FAKE DMCA's?

[Jigster715]

Looks like they iz on tha rise.

[Jigster715]

Which one is the clone?

PicsCrazy - simple image hosting

OR

PicsCrazy - simple image hosting

Both claim to be:

PicsCrazy
Simple Image Hosting

[Coup]

PING pzy.be (64.185.232.106) 56(84) bytes of data.
PING picscrazy.com (64.185.232.106) 56(84) bytes of data.


Pretty good clone job IMO OP

[DamnSexy]

Originally Posted by Jigster715

Which one is the clone?

[Jigster715]

Thanks for that information. The .be (Belgium) is using the site while sending out fake DMCA's.

I got one yesterday for a picture I bought 6 years ago as part of a package. The .be has the same pic. The idiot sending the DMCA out used the .be as a reference that e-mail was real.

Name in e-mail went to fake address in UK. Name goes to an Indonesian lady.
Kinda funny the "lady" sending the DMCA would point to .be site and leave it up.
E-mail I found on a list site of scraped email addys.
Another dumbass cloner.

Can anyone tell where the hosts are at for each site? From tcpiputils they are spoofing or they are hosted at same host in Los Angeles.

I'm racking my brain...what hated webmaster do we know from Belgium who has been accused of this sort of cloning shit before?

[Coup]

Originally Posted by DamnSexy

both domains are whois protected. this screenshot proves nothing

[Coup]

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to InterNIC | The Internet's Network Information Center
for detailed information.

Domain Name: PICSCRAZY.COM
Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Whois Server: whois.enom.com
Referral URL: eNom - domain name, web site hosting, email, registration
Name Server: NS0.DNSMADEEASY.COM
Name Server: NS1.DNSMADEEASY.COM
Name Server: NS2.DNSMADEEASY.COM
Name Server: NS3.DNSMADEEASY.COM
Name Server: NS4.DNSMADEEASY.COM
Status: ok https://www.icann.org/epp#OK
Updated Date: 14-dec-2015
Creation Date: 14-jul-2006
Expiration Date: 14-jul-2016

>>> Last update of whois database: Fri, 22 Jan 2016 09:34:20 GMT <<<

For more information on Whois status codes, please visit
https://www.icann.org/resources/page...-2014-06-16-en.

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.


Domain Name: PICSCRAZY.COM
Registry Domain ID: 518480918_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: eNom - domain name, web site hosting, email, registration
Updated Date:
Creation Date: 2006-07-14T15:13:05.00Z
Registrar Registration Expiration Date: 2016-07-14T15:13:05.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Reseller: NAMECHEAP.COM
Domain Status: ok https://www.icann.org/epp#ok
Registry Registrant ID:
Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA
Registrant State/Province: PANAMA
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: 88895236D7164500A1B5E1CA43E33458.PRO...OISGUAR D.COM
Registry Admin ID:
Admin Name: WHOISGUARD PROTECTED
Admin Organization: WHOISGUARD, INC.
Admin Street: P.O. BOX 0823-03411
Admin City: PANAMA
Admin State/Province: PANAMA
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email: 88895236D7164500A1B5E1CA43E33458.PRO...OISGUAR D.COM
Registry Tech ID:
Tech Name: WHOISGUARD PROTECTED
Tech Organization: WHOISGUARD, INC.
Tech Street: P.O. BOX 0823-03411
Tech City: PANAMA
Tech State/Province: PANAMA
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: 88895236D7164500A1B5E1CA43E33458.PRO...OISGUAR D.COM
Name Server: NS0.DNSMADEEASY.COM
Name Server: NS1.DNSMADEEASY.COM
Name Server: NS2.DNSMADEEASY.COM
Name Server: NS3.DNSMADEEASY.COM
Name Server: NS4.DNSMADEEASY.COM
DNSSEC: unSigned
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.4252982646
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database:

The data in this whois database is provided to you for information
purposes only, that is, to assist you in obtaining information about or
related to a domain name registration record. We make this information
available "as is," and do not guarantee its accuracy. By submitting a
whois query, you agree that you will use this data only for lawful
purposes and that, under no circumstances will you use this data to: (1)
enable high volume, automated, electronic processes that stress or load
this whois database system providing you this information; or (2) allow,
enable, or otherwise support the transmission of mass unsolicited,
commercial advertising or solicitations via direct mail, electronic
mail, or by telephone. The compilation, repackaging, dissemination or
other use of this data is expressly prohibited without prior written
consent from us.

We reserve the right to modify these terms at any time. By submitting
this query, you agree to abide by these terms.
Version 6.3 4/3/2002

% .be Whois Server 6.1
%
% The WHOIS service offered by DNS Belgium and the access to the records in the DNS Belgium
% WHOIS database are provided for information purposes only. It allows
% persons to check whether a specific domain name is still available or not
% and to obtain information related to the registration records of
% existing domain names.
%
% DNS Belgium cannot, under any circumstances, be held liable where the stored
% information would prove to be incomplete or inaccurate in any sense.
%
% By submitting a query you agree not to use the information made available
% to:
% - allow, enable or otherwise support the transmission of unsolicited,
% commercial advertising or other solicitations whether via email or otherwise;
% - target advertising in any possible way;
% - to cause nuisance in any possible way to the domain name holders by sending
% messages to them (whether by automated, electronic processes capable of
% enabling high volumes or other possible means).
%
% Without prejudice to the above, it is explicitly forbidden to extract, copy
% and/or use or re-utilise in any form and by any means (electronically or
% not) the whole or a quantitatively or qualitatively substantial part
% of the contents of the WHOIS database without prior and explicit permission
% by DNS Belgium, nor in any attempt thereof, to apply automated, electronic
% processes to DNS Belgium (or its systems).
%
% You agree that any reproduction and/or transmission of data for commercial
% purposes will always be considered as the extraction of a substantial
% part of the content of the WHOIS database.
%
% By submitting the query you agree to abide by this policy and accept that
% DNS Belgium can take measures to limit the use of its whois services in order to
% protect the privacy of its registrants or the integrity of the database.
%

Domain: pzy.be
Status: NOT AVAILABLE
Registered: Tue Feb 21 2012

Registrant:
Not shown, please visit www.dnsbelgium.be for webbased whois.

Registrar Technical Contacts:
Name: Gandi admin1
Organisation: Gandi SAS
Language: fr
Phone: +33.143737851
Fax: +33.143731851
Email: [email protected]


Registrar:
Name: Gandi Sas
Website: https://www.gandi.net/domain/buy/result/

Nameservers:
ns15.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns14.dnsmadeeasy.com
ns13.dnsmadeeasy.com
ns10.dnsmadeeasy.com
ns12.dnsmadeeasy.com

Keys:

Flags:
clientTransferProhibited

Please visit www.dnsbelgium.be for more info.

Both domains use the same DNS service and both point to the same server. I would venture to guess both domains are controlled by the same owner.

The only difference between the two are the different domain registrars (enom and gandi)

[Jigster715]

Thanks Coup. At end of the day it looks like he just wants to drive traffic to his crappy page.

[pornguy]

Originally Posted by DamnSexy

That just means the domain was registered.

Check out the wayback and see what it shows for both

[sarettah]

Dangerous Website Blocked

You attempted to access:
pzy.be/

This is a known dangerous website. It is recommended that you do NOT visit this site. The detailed report explains the security risks on this site.

For your protection, this website has been blocked. Visit Symantec to learn more about phishing and internet security.

Thanks for that

.