Scammers for 9/05

ReplicaWatches - Beautiful and elegant watches without the costly prices.
Score = 20
=========
Fake Names: fred sullivan, Shawn Spolski, Bernado Lucas, Bernardo Lucos, Robert T Judge, 
Fake Emails: asdfsdfg78@yahoo.com, wnts@popaccount.com, shawnts@popaccount.com, arretela@hotmail.com, kitwalker53@yahoo.com, offreint@hotmail.com
=========
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://alovelypresent.com
IP: 221.11.134.11 (cnc-noc.net)
Alias
 fred sullivan
 asdfsdfg78@yahoo.com 
Name Servers: 
 ns1.protectitdomaindns.com 
 ns2.protectitdomaindns.com
====================
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://enewst9odaylivemail.com
http://enewsto4daylivemail.com
http://enewstodayli13vemail.com
http://enewstodayliv7email.com 
http://enewstodaylive29mail.com
http://g1am99wa1ch.com
IP: 58.20.160.18 (chinanet)
=============
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://branhelpforvic30sjun.com
http://bran25helpforvicsjun.com
http://bra28nhelpforvicsjun.com
IP: 59.107.72.196
Report to: jiangzhi@gzidc.com liucheng@gzidc.com
=====================
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://branhelpf18orvicsjun.com
http://branhelpfo22rvicsjun.com
http://branhelpforv9icsjun.com 
IP: 219.148.2.101 (chinanet)
=========================
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://bran5helpforvicsjun.com 
IP: 221.5.2.45 (chinanet)
==============
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://branhel2pforvicsjun.com
Alias:
 Shawn Spolski 
 shawnts@popaccount.com
Name servers:
 ns1.myhosdns3instant.com 219.148.2.19 
 ns2.myhosdns3instant.com 219.148.2.19 
==============
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://branhelpf4orvicsjun.com
IP: 219.148.2.19 (chinanet)
Alias:
 Shawn Spolski 
 wnts@popaccount.com 
Name servers:
 ns1.myhosdns3instant.com 219.148.2.19 
 ns2.myhosdns3instant.com 219.148.2.19 
=============== 
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://th1s2dn0w.com
IP: 80.93.191.238
Alias:
 Bernardo Lucos 
 arretela@hotmail.com 
Name Servers:
 ns1.dnsforlease4567now.com 
 ns2.dnsforlease4567now.com
==========
http://watch3zno17wbymail.com 
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://watch3zno17wbymail.com 
IP: 222.39.47.13 (chinatietong)
Alias:
 Shawn Spolski 
 shawnts@popaccount.com 
Nameservers:
 ns1.myhosdns3instant.com 219.148.2.120 
 ns2.myhosdns3instant.com 222.39.47.13
===============
ReplicaWatches - Beautiful and elegant watches without the costly prices.
http://watch3znow10bymail.com
IP: 222.39.47.13 (chinatietong)
Alias:
 Shawn Spolski 
 shawnts@popaccount.com 
 Nameservers:
 ns1.myhosdns3instant.com 219.148.2.120 
 ns2.myhosdns3instant.com 222.39.47.13 
=======
Other domains: 
alovelypresent.com
bra28nhelpforvicsjun.com
bran25helpforvicsjun.com
branhel2pforvicsjun.com
branhelpforvic30sjun.com
branhelpf4orvicsjun.com
branhelpfo22rvicsjun.com
ecigs4less8.com/ 
edva3ncedwanow45right.com
edvan9cedwanow45right.com
edvancedwan8ow45right.com
edvancedwanow1245right.com
edvancedwanow42right.com
enewst9odaylivemail.com
enewsto4daylivemail.com
enewstodayliv7email.com
enewstodaylive29mail.com
replicawithcharmnow00.com 
replicawithcharmnow02.com
replicawithcharmnow04.com
th1s2dn0w.com
watch3znow10bymail.com



Health Suite, Popularsoftware, Software Now, CDCheap, Online Pharmacy, "Carol Brisbine", Pharma Shop, / Max Length 3 / WECHEAPHOSTING.COM / THATSCHEAPHOSTING.COM / CaesarBucks
~*Julie's Webcam*~ / ~*~ College Girl Webcams ~*~
Fake names: Marjorie Lobos, Vicky Ralph, Steve Cross, Kim Young; Roger Stevens, Jonathan Roving, Xiaoyu ZHU, OKA DOKEN, Chengzhong XU, Eva Paterson, Tom Rogers, Stevens Media
Fake emails: marjorielobos@argentina.com, RALPHDOMAIN@YAHOO.COM, cross.steve@gmail.com, cross.steven@gmail.com, KimYoung188@lycos.com, rogerstevens0@netscape.net, jonathanroving16@netscape.net, GREG12023@YAHOO.COM, r3gyg3l@hotmail.com, kenokado@yahoo.com, dabteae@hotmail.com, jackson_kriner@yahoo.com, vortexmedia@hotmail.com, danielthurgood0@netscape.net
Score = 13
========================================
Max Length 3
http://maxx14.powersize.biz/ 
IP: 202.65.108.251
Reporting addresses:
abuse@hkabc.net
==========
FAST & EFFECTIVE PENIS ENLARGEMENT
http://www.iwasnthopinginthislife.com/2lz62/
IP: 221.11.134.27 (chinanet)
Alias:
 Steve Cross 
 cross.steven@gmail.com 
Domain Name Servers: 
 NS1.DIODELOS.COM 
 NS2.DIODELOS.COM
============
Max Length 3
http://www.gratifyher.info
http://maxxsize.biz 
http://www.maxxsize.us
IP: 202.65.105.26: (hkabc.net)
===============
Max Length 3
http://buymaxxlength.info
IP: 202.65.105.26 
Report To: abuse@hkabc.net
IP: 202.65.105.26
Reporting addresses:
abuse@hkabc.net
Alias:
 mike jones 
 sscartglobalcompany@yahoo.ca 
Name Servers:
 NS1.SLASHPAD.COM 
 NS2.ONLINENIC.COM
================================
Other domains:
5lessthanless.com
aolkeywerdz.com
baba-rajni.com
baba-song.com
babababedesidesi.com
babaganoushx.com
babamoviesong.com
bigaaron.info
bigdeath.info
bigtimemango.com
bobzqz.info
bornfruit.com
bringmoretolife.com 
brucereeattax.com
bubxtx.info
buttermagma.info
buymaxxlength.info
com2morethanmore.com
correctspeling.com
drivena.info
edgravewas.com
famousloaves.com
finallyseven.com
fivesandpennies.com
foursamurais.com
goodagainnow.com
inallyseven.com
iwasnthopinginthislife.com
jeffersondarcy.com
kellykapowski.com
ladytoysite.info
LISATURTLE.COM 
marswebsite.com
maxxsize.us
md20.com
misterteepee.com
popkatown.com
polarizational.com
pullpushstop.com
punanipunch.com
requiryotb.com
schnazzyboot.com
securequickmeds.com
seemsfine.info
smokeethebear.com
stankfinger.com
tatankarules.com
ucanttouchfist.com
youbuysoft.info
zazxux.info



Barnu Rapatska / Tadalafil_Home / TotalPharmacy / WELCOME! Cheating House Wife Services / Date Lonely Wives
discountRxweb.com - Order Cialis Online and Save! lt;Secured Billing - Discreetly Shipped / How To Be A Red Hot Persuasion Wizard... In 20 Days Or Less!
DRUGS DIRECT: CHEAPEST DRUGS ON THE NET
EXTRA-TIME - last 5-10 times longer!
Score = 13 

This as a criminal gang of scammers. One uses web bugs and tagged URLs. Opening his spam with HTML & images enabled lets him know that your email address is valid. Following the links does too. Controls his own name servers. Sends from open proxies on trojaned computers. Changes domain name for redirecting pathes at least once a day. Fake whois data. Uses throwaway URLs that redirect to a URL that tracks your email address and the affiliate ID then redircts to the pay off URL. 

A second set of scammers links directly to the pay off URLs without redirects with just an "affiliate ID" on the URL. These URLs last for several days instead of just one or two like the redirecters.
 
Fake names: Bernard Python, Ericka Jones, Gasper Mosqueda, Dennis Naish, Arvind Yadav, Gary Smiley, Miles Smith, Harry Gourley, Louis Phillipe, DAVID PATTERSON, Mush hashor, Radbergas, Olegas, Helmut Fischer, CHAS BUSHNELL, Bob Cooper, Barnu Rapatska, zopa cathlina, Stacey Gerstien, WebLove, Vadim Gablian, HomeViz, mathew barberstantonly, base advertising jump inc, lifetime, James Sweet, vashumat, James corona, mike mC Garythomason, bishopletsy trierson

Fake emails: gji4jd@consultant.com, miellagroup@yahoo.com, dcorbins@yahoo.com, ellouis735@yahoo.com, whois77002@yahoo.com, whois77000@yahoo.com, whois77001@yahoo.com, whois77004@yahoo.com, louisludek@yahoo.com, dav999@coolgoose.com, olegas2003@spam.lv, helfischer1975@yahoo.com, chas@blazemail.com, bcooper@allsaintsfan.com, barnu@barnurapatska.com, support@emarketingdeals.com, admin@chillblow.com, infohelpteam@yahoo.com, admin@wifesmile.com, abbie@fusemail.com, joker2newdomains@yahoo.com, nameserver2004@yahoo.com

======================

http://scientific-proved.info
IP: 216.52.184.240
abuse@internap.com
Redirects to:
http://www.unglazed.net/cs/index.php
=========
Until 30 september!
http://rolandwms.com
IP: 63.85.86.76
Report routing for 63.85.86.76: abuse@mci.com, abuse@iyd.com, abuse@foxvalley.net, abuse@mci.com
Frame mask
Tadalafil_Home
http://efficacies.net/cs/?scam
IP: 221.11.133.82
Reporting addresses:
abuse@cnc-noc.net
Alias:
 Bernard Python 
 gji4jd@consultant.com 
Name Servers:
 ns1.iratest.com 221.11.133.81 
 ns2.iratest.com 221.11.133.82
=========
Affiliate IDs:
Badboy
bonsay
got
okok
ronn

====================


annualised.net
IP: 221.11.133.66
Reporting addresses:
abuse@cnc-noc.net
Alias:
 Arvind Yadav 
 ellouis7355@yahoo.com 
Name Servers:: 
 ns1.learninger.net 
 ns2.learninger.net 221.11.133.67
aspartames.net
http://aspartames.net/cs/
IP: 219.148.2.19 (chinanet)
IP: 219.148.2.101 (chinanet.cn.net)
IP: 222.39.47.13 (chinatietong.com)
Alias
Gasper Mosqueda 
 miellagroup@yahoo.com 
Nameservers:
 ns1.gnashed.net 222.39.47.13 
 ns2.gnashed.net 219.148.2.120
balladries.com
Spammer controlled nameserver
Alias:
 Foundation Men On Line 
 leimomi01@tom.com 
Name Servers:: 
 ns1.balladries.com 
 ns2.balladries.com
chorally.com
IP: 211.147.228.108
bucketed.net

celebsexposed.net
Host: 221.11.133.10
Name : Barnu Rapatska 
Email : webmaster@emarketingdeals.com ::Name Servers:: 
ns1.dns-passthrough.com 
ns2.dns-passthrough.com 
ns3.dns-passthrough.com 
ns4.dns-passthrough.com 
bulwarking.com

commodious.net
IP: 221.11.133.66 (cnc-noc.net)
Alias:
 Miles Smith 
 whois77001@yahoo.com 
Fax : 
Name Servers:: 
 ns1.balladries.com 
 ns2.balladries.com
coolsites1.com
Alias: 
 Barnu 
 barnu@barnurapatska.com 
Name Servers:: 
 ns1.anwoo.com 
 ns1.mynameserver.ca 
 ns1.bomofo.com 
 ns1.epoboy.com
confuting.com
Alias:
 Jeffrey Metzinger 
 leimomi01@tom.com 
Name Servers:
 ns1.unheeded.net 
 ns2.unheeded.net
curdle.net
IP: 211.147.228.93
cordoned.net
IP: 211.147.228.93
Alias: 
 Foundation Men On Line 
 leimomi01@tom.com 
Name Servers:
 ns1.streph.net 
 ns2.streph.net 
degradedly
IP: 211.147.228.108
depletive.com
dns-base2.com
dns-click2.com
Name : Barnu Rapatska 
Email : support@emarketingdeals.com 
Address : Snemovni 3 
Zipcode : 118 24 
Nation : CZ 
Tel : +420257174252 
Fax : 
::Name Servers:: 
ns5.dns-setup.com 
ns6.dns-setup.com 
ns7.dns-setup.com 
ns8.dns-setup.com 

dns-html.com
Name servers
Alias: 
 HECTOR RUIZ 
 hector9090@yahoo.com 
Name servers: 
 ns1.dns-html.com 222.122.65.5 
 ns2.dns-html.com 221.7.209.87 
 ns3.dns-html.com 222.122.52.121 
 ns4.dns-html.com 222.223.135.28
dns-html2.com
Redirecter
dns-html2.com
owner: HECTOR RUIZ 
email: hector9090@yahoo.com 
nserver: ns1.dns-html.com 222.122.65.5 
nserver: ns2.dns-html.com 219.254.32.75 
nserver: ns3.dns-html.com 202.73.247.22 
nserver: ns4.dns-html.com 202.64.76.189 

dns-passthrough.com
URL redirecter & name servers
Host: 221.11.133.10
Reporting addresses:
abuse@cnc-noc.net
owner: CHAS BUSHNELL 
organization: CHAS 
email: chas@blazemail.com
nserver: ns1.dns-passthrough.com 218.7.112.244 
nserver: ns2.dns-passthrough.com 202.73.255.22 
nserver: ns3.dns-passthrough.com 221.11.133.12 
nserver: ns4.dns-passthrough.com 221.210.2.152 

dns-passthrough2.com
owner: CHAS BUSHNELL 
email: chas@blazemail.com 
ns1.dns-passthrough.com
ns2.dns-passthrough.com
ns3.dns-passthrough.com
ns4.dns-passthrough.com

DNS-FORWARD.COM
 Name servers

dns-forward2.com
 URL redirecter
dns-redir2.com
dns-redir2.com
URL redirecter
IP: 202.67.217.124
Reporting addresses: abuse@hknet.com
Alias:
 HECTOR RUIZ
 hector9090@yahoo.com
Name Servers: 
 ns1.dns-redir.com 
 ns2.dns-redir.com 
 ns3.dns-redir.com 
 ns4.dns-redir.com
dns-redirects.com
dns-redirects2.com
URL redirecter
IP: 218.7.120.82
Reporting addresses:
abuse@chinanet.cn.net 
abuse@cnc-noc.net
Name: CHAS 
email: CHAS@blazemail.com 
Name Servers 
ns1.dns-redirects.com 
222.122.65.5 
ns2.dns-redirects.com 
221.10.254.191 
ns3.dns-redirects.com 
221.11.133.12 
ns4.dns-redirects.com
221.210.2.152 

downloaditforfree.net
Host: 221.11.133.10
Reporting addresses:
abuse@cnc-noc.net
Name : Charles Messer 
Email : messer@draac.com 
Address : 416 W 8th St 
Zipcode : 31833 
Nation : US 
Tel : +1.7066439924 
Fax : 
::Name Servers:: 
ns1.anwoo.com 
ns1.mynameserver.ca 
ns1.bomofo.com 
ns1.epoboy.com
drizzlier.com
IP: 211.147.228.93
dumfounds.com
IP: 221.11.133.66 (cnc-noc.net)
Alias:  
 Foundation Men On Line / Gary Smiley 
 domainsupport@sent.com / whois77002@yahoo.com 
Name Servers:: 
 ns1.balladries.com 
 ns2.balladries.com
emarketingdeals.com / Barnu Rapatska
210.245.151.117
Reporting addresses:
abuse@telstra.net, 
abuse@newworldtel.com
dusked.biz
efficacies.net
IP: 221.11.133.82
Reporting addresses: abuse@cnc-noc.net
Alias:
 Bernard Python 
 gji4jd@consultant.com 
Name Servers:
 ns1.iratest.com 221.11.133.81 
 ns2.iratest.com 221.11.133.82


ecomomics.net
endosonic.com
freehostedpages.net
Host: 221.11.133.11
Reporting addresses:
abuse@cnc-noc.net
Alias: 
 Barnu Rapatska 
 webmaster@emarketingdeals.com
Name Servers:: 
ns1.anwoo.com 
ns1.mynameserver.ca 
ns1.bomofo.com 
ns1.epoboy.com
fossilized.net
Alias:
 Arvind Yadav 
 ellouis740@yahoo.com 
Address :
 Mira Road 13-7 
Name Servers:: 
 ns1.precook.net 
 ns2.precook.net
friggings.net

furbelows.net
pelvics.net
IP: 221.11.133.82
Reporting addresses:
abuse@cnc-noc.net
Alias
 Gasper Mosqueda 
 miellagroup@yahoo.com 
Nameservera:
 ns1.iratest.com 221.11.133.81 
 ns2.iratest.com 221.11.133.82 
genuinely.net
ghettoise.net
Name server controlled by spammer
Alias:
 Arvind Yadav 
 whois77004@yahoo.com 
Name Servers:
 ns1.ghettoise.net 
 ns2.ghettoise.net
gnashed.net
Alias;
Nameservers:
 ns1.gnashed.net 222.39.47.13 
 ns2.gnashed.net 219.148.2.120
gossipy.net

gravesides.com
grudgingly.net
IP: 211.147.228.108
Reporting addresses:
ct-abuse@abuse.sprint.net, abuse@gzidc.com
hostfreesites3.com
IP: 202.181.244.22
Reporting addresses:
kyeung@hkcix.com
Alias: 
 DAVID PATTERSON   
 dav999@coolgoose.com) 
Name Servers: 
 ns1.dns-html.com 
 ns2.dns-html.com 
 ns3.dns-html.com 
 ns4.dns-html.com
gutturally.com
hotcelebsnaked1.com
Host: 218.7.120.81
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
Name : Barnu Rapatska 
Email : support@emarketingdeals.com 
::Name Servers:: 
ns1.dns-passthrough.com 
ns2.dns-passthrough.com 
ns3.dns-passthrough.com 
ns4.dns-passthrough.com 
hotcheapsites.com
Web site host
IP: 202.73.247.20
Whois:
Name: missing
Email: missing
Phone: missing
Address: missing
Country: missing
NS1.DNS-REDIRECTS.COM 
NS2.DNS-REDIRECTS.COM
NS3.DNS-REDIRECTS.COM
NS4.DNS-REDIRECTS.COM

hotfreesites2.com
Web site host
Host: 222.122.65.3
Reporting addresses:
abuse@kornet.net
Contact: : 
Name: Barnu Rapatska 
Email: webmaster@emarketingdeals.com
Name Servers: : 
  ns1.dns-passthrough.com
  ns2.dns-passthrough.com
  ns3.dns-passthrough.com
  ns4.dns-passthrough.com
howsoever.net
hurtfully.com
hybridisms.com
impactions.net
iratest.com
IPs: 
 221.11.133.66
 221.11.133.67
 221.11.133.81
 221.11.133.82
katchemack.net
learninger.net
Alias 1: 
 Ian Yack 
 whois77004@yahoo.com 
Alias 2: 
 Arvind Yadav 
 whois77004@yahoo.com 
Name Servers:
 ns1.learninger.net 
 ns2.learninger.net
lipase.net
IP: 61.235.117.167
IP: 211.147.228.93 (chinatietong.com)
Alias: 
 Foundation Men On Line 
 leimomi01@tom.com 
Name Servers: 
 ns1.obstructed.net 
 ns2.obstructed.net
liverymen.com/
mangiest.net
Alas:
 Gasper Mosqueda 
 miellagroup@yahoo.com 
Name servers:
 ns1.gnashed.net 219.148.2.19 
 ns2.gnashed.net 80.93.191.238

medianly.com
IP: 211.147.228.93
Alias:
 Foundation Men On Line 
 leimomi01@tom.com 
Name Servers:
 ns1.streph.net 211.147.228.93 
 ns2.streph.net 211.147.228.94
partied.net
IP: 211.147.228.93
IP: 211.147.228.102
modelled.net
IP: 211.147.228.108
Alias: 
 Arvind Yadav 
 ellouis735@yahoo.com 
Name Servers:: 
 ns1.ghettoise.net 
 ns2.ghettoise.net
noxiously.net
obstructed.net
IP: 221.10.201.138 (chinanet.cn.net)
Alias: 
 Foundation Men On Line 
 leimomi01@tom.com 
Name Servers: 
 ns1.obstructed.net 
 ns2.obstructed.net
osseously.net
IP: 221.11.133.66 (cnc-noc.net)
ossifies.com
IP: 221.11.133.66 (cnc-noc.net)
IP: 221.11.133.65
pockmarked.com
IP: 211.147.228.106 (chinanet)
IP: 221.11.133.66 (cnc-noc.net)
Alias:
 Harry Gourley 
 whois77000@yahoo.com 
Name Servers:: 
 ns1.balladries.com 
 ns2.balladries.com
precook.net
Alias:
 Arvind Yadav 
 ellouis750@yahoo.com 
Name Servers:: 
 ns1.precook.net 
 ns2.precook.net
reascends.net
IP: 203.68.187.1
Report to: tanetadm@moe.edu.tw
Alias:
 Gasper Mosqueda 
 miellagroup@yahoo.com 
nserver: ns1.iratest.com 221.11.133.66 
nserver: ns2.iratest.com 221.11.133.67
reattain.com
IP: 221.10.201.138 (abuse@chinanet.cn.net)
Alias:
 Foundation Men On Line 
 leimomi01@tom.com 
Name Servers:: 
 ns1.obstructed.net 
 ns2.obstructed.net
remeasures.net
revetments.net
smilingly.net
IP: 211.147.228.93
Reporting addresses:
ct-abuse@abuse.sprint.net, abuse@gzidc.com
Alias: 
 Foundation Men On Line 
 leimomi01@tom.com 
Name Servers:
 ns1.streph.net 
 ns2.streph.net 
snorter.net
streph.net
soddenness.net
uncapping.net
IP: 221.11.133.66 (cnc-noc.net)
Alias: 
 Louis Phillipe 
 louisludek@yahoo.com 
Name Servers:: 
 ns1.balladries.com 
 ns2.balladries.com
unglazed.net
IP: 221.11.133.82
Reporting addresses:
abuse@cnc-noc.net
Alias
 Bernard Python 
 gji4jd@consultant.com 
Nameservers
 ns1.iratest.com 221.11.133.81 
 ns2.iratest.com 221.11.133.82
unpardoned.net
unwarily.com
Forward abuses to abuse@your-domains-here.com 
Alias:
 Gasper Mosqueda 
 miellagroup@yahoo.com 
Nameservers
 ns1.gnashed.net 80.93.191.229 
 ns2.gnashed.net 219.148.2.120
visagraph.net
vulcanise.net
IP: 162.84.221.116
Report to: abuse@verizon.net
Alias:
 Dennis Naish 
 dcorbins@yahoo.com 
nserver: ns1.brachium.net 211.147.228.106 
nserver: ns2.brachium.net 211.147.228.107
zigzagging.net
=============================

Throwaway domains:




Pharma Shop / Software Now
Score = 11
============================
Software Now
http://221.4.179.228/
================
Pharma Shop
http://www.bitea.info/ 
http://www.dotmate.info
IP: 221.4.179.228 (chinanet)
========
Pharma Shop
http://doneshine.info
http://www.strangecollective.info
http://www.strangeflower.info
http://www.strangeparts.info 
http://www.strangesea.info
IP: 221.4.179.228 (chinanet)
================
Other domains
bitea.info/ 
dotmate.info
doneshine.info
mobnight.info
moonboard.info
moonmin.info
strangecollective.info
strangeparts.info 
strangeflower.info
strangesea.info



Replica Watch Store.....
Score = 4
==========
http://uk.geocities.com/jonas_murelli/
IP: 66.218.77.68
===========
http://uk.geocities.com/start_e_century/?hs
IP: 66.218.77.68
Reporting addresses:
mail-abuse@yahoo-inc.com, postmaster@yahoo.com
Redirects to:
Replica Watch Store.....
http://www.charismaticofferings.com/d2a/ 
IP: 218.104.136.189
Reporting addresses:
postmaster@china-netcom.com 
cnc-abuse@abuse.sprint.net
==================
http://uk.geocities.com/best_series_inside/
IP: 66.218.77.68
Reporting addresses:
mail-abuse@yahoo-inc.com, postmaster@yahoo.com
Redirects to:
On1ine Pharmacy - charismaticofferings.com
http://www.charismaticofferings.com/4j1/
IP: 218.104.136.189
Reporting addresses:
postmaster@china-netcom.com 
cnc-abuse@abuse.sprint.net
=========
http://uk.geocities.com/top_medsspace_get_the_right_cure/
IP: 66.218.77.68
Reporting addresses:
mail-abuse@yahoo-inc.com, postmaster@yahoo.com
Front for:
Online Pharmacy - buildnewspace.com
http://buildnewspace.com/ 
211.93.72.97 not listed in relays.ordb.org.
Reporting addresses:
ct-abuse@abuse.sprint.net 
postmaster@cnuninet.com
==========
http://uk.geocities.com/jerold_corral/
http://uk.geocities.com/leroy_brister/
http://uk.geocities.com/Bryant_Bottgenbach/
http://uk.geocities.com/franklin_gwin/
http://uk.geocities.com/edgar_stoffregen/
http://uk.geocities.com/mckinley_fajardo/
=============
dealsearchbasics.com
increasethevalue.com

onetnews / H0t_St0ck_Newsletter
Pump & dump.
No URL. Pump and dump stock scam sent via open proxies on hijacked computers. Started with plain text email but now sends base 64 encoded with microscopic text that I can't read. May be two or more different scammers

Score = 7
============
Track Global Inc
=============
+ MXON***MXON****MXON****MXON****MXON****MXON + 
+++++++++++Current Profile+++++++++++++ 
MAXXON INC. 
===============
***Energy Stock Alert With News For Monday*** 
Northamerican Energy Group Corp.(OTC:NNYG) 
=================
Hot-St0ck-Newsletter 
InterFinancial Holdings, Corp (OTC:IFLH) 
Symbol: IFLH .pk 
=============
*******Energy Stock Alert For Wednesday********
============

Related scams:
MAXXON INC. 
Northamerican Energy Group Corp.
InterFinancial Holdings, Corp (OTC:IFLH) 
W2 Energy Inc.
Oretech, Inc. 
Pop3 Media Corp.
Eldorado Exploration
CD TRADING CARDS (CDTD)
Nomad International Inc.
Gulf Biomedical Corp
Crystal Graphite Corporation
Martin Nutraceuticals, Inc.
Northeast Development Corporation (NSC)
Eldorado Exploration Inc. (Pink Sheets: EDEX)
EXPLOSIVE PICK FOR OUR MEMBERS
The Daily Stock Barometer
Emerging Growth 0pportunity
Investor Alert Newsletter
Rx Processing Corp.
China World Trade Corporation



Hoodia Maximum Strength / Perfect HGH
Score = 3
Fake names: Ann Doyle, Greg Tailor, Solo Selio
Fake emails: homersimpsonbeing@yahoo.com, gregtailors@yahoo.com, homersimpsonbody@yahoo.com, mmpprogram@hotpop.com
===============
Hoodia Maximum Strength
http://ulcetook.info
IP: 200.108.166.2 (No valid reporting address)
Upstream IP: 64.116.40.177
Reporting addresses:
abuse@mci.com
Alias:
 Ann Doyle 
 homersimpsonbeing@yahoo.com 
Name Servers:
 NS2.XPEDIADNS.COM 
 NS1.XPEDIADNS.COM 
 NS1.FU3L.COM 
 NS2.FU3L.COM 
===========
Hoodia Maximum Strength
http://sbohcosl.info/ 
IP: 200.108.166.2 (No valid reporting address)
Upstream IP: 64.116.40.177
Reporting addresses:
abuse@mci.com
===================
Other domains
brightgenius.com
indeweum.info
inoharei.info
rtswkv.info
sbohcosl.info
sjhqyk.info
squrvk.info
targtraffic.com
zvmsgw.info



Perfect HGH Dr HGH Dr-HGH The Best HGH Kaycon Ltd Canada
Score = 1
============
Perfect HGH Dr HGH Dr-HGH The Best HGH Kaycon Ltd Canada
http://www.thebesthgh.com/ 
IP: 69.55.109.39
Reporting addresses:
postmaster@t3link.com, 
abuse@t3link.com, 
abuse@internap.com
Alias:
 George Stevens  
 hostmaster@thebesthgh.com
+1.999-999-9999 
Name Servers: 
 ns1.tlink.net 
 ns2.tlink.net
=============
http://onemoreshot.info
IP: 67.188.197.172 (abuse@comcast.net)
Alias:
 Gus Fazoulis 
 Little Louis Foundation 
 gusfazoulis@inMail.sk 
Name Servers:
 NS1.VIRTUALUSE.COM 
 NS2.VIRTUALUSE.COM 
 NS3.VIRTUALUSE.COM 
 NS4.VIRTUALUSE.COM
===============
Other domains:
brainsforever.info



The ultimate COUPLE TOOL is the VIBRATING RING!
www.discountc.com | Discount Cigarette Newtork
The bedroom toy that works in an instant!
Crazy Surprise - Bringing you the Vibrating Ring
Uses web bug in email.
Score = 4
===================
Fake names: Frank Conners, David Robertson
Fake emails: frankconners@hushmail.com, david_robertson26@lycos.com
================================
Have some fun UNDER THE SHEETS with the VIBRATING RING!
http://underthesheets.net
IP: 219.254.32.121 (hanaro)
===============
Have some FUN with your partner tonight!
http://fun-tonight.com (vibrating ring)
IP: 219.254.32.121 (hanaro.com)
=================
The newest toy for couples is the VIBRATING RING! (vibrating ring)
http://coupletoys.net
IP: 219.254.32.121 (hanaro.com)
===========
The ultimate COUPLE TOOL is the VIBRATING RING! (vibrating ring)
http://coupletools.com
IP: 219.254.32.121 (hanaro)
=================
Other domains
coupletoys.com
coupletoys.net
crazysurprise.com
enjoyromance.net
fun-tonight.cominstant-novelty.net
underthesheets.net



BestWatches4U- Rolex, Tag, Louis Vuitton & More
Perfect HGH
Real owner is known felon Bill Waggoner
Fake names: Peter Mesa, Mikki Red, Bill Forester, Ivan Solvok
Fake emails: dnsadministrator@hotmail.com, maininfoset@yahoo.com, TaggsIsland@hotmail.com, ivan@mail3ms.com
Score = 3
=========================================
LovelyWatches4U- Rolex, Breitling, Tag & More
http://www.oneblingwatch.net
IP: 194.126.189.106
Alias: 
 Joe Morgan
 general867@gmail.com 
Domain servers:
 ns1.eighttg0.com 
 ns2.eighttg0.com 
 ns1.coregnantdug.com 
 ns2.coregnantdug.com
==============
TheWatchesOnCanalStreet- Rolex, Tag, Louis Vuitton & More
http://nicewatchez.net
IP: 218.244.176.177 (chinanet)
Alias:
 Louis Batjargal
 bob@equiti3s.com 
Domain servers:
 ns1.eighttg0.com 
 ns2.eighttg0.com 
 ns1.coregnantdug.com 
 ns2.coregnantdug.com
==============
Other domains
1stbuyrolex.com
aabby.info
bestwatchez.net
bestwatchez.org
chooseyourwatch4u.com
chooseyourwatch4u.net
genuinereplicawatchez.org
lovelywatches4u.net
nicewatchez.net
oneblingwatch.net
onereplica.net
perfectwatch4u.com
replicabargainbasement.com
replicas4me.net
replicaz4time.net
swisstime4us.com
thewatchesoncanalstreet.net
time4aswissreplica.net
timepiecesgalore4u.net
ultimatetimepiece4u.net
watchesrus4u.net



Term Quotes - Life Insurance Companies of America
Score = 3
==========
Term Quotes - Life Insurance Companies of America
http://www.termquotes4you23.com
IP: 210.78.148.121 (cj.net.cn)
Frames mask
http://leadsboulevard.com-link82563.ph/index.php
IP: 210.78.148.121 (cj.net.cn)
Frames mask
http://www.leadsboulevard.com-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-ph.ph/index.htm
IP: 210.78.148.121 (cj.net.cn)
==================
Term Quotes - Life Insurance Companies of America
http://www.lifequotesgalore.com
IP: 210.78.148.121
Alias:
 David Kotick
 mediaking9@excite.com
Name Servers: 
 greenzone.net-index.ph 
 orange.net-index.ph
================
Term Quotes - Life Insurance Companies of America
http://www.999insquotes.com
IP: 210.78.148.121
To: postmaster@net263.com, ct-abuse@abuse.sprint.net
frame src=
http://leadsboulevard.com-link82563.ph/index.php
IP: 210.78.148.121
Reporting addresses:
postmaster@net263.com, ct-abuse@abuse.sprint.net



Score = 3
Fake names: Ronald Hentington, American Financial
Fake emails: ronaldhentington@gmail.com, ronaldhentington@yahoo.ca, americanfinancial2005@yahoo.co.uk
==============
xzmak.com / American Financial
"American" but the IP for most of his name servers are in Russia
Alias:
 American Financial 
 Ronald Hentington 
 ronaldhentington@gmail.com 
Name Servers:
 NS1.XZMAK.COM 194.126.188.20 
 NS2.XZMAK.COM 194.126.188.20 
 NS3.XZMAK.COM 194.126.188.20 
 NS4.XZMAK.COM 194.126.188.20 
 NS5.XZMAK.COM 194.126.188.20 
 NS6.XZMAK.COM 213.135.80.34
=========
http://uhay.info
Alias:
 American Financial 
 Ronald Hentington 
 ronaldhentington@gmail.com 
Name Servers:
 NS1.XZMAK.COM 
 NS2.XZMAK.COM 
 NS3.XZMAK.COM 
 NS4.XZMAK.COM 
 NS6.XZMAK.COM
==================
http://zsjb.info
http://zvqn.info
IP: 213.135.80.34
Alias
 Ronald Hentington
 American Financial
 ronaldhentington@gmail.com
Domain servers:
 NS1.XZMAK.COM 66.249.21.51 
 NS2.XZMAK.COM 66.249.21.51 
 NS3.XZMAK.COM 66.249.21.51 
 NS4.XZMAK.COM 66.249.21.51 
 NS5.XZMAK.COM 194.126.188.20 
 NS6.XZMAK.COM 194.126.188.20
============================
Other domains
l0wbankrates.com/
bestrates-4-you.net
home-re-financing.com
kxxjn.com
l0wbankrates.com
lowerpayments4u.com
loans05.com
ndbhw.com
prefered-loans.net
xzmak.com
yourvalueloan.com



http://www.voxpublishing.com/IE
IP: 198.66.206.246
Report To: abuse@verio.net
Alias:
 Edward Richardson 
 edrichardson@voxpublishing.com 
Name Servers:
 ns11a.verio-web.com 
 ns11b.verio-web.com



SambalHot - Hot Online Dating - Friend, Dating, Romance, Penpal etc.
http://sambalhot.com/ 
IP: 216.55.162.14
Report to: abuse@aplus.net



Bargain Networkz!
http://www.clicknsave24.com
http://clicknsavedata.info
IP: 222.122.63.33 (kornet)
Name Server:NS1.MYDNSPLACE.COM 
Name Server:NS2.MYDNSPLACE.COM 



Downloadable Software
Score = 4
==============
Downloadable Software
http://soft4cheap.com
http://soft4cheap.net
IP: 221.11.134.19 (cnc-noc.net)
Alias:
 James Shin 
 SuperBiz Ecommerce Inc. 
 superbiz@etn.org 
Domain Name Servers: 
 MS1.SOFT4CHEAP.NET 
 MS2.SOFT4CHEAP.NET
===================
Downloadable Software
http://oemsuperdeals.net
IP: 221.11.134.19
abuse@cnc-noc.net
Alias:
 Wahid Rababy 
 Biz4less Enterprises Ltd. 
 biz4less@etn.org 
Domain Name Servers: 
 B1.OEMSUPERDEALS.NET 
 B2.OEMSUPERDEALS.NET



2005   Digital Cable Filters / Meta Gen
White Light - Teeth Whitener
Illegal cable descrambler & bodywrap & teeth whitener scammer
==============
Names: Ron Proctor, Antonio Cabo
Emails: inetbiz4you@yahoo.com, 1dnszone@gmail.com
Score = 1
==================
White Light - Teeth Whitener
http://globhalproducts4me.info
Alias:
 eproducts 
 myepr0ducts@gmail.com 
Name Servers:
 NS7.HOST4ALLHERE.COM 
 NS04.HOST4ALLHERE.COM
=======================
fitnessdot.com
Alias:
 Ron Proctor
 inetbiz4you@yahoo.com
Name Servers: 
 ns1.superdns4u.info 
 ns2.superdns4u.info
===============================
Other domains:
1click4store.com
1clickagency.info
1clickadvisor.info
1clickextra.info
1clickgallery.info
1clickgreat.info
1clicklimited.info
1clicksource.info
1clickspot.info
1clicksystem.com
1clickcomplete.com
1dnszone.com
1stop4webstore.com
1stoptown.info
1stopnetz.info
1stoptime.info
1stopcentral.info
247acart.com
247ashop.com
247elite.com
247systems.info
bizwhiteteeth.com
click2myshop.com
click2out.com
click4planet.info
click4system.info
connectwrap.com
corporationa.com
dropfatnews.com
fitnessdot.com
grouploseweight.com
iglobalproducts.biz
incdropfat.com
loseweightsystems.com
my-globalproducts.info
myproducts4sell.com
shop4ashop.com
theweightlossbiz.com
theweightlossfirm.com
tooldropfat.com
ns1.webzconnection.info
weightlossfirm.com
yourfitnessonline.com
yourhealthoffice.com
yourhealthsearch.com



Score = 3
sheikhman02@netscape.net, perezbinyamin@netscape.net
Scum sucking 419 scammer. 
IP: 205.188.158.25
Reporting addresse: abuse@aol.com



http://ints-kisss.com
Alias:
 greg smith
Domain servers: 
 NS1.45CALDOMAINREVOVLER.BIZ 
 NS2.45CALDOMAINREVOVLER.BIZ



(Dead on arrival)
http://www.behung4her.info
Alias:
 miken jaon 
 securepgglobal@yahoo.ca 
Name Servers:
 NS1.SECUREPG.INFO 
 NS2.SECUREPG.INFO



eXclusive Generics
http://www.cheapestgenericmedz.net
IP: 219.254.32.95 (hanaro)
Alias: 
 Richard Durrill 
 domy_eg@yahoo.com 
Domain servers: NS1.NUMBERONESTOREONLINE.COM 
 NS2.NUMBERONESTOREONLINE.COM



Score = 3
=========
Home
http://moorsmanajij.com/fumhw/ 
IP 61.152.238.159 (chinanet)
Alias
 Joseph Krawez 
 matormanster@hotmail.com 
Nameservers:
 maa.staabkbeh.com 
 kaa.staabkbeh.com
========
Home
http://bultowmifd.com/wslvr/
IP: 221.11.133.63
Reporting addresses:
abuse@cnc-noc.net
Alias:
 Jason WARE
 mantoritter@yahoo.com 
Domain servers : 
 maa.staabkbeh.com
 kaa.staabkbeh.com
==========
Home
http://ibp0ded7vzvvdh77picp70u7pp.bicepsfhel.com/wslvr/ 
http://ibp0ded7vzvvdh77picp70u7pp.bicepsfhel.com
IP: 222.233.52.44
Alias
 Kevin COPPETTI
 boatrenti@hotmail.com 
Domain servers : 
 kaa.staabkbeh.com (KSC2-BMN-HST) 
 maa.staabkbeh.com (MSC3-BMN-HST)



Score = 2
http://misogyneabck.com
IP:  221.11.133.63 (chinanet)
Alias:
 Jens AHRENS
 Schott-Rohrglas GmbH 
 ssdfasdflkgklhimthk@hotmail.com 
Domain servers : 
 la.acrazebicm.com 
 pu.acrazebicm.com



Score = 2
Fake diploma scam
1-646 514 7482



Click 4 golf -for all your coupons and golf course
http://www.c4g.com
IP: 69.56.214.22
Report to: abuse@theplanet.com



http://tcatlop.com/3/
IP 221.143.42.81 (hanaro)
Alias
 Richard Vontalis
 refnowyes@gmail.com
Name Servers: 
 ns5.nowusaveduckets.com 
 ns7.nowusaveduckets.com



embalaje.biz
http://embalaje.biz
frame src=
http://reproofs.com/ms/?bb
IP: 209.61.186.84
Report to: abuse@rackspace.com
Alias
 Aya Petersone 
 sevcikova@ma-ster.com 
Name Servers:  
 NS1.DOMAINDISCOUNT24.NET 
 NS2.DOMAINDISCOUNT24.NET 
 NS3.DOMAINDISCOUNT24.NET

2/05
3/05
4/05
5/05
6/05
7/05
8/05
9/05
9/10