A page accusing a person of wrongdoing can be copied, indexed and sent to clients or associates. If its publisher or someone linked to it seeks money to take it down, that may be a form of reputational extortion. Not every negative article is false or extortionate; each claim and any payment demand needs its own evidence.
REPUTATION RANSOMEVIDENCE REVIEW · 30 SEPTEMBER 2026
PUBLIC RECORD · INVESTIGATION
What is reputation ransom?
Across countries, business owners report reputational attacks and pressure to pay for removal. This investigation examines the evidence rather than assuming one operator or one proven global network. Reputation ransom is the alleged use of damaging online claims as leverage: publish or amplify a page about a person, then seek payment to remove it or stop further harm. Business owners can lose customers, partners and time even while the claims are disputed. This site examines documented cases, tracks sites raised in reports and offers a way to share evidence with journalists.
Understand the pattern
A FIRST-VISITOR GUIDE
The threat is not criticism. It is the alleged pressure to pay.
People may face lost business, questions from partners and the cost of investigating an anonymous operator. An accusation remains an allegation unless independently established, and a request for removal alone does not prove wrongdoing by the publisher.
We collect public records and carefully label what courts found, what complaints allege and what journalists reported. We also list sites that have been raised as leads, including past and current domains, without claiming they all share an operator or that all their reporting is false.
Have records to share? Investigating this story?
People affected, witnesses and journalists can write to legal@reputationransom.com. Include URLs, dates and documents showing the conduct you are reporting. If you want contact with a journalist, say what you consent to share and how to reach you. Do not send passwords or sensitive personal records by ordinary email. Submissions are reviewed, not published automatically; an introduction or response cannot be guaranteed.
Send information ↗What is established? On 16 October 2025, a US federal court entered an $800,000 civil default judgment against FinanceScam.com for conduct involving Goldstone Financial Group and Anthony Pellegrino. The order covers eight domains targeting those plaintiffs. It is not a criminal conviction, a finding about every site discussed here, or a removal order for pages about Reddy. Read the order.
01 / The court record
In Goldstone Financial Group LLC and Anthony Pellegrino v. FinanceScam.com, No. 1:25-cv-07283 (N.D. Ill.), the June 2025 complaint described impersonating domains and alleged a paid program for removing adverse content. The October 16 default judgment found FinanceScam.com liable for anticybersquatting, trademark infringement, false advertising, defamation per se, false light and trade libel; awarded $100,000 for each of eight Goldstone/Pellegrino-targeted domains; ordered their transfer; and provided relief tied to statements about those plaintiffs. A civil judgment followed the next day.
Because this was a default judgment, it did not follow a contested trial. It did not adjudicate Reddy's pages. The eight domains ordered transferred were impersonating Goldstone/Pellegrino domains, not wholesale control of FinanceScam.com or every domain named on this page.
A separate California case, FDCTech Inc. v. IntelligenceLine.com et al., named IntelligenceLine.com, CriticalIntel.com and Fintelegram.com in a March 2025 defamation/libel complaint. The public docket mirror does not establish an outcome. Being co-defendants does not prove common ownership or liability.
02 / The reported pattern
The alleged playbook targets business figures: find a source story that casts a person in a negative light, repackage or amplify it into an accusatory dossier, then offer removal for payment. That is an allegation about a reported pattern, not a finding that every article began with a true source story or that every site offered paid removal. The Goldstone complaint specifically alleged publication of accusatory material and impersonating domains, then a paid "Citizen Advocacy Program" related to content removal. Journalist Jack Poulson's July 2026 investigation examined historical removal offers and reported links between IntelligenceLine, FinanceScam, CriticalIntel and Investigations.org. Poulson reported that Investigations.org advertised $1,200 crypto-paid dossiers; his reporting includes an anonymous representative's response, including an alternative explanation for reused endorsement badges.
One anonymous Reddit report alleges similar tactics involving several sites. It offers no independently verified receipts or operator identity. We have not verified that any of these operators directly demanded money from Reddy. This is a reported pattern and an investigative lead, not proof that every adverse article is false or every site has one owner.
03 / Reported sites, different levels of evidence
FinanceScam.com
Civil judgmentThe defendant in the Goldstone case. A publicly indexed dossier about businessman Priven Reddy was identified at dossier URL concerning Reddy has been identified, but the judgment does not adjudicate that page. The site's current reachability may change. Court order.
IntelligenceLine.com
Named in complaintsGrouped with FinanceScam in the Goldstone complaint, and a named defendant in the FDCTech complaint. Registration records reviewed on September 29 listed the same Cloudflare nameserver pair as FinanceScam; shared infrastructure is a lead, not conclusive ownership proof.
CriticalIntel.com
Historical link; current control unknownThe Goldstone complaint said it forwarded to FinanceScam in 2025, and the FDCTech complaint named it. By September 2026, the domain displayed a marketplace landing page. Historical association does not establish who controls it now.
Investigations.org
Independent reportingPoulson reported evidence of a connection to the older cluster through reused citations and endorsement material. A shared nameserver with CriticalIntel is another lead. No court ruling in the cited record establishes common ownership.
CyberCriminal.com
Alleged affiliationThe Goldstone complaint alleged affiliation "on information and belief," citing content and cross-promotion. It has carried an article about Reddy. Present ownership is unverified and this domain was not itself adjudicated in the Goldstone default judgment.
LetMeExpose.is
Unverified linkA single anonymous victim-style post groups it with other sites; it has a separate page about Reddy. Neither subject overlap nor that post establishes a common operator. Its content merits a separate, page-specific assessment.
ProConsumer.com
Separate complaintA profile about Reddy was identified. The evidence reviewed did not establish a reliable technical or documentary connection to the FinanceScam defendants. It should not be described as part of the same proven operation.
Explore the evidence
04 / If you are targeted
Preserve the record
Save the exact URL, UTC date, screenshot and page copy. Identify each contested sentence and gather independent documents showing why it is inaccurate. Keep the full headers of any direct demand. Record current registration and hosting data, since ownership and hosting can change.
Report specific conduct
Send the particular URL and evidence to the relevant platform, host, registrar or search service under its actual policy. Cloudflare's abuse form and GoDaddy's abuse guidance describe their roles. A CDN or registrar may not host the page and cannot necessarily remove it. Do not claim another person's judgment directly governs your page.
Use official channels where warranted
The FBI IC3 complaint form accepts reports, including from people outside the US according to its FAQ; it does not promise an individual investigation or removal. In South Africa, contact the police about suspected criminal conduct and seek qualified legal advice for civil remedies. A lawyer can assess defamation, harassment or privacy claims on the specific facts.
Source notes & methodology
This review separates (1) a judicial ruling, (2) claims in pleadings, (3) independent reporting, (4) technical clues, and (5) uncorroborated witness accounts. No inference about a person's identity, present domain control, or the truth of every adverse claim follows from a shared nameserver or an anonymous post.
Primary records: Goldstone complaint · October 16 order · October 17 judgment · FDCTech docket mirror. Reporting and competing views: Poulson investigation · Volokh commentary · anonymous victim-style post. Original page links are provided in the site-by-site entries for identification, not endorsement.
This page was prepared from records reviewed on September 29, 2026. Domain status and site content can change. Corrections should be supported by a dated primary source. It is an evidence review, not a legal opinion or a finding of guilt.