"Background Check Alert" Emails

I keep getting emails that say"... You have disregarded our warnings and now you must pay..."
What? Pay the piper? Pay"the man"Pay the tip?
What in hell do I care IF someone checks my background?
Nothing to know.

I got the exact same message at what John posted..same person, same exact verbiage.  I just blocked the number.  I see they keep using the same area code 614-XXX numbers, so I just blocking them.

This background checking is a major scam, it has even made the newspapers.  If you open or click-on anything
your computer is violated.  Hit delete or erase immediately and get rid of them.

This is the email I received just this morning trying to scare me into clicking on the link the thing is I don't even know y they are threatening me with this i knew it has to be a scam as I have done nothing wrong
How are these People getting away with this they need to be brought down locked up ....

Intelireports Background Check Alert
to me
6 hours agoDetails
Why is this message in Spam? It's similar to messages that were detected by our spam filters.
Show images
Dear

Bad Things From Your Past Have Been Posted Online. Brace yourself for the worst

At 11:15am (eastern time) damaging information was posted publicly that could hurt you.

Don't let people see this by confirming your person record ID# here

Review this now: Time is running out!

Got one of these emails re "Background Check Alert" from:  ALERT <bog@chassisbottomsout.in> .

That is one suspicious website in the email address.

Let's find out some information about the domain in that email address.

http://www.urlvoid.com/scan/chassisbottomsout.in/
The domain name was created only 2 days ago, which is not very positive in terms of reliability because it is too new to be able to make a judgment. Be cautious if you plan to buy something from there.

=== Wow, the website is only two days old !! And already being used for scamming !!

http://www.urlvoid.com/ip/69.64.147.242/
IP ADDRESS: 69.64.147.242
We have found in our database of already analyzed websites that there are 1146 websites hosted in the same web server with IP address 69.64.147.242 and IP hostname rc.hotkeys.com. Remember that it is not good to have too many websites located in the same web server because if a website gets infected by malware, it can easily affect the online reputation of the IP address and also of all the other websites.

=== hmm, and URLvoid shows a lot of those websites are "not good"

https://www.mywot.com/en/scorecard/chassisbottomsout.in
nothing bad here yet

http://whois.domaintools.com/chassisbottomsout.in
Dates
Created on 2015-05-06 - Expires on 2016-05-06 - Updated on 2015-05-06

IP Address     69.64.147.242 - 382,273 other sites hosted on this server
{ not all of those hosted sites have the same IP address.
{ server farms can easily process data for thousands of IP addresses
{ a single hardware device being a single server is an anomaly

Domain ID:   D9442939-AFIN
Domain Name:   CHASSISBOTTOMSOUT.IN
Created On:   06-May-2015 17:18:30 UTC
Last Updated On:   06-May-2015 17:18:32 UTC
Expiration Date:   06-May-2016 17:18:30 UTC
Sponsoring Registrar:   Name.com LLC (R65-AFIN)
Status:   CLIENT TRANSFER PROHIBITED
Status:   TRANSFER PROHIBITED
Status:   ADDPERIOD
Registrant ID:   nec08tkwd6kkghcm
Registrant Name:   Manuel Miranda
Registrant Organization:   Specialty Hosting
Registrant Street1:   404 Belmont Mount Holly Rd.
Registrant Street2:
Registrant Street3:
Registrant City:   Belmont
Registrant State/Province:   NC
Registrant Postal Code:   28012
Registrant Country:   US
Registrant Phone:   +1.3235919042
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: destinationweb@engineer.com

Admin ID:   same information
Tech ID:   same information

== Ok, what is going on here ?

The website has a TLD (Top-Level Domain) of .in, which is India.
The registrant is listed as being in North Carolina
Visiting the website home page, it looks like a "standard" parked domain
And why the name "chassisbottom" ?
Is it an allusion to the underside of a motor vehicle ?
Is it an allusion to the underside of the internals of a electronic system, like the solder side of a printed circuit board?

something is not right ... because someone is using it for scammy email.
wonder if site got hacked and admins don't know it yet

Also beware of emails from a company called MyLife that sends emails telling you that your info has been compromised and you can pay them to delete you from searches and public background checks. They are a scam. I have read a lot about them as I have been getting absurd emails that my info is compromised and that someone I have nevee heard of in a state I have never been to is looking for me. Phishing scam.

yes I received one today.  did not open.  email address is certainly not sounding legit.

Back round checks cost money so if someone in your spam says it has been conducted it is a scam a back round check can only be done with your information and your signature through a company looking to employ you in some fashion they are about 40.00 bucks and a special form is need to fill out these people on yahoo or any other mail site are trying to get your information just ignore it do not open it at all.  And if you notice the date is changed every day you get one on the actually subject line and if you have one done on you for an employer you do not get a email about it the information goes straight to them and no e-mail so please dont respond to these people.

I got some of these last year, and it was spam for a background check place fraudulently stating they have information on you.  The link you get is part of multiple re-directs until you get to their web site.  I forget the name of the one that I got last.

Generally, many of these have facebook, yelp and google+ pages.  So you can post your bad experience of them there so maybe that will help.

They've been bad actors in the past and got caught :

http://en.wikipedia.org/wiki/MyLife

http://abcnews.go.com/Technology/mylifecom-pe ... ory?id=14335481
MyLife.com: People-Searching Website Sued as 'Scam'
Aug. 19, 2011
By NED POTTER

http://www.complaintsboard.com/bycompany/mylifecom-a123026.html
most recent :
Mylife.com - lies
Posted: 2015-03-14 by     p2da3

I got one of these a couple of minutes after they ran a check for a firearms purchase.

Wanted me to go to a website buddirectview.us

I thing you should talk to the people who ran the check for the firearms purchase.
Something is phishy about that domain and its timing.
I could not go to that website, it is not responding and Firefox times out.
And why might that be ?

Let's look up some information about that website. The ".us" at the end means it is a US website ... maybe.

http://www.urlvoid.com/scan/buddirectview.us/
The website is identified by 2 scanning engines, make sure to check the analysis report of the scanning engines to know why.
{ those two scanning engines gather information about spammers and phishing attempts }
Domain 1st Registered     2015-06-01 (16 hours ago)
Server Location                Luxembourg

=== wow, it is less than 24 hours old and already being used to scam people
=== and the servers are in Europe beyond the reach of US law enforcement

http://www.urlvoid.com/ip/194.152.52.65/
IP ADDRESS: 194.152.52.65
We have found in our database of already analyzed websites that there is only 1 website hosted in the same web server with IP address 194.152.52.65 and IP hostname d63d7eff4.promocaoshop.com.

=== A scammy website is hogging an IP address to itself ! The nerve of those brats !

https://www.mywot.com/en/scorecard/buddirectview.us
{ no user-posted information, not unusual }

http://whois.domaintools.com/buddirectview.us

Dates
Created on 2015-06-01 - Expires on 2016-05-31 - Updated on 2015-06-01
IP Address     194.152.52.65 is hosted on a dedicated server
  { another wow, how much are they paying for this? }

Domain Name:                                       BUDDIRECTVIEW.US
Domain ID:                                             D49863935-US
Sponsoring Registrar:                            eNom, Inc.
Sponsoring Registrar IANA ID:              48
Registrar URL (registration services):   whois.enom.com
Domain Status:                                     clientTransferProhibited
Registrant ID:                                        B16B72A90AF74D1F
Registrant Name:                                  Stacie Swann
Registrant Address1:                             4992 Lindora Dr
Registrant City:                                      Columbus
Registrant State/Province:                     OH
Registrant Postal Code:                         43232
Registrant Country:                                United States
Registrant Country Code:                      US
Registrant Phone Number:                    +1.6148646480
Registrant Email:                                   staceiswannvsu@aol.com
Registrant Application Purpose:            P1
Registrant Nexus Category:                  C11
Administrative Contact ID:                     39E9C26D3CC2FD52        { rest of information is same as above }
Billing Contact ID:                                  B16B72A90AF74D1F         { rest of information is same as above }
Technical Contact ID:                            39E9C26D3CC2FD52        { rest of information is same as above }

Google Maps shows that address to be a small strip mall, with "The Grocery" on one end, "Blue Gill Bar and Grill" on the other end, and something in between I cannot read because of tree branches. Off to the right is a smaller blue building with no signs.

https://www.google.com/maps/place/4992+Lindor ... e0aad2496dea526

https://www.google.com/maps/place/4992+Lindor ... e0aad2496dea526

So I suspect the website was created with fake information and paid for with stolen credit or debit card numbers.

The registrant phone number, in search engine results, appears to have been held by several different people over the past few years. Not unusual if people move out of an area and no longer can use the number, so they close their account and later someone else gets the number assigned to them. It has no history on 800notes. So now a scammer is using the number ...

Since the domain is not responding, either they don't have a home page set up or they are using it only for email at this time. But tomorrow is another day ...

They are (sadly), phishing scams. I seem to be receiving them multiple times/day, from multiple sourses (so sending to spam box and/or bouncing the emails doesn't always help, not to mention, I'm having to clear the spam box daily, rather than weekly as I would normally). Here is a site that I found helpful (nevermind the ridiculous/sarcastic replies from others), similar to this one, where people have experienced the same issues and are posting their experiences:   http://scamsfrommyemail.blogspot.com/2011/11/ ... -check.html?m=1 . This scam is not central to merely one location. It is apparently rampid all over. It is imperative NOT to open the links embedded in those emails (if you end up opening them at all--you are best not to even open them). If you have the capability, I would recommend boucing the emails back to the sender. Good luck to you all.

i have been getting these too quite often since March.  What to do?  Just don't open email?