| Named Spammers of 2004 |
|---|
NOTES:
This is my little hall of fame and shame.
If *you* are listed here, you HAVE spammed me - and no, I didn't opt in.
As a bare minimum these have been reported to the FTC.
In fact it is highly likely I don't even see it anymore, many will be automatically forwarded to uce@ftc.gov!
These will also have been reported to the host and, likely, booted off the network.
These may have been reported to the Registrar
Depending on content I also won't hesitate to report some Spammers to local and regional enforcement agencies, Interpol and the FBI.
At some point shortly I will split this page up into Spoofed and Not spoofed. If it's a real address sending, it's likely some bulk e-mailer that needs to get me off the books. I need to sort a system where those registered with the DMA (et al) are sorted from the rest as a third group. There's no easy way to do this so it will like this:
Spam / UBE / UCE from a direct mailer that's appears trustworthy and uses a reliable address and system.
Spam from a reliable address, but a company I personally wouldn't trust as far as I can toss a caber.
The rest...
*Holds red rag to bull*
Note to Spammers: Yes, I know you visit...
I have my own set of rules, a radar if you will, and far too much free time on my hands...
To be honest I get too much Spam from you lot to bother, generally I block or delete, I'm past caring beyond taking the odd pot shot...
But...
- Don't put in daft messages that claiming we 'opt-ed' in, it irritates me.
We all know it's rubbish, as are claims of following this law or that when you've spoofed the darn thing.
- Don't Spam me from Canada, I take exception to it!
- Don't mail bomb me, not even slightly...
- The kiddy stuff... I'm getting on first name terms with the sort of suits who WILL help track you down!
- And finally don't even think of Spoofing me in any way (again). I won't bat an eyelid to spending 16 to 20 hours a day, every day dedicated to wrecking your network. The more you annoy me, the better and faster I get at taking down your domains and compromised systems and, as one or two of you are aware, I'm already rather good at what I do, hmmm.
No, really, trust me on this, you'll all be much happier, far more profitable leaving me to go back to burying my head in books...
|
| Spam APRIL 2004 |
"Subject: Information you requested"
"Recently you visited one of our affiliate sites..."
I don't flipping think so!
I really hate Spammers that try the social engineering tricks!
Update: September 2005.
It seems the entries (that were here) were caused by a client of theirs abusing the services. The owner, Ron, called me about the matter and I'm satisfied enough to remove all entries and offer him some free consultancy because he seems like a decent guy!
|
| Spam MARCH 2004 |
Domain Name: BESTEMAILFILTER.COM (sent via juniaonline.com, by the same company)
Registrant: Market Research, 8721 Santa Monica Blvd, #1105, Los Angeles, CA 90069-4507, US
email: Abuse abuse@marketresearch2004.com / marketresearch2004com@yahoo.com
juniaonline.com Creation Date: 12-mar-2004 Updated Date: 12-mar-2004
bestemailfilter.com Creation Date: 18-mar-2004 Updated Date: 23-mar-2004
marketresearch2004.com: Creation Date: 28-feb-2004 Updated Date: 18-mar-2004
Given the domains are mere days old, I believe there were created specifically to Spam with!
Begins: "If you receive a vast amount of bulk email then please read on"
If there's one thing I detest above everything else it's Spammers that try to sell you anti-spam solutions.
Words cannot politely extoll my loathing for such scum!
Sent usual, don't annoy me EVER again letter. I suppose, if there favour, is wasn't spoofed.
Domain: 247cashgenerator.com
IP: 209.92.188.137
Registrar: TUCOWS INC
Updated Date: 19-jun-2003
Creation Date: 16-sep-2002
Registrant:
Note to:
Amanda Levang
247CashGenerator.com (GenerationX-Solutions, Inc.)
In case you and your company missed the whole CAN-Spam Act thing - FALSELY claiming I requested anything violates the act.
Spoofing the headers violates the act...
Recieved IP is BSES TeleCom Limited in India for a start. Need I bother continuing ?
Before sending me Spam/UBE/UCE again, I suggest you consider just one of my anti-spam pages...
http://www.ackadia.com/anti-spam/it-spam.php
Should this not give you second thoughts, here's my "Agreement by action"
I don't want your junk mail, now or ever. Should you continue to send mail to us, that constitutes acceptance of the terms herein:
1. For each message you send to us that we have to trace and/or report and/or delete you agree to pay us the sum of $500 US.
2. For any message that fails to fully comply in any way with, or which in any way violates the following laws - including but not limited to spoofing, obfuscation and false claims of subscription - you agree to pay us the sum of $1,000 US
a) the US CAN-Spam Act of 2004
b) the UK Privacy and Electronic Communications (EC Directive) Regulations 2003
c) the Canadian Personal Information Protection and Electronic Documents Act (Revised 1st Jan 2004)
3. In sending messages you agree to pay all valid claims by the next working day, via our Paypal account for immediate processing.
4. You also agree to also accept liability for any and all recovery costs incurred, including, but not limited to court costs, lawyers and legal fees and debt recovery agents.
5. In sending messages you also agree to may interest at the current rate for all outstanding amounts, should recovery be necessary.
6. This agreement encompasses any subsequent domains and/or businesses you may create and/or register and any 'partners' or 'affilitiate' you are shown to use or pass our detail on to.
Altogether to much rubbish "from" here: [ ecom-universe.net ]
Domain: ecom-universe.net
IP: none found
Registrar: Bulkregister.com
Owner: Internet Solutions, 4021 shelbourne st, Victoria, BC V9A 1T1, Canada
Phone: 250-381-4320
Email: Emma Collis collis@gobot.com
The advert was from: [ http://www.toform.net/mcp/696/26/cap232.html ]
Registrant Contact: Extreme Team Marketing, P.O. Box 1294, 9083134735, Bloomfield, NJ 07003, US
Bubba Smith (mcpdomains@yahoo.com)
The address at the bottom of the Spam, falsely claiming "This eMail is in compliance with the all US Federal eMail Laws" is:
"SS, P.O. Box 1958, Bloomfield, N.J. 07003"
Laughably, the root page [ toform.net ] proclaims:
You have reached a page that is unavailable.
Please refer back to the web site link in the Advertisement you received.
The company that owns this domain name did not send you email, we do not send email, we do not have mailing lists, we cannot remove you. If you want to be removed from the individuals list that sent you the email, then you need to contact them, not us.
We also have no involvement in the content of the email, any products, services, opportunities, income claims, additional information, etc. is not being promoted, is not endorsed, recommended or provided by the owners of this domain.
Yeh, right. And they give folk free access to FTP on your server ?
The mail list was from [ financialbuilder.info ]
Registrar:R152-LRMS
Registrant Name:Joseph Romans
Registrant Organization:Ads inc, 28 S. Longport Str., Carson City. NV, 89705, US
Registrant Email: [ delicateinsite@aol.com ]
Sent my standard don't even thing about Spamming me again note...
|
[ cangetcoolstuff.com ] with mortgage spam
From: DC Enterprises, Paragon Towers, 233 Needham, Suite 300, Newton, MA 02163, US
Phone: 617-965-3332
Email: questservices2004@yahoo.com
Subject: NO B.S. Free DVD inc Shipping
Source spoofed. Domain: [ freefunoffers.com ] apparently created for Spam purposes
International Marketing Source, 860 Johnson Ferry Rd, Suite 140 - 328, Atlanta, GA 30342, US
Created on: 23-JAN-04, Last Updated on: 24-FEB-04
Administrative, Technical Contact: Hunt, Mike email: ( intnlms@yahoo.com )
*cough* That's his real name!???
Reported to Dotster
"Your complaint has been submitted. Our Abuse Department will contact the owner
of the domain that a complaint has been filed. They will investigate and if
necessary disable the domain. This process can take up to 15 days.
Thank you for your patience.
NOTE: Please do not enter multiple complaints. This can prolong the
investigation and delay resolving the situation in a timely manner."
|
Not spoofed, surprisingly, but the from was...,
[ bankcardsolutionsusa.com ]
Bankcard Financial Services USA, Inc, 1045 E. Mckellips Road, Building One, Mesa, Arizona 85203
Tim Romero (email: manford57@yahoo.com ), same address as in UCE
also in the Spam was [ emarketmakers.com ]
Emarketmakers, Inc, 15260 Ventura Blvd. Suite 2000, Sherman Oaks, 91403, CA, US
..But altogether too frequent in my mailbox...and, moreto the point:
[ jpmarketingservices.com ]
Jp Services Inc., JPC Services, 840 Crescent Ave., Bridgeport, Ct 06608 US
email ( hostmaster@jpmarketingsevices.com )
|
I won't give domains or details, but suffice to say this person is sick...
aaron maximov, wm, 54 rundel square, berlin, na, 45683, DE
arronmaximov@yahoo.com
|
I really don't like this guy as he uses scare tactics to prey on the gullible...
Subject: Extreme Content Violation - Message 84635
Body:
"What does the mother of your children think of you viewing ...?
Ever realize how easy it is for others to find out that you're looking at ....
sites? Deleting internet history is not enough - people still get caught
every single day!
You are at risk.
Eliminate all of your tracks with a click - http://www.free-bonuses.biz/kdf/
I hope you will enjoy this little tip of mine"
Registrant: Daniel Sustern, og man, 2019 Dawndiller Rd, Sydney,20014, Australia
Registrant Phone Number: +622.883940039
Registrant Email: (popomomopo@netscape.net )
|
| Spam END FEB 2004 |
Main domain in ad: goto-info.com
Sent as: webfind-101.com
Registrar: ALLDOMAINS.COM INC.
Created: 07-jan-2004
Registrant: Expedite Media Group, (NIC-1586933), 1612 Ogden Ave, Lisle IL 60532, U
Phone: +1.6307370686
Email: abuse@expeditemg.com
Host/ISP:
Reported 'cos:
27939 Smyth Dr. - Valencia, CA 91355 ~ ~ ~ [ Seen this address far too many times ]
We respect your online time and privacy, and honor all opt outs. ~ ~ ~ [ And I gave you my email address to when, exactly ? ]
If you prefer not to receive further emails, please click ~ ~ ~ [ And I trust you why ? ]
Also mentions: THECUDDLER.COM
Body gives a mailto as: info@thecuddler.com?subject=Valentine
TLGC, Inc., Fred Lewis, 23313 Beachcomber Lane, Valencia, CA 91355, US
Phone: 818-576-9490, Fax..: 818-576-9491 , Email: fred.lewis@strategiez.com
Juries out on this one as regards Expedite. Hmmm. We shall see. I've added them to the spam complaint.
Actually, I've added both. Lets see what we see...
"Please note:
I am have zero tolerance for UBE.
I have seen far too much Spam from you. See that this is the last.
And don't add me to others lists, hmmm."
|
| SPOOFED Spam FEB 2004 |
These people also spammed me:
On a "get paid for doing surveys" spam from : (getpaid2k4@netscape.net)
D'oh! Webhosting Spam: (Sales@biz-boosting.com) or (Sales@marketing-promote.com)
The company offering service in such a stupid and reckless manner was: hosting-corp.com in China (emaildata@163.com)
Anything Email, Inc Value Valet, 4803 North Dixie Highway, Ft. Lauderdale, FL 33334 (why am I not surprised!) [ support@anythingemail.com ]
... have this STUPID idea that using ActiveX and embed flash and shockwave with make me just at the chance to buy Spammed junk to wax my bikini line!
They used the domain [ value-valet.net ] - created just yesterday (25th Feb 2004)
They use the IP range [ 64.32.63.80 - 64.32.63.95 ] by the way.
The adverts used [ vvlet.us ]
equalaMAIL, 4803 N Dixie Highway,Fort Lauderdale, FL, 33334, United States (Tel: +1.9544890114) Email: admin@equalamail.com
...
Notes:
"This offer was sent to you as a subscriber to Value Valet."
The domain only created yesterday! Creation Date: 25-feb-2004
Note to Anything Email, Inc / equalaMail
Before sending me Spam/UBE/UCE again, I suggest you consider just one of my anti-spam pages...
http://www.ackadia.com/anti-spam/it-spam.php
Should this not give you second thoughts, here's my "Agreement by action"
Should you continue to send mail to us, that constitutes acceptance of the terms herein:
1. For each message you send to us that we have to trace and/or report and/or delete you agree to pay us the sum of $500 US.
2. For any message that fails to fully comply in any way with, or which in any way violates the following laws - including but not limited to spoofing, obfuscation and false claims of subscription - you agree to pay us the sum of $1,000 US
a) the US CAN-Spam Act of 2004
b) the UK Privacy and Electronic Communications (EC Directive) Regulations 2003
c) the Canadian Personal Information Protection and Electronic Documents Act (Revised 1st Jan 2004)
3. In sending messages you agree to pay all valid claims by the next working day, via our Paypal account for immediate processing.
4. You also agree to also accept liability for any and all recovery costs incurred, including, but not limited to court costs, lawyers and legal fees and debt recovery agents.
5. In sending messages you also agree to may interest at the current rate for all outstanding amounts, should recovery be necessary.
6. This agreement encompasses any subsequent domains and/or businesses you may create and/or register and any 'partners' or 'affilitiate' you are shown to use or pass our detail on to.
Subject: Its possible to Re'fi'nance your home at 3.25%
Ever popular, mortgage Spam, this time form [ rateclick.net ]
Thought. Not that I need a second mortgage, but what on earth makes them this I'd trust them when they spoof the postal origins and try to sneak past Spam filters like a common thief...
[ rateclick.net ] Created: 13-feb-2004 - Obviously a long established company then, eh!
organization: BULK MARKETING, INC., 7469 W. LAKE MEAD BLVD, STE. 200, LAS VEGAS, NV89128, US
email: (worldweb15@yahoo.com)
[ adfinnovations.com ] Creation Date: 01-dec-2003, Updated Date: 25-feb-2004
Keep Spamming us with offers of Fungal nail infection cures, for some strange reason.
Registrant: BTP GROUP, INC, 7680 Universal Blvd., Suite 198, Orlando, Florida, 32819 US
email: Bill Konstand - ( administrator@innovativemillenia.com )
Registered through: GoDaddy.com -
To report spam abuse, email Abuse@godaddy or visit www.godaddy.com/gdshop/spamreport/spamreport.asp
Other fungal Spam was via [ 4webnovations.com ], owner by the same group. Again updated at 2-feb-2004
Obfuscated junk from here too: [ thatsu77.info ] Created On:20-Feb-2004
Registrant Name: William Kaye, Kaye Promotions Ltd, Suite 2225, 45 Queens Rd, Hong Kong, 748, HK
(Email:splash01@mail15.com)
Jake Swanson of Swanson Ltd, 2544 57th Ave, Bradenton, FL, 34203, US
email: support@dvrmedia.info
...Felt the need register a domain* specifically to Spam with spoofed and obfuscated junk!
Received: from ca-sealbch-cuda1-c2a-38.anhmca.adelphia.net ([68.64.127.38] helo=euireland.ie)
*( GETYU7.INFO, Created On:24-Feb-2004)
Aaron Jones, 10264 Drumcliff Ave, San Diego, CA, 92126, US
Email: bulkerol@yahoo.com
... If of the extremely mistaken opinion our family is remotely interested in the filth he was peddling via (v-stock.biz)
Another clown with the idea that I want their "get rich" scam in my mailbox...
megalithserv.us (Created 26th Jan 2004)
Registrant: Norm McCormick, Normmy, 2407 Booker St., Littlerock, 72204, United States
Registrant Email: normmcormick@yahoo.com
Subject: Borrow up to 125% of your homes value!
More Spam was sent via [ miracleproductservices.com ] with the body domain being: [attractiveservices.com ]
Registrant Contact: Media Dreamland, P.O. Box 274, Las Vegas, NV 89031, US, [ email: abuse@Mediadreamland.com ]
Media Dream Land Inc. , 2533 North Carson Street, Carson City, NV, 89706, US
Registration Service Provided By: EBN Web Hosting (frondov@lvcm.com)
Administrative Contact: IPI, Inc., 6750 Jefferson HWYBaton Rouge, LA 70806, US [ email: abuse@ipiinc.com ]
(Attractiveservices):
Administrative Contact Breyer Investments, Inc., 132 N. State St.Dover, DE 19901, US, IP Manager (abuse@breyerinvestments.com)
Digging deeper...
Media Dream Land Inc. have IP range: 69.42.96.0 - 69.42.111.255
Breyer Investments Inc access range: 69.42.99.0 - 69.42.99.255
IPI, Inc. have has acessed IP range: 69.42.103.0 - 69.42.103.255
Given that the registrant, Media Dream, owns the greatest range, I wouldn't trust any of them!
Haare Wisman, Roggeveenstraat 127, The Hague, 2518 TV, NL, (tel +31.703629632)
Using his domain [ onlinecheappharmacy.net ] [ email is colgano@softhome.net]
Lightstream Multimedia Ltd., Avenida Fedrico Boyd Y Calle 51, Apdo 702, Panama City 7, Republic of Panama,1544
email: freagol@web.de
Inappropriate material using domain [ imteresting.com ]
globalmarketing2000.biz
Registrant Walter Miles, Globalmarketing, 45 Failkeirk Road, Liverpool,41123, Great Britain (UK)
Phone Number: +44.870 760641
Email: smwalter@globalmarketing2000.biz
Whether it's a real address or not is another matter. "41123" is a ZIP code, not a postcode...!
Also, as far I can tell, there is no "Failkeirk Road" anythwhere in the UK. Several "Falkirk Road's, but none of these are in the Liverpool.
The 0870 number is similarly ficticious too.
To report incomplete or inaccurate Registrar Whois data, please use the Whois Data Problem Report form.
*MUTTER*
But the InterNIC form doesn't support .biz domains...
You know, I bet if I had the time to enter all the fake (?) addresses I could use the possibly real zip code to tie them together!
|
anewavon.info - goes to, pulls up: http://www.buysusa.com/
"If you are having a problem with Spam USE THIS (non existant) LINK. NO EMAILS OR CALLS WILL BE RESPONDED TO ABOUT Spam."
Coy beggers, eh!
Registrant Contact:
Buysusa-ca, 150 King St, Peterbrorough, ONTARIO K9J6Z3, CA
Fx9 Webhosting (admin@fx9.com)
Tel: +1.86385982771
anewavon.info
Registrant Name:
Ferrer Ph.D. Danny, FX9 Hosting, 150 King St, Box 368, Peterborough, ON, K9J 6Z3, CA
Registrant Email:admin@biometricscience.com
Nice that a PhD education appears to be used to steal software, eh!
If I wanted pirate software I'd go to a carboot sale, or just d/l it on peer to peer networks.
*Mutter*
~ Paul
|
Getting loads of these and I don't like it...
Subject: ISP Notice Severe Privacy Breach - Alert 4056
Body includes: "I hope you will enjoy this little tip of mine"
The link in the one I'm looking at is : Get protection today - http://www.free-bonuses.biz/cdf/
... which is registered with Joker.com
Registrant Name: Daniel Sustern
Registrant Organization: Og Man, 2019 Dawndiller Rd, Sydney, 20014, Australia
Registrant Phone Number: +622.883940039
Registrant Email: popomomopo@netscape.net
(No host found. Killed already ?)
Altogether to many ebay scams too, mostly from Australia too. Had enough of that!
Subject: Join thousands earning huge incomes with eBay!
"thank you for registering" Excuse me ???
"Learn to Make A Fortune With Ebay!" by paying me loans of money...?
*Growls*
This one was from:
lsense.biz
Again with Joker.com ( Use this link to report with Joker
Registrant Name: Chester Vargas
Registrant Organization: Latin American Financial Holdings Group, Suite 1305 9 Tanbark Circuit, Werrington Downs, 2747, Australia
Registrant Phone Number: +1.5094718893
Registrant Email: lafhg4@netscape.net
The from, which may have been spoofed was : Canrem.com (InfoRamp Inc, 200 Bay St., North Tower Suite 2200, Toronto, ON M5J 2J5, CA)
Yet again. Florida rears it's ugly face...
The domain used to push HGH was [ http://www.great10foryou.biz?affil=63 ]
You see a lot of nonesence like "affil=63" - makes me think people are on commission to sending it out!
Anyhow, this is registered too:
Sponsoring Registrar: GANDI SARL (icann@gandi.net)
Registrant Organization: Diverse Marketing Group, LLC, PO Box 350940, Grand Island, Florida, 32735-0940, United States
Phone: +33.4037708170
Email: dmg0198091@yahoo.com
Gandi.net actually have a clear explanation of why they won't act against Spammers
This is a kop out. If they had a policy in place, they could change this in the same way Network Solution have. To be, it's an excuse to protect profits and I'm not buying it!
Of FAR more interest is the "from"...
domain: acdczone.com
IP: addresses...
66.150.161.135
66.150.161.141
69.25.27.171
66.150.161.134
66.150.161.136
66.150.161.140
69.25.27.170
66.150.161.133
Registrar: DOMAIN BANK, INC
Updated Date: 29-jan-2004
Creation Date: 24-feb-2000
Registrant: UltimateEmail.com, Inc. (Registered through: domainbank.com)
UltimateEmail.com, Inc., 222 West Walnut Ave. Suite B, El Segundo, CA 90245, US
(PHONE) +1.3103223458
email: Tech@UltimateEmail.com
email: Admin@UltimateEmail.com
Dotster is the host for acdczone.com. Dotster have an invalid address with Whois. Very professional, eh!
Complain via: abuse@internap.com
Note to: UltimateEmail.com, Inc.
Please note, I have *ZERO* tolerance to Spammers like yourself, and your client Diverse Marketing Group, LLC.
I have never given you permission to sent me junk mail and this is my first and last demand that you permanently remove me and anyone else you have at our domains from all your databases and pointly state you do not have permission or authorisation to pass to my details, to anyone else, ever.
Just to clarify. I am a computer consultant and you can't afford me. Every time I have to report Spam or UBE or UCE traced to you I will be invoicing you to the tune of $1,000 US.
Paul Ackerley
|
Domain: getgooddealz.com
Spoofed as: qwest.com (another abused musician.org)
Registrar: REGISTER.COM, INC. - [ domainregistrar@register.com ]
Created: 28-jan-2004
Registrant: DC ENTERPRISES,Jasmine Spencer, 9 Tanbark Circuit, Werrington Downs, Werrington Downs nsw 2747, AU
Phone: +61-2-9475-0699
Email: questservices2004@yahoo.com
Host/ISP: Not live
Reported 'cos: Way to many mortgate adds today!
Seen several more from 'her' since. I will be making an example of this Spammer!
|
More interested in the Nanaimo address than the particular domain. I'm watching you, mate!
Aha
Should have known, it's registered to our friend Zhang Jun
You can now get the top 8 medications in generic form. Not
only are they much cheaper but we deliver right to your door!
http://www.shoulpharm.com/GP/index.asp?ID=LO
Ambien, Lipitor, Nexium, Paxil, Phentermine, Viagra, Vioxx, Xanax.
This is not for me http://www.shoulpharm.com/er/er.asp?Folder=gp
Suite #126 4-1150 N. Terminal Ave. Nanaimo, British Columbia V9S 5L6 Canada
|
Domain: postalbureau.com
IP : 209.40.99.2
Registrar: Tucows Inc :
Don't bother complaining to Tucows, they have made it very clear they don't care if registrants are Spammers as long as their cheques don't bounce!
Updated Date: 18-aug-2003
Creation Date: 05-may-2003
Host: Cove Software Systems, Inc. ( abuse@covesoft.com ) Hmmm!
(IP Range 151.196.192.0 - 151.196.223.255)
Provided by Verizon (IP range 151.196.0.0 - 151.205.255.255)
=========================================================================
Advertisement
=========================================================================
Find other singles in your area
http://web.postalbureau.com/alqpvts8ajtqqwmed2vqrv2a1?VTLID=500716&VTCID=251
[ STRIPPED ALL IMAGES OUT ]
To no longer receive offers like this for SingleMe Click Here.
http://web.postalbureau.com/alqpvts8ajtqqwmed2vqrv2a2?UserID=902&PubID=500716
SingleMe postal address: #538, 9768 - 170 Street, Edmonton, Alberta, Canada, T5T 5L4
==========================================================================
If you would prefer not to receive further emails from PostalBureau
and wish to remove your name and e-mail address from our database,
please click the link below:
http://web.postalbureau.com/r/alqpvts8ajtqqwmed2vqrv2a
E-mail Us: support@postalbureau.com or
Write Us at:
PostalBureau, 450 NE 20th Street, Suite 113, Boca Raton, FL 33431
==========================================================================
Altogether too much Spam coming from Canada since this CAN-Spam act. Can't be doing with it!
|
Domain: Not used this time. I know him from mytoyz.biz
Spoofed as: 2friend.com
Reported 'cos: I've already reported official reported these before. This time I go the extra mile!
CA-MAIL 20714, 25 Marine Dr Vancouver, BC V7T189 Canada
( More details to follow )
Body advert was carrying advert from [ rxforanyone.com ]
(Fake) unsubscribe was with com-click.com.ph
Throwing that at the internet without an id gets us a rather poorly configured system...:
Notice: Undefined index: id in D:\webspace\com-click.com.ph\www\click.php on line 4
Warning: Cannot modify header information - headers already sent by (output started at D:\webspace\com-click.com.ph\www\click.php:4) in D:\webspace\com-click.com.ph\www\click.php on line 56
|
Spoofed as: uswest.net - at least twice.
From: Lighthouse Marketing, P.O. Box 4721, Provo, UT 84603
The address used in the body - 61.56.84.220 - resolves to:
DYXNET.COM = Diyixian.com Limited, 2707-2710 Prosperity Ctr, 25 Chong Yip St, Kwun Tong, KLN, HK.,
Registrar Network Solutions
Reported 'cos: Seen far to much rubbish from this Lighthouse company. Will officially report.
Adviced USWest to claim againt Lighthouse marketing for identity theft.
|
Domain: Libertyfunds.biz (and for unsubscribe: )
Spoofed as : [ virtual.finland.fi ] and [ many many others - often in Finland ]
Registrant Name: Daniel Riv, Webdesign champ. inc, 324 young St unit 805, North York, M2N 5X7, Canada
Phone Number: +416.3326548
Registrant Email: morismarket@yahoo.com
Current IP: 200.206.235.237
Registrar: CSL COMPUTER SERVICE (D.B.A. JOKER.COM) -
Report online with this link
Unsubscribe is : freedomfunds.biz
Registrar is Direct Information PVT, Ltd., (D.B.A. Directi.com) - bhavin.t@directi.com
Reported 'cos: Too many sent at once. - several a day, over several days. Idiots!
Plus they messed up the message by not configuring the software they use. - Left '(copy&paste in browser)' in the body.
Reported to:
uce@ftc.gov, internet.abuse@sjrb.ca, security@TELESP.NET.BR, mail-abuse@nic.br, abuse@yahoo.com, abuse@hotmail.com
network@hljtele.com, anti-spam@ns.chinanet.cn.net, web.foi@mbs.gov.on.ca, odiv_occ@rcmp-grc.gc.ca
In case you are wondering, the last one is the RCMP.
No really... I will come down hard on any Canadian turning to Spam as a venture, or any Americans trying to despoil my country!
Official complaint:
Recol.Ca - Reporting Ecomonic Crime On-Line
This Spammer has obtained my email address through unknown means - presumably mail harvesting or Spam CD's and is sending streaming of email pretending to other great deals.
Below is one example (tidied up for your convenience. I have the originals): Note that the actual rate in the Spam varies between 2.1 and 2.9%, showing the fraudulent nature of the offer.
The website given is actually an American company, it appears, as the drop-down option is the 'States' not Provinces.
Hello
Would you refinance if you
knew
you could save thousands?
Refinance today to as low as
2.9%!
or buy the home of your dreams!
http://pzpclkcaruqs@libertyfunds.biz
(copy&paste in browser)
Thanks,
Michelle
[scroll right down]
rmv: http://urirkprhzjnycn@freedomfunds.biz/tt.htm
This passed passed to:
Royal Canadian Mounted Police (‘RCMP’)
Ontario Provincial Police Anti-Rackets Branch (‘OPP’)
United States of America - Internet Fraud Complaint Centre ('IFCC')
|
Hmmm! This name, Xeng Liang crops up a lot, I think...
Domain:saving-first.com (Spoofed as: microgeneral.co.uk, another as eudora.com, yet another as dtl.co.nz)
registrar: www.domaindiscover.com
Creation Date: 29-nov-2003
Updated Date: 30-jan-2004
Registrant: Direct Sales Ltd, PO Box 66, Marysville, WA 98270, US
Tel: 425 508 0670
email: helicon1999@yahoo.com
ISP reported to: Time Warner ~ abuse@twtelecom.net
Reported 'cos: for too much finance rubbish lately!
And yet more - I'm going to bury this clown! And more! Sheesh!
The above gift or special offer was sent to you as a subscriber of Direct Media. (Well D'oh... I think I'd know, really...)
We will continue to bring you valuable offers on products and services that interest you most. (Oh yes, that would be the fake Mortgage offers ?)
To modify your future preference with us: [ http://saving-first.com/st.html&e=... ] (Yer, right, like I'm gonna fail for that. Spoofing it illegal. You are a criminal, therefore you cannot be trusted as far as I can spit, mate!
For postal contact: P O Box 2515 Deland Florida 32721 (Florida? But you told the Registrar Maryville, Oh, what a fibber!!!)
|
Domain: quadramastersymbol.com
IP: 66.114.254.5
Registrar: Innerwise, Inc. D/B/A Itsyourdomain.com - See SecureWhois below.
Creation Date: 19-dec-2003
Interestingly: [ Received: from 66-110-75-104.keltinbcjostelfox.com ([66.110.75.104] helo=keltinbcjostelfox.com) ]
Registrant: SecureWhois, Inc. Contacts are : [ support@securewhois.com, tcucci@innerwise.com ]
Note SecureWhois is NOT registrant but a service provider legitimately hiding identities. This company, and others like it are a haven for Spammers trying to hide there true identity. Fortunately, I've dealt with companies like this before and they will take action against offenders like these who break the strict T&C's
Reported 'cos: nothing ever nasty that I recall, but all to often seen in past weeks
|
Also reported:
Mortgage Spam from : [ enter7.com ~ worldwideweb50@yahoo.com ] and [ leadgood.biz = Poinciana Enterprises, LLC, Kayman Islands ~ worldweb15@yahoo.com] to registrar Joker.com and host [ abuse@hopone.net ]
Pharmaceutical Spam from : [ gomedz.biz = Vishal Kapoor, India ~ zenegra@yahoo.com ] reported to registrar Directi.com
Pharmaceutical Spam from : [ 911pharma.biz = Jose Sastre, Phillipines ~ jsastre@advertiserpages.biz ] reported to registrar Joker.com
Note to Keith Midkiff, Interactive Intelligence, Inc:
Hi.
Spoofing your domain is identity theft.
Feel free to report the Spammer to his registrar [ Joker.com ]
Best link is : [ https://joker.com/index.joker?mode=support&support_type=spam ]
Regards ~ Paul
|
I'm so going to make an example of this begger!!!
E M A I L A D V E R T I S E T O 3 0 0 + M I L L I O N P E O P L E !
$295 for 10 MILLION Email Ads Sent [ 1 of 10,000 Respond = 1,000 ORDERS ]
$395 for 15 MILLION Email Ads Sent [ 1 of 10,000 Respond = 1,500 ORDERS ]
$495 for 25 MILLION Email Ads Sent [ 1 of 10,000 Respond = 2,500 ORDERS ]
SOLID, RELIABLE, PROFESSIONAL - Excellent Results - 8 Years in Business
For Further Details, Call In The USA 24/7: +1(206)223-1270 / Fax: +1(503)213-6416
For Additional Email Advertising Software/Services Visit:
http://www.emailadvertisingservices.net
REPORTING:
(Copy to Net City, HK who those this company stole to spoofed as the sender.
Spoofing under the CAN-Spam act - It also carriages a charge for Identity Theft)
Note:
It's a new domain I bought to sell. They only way the can have used that address is by email harvesting or, more likely illegal use of whois.
Besides. I NEVER use 'webmaster' so I anyone claiming I opt-ed in or any other rubbish will find out just how hard I can stamp on Spammers.
Domain Name: EMAILADVERTISINGSERVICES.NET
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM - [ hostmaster@intercosmos.com ]
Creation Date: 26-jan-2004
Expiration Date: 26-jan-2005
Registrant: NIM, PO Box 1736, Phoenix, OR 97535, US,
(541)665-0400 Alan, Rob mailinc6000@mail.com
Note to Sigmund Solates, Intercosmos:
I am officially reporting this matter to the FBI.
Please bear that in mind while you decide if Spamming violates a Registrants T&C with you.
I don't want to see any more Spam from this criminal company, hmmm.
~ Paul
FBI TIPS
Illegally gained one of my email addresses through harvesting and sent me Spoofed email - trying to sell his (Spamming?) services.
I have adviced his registrar - Intercosmos, and his ISP host.
The persons (given) details are:
Registrant: NIM, PO Box 1736, Phoenix, OR 97535, US,
(541)665-0400 Alan, Rob mailinc6000@mail.com
Here's the text of his UBE:
...
|
