Yeah..i got fucked too..I traced out the web addresses and IP addresses and it looks like the main point of operation is in Montreal Canada with money being funneled to Russia through medidome.ru. Unsuspecting people go online and sign up for music or software at unrestrictedownloads.com...you are then redirected to mediome.ru where your information is taken for your card. The actual billing is done by marketbill.com and or transact-bill.com.

I was unable to pull domain info for mediadomne.ru as the Russians don't list anything publicly with domains registered in russia. It looks like a crime ring which branches through montreal to scottsdale arizone to russia. Hopefully with the information I provided hopefully you folks can be refunded the monies stolen by Tuscows, inc.. It is nothing but phoney shell companies. Here is my email to the Royal Canadian Police.
___________________________________


Dear Royal Canadian Mounted Police,

To Whom It May Concern,


I have forwarded an email from a company that is operating a scam somewhere out of Montreal. The company has a name of TRANSACT-BILL.COM. I signed up at mediadome.ru to download a song for $1.99 that I wanted to use on my business website. These idviduals are connected to other individuals in Russia. I also got information in Malta. The scammers are using different aliases as listed below in this email.


Listed on my transaction history...Instead TRANSACT-BILL.COM withdrew $39.95 on 21-JAN-2010 01:26:02 AM and then another $40.27 on 22-JAN-2010 04:29:44 AM. A contact number on the transaction is 8662657835. I called the number and a person gave me a number for direct contact at area code 514-733-2716 which is in montreal. When I go to www.transact-bill.com it redirects over to maketbill.com. I traced both of them out and the IP addresses are located in Montreal.


I work in IT(information technology. The website I went to and signed up initially was over in Russia. Www.mediadome.ru. Since it is a Russian website, the Russian entities that control domain registration have total control over the databases. I have been unable to get any information on mediadome.ru and who owns it.

A red flag went up when I saw the Russian website. I told myself that there has to be some honest companies over in Russia, so I went through the process of the order.

The transaction on my credit card listed a phone number as 866-265-7835 and the billing company as TRANSACT-BILL.COM. I traced out TRANSACT-BILL.COM through whois to check ip addresses and server locations and got this:


WHOIS results for TRANSACT-BILL.COM

I typed 866-265-7835 into google and came across numbers of people whose credit cards were defrauded. The entity billing these cards transact-bill.com run though whois data bases gave me the below information. The ip addy is in Montreal. I was given a number of 514-733-2716 after I called the 866-265-7835 number. The 514 number is in Montreal.


The unrestricteddownloads.com website is registered through godaddy.com and lists a phone number of 480-624-2599. I am contacting godaddy as I write this to you. I am contacting godaddy to report that individuals using godaddy to register their site unrestrictedownloads.com are running it as a criminal enterprise.


Going to the TRANSACT-BILL.COM redirects you over to marketbill.com. I ran marketbill.com through the whois database on networksolutions.com website and got this:
___________


Registrant:
Market Engines
48/4 amery street Sliema
SLMSLM 1701
XXXXX, XXXXX ---
MT
35621423255


Domain Name: MARKETBILL.COM

Administrative Contact:
DNS, Admin [email protected]
48/4 amery street Sliema
SLMSLM 1701
XXXXX, XXXXX ---
MT
35621423255


Technical Contact:
DNS, Admin [email protected]
48/4 amery street Sliema
SLMSLM 1701
XXXXX, XXXXX ---
MT
35621423255


Record last updated 11-17-2009 10:45:45 AM
Record expires on 04-19-2010
Record created on 04-19-2005

Domain servers in listed order:
NS1.HSPROVIDER.NET 63.243.188.2
NS2.HSPROVIDER.NET 63.243.188.3


Current Registrar: DIRECTNIC, LTD
IP Address: 63.243.188.109 (ARIN & RIPE IP search)
IP Location: CA(CANADA)-QUEBEC-MONTREAL
Record Type: Domain Name
Server Type: IIS 6
Lock Status: clientDeleteProhibited
WebSite Status: Active
DMOZ no listings
Y! Directory: see listings
Secure: No
Ecommerce: Yes
Traffic Ranking: 4
Data as of: 22-Apr-2008


Registrant:
Market engines
48/4 Amery Street
SLMSLM 1701 MT
Sliema, 1701
MT

Domain name: TRANSACT-BILL.COM


Administrative Contact:
DNS, Admin [email protected]
48/4 Amery Street
SLMSLM 1701 MT
Sliema, 1701
MT
+35621423255
Technical Contact:
DNS, Admin [email protected]
48/4 Amery Street
SLMSLM 1701 MT
Sliema, 1701
MT
+35621423255


Registrar of Record: TUCOWS, INC.
Record last updated on 22-Dec-2009.
Record expires on 22-Dec-2011.
Record created on 22-Dec-2009.

Registrar Domain Name Help Center:
http://domainhelp.tucows.com

Domain servers in listed order:
NS2.SYSTEMDNS.COM
NS3.SYSTEMDNS.COM
NS1.SYSTEMDNS.COM


Domain status: ok

Current Registrar: TUCOWS INC.
IP Address: 64.99.64.37 (ARIN & RIPE IP search)
IP Location: CA(CANADA)-ONTARIO-TORONTO
Lock Status: ok
DMOZ no listings
Y! Directory: see listings
Data as of: 23-Apr-2008


These individuals are using the unrestrictedownloads.com as one the main vehicles to defraud individuals. Godaddy should have some type of records on these individuals to aid in tracing out who these people maybe. It looks to me like Russian organized criminal enterprise. The money they stole was off of an unemployment benefits card issued to me from the state of Missouri in the United States. I live in Kansas City, Missouri.


These people are defrauding Canadians, Americans and others out of millions of dollars. I don't have much love for parasites like this. It would be fantastic if you could shut them down, seize their assets and put them in prison where they can not bother anyone ever again.


Thank You,


Sincerely,

Steve Jolinski

(816) 372-8015

[email protected]

www.kansascitycomputers.com

www.keywordbibleprecepts.org


--- On Thu, 1/14/10, Customer Service <[email protected]> wrote:


From: Customer Service <[email protected]>
Subject: Membership Confirmation
To: [email protected]
Date: Thursday, January 14, 2010, 2:38 AM


This is an automatic email. PLEASE DO NOT REPLY TO THIS EMAIL!
Dear steven jolinski

Welcome to the worlds greatest file sharing software website on the internet!

Please print out this page for your records.

Billing information
Membership type:Unlimited Access - 7-day Trial with Optional Lifetime Purchase for a total of 1.99 $ USD

Grand total: 1.99 $ USD

The charge will appear on your credit card as TRANSACT-BILL.COM

Membership information
Order ID #: 150681100113213815887

To login please use the email address used for signing up.

Username: Username : [email protected]
Password: Password : 939557

To begin enjoying your membership, please go to http://www.unrestrictedownloads.com
___________________________________
TRACEING OUT MARKETENGINES.COM YIELDS THE SAME MALTA EMAIL ADDRESSES BUT MARKETENGINES.COM SERVERS ARE LOCATED IN HOLLYWOOD FLORIDA BROWARD COUNTY.>Current Registrar: DIRECTNIC, LTD
IP Address: 209.200.154.206 (ARIN & RIPE IP search)
IP Location: US(UNITED STATES)-FLORIDA-HOLLYWOOD
Record Type: Domain Name
Server Type: IIS 6
Lock Status: clientDeleteProhibited
WebSite Status: Active
DMOZ no listings
Y! Directory: see listings
Secure: Yes
Ecommerce: No
Traffic Ranking: 4
Data as of: 22-Apr-2008


Sincerely,

Customer Support department