On 5/05, MCI finally booted this scammer and he moved to xo.com using 69.67.72.10 & 69.67.72.20
Emailed reports to whoa007@pacbell.net & abuse@xo.com are ignored
Contact XOSales
Call toll-free 1.877.932.2629
Support
Call toll-free 1.888.575.6398
XO quickly proved to be even worse than MCI. When phoned, they denied having any connection to this scammer even when confronted with traceroutes proving that the provide connectivity.
Score = 56
==============
http://servingmail.com/life.html
IP: 69.67.72.10
Reporting addresses:
abuse@xo.com
- Redirects to:
http://aftrk.com/c/c?b=20865&h=19541&sh=316862&bt=html
http://aftrk.com/c/c?b=20865
IP: 216.23.173.249
Reporting addresses:
abuse@intelenet.net
Whois blocked
Name servers:
NS3.INTELENET.NET
NS4.INTELENET.NET
http://aftrk.com/c/c?b=20865
- Redirects to
ETerm; life insurance: term life insurance, life insurance quote, life insurance company, term life insurance quote
http://www.eterm.com/VM/newquote.asp?publisher=Afffuel&campaign=EmailM&bannercode=316862
============
http://goldenfury.com
Reporting addresses:
abuse@mci.com
Registrant:
Software Factory Solutions
contact@thehottestthingaround.com
Domain servers in listed order:
NS1.THEHOTTESTTHINGAROUND.COM 63.82.96.35
Host: 63.82.96.35
Reporting addresses:
abuse@xo.com
abuse@mci.com
================
Other domains
0NTHEBA11S0FTWARE.COM
18ANDOLDEROFFERS.COM
1UXYS01UT10NS.COM
A11THES0FTWAREY0UNEED.COM
ADULTONLYOFFERS.COM
ADULTSUBSCRIPTIONOFFERS.COM
ALLAROUNDTHINGS.COM
ALLTHEMEDSYOUNEED.COM
ALWAYSIMPORTANT.COM
AMAZINGPHARMACYSAVINGS.COM
B1C0RP1US.COM
BACKPOST.BIZ
BEHINDITALLEXCHANGE.COM
BIGBUCKS4DRIVING.COM
BIGCAPABILITIES.COM
BIGCASH4DRIVING.COM
BLANKTRADE.COM
blastoffcom.com
BLAZEBOUNCE.COM
BREAKTHROUGHVISIONARIES.COM
BUCKS4DRIVING.COM
BUYANDSAVEONMEDS.COM
BUYMEDSONLINEANDSAVE.COM
C0MP1ETE1S01UT10NS.COM
C0MP1ETETARGET1NG.COM
CHEAPDRUGS4U.NET
CLICKANDSAVEONMEDS.COM
CREATIONPLACED.COM
CREATIVECRAFTANDMORE.COM
CREATIVEFACESMORE.COM
CROSSINTEREST.COM
CRUISECARS4CASH.COM
DATALINKEXCHANGE.COM
DEALSFOR18ANDUP.COM
DIGITALPROPOGANDA.COM
DISCOUNTEDDRUGSONLINE.NET
DISCOUNTEDMEDSONLINE.COM
DREAMCONTROLLER.COM
DREAMWAKING.COM
DRIVE4BIGBUCKS.COM
DRIVE4INCOME.COM
DRIVE4PAYCHECKS.COM
DRIVEMAKINGMONEY.COM
E11TEPR0DUCTSSPEC1A11YF0RY0U.COM
EARNMONEYWHILEDRIVING.COM
EASTCOASTLIQUIDATIONCENTER.COM
EASYMONEYDRIVING.COM
EMA11SPYPR0GRAM.COM
FASTCASH4DRIVING.COM
fastserving.com
FREESERVING.COM
GETPRESCRITIONMEDSONSALE.COM
GETRICHDRIVING.COM
GETTH1SS0FTWAREN0W.COM
GETYOURMEDSONLINEHERE.COM
GETYOURPRESCRIPTIONSONLINE.COM
GOLDENEXPERT.COM
GOLDENFURY.COM
IP: 63.82.96.35
GOLDENVIRTUAL.COM
GONEPOINTONE.COM
GREATDEALSONADULTSITES.COM
GREATPRICES4PILLS.COM
GROUPDRUGSONLINE.COM
H0TAMAZ1NGPR0GRAMS.COM
H0TANDNEWPR0GRAMS.COM
HOTADULTDEALS.COM
HOTMATURESITES.COM
IMPROMPT.COM
INCOME4DRIVING.COM
INSTALLEREXCHANGE.COM
INTERESTOR.COM
INTERESTSAVVY.COM
KICKHOSTING.COM
LARIMORECREATIVE.COM
LOCKINGPOINTONE.COM
M0N1T0RWHATTHEYD0.COM
MAK1NGTH1GSHAPPENF0RY0U.COM
MAKEMONEY4DRIVING.COM
MAKEREALCASHDRIVING.COM
MAKESERIOUSMONEYDRIVING.COM
MAKINGMORECREATIVES.COM
MALLPACKS.COM
MANDARINEFFECTS.COM
MATUREWEBSITEDEALS.COM
MIDWESTPROPOGANDA.COM
MIDWESTPROPOGANDALAND.COM
MONEYSAVINGDRUGSITE.COM
NAMEBRANDPILLSDISCOUNTED.COM
NETMANDARIN.COM
NETWORKVISIONARIES.COM
NEWEASTCOAST.COM
NEWEDGECORP.COM
NEWEDGEZONE.COM
NEWMEDIAEDGE.COM
ONLINEPHARMACYSUPERSTORE.COM
OPENCONTROLLER.COM
OPENFACES.COM
PAB10S0FT.NET
PAYCHECKFORDRIVING.COM
PHARMACYSAVINGS4U.COM
PINPOINTMONEY.COM
PROCONTROLLERS.COM
PROFITWHENDRIVING.COM
PROMPTHANDLINGTIPS.COM
PROMPTPLUS.COM
PROPOGANDALAB.COM
PURCHASEYOURPILLSONLINE.COM
QUICKPACED.COM
R1GHTMAPS.COM
RAPIDPROMPT.COM
REWARDS4DRIVING.COM
S0FTWAREC0MPET1T10N.COM
SATISFYINGFORPROFITS.COM
SATISFYINGRAPHICS.COM
SAVEONYOURPRESCRIPTIONSONLINE.COM
SECRET1YKN0WEVERYTH1NG.COM
SEEMORECREATIVE.COM
SERIOUSMONEYPAID2DRIVE.COM
SERVINGMAIL.COM
SERVINGONES.COM
SITEFARMS.COM
STUFFYOUACTUALLYCAREABOUT.COM
SUPPLYPALACE.COM
THEBESTS0FTWAREY0UCANBUY.COM
THEHOTTESTTHINGAROUND.COM
THENEWINNOVATIVEEDGE.COM
THESTOPPOINT.COM
THINGSAROUND.COM
topserving.com
TRADEPOINTONE.COM
ULTIMATEADULTOFFERS.COM
UN1QUE0FFERS0N11NE.COM
VERYSATISFYING.COM
VISIONARIESLEADERSHIP.COM
WAKINGENDS.COM
WAKINGS.COM
WESTCOASTDESICIONMAKING.COM
XRTHOSTING.COM
Y0UCANW1NW1THTH1S.COM
YESITALLCANBEDONE.COM
YOURPILLFACTORYOUTLET.COM
ZSXCONTROLLER.COM
ZXRMAIL.COM
The above domain names are just redirects for various "affiliate programs" such as WebRewardsCentral.com, Addrive and ProductTestPanel.comWebRewardsCentral.com
http://www2.webrewardscentral.com
RegistrantContact:
MarketLabs.net Inc
admin@marketlabs.net
Domain servers in listed order:
NS2.MARKETLABS.NET 66.33.254.12
NS1.MARKETLABS.NET 66.33.254.11
Addrive
http://www.addrive.com
http://jp1.sb01.com/index.php
IP: 208.38.131.24
Report to: abuse@esnet.com
Whois:
Yacoubian, Dikran
subscriberbaseholdings@yahoo.com
3830 Forest Drive
Suite 207
Columbia, SC 29204
US
803-790-8381
Domain servers in listed order:
DNS101.SB01.COM 204.74.66.252
DNS102.SB01.COM 204.74.67.252
From web page:
Nancy Margaret Jones
nancymargaret@addrive.com
ProductTestPanel.com
http://producttestpanel.com
IP: 208.38.131.22
Report to: abuse@esnet.com
Whois:
Dikran Yacoubian: subscriberbaseholdings@yahoo.com
SubscriberBASE Holdings, Inc
3830 Forest Drive
Columbia, South Caro 29204
US
Phone- 803-790-8381
Domain servers in listed order:
DNS101.SB01.COM 204.74.66.252
DNS102.SB01.COM 204.74.67.252
IPs this scammer uses to send from
69.67.72.10, 69.67.72.20
Reporting addresses: abuse@xo.com
This info from a IP whois looks like it is real. If you are looking to sue this spammer, start with this asshole. Even if he is not the one sending the spam, he is well aware that his network is being used by the spammer because he is profitting from it ad ignoring all complaints.
CustName: Roger Graves
Address: 301 W. Capital Exp.
City: San Jose
StateProv: CA
PostalCode: 95136
Country: US
NetRange: 69.67.72.0 - 69.67.72.255
NetName: DATAMONITOR-BUSSINESS-INFORMATION
OrgTechHandle: NOC1264-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-408-268-4526
OrgTechEmail: whoa007@pacbell.net
Illegal cable descrambler & bodywrap scammer
Score = 50
=========================
http://1stopnetz.info
IP: 202.71.106.53
Reporting addresses:
faliza79@tm.net.my,
anirza@tm.net.my,
rudie@tm.net.my,
m_ghaza@tm.net.my,
gmen@tm.net.my,
f-rizal@tm.net.my
- Redirects to:
2005 Digital Cable Filters
http://1stop4webstore.com/lisa_004/cablefilter/index.html
IP: 202.71.106.53
Reporting addresses:
faliza79@tm.net.my,
anirza@tm.net.my,
rudie@tm.net.my,
m_ghaza@tm.net.my,
gmen@tm.net.my,
f-rizal@tm.net.my
Whois blocked
Name Servers:
ns1.1dnszone.com
ns2.1dnszone.com
=============
http://theweightlossbiz.com
http://yourfitnessfirm.com
http://yourfitnessonline.com
http://yourhealthsearch.com
IP: 221.5.250.92, 221.5.250.93 (chinanet)
- Redirects to
Untitled Document (Bodywrap scam)
http://www.fitnessdot.com/bw/
IP: 221.5.250.92 (chinanet)
Reporting addresses:
abuse@chinanet.cn.net,
abuse@cnc-noc.net
=========================================
http://1clickcomplete.com
IP: 203.98.177.219
Reporting addresses:
abuse@telstra.net, abuse@newworldtel.com
- Redirects to
http://1click4store.com/min_019/turbonet/index.html
IP: 203.98.177.219
Reporting addresses:
abuse@telstra.net, abuse@newworldtel.com
==============
http://1clicksystem.com
IP: 210.51.197.98
============
Untitled Document (Body wrap scam)
http://theweightlossfirm.com
http://weightlossfirm.com
IP: 221.5.250.92 (chinanet.cn.net)
Reloads to
http://www.fitnessdot.com/bw/aff01/index.html
IP: 221.5.250.92 (chinanet.cn.net)
===================
Illegal cable descrambler
http://1clickagency.info
http://1clickadvisor.info
http://1clickextra.info
http://1clickgallery.info
http://1clicklimited.info
http://1clicksource.info
http://1clickspot.info
IP: 210.51.197.30
- Redirects to
http://1click4store.com/lisa_004/cablefilter/index.html
Whois blocked
Name Server: NS1.1DNSZONE.COM
Name Server: NS2.1DNSZONE.COM
===============
IP: 202.99.172.181
http://www.1clickgreat.info
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
==============
http://1click4store.com/lisa_004/cablefilter/index.html
http://1click4store.com/min_019/cablefilter/index.html
210.51.197.30 (chinanet)
Reporting addresses:
cncsummary@special.abuse.net,
daihy@china-netcom.com,
postmaster@china-netcom.com,
cnc-abuse@abuse.sprint.net,
tech-group@china-netcom.com
Whois blocked
Name Servers:
ns1.1dnszone.com
ns2.1dnszone.com
======
Email Marketing
http://210.51.197.30/
IP: 210.51.197.30
Reporting addresses:
cncsummary@special.abuse.net,
daihy@china-netcom.com,
postmaster@china-netcom.com,
cnc-abuse@abuse.sprint.net,
tech-group@china-netcom.com
- WHOIS results for 210.51.197.30
Location: China [City: Beijing, Beijing]
netname: NONGXUEYUAN-NETBAR
descr: yangzhou city
changed: daihy@china-netcom.com changed:hm-changed@apnic.net
address: 9/F, Building A, Corporate Square, No. 35 Financial Street,
address: Xicheng District, Beijing 100032, P.R.China
country: CN
phone: +86-10-88093588
fax-no: +86-10-88091442
e-mail: tech-group@china-netcom.com
changed: zhaomq@china-netcom.com
source: APNIC
===========
domain: 1dnszone.com
owner: Antonio Cabo
organization: 1 DNS Zone, S.A.
email: 1dnszone@gmail.com
address: 16060 Largo Domachado
city: Sao Paulo
state: --
postal-code: 04671-090
country: BR
phone: +011 541 311 8825
nserver: ns1.1dnszone.com 216.139.195.14
nserver: ns2.1dnszone.com 69.89.70.58
===========
Other domains:
1clickagency.info
1clickadvisor.info
1click4store.com
1clickextra.info
1clickgallery.info
1clickgreat.info
1clicklimited.info
1clicksource.info
1clickspot.info
1clicksystem.com
1clickcomplete.com
fitnessdot.com
theweightlossfirm.com
weightlossfirm.com
60 Second Mortgage Quote Form
Fake names: Pat Lieberman, Jerry Goodman
Fake emails: patlieberman@yandex.ru, jerrygoodman@yandex.ru
Score = 49
=============
http://www.mort-your.com/index2.php
?refid=ph420
IP: 221.11.133.41 (chinatietong)
===========
60 Second Mortgage Quote Form
http://www.simple-financing.net/2/
IP: 65.182.143.7
Reporting addresses:
abuse@xo.com
===========================
http://www.mortgage-tower.com/index.php
refid=ph420
http://www.mort-lowsz.net/index2.php
refid=mal
http://www.yourmort.com/index.php
refid=ph420
IP: 222.51.98.244 (chinatietong.com)
===========
http://www.droppedr8z.com/x/loan2.php
id=lt2
id=lt3
http://mort-lowsz.net/index.php
refid=lix
http://www.yourmort.com/index2.php
refid=ph420
IP: 222.51.98.244 (chinatietong)
=========
http://www.kajsidd.com/2/index/bvk
IP: 222.51.98.244
Reporting addresses:
postmaster@chinatietong.com,
crnet_mgr@chinatietong.com,
crnet_tec@chinatietong.com
===============
http://www.kniudx.net/index2.php
refid=mal
=============
60 Second Mortgage Quote Form
http://www.nidbchx.com/index.php
refid=ph420
IP 221.3.131.185
Report to: abuse@cnc-noc.net
===============
http://www.r8tesdrop.com/x/loan.php
id=lt1
222.47.183.89 (chinatietong)
============
http://www.mortszx.com/index2.php
refid=mal
IP: 221.3.131.185
============
http://www.nidbchx.com/index2.php
refid=mal
============
http://www.motyd.net/index2.php
221.3.131.185
=================
60 Second Mortgage Quote Form
http://www.premium-mortgages.com/2/
IP: 65.182.139.23
Report to: abuse@xo.com
==============
http://www.jnixsa.com/index2.php
http://www.lendisx.net/index2.php
IP: 221.3.131.185
================
http://www.r8tdrop.com/x/loan2.php
IP: 222.47.183.89 (chinatietong.com)
==============================
Get the lowest mortgage rate possible
http://www.kenxsd.net/index2.php
IP: 218.7.112.235
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
====================
60 Second Mortgage Quote Form
http://www.freedom-financial.net/2/
IP: 65.182.143.6 (xo.com)
============
60 Second Mortgage Quote Form
http://kdnix.net/index2.php
http://lendingdsz.com/
http://lendinxsz.net/index2.php
http://lendix.net/index.php
http://ref1nowz.net/
IP: 218.7.112.235 (chinanet)
========
60 Second Mortgage Quote Form
http://www.fasterdaz.com/x/loan2.php
http://www.goodwayz.com/x/loan2.php
IP: 222.47.183.89 (chinatietong.com)
IP: 202.99.172.149
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
===============
60 Second Mortgage Quote Form
http://www.re-finances.com/2/
IP: 69.67.64.232
===============
60 Second Mortgage Quote Form
http://www.m0rt1.com
http://mrldss.com/index.php
IP: 218.7.112.235 (chinanet)
================
Other domains:
12mtgnow.com
cheaplenders.net
droppedr8z.com
easy-lending.com
fasterdaz.com
fastlenders.net
freedom-financial
goodwayz.com
h0mel0an.net
jnixsa.com
kajsidd.com
kdnix.net
lend-one.net
lendingdsz.com
lendinxsz.net
lendisx.net
lendix.net
m0rt1.com
me0rt.com
mort-lowsz.net
mort-your.com
mortszx.com
mrldss.com
mrlend123.com
mrratenow.com
nidbchx.com
nowratez.com
premium-mortgages.com
r8tdrop.com
r8tesdrop.com
re-finances.com
ref1nowz.net
yourmort.com
Mystery spammer 1 / OEM CD / Replikabazaar / Viagra Professional Tabs
This spammer hardly ever sents a spam with a working URL. Usually warez. Uses a diffrent fake ID to register every domain and creates at least three domains per day. Uses rotating IPs.
Fake names: James Harris, Mahmutov, Ibragim; Constance Edwards
Fake emails: ibragimemail@yahoo.com, leimomi01@tom.com, ibragimmahmutovv@yahoo.com, edwards@mail333.com
Score = 43
==========================
http://wisnjwis7.com
Dead on arrival
Alias:
Mahmutov, Ibragim
ibragimemail@yahoo.com
Domain servers:
ALLADIN.AICSTRUNGCB.BIZ (221.11.133.42)
GINNY.AICSTRUNGCB.BIZ (222.47.183.90)
=================
http://afreshlbbdb.com/
Alias:
James Harris
edwards@mail333.com
Name Servers:
alladin.aicstrungcb.biz
ginny.aicstrungcb.biz
================
GENERIC Viagra SHOP
http://hootercdz.com/ES001/
http://tatnmtat0.com/ES001/
IP: 222.51.98.245 (chinatietong.com)
===============
GENERIC Viagra SHOP
http://racyhiracy0.com/ES001/
http://ullifull8.com/ES001/
http://wafddiwafd8.com/ES001/
IP: 221.11.133.42
Report to: abuse@cnc-noc.net, abuse@chinanet.cn.net
======================
http://genichic.com/ES001/
IP: 221.11.133.42
Report to: abuse@cnc-noc.net
Name : James Harris
Email : edwards@mail333.com
Name Servers::
alladin.aicstrungcb.biz
ginny.aicstrungcb.biz
====================
http://afreshlbbdb.com/ES001/
http://eremichnmnl.com/ES001/
Rotating IPs
IP: 222.51.98.245 (chinatietong)
IP: 61.28.55.41
Report to: wujun@etfiber.net, civ@etfiber.net
=============================
GENERIC Viagra SHOP
http://lygeumgjmic.com/ES001/
http://82.78.42.131/ES001/
IP: 82.78.42.131
==============
Fake bank login
http://update.southtrstonlinebanking.com/retail/login.htm
IP: 67.167.35.111
Name : James Harris
Email : leimomi01@tom.com
Name Servers::
ns1.southtrstonlinebanking.com
ns2.southtrstonlinebanking.com
ns3.southtrstonlinebanking.com
ns4.southtrstonlinebanking.com
ns5.southtrstonlinebanking.com
========================
GENERIC Viagra SHOP
http://ghtnsecn.com/ES001/
http://82.78.42.130/ES001/
IP: 82.78.42.130
Reporting addresses:
abuse@rdsnet.ro
=============
GENERIC Viagra SHOP
http://boweldjaej.com/ES001/
http://hitchiclah.com/ES001/
IP: 218.7.112.241
Reporting addresses:
gaobh@mail.hl.cn
==============
http://vestaskmbgf.com/dfgjkdfg
IP: 82.78.42.131
Reporting addresses:
abuse@rdsnet.ro
Name : James Harris
Email : edwards@mail333.com
Name Servers::
alladin.aicstrungcb.biz
ginny.aicstrungcb.biz
============
http://ravishfaknc.com/
Contact:
Zhamelgo, Alexandr
aazhago@yahoo.com
Domain servers in listed order:
DOG.CCPATONCEJK.BIZ 202.99.172.145
TSURT.CCPATONCEJK.BIZ 200.149.11.62
=================
http://ceruselhcan.com
Rotating IPs
IP: 218.7.112.241
Reporting addresses: gaobh@mail.hl.cn
IP: 82.78.42.131
Reporting addresses: abuse@rdsnet.ro
Contact::
Name : James Harris
Email : leimomi01@tom.com
Name Servers::
alladin.aicstrungcb.biz
ginny.aicstrungcb.biz
=====================
http://fetialcgchl.com
IP: 218.7.112.241 (chinanet)
Name: James Harris
Email: edwards@mail333.com
::Name Servers::
alladin.aicstrungcb.biz
ginny.aicstrungcb.biz
================
GENERIC Viagra SHOP
http://adamasnaghk.com/ES001/
http://blhookahgk.com/ES001/
http://brollynmmbb.com/ES001/
IP: 218.7.112.241 (chinanet)
========================
http://plapfacba.com/D093/
IP: 200.149.11.61
Reporting addresses:
mail-abuse@nic.br
========================
http://bestfantem.com
IP: 222.47.183.90
Contact:
Perenskiy, Anatoliy
hostserviceuse@yahoo.com
Domain servers:
ALLADIN.AICSTRUNGCB.BIZ 202.99.172.145
GINNY.AICSTRUNGCB.BIZ 200.149.11.62
================
http://www.purpleapes.com/extra/geocah/index.php
IP: Dead
=====================
http://download.hantlekhcke.com/hdfgdf?3o5d5e4yn8gejnzfdhgjkf (dead on arrival)
IP: 195.214.239.104
Report to: igor@hostelecom.ru.com
Contact::
James Harris
leimomi01@tom.com
Name Servers::
alladin.aicstrungcb.biz
ginny.aicstrungcb.biz
=====================
GENERIC Viagra SHOP
http://amididfjkcg.com/ES001/
IP: 195.214.239.99
Reporting addresses:
igor@hostelecom.ru.com
=======================
GENERIC Viagra SHOP
http://casefydcngd.com/ES001/
IP: 218.7.112.241
Reporting addresses:
abuse@cnc-noc.net, abuse@chinanet.cn.net
================
GENERIC Viagra SHOP
http://felsjkdbm.com/ES001/
IP: 218.7.112.241
Reporting addresses:
abuse@cnc-noc.net, abuse@chinanet.cn.net
Whois felsjkdbm.com:
Name: Missing
Email: Missing
Address: Missing
Phone: Missing
Country: Missing
Name Server: ALLADIN.AICSTRUNGCB.BIZ
Name Server: GINNY.AICSTRUNGCB.BIZ
===============
http://urnafomast.com (Dead on arrival)
Contact:
Zhamelgo, Alexandr
aazhago@yahoo.com
Domain servers in listed order:
ALLADIN.AICSTRUNGCB.BIZ 202.99.172.145
GINNY.AICSTRUNGCB.BIZ 200.149.11.62
=============
http://reallygoodz.com (dead on arrival)
IP: 218.104.167.77
Contact:
Perenskiy, Anatoliy
hostserviceuse@yahoo.com
Domain servers in listed order:
ALLADIN.AICSTRUNGCB.BIZ 202.99.172.145
GINNY.AICSTRUNGCB.BIZ 200.149.11.62
======================
GENERIC Viagra SHOP
http://cassisnmjma.com/ES001/
IP: 218.7.112.241 (chinanet)
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
=================
http://remoraeiiin.com/000
IP: 218.7.112.241 (chinanet)
=========
Other domains:
61.156.239.204
134.86.254.40
195.214.239.99
213.59.0.84
219.148.3.151
219.153.14.35
222.47.183.53
222.47.183.56
222.51.98.239
adamasnaghk.com
amididfjkcg.com
antidnibm.com
bestfantem.com
bestoemz.com
boweldjaej.com
cassisnmjma.com
ceruselhcan.com
clmajkhged.com
coderlbgfc.com
dnfuriljl.com
dnsequentaf.com
enchicokk.com
fdrindck.com
geunperchji.ws
ggbullitjk.com/
greatsekshealth.info
guacofknhb.com
hdbacchusjj.com
hitchiclah.com
hfchaymb.com
hgarcaj.ws
hndnwzp.biz
hodfulaglbn.com
jjrelatumjl.com
karevivemj.com
kgmortaryfc.com
klmlenhagi.com
lettmdeli.com
lygeumgjmic.com
mgidbnghdh.com
mtsseyzal.info
nanpiehdecd.com
nymphabmdej.co
plapfacba.com
pvsbvkj.info
qfasyiqe.Da.ru
racyhiracy0.com
reallygoodz.com
reefyaenhi.com
remoraeiiin.com
sabrahdilj.com
thouljthou1.com
tnghasbd.com
ullifull8.com
vcbwehva.biz
vestaskmbgf.com
wafddiwafd8.com
xpbestdealz.biz
XVNKAPWNA.INFO
zinciccgcag.com
Barnu Rapatska / TotalPharmacy / WELCOME! Cheating House Wife Services / Date Lonely Wives
discountRxweb.com - Order Cialis Online and Save! lt;Secured Billing - Discreetly Shipped / How To Be A Red Hot Persuasion Wizard... In 20 Days Or Less!
Score = 29
This spammer uses web bugs and tagged URLs. Opening his spam with HTML & images enabled lets him know that your email address is valid. Following the links does too. Controls his own name servers. Sends from open proxies on trojaned computers. Changes domain name for redirecting pathes at least once a day. Fake whois data.
Fake names: Radbergas, Olegas, Helmut Fischer, CHAS BUSHNELL, Bob Cooper, Barnu Rapatska, zopa cathlina, Stacey Gerstien, WebLove, Vadim Gablian, HomeViz, mathew barberstantonly, base advertising jump inc, lifetime, James Sweet, vashumat, James corona, mike mC Garythomason, bishopletsy trierson
Fake emails: olegas2003@spam.lv, helfischer1975@yahoo.com, chas@blazemail.com, bcooper@allsaintsfan.com, barnu@barnurapatska.com, support@emarketingdeals.com, admin@chillblow.com, infohelpteam@yahoo.com, admin@wifesmile.com, abbie@fusemail.com, joker2newdomains@yahoo.com, nameserver2004@yahoo.com
======================
http://hurtfully.com/spur/
http://hybridisms.com/cs/
IP: 222.47.183.126 (chinatietong)
====================
http://donaldaviessd.com/Sn2D1iaf8GPCYeWf3lVgOXC4c/
Rotating IPs
IP: 219.254.32.74 (hanaro)
IP: 221.11.133.11 (chinanet)
IP: 222.36.41.170, 222.51.98.241 (chinatietong)
IP: 222.122.65.3 (kornet)
- Redirects to:
http://dns-html2.com/donaldaviessd.com/Sn2D1iaf8GPCYeWf3lVgOXC4c/
IP: 222.122.65.3 (kornet)
- Redirects to:
Tadalafil_Home
http://visagraph.net/cs/
IP: 61.232.205.186 (chinatietong)
===========
DRUGS DIRECT: CHEAPEST DRUGS ON THE NET
http://ecomomics.net
http://gallanted.com
http://untyred.net/
http://visagraph.net
IP: 61.232.205.186 (chinatietong.com)
IP: 222.47.183.89 (chinatietong.com)
==================
http://heiskanendf.net/1xEtoCwYDnmvdT1QXPiVnoGyR/
IP: 222.36.41.170
===================
DRUGS DIRECT: CHEAPEST DRUGS ON THE NET
http://ecomomics.net
IP: 222.47.183.89 (chinatietong.com)
Contact:
Radbergas, Olegas
olegas2003@spam.lv
Domain servers:
NS1.UNBOSOMED.NET 222.47.183.89
NS2.UNBOSOMED.NET 61.232.205.186
============
domain: spam.lv
person: Mihails Subbotin
e-mail: miha@ot.lv, mihail@sok.lv, zarra@zarra.net
nserver: ns.spam.lv
nserver: ns2.ot.lv
ip) = 222.122.65.23
===================
http://wyethbn.com/2xPeXhJVNDlaTN2qRke4nEawE/
IP: 221.210.2.149 (chinanet)
===================
http://leonhardtsd.com/xJxFw9s2Gg7hzFRLGjTtFJWgK/
IP: 222.51.91.227
- Redirects to
http://dns-html2.com/leonhardtsd.com/xJxFw9s2Gg7hzFRLGjTtFJWgK/
IP: 221.210.2.151 (chinanet)
- Redirects to
DRUGS DIRECT: CHEAPEST DRUGS ON THE NET
http://liverymen.com/
IP: 210.21.119.131
Contact:
Radbergas, Olegas
olegas2003@spam.lv
Domain servers in listed order:
NS1.VAGINAER.COM 210.21.119.130
NS2.VAGINAER.COM 210.21.119.131
=========================
http://taborskofg.net/irxhAof063gwthwmwmhzAWDFn/
IP: 222.47.183.34 (chinatietong)
- Redirects to
http://dns-html2.com/taborskofg.net/irxhAof063gwthwmwmhzAWDFn/
IP: 221.11.133.11
Reporting addresses:
abuse@chinanet.cn.net
abuse@cnc-noc.net
- Redirects to
DRUGS DIRECT: CHEAPEST DRUGS ON THE NET
http://liverymen.com/
IP: 210.21.119.131
Reporting addresses:
daihy@china-netcom.com
postmaster@china-netcom.com
cnc-abuse@abuse.sprint.net
=============
Online Backgammon - www.Win65.com - The Best Online BackGammon
http://www.win65.com
IP: 222.51.98.25 (chinatietong)
Not the usual MO of redirecting/tracking URLs but uses the same name severs.
Name: Mush hashor
e-mail: 02493917a3f4574610d626bffab59fe5-899707@owner.gandi.net
Name servers
ns1.ijfndgct.com 222.51.98.253
ns2.ijfndgct.com 222.51.98.253
ns3.ijfndgct.com 218.201.44.203
ns4.ijfndgct.com 218.201.44.203
=============================
http://oertlixc.net/plC1...
IP: 221.11.133.11
-Redirects to
http://dns-html2.com/oertlixc.net/plC1
IP: 222.122.65.3
Reporting addresses:
abuse@kornet.net
owner: HECTOR RUIZ
email: hector9090@yahoo.com
nserver: ns1.dns-html.com 222.122.65.5
nserver: ns2.dns-html.com 219.254.32.75
nserver: ns3.dns-html.com 202.73.247.22
nserver: ns4.dns-html.com 202.64.76.189
-Redirects to
http://remeasures.net/cs/
Contact:
Fischer, Helmut
helfischer1975@yahoo.com
Domain servers in listed order:
NS1.SHEENIEST.COM 210.21.119.130
NS1.IJFNDGCT.COM 222.51.98.253
NS3.IJFNDGCT.COM 218.201.44.203
NS1.UTILISES.NET 222.47.183.57
NS2.UTILISES.NET 222.222.51.108
Web site host
IP: 202.73.247.20
Whois:
Name: missing
Email: missing
Phone: missing
Address: missing
Country: missing
NS1.DNS-REDIRECTS.COM
NS2.DNS-REDIRECTS.COM
NS3.DNS-REDIRECTS.COM
NS4.DNS-REDIRECTS.COM
hotfreesites2.com
Web site host
Host: 222.122.65.3
Reporting addresses:
abuse@kornet.net
Contact: :
Name: Barnu Rapatska
Email: webmaster@emarketingdeals.com
Name Servers: :
ns1.dns-passthrough.com
ns2.dns-passthrough.com
ns3.dns-passthrough.com
ns4.dns-passthrough.com
DRUGS DIRECT: CHEAPEST DRUGS ON THE NET
DRUGS DIRECT: CHEAPEST DRUGS ON THE NET
http://liverymen.com/
IP: 210.21.119.131
Names: LeiMomi01 Design
Emails: leimomi01@tom.com
===============
Other domains
ecomomics.net
sheenier.net
Haven't heard from this scum for months. No doubt I'll be hearing a lot from them now.
Score = 6
===================
Free Foreign Currency Exchange Information Request
http://tortricidpeel.net
IP: 222.47.62.180 (chinatietong)
Alias:
Malena Mgmt
VILLAPANDO, EDWIN
malena525@indiatimes.com
Domain servers:
NS1.IDUAA4.BIZ 222.47.62.180
NS2.IDUAA4.BIZ 222.47.62.180
================
Get a FREE Mortgage Quote TODAY!
http://crapbroth.com/prime/nokadvanc/
Malena spam gang
IP: 222.47.183.13 (chinatietong)
======================
Get a FREE Mortgage Quote TODAY!
(malena)
http://psophiastable.net/prime/accescom/
IP: 222.47.183.13 (chinatietong)
===========
main1 (Malena Management Group Limitada)
http://hyaenastir.com
Get a FREE Mortgage Quote TODAY!
http://hyaenastir.com/prime/cooright/
IP: 222.47.183.13 (chinatietong)
====================
Malena Management Group
http://steeringgiblet.com
IP: 222.47.183.13
==================
Get a FREE Mortgage Quote TODAY!
http://tongancrunchies.info/prime/cooright/
Malena
IP: 222.47.183.13 (chinatietong.com)
Name: Alejandro Quesada
Organization: Malena Management
Email: malena525@indiatimes.com
Name Server: NS2.APOLLO-8.BIZ
Name Server: NS1.APOLLO-8.BIZ
Mortgage Quote Inquiry Form
Score = 2
Mortgage Quote Inquiry Form
http://www.goodloane.biz/
IP: 61.138.3.102 (chinanet)
Mortgage Quote Inquiry Form
http://www.goodloane.biz/
The American Refinance Mortgage Specialist
Fake names: jeff jackson, Keith Pearce
Fake emails: feffjackson12345@yahoo.com, kpearce37@yahoo.com
Score = 5
================
The American Refinance Mortgage Specialist
http://www.h1gher.net
IP: 221.208.208.7
Reporting addresses:
gaobh@mail.hl.cn
==================
The American Refinance Mortgage Specialist
http://www.c0meh3re.com
http://www.cr3at3.net
http://dr3am1er.com
IP: 221.208.208.4 (chinanet)
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
=================
Other domains:
1-m-n.com
1ndeed.com
c0meh3re.com
cr3at3.net
dr3am1er.com
h1gher.net
mort-today.net
now-and-forever.net
ok-mrg-now.net
Best Pharmacy!
Best Pharmacy!
Score = 2
http://baitandfishtackle.com
http://medsandmore.info/
IP: 210.51.197.69
Whois blocked
Name Servers:
ns1.rx-land.com (210.51.197.69)
ns2.rx-land.com (210.51.197.69)
==========
Whois rx-land.com:
Whois blocked
Name Servers:
ns1.rx-land.com (210.51.197.69)
ns2.rx-land.com (210.51.197.69)
Address used bu "Nigerian" scammer: azeezabdul2005@netscape.net
IP: 205.188.158.57
Reporting addresses:
abuse@aol.com
Home
http://www.freecardatabase.info
IP: 61.138.3.102 (chinanet)
Amplifico | The Sexual Performance Solution
Score = 16
==============
http://popkaland.com/
http://popkasale.com/
http://popkasite.com/
IP: 222.122.65.23 (kornet.net)
..:ENORMAX:.. / annblue.com
Score = 6
annblue.com
http://herbangiuos.com
IP: 222.47.183.126 (chinatietong)
Alias
Skaggs, Jessie
jessiekgs@cliffhanger.com
Domain servers:
NS1.NOMACITA.COM
NS2.NOMACITA.COM
======================
..:ENORMAX:..
http://capitalgainsprivately.info/
IP: 222.47.183.89 (chinatietong)
Name: Stephen Frazier
Email: stephenfrzr@consultant.com
Name Servers:
NS2.NOMACITA.COM
NS1.NOMACITA.COM
=======================
.:ENORMAX:.
http://makehersayouch.info
IP: 222.47.183.89
Report to: crnet_mgr@chinatietong.com, crnet_tec@chinatietong.com
Whois blocked:
Name Server: NS2.NOMACITA.COM
Name Server: NS1.NOMACITA.COM
time4homebiz.com
Score = 2
time4homebiz.com
http://time4homebiz.com
IP: 69.63.143.131
Reporting addresses:
abuse@edgewebhosting.net
postmaster@edgewebhosting.net
Contact:
Susan Mauri (sue.mauri@verizon.net)
+1.8567190174
Fax:
19 Monmouth Ave
Berlin, 6 08009
1
Status: Locked
Name Servers:
ns1.wfh-hosting.com
ns2.wfh-hosting.com
=================
Work from Home! Be successful on your terms.
http://www.123success4life.com
IP: 69.63.143.131
Reporting addresses:
abuse@edgewebhosting.net
postmaster@edgewebhosting.net
Contact:
Dorothy Fitch (Fitchrus2me@aol.com)
256-593-0219
Fax:
21 Johnson Road
P.o. Box 153
Horton, AL 35980
US
Status: Active
Name Servers:
ns1.wfh-hosting.com
ns2.wfh-hosting.com
BestWatches4U- Rolex, Tag, Louis Vuitton & More
Score = 11
=================
BestWatches4U- Rolex, Tag, Louis Vuitton & More
http://www.perfectwatch4u.com/
http://www.perfectwatch4u.com
IP: 219.254.32.69 (hanaro)
Alias:
Ivan Solvok
ivan@mail3ms.com Domain servers in listed order:
ns1.samantha10.com
ns2.samantha10.com
ns1.magellan25.com
ns2.magellan25.com
===================
BestWatches4U- Rolex, Tag, Louis Vuitton & More
http://www.ultimatetimepiece4u.net
IP: 219.254.32.69 (hanaro.com)
Contact:
Ivan Solvok
ivan@mail3ms.com
Domain servers in listed order:
ns2.samantha10.com
ns1.samantha10.com
ns1.magellan25.com
ns2.magellan25.com
=================
BestWatches4U- Rolex, Tag, Louis Vuitton & More
http://www.replicas4me.net
IP: 219.254.32.69
Reporting addresses:
abuse@hanaro.com
====================
http://www.swisstime4us.com
IP: 195.214.237.100
Reporting addresses:
igor@hostelecom.ru.com
Contact:
Ivan Solvok
ivan@mail3ms.com
Record expires on 2006-05-04 00:00:00
Domain servers in listed order:
ns1.samantha10.com
ns1.magellan25.com
ns2.samantha10.com
ns2.magellan25.com
===========
ultimatetimepiece4u.net
SwingerMatch
Score = 3
=================
SwingerMatch
http://kogko.com/
IP: 222.47.183.89 (chinatietong.com)
IP: 202.99.172.149
Contact:
Peter North
bioshan@gmail.com
Domain servers:
ns1.xoloxo.com
ns2.xoloxo.com
=============
http://www.kogko.com/go.html
222.47.183.89 (chinatietong)
- Redirects to
Free Adult Dating, Swingers, Sex Personals, xxx dating, classified and Dating ads find a sex date
http://www.amateurmatch.com/index.php
ainfo=MzA5MXwx
IP: 69.90.97.251
Reporting addresses:
abuse@peer1.net
==================
Other domains:
datenicegirl.com
donehernow.com
http://www.deancapture.com
IP: 204.8.178.245
Report to: postmaster@marliness.net
Contact:
Stapleton, Dean
nospam@proglamour.com
1611 South Melrose
Vista, California 92081
United States
2139259206
NS1.TWINDREAMS.COM
NS2.TWINDREAMS.COM
EXPLOSIVE PICK FOR OUR MEMBERS / The Daily Stock Barometer/ Emerging Growth 0pportunity / Investor Alert Newsletter / Rx Processing Corp. / China World Trade Corporation
Score = 9
No URL. Pump and dump stock scam sent via open proxies on hijacked computers.
Score = 2
===========
Names: David Schulz, Fred Bryson
Emails: dtmschulz@yahoo.com, selamacas@yahoo.com
=======
Penis Growth Patch Rx...
http://www.temline.info
IP: 217.20.209.147
Name: David Schulz
Email: dtmschulz@yahoo.com
Name Servers:
NS1.INFORMTELECOM.RU
NS.INFORMTELECOM.RU
====================
Penis Growth Patch Rx...
http://www.swearet.com/dn/
IP: 217.20.209.147
s_mal@informtelecom.ru
================
Other domains
lanfee.info
swearet.com
temline.info
teramia.info
=====================
Name Servers:
NS1.INFORMTELECOM.RU
NS.INFORMTELECOM.RU
thewebbiz.biz
http://www.thewebbiz.biz
IP: 209.101.220.142
Report to: abuse@epoch.net
Name: The Web Biz
Technical Contact
Email: admin@thewebbiz.com
Name Server: NS1.WORLDFX.NET
Name Server: NS2.WORLDFX.NET
Online Dating with Lasting Match Finder NEW and 100% Free for the first 5,000 people. Join Today!
http://www.lastingmatchfinder.com
IP: 66.199.242.22
Report to: abuse@ezzi.net
Welcome to Online Replica Store.....
Simply Rx
Fake names: Roelf Van der Brug, Richard Graham
Emails: admin@taiwanmedialtd.com, domainalias@yahoo.com
Score = 2
==============
http://www.nf0.net/p/viks
IP: 221.10.254.172 (chinanet)
- Redirects to:
Simple Meds
http://www.simple-meds.com/
IP: 200.155.191.2
Reporting addresses:
mail-abuse@nic.br
=======
http://www.nf0.net
- Redirects to
Welcome to Online Replica Store.....
http://www.online-replica-store.com/
owner: Roelf Van der Brug
email: admin@taiwanmedialtd.com
nserver: rx1.dns889.com 200.149.11.35
nserver: rx2.dns889.com 200.149.11.35
nserver: rx3.dns889.com 200.155.191.2
nserver: rx4.dns889.com 200.155.191.2
=========
http://medicateu.net
IP: 218.7.120.70
Reporting addresses:
gaobh@mail.hl.cn
- Redirects to
http://www.simple-meds.com/
IP: 200.149.11.35
Reporting addresses:
mail-abuse@nic.br
====================
Other domains:
0rdernow.com
h67.net
hycod.com/
ibtz.com
iknd.com
jaqo.com
lekl.com
medforutoday.com
medrxcheap.net
medsforunow.net
mustbegood.info
oi6.net
online-replica-store.com
p1k.net
phents.com
qwild.com
r0lex.net
rrox.com
simply-rx.net
t0w.net
tlme.net
vaigra.net
xenl.com
y73.net
KathyrnW@webtv.net
Webtv user who spems fellow webtv users that she doesn't even kow.
http://softdealership.com/ (dead on arrival)
Contact::
Name: ANTHONY CRIPPEN
Email: xmasta@gmail.com
::Name Servers::
ns1.softdealership.com
ns2.softdealership.com
1-877-800-5085 ext:315
Online cassino scam. Sent from open proxy.
Score = 3
http://www.finallyseven.com/ju18/
http://goodagainnow.com/ju29/
IP: 222.47.183.89 (chinatietong)
::: The 30 Second Mortgage Quote Form :::
http://wwwlkd.info/azwma
218.104.167.72
Name: Site Manager
Organization: GornMedia Inc
Email: jarondi9969@yahoo.com
Name Servers:
NS1.WWWLKD.INFO
NS2.WWWLKD.INFO
vatsason@yahoo.com
Used as Reply-To for 419 scam.
Invex Ltd. - "Expat Invest" - High return Investments
Score = 2
=============
Invex Ltd. - "Expat Invest" - High return Investments
http://invex.org/
IP: 203.142.2.174
NURUNALANUR.NET
http://www.nurunalanur.net/index.html
IP: 82.222.180.121
Report to: mehmet.ilgaz@sabancitelekom.com
Online Dating Service - Personals with Live Web Cam Chat
http://bolosko.com/exreg_02a.html
Kurdische Libanesen - Bleiberecht
http://www.libasoli.de/
IP: 195.90.0.56
Report to: abuse@qsc.de
Lower Your Mortgage Payments
http://www.goodloane.biz/
Score = 2
IP: 61.138.3.102
Report to: gaobh@mail.hl.cn
Name: West Pharm
Organization: West Pharm Inc.
Email: pharmkings@gmail.com
Name Servers:
NS1.BEST-GIFTS.BIZ
NS3.XZDNS.BIZ
Hier finden Sie touristische Informationen rund um das Land Brandenburg
http://brandenburg.rz.fhtw-berlin.de
The American Refinance Specialists /
The Refinance Mortgage Specialists
"American" but hosted and registered in China.
http://www.part1es.com/45.asp
IP: 61.138.3.106
Contact:
dragon wang
duyupu@126.com
DNS:
ns1.456-789.biz
ns2.456-789.biz
Discount Copier Toner Cartridges, discount printer cartridge, discount copier toner cartridges
http://www.upii-imaging.com
IP: 65.110.93.75
Report to: support@crystaltech.com, abuse@crystaltech.com, postmaster@crystaltech.com, abuse@twtelecom.net
Alias:
name: Barbee, Brent
Email: brentbarbee@yahoo.com
Name Servers:
ns1.webcontrolcenter.com
ns2.webcontrolcenter.com
pillBox
The Mortgage Source
Sent via open proxy on a trojaned computer. Web site hosted on criminal tolerant ISP in China. Just the kind of people you want to give your money to.
Score = 1
===================
The Mortgage Source
http://ez-rate.info
IP: 219.147.192.92
Reporting addresses:
network@hljtele.com, postmaster@hljtele.com
==========
pillBox
appreciatrust.info/
caclickbutton.info
conbizdee.info
deliveredin9days.info
enterthekem1st.info
goodsupportline.info
trakship.info
=========
Alias
Name: Margaret Beans
Organization: Beans Domains
Email: whoisofdomain@yahoo.ca
Name Servers:
NS3.DNSRUGGED.INFO
NS4.DNSRUGGED.INFO
Welcome to XTV (Porn scammer)
http://xtvcash.com/hit.php
IP: 209.133.17.236
Report to: abuse@above.net
soludoc02@zalau.ro
IP: 193.230.240.30
Contact address for 419 scammer
Reporting addresses:
abuse@astral.ro
Homelandliberty Online Rx
http://www.homelandliberty.com/rx/
IP: 218.12.197.162 (chinanet)
Whois blocked
Name Servers:
ns1.hostqhr.biz
ns2.hostqhr.biz
http://adfgjmhbcel.medkit.info/?abdgixwvrsycfhlzhghejkm (Dead on arrival)
IP: 213.135.64.93
Report to: abuse@telecore.net.ru
Alias
Name:Anna Nowicka
Email:donstern47@yahoo.com
Name Servers:
NS2.MEDKIT.INFO
NS1.MEDKIT.INFO
Get Laid In Your Area
http://hotlocalbabez.info/
IP: 61.232.205.186 (chinatietong.com)
1-877-800-5085 ext:315
Phone number for online cassino scam
Naren Marketing Team
Spammer's contact email: KZL123123@yeah.net
IP: 220.181.31.207
Reporting addresses:
anti-spam@chinanet.cn.net,
ct-abuse@abuse.sprint.net
Source IP: 218.86.43.94 (chinanet)