Subject: TG user "shark"/goldpoll.com/goldentalk.com = DDoS extortionists

[Invest7Wiz]

(User received permission to remain anonymous for this thread only - mods, please see post in mod folder)
To all,

I am a long standing and respected member of TalkGold who feels it
necessary to expose a DDoS botnet criminal who is actively involved in
extortion against major HYIP's and monitor services. This user "shark"
who represents goldpoll.com and goldentalk.com claims to be under
consistent DDoS. In reality, he most likely receives no DDoS as he is
actually the one committing the attacks against other sites. This
crime is serious and no one who actually knows about this dares to
speak at the risk of receiving a DDoS attack of 6 Gbps or more.

If you search for shark's posts you will see that he claims to have
found a way to stop large DDoS attacks but will not discuss how and
when anyone asks how it could be possible that Eltel, a second tier
ISP in St. Petersburg, Russia could possibly have enough bandwidth to
stop attacks he refuses to answer the question. Even more suspicious
he will not allow you to sign up with him unless he invites you first.
This is because he is the one committing the attacks and he can only
"protect" you if you're under attacks that he is committing. Once you
pay him his extortion fee of around $2000.00 per month he moves you to
an unprotected network (Eltel which also hosts goldpoll.com and
goldentalk.com) under the name "Neave Limited" which is not a real
company, it is a British Virgin Islands shelf corporation with fake
data used to host criminal enterprises.

If you have not figure it out by now, he is a member of the Russian
Business Network, a cyber-mafia criminal organization that is listed
in ROKSO which maintains the top 100 abusive groups and networks on
the internet. Here is the ROKSO listing:
http://www.spamhaus.org/rokso/listin...ness%20Network
. ROKSO reports:

Originally Posted by ROKSO

Among the world's worst spammer, child-*****graphy, malware, phishing
and cybercrime hosting networks. Provides "bulletproof hosting", but
is probably involved in the crime too.

A detailed explanation of Russian Business Network is available on
Wikipedia ( http://en.wikipedia.org/wiki/Russian_Business_Network )
and on a private blog ( http://rbnexploit.blogspot.com/ ). The admin
of this private blog confirm's shark's invovlement in RBN:

Originally Posted by Private email to rbnexploit at gmail com

You are indeed correct concerning Neave Limited, also as we can see
your friend "Shark" represents goldentalk com (81 222 133 182) which
is SBL and XBL blacklisted, via Elnet.

When asked if they would put this on their blog, just today they
replied ( so standby and stay tuned to http://rbnexploit.blogspot.com
):

Originally Posted by Private email to rbnexploit at gmail com

Having discussed it, yes we will add to the blog, it is an interesting
exposure ot one of the RBN's operational nodes. It will take a few
days as we will do more in depth DNS, scanning, COMINT checks, etc.

The "Neave Limited" netblock is listed on SBL as "Botnet criminal:"
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL62147 . Take a look at
this netrange (http://ip_addresses_here) and you'll notice there is
not a single legitimate business on the entire network. It is 99% spam
operations and other criminals that are hiding from law enforcement.

If you mess with RBN you are playing with fire!

[Tdinoz]

I'm curious why you aren't posting under your long standing & respected username?

[talkgold]

Honestly, I have known the admin from goldpoll for a long time, and don't think he would have anything to do with what you are claiming. This is all your opinion really, and you don't show any proof to back it up. Just because he has a way to stop ddos attacks does not make him an attacker. I know that if I had a way to stop large scale attacks by myself, I would not let anyone know what it was. Perhaps if he gave it away, then the attackers could get around the method. Your accusations are transparent, and based on your opinion from the way I see it.

Brian

[ivaho]

Originally Posted by Tdinoz

I'm curious why you aren't posting under your long standing & respected username?

Maybe because he doesn`t want to be DDoS target.

[shark]

Ohh, to be honestly I'm already tired with baseless accusation to my side, especially from anonymous "long standing and respected members". But the situation is obliging me to answer.

First of all, I can't understand your logic. Where did you find that I'm "involved in extortion against major HYIP's and monitor services" or "committing the attacks against other sites". Is it just because some IPs of eltel are blacklisted on Spamhaus? Iron logic, lol... I can't prove the contrary just because I never was engaged in anything that you're stating here. I just don't need it at all and I have a lot of other work.

If you're a competitor who wants to pour out his sh*t .. just relax, please. There is no any competitors here on this forum just because our ddos defence offer is completely different. It's for serious people only who understands how the things work here.

If you search for shark's posts you will see that he claims to have
found a way to stop large DDoS attacks but will not discuss how and
when anyone asks how it could be possible that Eltel, a second tier
ISP in St. Petersburg, Russia could possibly have enough bandwidth to
stop attacks he refuses to answer the question.

I can't answer this question because of my agreement with the supplier. They have enough bandwidth to stop almost any ddos attack that is possible here (up to 10 Gbps regarding my agreement with the supplier) and I'm offering the 100% refund in case I'm not able to fulfill the promise. Is it enough regarding the bandwidth and their capability at all? If you want to be protected - you don't need to know anything about my agreement with them. Keep this for me, please. I state that every attack to your site will be mitigated or I will return you your money. If it's ok with you - you can use it, if no - no. It's completely your choice and I can't understand why you're accusing me in any dishonesty here. If you're really interesting, I can give you a free test of the protection. You can even test it on any of my sites if you want.

If you have not figure it out by now, he is a member of the Russian
Business Network, a cyber-mafia criminal organization that is listed
in ROKSO which maintains the top 100 abusive groups and networks on
the internet. Here is the ROKSO listing:

Nonsense. I never heard about any Russian Business Network cyber-mafia and to be honestly I can't understand a logic how you have drawn this conclusion.

A detailed explanation of Russian Business Network is available on
Wikipedia ( http://en.wikipedia.org/wiki/Russian_Business_Network )
and on a private blog ( http://rbnexploit.blogspot.com/ ). The admin
of this private blog confirm's shark's invovlement in RBN:

Thanks for the link but where can I find anything about "The admin of this private blog confirm's shark's invovlement in RBN" there? A rough bluff from your side or we are waiting for his article. I will contact him if he will write anything there, it's also possible that it could be a libel action from my side to his resource if he will use my name somewhere. I can't be responsible for a Russian Business Network and their activity in any way. I'm just a customer/reseller of one company which is using Eltel as their russian bandwidth provider. I can't be responsible for any other Eltel customers also.

The "Neave Limited" netblock is listed on SBL as "Botnet criminal:"
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL62147 . Take a look at
this netrange (http://ip_addresses_here) and you'll notice there is
not a single legitimate business on the entire network. It is 99% spam
operations and other criminals that are hiding from law enforcement.

81.9.8.0/24 is listed on the Spamhaus Block List (SBL). And what? You're providing an Eltel IP range that even isn't associated with my sites? What can I answer you here? I don't own Eltel and I have no any relations with them directly and cann't be responsible for any their problems.

I have just talked with the ddos protection supplier and ask them about it. All these records were made by Spamhaus based on some fake abuses on some their customers. A criminals are starting to write a fake abuses to Spamhaus when they are unable to get down a site. Spamhaus is too slow to operate a provider's complaints regarding the fake abuses, but they are very fast in operating of all abuses from anonymous "long standing and respected members" like you. It is the big problem of Spamhaus and everyone involved in hosting business know this.

By the way, an unbelievable actions were done by Eltel - they haven't rejected the service for their customers based on these fake abuses because they know that all this info is fake because the network is disabled for any protocols except those that the protection uses. It's technically impossible to do anything from this network except the protection.

Anyhow, it's just the info from my ddos defence partners and I personally couldn't be involved in any Eltel and Spamhaus problems just because I have no any relations with them.

Moderators, please, keep this topic live for now for everyone interested and delete it after some days because all info here is nonsense from anonymous "long standing and respected member".

[shark]

LOL As soon as this thread has been created we have started to receive a ddos attack questions to our support

Dear all, we have no any ddos attack service, and never have as any other criminal service also. We don't know anyone who can do any attack.

We are offering the protection against ddos only.

Please, don't send to us any questions regarding this matter.

P.S. Just wondering how many people are interesting in ddos attacks here...

[engedi05]

Originally Posted by shark

LOL As soon as this thread has been created we have started to receive a ddos attack questions to our support

Dear all, we have no any ddos attack service, and never have as any other criminal service also. We don't know anyone who can do any attack.

We are offering the protection against ddos only.

Please, don't send to us any questions regarding this matter.

P.S. Just wondering how many people are interesting in ddos attacks here...

lol.. DDOS attack service ....

[Invest7Wiz]

shark,

Of course you guarantee your service. You're only able to sell it to
people who are under current attack BY YOU or have no DDoS problem at
all in which case it is just a gamble. Watch your back, your name will
appear on that blog once the admin is done researching you. If you
don't believe it, contact him by e-mail.

You are listed with SBL as a "Botnet criminal." This is not a random
spam complaint, it is a very serious allegation made by SBL after
meticulous research on your organization. This is your IP range, I
have been monitoring you and know who your so called customers are (or
more appropriately "were").

You pretend not to be Russian but your English is horrible and
everything you host is in Russia. Who are you kidding? If you were not
Russian and actually had a legitimate product you would not be hosting
in the proverbial armpit of the Earth as it pertains to
telecommunications resources and ability of law enforcement to take
action. If you were in a fully technologically developed nation you
would be shutdown immediately. You and your network are a pariah to
society.


The rest,

Do not be fooled by this criminal. There is no ISP in Russia that has
multi-Gbps protection capability. Protection is very difficult to
achieve outside of the U.S. and more developed parts of Europe due to
capacity issues. Russia is a 3rd world country as it pertains to
telecommunications infrastructure. There is no secret vendor and there
is no agreement, unless he's referring to some type of pact with RBN.
"shark" is a criminal and a manipulator. He will say whatever he
thinks you want to hear to sell more of his lies and extortion.

[shark]

Originally Posted by Invest7Wiz

shark,

Of course you guarantee your service. You're only able to sell it to
people who are under current attack BY YOU or have no DDoS problem at
all in which case it is just a gamble. Watch your back, your name will
appear on that blog once the admin is done researching you. If you
don't believe it, contact him by e-mail.

You are listed with SBL as a "Botnet criminal." This is not a random
spam complaint, it is a very serious allegation made by SBL after
meticulous research on your organization. This is your IP range, I
have been monitoring you and know who your so called customers are (or
more appropriately "were").

I'm sorry but there is no sense to talk here because you don't want to listen me. As I already said you I have nothing related to DDoS Attacks. I just can offer the really working protection against this, maybe the one really working here. You can easily test it instead of idiotic statements about unprotected network.

BTW, I will show for everyone here how Spamhaus works. The abuse was on this IP address (81.9.8.201/32 - /32 means a direct IP address, /24 means a whole network): http://www.spamhaus.org/sbl/sbl.lasso?query=SBL62146. That is why the whole network goes under this. Spamhaus clips the label to the whole network just because of abuse on one IP address. Anyhow, it's not my business what you, your blog admin and SBL think about this network, it's Eltel's business and I'm not affiliated with Eltel in any way, as any our customer also. It's their work to talk with Spamhaus and such things aren't connected with any end user like me or any our customer.

That's all that I can say you here. Please don't force me to repeat this coz I already said this twice.

Originally Posted by Invest7Wiz

You pretend not to be Russian but your English is horrible and
everything you host is in Russia. Who are you kidding? If you were not
Russian and actually had a legitimate product you would not be hosting
in the proverbial armpit of the Earth as it pertains to
telecommunications resources and ability of law enforcement to take
action. If you were in a fully technologically developed nation you
would be shutdown immediately. You and your network are a pariah to
society.

It's not your job from where am I and how is my English. There is no sense to kid for me. I saw so many crap to my side from various competitors and envious persons so you aren't the unique one. You're not the first and I suppose that not the last.

Originally Posted by Invest7Wiz

The rest,

Do not be fooled by this criminal. There is no ISP in Russia that has
multi-Gbps protection capability. Protection is very difficult to
achieve outside of the U.S. and more developed parts of Europe due to
capacity issues. Russia is a 3rd world country as it pertains to
telecommunications infrastructure. There is no secret vendor and there
is no agreement, unless he's referring to some type of pact with RBN.

Keep it for me how I should choose my partners, please. There is no point to listen an anonymous person who is concealing himself just because he is an abject coward that is concealing his real username because of dread of some facts, maybe.

I don't know too much about Russia, but I see that your view and info is completely out of date. Russia has a providers with more than 100 Gbps capability, like MTU, for example. It has more than 100 Gbps to USA and Europe.

Originally Posted by Invest7Wiz

"shark" is a criminal and a manipulator. He will say whatever he thinks you want to hear to sell more of his lies and extortion.

Ohh, so can I state that you, the "long standing and respected member" is pedophile. I have the same proof on this as you have on your statements.

Please stop your idiotic statements without any common sense.

[shark]

Originally Posted by Invest7Wiz

shark,

Of course you guarantee your service. You're only able to sell it to
people who are under current attack BY YOU or have no DDoS problem at
all in which case it is just a gamble. Watch your back, your name will
appear on that blog once the admin is done researching you. If you
don't believe it, contact him by e-mail.

You are listed with SBL as a "Botnet criminal." This is not a random
spam complaint, it is a very serious allegation made by SBL after
meticulous research on your organization. This is your IP range, I
have been monitoring you and know who your so called customers are (or
more appropriately "were").

I'm sorry but there is no sense to talk here because you don't want to listen me. As I already said you I have nothing related to DDoS Attacks. I just can offer the really working protection against this, maybe the one really working here. You can easily test it instead of idiotic statements about unprotected network.

BTW, I will show for everyone here how Spamhaus works. The abuse was on this IP address (81.9.8.201/32 - /32 means a direct IP address, /24 means a whole network): http://www.spamhaus.org/sbl/sbl.lasso?query=SBL62146. That is why all network goes under this. Spamhaus clips the label to the whole network just because of abuse on one IP address. Anyhow, it's not my business what you, your blog admin and SBL think about this network, it's Eltel's business and I'm not affiliated with Eltel in any way.

I have just received the answer from my partners about this. They aren't involved in this story. It's other Eltel customers' troubles, and all this network isn't their, just a part of it. They are just buying a lot of /28, /27, /26 subnetworks from them and Eltel is selling the remains to other customers with search engines optimization purposes.

That's all that I can say you here. Please don't force me to repeat this coz I already said this twice.

Originally Posted by Invest7Wiz

You pretend not to be Russian but your English is horrible and
everything you host is in Russia. Who are you kidding? If you were not
Russian and actually had a legitimate product you would not be hosting
in the proverbial armpit of the Earth as it pertains to
telecommunications resources and ability of law enforcement to take
action. If you were in a fully technologically developed nation you
would be shutdown immediately. You and your network are a pariah to
society.

It's not your job from where am I and how is my English. There is no sense to kid for me. I saw so many crap to my side from various competitors and envious persons so you aren't the unique one. You're not the first and I suppose that not the last.

Originally Posted by Invest7Wiz

The rest,

Do not be fooled by this criminal. There is no ISP in Russia that has
multi-Gbps protection capability. Protection is very difficult to
achieve outside of the U.S. and more developed parts of Europe due to
capacity issues. Russia is a 3rd world country as it pertains to
telecommunications infrastructure. There is no secret vendor and there
is no agreement, unless he's referring to some type of pact with RBN.

Keep it for me how I should choose my partners, please. There is no point to listen an anonymous person who is concealing himself just because he is an abject coward that is concealing his real username because of dread of some facts, maybe.

I don't know too much about Russia, but I see that your view and info is completely out of date. Russia has a providers with more than 100 Gbps capability, like MTU, for example. It has more than 100 Gbps to USA and Europe.

What about Eltel, RETN.net, for example, is a part of Eltel network. http://retn.net/en/network/.

Currently, the main services of the RETN network are IP traffic transmission along with connection to main stream nodes using ports with a capacity from 10 Mbit/s to 10 Gbit/s, leasing MPLS VPN L2/L3 channels with bandwidth up to 10 Gbit/s and collocation of equipment in its own data center in Saint Petersburg, and in the data centers in Moscow, London, Stockholm, Amsterdam, Frankfurt and New York, using connection ports with a capacity of up to 1 Gbit/s.

It's rather bigger than Staminus network, which is so popular here. http://staminus.net/?link=network. Compare them and don't make an idiotic statements here, please.

An attacks are filtered on almost all possible levels, including RETN border routers around the world.

The example ACL (written in config of one border router after the permit rules) for the current week (the counter was nulled on Monday):
[censored] deny ip any [censored] [censored] (3001249379 matches)

I just want to show that there is the very serious organization behind the service so stop slandering about it, please.

Originally Posted by Invest7Wiz

"shark" is a criminal and a manipulator. He will say whatever he thinks you want to hear to sell more of his lies and extortion.

Ohh, so can I state that you, the "long standing and respected member" is pedophile. I have the same proof on this as you have on your statements.

Please stop your idiotic statements without any common sense.