Second incident on 21st June 2006 : buyingusedcar.net

Summary : someone modified contact details of a domain buyingusedcar.net [which was not mine]. Modified contact detail was mine. Motivation of the person who did it was ugly beyond doubt. But what may be the motivation? Possibly

1. Fabrication or

2. Attempt to gain password of my GoDaddy account. I have already indicated that employer was involved in it.After mail came from GoDaddy if I would have checked my account possibly IT could have grabbed my password. But why domain account? I had made known to many people including Prasanna that I had started getting significant money from domains. I had also told Amith that I might quit my job and do full time domain business. I think this incident is related to it. Next 2 incident also points in this direction.

whatever might be the case the guy responsible for this should be questioned to get right data.

------------------------------------------------------------------------------------------
1.1 ON 21th June 2006. A domain buyingusedcar.net Administrative Contact [Appendix 10] - was modified to my name and email address. When I contacted registrar Godaddy.com and copied the mail to registrant

docreilly@yahoo.com

The person replied the mail, docreilly@yahoo.com had denied that any such thing had happened after modifying Administrative contact back to his name.[Appendix 20]. Godaddy has provided some guidance regarding how to get private information about account holder.[Appendix 30] . The owner should be grilled to tell who asked him/her to change the data the same person must had supplied my address etc.

Note : Also, soon after I mailed docreilly@yahoo.com whois of buyingusedcar.com changed to privacy services. This evidence has a possible name which in turn can give clue hence should be taken seriously and not as just another electronic crime.

1.1.1 Also, to note earlier in May there was Godaddy notification for same domain about Registrar transfer of byingusedcar.net. At that time too I had contacted owner and reported it to Godaddy. At that time I assumed it mistake. Someone by mistake can’t know my name and address and with Appendix 20 it was act of hiding the data shows malicious intent of this event.

1.2 06-23-2006, I posted info about someone tried to access my PC from Bluetooth device. I was trying to write about events happening in domainworld.I was using bootable Knoppix based Linux and Wirless radio of laptop was switched off.

Refer .\anjan.txt [TO DO - Upload this file somewhere]

It implies at that time my PC was under someone control and at least one of my neighbor premises was used for this as Bluetooth's range is limited.

APPENDIX 10

	from		"support@godaddy.com"		hide details	6/21/06
	reply-to			support@godaddy.com
	to			anjan@anjan.org
	date			20 Jun 2006 15:15:57 -0700
	subject			DOMAIN CONTACT UPDATE
Dear Anjan Bhushan, Changes to your registrant and/or administrative contact information have been initiated for the domain name(s) listed below: BUYINGUSEDCAR.NET You *do not* need to respond to this email. If, however, you think these changes may have been made in error or fraudulently, please contact us within 15 days at mailto:support@godaddy.com. Sincerely, GoDaddy.com - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Copyright 2006 GoDaddy.com. All rights reserved.

Whois detail corresponding to above mail

Registrant:
Web Rodeo, Inc.
5710 turtle lake road
shoreview, Minnesota 55126
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: BUYINGUSEDCAR.NET
Created on: 24-Jul-02
Expires on: 24-Jul-07
Last Updated on: 20-May-06

Administrative Contact:
Bhushan, Anjan anjan@anjan.org
35$ or bestoffer http://www.bestshop.org/domains/
7 Tulip dr., Apt# 1g, 08863

+1.7322253302 Fax --

Technical Contact:
Reilly, Kevin docreilly@yahoo.com
Web Rodeo, Inc.
5710 turtle lake road
shoreview, Minnesota 55126
United States
6122706532 Fax --

Domain servers in listed order:
HEIDI.GOOKLE.NET
PAMELA.GOOKLE.NET

APPENDIX 20

Kevin Reilly		hide details	6/21/06
	reply-to			Kevin Reilly
	to			Anjan Bhushan
	date			Jun 21, 2006 4:44 AM
	subject			Re: DOMAIN CONTACT UPDATE
	mailed-by			yahoo.com
i dont know how you are getting these e-mails? here is the who is info for the domain. Registrant: Web Rodeo, Inc. 5710 turtle lake road shoreview, Minnesota 55126 United States Registered through: GoDaddy.com, Inc. (http://www.godaddy.com) Domain Name: BUYINGUSEDCAR.NET Created on: 24-Jul-02 Expires on: 24-Jul-07 Last Updated on: 20-May-06 Administrative Contact: Reilly, Kevin docreilly@yahoo.com Web Rodeo, Inc. 5710 turtle lake road shoreview, Minnesota 55126 United States 6122706532 Technical Contact: Reilly, Kevin docreilly@yahoo.com Web Rodeo, Inc. 5710 turtle lake road shoreview, Minnesota 55126 United States 6122706532 Domain servers in listed order: HEIDI.GOOKLE.NET PAMELA.GOOKLE.NET

APPENDIX 3O

Update [Incident ID: 741946] - Re: DOMAIN CONTACT UPDATE Inbox

						Reply Reply to all Forward Print Add support@supportwebsite.com to Contacts list Delete this message Report phishing Show original Message text garbled?
		"support@supportwebsite.com"	to me	show details	6/22/06

Images are not displayed. Display images below - Always display images from support@supportwebsite.com

Our support staff has responded to your request, details of which are described below: Discussion Notes Support Staff Response Dear Anjan, Thank you for your reply. Due to confidentiality, we are not able to release information about our customer's accounts. If you would like to file a formal subpoena to attempt to have this information released, you may find our policy and where to submit by clicking here. Please let us know if we can help you in any other way. Kindest Regards, Ashley P Customer Support Supervisor Customer Inquiry You are talking about WIPO laws I am talking about electronic crime. It sounds to me a possible case of obstruction to justice. However, I will reserve my comments till I am duly adviced. On 20 Jun 2006 22:40:09 -0700, support@supportwebsite.com < If you need further assistance with this matter, please reply to this email or contact customer service at (480) 505-8877 and reference [Incident ID: 741946]. Thanks, GoDaddy.com © 2006 GoDaddy.com. All rights reserved.