Some more information i found: https://dbcooper.com/2018/06/pi-team-coopers-confession-foun...
38 karma · joined July 21, 2013
(damn this IS hard)
It RANDOMLY mentions Chris O'Donnell (one of the 2 domains i posted about is registered to his wife! See my long comment). Im starting to get really freaked out.
Also, I dont see a reason for the wp-login to be in Vietnamese? And why would both mirrors' domain WHOIS link to existing people, one being 'famous'?
And it feels like there are just too many oddities (see my other comment) for it to just be some way to obfuscate/manipulate Google results?
Also, its still running. The article I found it through was very recent. Judging from the difference in timestamps on articles between the copies and the real site it seems something deliberate is being done.
ps; The site actually came up when I looked up the assistant chief of police of Detroit and added something like the word 'retard' haha. After watching a video statement by this guy I thought he couldnt possibly be qualified to be the 2nd in command on a police force in a city like that. Of course I was wrong.
The footer on the front page contains a wp-login link in Vietnamese (according to google translate).
A whois gives some weird info ( http://whois.icann.org/en/lookup?name=americatimes.org ) (at least the combination is strange): Registrant Name:Daniel Costello (too common a name, more on him below) Registrant Organization:Tammy S Meyer (actually owner of the accompanying address; see below) Registrant Street: 18853 Leisure Avenue (some pretty remote farm type place: https://www.google.nl/maps/place/18853+Leisure+Ave,+Honey+Cr... ) Registrant City:Honey Creek Registrant State/Province:IA Name Server:NS1.VISIONDNS.NET (also Vietnamese) Email: americatimes@yahoo.com (errrr, yeah..)
A google of the street address turned up some kind of land/parcel registration from the 'Pottawattamie County Assessor', actually registered to the same name, 'Tammy S Meyer': http://pottco.org/x/card?map=on&parcel=764319400002
A search for "americatimes@yahoo.com" turns up only 3 hits, 2 of which the same WHOIS result, but one also containing the name 'Daniel Costello'. This time associated with 'acumium.com', a 'Website Development, Ecommerce, Online Marketing' company. On his company website profile ( http://www.acumium.com/about/meet-our-team/dan-costello.cmsx ) it states the following: "Before Acumium, Dan served in the U.S. Army as a Signals Intelligence Team Leader for almost four years, which explains his focus on Acumium’s security and policies. He left the service as one of the _most highly decorated_ members of the 2nd Armored Calvary." Now I get this tingly suspicious feeling in my special place. Why would he use a Vietnamese Wordpress?! Or be the Registrant Contact for a domain hosted in Vietnam ?? (123.30.176.66, http://tracert.com/run?host=123.30.176.66&gw=24 ) Or be associated with this website??
This is where things started to get really odd. If you google one of the lines/titles of the articles, you find that the site is an _exact_ mirror (errors and all) of http://usastar.org/. Which whois looks like this: Registrant Contact Name: caroline odonnell Organization: caroline odonnell Mailing Address: 14915 camarosa drive, pacific palisades CA 90067 US (some crazy ass mansion: https://www.google.nl/maps/@34.03464,-118.521481,3a,76.9y,34... )
After another google search, this mansion was apparently bought by actor Chris O'Donnel (the guy from NCIS LA!): http://www.bergproperties.com/blog/actor-chris-odonnell-pays... His wife is named Caroline: http://www.imdb.com/name/nm0000563/bio?ref_=nm_ov_bio_sm
I love a good conspiracy as much as the next guy, but this is really weirding me out. So where better to ask than HN to get to the bottom of this :D Any thoughts?