Web Hosting Talk







View Full Version : Re: FRAUD WARNING! 1mhost.com -- new info -- connection to Hackerz4Palestine


JRGalt
12-05-2002, 12:37 AM
The 1mhost.com thread was closed, but there is new information:

haganah b'internet::internet haganah (http://haganah.org.il/haganah/archives/000047.php#000047) reports a connection to the Islamist group: Hackerz4Palestine -- which is connected to the Hizbullah-Hackers and many other Islamist groups now carrying out
credit card fraud on the internet. (http://haganah.org.il/haganah/archives/000043.php#000043)

Perhaps 1mHost.com was a scam ISP set up to collect credit card numbers to be used to finance terror in the Middle East. Then, after they collect a few numbers, they shut it down and put it up again at another location.

1mhost.com has been removed but at the bottom of the Google cache of the page for 1mhost.com there is a link-icon for "Designed by eye-adv.net". This address and web site is still valid. And it lists it's domain registrar through 1mhost.com

eye-adv.net is registered to Basem Hawasli in Damascus, Lebanon (same city as to H4Palestine.com) -- Yes, we know Damascus is in Syria but the Hackerz don't know geography.
____________________

Whois Information from "whois.wildwestdomains.com" about eye-adv.net

Registrant:
Basem Hawasli
Eye Advertising
Khaled Ben Alwaled Str.
Damascus, 1026
Lebanon

Registered through: domain name registration (http://www.1mhost.com)
Domain Name: EYE-ADV.NET
Created on: 27-Sep-02
Expires on: 27-Sep-03
Last Updated on: 09-Nov-02

Administrative Contact:
Hawasli, Basem hawasli@scs-net.org
Eye Advertising
Khaled Ben Alwaled Str.
Damascus, 1026
Lebanon
+963 11 2237439 Fax -- +963 11 2247730
Technical Contact:
Hawasli, Basem hawasli@scs-net.org
Eye Advertising
Khaled Ben Alwaled Str.
Damascus, 1026
Lebanon
+963 11 2237439 Fax -- +963 11 2247730

Domain servers in listed order:
NS9.DNSPROTECT.COM
NS10.DNSPROTECT.COM

_________________

Whois Information from "whois.godaddy.com" about h4palestine.com

Registrant:
Bassel Khartabil
PalHackerz
damascus
damascus, 00963
Lebanon

Registered through: Go Daddy Software (http://www.godaddy.com)
Domain Name: H4PALESTINE.COM
Created on: 24-Aug-02
Expires on: 24-Aug-03
Last Updated on: 05-Nov-02

Administrative Contact:
kh, bassel wardsalem@websy.net
h4palestine
damas
damascus, 54546
Lebanon
96394335985 Fax --
Technical Contact:
kh, bassel wardsalem@websy.net
h4palestine
damas
damascus, 54546
Lebanon
96394335985 Fax --

Domain servers in listed order:
NS1.LIVEDNS.CO.UK
NS2.LIVEDNS.CO.UK

_____________________
We trace eye-adv.net to

Whois Information from "whois.arin.net" about 216.180.225.50

OrgName: Net Depot, Inc.
OrgID: DEPO
Address: 55 Marietta St NW, Suite 1720
Atlanta GA 30303

NetRange: 216.180.224.0 - 216.180.255.255

OrgAbuseHandle: DV2AB-ARIN
OrgAbuseName: DV2 Abuse
OrgAbusePhone: +1-404-230-9150
OrgAbuseEmail: abuse@dv2.net
_____________________

NetDepot is the host of several Islamist terror sites such as Al-Qassam Martyrs Brigade -- the Military wing of Hamas.

Jeff Hinkle, CEO of NetDepot, claims that he is being forced to host these Islamist terror sites by the U.S. Government! (http://groups.yahoo.com/group/Terror_Web/message/39)

Some of us are suspicious about what's really going on in Atlanta. Perhaps some spokesperson from DV2 can explain what's really going on.

AmericanD
12-05-2002, 12:41 AM
Post Count ONly 1 ?

Akash
12-05-2002, 12:53 AM
The 1mhost.com thread was closed, but there is new information:

Gee...do you suppose it was closed for a reason?

The accusation you are making is very serious and is something that should be reported to an FBI, posting it on WHT will do nothing.

nic0le
12-05-2002, 12:59 AM
everyone has to start somewhere... but yeah i thought this issue was now a no fly zone

JRGalt
12-05-2002, 01:21 AM
Yes. The accusation is very serious.

Check out the 4 terrorist sites in the links I gave.

I can also provide you with URLs for hundreds of Islamist hacker sites -- many who work credit card fraud, virus, DOS attacks, ...etc.

Yes. It should be reported to the FBI. Here's the address in Atlanta.

The FBI, Atlanta Division
Suite 400, 2635 Century Center Parkway, NE
Atlanta, Georgia 30345
(404) 679-9000

Also contact the FBI in your local city. The Canadian authorities should be involved as well.

nic0le
12-05-2002, 01:25 AM
since you have all the evidence and the running knowledge of this issue shouldn't YOU be the one contacting the fbi rather than trying to get other people to? seems uber suspect to me.:eek:

Akash
12-05-2002, 01:34 AM
I can also provide you with URLs for hundreds of Islamist hacker sites -- many who work credit card fraud, virus, DOS attacks, ...etc.


I'd have to agree with nicole here...YOU should be contact the fbi with this information.

for everyone else, the connection between terrorists and web hosting has been discussed to death, let's leave it at this. if you have any information, posting it on WHT will not help. contact your local FBI office and they'll take it from there.

nvphone
12-05-2002, 01:40 AM
also contact Godaddy.
Maybe they have been hit for phony cc#'s.
Using the term,"used to finance terror in the Middle East " is pretty heavy!
I doubt if a few CC's will bring in enough money to carry out terror.
If you really think you are on to something, then yes, YOU should call the FBI.
Who knows, you might get on Larry King.
Good-luck.....................

Relyc
12-05-2002, 01:46 AM
Yes it's quite suspicious that you would ask us to report it rather than you doing it yourself...

JRGalt
12-05-2002, 01:47 AM
Originally posted by nic0le
since you have all the evidence and the running knowledge of this issue shouldn't YOU be the one contacting the fbi rather than trying to get other people to? seems uber suspect to me

I have reported it to the FBI. -- 12 months ago. Problem should be solved by now.

My impression is that either the FBI isn't interested in the problem or perhaps doesn't understand how serious it is.

My hope is that by posting on WHT someone knowledgeble might become interested in looking into the Islamist use of the internet.

nic0le
12-05-2002, 01:53 AM
Originally posted by JRGalt

My hope is that by posting on WHT someone knowledgeble might become interested in looking into the Islamist use of the internet.

i think you might get into trouble with that statement. maybe you need to contact them again about the issue but i don't know that posting about it here is going to do much good. no matter how knowledgable a person is it's hard to go by inuendo and heresy without being accused of libel.

AmericanD
12-05-2002, 02:00 AM
Originally posted by JRGalt

the Islamist use of the internet.


what do you know about the Islam? how could u say that ?

JRGalt
12-05-2002, 02:01 AM
Originally posted by nvphone
Using the term,"used to finance terror in the Middle East " is pretty heavy!
I doubt if a few CC's will bring in enough money to carry out terror.

A 'few' CC's multiplied by thousands and soon we're talking real money.

Here's a recent story on the q8-Hackers (q8 == Kuwait)
Stolen Credit Drives Web Network (http://www.ctnow.com/news/custom/newsat3/hc-hackers1117.artnov17,0,7732302.story?coll=hc-headlines-newsat3)

JRGalt
12-05-2002, 02:05 AM
Originally posted by AmericanD what do you know about the Islam? how could u say that ?

Yes, I have some knowledge of Islam and Islamists. The two are different, but related.

Follow the links I gave above and spend some time studying them.

AmericanD
12-05-2002, 02:12 AM
The site you gave us in your 1st post, is in Hebrew and looks to me a Jewish site.

JRGalt
12-05-2002, 02:28 AM
Originally posted by nic0le
i think you might get into trouble with that statement. maybe you need to contact them again about the issue but i don't know that posting about it here is going to do much good. no matter how knowledgable a person is it's hard to go by inuendo and heresy without being accused of libel.

We've been in contact with DV2 many times. I have posted just one of several exchanges.

These are real emails from real people to and from DV2 on those dates. (http://groups.yahoo.com/group/Terror_Web/message/39) Libel is only a problem if what I am saying is false.

It's not "inuendo and heresy" to trace IP addresses back to their hosts.

http://www.mojahedoon.net/vb/ == IP 209.51.153.141

http://www.purenectar.net/vb/ == IP 209.51.153.138

http://www.jehad.net/3.htm == IP 216.180.224.51

http://www.kataeb-ezzeldeen.com/ == IP 209.51.136.46

These, as well as the www.eye-adv.net are all in the NetBlock of NetDepot == DV2. I'm just hoping a spokesperson from that company will join this thread and help clarify things.

I think that Jeff Hinkle is telling us a falsehood when he says "Re:purenectar -- Hi - thanks for your conccern - but we do not host this site".

Akash
12-05-2002, 02:33 AM
I'm just hoping a spokesperson from that company will join this thread and help clarify things.


I'm hoping the spokesperson will be smart and refrain from making any public comments. Report it to the FBI and let them handle it, you really can't/shouldn't do anything else

essene
12-05-2002, 02:37 AM
ermm...

The world has gotten to the point where I'm just going to up and move to Antarctica and offer hosting to the penguins......

JRGalt
12-05-2002, 02:39 AM
Originally posted by AmericanD The site you gave us in your 1st post, is in Hebrew and looks to me a Jewish site.

The logo of the site is in Hebrew. It spells 'haganah', which is translated as 'defense'. The rest of the site is in English.

Reptilian Feline
12-05-2002, 07:01 AM
Since when does Hebrew and Israel = Jewish?

As far as I know Hebrew is a language read and spoken by people living in Israel, people who study ancient languages and so on.
Israel is, at least for now, a country where people is either jewish, christian or muslim. and maybe a few of other religions as well...
Jewish, that's what you are if you have a mother that is Jewish or if you have converted to Judaism as an adult.

Chicken
12-05-2002, 10:26 AM
Yes, the last thread was closed. Please forward any new information to the appropriate agency that handles it.