Scammers for 2/05

WELCOME! Cheating House Wife Services

Date Lonely Wives

Score = 23 Fake names: Barnu Rapatska, zopa cathlina, Stacey Gerstien, WebLove, Vadim Gablian, HomeViz, mathew barberstantonly, base advertising jump inc, lifetime, James Sweet, vashumat, James corona, mike mC Garythomason, bishopletsy trierson Fake emails: support@emarketingdeals.com, admin@chillblow.com, infohelpteam@yahoo.com, admin@wifesmile.com, abbie@fusemail.com, joker2newdomains@yahoo.com, nameserver2004@yahoo.com ======================

emarketingdeals.com

210.245.151.117 Reporting addresses: abuse@telstra.net, abuse@newworldtel.com ================== http://jhsanpoloamoscianom.com/d1d1b.... http://utesovsong.com/9619.... Host: 218.7.112.242 =============== http://akiyoshidai.net/57c9... http://kytheras.com/b245d..... Host: 61.156.238.85 ============== http://khwarellmn.com/ed61558979c528d2e08ad4ba0/h.html Host: 61.156.238.85 Redirects to http://dns-click2.com/khwarellmn.com/ed61558979c528d2e08ad4ba0/h.html ::Technical Contact:: Name : Barnu Rapatska Email : support@emarketingdeals.com Address : Snemovni 3 Zipcode : 118 24 Nation : CZ Tel : +420257174252 Fax : ::Name Servers:: ns5.dns-setup.com ns6.dns-setup.com ns7.dns-setup.com ns8.dns-setup.com Redirects to: American Loan Search Mortgage Inquiry Form http://www.g925.info/da.php Host: 200.155.191.27 Reporting addresses: mail-abuse@nic.br Name: dfdsf Email: ssgfgfgd@yahoo.com Name Server:NS1.FGHVUYHR.COM Name Server:NS2.FGHVUYHR.COM Name Server:NS3.FGHVUYHR.COM Name Server:NS4.FGHVUYHR.COM ======================== http://lebonas.com/5484... Host: 61.156.238.85 Improve your credit rating TODAY http://munyanos.net/cd926... Host: 61.156.238.85 ============= Improve your credit rating TODAY http://positivecreditbuilder.com MPMS. LLC theprofact@aol.com Domain servers in listed order: NS1.POWERZX.COM 64.38.252.26 NS2.POWERZX.COM 64.38.252.27 ============== http://pestalozziman.net/ef5d5.... Host: 219.153.0.230 ================= http://gvblouisebxc.net/d04d.... http://vmbparadisenv.net/9444a... Host: 221.5.250.114 =================== http://gjmhirundov.net/1be4a.... Host: 222.170.97.22 (chinanet.net) ================== http://mvbbowevbn.net/61f4f... Host: 222.51.91.226 ==================== http://vbmonnieh.net/62ab5... http://vgjokabayashivcn.com/21cd5... Host: 61.128.196.155 ==================== free sex guide, how to have better sex than a porno star at the paris hilton. http://bettadotto.info/4c4cd15c06fb8057449719662/ Host: 61.156.238.85 Reporting addresses: postmaster@pub.sd.cninfo.net, abuse@cnc-noc.net, postmaster@sd.cninfo.net, support@pub.sd.cninfo.net, ct-abuse@abuse.sprint.net, security@pub.sd.cninfo.net Redirects to free sex guide, how to have better sex than a porno star at the paris hilton. http://freepageslimited.com/sites/garysexbook/ Host: 210.245.151.125 Reporting addresses: abuse@telstra.net, abuse@newworldtel.com ---------- Spammer: Name : Barnu Rapatska Email : rich4452@hotmail.com, support@emarketingdeals.com ::Name Servers:: ns9.freepageslimited.com ns10.freepageslimited.com ========== http://gjulyanovhk.com/ddbaa6fc207fabe48555353c2/ Host: 221.5.250.114 Reporting addresses: abuse@cnc-noc.net owner: PATRICK RYAN email: ryan1008@lycos.com nserver: ns1.anwoo.com nserver: ns1.bomofo.com nserver: ns1.epoboy.com nserver: ns1.mynameserver.ca AKA http://dns-setup.com/gjulyanovhk.com/ddbaa6fc207fabe48555353c2/ Using abuse net on abuse@3fn.net, No abuse net record for 3fn.net, Using best contacts abuse@3fn.net, host 216 -------------------- Technical Contact:: Name : Barnu Rapatska Email : support@emarketingdeals.com ::Name Servers:: ns3.dns-setup.com ns4.dns-setup.com ===================== http://gjulyanovhk.com/ddbaa6fc207fabe48555353c2/ Host: 222.170.97.22 Reporting addresses: network@hljtele.com, postmaster@hljtele.com Redirects to Date Lonely Wives http://210.245.151.118/sites/datelonelywives/fullpage.php Host: 210.245.151.118 Reporting addresses: abuse@telstra.net, abuse@newworldtel.com =========================== http://fgjsteplinggj.net/fc067a804f692626389db2788/ Host: 222.170.97.22 Redirects to Our Ladies http://210.245.151.118/sites/datehousewives/fullpage.php 210.245.151.118 Reporting addresses: abuse@telstra.net, abuse@newworldtel.com ==================== http://dzlouvrej.net/bd3951c0b908b8fbe01cda4ae/ Host: 61.128.196.155 Redirects to WELCOME! Cheating House Wife Services http://coolsites1.com/sites/cheatinghousewifeservices/fullpage.php Host: 221.5.250.114 ===================== http://www.dohersaturday.com/d/7.php Host: 219.153.14.34 ================== WELCOME! Cheating House Wife Services http://lowseerte.com/gab/dlw9 http://meetupsaturday.com/d/8.php http://meetupsaturday.com/d/fpa_6/ http://wifecheaters.info Host: 211.144.162.60 =================== Other domains: 123ez.org 2005date.com 1stplaceglobalhost.biz actionmaker.com admin@date-smile.com adoresweetie.com cheat-play.com chillblow.com companionjump.com companionshipgo.com connect-jokes.com cooldearest.com date-ground.com datesaturday.com findfunhere.com floorbaby.com heavybreath.com hookuptomorrow.com hotobjectofdesire.biz llg2005.biz meeting-smile.com mainsqueezelove.biz meeting-play.com meetnowadays.com parkleah.biz play-her-him.com reddearest.com relaxedsenseofstyle.biz s6xydate.com wifeground.com wifesmile.com wetsweetheart.com

Lenders Compete For You :::

Sends almost one spam/hour to just one of my addresses. Score = 10 Lenders Compete For You ::: http://www.ez-rate.info/2/ http://www.ez-rate.info/bud/ Host 221.5.250.101 Whois blocked Name Server: NS2.BEST-GIFTS.BIZ 219.147.192.81 Reporting addresses: network@hljtele.com, postmaster@hljtele.com Name Server: NS3.MAIL18.BIZ 219.147.192.81 Reporting addresses: network@hljtele.com, postmaster@hljtele.com Name Server: NS2.XZDNS.BIZ 219.147.65.250 Reporting addresses: network@hljtele.com, postmaster@hljtele.com Name Server: NS3.XZDNS.BIZ 221.5.250.101 Reporting addresses: abuse@cnc-noc.net

WELCOME to WAREHOUSEMEDS !!!

Score = 5 ============================= WarehouseMEDS http://paylessrx.info/bam/ Host: 218.30.123.56 ============= WarehouseMEDS http://bagfullofeggs.com/ Username = bondjames Host: 218.30.123.56 ====================== WarehouseMEDS http://warehousemed5.com/ Host: 219.153.14.34 bondjames spammer ===================== WELCOME to WAREHOUSEMEDS !!! http://www.bagfullofeggs.com/bir/ Username = bondjames Host: 211.144.162.60 Other domains: gr8offers.info meds-warehouse.net neverpayfullpr1ce.net wild-trialz.biz smartrial.biz

Canadian Pharmacy

Sends from hijacked open proxies. Illegally sells drugs without prescription. Fake whois. Name morpher. Sent to spam trap address. Fake Names: Laicheng Ke, Ming Bian, EspanolDesignO, Shiqian LI, Jun Chen, Vasya Curby, Nguyen 1 Quang Huy, Jeff Smart, Ruslan Yavorenko, Jasmine Hovers, George Michaels, Jonathan West Fake emails: AlexanderLinder@163.com, kim_moranti@pisem.net, info@pricingforu.com, Sexygeorge6969@hotmail.com, jeffsmart@mail15.com, vasyacurby@mail15.com, athingvn@yahoo.com, ruslanyavorenko@digiverse.net, juliafizberg@sourcechannel.net Score = 9 ================= http://gsvdvs.info Host: 200.247.142.148 GornMedia Inc Tech Email:jarondi9969@yahoo.com Name Server:NS1.EZCLIQ.US Name Server:NS2.EZCLIQ.US ===================== Canadian Pharmacy - save big on medicine with canadian medication http://200.247.142.148 http://edhcbxgsyi.com Host: 200.247.142.148 =================== Canadian Pharmacy - save big on medicine with canadian medication http://201.6.56.247/ http://doplemxnsjhd.com/ http://dospdlcx.com/ Host: 201.6.56.247 ================== Canadian Pharmacy - save big on medicine with canadian medication http://200.247.143.55/ http://betdyshcndjru.com/ http://cqosxnzjdki.com/ http://csuhqwiyeo.com Host: 200.247.143.55 ==================== Canadian Pharmacy - save big on medicine with canadian medication http://201.6.56.111/ http://basqwpl.com/ Host: 201.6.56.111 ============= Other domains & IPs: ahowbuckas.com aldringo.com alnording.com/ alteryl.com avbsfdesfdfd.com/ More domains and IPs 200.146.101.43 200.146.101.74 200.146.101.107 211.144.164.206 221.11.133.67 ABDFSAFWEF.COM absjadfjqw.info ADKEHGI.INFO. AEWFBSDFEW.COM AGBEWRKDF.COM AISDHGAE.COM AJERLASD.COM AFFILIATESERVICE.BIZ AKNBEKF.INFO. akqorba.info ALSFAJEGA.COM amuralokastu.com/ asdfasdvdsd.info ASDHBEFSFV.COM ASDFWEFFDC.COM asdvasdgas.info BABRJY.INFO BAJDFHWEF.COM bgsgnof.com bmqexhd.com boeirisudb.com BOZVWEFDF.COM BSFEKSDFE.COM BWEOFSHEF.COM CANADIANPHARMA.INFO CANPHARMA.BIZ CBOGEFDSF.COM cbxnsyeudi.com CDABFEWFD.COM CEASEARPAL.INFO CEASRMDS.INFO ceropfldsx.com/ CESKABAR.INFO cfefogl.com cgdtsyern.com CIZHDER.INFO CKAAEWR.INFO COEBWEFDS.COM COFEBDFED.COM CXDOFEDFD.COM czxrstep.com/ davbasdfdf.info DAWERAVS.INFO DBAJOWEOR.INFO dbzwefsde.info DDABDKAWQ.INFO diebfsefdg.com/ difshbesed.com djrthoewrijdkfshiow110binarnnn.com/ DKABSAODOFK.INFO DSADFSDFD.INFO EABRRTS.INFO EAEEWERFE.INFO EBATSTSTS.INFO EDAVSDDFEE.INFO EDBHADJ.INFO EFABDJFAD.INFO EJEBEMC.INFO EPOCHCASINO.BIZ faxbfadkd.info fbasdjfesf.info fhdvsdsfwef.info FJBAKEWFS.INFO focdsfdsf.info getsavvings.com GGFHHKF.INFO GHBADFKD.INFO GHOKKBASR.COM ghzbfoes.info GJAKWFAL.COM gqaeatsd.info greatonehere.com GZIDFBEW.INFO HABDFSKWE.INFO HABQWEFDD.INFO HAZEDERGD.INFO HFAOOELF.COM HOAERESHD.INFO HZGWERDSF.INFO IABEWRDF.INFO IBASKFHE.INFO IZBAERDD.INFO IZBAFDEF.INFO JADBADF.INFO jbbeajfbd.info JEBAFDEF.INFO JERAFJDD.INFO JETSKIASL.COM JGHFDDI.INFO jkasdfjv.biz jocksbdjf.info JOFDJAEF.INFO JUMANJU.INFO JVNDFWEF.INFO JZKFBAEF.INFO KALOMFIUG.COM KGAJGIEAG.COM KVKAEFDZV.INFO LAKOMASD.COM LAVNFJEFS.INFO LLADNDC.INFO LOBJXNDFE.INFO lvsdfbefd.info LZOGFEFDF.INFO LZVBDFKEF.INFO MEDZ.BIZ MEFOWEFSZ.INFO MFWEBFDEF.INFO MHJGCGD.INFO MJKEGLG.INFO MKSFBEFDS.INFO MODFHEDFD.INFO MUNAJU.INFO MVDJSFEFD.INFO NCBCJCH.INFO OEMPLANET.INFO OEMZ.BIZ. OEMZ.INFO onesselected.com ONLINE-RX-NOW.INFO PABDADKBUY.INFO PAJABADJFH.INFO PBAKDBBUY.INFO PBDJAHDFB.INFO PBUYKIWKB.INFO PKABDFBUDB.INFO PKDBAJDFBUY.INFO PKJABADFBMED.INFO PMEDABUY.INFO PMEDBADBU.INFO poralustamina.com portastulamnoa.com/ pricingforu.com/ RX-4-LESS.BIZ rzobeerrd.info setegedge.info stbgefsed.info topupsaving.com uhdsbadj.info upliftingpower.com xckjaosakd.info XPBESTDEALZ.BIZ XPSOFTSELL.BIZ xvxxdatwers.info yoramanustola.com zbgadjdf.info

Mystery spamer.

This spammer hardly ever sents a spam with a working URL. Usually warez. Uses a diffrent fake ID to register every domain. Score = 18 ======================== http://mkdjmlmgec.com/017/ Host: 134.86.254.40 ==================== http://ednkaijga.com/000/ http://fcnenmgef.com/025/ http://ffkmfimlb.com/000/ Host: 218.30.123.55 ================= http://eliifjeaj.com/000/ http://ffkmfimlb.com/000 http://kcdlcejji.com/000 Host: 211.144.164.201 ================ http://amnignanf.com/t013/ Host: 218.30.123.5 =============== Replikabazaar http://ifmmmjfjf.com/RB037/ 211.144.164.201 Reporting addresses: cfc_dcy@sina.com ===================== http://icccmika.com/000/ Host: 211.144.164.201 ====================== http://ekdbekdd.com/ http://igdhbbhl.com http://jjddfjmc.com http://kldjknai.com/ ================= Rotating hosts several times a minute -------------------------- Host: 211.144.162.43 Reporting addresses: cfc_dcy@sina.com ------------------------ Host: 211.144.164.201 Reporting addresses: cfc_dcy@sina.com ---------------------- Host: 218.30.123.55 Reporting addresses: bjnic@bjtelecom.net ----------- Host: 219.153.14.35 Reporting addresses: abuse@cta.cq.cn ========================== http://aicbcbee.info/000/ Host: 219.153.14.35 ======================== Replikabazaar http://mtyjnvj2.info/RB037/ ======================== http://65.203.151.197/015/ http://lcneekne.info/015/ Host: 65.203.151.197 (MCI) ===================== http://65.203.151.200/000/ http://banlnicg.info/000/ http://kbbhnafh.info/000/ Host 65.203.151.200 (MCI) ================ http://ijdilend.info/000/ Host: 218.30.123.55 ================= Other domains & IPs: 211.144.162.61/UK017/ AABGMCEG.INFO ACBCJGJE.INFO afmfhll.info/000/ ajhfnkae.info/833/ BBGCIEBE.INFO belgagkh.info/000/ bbgejfck.info/_"859/ bhneeag.biz/000/ BMKEGFKH.INFO CD4SALE.INFO cgkgihb.info/000/ chdghbm.info/000/ cjjdalne.info/PH035/ bcbblnn.info/000/ bdedcln.info/000/ bghgifmm.info/000/ bkibkfd.info/000/ dccfmhmi.info CDGDBKIH.INFO cjaheahb.info CJHGLKGJ.INFO DAMGAEAI.INFO deedjlf.info/000/ eelcblgm.info/000/ EEMCIIEI.INFO EFAFGNEM.INFO efahfghl.info/000/ efkdblh.info/000/ EIDDEMIH.INFO eigfcgn.info/OE033/ EJJDKDHI.INFO EKICANGI.INFO elkmlifebd.info/000/ enzrpqgsk.info/000/ fbnhjenm.info/000/ femhaabi.info/000/ FFMCKKDM.INFO FIBEDAHN.INFO fiicllan.info fjmekdhb.info/000/ flbccceg.info FNDFJDGB.INFO gcngjkkh.info/OE058/ GDKHCMD.INFO GEAHDKKK.INFO GET-XP-NOW.BIZ gfbgdeja.info/S001/ gflgjhdb.info/000/ gibhiblc.info/000/ GIIHMMJ.INFO GIKBHNKM.INFO GMDCKDAA.INFO HEHFJNBH.INFO HEJBAEBC.INFO hfcfcdm.biz/000/ hjfenmjf.info/OE017/ hllciija.info/ES007/ hmhbdhah.info/000/ jfnggha.info/000/ JGMBCFCF.INFO jhgfghd.info/000/ jngegjlmgk.info/UK017/ kejefmnb.info/000/ KIMHIBFA.INFO lfdgjjeh.info LGHDNDAL.INFO LNEBGFMH.INFO MCHHJJME.INFO MDAFNCIM.INFO dbjflkea.info/000/ dfhbiade.info/S001/ jjacgcbe.info/000/ kilhjced.info/EY001/ mcidmkdf.info/000/ mdgabg.info/000 mecbiink.info/000/ miedcbbj.info/000/ MMNCELCM.INFO NAGHJJC.INFO ndnhhdh.info/000/ nedhdki.info/000/ NHAHMKNF.INFO NIBGJJDC.INFO NILCFEAF.INFO njifjcl.info/000/ nkgdnkbm.info/000/ nmbebbd.biz/000/ NNDHFEM.INFO OEMCRAFT.BIZ OEMDISCOUNTED.INFO OEMHOMEWARE.INFO OEMPLANET.INFO OEMSALE.INFO payless4oem.biz/OE017/ QUALITYOEMSOFT.BIZ sdbmwenrbh.info/IE011/ SOFTOEMHOUSE.INFO winsoftsale.biz/OE017/ XPOEM.INFO yagsomxur.info/ES001/

DRUGS DIRECT: CHEAPEST DRUGS ON THE NET / Online Dating Service - Personals with Live Web Cam Chat / American Loan Search Mortgage Inquiry Form

Illegal drugs, fake mortgage scams, Fake degrees. User name = bonsay Fake names: hotsales inc., icamiS Domain Services, Francis Francis, xhongfu wang, ZINZAN LABS, LAU YUK, Peter Vantec, Kin Chew Bo, Newport Internet Marketing, Robert Soloway, B J kristov, Zhaming Liu, B J kristov, vishal kapour Fake emails: zinzanlabs@hotpop.com, icamis@icamis.ws, fdhsifsd432@hotmail.com, newtoname123@yahoo.com, munnkurad@hotmail.com, hahehu20002000@yahoo.com, kordom@post.cz, rxrocks02@yahoo.com, rxrocks05@yahoo.com Score = 5 ============================ VIP PHARMACY http://34234jedfh.com/index.php Host: 200.155.191.27 =========================== http://www.ejrhxw322.com/free/?bonsay YUK, LAU ZINZAN LABS Domain servers in listed order: NS1.NS555.BIZ NS3.NS555.BIZ ============ http://www.dfbeky-wr.com/ 210.51.2.187 Redirects to: DRUGS DIRECT: CHEAPEST DRUGS ON THE NET http://onlinegenericshop.com/ Host: 210.51.2.187 ==================== Other domains & IPs: 123rxrocks.com/ aujobs.net bettermortgagetoday.net bluerate.com/ cheap102.com demand4rx.com getthatpills.com/ go4medz.com/ hottestladiesaround.com j-ust4u.com lowratebuy.com masfre.info mortgage2006.com my-live-webcams.info m3dz.com/ onlinegenericrx.com onlinegenericshop.com princerxinfo.com productgalaxyshop.com real-cat.com rx-world6.com/cia/ rx-zone.com rxand-more.com rxonlinesale.com sweetpharminfo.com watch-cat.com watchdock.com xmasrefinance.com
Pharma Shop http://bighealt.info/ Host: 221.11.133.72, 222.223.134.252

Illegal cable descrambler.

Body wrap scam

Score = 3 Illegal cable descrambler. Order page claims to be secure but it isn't. Fake Name: Dong Cuai Ingo Fake email: intersponse@safe-mail.net 1-800-529-2690 ================= http://whatadeal4me.com Host: 210.245.211.185 Reporting addresses: abuse@telstra.net, abuse@newworldtel.com Redirects to 2005 Digital Cable Filters http://1securestore.info/lisa_004/cablefilter/index.html Host: 210.245.211.185 Reporting addresses: abuse@telstra.net, abuse@newworldtel.com =================== http://allaboutthenet.info/r/ Host: 210.245.211.185 Reporting addresses: abuse@telstra.net, abuse@newworldtel.com Redirects to: http://1securestore.info/sim_014/cablefilter/index.html Other domains: 1shopsafebiz.info fitnessbiz.info
Rockwell Data corp - The Power Behind Global Internet Exposure http://www.submission-inquiery-form.com/rockwelldatacorp.com Host: 213.171.218.45 Contact: Jacobs, Jason goodmansystem8@usa.com Domain servers in listed order: NS2.LIVEDNS.CO.UK NS1.LIVEDNS.CO.UK

The Mortgage Source

Name morpher. Fake whois. Fake names: Adny Travis, Jessica Turner, Jason Gonzales Fake emails: aleadz@gmail.com, eleadz@gmail.com, jrlove2001@yahoo.com Score = 8 ============= Get the lowest mortgage rate possible http://www.lendzx.info/index2.php Host: 202.67.217.124 ======================= The Mortgage Source http://www.mortzlow.com/ Host: 202.67.217.124 ======================= The Mortgage Source http://www.mortslow.net/index.php Host: 202.67.217.124 owner: Adny Travis email: aleadz@gmail.com nserver: ns1.bulkdump.com 202.67.217.124 nserver: ns2.bulkdump.com ============== The Mortgage Source http://www.lendzx.info/index2.php Host: 202.67.217.124 ======================== The Mortgage Source http://www.lowz2d.net http://www.mortlow.net Host: 213.159.120.13 ================== Other domains: jdfn.net lendinnow.com mortzgagez.net/ mortzziq.com signupziq.com

Mystery spammer 3

Another idiot who encodes his web site so well that it renders a blank page. The links in his spam don't work either. Sent 7 spams to one address in one day. Score = 12 ============ http://quickpaced.com Host: 63.82.96.35 Reporting addresses: abuse@mci.com ==================== http://blanktrade.com/ Host 63.82.96.35 Reporting addresses: abuse@mci.com ================= http://supplypalace.com/ Host: 63.82.96.35 Reporting addresses: abuse@mci.com

Health Suite, Popularsoftware, Software Now, CDCheap, Online Pharmacy, "Carol Brisbine"

Warez, illegal drugs. Fake names: Eva Paterson, jackson_green, Stevens Media Fake emails: GREG12023@YAHOO.COM, jackson_kriner@yahoo.com Score = 5 ================ Software Now http://watchformore.com/c47/ http://watchformore.com/oe/ Host: 221.210.2.149 (cnc-noc.net) ===================== Rogers, Tom vortexmedia@hotmail.com Domain servers in listed order: NS4.BIGHOSTSOLUTIONS.COM 218.7.120.118 NS7.WDRHOSTING.COM 222.223.134.36 ============ Health Suite http://oftheradiosource.com/ Host: 219.148.3.155 ================= Software Now http://gooooodsoft.info/ Host: 222.223.134.252 Name: Eva Paterson Email: GREG12023@YAHOO.COM Name Server:NS5.WDRHOSTING.COM Name Server:NS4.BIGHOSTSOLUTIONS.COM Name Server:NS7.BIGHOSTSOLUTIONS.COM ========== CDCheap http://222.223.134.252/ ================== Health Suite http://blackholessd.com/ Host: 218.7.120.117 ================== Other domains: accreditedbythe.com afteryousubmit.com charlottein.com discreetdelivery.net euroame.com findingsuggest.com grantincreasesto.com holdsthestatus.com hompagetoclick.com involvesarelease.com killeroem.com medzzz.com oanacciden.com panelthecompany.com princes-se.com/ refreshingfact.com renshouse.com representsrant.com sucservice.com tradeforaseven.com weofferaselection.com witthperformance.com

Welcome to Online Replica Store.....

Score = 6 ============== Welcome to Online Replica Store..... http://www.online-replica-store.com/ Host: 218.7.120.70 ============= Simply Rx http://www.simply-rx.net/ Host: 218.7.120.70 =========== redirecting page http://www.t0w.net/p/jones1/ Host: 222.223.129.251 Name : Mohammad Khan Email : admin@taiwantelcom.com Name Server : NS1.DNSM.NET Name Server : NS2.DNSM.NET Registrar Name : NAMEBAY ======================== Welcome to Online Replica Store..... http://203.98.159.136.hk82.com http://www.vaigra.net/v.php http://www.vaigra.net Host: 203.98.159.136 203.98.159.136 Redirects to http://www.online-replica-store.com/ 203.98.159.136 Reporting addresses: abuse@newworldtel.com Other domains: 0rdernow.com mustbegood.info online-replica-store.com qwild.com r0lex.net simply-rx.net tlme.net

Elmar Brunenieks

NewCoolRx / CheapMedShop / NewYearx / OurMedsHere / GrandRX / GrandRXbiz / 1stpharmacy / 1strxpharmacy / usprescription

Known criminal. Sends from zombie network of computers infected with trojan bareing viruses. Even though he is a known felon, MCI hosts hundreds of his domains. Fake Names: tuj kow, GoldToe International Inc, mario netka, Uno More, uru mohit, kubik magi, vissbuus labi, glavnyj nachalnik, tiiri konkretno, teatris moskovskij Fake emails: tukow@mail333.com, pdlweb@YAHOO.COM, marionet@mail15.com, urururu@pisem.net, magijaa@mail333.com, vissbuus@pisem.net, huryt@mail15.com, nuovob@pochta.ru, obnovka@mail333.com Score = 6 ========================== NewCoolRx http://222.134.66.61/files/cheapmedshop/ http://www.genital4dima.com/files/cheapmedshop/ http://www.geology5bicuspid.com/files/cheapmedshop/ http://kalmyk2patio.com/files/cheapmedshop/ http://siderurgy8licensee.com/files/cheapmedshop/ Host: 222.134.66.61 (MCI) ================ NewCoolRx http://61.156.8.145/files/cheapmedshop/ http://www.goodwill5market.com/files/cheapmedshop/ http://www.snapped4stockyard.com/files/cheapmedshop/ http://www.unloaded2katzner.com/files/cheapmedshop/ Host: 61.156.8.145 ========= More domains nameservers and IPs: 200.124.75.5/files/ourmedshere/ 200.124.75.12/files/OurMedsHere 200.124.75.13/files/ourmedshere/ 200.124.75.12/files/NewYearRX/ 200.124.75.18/files/NewYearRX/ 200.124.75.22/files/CheapMedShop/ 200.124.75.22/files/newyearrx/ 222.134.66.41/files/GrandRX/ 222.134.66.61/files/CheapMedShop/ ABBACIES3GLADDEN.COM aetna5893drygs.com aider8333tads.com ns3.airmaramba.biz APPLICATOR2TIMEFRAME.COM atonement9529pirrs.com ns3.avk29.biz allotropic1congruency.info/files/ourmedshere/ auriferous6tabernacle.com/files/OurMedsHere/ avk29.biz benzine6086dryg.com berth8discharge.info/files/GrandRX/ bitters4biographer.info/b12m/ bowknot9321drygs.com broadview9405pirrs.com callup6305rneds.com conscious2horsepower.info/b12m/ cranium5foyer.com/files/CheapMedShop/ DEBBIE9SUITE.COM disposable8grotto.info/b12m ns1.fast111.biz fertilizer5greasy.info/131/ fleecy5jimmy.info/files/grandrx/ flew7838tads.com jell4atoll.com/ lesion6benign.com lipstick4formalism.com lunatic6rhymer.com malignant5beer.com/files/CheapMedShop/ metrology9prayerful.info/files/grandrx/ miscast1blonde.info/files/OurMedsHere/ nicaragua9seeder.com/files/CheapMedShop/ nicaragua9seeder.com/files/newyearrx/ oblivious1slate.info/files/ourmedshere/ peccavis9serfdom.com/files/NewYearRX/ perpetuity6sheath.info/b12m/ persevere5256tads.com pickpocket2persevered.us/ pinspotter2275biz.com pledgee8rna.info/131/ pollster5dawdle.info/131/ radiating4002nx.com rhodium4laddic.info/24/ shrinks489pinn.com shutdown4celesta.info/?a sennas9bread.com/files/NewYearRX/ submontane2laxative.info/files/ourmedshere/ sun1statuss.info/131/ surplusage8150tads.com synergetic9spicebush.com/files/ourmedshere/ tai8disloyalty.info/b12m tank3chide.info/b12m TEARFLYER8SUBSUMED.COM thine5825biz.com tit4velodrome.com/files/CheapMedShop/ turbulence7slaveowner.info/131/ UNCTUOUS1LIFTED.COM undivided6399dryg.com unpardoned9issue.info/files/grandrx/ unwatched1437drygs.com utopia6phallus.com/b12m vcr1047pinn.com waggish172dryg.com weaponless8185biz.com weeper9194nx.com winning7272tads.com wreck7376drygs.com

E-Bank Clients Area | Welcome

This scammer uses a different ID to register all of his domains. Creates at least one domain per day. Sends several spams to the same addresses per day. Host is chinanet.net. Can't spell any word with more than two letters correctly. Score = 2 ================== E-Bank Clients Area | Welcome http://221.5.250.98/ http://www.rtvers.com/ E-Bank Clients Area | Welcome http://219.147.197.251/ http://221.5.250.98/ bnstk.com fndos.com htloti.com/ idkcon.com/ lencors.com qrrnet.com toolto.com Host: 221.5.250.98 ===================== More domains & IPs 221.5.250.98/ 222.136.244.252/ 222.170.7.252/ ACCESSKL.COM AKRETM.COM aokmwenks.com aonmate.com AREMIDOLM.COM azmetaland.com/ bnstk.com bokwhdok.com/ checkdrs.com cvvus.com DOLMARA.COM eiwhx.com FCDAY.COM fintod.com/ fndos.com FTGOAL.COM GREATFINS.COM gtxtr.com helpggg.com/ idncon.com idnto.com/ infodsr.com ismorea.com jolmnh.com klonpiz.com/ kyqdv.com mhkoda.com midord.com/ moreupto.com mrtfi.com nelomatye.com NOKALKO.COM nolpmadotad.com NUIMAND.COM piuloknades.com/ qeekcy.com remglo.com resdet.com resfn.com rqgyy.com RTSEC.COM. rtver.com/ sothata.com sumrt.com theseto.com timeroda.com tordel.com trnnet.com/ wtljnb.com/ xbces.com/ xpojga.com/ xmaad.com ylyrtdq.com yuomnad.com
Pearly Whites of Texas http://smilebiz.info 210.245.211.185 Reporting addresses: abuse@telstra.net abuse@newworldtel.com
Canadian Pharmacy - The Biggest Medecine & Pills Site On The Net! - No prescriptions needed! The other "Canadian" Pharmacy. Hosted in China. Score = 1 http://ulikeprivacy.com/ca/ Host: 221.210.2.149 Name: Congjun Yang Email: info@pricingforu.com Name Server.......... ns2.ulikeprivacy.com Name Server.......... ns1.ulikeprivacy.com

Mass Marketing

Sent from kornet, hosted in China. Score = 2 Mass Marketing http://www.promo-for-your-site.com Host: 202.99.172.172 ================== Mass Marketing http://www.w-e-b-promo.com To see all the available pharmacy images go to http://202.99.172.172 Host: 202.99.172.172 Reporting addresses: abuse@cnc-noc.net Whois: mmpprogram@hotpop.com Nameservers: NS1.PERFECTONS.COM NS1.WWW1212.COM NS2.PERFECTONS.COM NS2.WWW1212.COM
getbestmeds.com Score = 3 =================== http://www.getbestmeds.com Host: 218.7.120.67 Reporting addresses: abuse@cnc-noc.net owner-address: Ronn Inc address: 213 raffles city e-mail: ronnbackup@yahoo.com nserver: ns1.rastamd.com 218.7.120.67 nserver: ns2.ilovemeds.com 218.7.120.67
Web bug in an email, address munged: http://robwilliamsworld.info/e416ae89d606e66b3e4f31917/killspammers.jpg Host: 219.153.0.210 Reporting addresses: abuse@cta.cq.cn
Welcome to E-Pharmacy! http://222.51.208.81/py/ http://jkiuy.com/py/ Host: 222.51.208.81
http://jasonschulernet.com/0dc7c1fcb900d426256066d92 Host 219.149.64.86
Phishing scam http://o6fsilq.da.ru Host: 213.59.0.84 abuse@rtcomm.ru (Ignores spamcop complaints Form on http://o6fsilq.da.ru goes to: Bank Card Verification http://bannersbank.mail15.com/choose.html Host: 81.211.64.118 (mail15.com) postmaster@hotbox.ru (bounces) abuse@pochta.ru (bounces)

::: Software 4 Download :::

Score = 1 ::: Software 4 Download ::: http://www.soft-ocean.net Host 82.115.223.94 Private admin@a.com Private Po box 1 NA 127000 Latvia

aaMedications Your Source for Phentermine, Adipex, Viagra and More.

Score = 15 aaMedications Your Source for Phentermine, Adipex, Viagra and More. http://www.aamedications.com/ Host: 63.247.129.26 Mark Heredia markheredia@hotmail.com Domain servers in listed order: NS3.HMDNSGROUP.COM NS4.HMDNSGROUP.COM
SwingerMatch http://www.bobbycalled.com/ Host: 218.30.123.56
Dead on arrival. Either the replica watch scammer or the mystery spammer who always sends dead URLs http://218.30.123.55/ http://fdlamank.info/ http://ggenhcmj.info/ Host: 218.30.123.55
American Loan Search Mortgage Inquiry Form http://219.148.3.134/ http://homeloanon.com/ owner: Shan Tou email: nancalion123@yahoo.com nserver: ns01.homeloanon.com 219.148.3.134 nserver: ns02.homeloanon.com 219.148.3.135
Free 30 Second Mortgage Quote http://dlfjljdd2.us/ Host: 200.146.124.69
Dead on arrival http://onthesameteam.com/oe/ Host: 221.210.2.151

Master Loans

Score = 2 Master Loans http://www.masfre.info:443/ajrrg 200.146.124.53 Reporting addresses: mail-abuse@nic.br

MegaPowerPills.com

Score = 2 MegaPowerPills.com http://222.47.183.20/ http://outregood.com/ Host: 222.47.183.20 ============================ MegaPowerPills.com http://222.47.122.201/ http://www.affiliategood.com/ Name............ Alfred Bester Email........... Kitty_send@163.com Name Server.......... ns2.bizwebb.us Name Server.......... ns1.affiliategood.com
cialis soft tabs http://210.51.2.145/ct/ http://pinetka.info/ct/ Host: 210.51.2.145
http://www.originalboys.com Host: 66.115.178.26 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.boibox.com Host: 66.115.178.42 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.boys-on-line.com Host: 66.115.178.68 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.panteraboys.com Host: 66.115.178.69 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.cobraphoto.com Host: 66.115.178.218 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.teenboytime.com Host: 66.115.178.235 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.hotandspicymix.com Host: 66.115.178.238 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.cutelatinboys.com Host: 66.115.178.239 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.boyfocus.com Host: 66.115.178.241 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.firstclassguys.com Host: 66.115.178.242 Reporting addresses: abuse@national-net.com, postmaster@national-net.com ================== http://www.hmboys.com Host: 64.37.114.131 Reporting addresses: postmaster@cybercon.com, abuse@cybercon.com, abuse@level3.net ================== http://www.doggyboys.com Host: 67.18.204.134 67.18.204.134 Reporting addresses: abuse@theplanet.com ================== http://www.belamionline.com Host: 194.213.209.114 Reporting addresses: ivo@belamco.cz
DownloadItForFree : Index http://downloaditforfree.net Host: 61.156.238.85 ==================== http://sarutahikosajury.com/576b36f0135c74f16bd42c850/ Host: 219.149.64.86 Redirecting page

lifetime2

Score = 4 =================== lifetime2 http://wildgirlzz.com/l3/ Host: 221.11.133.32 ================= WELCOME TO THE BEST REALITY PORN WEBSITE 2004! http://www.ceticidetrisensory.com/659150/rpm/lifetime.html Host: 211.144.164.204 ============================= ~~~WELCOME TO HARDCORE XXX WEB PROMOTION!!! FREE LIFETIME PASSWORDS!!!~~~ http://ak2two.com/hxw/ http://www.ak2two.com/emms/preference/control.php Host: 211.144.164.207 & 218.7.120.117 ================== lifetime2 http://www.ak2two.com/rpm/lifetime.html Host: 211.144.164.207 & 218.7.120.117
Fatblast - modern way of losing weight! http://210.51.2.143/fb/ http://healthy-4-ever.info/fb/ Host: 210.51.2.143

Mystery spammer 2

This spammer tries to hide the source code of his page using javascript but the web page is coded so poorly that all I get is a blank page. Score = 1 http://gonepointone.com/ (Dead on arrival) NS1.THEHOTTESTTHINGAROUND.COM 65.182.140.151 AKAs http://midwestpropoganda.com/ http://pab10s0ft.net/opa.html
Buy Discount Prescription Drugs Online at RX-Meds.net http://internetstore-web.com Host: 202.167.235.62 Report to: jhlee@noc.koren21.net Sent via open proxy on kornet.net. Unescape encoded URL. Has fake abuse reporting address. Contact: President accountmanager@websitetheyourshopdrive.com Domain servers in listed order: NS1.BLACKTOPSTREET01.COM 202.167.235.62 NS1.BLACKTOPSTREET02.COM 200.155.191.13
Fake Circuit City giveaway Score = 3 ========= http://masterface.com/circi/?w=06&iq=h&t=i&s=k Host: 61.78.37.68 ==================== http://palkids.com/unlcir/?r=y&jo=m&z=s&su=8&pv=x&t=6&j=q Host: 61.78.37.67 ============ http://www.unlimitedfreegifts.com/cc/index.html Host: 69.6.21.31
:: Climax Cream :: http://surii.com/greatnews/home.htm Host 61.78.37.67
Dead on arrival http://www.ejrhxw322.com/free/
The 7-day Stop Smoking Program http://pressinternet.net/smokex/index.html Host 61.78.37.68

The Refinance Mortgage Specialists

The Refinance Mortgage Specialists Fake whois. Domain name morpher Score = 2 ================ http://www.mort-for-you.net/ Host: 221.11.133.32 James Pearce davidlearner007@yahoo.com Nameservers: NS1.FERNCOLE874.COM NS2.FERNCOLE874.COM ================= The Refinance Mortgage Specialists http://www.nfrj384.com Host: 221.11.133.32 Whois Server: whois.aaaq.com franz hoertz brbr11222@hotmail.com Name Server: ns1.ferncole874.com Name Server: ns2.ferncole874.com ==================== The Refinance Mortgage Specialists http://www.hrre1.com/ Host: 218.30.123.56 (bjtelecom.net)
mort-gage.com - Mortgage info. This website is for sale! http://www.mort-gage.com/ Host: 212.227.34.3 registrant-firstname: Stephen registrant-lastname: Imgrund registrant-email: idl@cpinternet.com nserver: ns1.sedoparking.com 217.160.95.94 nserver: ns2.sedoparking.com 217.160.141.42
Quality Meds at Clearance Price: Vicodin, Codeine, Valium, Xanax, Cialis, Viagra, Clonazepam, Ativan, Soma, Tramadol, Ambien, Flexiril, Ultram, Meridia, Lipitor, Zoloft http://www.rx4sure.net Host: 218.30.123.56
Silk Embroidery and Silk Scarf Shopping Center http://www.cream21st.com Host: 216.15.232.241 Min Wang Email: mwangm@hotmail.com Domain servers in listed order: NS3.WEBMINDERS.COM 216.198.199.180 NS4.WEBMINDERS.COM 216.198.199.201
OEM CD http://the-best-oem-cd.biz/OE017/ Host: 211.144.164.201 This looks a lot like the mystery spammer Name: Mather Platt Email: mather_platt@yahoo.com.au Name Server: FIRST.STBLFRLF.COM Name Server: SECOND.STBLFRLF.COM Name Server: THIRD.STBLFRLF.COM
վ http://www.aboutstamina.com Host: 202.99.172.164 Contact: Opt-Net Email Solutions Barry White (1803@ContinentalRelay.com) +61.294750699 Fax: none 9 Tanbark Circuit Suite 1803 Werrington Downs, NSW 2747 AU Name Servers: ns1.medst.biz ns2.medst.biz

2/05
3/05
4/05
5/05
6/05
7/05
8/05
9/05
9/10