This idiot encrypts his spam so well that all the viewer sees is a blank page. Always hosted by MCI. MCI claims that they knowingly host hackers, spammers, kiddy porn sites, fake drug sites and warez sites because they support free speech.
Score = 55
==============
http://goldenfury.com
Host: 63.82.96.35
Reporting addresses:
abuse@mci.com
Registrant:
Software Factory Solutions
contact@thehottestthingaround.com
Domain servers in listed order:
NS1.THEHOTTESTTHINGAROUND.COM 65.182.140.151
Host: 65.182.140.151
Reporting addresses:
abuse@xo.com
abuse@mci.com
================
Other domains
0NTHEBA11S0FTWARE.COM
18ANDOLDEROFFERS.COM
1UXYS01UT10NS.COM
A11THES0FTWAREY0UNEED.COM
ADULTONLYOFFERS.COM
ADULTSUBSCRIPTIONOFFERS.COM
ALLAROUNDTHINGS.COM
ALLTHEMEDSYOUNEED.COM
ALWAYSIMPORTANT.COM
AMAZINGPHARMACYSAVINGS.COM
B1C0RP1US.COM
BACKPOST.BIZ
BEHINDITALLEXCHANGE.COM
BIGBUCKS4DRIVING.COM
BIGCAPABILITIES.COM
BIGCASH4DRIVING.COM
BLANKTRADE.COM
BLAZEBOUNCE.COM
BREAKTHROUGHVISIONARIES.COM
BUCKS4DRIVING.COM
BUYANDSAVEONMEDS.COM
BUYMEDSONLINEANDSAVE.COM
C0MP1ETE1S01UT10NS.COM
C0MP1ETETARGET1NG.COM
CHEAPDRUGS4U.NET
CLICKANDSAVEONMEDS.COM
CREATIONPLACED.COM
CREATIVECRAFTANDMORE.COM
CREATIVEFACESMORE.COM
CROSSINTEREST.COM
CRUISECARS4CASH.COM
DATALINKEXCHANGE.COM
DEALSFOR18ANDUP.COM
DIGITALPROPOGANDA.COM
DISCOUNTEDDRUGSONLINE.NET
DISCOUNTEDMEDSONLINE.COM
DREAMCONTROLLER.COM
DREAMWAKING.COM
DRIVE4BIGBUCKS.COM
DRIVE4INCOME.COM
DRIVE4PAYCHECKS.COM
DRIVEMAKINGMONEY.COM
E11TEPR0DUCTSSPEC1A11YF0RY0U.COM
EARNMONEYWHILEDRIVING.COM
EASTCOASTLIQUIDATIONCENTER.COM
EASYMONEYDRIVING.COM
EMA11SPYPR0GRAM.COM
FASTCASH4DRIVING.COM
FREESERVING.COM
GETPRESCRITIONMEDSONSALE.COM
GETRICHDRIVING.COM
GETTH1SS0FTWAREN0W.COM
GETYOURMEDSONLINEHERE.COM
GETYOURPRESCRIPTIONSONLINE.COM
GOLDENEXPERT.COM
GOLDENFURY.COM
GOLDENVIRTUAL.COM
GONEPOINTONE.COM
GREATDEALSONADULTSITES.COM
GREATPRICES4PILLS.COM
GROUPDRUGSONLINE.COM
H0TAMAZ1NGPR0GRAMS.COM
H0TANDNEWPR0GRAMS.COM
HOTADULTDEALS.COM
HOTMATURESITES.COM
IMPROMPT.COM
INCOME4DRIVING.COM
INSTALLEREXCHANGE.COM
INTERESTOR.COM
INTERESTSAVVY.COM
KICKHOSTING.COM
LARIMORECREATIVE.COM
LOCKINGPOINTONE.COM
M0N1T0RWHATTHEYD0.COM
MAK1NGTH1GSHAPPENF0RY0U.COM
MAKEMONEY4DRIVING.COM
MAKEREALCASHDRIVING.COM
MAKESERIOUSMONEYDRIVING.COM
MAKINGMORECREATIVES.COM
MALLPACKS.COM
MANDARINEFFECTS.COM
MATUREWEBSITEDEALS.COM
MIDWESTPROPOGANDA.COM
MIDWESTPROPOGANDALAND.COM
MONEYSAVINGDRUGSITE.COM
NAMEBRANDPILLSDISCOUNTED.COM
NETMANDARIN.COM
NETWORKVISIONARIES.COM
NEWEASTCOAST.COM
NEWEDGECORP.COM
NEWEDGEZONE.COM
NEWMEDIAEDGE.COM
ONLINEPHARMACYSUPERSTORE.COM
OPENCONTROLLER.COM
OPENFACES.COM
PAB10S0FT.NET
PAYCHECKFORDRIVING.COM
PHARMACYSAVINGS4U.COM
PINPOINTMONEY.COM
PROCONTROLLERS.COM
PROFITWHENDRIVING.COM
PROMPTHANDLINGTIPS.COM
PROMPTPLUS.COM
PROPOGANDALAB.COM
PURCHASEYOURPILLSONLINE.COM
QUICKPACED.COM
R1GHTMAPS.COM
RAPIDPROMPT.COM
REWARDS4DRIVING.COM
S0FTWAREC0MPET1T10N.COM
SATISFYINGFORPROFITS.COM
SATISFYINGRAPHICS.COM
SAVEONYOURPRESCRIPTIONSONLINE.COM
SECRET1YKN0WEVERYTH1NG.COM
SEEMORECREATIVE.COM
SERIOUSMONEYPAID2DRIVE.COM
SERVINGMAIL.COM
SERVINGONES.COM
SITEFARMS.COM
STUFFYOUACTUALLYCAREABOUT.COM
SUPPLYPALACE.COM
THEBESTS0FTWAREY0UCANBUY.COM
THEHOTTESTTHINGAROUND.COM
THENEWINNOVATIVEEDGE.COM
THESTOPPOINT.COM
THINGSAROUND.COM
TRADEPOINTONE.COM
ULTIMATEADULTOFFERS.COM
UN1QUE0FFERS0N11NE.COM
VERYSATISFYING.COM
VISIONARIESLEADERSHIP.COM
WAKINGENDS.COM
WAKINGS.COM
WESTCOASTDESICIONMAKING.COM
XRTHOSTING.COM
Y0UCANW1NW1THTH1S.COM
YESITALLCANBEDONE.COM
YOURPILLFACTORYOUTLET.COM
ZSXCONTROLLER.COM
ZXRMAIL.COM
Barnu Rapatska / TotalPharmacy / WELCOME! Cheating House Wife Services / Date Lonely Wives
discountRxweb.com - Order Cialis Online and Save! lt;Secured Billing - Discreetly Shipped / How To Be A Red Hot Persuasion Wizard... In 20 Days Or Less!
Score = 24
This spammer uses web bugs and tagged URLs. Opening his spam with HTML & images enabled lets him know that your email address is valid. Following the links does too. Controls his own name servers. Sends from open proxies on trojaned computers. Changes domain name for redirecting pathes at least once a day. Fake whois data.
Fake names: CHAS BUSHNELL, Bob Cooper, Barnu Rapatska, zopa cathlina, Stacey Gerstien, WebLove, Vadim Gablian, HomeViz, mathew barberstantonly, base advertising jump inc, lifetime, James Sweet, vashumat, James corona, mike mC Garythomason, bishopletsy trierson
Fake emails: chas@blazemail.com, bcooper@allsaintsfan.com, barnu@barnurapatska.com, support@emarketingdeals.com, admin@chillblow.com, infohelpteam@yahoo.com, admin@wifesmile.com, abbie@fusemail.com, joker2newdomains@yahoo.com, nameserver2004@yahoo.com
======================
Host: 221.11.133.10
Reporting addresses:
abuse@cnc-noc.net
Name : Charles Messer
Email : messer@draac.com
Address : 416 W 8th St
Zipcode : 31833
Nation : US
Tel : +1.7066439924
Fax :
::Name Servers::
ns1.anwoo.com
ns1.mynameserver.ca
ns1.bomofo.com
ns1.epoboy.com
hotcelebsnaked1.com
Host: 218.7.120.81
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
Name : Barnu Rapatska
Email : support@emarketingdeals.com
::Name Servers::
ns1.dns-passthrough.com
ns2.dns-passthrough.com
ns3.dns-passthrough.com
ns4.dns-passthrough.com
===========
http://tainaijh.com/vEsP...
Host: 221.11.133.39 (chinanet)
================
http://harperety.com/T84a...
Host: 222.122.65.3
Reporting addresses:
abuse@kornet.net
==============
http://harlansmithtyi.net/WdT7...
Host: 218.104.167.68 (chinanet)
- Redirects to
http://dns-redirects2.com/harlansmithtyi.net/WdT7...
Host: 202.73.247.21
Reporting addresses:
abuse@hkabc.net
- Redirects to
http://hotfreesites2.com/sites/sexbookmp/
==============
http://jhardyert.net/Tb4B6...
http://xhardingryu.com/6h5...
221.10.254.190 (chinanet)
222.36.41.170 (chinatietong.com)
==================
Brand New Photos from Paris Hilton Hacked Private Diary! Nude photos of Paris Hilton and her kissing with other girl!
http://balmonthj.com/KnXOrOMVTJIN2wl7VdTlXcoiE/
Rotating IPs:
Host: 218.7.120.81
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
Host: 222.51.91.226 (chinatietong.com)
- Redirects to
http://hotcelebsnaked1.com/sites/paris/index.html
=================
http://mccleesecv.net/RE6Fo2Ok0f3JzUM4vdqa2OzhY/L.html
Host: 218.104.167.68
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
===========
http://mariagorodnitskyer.net/c42weMqV5ORnhyxXnKIz4HLZm/4ifrO7uID.html
Host: 218.104.167.68
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
http://levi-civitawe.com/JiRG...
Host: 222.51.91.227
======================
http://schubarttr.com/SaWYGBZTGLiM6jleS5w13oIIW/DgMHIRcDDSIRBwwnGEkJBxI.htm
Rotating IPs
Host: 221.11.133.10
Reporting addresses:
abuse@chinanet.cn.net
abuse@cnc-noc.net
Host: 222.51.91.226
Report To: postmaster@chinatietong.com, crnet_mgr@chinatietong.com, crnet_tec@chinatietong.com
======================
http://ignatenkoty.com/Ex62...
Host: 221.10.254.172 (cnc-noc.net)
====================
http://vauclusewe.com/FEZMwW9dJPoBvi4LAX6jlmqLw/
Host: 222.51.91.226
Report To: postmaster@chinatietong.com, crnet_mgr@chinatietong.com, crnet_tec@chinatietong.com
=============
http://askaniacx.com/ND578sn3agvAf9IZE5oKWVGFu/
Host: 221.3.132.35 :
Report to: abuse@cnc-noc.net
============
http://serrabn.net/XahC0GkF4haS7IKm35McCOjLf/
Host: 218.7.120.82
Report to: abuse@cnc-noc.net
==============
http://mcdaviddf.com/X2WmluN2db5NKVDe02V0xSG5A/
Rotating hosts
Host 1: 222.47.183.61
Reporting addresses:
postmaster@chinatietong.com,
crnet_mgr@chinatietong.com,
crnet_tec@chinatietong.com
Host 2: 202.73.255.21
Reporting addresses: abuse@hkabc.net
=====================
http://likhachevjk.com/RWX7b6VtuUs9ZtuaVCiaH0Sru/
- Redirects to
http://dns-passthrough2.com/likhachevjk.com/RWX7b6VtuUs9ZtuaVCiaH0Sru/
Host: 221.11.137.37
Reporting addresses:
abuse@cnc-noc.net
- Redirects to
free sex guide, how to have better sex than a porno star at the paris hilton.
http://downloaditforfree.net/sites/sexbookmp/
================
http://citronsd.net/TtAvB4cxG8jGMKN5ag0fMgNni/
Host: 222.51.91.227 (chinatietong.com)
======================
http://polinofg.com/iA2CwgLNgst8t8hIwfnfIXlbl/
Host: 222.51.91.227
Reporting addresses:
postmaster@chinatietong.com,
crnet_mgr@chinatietong.com,
crnet_tec@chinatietong.com
- Redirects to
http://dns-passthrough2.com/polinofg.com/iA2CwgLNgst8t8hIwfnfIXlbl/
222.122.65.3
Reporting addresses:
abuse@kornet.net
Redirects to:
Brand New Photos from Paris Hilton Hacked Private Diary! Nude photos of Paris Hilton and her kissing with other girl!
http://celebsexposed.net/sites/paris/index.html
Host: 221.11.133.10
================
http://ramsdengh.com/8MCaaTksLoMuqJANa9vpd8fNW/
Host: 222.51.91.227
- Redirects to
http://dns-passthrough2.com/ramsdengh.com/8MCaaTksLoMuqJANa9vpd8fNW/
Host: 222.122.65.3
Reporting addresses:
abuse@kornet.net
- Redirects to
http://freehostedpages.net/sites/pharmacy/
221.10.201.175
Reporting addresses:
abuse@cnc-noc.net
=================
http://utrawe.com/5BiMmtCPUfPkUb9T08Z1AkOgP/w.html
Host: 221.11.133.10
- Redirects to:
http://dns-passthrough.com/utrawe.com/5BiMmtCPUfPkUb9T08Z1AkOgP/
Host: 221.11.133.10
Reporting addresses:
abuse@cnc-noc.net
- Redirects to
Online Dating Service - Personals with Live Web Cam Chat
http://freehostedpages.net/sites/adultdating/
Host: 221.210.2.149
Reporting addresses:
abuse@cnc-noc.net
=================
http://ivanbellafd.com/PSxu...
Host: 218.7.112.243
Report to: abuse@cnc-noc.net
- Redirects to
http://dns-passthrough2.com/dns-forward2.com/ivanbellafd.com/PSxu...
Host: 202.73.255.21
Reporting addresses:
abuse@hkabc.net
postmaster@hkabc.net
=============
http://suyumbikawe.com/zKNaEOtoIcZPFZTOMlqADnH8E/
Host: 61.156.239.214
Reporting addresses:
postmaster@pub.sd.cninfo.net,
abuse@cnc-noc.net,
postmaster@sd.cninfo.net,
support@pub.sd.cninfo.net,
ct-abuse@abuse.sprint.net,
security@pub.sd.cninfo.net
- Redirects to http://dns-forward2.com/suyumbikawe.com/zKNaEOtoIcZPFZTOMlqADnH8e/
Host: 222.47.183.61
Reporting addresses:
postmaster@chinatietong.com
crnet_mgr@chinatietong.com
crnet_tec@chinatietong.com
Whois:
Bob Cooper
Email: bcooper@allsaintsfan.com
Domain servers in listed order:
NS1.DNS-FORWARD.COM
NS2.DNS-FORWARD.COM
NS3.DNS-FORWARD.COM
NS4.DNS-FORWARD.COM
===============
Other domains
adtelegramiaguy.net
aoyagirt.com
atalaer.net
bestsexpossible.com
coolsites1.com
dfghkirkdouglasb.com
ditagakidf.net
dfsachshgf.com
dgvangaalgj.net
dns-base2.comdns-click2.comdns-forward2.com
dtgiyoiupio.com
emarketingdeals.com
fghkamisaibarahgj.net
fghkiril-metodighk.net
fhhfazaleafhhf.com
fhrhoadsfh.net
freehostedpages.net
gfllapassetbjk.com
gfrosajkh.net
ghglasenappiajk.com
ghkmicheloryjhk.com
harperety.com
hgkliaoningjlh.net
hgjsterpinnbb.com
kakkuritr.com
kjlrykhlova.com
hkdatolhk.com
jhlyurikoj.com
jhlyurikoj.com
kkjribudweiskj.net
ktadamorij.net
levi-civitawe.com
lpeneleosgh.com
mariagorodnitskyer.net
mccleesecv.net
meds4you154342.com
nsojirisfsf.com
odsfskargfh.com
qkumaslyakov.net
ramsdengh.com
schubarttr.com
suyumbikawe.com
utrawe.com
vauclusewe.com
vsfietorissf.com
yoshiyaghk.net
60 Second Mortgage Quote Form
Score = 21
============
60 Second Mortgage Quote Form
http://www.me0rt.com/index2.php
refid=mal
IP: 218.7.112.235 (chinanet)
============
60 Second Mortgage Quote Form
http://mrldss.com
refid=lix
IP: 218.7.112.235 (chinanet)
=================
60 Second Mortgage Quote Form
http://www.fasterdaz.com/x/loan2.php
Host: 202.99.172.149
Reporting addresses:
abuse@chinanet.cn.net,
abuse@cnc-noc.net
================
60 Second Mortgage Quote Form
http://www.cheaplenders.net refid=ph420
http://www.easy-lending.com
http://www.lend-one.net/ refid=ph420
218.7.112.235 (chinanet)
===============
http://www.fastlenders.net/index2.php
refid=mal
Host: 218.7.112.235
Report to: abuse@cnc-noc.net
====================
http://mrratenow.com/x/loan.php
id=wai
Host: 222.47.183.66 (chinatietong.com)
Reporting addresses:
postmaster@chinatietong.com
crnet_mgr@chinatietong.com
crnet_tec@chinatietong.com
===============
http://12mtgnow.com/x/loan.php
id=jrwriter
222.47.183.67
Reporting addresses:
postmaster@chinatietong.com,
crnet_mgr@chinatietong.com,
crnet_tec@chinatietong.com
owner: Pat Lieberman
email: patlieberman@yandex.ru
nserver: ns1.carr821.com 222.47.183.67
nserver: ns2.carr821.com 222.47.183.67
=================
60 Second Mortgage Quote Form
http://mrlend123.com/x/loan2.php
id=wai
Host: 222.47.183.57
organization: Jerry Co.
owner: Jerry Goodman
email: jerrygoodman@yandex.ru
nserver: ns1.carr821.com 222.47.183.67
nserver: ns2.carr821.com 222.47.183.67
==================
60 Second Mortgage Quote Form
http://mrratenow.com/x/loan2.php
id=wai
Host: 222.47.183.57
Other domains:
12mtgnow.com
cheaplenders.net
easy-lending.com
lend-one.net
fasterdaz.com
fastlenders.net
h0mel0an.net
me0rt.com
mrldss.com
mrlend123.com
mrratenow.com
nowratez.com
Mystery spammer 1 / OEM CD / Replikabazaar
This spammer hardly ever sents a spam with a working URL. Usually warez. Uses a diffrent fake ID to register every domain and creates at least three domains per day.
Score = 17
==========================
http://antidnibm.com/fdjgdfklg?3lbxblashegfjt3dfjldg
222.51.98.172
Reporting addresses:
postmaster@chinatietong.com, crnet_mgr@chinatietong.com,
crnet_tec@chinatietong.com
Contact:
Mahmutov, Ibragim
ibragimmahmutovv@yahoo.com
Domain servers in listed order:
DOG.CCPATONCEJK.BIZ 202.99.172.145
TSURT.CCPATONCEJK.BIZ 200.149.11.62
===============
http://hodfulaglbn.com/vp/index.php
IP: 222.51.98.172
=====
Viagra Professional Tabs
http://greatsekshealth.info/vp/index.php
IP: 82.114.48.84
Reporting addresses:
abuse@tautel.ru, postmaster@tautel.ru
========
http://coderlbgfc.com/
http://stockcenter.coderlbgfc.com/fdlkhd?hqdgdyb4vmoqr_hdkfglf
Rotating IPs:
200.149.11.62 (Brazil),
218.104.167.77 (chinanet)
Name : Constance Edwards
Email : edwards@mail333.com
::Name Servers::
dog.ccpatoncejk.biz
tsurt.ccpatoncejk.biz
===========
http://nymphabmdej.com/000
Host: 222.51.98.172 (chinatietong.com)
===========
http://guacofknhb.com/000/
http://lettmdeli.com/
http://zinciccgcag.com/
Rotating IPs:
82.114.48.67
Reporting addresses:
abuse@tautel.ru, postmaster@tautel.ru
218.7.112.241
Report to: abuse@cnc-noc.net, abuse@chinanet.cn.net
==============
OEM CD
http://lettmdeli.com/OD043/
Host: 200.245.122.203
Report to: abuse@embratel.net.br
Name : Constance Edwards
Email : edwards@mail333.com
::Name Servers::
dog.ccpatoncejk.biz
tsurt.ccpatoncejk.biz
================
http://reefyaenhi.com/000/
Rotating IPs:
Host: 218.7.112.241
Report to: abuse@cnc-noc.net
Host: 200.245.122.204
Report to: abuse@embratel.net.br
======================
http://nanpiehdecd.com/000/
http://sabrahdilj.com/000/
Rotating IPs:
Host: 200.149.11.62
Reporting addresses:
mail-abuse@nic.br
Host: 218.7.112.241
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
==================
http://dnfuriljl.com/
http://dnsequentaf.com/000/
http://kgmortaryfc.com/000/
http://tnghasbd.com/000/
Rotating IPs
Host: 82.114.48.64
Reporting addresses: abuse@tautel.ru
Host: 218.7.112.241
Reporting addresses: abuse@cnc-noc.net
==========================
OEM CD
http://bestoemz.com/OE017/
Host: 218.7.112.241
Reporting addresses:
abuse@cnc-noc.net
============
OEM CD
http://kaquipperlk.com/OD043/
http://222.47.183.56/OD043/
-Whois:
Name : Constance Edwards
Email : edwards@mail333.com
::Name Servers::
first.gfkorwamj.com
second.gfkorwamj.com
third.gfkorwamj.com
=========
Other domains:
61.156.239.204
134.86.254.40
195.214.239.99
213.59.0.84
219.148.3.151
219.153.14.35
222.47.183.53
222.47.183.56
222.51.98.239
clmajkhged.com
enchicokk.com
fdrindck.com
geunperchji.ws
guacofknhb.com
hdbacchusjj.com
hfchaymb.com
hgarcaj.ws
hndnwzp.biz
jjrelatumjl.com
karevivemj.com
klmlenhagi.com
lettmdeli.com
mgidbnghdh.com
mtsseyzal.info
nanpiehdecd.com
nymphabmdej.co
pvsbvkj.info
qfasyiqe.Da.ru
reefyaenhi.com
sabrahdilj.com
vcbwehva.biz
xpbestdealz.biz
XVNKAPWNA.INFO
zinciccgcag.com
Welcome to Online Replica Store.....
Simply Rx
Score = 15
==============
http://medrxcheap.net
Host: 218.7.120.70
Reporting addresses:
abuse@cnc-noc.net, abuse@chinanet.cn.net
- Redirects to
Simply Rx
http://www.simply-rx.net
Host: 200.155.191.26
Reporting addresses:
mail-abuse@nic.br
=================
http://www.jaqo.com/p/jpeg/
Host: 221.10.201.160
=====================
http://www.lekl.com/p/jpeg/
Host: 221.10.201.160
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
- Redirects to:
Simply Rx
http://www.simply-rx.net/
200.155.191.26
Reporting addresses:
mail-abuse@nic.br
================
http://www.h67.net/p/jpeg/
Host: 221.10.201.160, 221.10.201.180
Report to: abuse@cnc-noc.net
Redirects to:
Simply Rx
http://www.simply-rx.net/
Host: 221.10.201.180
Reporting addresses:
abuse@cnc-noc.net
=
http://www.h67.net redirects to
http://www.online-replica-store.com
Host: 221.10.201.180
Reporting addresses:
abuse@cnc-noc.net
===============
- Redirects to:
Simply Rx
http://www.simply-rx.net/
200.155.191.26
Reporting addresses:
mail-abuse@nic.br
=================
http://oi6.net/rx/dp22/at.ldjd
http://www.oi6.net/m.php
Host: 218.7.120.70
abuse@cnc-noc.net
owner: Roelf Van der Brug
email: admin@taiwanmedialtd.com
nserver: ns1.dnsm.net 218.7.120.70
nserver: ns2.dnsm.net 218.7.120.70
=====================
http://medforutoday.com
Name : Richard Graham
Email : domainalias@yahoo.com
Address : 31911 Pico
Zipcode : 92629
Nation : US
Tel : 877-895-7044
Fax :
::Name Servers::
ns1.dnsm.net
ns2.dnsm.net
============
http://y73.net
- Redirects to: http://www.online-replica-store.com/
http://www.simply-rx.net/
Host: 218.7.120.70
abuse@cnc-noc.net
=============
http://p1k.net/
Host: 221.10.201.180
Reporting addresses:
abuse@cnc-noc.net
- Redirects to
Welcome to Online Replica Store.....
http://www.online-replica-store.com/
221.10.201.180
Reporting addresses:
abuse@cnc-noc.net
==================
http://medsforunow.net
Host 221.10.201.180
Reporting addresses:
abuse@cnc-noc.net
Fake Name : Richard Graham
Email : domainalias@yahoo.com
::Name Servers::
ns1.dnsm.net
ns2.dnsm.net
- Redirects to
Simply Rx
http://www.simply-rx.net
Host: 221.10.201.180
Reporting addresses:
abuse@cnc-noc.net
================
http://iknd.com/p/92771/
Host: 221.10.201.180
Reporting addresses:
abuse@cnc-noc.net
-
http://iknd.com redirects to
Welcome to Online Replica Store.....
http://www.online-replica-store.com/
-
http://iknd.com/p/
Simply Rx
http://www.simply-rx.net/
=================
http://ibtz.com/ph/92771/
Host: 221.10.201.180
Reporting addresses:
abuse@cnc-noc.net
owner: Roelf Van der Brug
email: admin@taiwanmedialtd.com
nserver: ns1.dnsm.net 222.77.178.190
nserver: ns2.dnsm.net 221.10.201.180
-
http://ibtz.com/ph/ redirects to
Simply Rx
http://www.simply-rx.net/
Host: 200.149.11.35
Reporting addresses:
mail-abuse@nic.br
owner: Roelf Van der Brug
email: admin@taiwanmedialtd.com
nserver: rx1.dns889.com 200.105.34.68
nserver: rx2.dns889.com 200.105.34.68
nserver: rx3.dns889.com 200.155.191.2
nserver: rx4.dns889.com 200.155.191.2
For 200.155.191.2,
Reporting addresses:
mail-abuse@nic.br
-
http://ibtz.com redirects to
Welcome to Online Replica Store.....
http://www.online-replica-store.com/
Host: 222.77.178.190
Reporting addresses:
abuse@fjdcb.fz.fj.cn
====================
http://www.rrox.com/p/
222.77.178.190
abuse@fjdcb.fz.fj.cn
- Redirects to
Simply Rx
http://www.simply-rx.net/
Host: 200.149.11.35
Reporting addresses:
mail-abuse@nic.br
-
http://www.rrox.com/
- Redirects to
Welcome to Online Replica Store.....
http://www.online-replica-store.com/
Host: 222.77.185.132
Reporting addresses:
abuse@fjdcb.fz.fj.cn
==============
Welcome to Online Replica Store.....
http://www.online-replica-store.com/
Host: 218.7.120.70
Reporting addresses:
abuse@cnc-noc.net
============
Simply Rx
http://www.simply-rx.net/
=====================
Welcome to Online Replica Store.....
http://www.online-replica-store.com/
=====================
Other domains:
0rdernow.com
h67.net
hycod.com/
ibtz.com
iknd.com
jaqo.com
lekl.com
medforutoday.com
medrxcheap.net
mustbegood.info
online-replica-store.com
phents.com
qwild.com
r0lex.net
rrox.com
simply-rx.net
t0w.net
tlme.net
vaigra.net
xenl.com
pillBox
The Mortgage Source
Sent via open proxy on a trojaned computer. Web site hosted on criminal tolerant ISP in China. Just the kind of people you want to give your money to.
Score = 9
===================
The Mortgage Source
http://trakship.info/mg/1/
Host: 211.144.147.21
Reporting addresses:
abuse@publicf.bta.net.cn
==============
pillBox
http://appreciatrust.info/
http://www.conbizdee.info
http://deliveredin9days.info
http://enterthekem1st.info
http://goodsupportline.info
http://trakship.info
IP: 211.144.147.21 (srit.com.cn)
=================
pillBox
http://caclickbutton.info
Host: 211.144.147.21
Name: Margaret Beans
Organization: Beans Domains
Tech Email:whoisofdomain@yahoo.ca
Name Server:NS3.DNSRUGGED.INFO
Name Server:NS4.DNSRUGGED.INFO
Known criminal. Sends from zombie network of computers infected with trojan bareing viruses. Even though he is a known felon, MCI hosts hundreds of his domains.
Fake Names: Lee Dong, Runny Kon, tuj kow, GoldToe International Inc, mario netka, Uno More, uru mohit, kubik magi, vissbuus labi, glavnyj nachalnik, tiiri konkretno, teatris moskovskij
Fake emails: leedong@lycos.com, resell@pisem.net, tukow@mail333.com, pdlweb@YAHOO.COM, marionet@mail15.com, urururu@pisem.net, magijaa@mail333.com, vissbuus@pisem.net, huryt@mail15.com, nuovob@pochta.ru, obnovka@mail333.com
Score = 6
=============
BrowseTheMeds
http://www.abort2morrow.com/
http://www.aider5nearness.com/
Host 202.99.172.168
abuse@cnc-noc.net
============
http://affordably1pitch.com
Host: 221.5.250.80
abuse@cnc-noc.net
==============
http://cool2savemoney.com
Host: 218.7.112.235
Report to: abuse@cnc-noc.net
Fake Name : Lee Dong
Email : leedong@lycos.com
::Name Servers::
ns2.wecheaphosting.com
ns5.wecheaphosting.com
ns05.wecheaphosting.com
===================
BrowseTheMeds
http://www.tva2handsaw.com
Host: 221.5.250.80 (cnc-noc.net)
=================
BrowseTheMeds
http://anxiety5liz.com
Host: 202.73.255.2
Reporting addresses:
abuse@hkabc.net,
postmaster@hkabc.net
owner: Runny Kon
email: resell@pisem.net
title: vadino
address: Valdemara 3-6
city: Riga
postal-code: LV 1021
country: LV
nserver: ns1.www1212.com
nserver: ns1.perfectons.com
==============
Other domains
abort2morrow.com
aider5nearness.com
affordably1pitch.com
affordably1pitch.com
anxiety5liz.com
cool2savemoney.com
glimpse3rework.com
homonym6viewer.com/
tva2handsaw.com
The American Refinance Mortgage Specialist
Score = 4
================
The American Refinance Mortgage Specialist
http://www.1ndeed.com
IP: 221.208.208.4
Reporting addresses:
abuse@chinanet.cn.net, abuse@cnc-noc.net
Fake name: jeff jackson feffjackson12345@yahoo.com
Name Servers:
ns1.thegeeeee.biz
ns2.thegeeeee.biz
===============
The American Refinance Mortgage Specialist
http://www.1-m-n.com
Host: 202.99.172.175
==================
The American Refinance Mortgage Specialist
http://www.now-and-forever.net
Host: 222.47.183.57
owner: Keith Pearce
email: kpearce37@yahoo.com
nserver: ns1.educate-2.com
nserver: ns2.educate-2.com
==================
Other domains:
1-m-n.com
mort-today.net
now-and-forever.net
ok-mrg-now.net
Dead on arrival
http://jkseavyja.com
Viagra Professional Tabs
Score = 2
Viagra Professional Tabs
http://yourironhealth.info/vp/index.php
Host: 219.148.3.140
Name: Sergey Shvetsov
Tech Organization:Dexall Biomedical Labs, Inc.
Tech Email:nowicki_48@hotmail.com
Name Server:NS2.YOURIRONHEALTH.INFO
Name Server:NS1.YOURIRONHEALTH.INFO
Phishing for Barclays Bank customers
Score = 3
Uses google form in email, escape charactors and other obfuscations to mask the first URL in Russia which redirects to another one in China.
===================
http://996jrot.Da.ru
Host: 213.59.0.84
=================
http://wmznskg.Da.ru/
Host: 213.59.0.84
abuse@rtcomm.ru
- redirects to
http://oemcd.shop_________________8xc5bdssr58f59q.jixeronicmi.com/
-
http://jixeronicmi.com
Host: 222.47.183.53
Reporting addresses:
postmaster@chinatietong.com,
crnet_mgr@chinatietong.com,
crnet_tec@chinatietong.com
=============
Phishing scam
http://nu4gmtg.DA.RU/
Host: 213.59.0.84
Reporting Address: abuse@rtcomm.ru
- Redirects to
http://barclays-co-uk---------------q.mail333.com/
Host: 81.211.64.117
Reporting addresses:
abuse@sovintel.ru
http://mail333.com/
Host: 81.211.64.20
Reporting addresses:
abuse@sovintel.ru
============
Other domains
m1ko7cu.dA.RU
barclays-co-uk---------------q.mail15.com
Dead on arrival, warez, sent from zombie.
http://ggbullitjk.com/
Host: 200.149.11.64
Contact:
Zhamelgo, Alexandr alexzhamelgo@mail.ru
Domain servers in listed order:
FIRST.DFNWLNWEB.BIZ 222.47.183.53
SECOND.DFNWLNWEB.BIZ 218.7.112.247
THIRD.DFNWLNWEB.BIZ 200.149.11.64
Rockwell Data Group - The Power Behind Global Internet Exposure
http://www.rockwelldatagroup.com/
Host 213.171.218.48 abuse@fasthosts.co.uk
Contact:
Franksi, Norma
speedboy1@hotmail.co.uk
worldwebco@freeuk.com
Domain servers in listed order:
NS2.LIVEDNS.CO.UK
NS1.LIVEDNS.CO.UK
Fake names: Won Fei Hong
Fake emails: wonmeister@gmail.com, mail@playerhaters.com, mail@playerhaters.com
Score = 2
===================
SaveBIGPharmacy.com
http://aff0rdablemedsareus.net
http://eggsareyellow.com/bam/
Host: 211.206.123.152
Reporting addresses:
abuse@hanaro.com
=================
Other domains, IPs and name servers:
211.52.118.25
211.206.123.152
NS1.45CALDOMAINREVOVLER.BIZ
NS2.45CALDOMAINREVOVLER.BIZ
NS1.RESOLVEMYDOMAINSBITCH.BIZ
NS2.RESOLVEMYDOMAINSBITCH.BIZ
NS1.ROST874.COM
NS3.ROST874.COM
http://211.52.118.25/bam
chumpspayretail.net
highlydemandedmedz.biz
Mystory spammer #3
Yet another spammer that tries to hide his source code but mangles it s badly that all we see is a
blank page.
Score = 2
============
http://bbb999.biz/h
Host: 219.147.192.94
Name: Kathy Johnson
Contact Email: kathybugger@hotmail.com
Name Server: NS4.MAIL18.BIZ
Name Server: NS2.BEST-GIFTS.BIZ
.. :: Soft 4 Download :: ..http://www.download-store.net/http://www.soft-magazine.comtime4homebiz.com
http://www.time4homebiz.com
Host: 69.63.143.131
Reporting address: support@edgewebhosting.net
Contact:
Susan Mauri
sue.mauri@verizon.net
ns1.wfh-hosting.com
ns2.wfh-hosting.com