The MG Dot Advertising scammers just added another web site — thewebsitetraffic.net — over the weekend. But kudos to Cloudflare.com for shutting it down within 24 hours. It'll probably turn up on a Chinese host within a few days...
MG-Dot Advertising is still at it, now exclusively using their Albany address and phone number:
516-926-1772, 18 Richmond St, Albany, New York, USA
They've been kicked off at least two more web hosts and have added a couple of new domain names. Here are the ones they've been known to use:
buysocial.cn conversion-seo.cn instabuygram.cn instant-traffic.net mg-bz.net mg-cart.net mgdot.cn (new) mg-dot.cn mgdotagency.com mg-seomarketing.com mg-style.cn seo-buzz.com (new) seo-wise.net (new) topconversionseo.com (new) topsocialfollowers.com
Only a few of those domains are active as I write this. Some seem to have been abandoned for months but most were live a few days ago. They've apparently just been booted off their last web host over the weekend and they probably haven't yet switched DNS to point to their new IP address (211.147.14.168 as of this morning) for all their active sites. Notice that that's the same IP address I gave in the first post in this thread? Yes, they've been bounced off two or three providers and are now back at the first one! I wonder if the (Chinese) provider realizes they've just taken on a customer they kicked off a few months ago? Probably not...
So they're in the US (not buying that) yet that IP pings out of China.
Quote:IP Location China China Beijing Beijing Teletron Telecom Engineering Co. Ltd.
ASN China AS17816 CHINA169-GZ China Unicom IP network China169 Guangdong province, CN (registered Jul 11, 2001)
Whois Server whois.apnic.net
IP Address 219.239.223.37
Reverse IP 16 websites use this address.
http://whois.domaintools.com/219.239.223.37
I suspect the scammers behind the operation may be in the U.S. Their web sites have always been registered and hosted in China (to make them more bulletproof against spam complaints), but that's easy to do from over here. Notice their domain registration is anonymized — I doubt they'd bother with that unless they were based here. Their web pages originally gave a physical address in Kent, WA and recently changed to Albany, NY (neither was a PO box). Either could be fake, of course, but I see little reason why they would change from one fake address to another. Also note that though the address given is for Albany the phone number is definitely Long Island (Manhasset).
I'm betting this is a kitchen table operation that actually moved across the country for some reason unrelated to their web sites. Perhaps because of their day job — or their parents' day jobs ;-)
You're welcome for the extra info. Also, ran a couple of the sites you listed back in November-did the first three: First one came up not active, second one out of Thailand and the third did the same as the first (I used a different site checker than whois)