Showing posts with label CLI. Show all posts
Showing posts with label CLI. Show all posts

Saturday, December 18, 2010

Proof That Christopher Lawell Owns MiyaBot and Is Therefore VegasChris

Some more has been discovered about MiyaBot, the chatbot sold by VegasChris of MoneyMakerDiscussion.com, the man who was once a VP of a mortgage company and now markets porn on the internet by means of hiring people to post fake dating ads on Craigslist. On the site uowow.com, which now has nothing but a default website page, there was once a source code repository for a Microsoft Visual Studio Solution (a collection of software development projects) with the name MiyaBot. It no longer exists but is still partly viewable in Google's cache.

The MiyBot solution was located at http://www.uowow.com:8080/svn/CLI/AimBot/Miyabot.sln (Click to enlarge)

In the screen shot above, see that the URL given for the solution file was

http://www.uowow.com:8080/svn/CLI/AimBot/Miyabot.sln

In this path, there is a directory called svn, which stands for Apache Subversion, the name of the source code control system being used here. It's standard practice in using Subversion to create your source code repositories in directories underneath this one. The source code repository in this case happens to be called CLI, which just happen to be the initials of Christopher Lawell Inc.

Well, it was discovered that the person who owned this server is a computer programmer who was one of Chris Lawell's Facebook friends. It was thought that he was the person who created MiyaBot. We contacted him and asked him how he was involved with Christopher Lawell. This is a screen shot of part of the conversation. His name, picture, and other identifying information were blanked out since he doesn't want to be associated with any illegal activities.

Conversation about Chris Lawell

More of the conversation

So this person confirms that Chris Lawell is the owner of MiyaBot, which means that Chris Lawell is VegasChris of MoneyMakerDiscussion.com.

Tuesday, November 30, 2010

VegasChris of CLI in Henderson

Christopher Lawell said in his explanation that he has "not posted on Craigslist more than 1 ad per month (probably longer) in years." Could this be because he hires others to post for him? On the site Freelancer.co.nz there is a user who goes by the name of VegasChris. His profile states that he is with the company CLI in Henderson. He has posted some interesting ads.

On 1/14/2010, he posted an ad looking for a CL, BP and other classified sites poster.
Want an experienced poster for Backpage and Craigslist. MUST be experienced and able to successfully post on both sites.

Will compensate based off responses. Starting at $75 per 1k, will pay more based off the quality of conversions.

Posts are for NSA (W4M) ad category. You must provide ad content and forward replies to specific email address I provide in real time.

Will test work with a daily payout. Would like to escalate to a regular weekly order with successful traffic.

Being able to drive traffic from additional classified sites a plus.

He later posted a similar ad on 1/19/2010. Earlier, he was looking to buy 5000 Hotmail accounts, and the last ad he posted was for a ghost writer for articles about iGaming, the industry in which Chris Lawell says he does his internet marketing business.

There's another VegasChris on the web who places ads for Craigslist posters, VegasChris of MoneyMakerDisscusion.com. He used to use the name AnitaJohnson. This old version of his MMD profile is still in Google's cache. To see that this is an old version of VegasChris' profile, hover over the link labelled Find All Posts and look at the browser status bar. You'll see that the userid for the profile is 61348, the same as the userid for VegasChris. (Click the image to enlarge it.)



When you click on the link to InCorp Entity Structuring in the cached profile's signature, you are taken to InCorp.com, a company in Henderson, Nevada.



So this VegasChris also has a Henderson, Nevada connection and could very well be the same person as the other one.

On 4/26/2010, the MMD VegasChris posted the thread Looking for a craigslist poster.
I am looking to buy CL posting service or W4M lead provider in real time and exclusive.

Contact me via pm.

On 11/16/2009, he posted Looking for a CL poster.
Need a poster for adult content on CL.

Let me know what you charge. Would be willing to spend $200 a day (or more) for the right traffic.

Will start immediately.

On 11/3/2009, he posted Looking for a reliable poster on CL.
I am looking to hire a regular CL poster.

Can be creative when it comes to compensation. Would consider pay per post or JV per sale.

dating in W4M section. Possibly other areas.

Please pm me for discussion.

What both of these guys (and they're probably the same person) are doing here is hiring people to spam the dating sections of Craigslist with fake ads. This is done to promote real dating sites, or to promote fake dating sites used to trick people into signing up for porn sites, and sometimes to promote just plain upfront porn sites.

Wednesday, November 17, 2010

Christopher Lawell, Inc.

I've done some more investigating of mysafenet.net and localsafe.org and it looks like I've found out who's behind them.

First of all, localsafe.org, mysafenet.net, and several other servers share the name server ns1.finishlinehosting.com:

 SAMPLE OF DOMAINS USING NS1.FINISHLINEHOSTING.COM

DomainRegistrarCreate DateExpire DateMore Information
finishlinehosting.com INTERNET.BS CORP.2010-06-212011-06-21DNS
localsafe.orgInternet.bs Corp. (R1601-LROR)2010-03-18 04:31:32 2011-03-18 04:31:32DNS
mail4now.netINTERNET.BS CORP.2010-03-182011-03-18DNS
mail4time.orgInternet.bs Corp. (R1601-LROR)2010-10-29 04:42:25 2011-10-29 04:42:25DNS
mysafenet.netINTERNET.BS CORP.2010-11-012011-11-01DNS
safe-local.netINTERNET.BS CORP.2010-03-182011-03-18DNS

Safe-local.net is another server that is used for the scam. It redirects to craigslistsafe.localsafe.org. Mail4now.net and mail4time.org are servers that are used for for sending spam for mysafenet.net and safe-local.net. Since these sites all share the same name server and they were all used for the scam, it's a good bet that they are all owned by the same person.

A useful piece of information about a website is its SOA record. This record contains the e-mail address of the person responsible for administering the domain's zone. The SOA record for mysafenet.net is this:

MYSAFENET.NET SOA RECORD

Name Serverns1.finishlinehosting.com
Emailblank@cli-us.com
Serial Number2010110101
Refresh1 day
Retry2 hours
Expiry41 days 16 hours
Minimum1 day

The e-mail address of the zone administrator is an address at cli-us.com, which is a website for Christopher Lawell, Inc.

Given its name, we'd assume that finishlinehosting.com would be the website for the hosting company used by these sites, but instead it's a blank website. Let's look at the SOA record for finishlinehosting.com:

FINISHLINEHOSTING.COM SOA RECORD

Name Serverns1.finishlinehosting.com
Emailfinishlinehosting@cli-us.com
Serial Number2010081305
Refresh1 day
Retry2 hours
Expiry41 days 16 hours
Minimum1 day

The e-mail address of the zone administrator for this site is also an address at cli-us.com. So who is this Christopher Lawell?

Googling "Christopher Lawell" brings up a number of interesting pages. For instance there's the LinkedIn profile of a Christopher Lawell in the Las Vegas, NV area who is a partner at Clearline Media and president of both www.350dollarwebsites.com and Christopher Lawell, Inc. When we Google

"Christopher Lawell" craigslist

we find some articles where he gives tips on spamming Craigslist. For instance:

http://www.articlepros.com/online_business/More-In-Internet-and-Online-Business/article-94976.html
http://make-money-online12.blogspot.com/2008/02/how-to-post-on-craigslist.html.

Doing some more searching for his name shows that it has been linked to other verification scam sites. For instance, there is this thread on broadbandreports.com:

http://www.broadbandreports.com/forum/r23659525-craigslistsafesafeandlocalorg-scam-site-or-not

The Christopher Lawell discussed in this thread had an address in Henderson, NV, which is a suburb of Las Vegas, and he was listed as the owner of craigslistsafe.safeandlocal.org, a verification scam site that is no longer active:

Domain ID:D157651283-LROR
Domain Name:SAFEANDLOCAL.ORG
Created On:21-Nov-2009 16:02:05 UTC
Last Updated On:21-Nov-2009 16:02:08 UTC
Expiration Date:21-Nov-2010 16:02:05 UTC
Sponsoring Registrar:GoDaddy.com, Inc. (R91-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CR29951201
Registrant Name:Christopher Lawell
Registrant Street1:318 Canyon River Court
Registrant Street2:
Registrant Street3:
Registrant City:Henderson
Registrant State/Province:Nevada
Registrant Postal Code:89012
Registrant Country:US
Registrant Phone:+1.7023358990

(The current registration information is different because the registrant acquired whois privacy protection to hide his identity.)

Not only is the name of this site very similar to craigslistsafe.localsafe.org, but SafeAndLocal.org is what is shown for the title of the page on craigslistsafe.localsafe.org:



(Click the image to see it in full size). This could be because when the current site was created, the person who set it up used a copy of the HTML for the old site and forgot to change the page's title.

When we look at all of this evidence, though it hasn't been proven for certain, it does appear that this Christopher Lawell is the owner of the current scam sites, too.