Ivan Neculiti
Ivan Neculiti is a center-right Hacker and Operative and Sysadmin who is a citizen of Russia, and has been associated with the following entities as either a significant contributor, participant, promoter, or beneficiary, according to our OSINT research:
Brands: Perfect Quality Hosting, PQ Hosting, Stark Industries
Groups: 100 Worst Hucksters (Russia)
Domains: adultfilms.su, help-porno.ru, mi-vmecte.ru, morene.host, pq.hosting, pq.md, stark-industries.solutions
Google Adsense:
Google Analytics: UA-139984139
Google Analytics (2): UA-148753655
Google Analytics (3):
Google Analytics (4):
Google Analytics (5):
Google Analytics (6):
Google Analytics (7):
Google Analytics (8):
Google Analytics (9):
Google Tag Manager:
Google Tag Manager (2):
Google Tag Manager (3):
Google Tag Manager (4):
Google Tag Manager (5):
Public references:
https://blog.morphisec.com/vmware-identity-manager-attack-backdoor
https://pq.hosting/en/about
https://telegra.ph/Moshennik-Largo-Youling-Ivan-Nekulichchi-pqhosting-morenehost-08-26
Иван Некуличчи Некулицы Largo Youling владелец 2 хостингов мошенник.
День рождения 10 июня 1992,1993 год
Номер +373 69 128 397
t.me/LargoYouling
https://telegra.ph/file/05590592259bd59aa6582.jpg
imgur.com/a/IGA9v2A
https://vk.com/youling
https://datorii.md/Companies/MoreDetails/607f0501-60b6-4b59-8bc5-333c36a1e139
https://b2bhint.com/ro/officer/155154
http://www.cis.gov.md/sites/default/files/Buletinul%20Electronic%2003%202019.pdf
https://vdocumente.com/0-3-201-9-electronic-03-2019pdf-informaia-privind-departamentul-nregistrare.html
https://edata.biz/company/societatea-cu-raspundere-limitata-pq-hosting-1019600004328
Societatea cu Răspundere Limitată PQ HOSTING
Company number
1019600004328
https://www.ripe.net/membership/indices/data/md.hosting.html
https://b2bhint.com/en/company/md/pq-hosting-srl–1019600004328
https://dnslytics.com/ip/185.250.149.2
https://dnslytics.com/ip/45.84.1.121
https://lowendspirit.com/pq-hosting-moldova-netherlands-russia-latvia-ukraine-and-hong-kong-unmetered-bw
https://lowendbox.com/blog/perfect-quality-hosting-offers-service-from-moldova-to-hong-kong-1gb-for-12eur-year/
https://myip.ms/info/whois/185.250.149.20/k/4189857826/website/mail.pq.hosting
http://hosting.expert/pda/view.php?id=22
https://www.abuseipdb.com/check/45.142.212.161
https://db-ip.com/2a09:7c47::

IBAN: MD04VI022241700000613MDL
SWIFT: VICBMD2X
https://scamalytics.com/ip/isp/alexhost-srl
https://hostadvice.com/hosting-services/dmca-ignored-hosting/filters–price-0-6951.29/page/5/
https://www.lowendtalk.com/discussion/166472/pq-hosting-vps-in-usa-who-tried-it
https://www.lowendtalk.com/discussion/158877/pq-hosting-deadpooled
https://www.google.com/search?newwindow=1&rlz=1CATTSD_enTH859&ei=8SBRYKi-GcfB0PEP_bGKwAk&q=abuse+pq.hosting&oq=abuse+pq.hosting&gs_lcp=Cgdnd3Mtd2l6EANQ5OcdWNboHWDm6R1oAXAAeACAAZYDiAGWA5IBAzQtMZgBAKABAaoBB2d3cy13aXrAAQE&sclient=gws-wiz&ved=0ahUKEwjo-q7n3rXvAhXHIDQIHf2YApgQ4dUDCA0&uact=5
https://archive.is/sbfTV
tons of abuse complaints, changing countries/locations… secret ownership, shady billing complaints
- pq.hosting
- Moldova WHOIS (but actually Russians)
https://vk.com/id473754667
https://vk.com/onetradestrategy
https://vk.com/@desertcavedevelopment-obnovlenie-fiks-dlya-among-a*s
Review this person (edit or delete anytime):
One thought on "Ivan Neculiti"
Leave a Reply
You must be logged in to post a comment.
Ivan is the very shady owner of PQ Hosting… it is a huge RED FLAG when a web hosting company refuses to share information about their owners and founders, and in this case it appears to be because Ivan is running all kinds of highly illegal websites.
I verified phishing emails (pretending to be lawyers / debt collectors) were being sent from his hosting servers. This is not necessarily his fault, but looking at the track record of his hosting and Russian language websites he appears to have also been in the business of illegal online casinos previously, and was also accused of hosting underage p**n content.
I can’t verify either of those claims, but I can confirm PQ Hosting is extremely secretive (registered in Moldova instead of Russia, despite their DNS servers being located in Moscow).
Update 2022:
This page assisted security companies in tying Ivan directly to a major VMware attack:
https://blog.morphisec.com/vmware-identity-manager-attack-backdoor