» Spammers named and shamed - 2003 «

[ domain ] is a genuine site being abused
( domain ) is probably a good site that has been spoofed or compromised
{ sub-domain } the Spammer is using sub-domains to try and get past Spam filters. Can be used with those below.
variable - The sender or sub-domain can be random or one of scores used
emphasised - These in bold are the some of the worst
* domain * - These parasites appear happy to use every dirty and/or illegal trick they can. (Traced via body content)
dotcomofficial.com - These? When I Ascend I shall create a special place in Hell for these b's!!!

The rest have Spammed me - I just can't be bothered checking in depth...
Feel free to use Geektools Whois to see who is Spamming you!

ALL these below, as with the 1,000's more I recieve monthly - have been reported to FTC as they request - hopefully for prosecution. And where possible, to their ISP to kick them off the system. I've also taken to naming a few advertisers. After all, these are the ones actively supporting and encouraging Spammers, hmmm.
Just let me notice one more Fortune 500 company and I'll cream them...

Just processing, tracing and reporting this mornings logs took me almost 12 hours, which is insane. I'll typed up the rest of the notes tomorrow.I suppose I can take comfort in the fact a couple of them - spoofing scores of accounts via Bellsouth, Attbi, SWBell and such will find their accounts terminated in the morning for abuse. Maybe they will even go after the costs. Then there's the FTC for illegal drugs, identify theft etc.

For now I'll go back to forwarding them to the FTC, but I'm thinking of writing an automated filter. It will strip the details and report them as fast as they come in.

If, like me, you are willing to take a hit on false positives (friendly fire) for the likes of Hotmail, you can reduce your Spam by well over 50% just by blocking domains with those words in! Trust me, when your Spam passes 1,000 a day, as mine has a few times, you are more than willing to kill wanted email for your sanity!

Please note, I couldn't care less if some of the above have huge signs to "opt-out." Seeing as I haven't "opted-in" in the first place I shouldn't be getting Spam from them, and especially not 10-30 a day from multiple sites... As master Yoda might say, "Blocked you are!" Or more to the point either re-directed to the FTC or to the bottomless pit that is /dev/null

I could go on - and on - and on, but frankly, I don't have the time and it's as boring as reading a telephone directory, which essentially, is it. Suffice to say, without filters, my family, my young children would be looking at a December, a Christmas with no less than 15,000 fraudelent though debase adverts just to find the odd Merry Christmas from family.

Read that again, slowly and digest this. Taking my trade newsletters out of the equation, because I refuse to use a disposeble email address, due to the time our account has been active we are now sent over 5,000 Spam and UCE for every 1 e-mail from family and friends...

I added the following parasites* to my block list as those currently leeching my bandwidth, patience and time with their unwanted rubbish. Feel free to add them to your own lists, though many already appear on several RBL lists. Needless to say, the worst offenders are often owned by the same thieving leeches. Harsh comment? Imagine if they were calling collect all day, every day, running up your phonebill, disrupting your life to sell you double glazing etc etc. Oh hang on, they are...

Let's see if it reduces my UCE from the current 300-500 spam a day at the start of the month. Note that for every one below, there are 5-10 from other, often spoofed domains...   Nov 28th: Out of interest, I've got down to around 100 a day now, with zero reaching the desktop. Putting it another way, blocking the hundred worst listed below reduced my monthly UCE by up to 10,000 undesirable Spam messages a month! Hah!

(* NOTE: A few such as [ Canada.com ] are honest, even great sites being abused, but I've had to block them anyway. This applies to any ISP below I get a lot of junk from. IE [ Geocities ] themselves are not spammers...

Of all these WholesaleBandwidth, Inc. / Jays Web Service, (needless to say an American company), are absolutely the worst offenders. They have well over a hundred domains they use for this vile practice. Even worse, and illegal in many countries, Dshield and others report they repeatedly use Port scanning, presumably to find open servers they can get into to abuse...
Senderbase, powered by IronPort System reports on 1047 addresses these use - including the worst of the worst - Tekmailer and Bluerocketonline.
Putting it into perspective: on 30th November 2003...

• AOL dispatched 117.1 million email
• Hotmail dispatched 104.5 million email
• Bluerocketonline sent 72.3 million messages - presumably ALL Spam
• Tekmailer sent 62.5 million messages - presumably ALL Spam

This suggest to me that just 2 of their domains (out of over 100 they are known to use) send 135 million Spam a day, every day. More (unwanted) email than most of the biggest ISP's in the world sent in regular email. I'm guessing that if you added all the rest they are responsible for, you are talking upwards of 300 million Spam a day - almost more than global telecom giants like AT&T legally send!   Can the telephone companies truly be so desparate for the leased line fees to allow this, or so blind not to notice?   Sheesh!
If I can find a way to sue these, they are going down!


Here's the guide to brackets etc:

[ This is a genuine site being abused ]
( This is probably a good site being abused )
{ The sub-domain there use to try and get past Spam filters. Can be used with those below! }
These in italic can be random, or one of score used
These in bold are the worst
The rest have Spammed me, I just can't be bothered checking in depth...

As a rough analysis of domain names:

• "mail" occurs in 27%
• "value" occurs in 8%
• "offer" occurs in 8%
• "free" occurs in 8%

These are the some of the biggest ISP's in the world, statistically they are expected to get more spammers abusing their systems. That said, they have the most resources, the best technies and the least excuse for allowing any Spam through, so until they police themselves better they will remain on this list! Suffice to say if you use any of these, don't bother emailing me, it won't get through!


AOL
[bellsouth.net]
[compuserve.com]
[demon.co.uk] - I'm getting a ridiculous amount via this British ISP lately
[earthlink.com]
[earthlink.net]
[eudoramail.com
EXCITE
HOTMAIL
LYCOS [.com, .de etc etc] MSN
NETSCAPE
[prodigy.com]
[sprint.com]
YAHOO [.com , .co.uk, dot anything. Enough is enough!]

[keromail.com]
Keromail have the following anti-spam policy shown, but I still got enough rubbish from them to justify blocking them completely. If you read their policy - and links - it's clear that they are even more fed up than me about Spam.

ANTI-Spam POLICY; DAMAGES
Outblaze and its partners will terminate immediately any account which they believe, in their sole discretion, is transmitting or is otherwise connected to any spam or other unsolicited bulk email (recipient, dropbox, sender). In addition, because damages are often difficult to quantify, you agree to pay Outblaze liquidated damages of US$ 5.00 for each recipient’s address on spam or unsolicited bulk email transmitted from your keromail.com account.
Report Spammers

Note:
Depending on the level, I will blanket block any or all the above and indeed whole countries - like Russia. For instance, 1st June 2003 up to the 11th for Yahoo was 67 Spam, with over 200 by the end of the month.
Get your act together Yahoo!

The following parasites are repeat offenders that get bounced and deleted from the mail server as fast as they come.

NOTE: This list is getting cumbersome as the list of people I block grows weekly, as such it may include some 'friendly fire' to innocents. If you believe you shouldn't be here give me a good reason why an absolute minimum of 4 UCE's were sent to me separate days.

I reported about a thousand messages and companies to the FTC, Microsoft, Symantec, Ebay and others for fraud and/or related illegal practices before my fingers cramped for a week! I look forward to the day that the legal processes default to automatic punitive damages up to and including bankrupcy, seizure of all assets and long term jail sentences for Spammers.

Apparently the REALLY worst, the top 120 Spammers responsible for 80% of all the rubbish we get are Americans and most of them live in Boca Raton, Florida where, I have to presume, they grease corrupt politicians to allow SpamMING to be legal there...
Another reliable figure attributes 90% of Spam to 200 people, but whether these are all Americans I dunno. A few do live in the Netherlands.

Here's a one or two:

[email-info.net] / [edirectmessage.com]

To unsubscribe by postal mail, please send your request to:
999 Yamato Road, Suite 300, Boca Raton, Florida 33431
Attn: Fulfillment Department
This email message may be a recurring mailing.


Needless to say they falsely claim:
"The following message was sent to you as an opt-in subscriber to NCI Marketing. We will continue to bring you valuable offers on the products and services that interest you most. If you wish to unsubscribe please copy and paste the following link into your web browser or click here:" [ http://ct01.edirectmessage.com ... ]

Here's another:

[ forumxpress.com ]

E-mail Us at support@forumxpress.com , or write us at:
ForumXpress, 14359 Miramar Parkway B2, Miramar, FL 33027

And another...

[removalprocess.com]

Leisure Time
100 N. Biscayne Blvd 18-18, Miami, Florida 33146
These send out prize offers, presumably to test your email address. I really wouldn't answer them!

Hint:
I unconditionally bounce all email from [edirectmessage.com] and from [email-info.net] both of whom I have reported to the FTC countless times and I absolutely bounce anything from Florida!


Find out who they are with : Network Solutions WHOIS


My general rule is two offences and I'll raise an eyebrow, three strikes and they are on notice, four incidents and they are blocked forever. That includes AOL thru ZZN. Needless to say the bad ones (like domain names I can't even mention on a family site) get blocked and reported instantly. A number of these below individually have sent several a day, every day.

Many also use multiple subdomains so for these use blocks like *@*.zzn.com for fghrxgy@vampiress.zzn.com

Note, I am also seriously considering blocking all .US domains as these generate more trash than anything that bounces out of Russia and China! They REALLY want to get a grip of those 200 American Spammers responsible for 90% of the rubbish we get. They know where they live, what's the problem, it's not like the vast majority of it is even legal. Half the stuff I see from Flowgo is pirate copies of Symantec products, the 'general' Viagra, under whatever guise is illegal for several reasons, and the rest just degenerates...

[4dealsonline.com]
[8848.com]
[9gdealsnow1.com]
[alinto.com]
[alphamails.com]
[attbi.com]
[bargaintribune.com]
[best-buyz.net]
[bestoffernow.com]
[*.bigtime-deals.com]
[bluelightoffers.com]

[canada.com] - As a Canadian it saddens me to block these, but they really need to tighten up the servers!

[catalogs-galore.com]
[cheerful.com]
[chello.nl]
[clampmedia.com]
[clark-diversey.com]
[commercecheck.com]
[correoweb.com]
[cox.net]
[crescotek.com]
[dailyspectacular.com]
[dealsalert.com]
[dealsonline.com]
[deutschland.de] - Getting abused the same way Canada.com is.
[digamail.com]
[doubleoptinmailing.com]
[edailymail.com]
[electricoffers.com]
[elovefinder.com]
[emailbenefits.com]
[engineer.com]
[erols.com]
[europe.com]
[floortwo.com]
[forecan.com]
[forecastmail.com]
[freebiegazette.com]
[freemail.it]

[dazzling*.us]
[fabulous*.us]
[famous*.us]
[fantastic*.us] [friendly*.us]

I'm assuming these are the same idiots behind the "famous", "fantastic", fabulous" and "dazzling" (etc etc ) US Spams". Gits are very full of themselves, eh!
At a guess these Narcististic sponges have registed an obscene number of similar aren't-I-lovely .US domains are are burning them out with each domain blocked by SPEWS and SpamCop (etc) blacklists. Me, I'm likely to block all .US and have done...
These are just the ones I remembered to note! I could check them all with WHOIS.US, but even at a glance, Steven Little of Go Daddy pops up twice in a row. Needless to say he's from Boca Raton, Florida (and Seattle). I could give you his own email and phone numbers, but whats the point... *SIGH!*

[brightteds.us]
[brightdons.us]
[brightfranklins.us]
[dazzlingdans.us]
[dazzlingjeffreys.us] - I'm adding these to the list !
[dazzlingomars.us]
[dazzlingroberts.us]
[fabuloussandys.us]
[fabulousthomas.us]
[famousfranklins]
[famousomars.us]
[famousthomas.us]
[fantasticteds.us]
[friendlybernies.us]
[friendlyhenrys.us]
[friendlyozzies.us]
[friendlywalters.us]
[mightybernies.us]
[wittymichaels.us]
[wittyphillips.us]
[friendlymail.com] - Unsure if this and the next are related. Mebbe I'll check if I get a minute.
[friendlymail.net]

[g0ogle.us]
[goigle.us]
[googl3.us]
[googl4.us] Seeing a pattern? And that's not playing on trademarks, eh!
[googlr.us

[greatoffersclearance.com]
[*.happyoffers.net]
[hotpop.com]
[ientrymail.com] - I'm unsure about this one. It may be reprived
[intelligentoffer2.com]
[killmessenger.com]
[*.lifeserv.com]
[*.livefromtheinternetcom]
[mailcity.com]
[mailingassociation.co.uk]
[mailportal.net]
[mailserver.dk]
[meta-deals.com]
[mindspring.net]
[moscowmail.com]
[mypremiumoffers.com]
[mymail2u.biz]
[mymail2u.com]
[netaddress.com]
[netadoffers.com]
[netforward.com]
[netzero.net]

[newage-commerce.com]
[newagemailing.net]
[newageoptininc.com] Seeing another pattern?

[officialadvertisements.com]
[offrupdate.biz]
[onebox.com]
[pillsavings.biz]
[pillsavings.org]
[popstar.com]
[powerfulquotes.com]
[prestigiousresponse.com]
[process4unow.com]
[processrequest.com]
[promobin.com]
[recessionsales.com]

[reggiesrapidcity.biz]
[reggiesrapidcity.us]
[reggiesrapidresponse.biz]
[ronsfrontdoor.us]
[ronaldsgroup.us]
[ronaldsroad.biz]
[ronaldsroad.us]
[ronsrapidcity.biz]
[ronsrapidresponse.biz] - At a guess this idiot opens domains and burns them out...

[remoteoffer.com]
[removalprocess.com]
[*.ru] - (That would be everything coming from Russia)
[sbase20.com]
[sendgreatoffers.com]
[sendmedeals.com]
[sendmeoffers.com]
[simpledotcomdeals.com]
[sprint.com]
[super-bargains.net]
[*.temd.com]
[uk1.net]
[uk2.net] [unixlovers.net]
[*.us] - SORELY TEMPTED! (That would be everything coming from American .US domains)
[usermail.com]
[uymail.com]
[vendeeamerica.com]
[verizon.net]
[webmail.co.za]
[webmail2u.biz]
[webmail2u.us]
[webtopmail.com]
[webtv.net]
[wonderfulhenrys.us]
[wonderfulomars.us]
[wonderfulvinnies.us]
[zapo.net]
[*.zoanmail.com]
[zzn.com]

[aswediscussed.com]
[bluerocketonline.com] This company - WholesaleBandwidth Inc. are true leeches.
[bmw1967.com] - 12 Spam in a row from these cretins. From mortages to powered wheelchairs
[boss.com] - This isn't a spammer but a virus payload of W32.SoBig.a@mm   It may include others.

[cm02.net]
[cm03.com]
[cool-values.com]
[daily-email.com]

[dc-products.net]
[dcemail.com]
[dc-products.net]
[dotcomproducts.net] - Seeing a pattern here ?

[*.deliveroffers.com] - equalamail
[*.deliveroffers.net] - equalamail
[*.digitalriver.com]
[*.dq04.com]
[dq05.com]
[dq06.net] - These beggars are a pain!
[e-proprietary.com]
[*.email-info.net] - Day after days offers stream in. Give it a rest, eh!
[exgon.com]
[flowgo.com]
[forumxpress.com] - these are a nuisance too
[georgewbush.com] - begging letters from the president!
[getresponse.com] - used to validate your email address and them bombard you... [globetrotter.net]
[gratisoffers.net]
[greatmailrewards.com]
[juno.com] - Day after days offers stream in. Give it a rest, eh!
[loyus.com]

[michidole.com] - 12 in a row one day, a gob smacking 21 another. That's like 500 spam a month from one person. What an irritating cretin ! "I'm 'aving this no-mark!"
Going to Network Solutions Whois... just says Enom, Inc, an domain reseller.
Off to the FTC for a formal complaint then!

[mxdat.com]
[mxdat.org] - These are annoying in their frequency too
[north-wells.com]
[offertribune.com]
[ofrsvr.com]

OINLIST...
[oinlist.1path.net]
[oinlist.listnow.net]
[oinlist.oin02.net]
[oinlist.oin03.net]
[oinlist.oinow.com]
[oinlist.remoteoffer.com] - This Oin is a ruddy nuisance!

[onestepmarketing.com]
[para3ds.com]
[paynespeople.us]

[rbexpress.org]
[rb21ex.com]
[rb22ex.com]
[rb23ex.com] - Seeing a pattern here?
[rb27ex.com] - I block/bounce up 200+ a month from these clowns! 5 in the last hour...

[*.rr.com]
[thewartonstore.com]
[sure-find.com] - I think these idiots are (were) sky389. Either way, up to a dozen+ a day is taking the proverbial...
[sky389.com] - Day after days offers stream in. Give it a rest, eh!
[*.squarepath.com]
[sumertimespecials.com]
[tekmailer.com]
[ThePerfectProfession.com]
[top-brands.com]
[top-brands.net]
[winningmail.com] - I suspect these have crossed the line legally...
[winningmail.net]
[wodniak.com] - InvestorInsights - These beggers are REALLY tenacious




Note - As a parent I have zero tolerance for the sort of mail I get from "others". To stop potential abuse I am not putting these on the page...

[email.com]
[mail.com]
[mailsunlimited.com]
[your-emaildelivery.com]
[yourmailsource.com]

YourMailSource is a leading provider of email fulfillment services for companies with email lists. By outsourcing your email delivery and list management to YourMailSource, you can focus on your core competencies, while generating incremental revenue opportunities from email marketing. You provide us with your email list and we provide you with revenues.

Strikes out comment, this being a family site and all.

Notes:
Generally, the level of repeat Spam from the above is too high to be coincidental. Notice there all include "mail" in the url. I might break this down further later.