Scammers for 8/05
Barnu Rapatska / TotalPharmacy / WELCOME! Cheating House Wife Services / Date Lonely Wives
discountRxweb.com - Order Cialis Online and Save! lt;Secured Billing - Discreetly Shipped / How To Be A Red Hot Persuasion Wizard... In 20 Days Or Less!
DRUGS DIRECT: CHEAPEST DRUGS ON THE NET
EXTRA-TIME - last 5-10 times longer!
Score = 19 This as a criminal gang of scammers. One uses web bugs and tagged URLs. Opening his spam with HTML & images enabled lets him know that your email address is valid. Following the links does too. Controls his own name servers. Sends from open proxies on trojaned computers. Changes domain name for redirecting pathes at least once a day. Fake whois data. Uses throwaway URLs that redirect to a URL that tracks your email address and the affiliate ID then redircts to the pay off URL.A second set of scammers links directly to the pay off URLs without redirects with just an "affiliate ID" on the URL. These URLs last for several days instead of just one or two like the redirecters.
Fake names: Gasper Mosqueda, Dennis Naish, Arvind Yadav, Gary Smiley, Miles Smith, Harry Gourley, Louis Phillipe, DAVID PATTERSON, Mush hashor, Radbergas, Olegas, Helmut Fischer, CHAS BUSHNELL, Bob Cooper, Barnu Rapatska, zopa cathlina, Stacey Gerstien, WebLove, Vadim Gablian, HomeViz, mathew barberstantonly, base advertising jump inc, lifetime, James Sweet, vashumat, James corona, mike mC Garythomason, bishopletsy trierson
Fake emails: miellagroup@yahoo.com, dcorbins@yahoo.com, ellouis735@yahoo.com, whois77002@yahoo.com, whois77000@yahoo.com, whois77001@yahoo.com, whois77004@yahoo.com, louisludek@yahoo.com, dav999@coolgoose.com, olegas2003@spam.lv, helfischer1975@yahoo.com, chas@blazemail.com, bcooper@allsaintsfan.com, barnu@barnurapatska.com, support@emarketingdeals.com, admin@chillblow.com, infohelpteam@yahoo.com, admin@wifesmile.com, abbie@fusemail.com, joker2newdomains@yahoo.com, nameserver2004@yahoo.com
======================
Affiliate IDs:
Badboy
bonsay
got
okok
ronn
====================
annualised.net
IP: 221.11.133.66 Reporting addresses: abuse@cnc-noc.net Alias: Arvind Yadav ellouis7355@yahoo.com Name Servers:: ns1.learninger.net ns2.learninger.net 221.11.133.67balladries.com
Spammer controlled nameserver Alias: Foundation Men On Line leimomi01@tom.com Name Servers:: ns1.balladries.com ns2.balladries.comchorally.com
IP: 211.147.228.108bucketed.net
celebsexposed.net
Host: 221.11.133.10 Name : Barnu Rapatska Email : webmaster@emarketingdeals.com ::Name Servers:: ns1.dns-passthrough.com ns2.dns-passthrough.com ns3.dns-passthrough.com ns4.dns-passthrough.combulwarking.com
commodious.net
IP: 221.11.133.66 (cnc-noc.net) Alias: Miles Smith whois77001@yahoo.com Fax : Name Servers:: ns1.balladries.com ns2.balladries.comcoolsites1.com
Alias: Barnu barnu@barnurapatska.com Name Servers:: ns1.anwoo.com ns1.mynameserver.ca ns1.bomofo.com ns1.epoboy.comconfuting.com
Alias: Jeffrey Metzinger leimomi01@tom.com Name Servers: ns1.unheeded.net ns2.unheeded.netcurdle.net
IP: 211.147.228.93cordoned.net
IP: 211.147.228.93 Alias: Foundation Men On Line leimomi01@tom.com Name Servers: ns1.streph.net ns2.streph.netdegradedly
IP: 211.147.228.108depletive.com
dns-base2.com
dns-click2.com
Name : Barnu Rapatska Email : support@emarketingdeals.com Address : Snemovni 3 Zipcode : 118 24 Nation : CZ Tel : +420257174252 Fax : ::Name Servers:: ns5.dns-setup.com ns6.dns-setup.com ns7.dns-setup.com ns8.dns-setup.comdns-html.com
Name servers Alias: HECTOR RUIZ hector9090@yahoo.com Name servers: ns1.dns-html.com 222.122.65.5 ns2.dns-html.com 221.7.209.87 ns3.dns-html.com 222.122.52.121 ns4.dns-html.com 222.223.135.28dns-html2.com
Redirecter dns-html2.com owner: HECTOR RUIZ email: hector9090@yahoo.com nserver: ns1.dns-html.com 222.122.65.5 nserver: ns2.dns-html.com 219.254.32.75 nserver: ns3.dns-html.com 202.73.247.22 nserver: ns4.dns-html.com 202.64.76.189dns-passthrough.com
URL redirecter & name servers Host: 221.11.133.10 Reporting addresses: abuse@cnc-noc.net owner: CHAS BUSHNELL organization: CHAS email: chas@blazemail.com nserver: ns1.dns-passthrough.com 218.7.112.244 nserver: ns2.dns-passthrough.com 202.73.255.22 nserver: ns3.dns-passthrough.com 221.11.133.12 nserver: ns4.dns-passthrough.com 221.210.2.152dns-passthrough2.com
owner: CHAS BUSHNELL email: chas@blazemail.com ns1.dns-passthrough.com ns2.dns-passthrough.com ns3.dns-passthrough.com ns4.dns-passthrough.comDNS-FORWARD.COM
Name serversdns-forward2.com
URL redirecterdns-redir2.com
dns-redir2.com
URL redirecter IP: 202.67.217.124 Reporting addresses: abuse@hknet.com Alias: HECTOR RUIZ hector9090@yahoo.com Name Servers: ns1.dns-redir.com ns2.dns-redir.com ns3.dns-redir.com ns4.dns-redir.comdns-redirects.com
dns-redirects2.com
URL redirecter IP: 218.7.120.82 Reporting addresses: abuse@chinanet.cn.net abuse@cnc-noc.net Name: CHAS email: CHAS@blazemail.com Name Servers ns1.dns-redirects.com 222.122.65.5 ns2.dns-redirects.com 221.10.254.191 ns3.dns-redirects.com 221.11.133.12 ns4.dns-redirects.com 221.210.2.152downloaditforfree.net
Host: 221.11.133.10 Reporting addresses: abuse@cnc-noc.net Name : Charles Messer Email : messer@draac.com Address : 416 W 8th St Zipcode : 31833 Nation : US Tel : +1.7066439924 Fax : ::Name Servers:: ns1.anwoo.com ns1.mynameserver.ca ns1.bomofo.com ns1.epoboy.comdrizzlier.com
IP: 211.147.228.93dumfounds.com
IP: 221.11.133.66 (cnc-noc.net) Alias: Foundation Men On Line / Gary Smiley domainsupport@sent.com / whois77002@yahoo.com Name Servers:: ns1.balladries.com ns2.balladries.comemarketingdeals.com / Barnu Rapatska
210.245.151.117 Reporting addresses: abuse@telstra.net, abuse@newworldtel.comdusked.biz
ecomomics.net
endosonic.com
freehostedpages.net
Host: 221.11.133.11 Reporting addresses: abuse@cnc-noc.net Contact:: Name : Barnu Rapatska Email : webmaster@emarketingdeals.com ::Name Servers:: ns1.anwoo.com ns1.mynameserver.ca ns1.bomofo.com ns1.epoboy.comfossilized.net
Alias: Arvind Yadav ellouis740@yahoo.com Address : Mira Road 13-7 Name Servers:: ns1.precook.net ns2.precook.netfriggings.net
furbelows.net
genuinely.net
ghettoise.net
Name server controlled by spammer Alias: Arvind Yadav whois77004@yahoo.com Name Servers: ns1.ghettoise.net ns2.ghettoise.netgossipy.net
gravesides.com
grudgingly.net
IP: 211.147.228.108 Reporting addresses: ct-abuse@abuse.sprint.net, abuse@gzidc.comhostfreesites3.com
IP: 202.181.244.22 Reporting addresses: kyeung@hkcix.com Alias: DAVID PATTERSON dav999@coolgoose.com) Name Servers: ns1.dns-html.com ns2.dns-html.com ns3.dns-html.com ns4.dns-html.comgutturally.com
hotcelebsnaked1.com
Host: 218.7.120.81 Reporting addresses: abuse@chinanet.cn.net, abuse@cnc-noc.net Name : Barnu Rapatska Email : support@emarketingdeals.com ::Name Servers:: ns1.dns-passthrough.com ns2.dns-passthrough.com ns3.dns-passthrough.com ns4.dns-passthrough.comhotcheapsites.com
Web site host IP: 202.73.247.20 Whois: Name: missing Email: missing Phone: missing Address: missing Country: missing NS1.DNS-REDIRECTS.COM NS2.DNS-REDIRECTS.COM NS3.DNS-REDIRECTS.COM NS4.DNS-REDIRECTS.COMhotfreesites2.com
Web site host Host: 222.122.65.3 Reporting addresses: abuse@kornet.net Contact: : Name: Barnu Rapatska Email: webmaster@emarketingdeals.com Name Servers: : ns1.dns-passthrough.com ns2.dns-passthrough.com ns3.dns-passthrough.com ns4.dns-passthrough.comhowsoever.net
hurtfully.com
hybridisms.com
impactions.net
katchemack.net
learninger.net
Alias 1: Ian Yack whois77004@yahoo.com Alias 2: Arvind Yadav whois77004@yahoo.com Name Servers: ns1.learninger.net ns2.learninger.netlipase.net
IP: 61.235.117.167 IP: 211.147.228.93 (chinatietong.com) Alias: Foundation Men On Line leimomi01@tom.com Name Servers: ns1.obstructed.net ns2.obstructed.netliverymen.com/
medianly.com
IP: 211.147.228.93 Alias: Foundation Men On Line leimomi01@tom.com Name Servers: ns1.streph.net 211.147.228.93 ns2.streph.net 211.147.228.94partied.net
IP: 211.147.228.93 IP: 211.147.228.102modelled.net
IP: 211.147.228.108 Alias: Arvind Yadav ellouis735@yahoo.com Name Servers:: ns1.ghettoise.net ns2.ghettoise.netnoxiously.net
obstructed.net
IP: 221.10.201.138 (chinanet.cn.net) Alias: Foundation Men On Line leimomi01@tom.com Name Servers: ns1.obstructed.net ns2.obstructed.netosseously.net
IP: 221.11.133.66 (cnc-noc.net)ossifies.com
IP: 221.11.133.66 (cnc-noc.net) IP: 221.11.133.65pockmarked.com
IP: 211.147.228.106 (chinanet) IP: 221.11.133.66 (cnc-noc.net) Alias: Harry Gourley whois77000@yahoo.com Name Servers:: ns1.balladries.com ns2.balladries.comprecook.net
Alias: Arvind Yadav ellouis750@yahoo.com Name Servers:: ns1.precook.net ns2.precook.netreascends.net
IP: 203.68.187.1 Report to: tanetadm@moe.edu.tw Alias: Gasper Mosqueda miellagroup@yahoo.com nserver: ns1.iratest.com 221.11.133.66 nserver: ns2.iratest.com 221.11.133.67reattain.com
IP: 221.10.201.138 (abuse@chinanet.cn.net) Alias: Foundation Men On Line leimomi01@tom.com Name Servers:: ns1.obstructed.net ns2.obstructed.netremeasures.net
revetments.net
smilingly.net
IP: 211.147.228.93 Reporting addresses: ct-abuse@abuse.sprint.net, abuse@gzidc.com Alias: Foundation Men On Line leimomi01@tom.com Name Servers: ns1.streph.net ns2.streph.netsnorter.net
soddenness.net
uncapping.net
IP: 221.11.133.66 (cnc-noc.net) Alias: Louis Phillipe louisludek@yahoo.com Name Servers:: ns1.balladries.com ns2.balladries.comunpardoned.net
unwarily.com
Forward abuses to abuse@your-domains-here.com Alias: Gasper Mosqueda miellagroup@yahoo.com Nameservers ns1.gnashed.net 80.93.191.229 ns2.gnashed.net 219.148.2.120visagraph.net
vulcanise.net
IP: 162.84.221.116 Report to: abuse@verizon.net Alias: Dennis Naish dcorbins@yahoo.com nserver: ns1.brachium.net 211.147.228.106 nserver: ns2.brachium.net 211.147.228.107zigzagging.net
=============================Throwaway domains:
BestWatches4U- Rolex, Tag, Louis Vuitton & More
Perfect HGH
Real owner is known felon Bill Waggoner Fake names: Peter Mesa, Mikki Red, Bill Forester, Ivan Solvok Fake emails: dnsadministrator@hotmail.com, maininfoset@yahoo.com, TaggsIsland@hotmail.com, ivan@mail3ms.com Score = 13 ============================= TheWatchesOnCanalStreet- Rolex, Tag, Louis Vuitton & More http://nicewatchez.net IP: 211.89.112.34 Report to: heq@chinabtn.com ============== LovelyWatches4U- Rolex, Tag, Louis Vuitton & More http://www.replicabargainbasement.com IP: 218.244.176.173 (chinanet) ============ LovelyWatches4U- Rolex, Tag, Louis Vuitton & More http://www.onereplica.net IP: 222.122.65.44 Reporting addresses: abuse@kornet.net Alias: Peter Mesa dnsadministrator@hotmail.com Domain servers ns1.eighttg0.com ns2.eighttg0.com ns1.coregnantdug.com ns2.coregnantdug.com =========== TheWatchesOnCanalStreet- Rolex, Tag, Louis Vuitton & More http://time4aswissreplica.net/ Alias 1: Bill Forester TaggsIsland@hotmail.com Alias 2: Ivan Solvok namesadmin@hotmail.com Domain servers: ns1.dnstracker10.com ns2.dnstracker10.com ns1.m0ntana.com ns2.m0ntana.com Domain servers in listed order: ns1.samantha10.com ns1.magellan25.com ns2.samantha10.com ns2.magellan25.com IP: 194.126.188.202 No valid reporting address Upstream provider: 212.23.43.170 Reporting addresses: abuse@interoute.net, hostmaster@interoute.net, adamc@interoute.net ========= Name Servers: NS1.DNSTRACKER10.COM NS2.DNSTRACKER10.COM NS1.M0NTANA.COM NS2.M0NTANA.COM ============ Other domains 1stbuyrolex.com aabby.info bestwatchez.net bestwatchez.org chooseyourwatch4u.com chooseyourwatch4u.net genuinereplicawatchez.org lovelywatches4u.net onereplica.net perfectwatch4u.com replicabargainbasement.com replicas4me.net replicaz4time.net swisstime4us.com thewatchesoncanalstreet.net time4aswissreplica.net timepiecesgalore4u.net ultimatetimepiece4u.net watchesrus4u.netHome loan refinance, mortgage rates -- Lenders are standing by
60 Sends Mortgage Quote Form -- Lenders are standing by
Score = 9 ===================== http://123-refinancing.com/rem.php ======== 60 Sends Mortgage Quote Form -- Lenders are standing by http://prorefinance.com/ IP: 211.233.16.91 Report to: security@kidc.net, postmaster@kidc.net, abuse@kidc.net, support@kidc.net =========== 60 Sends Mortgage Quote Form -- Lenders are standing by http://lithome.com IP: 222.187.122.134 Report To: abuse@jsinfo.net, abuse@pub.nt.jsinfo.net, ct-abuse@abuse.sprint.net ========== 60 Sends Mortgage Quote Form -- Lenders are standing by http://knightlender.com http://paraquotes.com IP: 211.233.16.90 Report To: security@kidc.net, postmaster@kidc.net, abuse@kidc.net, support@kidc.net ============= 60 Sends Mortgage Quote Form -- Lenders are standing by http://circlesave.com IP: 61.100.0.195 (epnetworks.co.kr) ================= 60 Sends Mortgage Quote Form -- Lenders are standing by http://loanpride.com/ IP: 194.126.189.17 Report to: abuse@t-ipnet.de, abuse@interoute.com ======== 60 Sends Mortgage Quote Form -- Lenders are standing by http://lowratefast.com Alias: random rong yangyan1976@hotmail.com Name servers: ns01.savesea.com 194.126.189.17 ns02.savesea.com 194.126.189.18 IP: 194.126.189.17 No valid reporting address Upstream provider: 217.239.39.58 Reporting addresses: abuse@t-ipnet.de ========== other domains homeloankey.com circlesave.com knightlender.com lithome.com loanpride.com lowratefast.com paraquotes.com Other Name servers ns01.rateratelow.com 194.126.189.15 ns02.rateratelow.com 194.126.189.16Hoodia Maximum Strength / Perfect HGH
Score = 8 Fake names: Greg Tailor, Solo Selio Fake emails: gregtailors@yahoo.com, homersimpsonbody@yahoo.com, mmpprogram@hotpop.com =============== Hoodia Maximum Strength http://indeweum.info/ http://inoharei.info IP: 200.108.166.2 (bogus reporting address) Upstream IP: 64.116.40.177 Reporting addresses: abuse@mci.com ============ Perfect HGH http://www.brightgenius.com IP: 200.108.166.2 (No valid reporting address) Upstream IP: 64.116.40.177 Reporting addresses: abuse@mci.com =============== Perfect HGH http://zvmsgw.info IP: 200.108.166.2 (no valid reporting address) Upstream IP: 64.116.40.177 Reporting addresses: abuse@mci.com Alias: Greg Tailor gregtailors@yahoo.com Name Server: NS2.XPEDIADNS.COM NS1.XPEDIADNS.COM NS1.DNSTRACKER10.COM NS2.DNSTRACKER10.COM ================= Hoodia Maximum Strength http://squrvk.info IP: 194.126.189.7 No valid reporting address Upstream provider: 217.239.39.58 Reporting addresses: abuse@t-ipnet.de ========= Hoodia Maximum Strength http://rtswkv.info/index.php IP: 194.126.189.7 No valid reporting address Upstream provider: 217.239.39.58 Reporting addresses: abuse@t-ipnet.de Alias: Solo Selio homersimpsonbody@yahoo.com Name Server:NS2.XPEDIADNS.COM Name Server:NS1.XPEDIADNS.COM Name Server:NS1.DNSTRACKER10.COM Name Server:NS2.DNSTRACKER10.COM ============= MALE VIRILITY http://www.sjhqyk.info IP: 194.126.189.7 Alias: Solo Selio homersimpsonbody@yahoo.com Name Servers: NS2.XPEDIADNS.COM NS1.XPEDIADNS.COM NS1.DNSTRACKER10.COM NS2.DNSTRACKER10.COM ============= Mass Marketing http://www.targtraffic.com IP: 211.89.113.140 Alias: mmpprogram@hotpop.com Domain servers: NS1.XPEDIADNS.COM NS2.XPEDIADNS.COM NS1.DNSTRACKER10.COM NS2.DNSTRACKER10.COM =================== Other domains brightgenius.com indeweum.info sjhqyk.info targtraffic.com2005 Digital Cable Filters / Meta Gen
Illegal cable descrambler & bodywrap scammer Names: Ron Proctor, Antonio Cabo Emails: inetbiz4you@yahoo.com, 1dnszone@gmail.com Score = 8 ==============fitnessdot.com
Alias: Ron Proctor inetbiz4you@yahoo.com Name Servers: ns1.superdns4u.info ns2.superdns4u.info ==================================== http://www.connectwrap.com IP: 202.181.244.54 ========================================== http://www.bizwhiteteeth.com/ IP: 202.181.244.54 (hkcix.com) Redirects to http://www.fitnessdot.com/pw/aff49/index.html IP: 202.181.244.54 (hkcix.com) ============ Meta Gen http://247elite.com http://shop4ashop.com/022/mqu/index.htm http://247ashop.com/022/mqu/index.htm http://www.247systems.info IP: variable Name Servers: ns1.1dnszone.com ns2.1dnszone.com ============ http://247acart.com/cart/item.php?ItemID=11&aff=22 IP: 211.48.20.108 (kornet) Name Servers: ns1.1dnszone.com ns2.1dnszone.com ======== Other domains: 1click4store.com 1clickagency.info 1clickadvisor.info 1clickextra.info 1clickgallery.info 1clickgreat.info 1clicklimited.info 1clicksource.info 1clickspot.info 1clicksystem.com 1clickcomplete.com 1dnszone.com 1stop4webstore.com 1stoptown.info 1stopnetz.info 1stoptime.info 1stopcentral.info 247ashop.com 247systems.info click2myshop.com click2out.com click4planet.info click4system.info connectwrap.com corporationa.com dropfatnews.com fitnessdot.com grouploseweight.com incdropfat.com loseweightsystems.com shop4ashop.com theweightlossbiz.com theweightlossfirm.com tooldropfat.com ns1.webzconnection.info weightlossfirm.com yourfitnessonline.com yourhealthoffice.com yourhealthsearch.comScore = 3 ====== http://www.l0wbankrates.com/ IP: 80.93.191.233 Alias: Ronald Hentington ronaldhentington@yahoo.ca Name Servers: ns1.xzmak.com ns2.xzmak.com ns3.xzmak.com ns4.xzmak.com ns6.xzmak.com =============== http://www.bestrates-4-you.net/i/lzyvaw5kzxgvynzrl2w5njhlbzr6zw0z =========== http://loans05.com/i/lzevaw5kzxgvbxryz2uvag5hbwltbw IP: 194.126.188.20 No valid reporting address Upstream provider: 217.239.39.58 Reporting addresses: abuse@t-ipnet.de Alias: Hentington, Ronald americanfinancial2005@yahoo.co.uk Domain servers: NS1.XZMAK.COM 66.249.21.51 NS2.XZMAK.COM 66.249.21.51 NS3.XZMAK.COM 66.249.21.51 NS4.XZMAK.COM 66.249.21.51 NS5.XZMAK.COM 194.126.188.20 NS6.XZMAK.COM 194.126.188.20 ============================ Other domains home-re-financing.com kxxjn.com l0wbankrates.com lowerpayments4u.com ndbhw.com prefered-loans.net xzmak.com yourvalueloan.com
CD TRADING CARDS (CDTD)
Score = 2 No URL. Pump and dump stock scam sent via open proxies on hijacked computers. Started with plain text email but now sends base 64 encoded with microscopic text that I can't read. May be two different scammers============
Related scams: Oretech, Inc. Pop3 Media Corp. Eldorado Exploration CD TRADING CARDS (CDTD) Nomad International Inc. Gulf Biomedical Corp Crystal Graphite Corporation Martin Nutraceuticals, Inc. Northeast Development Corporation (NSC) Eldorado Exploration Inc. (Pink Sheets: EDEX) EXPLOSIVE PICK FOR OUR MEMBERS The Daily Stock Barometer Emerging Growth 0pportunity Investor Alert Newsletter Rx Processing Corp. China World Trade Corporation
Viagra Professional Tabs http://supertablets.info/vp/index.php IP: 222.122.65.52 (abuse@kornet.net) Alias: Pavel Dufek paveldufek@yahoo.com Name Servers: NS2.TAKEYOURHEALTH.INFO NS1.TAKEYOURHEALTH.INFO NS1.ADVICESFROMDOC.INFO NS2.ADVICESFROMDOC.INFO
On1ine Pharmacy - increasethevalue.com
Score = 6 http://uk.geocities.com/jerold_corral/ http://uk.geocities.com/leroy_brister/ http://uk.geocities.com/Bryant_Bottgenbach/ http://uk.geocities.com/franklin_gwin/ http://uk.geocities.com/edgar_stoffregen/ http://uk.geocities.com/mckinley_fajardo/ IP: 66.218.77.68 Reporting addresses: mail-abuse@yahoo-inc.com, postmaster@yahoo.com Front for: On1ine Pharmacy - increasethevalue.com http://www.increasethevalue.com/o3n/ IP: 218.104.136.187 Reporting addresses: postmaster@china-netcom.com cnc-abuse@abuse.sprint.net Alias: Chengtian CHEN vccr3hk3@hotmail.com Name Servers: ns2.increasethevalue.com ns1.increasethevalue.com ================================= On1ine Pharmacy - http://dealsearchbasics.com/ IP: 218.104.136.189 To: postmaster@china-netcom.com, cnc-abuse@abuse.sprint.net Alias: Qiaoshu ZHANG kgmrg2xt@hotmail.com Name Servers: ns2.dealsearchbasics.com ns1.dealsearchbasics.comISP Directory - Find ISPS - ISP Search - ISP Providers http://www.cheap56k.com/ IP: 64.251.31.240 Reporting addresses: abuse@infolink.com, abuse@gblx.net
60 Second Mortgage Quote Form
Fake names: Pat Lieberman, Jerry Goodman Fake emails: patlieberman@yandex.ru, jerrygoodman@yandex.ru Score = 2 ============ Affiliate IDs: id=jrwriter id=lt id=lt1 id=lt2 id=lt3 id=wai refid=lix refid=mal refid=ph420 ================== 60 Second Mortgage Quote Form http://logabc.com/ Alias: zhanglei zhp223@eyou.com Name servers: ns1.erefinanceonline.com 211.233.16.90 ns2.erefinanceonline.com 211.233.16.90 ================ 60 Second Mortgage Quote Form http://lskdfjsc.com/1/index/ IP: 194.126.188.20 No valid reporting address Upstream provider: 217.239.39.58 Reporting addresses: abuse@t-ipnet.de ========== Other domains: 123refinancing.net 12mtgnow.com 24x7-quotes.com cheaplenders.net droppedr8z.com e-home-loanz.net easy-lending.com ezloans123.net fasterdaz.com fastlenders.net freedom-financial.net funding-internet.com funding-talk.com goodwayz.com h0mel0an.net instant-approval.net jnixsa.com kajsidd.com kdnix.net kenxsd.net kniudx.net lend-one.net lending-blocksx.com lending-tresm.com lendingdsz.com lendinxsz.net lendisx.net lendix.net libertyeloan.com logabc.com lskdfjsc.com m0rt1.com max-loans.com maximum-loans.net me0rt.com morntix-star.net mort-lowsz.net mort-your.com mortgage-ebrokers.com mortgage-lowsz.net mortgage-tower.com mortszx.com motyd.net mrldss.com mrlend123.com mrratenow.com nidbchx.com nowratez.com point-financial.com premium-mort.com premium-mortgages.com r8tdrop.com r8tesdrop.com re-finances.com ref1nowz.net simple-financing.net simplified-loans.net yourmort.comwww.discountc.com | Discount Cigarette Newtork The bedroom toy that works in an instant! Crazy Surprise - Bringing you the Vibrating Ring Uses web bug in email. Score = 2 =================== Fake names: Frank Conners, David Robertson Fake emails: frankconners@hushmail.com, david_robertson26@lycos.com =================== Enjoy your romance with the Vibrating Ring. http://enjoyromance.net/ IP: 219.254.32.121 (hanaro) ================= http://instant-novelty.net/ IP: 194.126.190.130 (No valid reporting address) Up stream provider: 217.239.39.58 Reporting addresses: abuse@t-ipnet.de Alias: David Robertson david_robertson26@lycos.com Domain servers: ns1.nmserver.net ns2.nmserver.net ============= Other domains crazysurprise.com
http://ecigs4less8.com/ IP: 202.103.56.86 Report to: hostmasterhb@dc.wh.hb.cn, zhouws@ns.bta.net.cn Alias: Bernardo Lucos arretela@hotmail.com Name Servers:: ns1.123dnshostingsystem4u.com ns2.123dnshostingsystem4u.com
Commercial Debt Collection Agency, Credit Reporting, Accounts Receivable
Score = 2 http://www.rcmcollects.com Commercial Debt Collection Agency, Credit Reporting, Accounts Receivable http://www.rcmcollects.com IP: 65.61.229.32 (abuse@in2net.com) Alias: Gutierrez, John jgutier100@aol.com Domain servers: DNS5.DOTEASY.COM 65.61.198.13 DNS6.DOTEASY.COM 65.61.199.13www.texaslead.com Looks like just a clueless spammer and not a scam http://www.texaslead.com IP: 66.113.136.225 Report To: postmaster@hostway.com, support@hostway.com, abuse@hostway.com
looking for love : AN ONLINE DATING COMMUNITY BRINGING PEOPLE TOGETHER http://www.looking-for-love.us IP: 69.61.23.70 Report To: abuse@pccwbtn.net, postmaster@globalcompass.com, abuse@globalcompass.com Alias: mark jackson fyv55555@msn.com Name Servers: NS1.DATEAPP.COM NS2.DATEAPP.COM <-- ======= Free Advertising Free submission Free classifieds Free promotions Free Search Engine http://www.cmather.com/ IP: 204.10.137.53 Totally useless pay per click search engine and spam hosting. Contact - Chris Mather dns@cmather.com Domain servers NS3.HOSTSVR.COM 66.180.175.156 NS4.HOSTSVR.COM 65.125.228.67 -->
JM Barrie's Peter Pan, the Official Peter Pan British Musical http://www.peterpanthemusical.com IP: 82.165.54.57 Report to: abuse@schlund.de Apparently spammed by: Paul Savident 27 St. Dunstans Road The Office, No 27 W7 2EY London GB phone: +44.2085672089 paul@savident.com http://www.savident.com/
Instant Pharmacy / Replica Watch Store.....
Score = 8 =============== Replica Watch Store..... http://replica-watch-store.net/ IP: 221.11.134.24 (cnc-noc.net) IP: 200.207.48.37 Reporting addresses: postmaster@cert.br, mail-abuse@nic.br Alias: Luis Alberto admin@newbiemail.net Name servers: ns1.instant-pharmacy.net 61.235.117.161 ns2.instant-pharmacy.net 200.161.198.155 =================== http://xxlnis.myyv.com/repli/95465//skapfx IP: 200.207.48.37 Report To: postmaster@cert.br ======== http://qahl.com/rep/ IP: 200.207.48.37 ========== http://gbwnq.mq5.net/ph/95465/wcxax IP: 200.161.198.155 Report To: postmaster@cert.br, mail-abuse@nic.br ========== http://ysno.com/pharm/ IP: 200.207.48.37 Report To: postmaster@cert.br, mail-abuse@nic.br ======================= http://pllls.com Redirects to: Instant Pharmacy http://instant-pharmacy.net ================= http://www.fcke.com/ Redirects to: Instant Pharmacy http://instant-pharmacy.net ============== http://przc.com/replica/ IP: 61.235.117.161 Report To: postmaster@chinatietong.com, crnet_mgr@chinatietong.com, crnet_tec@chinatietong.com Alias: Roelf Van der Brug admin@taiwanmedialtd.com Name Servers: ns1.dnsm.net 61.235.117.161 ns2.dnsm.net 221.11.134.23 ============= http://przc.com Redirects to: Instant Pharmacy http://instant-pharmacy.com IP: 200.207.48.37 ============ http://syijc.przc.com/replica/ Redirects to: Replica Watch Store..... http://replica-watch-store.comUstoorah Internet services LLC - Hosting http://www.tejarh.net IP: 216.65.1.131 Report to: cwebster@greensoft.com
Health Suite, Popularsoftware, Software Now, CDCheap, Online Pharmacy, "Carol Brisbine", Pharma Shop, / Max Length 3 / WECHEAPHOSTING.COM / THATSCHEAPHOSTING.COM / CaesarBucks
~*Julie's Webcam*~ / ~*~ College Girl Webcams ~*~
Fake names: Marjorie Lobos, Vicky Ralph, Steve Cross, Kim Young; Roger Stevens, Jonathan Roving, Xiaoyu ZHU, OKA DOKEN, Chengzhong XU, Eva Paterson, Tom Rogers, Stevens Media Fake emails: marjorielobos@argentina.com, RALPHDOMAIN@YAHOO.COM, cross.steven@gmail.com, KimYoung188@lycos.com, rogerstevens0@netscape.net, jonathanroving16@netscape.net, GREG12023@YAHOO.COM, r3gyg3l@hotmail.com, kenokado@yahoo.com, dabteae@hotmail.com, jackson_kriner@yahoo.com, vortexmedia@hotmail.com, danielthurgood0@netscape.net Score = 2 ======================================== Max Length 3 http://buymaxxlength.info IP: 202.65.105.26 Report To: abuse@hkabc.net ============== Health Suite http://requiryotb.com IP: 220.85.13.90 Reporting addresses: abuse@kornet.net ================== Other domains: 5lessthanless.com aolkeywerdz.com baba-rajni.com baba-song.com babababedesidesi.com babaganoushx.com babamoviesong.com bigaaron.info bigdeath.info bigtimemango.com bobzqz.info bringmoretolife.com bubxtx.info buttermagma.info buymaxxlength.info com2morethanmore.com correctspeling.com drivena.info edgravewas.com famousloaves.com finallyseven.com fivesandpennies.com foursamurais.com goodagainnow.com inallyseven.com jeffersondarcy.com kellykapowski.com ladytoysite.info marswebsite.com md20.com misterteepee.com popkatown.com polarizational.com pullpushstop.com punanipunch.com requiryotb.com schnazzyboot.com securequickmeds.com seemsfine.info smokeethebear.com stankfinger.com tatankarules.com ucanttouchfist.com youbuysoft.info zazxux.infoGet rich quick scam ============== Contact address: as2njohnz@gmail.com IP: 64.233.163.114 Reporting addresses: abuse@google.com Remove address: remove.me.n.ur.list@gmail.com IP: 64.233.163.27 Reporting addresses: abuse@google.com
Cheap Soft for a low price http://erevansoft.net IP: 195.47.196.112 Alias: Riabokon Igor erevan@list.ru Name Servers:: ns2.xml-soft.info ns3.xml-soft.info
Biopymes - Educación, formación y cursos a distancia http://biopymes.com/ http://mg.biopymes.com IP: 64.40.144.147
Direct Mortgage Funding http://www.dmfloans.com IP: 65.61.215.88 Report To: abuse@in2net.com Alias: Direct Mortgage Funding Gutierrez, John jgutierrez@bellsouth.net Domain servers: DNS1.DOTEASY.COM 65.61.198.11 DNS2.DOTEASY.COM 65.61.199.11
Score = 2 http://replicawithcharmnow04.com Alias: Bernado Lucas offreint@hotmail.com Name Servers:: ns1.replicawithcharmnow00.com ns2.replicawithcharmnow00.com ================ eReplica Shop - Beautiful and elegant watches without the costly prices. http://replicawithcharmnow02.com/ IP: 222.47.1.222 (chinatietong.com) Alias: Bernado Lucas offreint@hotmail.com Name Servers:: ns1.jusama792.com ns2.jusama792.com
White Light - Teeth Whitener
Score = 4Mortgage http://www.hereisthe2.com/quote/ IP: 222.47.94.30 (chinatietong.com) Alias: BURNS, TERRY BURNS_BURNS29@YAHOO.COM Domain servers: NS3.MOLIFACHA.COM 218.10.12.64 NS4.MOLIFACHA.COM 202.103.56.86
eReplica Shop - Beautiful and elegant watches without the costly prices.
Score = 7 ============ eReplica Shop - Beautiful and elegant watches without the costly prices. http://edvancedwanow1245right.com IP: 219.148.2.101 (chinanet) ================= eReplica Shop - Beautiful and elegant watches without the costly prices. http://edvan9cedwanow45right.com IP: 219.148.2.101 (chinanet) ======================= eReplica Shop - Beautiful and elegant watches without the costly prices. http://edvancedwan8ow45right.com IP: 219.148.2.101 (chinanet) ============== eReplica Shop - Beautiful and elegant watches without the costly prices. http://edva3ncedwanow45right.com IP: 219.148.2.101 (ns.chinanet.cn.net) IP: 222.47.94.30 (chinatietong) Alias: Robert T Judge kitwalker53@yahoo.com Nameservers: ns1.dnsforlease4567now.com 202.103.56.86 ns2.dnsforlease4567now.com 219.148.2.101 ================= eReplica Shop - Beautiful and elegant watches without the costly prices. http://edvancedwanow42right.com IP: 202.103.56.86 (chinanet) Alias: Robert T Judge kitwalker53@yahoo.com Nameservers: ns1.dnsforlease4567now.com 202.103.56.86 ns2.dnsforlease4567now.com 219.148.2.101 ========== edva3ncedwanow45right.com edvan9cedwanow45right.com edvancedwan8ow45right.com edvancedwanow1245right.com edvancedwanow42right.comFlexible Solutions - Design Studio
Score = 3 Flexible Solutions - Design Studio http://www.flexiblesolutions.info/ IP: 64.246.188.30 Report To: abuse@ccom.net Alias: Araz Mamedov araz@azerinet.com Name Server: NS1.AZERINET.COM NS2.AZERINET.COMhttp://brucereeattax.com/co25/ 221.11.133.64 ============== http://www.bornfruit.com/ju18/ IP: 221.11.133.64 Report to: abuse@cnc-noc.net Alias: Steve Cross cross.steve@gmail.com Domain Name Servers: NS1.LISATURTLE.COM NS5.LISATURTLE.COM ====== NS1.LISATURTLE.COM Alias: Steve Cross cross.steve@gmail.com Domain Name Servers: NS1.LISATURTLE.COM NS5.LISATURTLE.COM
1-206-350-5982 Fake diploma scam.
http://www.cigarettes-shop-online.com IP: 82.138.63.65 To: fedoruk@comcor.ru, trud@comcor.ru, bulanov@comcor.ru Alias: Ivanova, Swetlana catran.ltd@mail.ru Domain servers: NS1.SPROMO.RU NS2.SPROMO.RU
GetEstore.com - Wholesale Online Store Solution Provider with over 3,500 products http://www.getestore.com IP: 216.74.11.169 Report to: abuse@xo.com
Pharma Shop
Score = 4 ============== http://www.mobnight.info http://www.moonboard.info/ http://www.moonmin.info IP: 211.147.228.100 Report To: ct-abuse@abuse.sprint.net, abuse@gzidc.com Alias: Alexander Voronin westdomains@fromru.comPerfect HGH Dr HGH Dr-HGH The Best HGH Kaycon Ltd Canada Score = 2 ============ http://brainsforever.info Alias: Gus Fazoulis Little Louis Foundation gusfazoulis@inMail.sk Name Servers: NS1.VIRTUALUSE.COM NS2.VIRTUALUSE.COM NS3.VIRTUALUSE.COM NS4.VIRTUALUSE.COM =============== Perfect HGH Dr HGH Dr-HGH The Best HGH Kaycon Ltd Canada http://thebesthgh.com/dip IP: 69.55.109.39 George Stevens hostmaster@thebesthgh.com +1.999-999-9999 Name Servers: ns1.tlink.net ns2.tlink.net
Elite Medications http://www.andifwhywhere.com/ http://www.elite-medications.com IP: 221.139.1.203 Report to: abuse@hanaro.com Alias: fred jones jonesjrfred@yahoo.com Domain servers ns17.zoneedit.com ns8.zoneedit.com
MyCanadianPharmacy - your best source for cheap medications http://www.maptop.info IP: 211.156.249.70 Report to: liyang@21cn.com Alias: Tamas Piri tamas_piri@yahoo.com Name Servers: NS1.HEALZY4EVER.INFO NS2.HEALZY4EVER.INFO NS2.MENHEALT24.INFO NS1.MENHEALT24.INFO
EastWestBazaar.com - Affordable, Dependable 1 Stop Indian Online Shopping Bazaar, Same Day Shipping http://www.eastwestbazaar.com IP 66.49.209.206 Report to: abuse@canaca.com
Dead On Arrival http://www.maniac trader.com
Online Pharmacy | Replica Watch Store..... http://it.geocities.com/kim_plg2sde/?se IP: 66.218.77.68 Reporting addresses: mail-abuse@yahoo-inc.com postmaster@yahoo.com
http://64.177.76.181/paypal/index.htm 64.177.76.181 abuse@alabanza.com spoof@paypal.com, postmaster@paypal.com, accessviolation@paypal.com
Quality Meds at Clearance Price: Vicodin, Codeine, Valium, Xanax, Cialis, Viagra, Clonazepam, Ativan, Soma, Tramadol, Ambien, Flexiril, Ultram, Meridia, Lipitor, Zoloft http://grandfroglegs.com IP: 221.139.1.203 Reporting addresses: abuse@hanaro.com
Click 4 golf -for all your coupons and golf course http://www.C4G.com IP: 69.56.214.22 To: abuse@theplanet.com
Protect your family's future - Free quotes from the nation's top insurance companies http://pricelifeinsurance.com/ IP: 211.233.16.91
SambalHot - Online Asian Community - Friendship, Dating etc. http://sambalhot.com/ IP: 216.55.162.14 Report To: abuse@aplus.net
http://marketmymail.com/12all/box.php?funcml=unsub2&nl=1&email=x IP: 72.21.49.10 Report To: abuse@layeredtech.com