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e89
65d777fbf0/detection
A: Small map not needed 2 nodes CLEAN FRONT FOR A DIRTY DIRTY BUSINESS
NEW DATE OF DATA GATHERING FOR THE NOTED DATA IN THIS SECTION: 5 7 2019 START!
https://ibb.co/FBdWSLn
SIMILAR WEBSITES OR WEBSITES CONNECTED DIRECTLY: www.myfasterpc.com NOTE: Connected

directly to not just consumer soft but the head and subordinate companies as denoted by the
separators.

Fax Numbers
(646) 723-5310
(646) 619-4686
Phone Numbers
Phone: (877) 327-8721

(469) 289-1814
(855) 698-3240
(877) 327-8721
(212) 994-9583
(855) 695-3243
(347) 897-2400
ADDRESSES RELATED:
https://www.google.com/search?rlz=1C1GCEA_enUS848US848&ei=V67QXJDXFo_g-
gSPgYioDg&q=ConsumerSoft&oq=ConsumerSoft&gs_l=psy-
ab.3..0l2j0i30l4.69069.69069..69753...0.0..0.55.55.1......0....2j1..gws-wiz.......0i71.-WvvGGigZy0
A: Address: 2211 Elliott Ave # 200, Seattle, WA 98121
LINK MATCHES REG DATA: https://www.bbb.org/us/ny/new-york/profile/computer-

hardware/consumer-software-international-inc-0121-105801/details
SC1 A: https://ibb.co/wY82MTP
SC1 B: https://ibb.co/2hYgK2Y
SC1 C: https://ibb.co/pfFCwnt
SC1 D: https://ibb.co/HFN9PSL
SC1 E: https://ibb.co/9rbYfGY
SC1 F: https://ibb.co/N2g5bkN
B: 41 Madison Ave Fl 31 New York, NY 10010-2345
SC2 A: https://ibb.co/m9JkRSw
SC2 B:
Note other businesses using the exact same location: Also note above screen captures and data for
address A as a lead into address B data.
https://www.bbb.org/us/ny/new-york/profile/legal-malpractice-attorney/pecoraro-schiesel-llp-0121-
138358/details
There are many complaints against this company all over the internet
EXTRA DATA ON ADDRESS B
41 Madison Ave Fl 31, New York, NY 10010-2345
BBB File Opened: 1/9/2009
Years in Business: 12
Business Started: 10/24/2006
Business Started Locally: 7/1/2008
Business Incorporated: 7/1/2008 in NY
Type of Entity: Corporation
Alternate Business Name
ConsumerSoft
My Phone Support
My Backup Drive
My Media Converter
My Duplicate File Finder
Myfasterpc.com
My Faster PC
Read More
Business Management
Mr. Joe Bursky, CEO
Contact Information
Principal
Mr. Joe Bursky, CEO
Additional Contact Information
Fax Numbers
(646) 723-5310
(646) 619-4686
Phone Numbers
(877) 327-8721
(212) 994-9583
(855) 695-3243
(347) 897-2400
Addresses
Email this Business
Website Addresses
http://www.myfasterpc.com
http://myphonesupport.com
http://myfasterpc.com
http://www.myphonesupport.com/contact/
Business Categories NOTE incorrect business category, tax fraud and business license fraud is probably
involved.
Computer Hardware
EMAILS RELATED:
SEARCH OF ALL DOMAIN NAME SUNDER THE CONTROL OF THE COMPANY ABOVE!
results for ConsumerSoft PLEASE NOTE THE GODADDY CONNECTION! These are not all the domain
names involved but show a concerted effort to run a scam operation and that Godaddy DIRECTLY
PROFITS from the activities.
==============
There are 99 domains that matched this search query. These are listed below:
247mps.com 2011-09-20 GODADDY.COM, LLC
855mytech.com 2013-07-03 GODADDY.COM, LLC
855mytech5.com 2013-07-03 GODADDY.COM, LLC
aboutmypc.net 2008-11-25 GODADDY.COM, LLC
aboutmypc.org 2008-11-25 GODADDY.COM, LLC
bigfootvshiker.com 2012-04-27 GODADDY.COM, LLC

brokenshortcutfixer.com 2010-06-16 GODADDY.COM, LLC
bursky.com 2012-01-06 GODADDY.COM, LLC
buymyfasterpc.com 2009-11-11 GODADDY.COM, LLC
callmps.com 2016-07-26 GODADDY.COM, LLC
canyoufinditapp.com 2010-03-05 GODADDY.COM, LLC
cleanpcmax.com 2012-01-16 GODADDY.COM, LLC
consumersoft.com 2004-04-14 GODADDY.COM, LLC
consumersoft.mobi 2010-02-05 GODADDY.COM, LLC
consumersoftmobile.com 2010-02-05 GODADDY.COM, LLC
easyexifdelete.com 2010-02-23 GODADDY.COM, LLC
fastpc1.com 1998-10-17 GODADDY.COM, LLC
flashcookiecleaner.com 2009-06-08 GODADDY.COM, LLC
flashpccleaner.com 2013-03-08 GODADDY.COM, LLC
gethelp.support2014-03-26 GO MONTENEGRO DOMAINS, LLC
getmyfasterpc.com 2009-11-11 GODADDY.COM, LLC
goto.support 2014-03-26 WILD WEST DOMAINS, LLC
gpsjot.com 2010-04-16 GODADDY.COM, LLC
gpsjotter.com 2010-04-16 GODADDY.COM, LLC
gpswriter.com 2010-04-16 GODADDY.COM, LLC
jbursky.com 2012-01-26 GODADDY.COM, LLC
mps12.com 2017-03-15 GODADDY.COM, LLC
mps321.com 2010-11-16 GODADDY.COM, LLC
my-slow-pc.com 2009-07-23 GODADDY.COM, LLC
mybackupdrive.com 2004-11-29 GODADDY.COM, LLC
mybackupdrive.org 2011-04-21 GODADDY.COM, LLC
mybackupdrive.us 2011-04-21 GODADDY.COM, INC.
mycleantablet.com 2011-08-16 GODADDY.COM, LLC
mycompress.com 2010-05-14 GODADDY.COM, LLC
mycomputerspeedtest.com 2012-04-27 GODADDY.COM, LLC

mydailybackup.com 2005-02-01 GODADDY.COM, LLC
mydefragmenter.com 2009-10-22 GODADDY.COM, LLC
mydupfinder.com 2011-04-07 GODADDY.COM, LLC
myduplicatefilefinder.com 2011-04-07 GODADDY.COM, LLC
myduplicatefilefinder.info 2011-04-07 GODADDY.COM, LLC
myduplicatefilefinder.org 2011-04-07 GODADDY.COM, LLC
myduplicatefinder.com 2011-04-07 GODADDY.COM, LLC
myfastercleanerpc.com 2010-06-15 GODADDY.COM, LLC
myfastercleanerspeedierpc.com2010-06-15 GODADDY.COM, LLC
myfasterpc.info 2009-11-11 GODADDY.COM, LLC
myfasterpc.org 2009-11-11 GODADDY.COM, LLC
myfastersupport.com 2009-10-22 GODADDY.COM, LLC
myfastersupport.org 2009-10-22 GODADDY.COM, LLC
myfastertablet.com 2011-08-16 GODADDY.COM, LLC
mymediaconverter.com 2010-05-14 GODADDY.COM, LLC
myonlinebackupdrive.com 2011-04-21 GODADDY.COM, LLC
mypcantivirus.com 2010-04-07 GODADDY.COM, LLC
mypccomplete.com 2011-06-24 GODADDY.COM, LLC
mypcdefense.com 2010-05-14 GODADDY.COM, LLC
mypcduster.com 2009-07-23 GODADDY.COM, LLC
mypcfirewall.com 2010-05-14 GODADDY.COM, LLC
mypcfirewall.info 2010-05-14 GODADDY.COM, LLC
mypcimmunity.com 2010-04-07 GODADDY.COM, LLC
mypcprivacy.com 2009-07-30 GODADDY.COM, LLC
mypcprivacy.info 2009-07-30 GODADDY.COM, LLC
mypcprivacy.net 2009-07-30 GODADDY.COM, LLC
mypcprivacy.org 2009-07-30 GODADDY.COM, LLC
mypcprotection.com 2010-05-14 GODADDY.COM, LLC
mypcspeedtest.com 2012-04-27 GODADDY.COM, LLC

mypctoolshed.com 2010-04-07 GODADDY.COM, LLC
mypcvaccine.com 2010-04-07 GODADDY.COM, LLC
mypcworks.com 2003-02-04 GODADDY.COM, LLC
myphone.support 2014-03-26 GODADDY.COM, LLC
myphonesupport.com 2009-10-22 GODADDY.COM, LLC
myphonesupport.info 2009-12-10 GODADDY.COM, LLC
myphonesupport.org 2009-12-10 GODADDY.COM, LLC
myslowercomputer.com 2009-07-23 GODADDY.COM, LLC
myslowerpc.com 2009-07-23 GODADDY.COM, LLC
mysmartphonesupport.com 2010-06-15 GODADDY.COM, LLC
mytech5.com 2013-07-21 GO FRANCE DOMAINS, LLC
myutilites.com 2010-05-06 GODADDY.COM, LLC
myutilitykit.com 2010-05-06 GODADDY.COM, LLC
myzooadventure.com 2012-08-25 GODADDY.COM, LLC
nerd.support 2014-03-26 GO FRANCE DOMAINS, LLC
pchealthcheckup.com 2012-02-02 GODADDY.COM, LLC
pcmedicapp.com 2014-02-21 GODADDY.COM, LLC
pcspeeder.com 2009-11-17 GODADDY.COM, LLC
pcvaccination.com 2010-04-07 GODADDY.COM, LLC
pcvacuum.com 2009-11-17 GODADDY.COM, LLC
pictographapp.com 2012-06-14 GODADDY.COM, LLC
searchbidoptimizer.com 2010-11-22 GODADDY.COM, LLC
slowerpc.com 2012-05-09 WILD WEST DOMAINS, LLC
slowtablet.com 2011-08-16 GODADDY.COM, LLC
speedupcomputer.us 2010-06-15 GODADDY.COM, INC.
speedupmytablet.com 2011-08-16 GODADDY.COM, LLC
squatchattack.com 2012-04-27 GODADDY.COM, LLC
techie.support 2014-03-26 GO CANADA DOMAINS, LLC
techsupportbill.com 2014-03-26 GODADDY.COM, LLC

techxsupport.com 2015-05-14 GODADDY.COM, LLC
trymyfasterpc.com 2009-11-11 GODADDY.COM, LLC
vivastartmenu.com 2012-08-23 GODADDY.COM, LLC
x.support 2014-03-26 GODADDY.COM, LLC
yourslowerpc.com 2009-07-23 GODADDY.COM, LLC
yourslowpc.com 2009-07-23 GODADDY.COM, LLC
NEW DATE OF DATA GATHERING FOR THE NOTED DATA IN THIS SECTION: 5 7 2019 END!
https://ibb.co/FBdWSLn
------------------------------ ConsumerSoft DATA END REIMAGE LIMITED CONNECTED-----------------
--------------------REIMAGE LIMITED CONNECTED WEBSITES DATA END------------------------------------------------
NOTE: NOT CURRENTLY KNOWN BY DOCUMENT CREATOR TO BE DIRECTLY CONNECTED TO THE DATA
AT THE START OF THIS FILE!
SCAM CON OR ILLEGAL ACTIVITY TYPE: Tech Support Scam NOTE: Service providers refuse take down
requests!
DATE OF DATA COLLECTION: 4 30 2019 https://ibb.co/cLtQqKK
Domain: MonkTech.us Domain Name Owner: abuse@godaddy.com
VT:
A: https://www.virustotal.com/#/url/7d2c06a537f198bb16a339b907b081bd348e4ba13ef13f2920809fb
ec1e25690/detection
B: Please note the IP Changes: https://www.virustotal.com/#/domain/monktech.us
C: https://www.virustotal.com/#/url/5737f8ef3cb528221fcbd6499f5da8264900e5c363869d91d6cbb64
9a76f6692/detection
A: https://www.threatcrowd.org/domain.php?domain=www.monktech.us
CLEANED UP MAP: https://ibb.co/hHc7shH
Phone Number to Scam as shown on site: 1 855 436 8666

2606:4700:30::681f:4631
2606:4700:30::681f:4731
IP/IPS: END
Registrant Name: Rajiv Hazuri
results for Rajiv Hazuri
monktech.us 2013-09-13 GODADDY.COM, INC.
Registrant Organization: Monk-Tech Solution
Registrant Street: D-236 sec-61
Registrant City: Noida
Registrant State/Province: Uttar Pradesh
Registrant Country: IN
Registrant Email: honey874489@gmail.com
results for honey874489@gmail.com
monktech.us 2013-09-13 GODADDY.COM, INC.

SC1: Evidence of Deceit MonkTech.us is microsoft?
https://ibb.co/m6hzRYc
https://ibb.co/2g8BNQC
https://ibb.co/7rBNL7M
Third Party Video Evidence: https://www.youtube.com/watch?v=becXR5zP9CE
SIMILAR WEBSITES:
monktech.net
Screen of site: https://ibb.co/9232L7N
DATA COLLECTION FORM A
DATE OF DATA COLLECTION:
SCAM CON OR ILLEGAL ACTIVITY TYPE:
Video of scam enacted: SECOND PARTY
V1:
V2:
Domain:
Reg Data
Domain Name Owner:
VT:
A:
B:
C:
A:
CLEANED UP MAP:

Physical controller: abuse@cloudflare.com
IP/IPS: END
VT:
A:
B:
C:
A:
CLEANED UP MAP:
SC1:
SIMILAR WEBSITES OR WEBSITES CONNECTED DIRECTLY:
ADDRESSES RELATED:
SC1:
EMAILS RELATED:

The Godaddy Garbage Fire Workingdoc

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

The Godaddy Garbage Fire Workingdoc

Transféré par

Droits d'auteur :

Formats disponibles

CORNER COMPUTING SOLUTIONS WOKRING EVIDENCE DOCUMENT COCERNING NEGATIVE

BY DALE JAKE CORNER

Fake virus scanner and trojan downloader and a redirector links.

CONVERSATION WITH REIMAGE:

Site noted on the initial attack:

CLEANED UP: https://ibb.co/FJ0SNfw

Initial attack and subordinate redirect attack links:

Cleaned up: https://ibb.co/0ZKtz0J

Next link down:

Cleaned up: https://ibb.co/0ZKtz0J

Detection of file downloaded: QBSPSetup.exe PCVARK

TC: Distribution point map:

"Rajasthan IN" SAME COMPANY AS BELOW: Note former IP: https://www.virustotal.com/#/ip-

THE CONNECTION IS: PCVARK TuCows is invovled as well

SEE ABOVE: https://ibb.co/rvt3C2g

32 Gopal Tower, Gopal Bari, Jaipur - 302001 Rajasthan (India)

Connected subordinate node as origination point, as was demonstrated on virus total.

Video of scam enacted:

ARTIMIS CONNECTED: https://www.threatcrowd.org/domain.php?domain=www.reimageplus.com

CLEANED UP: https://ibb.co/mSXGPqb

Reports of the scam including videos: https://techscammersunited.com/t/reimage-the-scummy-pc-

Tel Aviv, Israel

14-16 Nelson Str.

IM12AL Douglas, Isle of Man

Reimage Limited AKA Reimage Ltd

1888 844 3886

SALES: 1 888 241 1278

There are 24 domains that matched this search query.

These are listed below:

Domain Name Creation Date Registrar

anti-toolbar.com 2012-08-29 GODADDY.COM, LLC

avsoftwarereviews.com 2008-07-27 GODADDY.COM, LLC

driverscontroller.com 2018-07-01 GODADDY.COM, LLC

efixpchelp.com 2014-08-04 GODADDY.COM, LLC

efixsupport.com 2014-08-04 GODADDY.COM, LLC

efixtechsupport.com 2014-08-04 GODADDY.COM, LLC

fixerror.org 2011-12-18 GODADDY.COM, LLC

fixpcpro.com 2011-06-02 GODADDY.COM, LLC

reimageplus.com 2012-01-03 GODADDY.COM, LLC

reimagesupport.com 2014-08-04 GODADDY.COM, LLC

reimagetechsupport.com 2014-08-04 GODADDY.COM, LLC

repairsoftwarereview.com 2011-04-14 GODADDY.COM, LLC

reviewedbygeek.com 2011-12-18 GODADDY.COM, LLC

supersupport.com 2002-05-10 GODADDY.COM, LLC

top5bestregistry.com 2012-07-04 GODADDY.COM, LLC

win-guru.com 2012-11-13 GODADDY.COM, LLC

win-refresh.com 2012-11-13 GODADDY.COM, LLC

windows-fixer.com 2012-11-13 GODADDY.COM, LLC

winfix7.com 2012-11-20 GODADDY.COM, LLC

winfixtablet.com 2012-11-20 GODADDY.COM, LLC

winfixvista.com 2012-11-20 GODADDY.COM, LLC

winrefresh.com 2012-11-13 GODADDY.COM, LLC

-----------REIMAGE LIMITED CONNECTED WEBSITES DATA START-------------------------------------------------------

------------------------------ECHO SOFT INFO COM DATA START REIMAGE LIMITED CONNECTED-------------------

DATE OF DATA COLLECTION: 5 2 2019 https://ibb.co/LhqPfXR

Video of scam enacted: SECOND PARTY

Domain: www.EchoSoftinfoCom.com AKA: EchoSoftinfoCom.com

Reg Data: PRIVATE CURRENTLY

Domain Name Owner: Abuse@Godaddy.com

Reg Data is private currently

Subordinate data to ^ START

VT: Nothing currently noteable

TC: Legend: https://ibb.co/yphZkt1

CLEANED UP MAP: Not needed small map