Peter South
Active Member
I am just creating a thread for a dirt-bag scam host as per Rox's suggestion in this thread: http://www.wjunction.com/6-feedback-suggestions/173240-very-warm-thank-you-mods-community.html
Regarding matters covered in these threads: http://www.wjunction.com/search.php?searchid=3081534
Primary Website Domain Involved: http://www.SnTHostings.com
Skype Username: Sonuyos
Secondary Website Domain Involved: http://www.host-palace.com
Skype Username: saninokia
Sonuyos scammed me $80 (see previous threads). After he couldn't provide basic technical answers he passed me on to his "data-center" contact's Skype username saninokia
Below is information I quickly gathered on this scam host operation:
root@eddieJohnson:~# cat /etc/resolv.conf
nameserver 8.8.8.8
root@eddieJohnson:~# host snthostings.com
snthostings.com has address 216.24.195.22
snthostings.com mail is handled by 0 snthostings.com.
root@eddieJohnson:~# host 216.24.195.22
22.195.24.216.in-addr.arpa domain name pointer srv02.torpixhosting.com.
root@eddieJohnson:~# host srv02.torpixhosting.com
srv02.torpixhosting.com has address 216.24.195.22
root@eddieJohnson:~# whois snthostings.com
Domain Name: SNTHOSTINGS.COM
Registrar: FASTDOMAIN, INC.
Whois Server: whois.fastdomain.com
Referral URL: http://www.fastdomain.com
Name Server: NS1.TORPIXHOSTING.COM
Name Server: NS2.TORPIXHOSTING.COM
Status: clientTransferProhibited
Updated Date: 25-mar-2013
Creation Date: 16-jan-2013
Expiration Date: 16-jan-2014
root@eddieJohnson:~# whois TORPIXHOSTING.COM
Domain Name: TORPIXHOSTING.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: DNS1.TORPIXHOSTING.COM
Name Server: DNS2.TORPIXHOSTING.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 22-may-2013
Creation Date: 15-jun-2011
Expiration Date: 15-jun-2014
root@eddieJohnson:~# nmap snthostings.com
Starting Nmap 5.21 ( http://nmap.org ) at 2013-05-25 09:05 EEST
Nmap scan report for snthostings.com (216.24.195.22)
Host is up (0.18s latency).
rDNS record for 216.24.195.22: srv02.torpixhosting.com
Not shown: 928 filtered ports, 61 closed ports
PORT STATE SERVICE
21/tcp open ftp
25/tcp open smtp
53/tcp open domain
80/tcp open http
110/tcp open pop3
143/tcp open imap
443/tcp open https
465/tcp open smtps
587/tcp open submission
993/tcp open imaps
995/tcp open pop3s
###################################################################
This is the info for Host-Palace.com which Sonuyos claimed was his
host and had provided me with a Skype Username for a useless guy
named "Tipu" who only wanted to talk about selling me a VPS for
days on end and did not actually set anything up for me.
root@eddieJohnson:~# host host-palace.com
host-palace.com has address 109.202.109.16
host-palace.com mail is handled by 0 host-palace.com.
root@eddieJohnson:~# whois 109.202.109.16
inetnum: 109.202.109.0 - 109.202.109.255
netname: GL-HOSTPALACE
descr: Host-Palace.com IP space
country: NL
org: ORG-HA316-RIPE
admin-c: TS8013-RIPE
tech-c: TS8013-RIPE
status: ASSIGNED PA
mnt-by: GLOBALLAYER
source: RIPE # Filtered
organisation: ORG-HA316-RIPE
org-name: HOSTPALACE
descr: Host Palace Internet Services
org-type: OTHER
address: R.N.T.ROAD
mnt-ref: GLOBALLAYER
mnt-by: GLOBALLAYER
source: RIPE # Filtered
person: Tipu Sultan
address: R.N.T.ROAD
address: Suri
phone: +917384944677
nic-hdl: TS8013-RIPE
abuse-mailbox: abuse@host-palace.com
mnt-by: GLOBALLAYER
source: RIPE # Filtered
The intent of this thread is to warn any one else of this scam host and to also ensure that they simply do not pop up again on the radar to scam anyone again.
Regarding matters covered in these threads: http://www.wjunction.com/search.php?searchid=3081534
Primary Website Domain Involved: http://www.SnTHostings.com
Skype Username: Sonuyos
Secondary Website Domain Involved: http://www.host-palace.com
Skype Username: saninokia
Sonuyos scammed me $80 (see previous threads). After he couldn't provide basic technical answers he passed me on to his "data-center" contact's Skype username saninokia
Below is information I quickly gathered on this scam host operation:
root@eddieJohnson:~# cat /etc/resolv.conf
nameserver 8.8.8.8
root@eddieJohnson:~# host snthostings.com
snthostings.com has address 216.24.195.22
snthostings.com mail is handled by 0 snthostings.com.
root@eddieJohnson:~# host 216.24.195.22
22.195.24.216.in-addr.arpa domain name pointer srv02.torpixhosting.com.
root@eddieJohnson:~# host srv02.torpixhosting.com
srv02.torpixhosting.com has address 216.24.195.22
root@eddieJohnson:~# whois snthostings.com
Domain Name: SNTHOSTINGS.COM
Registrar: FASTDOMAIN, INC.
Whois Server: whois.fastdomain.com
Referral URL: http://www.fastdomain.com
Name Server: NS1.TORPIXHOSTING.COM
Name Server: NS2.TORPIXHOSTING.COM
Status: clientTransferProhibited
Updated Date: 25-mar-2013
Creation Date: 16-jan-2013
Expiration Date: 16-jan-2014
root@eddieJohnson:~# whois TORPIXHOSTING.COM
Domain Name: TORPIXHOSTING.COM
Registrar: GODADDY.COM, LLC
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: DNS1.TORPIXHOSTING.COM
Name Server: DNS2.TORPIXHOSTING.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 22-may-2013
Creation Date: 15-jun-2011
Expiration Date: 15-jun-2014
root@eddieJohnson:~# nmap snthostings.com
Starting Nmap 5.21 ( http://nmap.org ) at 2013-05-25 09:05 EEST
Nmap scan report for snthostings.com (216.24.195.22)
Host is up (0.18s latency).
rDNS record for 216.24.195.22: srv02.torpixhosting.com
Not shown: 928 filtered ports, 61 closed ports
PORT STATE SERVICE
21/tcp open ftp
25/tcp open smtp
53/tcp open domain
80/tcp open http
110/tcp open pop3
143/tcp open imap
443/tcp open https
465/tcp open smtps
587/tcp open submission
993/tcp open imaps
995/tcp open pop3s
###################################################################
This is the info for Host-Palace.com which Sonuyos claimed was his
host and had provided me with a Skype Username for a useless guy
named "Tipu" who only wanted to talk about selling me a VPS for
days on end and did not actually set anything up for me.
root@eddieJohnson:~# host host-palace.com
host-palace.com has address 109.202.109.16
host-palace.com mail is handled by 0 host-palace.com.
root@eddieJohnson:~# whois 109.202.109.16
inetnum: 109.202.109.0 - 109.202.109.255
netname: GL-HOSTPALACE
descr: Host-Palace.com IP space
country: NL
org: ORG-HA316-RIPE
admin-c: TS8013-RIPE
tech-c: TS8013-RIPE
status: ASSIGNED PA
mnt-by: GLOBALLAYER
source: RIPE # Filtered
organisation: ORG-HA316-RIPE
org-name: HOSTPALACE
descr: Host Palace Internet Services
org-type: OTHER
address: R.N.T.ROAD
mnt-ref: GLOBALLAYER
mnt-by: GLOBALLAYER
source: RIPE # Filtered
person: Tipu Sultan
address: R.N.T.ROAD
address: Suri
phone: +917384944677
nic-hdl: TS8013-RIPE
abuse-mailbox: abuse@host-palace.com
mnt-by: GLOBALLAYER
source: RIPE # Filtered
The intent of this thread is to warn any one else of this scam host and to also ensure that they simply do not pop up again on the radar to scam anyone again.