CEO of Information Privateness Firm Based Dozens of Individuals-Search Companies – Krebs on Safety

The info privateness firm payments itself as a Virginia-based service for serving to folks take away their private info from nearly 200 people-search web sites. Nonetheless, an investigation into the historical past of finds this firm is working out of Belarus and Cyprus, and that its founder has launched dozens of people-search companies over time.

Onerep’s “Shield” service begins at $8.33 monthly for people and $15/mo for households, and guarantees to take away your private info from almost 200 people-search websites. Onerep additionally markets its service to firms searching for to supply their workers the power to have their information repeatedly faraway from people-search websites.

A testimonial on

Buyer case research revealed on state that it struck a deal to supply the service to workers of Permanente Medication, which represents the docs throughout the medical insurance large Kaiser Permanente. Onerep additionally says it has made inroads amongst police departments in the USA.

However a evaluate of Onerep’s area registration information and that of its founder reveal a special facet to this firm. says its founder and CEO is Dimitri Shelest from Minsk, Belarus, as does Shelest’s profile on LinkedIn. Historic registration information listed by say Mr. Shelest was a registrant of who used the e-mail handle

A search within the information breach monitoring service Constella Intelligence for the title Dimitri Shelest brings up the e-mail handle Constella additionally finds that Dimitri Shelest from Belarus used the e-mail handle, and the Belarus cellphone quantity +375-292-702786. is a folks search service whose workers all seem like from Belarus, and it’s one among dozens of people-search firms that Onerep claims to focus on with its data-removal service.’s web site disavows any relationship to, stating fairly clearly, “Please word that OneRep is just not related to”

Nonetheless, there may be an abundance of proof suggesting Mr. Shelest is actually the founding father of Nuwber. Constella discovered that Minsk phone quantity (375-292-702786) has been used a number of occasions in reference to the e-mail handle Recall that’s area registration information in 2018 listing the e-mail handle

It seems Mr. Shelest sought to reinvent his on-line id in 2015 by including a “2” to his e mail handle. The Belarus cellphone quantity tied to reveals up within the area information for, and DomainTools says this area is tied to each and CEO and founder Dimitri Shelest, as pictured on the “about” web page of

A search in DomainTools for the e-mail handle reveals it’s related to the registration of no less than 179 domains, together with dozens of principally now-defunct people-search firms concentrating on residents of Argentina, Brazil, Canada, Denmark, France, Germany, Hong Kong, Israel, Italy, Japan, Latvia and Mexico, amongst others.

These embrace, a website registered in 2016 which was equivalent to the homepage of on the time. DomainTools reveals the identical e mail and Belarus cellphone quantity are in historic registration information for,, and (all domains linked listed here are to their cached copies at, the place out there)., circa 2015. Picture:

Historic WHOIS information for present it was registered for a few years to a resident of Sioux Falls, SD for a very unrelated website. However round Sept. 2015 the area switched from the registrar to eNom, and the registration information had been hidden behind privateness safety companies. DomainTools signifies round this time began utilizing area title servers from DNS supplier Likewise, first appeared in late 2015, was additionally registered by way of eNom, and in addition began utilizing for DNS at almost the identical time.

Listed on LinkedIn as a former product supervisor at between 2015 and 2018 is Dimitri Bukuyazau, who says their hometown is Warsaw, Poland. Whereas this LinkedIn profile ( doesn’t point out Nuwber, a search on this title in Google turns up a 2017 weblog put up from, which laid out a lot of causes to assist a conclusion that OneRep and had been the identical firm.

“Any folks search profiles containing your Personally Identifiable Data that had been on had been additionally mirrored identically on, right down to the family’ names and handle histories,” wrote. The put up continued:

“Each websites supplied the identical rapid opt-out course of. Each websites had the identical generic contact and assist construction. They had been – and stay – the identical firm (even advocates this reality:”

“Issues modified in early 2016 when started providing privateness elimination companies proper alongside their very own open shows of your private info. At this level if you discovered your self on OR, you’d be supplied with the choice of opting-out your information on their website free of charge – but additionally be extremely inspired to pay them to take away it from a slew of different websites (and a part of that cost was eradicating you from their very own website,, as a advantage of their service).”

Reached through LinkedIn, Mr. Bukuyazau declined to reply questions, reminiscent of whether or not he ever labored at Nonetheless, Constella Intelligence finds two fascinating e mail addresses for workers at, and, which was registered beneath the title “Dzmitry.”

PrivacyDuck’s claims about how appeared and behaved within the early days are usually not readily verifiable as a result of the area has been fully excluded from the Wayback Machine at The Wayback Machine will honor such requests if they arrive straight from the proprietor of the area in query.

Nonetheless, Mr. Shelest’s title, cellphone quantity and e mail additionally seem within the area registration information for a really dizzying variety of country-specific people-search companies, together with,,,,,, and

The identical particulars seem within the WHOIS registration information for the now-defunct people-search websites,,, and, a people-search service for French residents.

The German people-search website

A search on the e-mail handle suggests Mr. Shelest was beforehand concerned in somewhat aggressive e mail advertising and marketing campaigns. In 2010, an nameless supply leaked to KrebsOnSecurity the monetary and organizational information of Spamit, which on the time was simply the biggest Russian-language pharmacy spam associates program on the earth.

Spamit paid spammers a hefty fee each time somebody purchased male enhancement medication from any of their spam-advertised web sites. Mr. Shelest’s e mail handle stood out as a result of instantly after the Spamit database was leaked, KrebsOnSecurity searched the entire Spamit affiliate e mail addresses to find out if any of them corresponded to social media accounts at (on the time, Fb allowed customers to go looking profiles by e mail handle).

That mapping, which was executed primarily by beneficiant graduate college students at my alma mater George Mason College, revealed that was utilized by a Spamit affiliate, albeit not a really worthwhile one. That very same Fb profile for Mr. Shelest remains to be energetic, and it says he’s married and dwelling in Minsk [Update, Mar. 16: Mr. Shelest’s Facebook account is no longer active].

The Italian people-search web site

Scrolling down Mr. Shelest’s Fb web page to posts made greater than ten years in the past present him liking the Fb profile pages for numerous different people-search websites, together with,,,,,,,,,,,,,,,,,,,,,,,,,,,,, and lots of country-code variations of (e.g., and

The people-search web site finds that the entire domains talked about within the final paragraph had been registered to the e-mail handle

Mr. Shelest has not responded to a number of requests for remark. KrebsOnSecurity additionally sought remark from, which likewise has not responded to inquiries about its founder’s many obvious conflicts of curiosity. In any occasion, these practices would appear to contradict the purpose Onerep has said on its website: “We consider that nobody ought to compromise private on-line safety and get a revenue from it.”

The people-search web site

Max Anderson is chief development officer at 360 Privateness, a authentic privateness firm that works to maintain its shoppers’ information off of greater than 400 information dealer and people-search websites. Anderson stated it’s regarding to see a direct hyperlink between between an information elimination service and information dealer web sites.

“I might take into account it unethical to run an organization that sells folks’s info, after which cost those self same folks to have their info eliminated,” Anderson stated.

Final week, KrebsOnSecurity revealed an evaluation of the people-search information dealer large Radaris, whose shopper profiles are deep sufficient to rival these of much more guarded information dealer assets out there to U.S. police departments and different regulation enforcement personnel.

That story revealed that the co-founders of Radaris are two native Russian brothers who function a number of Russian-language relationship companies and affiliate applications. It additionally seems most of the Radaris founders’ companies have ties to a California advertising and marketing agency that works with a Russian state-run media conglomerate at present sanctioned by the U.S. authorities.

KrebsOnSecurity will proceed investigating the historical past of varied shopper information brokers and people-search suppliers. If any readers have inside information of this trade or key gamers inside it, please take into account reaching out to krebsonsecurity at

Replace, March 15, 11:35 a.m. ET: Many readers have identified one thing that was by some means ignored amid all this analysis: The Mozilla Basis, the corporate that runs the Firefox Net browser, has launched an information elimination service referred to as Mozilla Monitor that bundles OneRep. That discover says Mozilla Monitor is obtainable as a free or paid subscription service.

“The free information breach notification service is a partnership with Have I Been Pwned (“HIBP”),” the Mozilla Basis explains. “The automated information deletion service is a partnership with OneRep to take away private info revealed on publicly out there on-line directories and different aggregators of details about people (“Information Dealer Websites”).”

In a press release shared with, Mozilla stated they did assess OneRep’s information elimination service to substantiate it acts in accordance with privateness ideas advocated at Mozilla.

“We had been conscious of the previous affiliations with the entities named within the article and had been assured that they had ended previous to our work collectively,” the assertion reads. “We’re now trying into this additional. We’ll all the time put the privateness and safety of our clients first and can present updates as wanted.”

Leave a Comment