Citizen Group Inc scam

Citizen Group Inc Fraud

Don't Bear Internet Fraud

This fraudster should not be confused with any legitimate company of the same or similar name - the website graphics below and the included evidence clearly identify the fake website and these fraudsters and no other company of the same or a similar name.

Citizen Group Inc scam screenshot (26-Jan-2010)

Citizen Group Inc scam. This is just the latest of the numerous highly generic Easter European 'Group Inc.' scam websites that has been set up to form a front for a money laundering fraud job spamming campaign. It's a bit slicker than most but at the end of the day its function is to con you into believing that they are a legitimate company when the evidence clearly demonstrates that they are crooks. It's an identical scam to Epayment Solutions, Emarket Solutions Inc., Legal Operations Inc., Secure Operations Inc., Oranta Group Inc., Ketler Group Inc., Profit Financing Inc., Logic Group Inc., Maxi Group Inc., Fair Group, Fartex Group, MGPA Group Inc., Sky Group Inc., Idea Group Inc., Air Group Inc., Ideal Group Inc., Capital Group Inc., Fox Group Inc., Ebusiness Group Inc., Onicks Group Inc., Multi Group Inc., Single Group, DDK Group Inc., EFS Capital Group Inc., Eagle Group Inc. FCB Group Inc., TDK Group Inc., Ecos Group Inc., BBM Group Inc., Veston Group Inc., BCG Group Inc., Flar Group Inc., Ward Group Inc., Highway Group Inc., Wescom Group Inc., Spread Group Inc, United Group Inc., Entrust Group Inc, Puritan Group Inc, Vision Group Inc, Nvidia Group Inc, Alt Group Inc, MAC Group Inc, Dream Group Inc., ITS Group Inc, Pacific Group Inc, Aurora Group Inc and the Render Group Inc fraudsters - clear evidence of a serial scammer. Numerous other aliases can be found by a search of my site for "Group Inc". The website carries a clear money mule solicitation, (which is the sole reason for the site), their multiple domains were only registered very recently, they are not a registered company, their fake management team is the same as previous aliases and all their contact and location details are bogus. They pretend to be a US company, but their registrars and hosts are generally Eastern European or Asian.

Citizen Group Inc : Evidence of Criminal Fraud

i) Citizen Group Inc make absolutely no claims whatsoever about when they were founded or how long they have been in operation, (although you will notice that the fake 'Alan Garner' below "has been working for the company since 2001"), but their domain citizen-groupsvc.tw was only registered with Key-Systems GmbH on 16-Dec-2009 for the usual 'criminal's domain' minimum period of only one year. A clear indication of a fraud domain. [See table below for further fraud domains, all registered recently for one year only].

ii) They claim to be located in New York, but a webcheck shows that this particular Citizen Group Inc at the registered address are not registered in the NY state business register. Check for yourself. Not to be confused with any other company of the same fairly common name.

iii) The usual suspects...this fake 'Management Team' with stock photos and differing names has been a feature of a large number of their previous scams (Google search for "creator of unique financial flows management schemes repeatedly awarded" from the text below to see a few. Irrefutable evidence of a serial criminal fraudster.

Management Team

President of the company: Andrew Skolezky ('Nicholas Engle' in the identical Render Group Inc Inc scam and many other names in the various other scams)
Andrew Skolezky is the founder of the company. He has higher economic and legal education. For 15 years Mr. Andrew Skolezky has been occupied in the sphere of finance and banking. He has risen from a clerk to the chief executive of a large bank. Andrew Skolezky is the creator of unique financial flows management schemes repeatedly awarded for achievements in finance and investment. He is among top-100 world's leading financiers. Andrew Skolezky also gives lectures on business fundamentals and investment policy in the world's largest universities.

Chief executive: Brian Taylor
Brian Taylor is a co-founder of the company and a member of the Board of Directors. He boasts 2 diplomas of higher financial education being a graduate of the US university and a post-graduate of higher educational institution of England. Before the company was set up he had been working at the European leading trading site (oil and gas sphere). In the company Brian Taylor supervises the major trends of activity. Investment projects created by him have won recognition of the leading finance experts. From time to time Mr. Taylor holds seminars in the US universities.

Vice-President: Terry Bennett
Terry Bennett is a member of the Board of Directors. He has been working for the Company for 5 years and before that was a Commercial Manager of a large corporation engaged in electronics production. Beside his main speciality Terry Bennett graduated with honours from university of England qualified in "Long-Term Financial Obligations". He supervises investment policy and also co-ordinates the work of affiliates situated in foreign countries.

Chief Financial Officer: Alan Garner
Alan Garner has been working for the company since 2001. Previously he was engaged in banking, and within a short period of time he was promoted to the manager of investment fund of one of the largest banks of the country. Thanks to Alan Garner our company could reduce operating costs by 12% and minimize both own and partner-companies' financial risks. His terms of reference also cover continuous work with affiliates and attraction of potential partners.

Technical Manager: Tim Kay
Tim Kay has been working for the company for 3 years. He has higher education specializing in "Information Protection in Corporate Communication Systems". The scope of his team comprises: on-line projects technical support, information protection, software development, etc.

PR-Manager: Kenny Moore
Kenny Moore heads Advertisement Department. His work experience in the company dates back to the moment of its foundation. His responsibility is to promote "Citizen Group Inc" brand in the global business community. A great number of his ideas were taken into account by many large companies of the world. His publications are recommended for study in many universities.

iv) A Google search shows no genuine internet presence at all for this particular "Citizen Group Inc", apart from their own multiple fraud sites that pop up, of course. Not to be confused with the many other companies of the same name - it seems to be pretty generic.

v) Another crystal clear Russian/Ukrainian fraud and yet another set of fake Location Details (copied from their website)

(Bear in mind that these crooks are not a legally registered business entity in New York state at the address balow so their location and contact details are not going to be genuine)

Main Address:
Office Suites
28N De Baun Ave
Suite 200
Suffern, NY, 10901
USA

Tel: 1-845-738-4372
Fax: 1-845-504-4103

• - A Google Search for the address "28N De Baun Ave Suite 200 Suffern, NY" returns zero results for these crooks.
• - A Google Maps business search at the street address "28N De Baun Ave, Suffern, NY" shows no such business listed at that address.
• - There are no Google hits for the above telephone number "1-845-738-4372", (ignoring the crooks own fake websites, of course).
• - There are no Google hits for the above Fax. number "1-845-504-4103", (ignoring the crooks own fake websites, of course).
All clear evidence of the usual fake details for this serial fraudster.

vi) Here is the obvious money laundering position of "Payment Processing Assistant" posted on their website:

Payment Processing Assistant

AVAILABLE
Location: USA, Canada (This vacancy is valid for US and Canadian residents ONLY)
Status: Open
Employee Type: Part-Time Employee
Number of employees required: 3

Candidate Requirements:

    * not less than 18 years old
    * internet access
    * availability by phone (1-2 hours a day)
    * a bank account to process payments
    * good credit history with your bank (new bank account is optional)
    * no criminal offense or convictions
    * experience in the field of finance is preferred

DUTIES
We are searching for employees to process payments coming from our clients. Citizen Group Inc. will provide an agent with detailed instructions as in regard to payment processing operations, including sender full name and amount total for each separate case. When funds enter employee's bank account, Payment Processing Agents duty is to withdraw cash and transfer the funds via International Wire Transfer or Western Union/Money Gram money transfer systems. The main advantage of our services is the shortest possible time within which the seller can receive money for the services/goods sold. If this operation is delayed, our clients are entitled to cancel their contract with us and we suffer financial loss. Therefore, successful applicant must be very responsible and careful!

TRIAL PERIOD POLICY
Successful applicants are offered the position on a probationary period basis (1 month). This is the period when a new employee will be trained and receive online support while working and being paid. A personal supervisor can recommend termination during/after the trial period depending on agent's activity. New employee should be responsible and strictly follow supervisor's recommendations to pass the Probationary Period successfully and be employed by us on a regular basis.

SALARY
During the probationary period we offer USD 2,300 monthly salary plus 8% commission for each payment processing operation. For example, an average $5,000 payment will entail $400 commission (but WU/MG fee is paid from this money, please see below for more details). Furthermore, we offer $50 bonus for each transaction completed by 11 a.m. (local time). With the current number of clients, on average, your overall income will amount to up to USD 4,000 per month. A successful agent may ask for additional tasks and earn more. After the probationary period, base salary goes up to USD 3,000 per month plus 8% commission. Base salary ($2,300) will be transferred at the end of the month to employee's bank account via Direct Deposit. Commission (8%) is to be deducted from the processed money at the time of the transfer.

IMPORTANT DETAILS

    * Payment Processing Agents is supposed to process received assets during one business day, i.e. from the moment of money entering their bank account to the moment of re-send to our client in accordance with contract terms. If money enters employee's account on a day-off or holiday, all payment processing procedures have to be completed during the next working day.
    * Payment Processing Agents receives invoices for each transaction every 14 days. This document is a confirmation of transaction validity and in case of any (if any at all) unforeseen circumstances it will evidence your personal non-participation. All invoices will contain detailed information on money sender and will be both sealed and certified with President's signature.
    * After the Probationary Period completion, invoices will be sent every business day.
    * Since business transfers can be processed with delays, Payment Processing Agents should specify each transfer as a private transaction. This provision is also applicable in case of a third party interest in the transfer.
    * Our clients appreciate our operational efficiency and are ready to pay extra fee for shorter transaction terms. If we manage to deliver goods to buyer within 5 days, the deal is considered to be fulfilled at the earliest possible date.
    * All the fees (WU/MG) are paid from employee's commission. HOWEVER, our company undertakes to reimburse part of expenses which are incurred in connection with money transfer (WIRE or by Western Union/Money gram system) should money transfer charges exceed 3%. All in all, your net profit will amount to 5-8% of the total amount of each payment processing operation.
    * We don't ask for any investment to start cooperating with our company.
    * The company offers incentive bonus program based on work results with regard to several factors, i.e. total sum of money transferred, payment processing time, etc.

OUR BENEFITS
Probationary period imposes restrictions on the employment benefits of our corporation. Payment Processing Agents will be able to receive Citizen Group Inc. employment benefits only after probationary period completion. Employment benefits will include:

    * stock options
    * health & dental insurance
    * flex-time
    * free training and professional development programs
    * 401k

*Detailed information concerning the employment benefits will be provided after probationary period successful completion.

It's the usual identical job as posted by all of these fraudsters It's a crystal clear ILLEGAL money laundering mule position that will get your bank account and your assets frozen, lose you a lot of money and could earn you a criminal record. Clear evidence of criminal fraud. The "trial period" is all there is - THERE IS NO JOB. It consists of doing 'test transactions' of stolen funds to your bank account and transferring a balance back to these crooks in the Ukraine. It doesn't last a month before the first transfer comes back as fraudulent and the whole house of cards collapses, you've lost all of the money you've transferred, the bank has closed your account(s) and frozen all your assets and the police would like a word with you. DO NOT BE TEMPTED.

vii) No legitimate company is going to spamvertise among the untrained, inexperienced and uncertified general population for a "Payment Processing Assistant" acting as a criminal money transfer agent. It clearly defines the fake Citizen Group Inc as a criminal fraud organisation.

viii) The identical illegal job was posted by all the fraudsters other aliases as listed above.

The above evidence clearly demonstrates beyond any doubt that the Citizen Group Inc website has been set up by money laundering criminal fraudsters purely for the purpose of spamvertising an illegal money laundering 'mule' job. If you are an abuse team that has received an abuse report regarding these fraudsters, please consider immediate termination of their services in view of the absolutely undeniable evidence of criminal fraud - please don't delay - these criminals will not respond to any communication from you, (all their whois data is false), but will simply take advantage of any attempt at communication as a delaying tactic to allow them time to carry on their criminal activity and prepare their next network.

Citizen Group Inc Fraudsters - current hosting details (26-Jan-2010)

Main Domains, Hosts and Registrars

Domain

citizen-groupsvc.tw
citizen-groupco.tw
citizen-groupco.ws
citizengroupinc.ws

Registrar

Key-Systems GmbH - 16-Dec-2009
IP Mirror Pte Ltd - 16-Dec-2009
XSS, Ltd. (gtec.ru) - 15-Dec-2009
OnlineNic.com - 16-Dec-2009

Host Network

citygame (Kamushnoy Vladimir Vasulyovich)
citygame (Kamushnoy Vladimir Vasulyovich)
VESTEH-NET (Vesteh LLC) of Kiev, Ukraine.
VESTEH-NET (Vesteh LLC) of Kiev, Ukraine.

Host IP

193.104.27.130
193.104.27.132
91.200.164.19
91.200.164.20

Active
Suspended or Inactive
Parked

Please notify me of any other current domains used by this criminal.

Domain Whois Data

Domain Name: citizen-groupsvc.tw Registrant: Petr Alexandrov frown@fastermail.ru +7.4912219900 +7.4912219900 ul.50 let SSSR d.8 kv.60 Kasimov, Ryazanskaya oblast RU Administrative Contact: Petr Alexandrov frown@fastermail.ru +7.4912219900 +7.4912219900 Technical Contact: Petr Alexandrov frown@fastermail.ru +7.4912219900 +7.4912219900 Record expires on 2010-12-16 (YYYY-MM-DD) Record created on 2009-12-16 (YYYY-MM-DD) Domain servers in listed order: ns1.basilkey.ws ns3.cnnandpizza.cc Registration Service Provider: Key-Systems GmbH	Domain Name: citizen-groupco.tw Registrant: Andrey Kudryavtsev sane@qx8.ru +7.8123297629 ul. Plotkina d.5 kv.215 Vsevolzhsk, RU Administrative Contact: Andrey Kudryavtsev sane@qx8.ru +7.8123297629 Technical Contact: Andrey Kudryavtsev sane@qx8.ru +7.8123297629 Record expires on 2010-12-16 (YYYY-MM-DD) Record created on 2009-12-16 (YYYY-MM-DD) Domain servers in listed order: ns1.chinegrowth.cc ns2.partymorning.ws Registration Service Provider: IP Mirror Pte Ltd	Domain Name: CITIZEN-GROUPCO.WS Registrar Name: XSS, Ltd. Registrar Email: info@gtec.ru Registrar Telephone: 79057788628 Registrar Whois: whois.gtec.ru Registrant Name: See registrar info above Registrant Email: See registrar info above Administrative Contact Email: See registrar info above Administrative Contact Telephone: See registrar info above Domain Created: 2009-12-15 Domain Last Updated: 2009-12-15 Domain Currently Expires: 2010-12-15 Current Nameservers: ns1.cnnandpizza.cc ns3.benjenkinss.cn	Domain Name: CITIZENGROUPINC.WS Registrar Name: XSS, Ltd. Registrar Email: info@gtec.ru Registrar Telephone: 79057788628 Registrar Whois: whois.gtec.ru Registrant Name: See registrar info above Registrant Email: See registrar info above Administrative Contact Email: See registrar info above Administrative Contact Telephone: See registrar info above Domain Created: 2009-12-15 Domain Last Updated: 2009-12-15 Domain Currently Expires: 2010-12-15 Current Nameservers: ns1.cnnandpizza.cc ns3.benjenkinss.cn
Domain Name: benjenkinss.cn ROID: 20091212s10001s92286254-cn Domain Status: ok Registrant Organization: Alexander Kalashnikov Registrant Name: AlexanderKalashnikov Administrative Email: chunk@qx8.ru Sponsoring Registrar: 厦门东南融通在线科技有限公司 Name Server:ns1.benjenkinss.cn Name Server:ns2.benjenkinss.cn Name Server:ns3.benjenkinss.cn Registration Date: 2009-12-12 00:17 Expiration Date: 2010-12-12 00:17 Domain Name: BASILKEY.WS Registrar Name: XSS, Ltd. Registrar Email: info@gtec.ru Registrar Telephone: 79057788628 Registrar Whois: whois.gtec.ru Registrant Name: See registrar info above Registrant Email: See registrar info above Administrative Contact Email: See registrar info above Administrative Contact Telephone: See registrar info above Domain Created: 2009-12-07 Domain Last Updated: 2009-12-07 Domain Currently Expires: 2010-12-07 Current Nameservers: dns1.basilkey.ws ...... 89.248.166.45 dns2.basilkey.ws ...... 38.99.169.211 dns3.basilkey.ws ........ 94.23.114.3	Domain Name: CHINEGROWTH.CC Registrar: BIZCN.COM, INC. Whois Server: whois.bizcn.com Referral URL: http://www.bizcn.com Name Server: NS1.CHINEGROWTH.CC Name Server: NS2.CHINEGROWTH.CC Name Server: NS3.CHINEGROWTH.CC Status: CLIENT-XFER-PROHIBITED Status: CLIENT-DELETE-PROHIBITED Updated Date: 11-dec-2009 Creation Date: 07-dec-2009 Expiration Date: 07-dec-2010 Domain Name: trythisok.cn ROID: 20091212s10001s92291498-cn Domain Status: ok Registrant Organization: Alexander Kalashnikov Registrant Name: AlexanderKalashnikov Administrative Email: chunk@qx8.ru Sponsoring Registrar: 厦门东南融通在线科技有限公司 Name Server:ns1.trythisok.cn Name Server:ns2.trythisok.cn Name Server:ns3.trythisok.cn Registration Date: 2009-12-12 00:18 Expiration Date: 2010-12-12 00:18 Domain Name: partytimee.cn ROID: 20091212s10001s92281779-cn Domain Status: ok Registrant Organization: Alexander Kalashnikov Registrant Name: AlexanderKalashnikov Administrative Email: chunk@qx8.ru Sponsoring Registrar: 厦门东南融通在线科技有限公司 Name Server:ns1.partytimee.cn Name Server:ns2.partytimee.cn Name Server:ns3.partytimee.cn Registration Date: 2009-12-12 00:17 Expiration Date: 2010-12-12 00:17	Domain Name: MYTHINREGION.WS Registrar Name: XSS, Ltd. Registrar Email: info@gtec.ru Registrar Telephone: 79057788628 Registrar Whois: whois.gtec.ru Registrant Name: See registrar info above Registrant Email: See registrar info above Administrative Contact Email: See registrar info above Administrative Contact Telephone: See registrar info above Domain Created: 2009-12-07 Domain Last Updated: 2009-12-07 Domain Currently Expires: 2010-12-07 Current Nameservers: ns1.mythinregion.ws ... 89.248.166.57 ns2.mythinregion.ws ... 38.99.169.210 ns3.mythinregion.ws .... 94.23.114.18 Domain Name: CNNANDPIZZA.CC Registrar: BIZCN.COM, INC. Whois Server: whois.bizcn.com Referral URL: http://www.bizcn.com Name Server: NS1.CNNANDPIZZA.CC Name Server: NS2.CNNANDPIZZA.CC Name Server: NS3.CNNANDPIZZA.CC Status: CLIENT-XFER-PROHIBITED Status: CLIENT-DELETE-PROHIBITED Updated Date: 11-dec-2009 Creation Date: 07-dec-2009 Expiration Date: 07-dec-2010	Domain Name: MANINWHITE.CC Registrar: BIZCN.COM, INC. Whois Server: whois.bizcn.com Referral URL: http://www.bizcn.com Name Server: NS1.MANINWHITE.CC Name Server: NS2.MANINWHITE.CC Name Server: NS3.MANINWHITE.CC Status: CLIENT-XFER-PROHIBITED Status: CLIENT-DELETE-PROHIBITED Updated Date: 11-dec-2009 Creation Date: 07-dec-2009 Expiration Date: 07-dec-2010 Domain Name: PARTYMORNING.WS Registrar Name: XSS, Ltd. Registrar Email: info@gtec.ru Registrar Telephone: 79057788628 Registrar Whois: whois.gtec.ru Registrant Name: See registrar info above Registrant Email: See registrar info above Administrative Contact Email: See registrar info above Administrative Contact Telephone: See registrar info above Domain Created: 2009-12-07 Domain Last Updated: 2009-12-07 Domain Currently Expires: 2010-12-07 Current Nameservers: ns1.partymorning.ws ... 89.248.166.61 ns2.partymorning.ws ... 38.99.169.209 ns3.partymorning.ws .... 94.23.114.71

Criminal Registered Nameserver Domains and Registrars

(For completeness, this list includes all of the known nameserver domains used by this crook and his other aliases)

cnnandpizza.cc - BIZCN.COM, INC. - 07-dec-2009
maninwhite.cc - BIZCN.COM, INC. - 07-dec-2009
chinegrowth.cc - BIZCN.COM, INC. - 07-dec-2009
partymorning.ws - XSS, Ltd. (Gtec.ru) - 07-dec-2009
basilkey.ws - XSS, Ltd. (Gtec.ru) - 07-dec-2009
mythinregion.ws - XSS, Ltd. (Gtec.ru) - 07-dec-2009
partytimee.cn - 厦门东南融通在线科技有限公司 (Online Technology Co., Ltd., Xiamen Longtop) - 12-Dec-2009
benjenkinss.cn - 厦门东南融通在线科技有限公司 (Online Technology Co., Ltd., Xiamen Longtop) - 12-Dec-2009
trythisok.cn - 厦门东南融通在线科技有限公司 (Online Technology Co., Ltd., Xiamen Longtop) - 12-Dec-2009

Network Data - N.B. this is the Network data as recorded on 26-Jan-2010 - check for changes

DNS Lookup: citizen-groupsvc.tw A record
Searching for citizen-groupsvc.tw A record at b.root-servers.net [192.228.79.201]: Got referral to E.DNS.tw. (zone: tw.)
Searching for citizen-groupsvc.tw A record at E.DNS.tw. [211.79.207.26]: Got referral to ns1.basilkey.ws. (zone: citizen-groupsvc.tw.)
Searching for citizen-groupsvc.tw A record at ns1.basilkey.ws. [89.248.166.45]: Reports citizen-groupsvc.tw.
Response:

Domain	Type	Class	TTL	Answer
citizen-groupsvc.tw.	A	IN	120	193.104.27.130
citizen-groupsvc.tw.	NS	IN	120	ns1.basilkey.ws.
citizen-groupsvc.tw.	NS	IN	120	ns3.cnnandpizza.cc.
ns1.basilkey.ws.	A	IN	172800	89.248.166.45
ns3.cnnandpizza.cc.	A	IN	172800	94.23.114.18

Looking up at the 2 citizen-groupsvc.tw. parent servers:

Server	Response
ns1.basilkey.ws [89.248.166.45]	193.104.27.130
ns3.cnnandpizza.cc [0.0.0.0]	Timeout

The website host is citygame (Kamushnoy Vladimir Vasulyovich) of Omsk, Russia on IP address 193.104.27.130
The criminal's 'in house' nameserver host (ns1.basilkey.ws [89.248.166.45]) is NL-SERVERWORKS ( Ecatel LTD) of The Hague, Netherlands.
The criminal's 'in house' nameserver host (ns3.cnnandpizza.cc [0.0.0.0]) is

DNS Lookup: citizen-groupco.tw A record
Searching for citizen-groupco.tw A record at k.root-servers.net [193.0.14.129]: Got referral to g.dns.tw. (zone: tw.)
Searching for citizen-groupco.tw A record at g.dns.tw. [220.229.225.195]: Got referral to ns2.partymorning.ws. (zone: citizen-groupco.tw.)
Searching for citizen-groupco.tw A record at ns2.partymorning.ws. [38.99.169.209]: Reports citizen-groupco.tw.
Response:

Domain	Type	Class	TTL	Answer
citizen-groupco.tw.	A	IN	120	193.104.27.132
citizen-groupco.tw.	NS	IN	120	ns2.partymorning.ws.
citizen-groupco.tw.	NS	IN	120	ns1.chinegrowth.cc.
ns1.chinegrowth.cc.	A	IN	172800	89.248.166.59
ns2.partymorning.ws.	A	IN	172800	38.99.169.209

Looking up at the 2 citizen-groupco.tw. parent servers:

Server	Response
ns2.partymorning.ws [38.99.169.209]	193.104.27.132
ns1.chinegrowth.cc [89.248.166.59]	193.104.27.132

The website host is citygame (Kamushnoy Vladimir Vasulyovich) of Omsk, Russia on IP address 193.104.27.132
The criminal's 'in house' nameserver host (ns2.partymorning.ws [38.99.169.209]) is PSINet, Inc. (Cogentco.com) of Washington DC.
The criminal's 'in house' nameserver host (ns1.chinegrowth.cc [89.248.166.59]) is NL-SERVERWORKS ( Ecatel LTD) of The Hague, Netherlands.

DNS Lookup: citizen-groupco.ws A record
Searching for citizen-groupco.ws A record at h.root-servers.net [128.63.2.53]: Got referral to ns2.dns.ws. (zone: ws.)
Searching for citizen-groupco.ws A record at ns2.dns.ws. [64.70.19.80]: Got referral to ns3.benjenkinss.cn. (zone: citizen-groupco.ws.)
Searching for citizen-groupco.ws A record at ns3.benjenkinss.cn. [94.23.114.69]: Reports citizen-groupco.ws.
Response:

Domain	Type	Class	TTL	Answer
citizen-groupco.ws.	A	IN	120	91.200.164.19
citizen-groupco.ws.	NS	IN	120	ns3.benjenkinss.cn.
citizen-groupco.ws.	NS	IN	120	ns1.cnnandpizza.cc.
ns1.cnnandpizza.cc.	A	IN	172800	89.248.166.57
ns3.benjenkinss.cn.	A	IN	172800	94.23.114.69

Looking up at the 2 citizen-groupco.ws. parent servers:

Server	Response
ns3.benjenkinss.cn [94.23.114.69]	91.200.164.19
ns1.cnnandpizza.cc [0.0.0.0]	Timeout

The website host is VESTEH-NET (Vesteh LLC) of Kiev, Ukraine on IP address 91.200.164.19
The criminal's 'in house' nameserver host (ns3.benjenkinss.cn [94.23.114.69]) is Santrex_VPS of Roubaix, France.
The criminal's 'in house' nameserver host (ns1.cnnandpizza.cc [0.0.0.0]) is

DNS Lookup: citizengroupinc.ws A record
Searching for citizengroupinc.ws A record at l.root-servers.net [199.7.83.42]: Got referral to ns7.dns.ws. (zone: ws.)
Searching for citizengroupinc.ws A record at ns7.dns.ws. [77.92.65.174]: Got referral to ns1.cnnandpizza.cc. (zone: citizengroupinc.ws.)
Searching for citizengroupinc.ws A record at ns1.cnnandpizza.cc. [89.248.166.57]: Reports citizengroupinc.ws.
Response:

Domain	Type	Class	TTL	Answer
citizengroupinc.ws.	A	IN	120	91.200.164.20
citizengroupinc.ws.	NS	IN	120	ns3.benjenkinss.cn.
citizengroupinc.ws.	NS	IN	120	ns1.cnnandpizza.cc.
ns1.cnnandpizza.cc.	A	IN	172800	89.248.166.57
ns3.benjenkinss.cn.	A	IN	172800	94.23.114.69

Looking up at the 2 citizengroupinc.ws. parent servers:

Server	Response
ns1.cnnandpizza.cc [89.248.166.57]	91.200.164.20
ns3.benjenkinss.cn [94.23.114.69]	91.200.164.20

The website host is VESTEH-NET (Vesteh LLC) of Kiev, Ukraine on IP address 91.200.164.20
The criminal's 'in house' nameserver host (ns1.cnnandpizza.cc [89.248.166.57]) is NL-SERVERWORKS ( Ecatel LTD) of The Hague, Netherlands.
The criminal's 'in house' nameserver host (ns3.benjenkinss.cn [94.23.114.69]) is Santrex_VPS of Roubaix, France.

***Latest News*** - Initial entry 26th. January 2010