Rotating DNS & IP

JohnathanRGalt · December 15, 2004

Have Spammers found a way to fool Spamcop?

This report shows SpamCop is unable to resolve the Spamvertized website:

http://www.spamcop.net/sc?id=z702777478z41...a1b2b218ba1e1cz

The website in question is selling pirate software:

http://www.longarea.net.cs.suddenly.magnitudeofborrowing.com

SpamCop is convinced that the address is: 222.51.91.248

I have no problem tracing it to some corrupt official in the People's Republic of China trying to make an extra buck -- but at an IP address that appears to change every few minutes.

If you try to resolve the website, the IP address seems to be shifting around (usually to Chinese addresses). I just pinged it again ago and got

Whois Information from "whois.apnic.net" about 221.11.133.68

descr: China Network Communications Group Corporation

descr: No.156,Fu-Xing-Men-Nei Street,

descr: Beijing 100031

role: CNCGroup Hostmaster

e-mail: abuse[at]cnc-noc.net

A few minutes earlier I traced it to:

Whois Information from "whois.apnic.net" about 222.223.134.40

descr: CHINANET hebei province network

descr: China Telecom

descr: No.31,jingrong street

descr: Beijing 100032

e-mail: anti-spam[at]ns.chinanet.cn.net

person: Bin Ren

e-mail: renbin[at]mail.he.cn

address: 10F Ximei Building NO.6 Jianshe South Street

address: Shijiazhuang 050011 China

Wazoo · December 15, 2004

First of all, I edited the Topic Title. The "have spammers figured out how to fool SpamCop" is to often repeated on details such as the case you've offered here. Rotating DNS and IP addresses has been going on for years. If you want to call this "fooling SpamCop" .. then you should also add in the countless numbers of idiot spam recipients that also wonder why the URL comes up as a 404 when they click on it ....

The normal methodolgy suggested, if you care to persue it, is to go after the DNS providers and see if that can be knocked out. The Registrar YESNIC has been quite heavily discussed of late, but apparently are making noises like they are trying to handle some of the spew issues .. repeat, making noises, not sure of the actual results at this point ...

whois -h whois.yesnic.com magnitudeofborrowing.com ...

Domain Name : magnitudeofborrowing.com

::Registrant::

Name : Carol Brisbine

Email : cbrisbine_w[at]yahoo.com

Address : 6059 Jane Dr.,

Zipcode : 44060

Nation : US

Tel : 315-775-6301

Fax : 315-775-6301

So you've got a Yahoo address that some have gotten Yahoo to revoke ... at that point, an ICNN complaint about invalid registration may get the Domain 'handled'

12/15/04 11:29:09 dig www.longarea.net.cs.suddenly.magnitudeofborrowing.com [at] xxx.xx.xxx.xx

Dig www.longarea.net.cs.suddenly.magnitudeofborrowing.com[at]ns7.dfdhosting.com (222.223.134.36) ...

failed, couldn't connect to nameserver

Dig www.longarea.net.cs.suddenly.magnitudeofborrowing.com[at]ns5.tpthosting.com (221.11.133.63) ...

Authoritative Answer

Recursive queries supported by this server

Query for www.longarea.net.cs.suddenly.magnitudeofborrowing.com type=255 class=1

www.longarea.net.cs.suddenly.magnitudeofborrowing.com CNAME (Canonical Name) www.magnitudeofborrowing.com

magnitudeofborrowing.com NS (Nameserver) ns1.realdnssystem.com

magnitudeofborrowing.com NS (Nameserver) ns3.autonameservers.com

magnitudeofborrowing.com NS (Nameserver) ns5.tpthosting.com

magnitudeofborrowing.com NS (Nameserver) ns7.dfdhosting.com

ns3.autonameservers.com A (Address) 61.240.131.209

ns5.tpthosting.com A (Address) 221.11.133.63

ns7.dfdhosting.com A (Address) 222.223.134.36

Dig www.longarea.net.cs.suddenly.magnitudeofborrowing.com[at]ns3.autonameservers.com (61.240.131.209) ...

failed, couldn't connect to nameserver

Dig www.longarea.net.cs.suddenly.magnitudeofborrowing.com[at]ns1.realdnssystem.com failed, no such host

Dig www.longarea.net.cs.suddenly.magnitudeofborrowing.com[at]xxx.xx.xxx.xx ...

Non-authoritative answer

Recursive queries supported by this server

Query for www.longarea.net.cs.suddenly.magnitudeofborrowing.com type=255 class=1

www.longarea.net.cs.suddenly.magnitudeofborrowing.com CNAME (Canonical Name) www.magnitudeofborrowing.com

magnitudeofborrowing.com NS (Nameserver) ns7.dfdhosting.com

magnitudeofborrowing.com NS (Nameserver) ns1.realdnssystem.com

magnitudeofborrowing.com NS (Nameserver) ns3.autonameservers.com

magnitudeofborrowing.com NS (Nameserver) ns5.tpthosting.com

As you can see, the DNS issues impact more than just SpamCop. And the results of the above are just those of the moment. By the time you read this, run your own query search, no doubt, the data will be a bit different.

Current crap includes hosting DNS (and/or even the website) on compromised machines with short time-to-live settings, but again pointing out that this isn't anything new.

Jeff G. · December 19, 2004

Good news! The .com nameservers A.GTLD-SERVERS.NET thru M.GTLD-SERVERS.NET no longer know about magnitudeofborrowing.com, so it can not currently be used to support URLs used in spam.

get-even · December 21, 2004

Good news! The .com nameservers A.GTLD-SERVERS.NET thru M.GTLD-SERVERS.NET no longer know about magnitudeofborrowing.com, so it can not currently be used to support URLs used in spam.

21552[/snapback]

Sorry, just *stealth" DNS server (as mentioned in another thread.

% env TZ=UTC date

Tue Dec 21 06:18:26 UTC 2004

% nslookup -type=any magnitudeofborrowing.com 221.11.133.63

Server: 221.11.133.63

Address: 221.11.133.63#53

Name: magnitudeofborrowing.com

Address: 221.11.133.68

magnitudeofborrowing.com nameserver = ns1.realdnssystem.com.

magnitudeofborrowing.com nameserver = ns2.dfdhosting.com.

magnitudeofborrowing.com nameserver = ns3.autonameservers.com.

magnitudeofborrowing.com nameserver = ns5.tpthosting.com.

magnitudeofborrowing.com

origin = ns1.managednameservers.net

mail addr = hostmaster.magnitudeofborrowing.com

serial = 2004121701

refresh = 300

retry = 300

expire = 300

minimum = 300

% nslookup -type=any ns2.dfdhosting.com ns2.dfdhosting.com

Server: ns2.dfdhosting.com

Address: 222.51.91.245#53

** server can't find ns2.dfdhosting.com: SERVFAIL

% nslookup -type=any dfdhosting.com ns2.dfdhosting.com

Server: ns2.dfdhosting.com

Address: 222.51.91.245#53

** server can't find dfdhosting.com: SERVFAIL

get-even · December 21, 2004

whois -h whois.yesnic.com magnitudeofborrowing.com ...
Domain Name : magnitudeofborrowing.com

::Registrant::

Name : Carol Brisbine

Email    : cbrisbine_w[at]yahoo.com

Address   : 6059 Jane Dr.,

Zipcode   : 44060

Nation : US

Tel    : 315-775-6301

Fax    : 315-775-6301

Other domains also registrered to "Carol Brisbine" / cbrisbine_w[at]yahoo.com

200womenwhohave.com

230thatmigrates.com

accreditedbythe.com

afteryousubmit.com

already-have.com

alsoxls.com

anantennathatcreates.com

approvalofthefirst.com

approvedmeasure.com

aresubjectto.com

basedpotato.com

beautomatically.com

borrowingwilllet.com

dslispnx.com

endtheirpostelection.com

euroame.com

farmersfound.com

forward-ing.com

foundtheinjured.com

fourwomenwho.com

havebeenremovedand.com

holdsthestatus.com

hunterswhosaid.com

improvementsinsexual.com

inexhibit.com

insidesell.com

istherefore.com

lastnamename.com

mailerisasuper.com

russents.com

searchoem.com

and certainly more still I don't already have listed (I've ignore those already suspended or deleted).

(Wazoo edited this post, removing 90% of the quoted part, snipping down to just the pertinent details)

Jeff G. · December 21, 2004

Other domains also registrered to "Carol Brisbine" / cbrisbine_w[at]yahoo.com
21656[/snapback]

One or more of you reported this to abuse at yahoo.com, right?

get-even · December 21, 2004

One or more of you reported this to abuse at yahoo.com, right?

21662[/snapback]

I personally have no proof any of these domains ever "spam"'d. They have just been collected by my

tools searching for another spammer (P.S., I think I have another 20 domains with that registrant that

I've found by now, tool has been seraching "interesting" domains associated with my quarry, for days;

It doesn;t help that many spammer registrars "whois" servers timeout and/or hang often - also, I'm always

bumping the registrars daily limits for queries - note that the tool which collected most of the domains in

the list I gave had only made it through a test list of 500 domains through the digits and upto the letter 'i',

the serach from 'j' to 'z' still isn't complete).

Jeff G. · December 21, 2004

Other domains also registrered to "Carol Brisbine" / cbrisbine_w[at]yahoo.com
21656[/snapback]

One or more of you reported this to abuse at yahoo.com, right?
21662[/snapback]

I personally have no proof any of these domains ever "spam"'d.
21670[/snapback]

You don't need any. Their customer cbrisbine_w[at]yahoo.com registered commercial domains magnitudeofborrowing.com, 200womenwhohave.com, 230thatmigrates.com, accreditedbythe.com, afteryousubmit.com, already-have.com, alsoxls.com, anantennathatcreates.com, approvalofthefirst.com, approvedmeasure.com, aresubjectto.com, basedpotato.com, beautomatically.com, borrowingwilllet.com, dslispnx.com, endtheirpostelection.com, euroame.com, farmersfound.com, forward-ing.com, foundtheinjured.com, fourwomenwho.com, havebeenremovedand.com, holdsthestatus.com, hunterswhosaid.com, improvementsinsexual.com, inexhibit.com, insidesell.com, istherefore.com, lastnamename.com, mailerisasuper.com, russents.com, and searchoem.com, exploiting that customer's Yahoo! I.D. and Email portions of their Service for commercial purposes in violation of Term 10 of their Yahoo! Terms of Service at http://docs.yahoo.com/info/terms/ . I just filed a report of that violation.

get-even · December 21, 2004

One or more of you reported this to abuse at yahoo.com, right?

21662[/snapback]

I personally have no proof any of these domains ever "spam"'d.

21670[/snapback]

You don't need any. Their customer cbrisbine_w[at]yahoo.com registered commercial domains magnitudeofborrowing.com,

...

i mailerisasuper.com, russents.com, and searchoem.com, exploiting that customer's Yahoo! I.D. and Email portions of their Service for commercial purposes in violation of Term 10 of their Yahoo! Terms of Service at http://docs.yahoo.com/info/terms/ . I just filed a report of that violation.

21676[/snapback]

This is a *very* powerful tool to use; I had no idea of Yahoo's policies. Thanks! Do you know about

the various international "yahoo"'s (e.g. yahoo.com.cn or yahoo.es in particular) or whether any of the

other "free services" (e.g. hotmai.com, gmail.com, lycos.com, etc.) have similar policies?

get-even · December 21, 2004

One or more of you reported this to abuse at yahoo.com, right?[...
, exploiting that customer's Yahoo! I.D. and Email portions of their Service for commercial purposes in violation of Term 10 of their Yahoo! Terms of Service at http://docs.yahoo.com/info/terms/ . I just filed a report of that violation.

21676[/snapback]

Here's a quick list of 778 currently active yahoo accounts being used for registrant or contact emails

on "known" spam domains (I have another 1829 at international "Yahoo"'s). With a little work, I'll make

up a scri_pt to pair these (just a raw list or 40K lines of whois data) with domains and report them.

For now, the list is:

112244[at]yahoo.com

a_kelicht[at]yahoo.com

a_winborn[at]yahoo.com

aa_leb[at]yahoo.com

abc[at]yahoo.com

absoltehomes52[at]yahoo.com

absolutehomes52[at]yahoo.com

adamschmansky[at]yahoo.com

adamsdkrfbbxirn[at]yahoo.com

admjzrx[at]yahoo.com

adtmarket[at]yahoo.com

adtransformation[at]yahoo.com

ahfjjfhgf[at]yahoo.com

aigneissoqfz[at]yahoo.com

airportmail123[at]yahoo.com

alberto_cruz_2004[at]yahoo.com

alenbrog[at]yahoo.com

alfaduplo[at]yahoo.com

alfredbamka[at]yahoo.com

all_the_house[at]yahoo.com

allgoods_erdwards[at]yahoo.com

alonso_eso[at]yahoo.com

americanbankcard2000[at]yahoo.com

amonashmi[at]yahoo.com

amyjonesffd[at]yahoo.com

anjelikasurog[at]yahoo.com

annaolsen7[at]yahoo.com

aportu89_nity[at]yahoo.com

apply_next[at]yahoo.com

applyforhome[at]yahoo.com

ardeipetoti[at]yahoo.com

armandvanhelden3[at]yahoo.com

asdgre12bana1[at]yahoo.com

athingvn[at]yahoo.com

augustuslkxpqcxmorn[at]yahoo.com

ausmarket2004[at]yahoo.com

aweibergchristopher[at]yahoo.com

axmatovafolda[at]yahoo.com

bandwidthgroup[at]yahoo.com

bbkent2000[at]yahoo.com

bderffagi[at]yahoo.com

befidakilija[at]yahoo.com

benaflektoroip[at]yahoo.com

benhaseltonnn[at]yahoo.com

benjenkins007[at]yahoo.com

berdagomoj[at]yahoo.com

berdasferees[at]yahoo.com

berfokall[at]yahoo.com

berfotitot[at]yahoo.com

bergrenovek[at]yahoo.com

bermudolikiof[at]yahoo.com

bernandos45[at]yahoo.com

berofadass[at]yahoo.com

berofadolija[at]yahoo.com

bertogafass[at]yahoo.com

bertogulajis[at]yahoo.com

bertokilads[at]yahoo.com

bestleads_int[at]yahoo.com

biernat12qwef[at]yahoo.com

biglermatthew[at]yahoo.com

bizauto[at]yahoo.com

biznamesoffshore[at]yahoo.com

blackbearpro[at]yahoo.com

blldee[at]yahoo.com

bnerofiladof[at]yahoo.com

bnthroop[at]yahoo.com

bobhutchins007[at]yahoo.com

bobotkrass12[at]yahoo.com

borrisodasf[at]yahoo.com

bostorafowi[at]yahoo.com

bredsukiloka[at]yahoo.com

bremostall[at]yahoo.com

brianchdddadwell[at]yahoo.com

brianfactor23ik2k23[at]yahoo.com

brianfactor382834522[at]yahoo.com

bronkevich[at]yahoo.com

brown2003sd[at]yahoo.com

brtojeikals[at]yahoo.com

btgredokilj[at]yahoo.com

buldoservkk_555[at]yahoo.com

bulkisbest[at]yahoo.com

bulky14u[at]yahoo.com

bumerigosiona[at]yahoo.com

burns_burns29[at]yahoo.com

bushelping[at]yahoo.com

bvmnbvmv[at]yahoo.com

byijukisad[at]yahoo.com

c45ountryedom[at]yahoo.com

c65c2306[at]yahoo.com

c9fb10fa[at]yahoo.com

caitlinqdql[at]yahoo.com

calliancellc[at]yahoo.com

campbellproff[at]yahoo.com

cappola1212[at]yahoo.com

capt_tom_in_fl[at]yahoo.com

cargapesadausa[at]yahoo.com

carla_pard1[at]yahoo.com

carlisle_jerry2[at]yahoo.com

carlisle_jerry[at]yahoo.com

carmen2004fsdf[at]yahoo.com

casa_for_2000[at]yahoo.com

castelgirl01[at]yahoo.com

cbrisbine_w[at]yahoo.com

centralmidsx[at]yahoo.com

cerfojjaz[at]yahoo.com

cewrtuoony[at]yahoo.com

cf669753[at]yahoo.com

charlesbechertop[at]yahoo.com

charlinegfr[at]yahoo.com

cheaplaptopsplus[at]yahoo.com

chrisflanchard[at]yahoo.com

chrishampton_z[at]yahoo.com

chrishgddllavis[at]yahoo.com

chrissstofffer34[at]yahoo.com

christensonpro00[at]yahoo.com

christiewelker[at]yahoo.com

christopherbrown88[at]yahoo.com

chudogertok[at]yahoo.com

clearnodes[at]yahoo.com

clementvalance[at]yahoo.com

cliftikus_parkin[at]yahoo.com

colemandian[at]yahoo.com

com_service_info[at]yahoo.com

comcash88[at]yahoo.com

cooloceanbreeze23[at]yahoo.com

coremedialinks[at]yahoo.com

corpora5656[at]yahoo.com

cospacemedia[at]yahoo.com

craig2004asd[at]yahoo.com

cunningham1fgd15[at]yahoo.com

cypresshill0014[at]yahoo.com

danielaylory[at]yahoo.com

danielolivererd[at]yahoo.com

darylfaeth[at]yahoo.com

davidminciuna[at]yahoo.com

davidosecott[at]yahoo.com

daviiidmlauman[at]yahoo.com

debra_l_beckstead[at]yahoo.com

debtfreemall[at]yahoo.com

defilippi8[at]yahoo.com

defloratog[at]yahoo.com

delikatessing[at]yahoo.com

deloprost[at]yahoo.com

denniscarterent[at]yahoo.com

deribanchik56[at]yahoo.com

dernovastree[at]yahoo.com

dflghdosgdf[at]yahoo.com

dginkus[at]yahoo.com

dhoffman_jcexport[at]yahoo.com

diamondstyle5[at]yahoo.com

dianneeeenkins[at]yahoo.com

dibilitosfah[at]yahoo.com

dibiltusons[at]yahoo.com

dickmood84[at]yahoo.com

digipointer[at]yahoo.com

digitalbulbes[at]yahoo.com

dimansdraniy[at]yahoo.com

dimonbu041[at]yahoo.com

directemailtools[at]yahoo.com

diskojukoliu[at]yahoo.com

dns_american[at]yahoo.com

doma1nadm[at]yahoo.com

domainalias[at]yahoo.com

domregjw[at]yahoo.com

dongildon[at]yahoo.com

donnivbrnrmqdos[at]yahoo.com

doooorer[at]yahoo.com

doubleopt[at]yahoo.com

doyoulikebeans[at]yahoo.com

dreamcast345[at]yahoo.com

dregistrar7[at]yahoo.com

dressisless[at]yahoo.com

dsouzacecil[at]yahoo.com

du9007[at]yahoo.com

dughowser[at]yahoo.com

duminica1[at]yahoo.com

durkychipsat23[at]yahoo.com

durnotafixxx[at]yahoo.com

duvitus[at]yahoo.com

dynmc_dude[at]yahoo.com

easterhaven_3[at]yahoo.com

easyclickusa[at]yahoo.com

easyinfofinder[at]yahoo.com

easyyourid123[at]yahoo.com

eat4less99[at]yahoo.com

ebayprg[at]yahoo.com

ebayworldwidebiz[at]yahoo.com

eduilikiwerf[at]yahoo.com

egor_kalinin[at]yahoo.com

ejefirumask[at]yahoo.com

electricangel57[at]yahoo.com

elixsuperstores[at]yahoo.com

email2sell2000[at]yahoo.com

emediaspace[at]yahoo.com

emilysedreen[at]yahoo.com

emmymonnee7[at]yahoo.com

endril2003[at]yahoo.com

enhancedmarketing[at]yahoo.com

envietech2[at]yahoo.com

erfijaliodfa[at]yahoo.com

erichtaqwgikpixtpgiflly[at]yahoo.com

eroferetolk[at]yahoo.com

erofijasipo[at]yahoo.com

erogikiliopd[at]yahoo.com

erogiliokd[at]yahoo.com

erokilosad[at]yahoo.com

erokilosadio[at]yahoo.com

ervdorioplo[at]yahoo.com

expostgroup[at]yahoo.com

fabrikadlio[at]yahoo.com

faceonme333[at]yahoo.com

fakallota[at]yahoo.com

farrenfrfdfright[at]yahoo.com

federicokosciuk[at]yahoo.com

feedbackjj1234[at]yahoo.com

feliciafields20[at]yahoo.com

fengshuibathroom[at]yahoo.com

ferarry_dosky[at]yahoo.com

ferdinadoj[at]yahoo.com

feriolpasd[at]yahoo.com

feterf[at]yahoo.com

fgdjeedvg[at]yahoo.com

fgdsyfioyfd[at]yahoo.com

fikaliiodos[at]yahoo.com

fingertoskal[at]yahoo.com

fingertrax[at]yahoo.com

firstonenets[at]yahoo.com

fivefootrobot[at]yahoo.com

fliescomcast[at]yahoo.com

flojo6969[at]yahoo.com

foote2004das[at]yahoo.com

fotagolakj[at]yahoo.com

foxqn[at]yahoo.com

frederickmalkis[at]yahoo.com

fredrikaahjzneu[at]yahoo.com

freedoctordrugs[at]yahoo.com

freeeman_be[at]yahoo.com

freerecepts[at]yahoo.com

friskemojan[at]yahoo.com

fruityshadow[at]yahoo.com

fstosemstels[at]yahoo.com

gaillynn56fggh[at]yahoo.com

galenbacon[at]yahoo.com

gamblers1000[at]yahoo.com

gamoverdreeve[at]yahoo.com

garrickpmtypmxjbbqf[at]yahoo.com

garrylovelien[at]yahoo.com

gartner_ronald[at]yahoo.com

garybowerns[at]yahoo.com

garykellison2004[at]yahoo.com

gd_more[at]yahoo.com

georginnnne[at]yahoo.com

gerafadva[at]yahoo.com

geraldellioitys[at]yahoo.com

germanaedpqxuba[at]yahoo.com

gertizators343[at]yahoo.com

gggeorgenorris[at]yahoo.com

gidroviljkm[at]yahoo.com

giframes[at]yahoo.com

giftcardpro[at]yahoo.com

giftcity04[at]yahoo.com

gin_cole[at]yahoo.com

gintzgin4332[at]yahoo.com

gki999[at]yahoo.com

glazerbeans[at]yahoo.com

glennsessmer[at]yahoo.com

gnidaskasd[at]yahoo.com

gnidazadrota[at]yahoo.com

gniggoldazzq[at]yahoo.com

goji_dt[at]yahoo.com

golimyiduk[at]yahoo.com

gonzales_maria_702[at]yahoo.com

goodniger1[at]yahoo.com

goods008[at]yahoo.com

gooperunix[at]yahoo.com

gopermanskiy[at]yahoo.com

goperstopas[at]yahoo.com

gordonstamatson[at]yahoo.com

gotchillz[at]yahoo.com

gpmnetlilly[at]yahoo.com

graffstuk5[at]yahoo.com

grangrothsr[at]yahoo.com

greatdud45[at]yahoo.com

greatsoftware76[at]yahoo.com

grebana1[at]yahoo.com

greece_gont[at]yahoo.com

greekemaillists[at]yahoo.com

greenseyvscx[at]yahoo.com

greg12023[at]yahoo.com

gregocox[at]yahoo.com

grooveboxing_hot[at]yahoo.com

gubninofila[at]yahoo.com

haburgin[at]yahoo.com

hahehu20002000[at]yahoo.com

hailamarepro[at]yahoo.com

haivinoconiac[at]yahoo.com

haleighfmfoxyfgxfyuk[at]yahoo.com

halordisasda[at]yahoo.com

hameropern[at]yahoo.com

hanstaris3434[at]yahoo.com

haroldefhaw[at]yahoo.com

hearingaidsplus[at]yahoo.com

hecupsdge[at]yahoo.com

helpteamassistance[at]yahoo.com

hennetholdenedfsfdg[at]yahoo.com

henrypro567[at]yahoo.com

herbalfuzion[at]yahoo.com

herifamojall[at]yahoo.com

hermandovsk[at]yahoo.com

hermyfauefcoamhd[at]yahoo.com

hernyadersya23d[at]yahoo.com

hettiuw[at]yahoo.com

heyimdumm[at]yahoo.com

hfernandezuno[at]yahoo.com

hikalogigkasno[at]yahoo.com

hikorafas2[at]yahoo.com

hinterindustry[at]yahoo.com

hipper_trip[at]yahoo.com

hirurtijo31[at]yahoo.com

hlamidiifotky[at]yahoo.com

hohnermilasdupa[at]yahoo.com

hohnertruu[at]yahoo.com

hollowaypro33[at]yahoo.com

holmandxjcgbjzk[at]yahoo.com

hooferman777[at]yahoo.com

hoooleytroo[at]yahoo.com

hoopergradis[at]yahoo.com

hooperman2356[at]yahoo.com

hoser6924[at]yahoo.com

hostvt[at]yahoo.com

hubbard2005qwdq[at]yahoo.com

hulismotrish[at]yahoo.com

hundasynuok23ss[at]yahoo.com

hunnies56[at]yahoo.com

huypoymichtonuik[at]yahoo.com

ibe99[at]yahoo.com

ieh59k45u56ile[at]yahoo.com

ijustwanttoc[at]yahoo.com

iluymifodas[at]yahoo.com

ilysaonqvjg[at]yahoo.com

indi2adkiiro[at]yahoo.com

infertidol[at]yahoo.com

injefrotog[at]yahoo.com

inkstore4283[at]yahoo.com

inkstore5000[at]yahoo.com

insh[at]yahoo.com

intermarketingessentials[at]yahoo.com

internationaldevelopmentnevis[at]yahoo.com

intnlms[at]yahoo.com

investplansnow[at]yahoo.com

iolqewrtasda[at]yahoo.com

iovinomichael35[at]yahoo.com

ironstarmed[at]yahoo.com

irvingersaksend[at]yahoo.com

iskraspower_too[at]yahoo.com

ispdnshelp[at]yahoo.com

ispserverhelp[at]yahoo.com

jackson[at]yahoo.com

jackson_kriner[at]yahoo.com

jackyeo88[at]yahoo.com

jackykennedy2000[at]yahoo.com

jadoooy[at]yahoo.com

jahsinclair[at]yahoo.com

jamesdfasterer[at]yahoo.com

jameselsen[at]yahoo.com

jande17441[at]yahoo.com

janosalor[at]yahoo.com

jaretodd[at]yahoo.com

jarondi9969[at]yahoo.com

jasonshrader2004[at]yahoo.com

jasternakert_op[at]yahoo.com

jcerqua[at]yahoo.com

jeffedtaubach[at]yahoo.com

jeffreyjenkin[at]yahoo.com

jegalikonad[at]yahoo.com

jeiodasaf[at]yahoo.com

jeniferlejsdir[at]yahoo.com

jenniferughes[at]yahoo.com

jerogaliiz[at]yahoo.com

jerry_krenning[at]yahoo.com

jerrydfietz[at]yahoo.com

jerryleming[at]yahoo.com

jewellnh[at]yahoo.com

jgb5552003[at]yahoo.com

jikolafoda[at]yahoo.com

jintuchiu[at]yahoo.com

jivitansi[at]yahoo.com

jjebnayjj[at]yahoo.com

joebgoodt45[at]yahoo.com

joedeollowell[at]yahoo.com

joelmaxidrom[at]yahoo.com

joelparkins[at]yahoo.com

johnchang26[at]yahoo.com

johnliv44[at]yahoo.com

johnson37303[at]yahoo.com

joker2newdomains[at]yahoo.com

jombangsity[at]yahoo.com

jon2china[at]yahoo.com

jon4u28[at]yahoo.com

joohnsm1th[at]yahoo.com

jordway_wor[at]yahoo.com

joretra[at]yahoo.com

jorjettaks[at]yahoo.com

josdillard[at]yahoo.com

jrattan420[at]yahoo.com

jrhomes34[at]yahoo.com

judithkaflchthaler[at]yahoo.com

judy_drench[at]yahoo.com

judyfodonovan[at]yahoo.com

jumanjibiz[at]yahoo.com

kalimonjasty[at]yahoo.com

kalosandrik[at]yahoo.com

kamasutra56755[at]yahoo.com

kammasutra_mail[at]yahoo.com

kampo_eeasure34[at]yahoo.com

kaoniblasterfas[at]yahoo.com

kapel_maydster[at]yahoo.com

kar1620hotmail[at]yahoo.com

kartinovich6734[at]yahoo.com

kashelot_yopa[at]yahoo.com

kasser56man[at]yahoo.com

kastrikus3223[at]yahoo.com

katemygoodfriend[at]yahoo.com

katypater[at]yahoo.com

kcockerell[at]yahoo.com

kennnyallows[at]yahoo.com

kenwardleeee[at]yahoo.com

kev4x42002[at]yahoo.com

kevinazm3[at]yahoo.com

kevowinkler[at]yahoo.com

kievstarder[at]yahoo.com

kijufuhyter[at]yahoo.com

kiligofaddik[at]yahoo.com

kilofsdasiop[at]yahoo.com

kilogramafonka[at]yahoo.com

kimberlywpbqgaijreelwlttgqj[at]yahoo.com

kimonojoelovsk[at]yahoo.com

kjqnrs[at]yahoo.com

kkkrogers[at]yahoo.com

klokafads[at]yahoo.com

kolasdercvkl[at]yahoo.com

kolertroop[at]yahoo.com

kolesyrt777[at]yahoo.com

kolovorotesa32[at]yahoo.com

kom12andus89o[at]yahoo.com

komfotable3[at]yahoo.com

komintersinoff34[at]yahoo.com

kpalma[at]yahoo.com

kuasdalas1[at]yahoo.com

l0ool0[at]yahoo.com

lapuhh77[at]yahoo.com

lauralregaryxkrtbizyqqjbpvqx[at]yahoo.com

lauriejlllee[at]yahoo.com

leadkid1[at]yahoo.com

leadstop[at]yahoo.com

lee2005asd[at]yahoo.com

leescottiko[at]yahoo.com

leodavinchitaz[at]yahoo.com

leonardomojana[at]yahoo.com

lewliskroas[at]yahoo.com

libbett2000[at]yahoo.com

liborfinance[at]yahoo.com

ligareltd[at]yahoo.com

lighthouseink2004[at]yahoo.com

lightningpixels[at]yahoo.com

liopoldogas[at]yahoo.com

lisadavis187[at]yahoo.com

lizamineli78[at]yahoo.com

localsport123[at]yahoo.com

lodochkajin[at]yahoo.com

loidfrank5[at]yahoo.com

lokadofijas[at]yahoo.com

loopernovsky[at]yahoo.com

lornairrytabotv[at]yahoo.com

lttechcorp[at]yahoo.com

ludlumpro22[at]yahoo.com

luiscondado020[at]yahoo.com

lukovic_katarina[at]yahoo.com

maacoshark2005[at]yahoo.com

mahinosdriove[at]yahoo.com

mailearth000[at]yahoo.com

mailko_gnet[at]yahoo.com

mailplusus123[at]yahoo.com

malfredmalhoy[at]yahoo.com

malinovkidf[at]yahoo.com

malsrati45ff_f[at]yahoo.com

mamantenok34[at]yahoo.com

manaashimoto[at]yahoo.com

manojoan[at]yahoo.com

manuelendon[at]yahoo.com

marcellolubauruxzxh[at]yahoo.com

marciaosterkamp[at]yahoo.com

marcoderecalde[at]yahoo.com

marilyndmfabo[at]yahoo.com

mariner345435[at]yahoo.com

marketingdecyrus[at]yahoo.com

markmclellean[at]yahoo.com

markobiolt[at]yahoo.com

masshernan[at]yahoo.com

masskritical_der[at]yahoo.com

masturok458f[at]yahoo.com

matthuszuayiudpxbsbx[at]yahoo.com

maturemaggie[at]yahoo.com

maximuslist[at]yahoo.com

mazafishing[at]yahoo.com

mazulanitro[at]yahoo.com

mdamoniajas23[at]yahoo.com

meagain6924[at]yahoo.com

medeirosdfdf[at]yahoo.com

megalomaxxs[at]yahoo.com

mejokafassv[at]yahoo.com

melco_37752[at]yahoo.com

melleni[at]yahoo.com

menfakakas[at]yahoo.com

menijukiosda[at]yahoo.com

menofadolizza[at]yahoo.com

menrioploisd[at]yahoo.com

mentofikaliiis[at]yahoo.com

mentogafilod[at]yahoo.com

mentotononga[at]yahoo.com

menturafogn[at]yahoo.com

merfolikand[at]yahoo.com

merifiolotr[at]yahoo.com

merijukcsax[at]yahoo.com

merincyikal[at]yahoo.com

meriopilikasdos[at]yahoo.com

meriopolisdas[at]yahoo.com

merofadokq[at]yahoo.com

merofolikoja[at]yahoo.com

merolakojasd[at]yahoo.com

metalsosikal[at]yahoo.com

metrobroad[at]yahoo.com

mgssacr[at]yahoo.com

miamybitch[at]yahoo.com

michael_aag[at]yahoo.com

michaelharet3[at]yahoo.com

michaelrwood[at]yahoo.com

miclconn890fc[at]yahoo.com

mightyllc[at]yahoo.com

mijodasoilk[at]yahoo.com

mikejulieus2001[at]yahoo.com

mikeluckner[at]yahoo.com

miketblaine[at]yahoo.com

mikluhinspashkid[at]yahoo.com

millerctggzcmfj[at]yahoo.com

minitogilos[at]yahoo.com

mixenfree[at]yahoo.com

mjarchambe_pton[at]yahoo.com

mkelshelton[at]yahoo.com

mlorb07701[at]yahoo.com

mmattheweehrhardt[at]yahoo.com

mnetafohit[at]yahoo.com

mnetorafokj[at]yahoo.com

moricone04[at]yahoo.com

moricone2004[at]yahoo.com

moviemailawards[at]yahoo.com

mssntny[at]yahoo.com

mudiuolofsae[at]yahoo.com

musicshopping123[at]yahoo.com

my26f[at]yahoo.com

my_work_contacts[at]yahoo.com

mydomains0[at]yahoo.com

myhomesouth[at]yahoo.com

myinfoishere[at]yahoo.com

mysweetmelody12[at]yahoo.com

nameprovider456[at]yahoo.com

nameserver2004[at]yahoo.com

naomisefnell[at]yahoo.com

nathandumasdumas[at]yahoo.com

neanerj0906[at]yahoo.com

nehocusleep[at]yahoo.com

nelsonrod1812[at]yahoo.com

netanalize[at]yahoo.com

newageoptin[at]yahoo.com

newhosting101[at]yahoo.com

newport4play[at]yahoo.com

nickolsmudrison45[at]yahoo.com

nilahebrown[at]yahoo.com

nileshbht[at]yahoo.com

nitahop[at]yahoo.com

nixardiofioman[at]yahoo.com

njeldskd[at]yahoo.com

nnl357[at]yahoo.com

nnl789[at]yahoo.com

nnlhsc[at]yahoo.com

nnlvnn1[at]yahoo.com

nnp2004[at]yahoo.com

nofertrooman[at]yahoo.com

normanstuper[at]yahoo.com

novireakters[at]yahoo.com

nucoolpistuk_oop0[at]yahoo.com

numberzzz2302[at]yahoo.com

oimadm[at]yahoo.com

olgakelcher[at]yahoo.com

onemillion2006[at]yahoo.com

opareergoniot[at]yahoo.com

openallus[at]yahoo.com

openthedoor33[at]yahoo.com

opersan123tik[at]yahoo.com

opremondcs[at]yahoo.com

othansikpas0w[at]yahoo.com

outbox1212[at]yahoo.com

outbox1313[at]yahoo.com

p4ck37p1mp[at]yahoo.com

p_norte75[at]yahoo.com

palermobill[at]yahoo.com

palermosdd_5hasb[at]yahoo.com

palermotizzzaon34[at]yahoo.com

parashutynig723[at]yahoo.com

pastagoe_from[at]yahoo.com

pastorofnewda[at]yahoo.com

pat2chan88[at]yahoo.com

patricvwvqrb[at]yahoo.com

paulafrye[at]yahoo.com

paulb50[at]yahoo.com

paulinoriose[at]yahoo.com

paulno3ck45[at]yahoo.com

peacekeepers04[at]yahoo.com

pedalismedal[at]yahoo.com

pedro_wentas[at]yahoo.com

peggiesrympeggg[at]yahoo.com

pelington2[at]yahoo.com

perhamarchi[at]yahoo.com

peteraaamp[at]yahoo.com

peteranyia[at]yahoo.com

picklesflex[at]yahoo.com

pimprevolutions6[at]yahoo.com

pleased2helpyou[at]yahoo.com

porigunsuper5[at]yahoo.com

pravilo_takovyh[at]yahoo.com

primavista100[at]yahoo.com

prioritymailnet[at]yahoo.com

prman628[at]yahoo.com

promo_group2004[at]yahoo.com

proxydomainsga[at]yahoo.com

pwlameapunctcom[at]yahoo.com

qualityoffers888[at]yahoo.com

qwn1kiuy1o9821[at]yahoo.com

ragnarapmpwojwj[at]yahoo.com

rakotarab[at]yahoo.com

randyvalonovsky19519912[at]yahoo.com

recari_32[at]yahoo.com

reddyworkiam[at]yahoo.com

redrosevilote[at]yahoo.com

regularaf[at]yahoo.com

remarkselect[at]yahoo.com

reqs233[at]yahoo.com

resp_amer3[at]yahoo.com

resp_amer4[at]yahoo.com

reteryscunk[at]yahoo.com

rian_gifford[at]yahoo.com

richardgodiniif[at]yahoo.com

richardsdora[at]yahoo.com

ricxhardsons_baggins[at]yahoo.com

ritalestes[at]yahoo.com

robertfdgscott[at]yahoo.com

robertocusmas[at]yahoo.com

robertosehausmann[at]yahoo.com

robertroussard[at]yahoo.com

robertuiogle[at]yahoo.com

robinsonpro543[at]yahoo.com

robinsonyahting[at]yahoo.com

rogers007email[at]yahoo.com

roslynibbnaqklxh[at]yahoo.com

rubberbandofruin[at]yahoo.com

rudiekgkxzoleefafdgf[at]yahoo.com

ruspo69[at]yahoo.com

rxrocks02[at]yahoo.com

rxrocks05[at]yahoo.com

sallyriffith[at]yahoo.com

samandco[at]yahoo.com

sandejvsxtiqbrka[at]yahoo.com

sandrabartelsmeyer[at]yahoo.com

santagonzales2004[at]yahoo.com

sarum5an456[at]yahoo.com

sbeinbells[at]yahoo.com

scottlmilllerrr[at]yahoo.com

secretfoodstash[at]yahoo.com

sendlotsofmoney[at]yahoo.com

senngoc2002[at]yahoo.com

serenadsky763[at]yahoo.com

serinadosku[at]yahoo.com

sevensells11[at]yahoo.com

shinenbeath0014[at]yahoo.com

shoppingspree101[at]yahoo.com

silly_girl1950[at]yahoo.com

silverwpaperclip[at]yahoo.com

site9327[at]yahoo.com

sites_signup[at]yahoo.com

skintechtonit[at]yahoo.com

snatana_barbara45[at]yahoo.com

snjvbhatia[at]yahoo.com

snuffherout[at]yahoo.com

sobhi4[at]yahoo.com

soglasenop[at]yahoo.com

sopcoll75[at]yahoo.com

spongedanblueshorts[at]yahoo.com

spyret4[at]yahoo.com

starmediallc[at]yahoo.com

stephenielmvihmkylb[at]yahoo.com

steve5666hn[at]yahoo.com

stevedfmeehan[at]yahoo.com

steven_tan99[at]yahoo.com

stevenmatzingerrrr[at]yahoo.com

stevenplantyko[at]yahoo.com

stevenricensy[at]yahoo.com

storagename123[at]yahoo.com

stream_tech_biz[at]yahoo.com

stuartg37[at]yahoo.com

stuartvoid[at]yahoo.com

stvegreer[at]yahoo.com

subscriberbaseholdings[at]yahoo.com

suckducker72172[at]yahoo.com

sunossistem[at]yahoo.com

susanekupley[at]yahoo.com

swiggins1430[at]yahoo.com

sybaspy[at]yahoo.com

t_joanne2003[at]yahoo.com

tbanks0071[at]yahoo.com

tcmurfttb56[at]yahoo.com

tererce[at]yahoo.com

testertool[at]yahoo.com

teverjustin[at]yahoo.com

thejoeycrack[at]yahoo.com

thenancyhot[at]yahoo.com

theodinshiy343[at]yahoo.com

thomasonermandf[at]yahoo.com

thompsonpwork[at]yahoo.com

thousandeleven[at]yahoo.com

tinyroller[at]yahoo.com

tistarnick[at]yahoo.com

tjamie001[at]yahoo.com

tlitwininteractive[at]yahoo.com

tnymission[at]yahoo.com

tomchri6stensen[at]yahoo.com

tomlaszlo[at]yahoo.com

toniapet230[at]yahoo.com

troybaker1709[at]yahoo.com

trukertraxxx[at]yahoo.com

trumannurtcodbhx[at]yahoo.com

trumanooddd[at]yahoo.com

ttscottsttcottscott[at]yahoo.com

tush_amin2004[at]yahoo.com

txinkstore[at]yahoo.com

tync[at]yahoo.com

u2marketing[at]yahoo.com

unopliksantis8[at]yahoo.com

updates21[at]yahoo.com

urp69247[at]yahoo.com

valenki_moinew3[at]yahoo.com

vasperpro44[at]yahoo.com

vestahooleo[at]yahoo.com

vasperpro44[at]yahoo.com

vestahooleo[at]yahoo.com

vineri092[at]yahoo.com

viviqvobjkceiawjqndgxgw[at]yahoo.com

vladsofts[at]yahoo.com

vorona_vzgramostyah[at]yahoo.com

vorontsev_d[at]yahoo.com

warchildwarchild[at]yahoo.com

waves692[at]yahoo.com

weliveinthetechnoera[at]yahoo.com

westbrooktibwiftsutqalhpsxkakzx[at]yahoo.com

whozurmedia[at]yahoo.com

wilhelmy4ear[at]yahoo.com

wiliewjnhnxpjzagqodljlh[at]yahoo.com

wllbnmason[at]yahoo.com

woosmen[at]yahoo.com

wttandco[at]yahoo.com

wtxrazzle[at]yahoo.com

wyatantezcaplavvydud[at]yahoo.com

xesrester[at]yahoo.com

y00938la1[at]yahoo.com

yarica2004asfd[at]yahoo.com

ynound344d_88[at]yahoo.com

yserer_34[at]yahoo.com

zachmagarak[at]yahoo.com

zedexcorp[at]yahoo.com

zesty_dan[at]yahoo.com

ziareus2004[at]yahoo.com

zipperlious[at]yahoo.com

Jeff G. · December 21, 2004

Excellent! If you can compare the email addresses up with the domains and plug them into the following scripts, you'll go far!

To: "MSN Hotmail Technical Support" <abuse_EN_SY[at]css.one.microsoft.com> or abuse[at]msn.com [as appropriate]
Subject: Commercial use of []

MSN [Hotmail] Technical Support Personnel - your user [] registered [and spammed] commercial domain [] in violation of the Term "Unless otherwise specified, the MSN Sites/Services are for your personal and non-commercial use" of your "MSN Terms of Use" per your page http://privacy.msn.com/tou/ - please enforce that Term.

Thanks and Best Regards,

[Your Name]

----- Evidence Follows -----

To: mail-abuse[at]yahoo-inc.com, postmaster[at]yahoo.com
Subject: Commercial Use of []

Yahoo! Customer Care Representatives - your customer registered and spammed commercial domain [], exploiting that customer's Yahoo! I.D. and Email portions of your Service for commercial purposes in violation of Term 10 of your Yahoo! Terms of Service at http://docs.yahoo.com/info/terms/ . Please enforce that Term.

Thanks and Best Regards,

[Your Name]

----- Evidence Follows -----

I believe the Yahoo! Terms of Service apply worldwide.

get-even · December 21, 2004

Excellent! If you can compare the email addresses up with the domains and plug them into the following scripts, you'll go far!I believe the Yahoo! Terms of Service apply worldwide.

21681[/snapback]

Be done toight (just a little egrep/sed/sort to the raw data - collected, probably 200K+ lines of

raw whois data on active in the past month spam domains - amazing what you can find easily)

I also have 489 hotmail.com accounts. How about lycos.com or gmail (far fewer of them).?

Just Yahoo (if worldwide) and Hotmail alone should (begine the process to kill about 700-1500

of these spam domains (depends on number of distinct contact/registrant emails in each domain

and the fact that most of these email addresses are used for multiple domains).

StevenUnderwood · December 21, 2004

Just Yahoo (if worldwide) and Hotmail alone should (begine the process to kill about 700-1500 of these spam domains (depends on number of distinct contact/registrant emails in each domain and the fact that most of these email addresses are used for multiple domains).

Just remember that this is a two step process. You get the address disabled then complain to the registrar that the address in the registration is invalid. The registrar is supposed to then disable the account, but that does not always happen either (spam friendly registrars).

get-even · December 22, 2004

Just remember that this is a two step process. You get the address disabled then complain to the registrar that the address in the registration is invalid. The registrar is supposed to then disable the account, but that does not always happen either (spam friendly registrars).

21684[/snapback]

http://wdprs.internic.net alone usually doesn't work, but with a phone call (and without fraud, the

recommended ICANN period is 15 days - Network Solutions takes 45+, other registrars have acted

within 10 days) -- Yes, **been there** myself already (many hundreds of domains gone) - hence

"begine (sic-typo) the process". And yes, many (Enom comes to mind) ignore the issue, others

like Joker, suspend the account, but leave the DNS records up so the domain can continue to

function. IMO GoDaddy's NS1.SUSPENDED-FOR.spam-AND-ABUSE.COM and NS2... are the

best solution; Network Solutions' common simple delete is the worst as the spammers can re-register

after a month and recover `some' of the value. Bestregistrar's "TERMINATED" is a good middle ground

(keeps the domain from being used or re-used).

get-even · December 22, 2004

[...
And yes, many (Enom comes to mind) ignore the issue

...

21685[/snapback]

And of course forget about any response from Yesnic, Gandi, Wildwestdomains, Afilias,

Parava.net or Stargateinc (these are either "spam-friendly" or owned by actual spammers

(like many of Enom affiliates are the actual spammers, and Enom delegates the "responsibility"

to them to delete themselves... yea)

Still, with pressure, nearly every US or Canandian registrar will act (you often have to provide

evidence of fraud (ex. fake headers), and CC: everyone from the FTC to the Internic (who ignores

complaints except for statistical purposes *or* if you show fraud).

P.S. Bulkregister should also be commended for their "NSxxx.NO-LONGER-VALID.COM" entries.

get-even · December 22, 2004

Excellent! If you can compare the email addresses up with the domains and plug them into the following scripts, you'll go far!I believe the Yahoo! Terms of Service apply worldwide.

21681[/snapback]

Complaints sent to Yahoo: 826 accounts, 2706 domains. I greatly underestimated the amount of

data I had to process - I had nearly 5G of spammer whois data. (unfortunately about a dozen were

registered *with* Yahoo itself - i.e. yahoo-inc.com and "YNS..." as nme servers - I believe these are

Yahoo "commercial" accounts). Also, some registrars "whois" data was strangely formatted so I sill

have about 500 of 16,000 spam domains to check.

I'll get to Hotmai.coml later today.

The Yahoo list of domains and accounts:

* DOMAIN * - registrant & contact emails (some dups)

Domain Name: interferencema.com - alexanderlinder[at]163.com deloprost[at]yahoo.com

Domain Name: lukebe.com - alexanderlinder[at]163.com freeeman_be[at]yahoo.com

Domain Name: baskkis.com - medservice44[at]163.com kastrikus3223[at]yahoo.com

Domain Name: forcechief.com - alexanderlinder[at]163.com sarum5an456[at]yahoo.com

Domain Name: callis4u.com - stanley[at]airspeedwireless.ca franks932[at]yahoo.ca

Domain Name: iwillsee.com - stanley[at]airspeedwireless.ca franks932[at]yahoo.ca

Domain Name: candyspage.info - msg[at]allied.org aportu89_nity[at]yahoo.com

Domain Name: amzoffrdt.com - cs[at]amazingoffersdirect.com hoooleytroo[at]yahoo.com

Domain Name: artddfrr.com - cs[at]amazingoffersdirect.com pimprevolutions6[at]yahoo.co

m

Domain Name: hotazz.biz - domainreg[at]axisww.com regs[at]pmbinc.com durkychipsat23[at]ya

hoo.com

Domain Name: luckypennyoffers.com - jimbaumhart[at]bellsouth.net sa[at]tramex.net ynou

nd344d_88[at]yahoo.com sa[at]tramex.net

Domain Name: bestnnetnst.com - cs[at]bestonthenet4u.com durnotafixxx[at]yahoo.com alex

anderlinder[at]163.com

Domain Name: bayname.net - info[at]bonusbonez.com graffstuk5[at]yahoo.com

Domain Name: chatlogic.net - info[at]bonusbonez.com johnchang26[at]yahoo.com

Domain Name: boombasket.net - info[at]bonusbonez.com pastagoe_from[at]yahoo.com

Domain Name: askmebiz.net - askmeto[at]ce.wakwak.com nofertrooman[at]yahoo.com

Domain Name: freerazorzone.com - admin[at]click-123.com freerecepts[at]yahoo.com

Domain Name: fredmiller.biz - vegi[at]comcast.net domain.billing[at]yahoo-inc.com

Domain Name: my-screename-aol.com - heidib[at]comcast.net expostgroup[at]yahoo.com

Domain Name: differentwatches.info - lauramanagement[at]consult.uk expostgroup[at]yaho

o.com

Domain Name: ipoiyt.com - contact[at]cutpricerxpills.com pravilo_takovyh[at]yahoo.com

Domain Name: dareelsethough.com - domain-contact[at]dicewebhosting.com lapuhh77[at]yah

oo.com

Domain Name: hoaereshd.info - ruslanyavorenko[at]digiverse.net nnl357[at]yahoo.com

Domain Name: impower.biz - dave[at]e360insight.com mahinosdriove[at]yahoo.com

Domain Name: bohnhardt.us - welch[at]easy.com palermobill[at]yahoo.com sa[at]tramex.net

Domain Name: faster44.com - netoperations[at]efreemail.com carla_pard1[at]yahoo.com

Domain Name: likeblue.com - sales[at]elogic.cc sales[at]bluepal.net sales[at]elogic.cc as

dgre12bana1[at]yahoo.com alexanderlinder[at]163.com

Domain Name: iynkp.biz - ivanchoras[at]email.com expostgroup[at]yahoo.com

Domain Name: authorizer.org - ukepenger[at]emailaccount.com ardeipetoti[at]yahoo.com

Domain Name: emsiweb.com - mbrown[at]emsi-mail.com kpalma[at]yahoo.com

Domain Name: entry2.info - wendy[at]execs.com vestahooleo[at]yahoo.com

Domain Name: informationrequest.net - abuse[at]expeditemg.com updates21[at]yahoo.com

Domain Name: freedinnerpass.com - support[at]expertsavings.com freedoctordrugs[at]yaho

o.com

Domain Name: easycelebs.com - legal[at]fernandezii.com easyclickusa[at]yahoo.com

Domain Name: bobnow.com - webmaster[at]financialnetcorp.com support[at]000domains.com

hernyadersya23d[at]yahoo.com

Domain Name: imsodamtired.com - juwanda[at]forpresident.com expostgroup[at]yahoo.com

Domain Name: leaflips.com - dnsadmin[at]frisbyfly.com bernandos45[at]yahoo.com

Domain Name: bigbend.us - david[at]fullmoon.us fullmoon[at]gvtc.com mamantenok34[at]yahoo

.com alexanderlinder[at]163.com support[at]speed123.com support[at]speed123.net

Domain Name: gasprinskij.info - support[at]gkg.net paulno3ck45[at]yahoo.com

Domain Name: insanesoftwareprice.com - xmasta[at]gmail.com theodinshiy343[at]yahoo.com

Domain Name: csere.info - markfergu[at]gmx.net hikalogigkasno[at]yahoo.com

Domain Name: dunlapa.info - markfergu[at]gmx.net reteryscunk[at]yahoo.com

Domain Name: electrolyticd.info - domains4sale[at]godaddy.com deribanchik56[at]yahoo.c

om

Domain Name: love3love3.com - support[at]gold-domain.com mariner345435[at]yahoo.com

Domain Name: egoldsearch.com - support[at]gold-domain.com y00938la1[at]yahoo.com

Domain Name: eurostandart.us - jimmy1[at]hehe.com domain.billing[at]yahoo-inc.com

Domain Name: ljmflnjl.info - aranilomucheda[at]hotbox.com steve5666hn[at]yahoo.com

Domain Name: debtdognoq.com - foodforcheap[at]hotmail.com absoltehomes52[at]yahoo.com

foodforcheap[at]hotmail.com

Domain Name: fineforusto.info - mgonzales662[at]hotmail.com alexanderlinder[at]163.com

serinadosku[at]yahoo.com

Domain Name: extremebuyerstore.com - dalena_mssu[at]hotmail.com dalena_mssu[at]hotmail

.com ferarry_dosky[at]yahoo.com

Domain Name: innerpharmacie.com - marvital[at]hotmail.com easterhaven_3[at]yahoo.com w

hois[at]names4ever.com

Domain Name: eveqst.com - eirokds14[at]hotmail.com eirokds14[at]hotmail.com expostgrou

p[at]yahoo.com

Domain Name: iabewrdf.info - sexygeorge6969[at]hotmail.com gopermanskiy[at]yahoo.com

Domain Name: ebatststs.info - sexygeorge6969[at]hotmail.com haivinoconiac[at]yahoo.com

Domain Name: killerwisconsin.info - whiteside1975[at]hotmail.com hundasynuok23ss[at]ya

hoo.com

Domain Name: kinejjni.info - johesephlunheit[at]hotmail.com joelparkins[at]yahoo.com

Domain Name: holyasd.info - jamiehawn[at]hotmail.com kalosandrik[at]yahoo.com malfredm

alhoy[at]yahoo.com

Domain Name: everijungle.com - katarinawitt[at]hotmail.com kitty_send[at]163.com expos

tgroup[at]yahoo.com

Domain Name: kolmndan.com - kolmeod[at]hotmail.com kolmeod[at]hotmail.com gamoverdreev

e[at]yahoo.com aljones[at]mofa.com

Domain Name: magnificentrx.com - j_ocampo49[at]hotmail.com masskritical_der[at]yahoo.c

om

Domain Name: mosteffectiveproducts.com - mister_reden_zamudio[at]hotmail.com mister

_reden_zamudio[at]hotmail.com kitty_send[at]163.com lewliskroas[at]yahoo.com

Domain Name: bestyearproduct.com - mrssusan_dal[at]hotmail.com mrssusan_dal[at]hotmail

.com palermosdd_5hasb[at]yahoo.com

Domain Name: bestproductwinner.com - msmarie_macaluyos[at]hotmail.com msmarie_macal

uyos[at]hotmail.com dongildon[at]yahoo.com

Domain Name: moreairport.com - domainman_zeng[at]hotmail.com pelington2[at]yahoo.com a

lexanderlinder[at]163.com

Domain Name: airlarry.net - chrisbrown89779[at]hotmail.com richardsdora[at]yahoo.com

Domain Name: landolimer.com - katarinawitt[at]hotmail.com serenadsky763[at]yahoo.com

Domain Name: 2upeter.com - domains[at]huntsvilleconsultants.com davidminciuna[at]yahoo

.com

Domain Name: 2upeter.com - domains[at]huntsvilleconsultants.com davidminciuna[at]yahoo

.com

Domain Name: acemarla.com - domains[at]huntsvilleconsultants.com mixenfree[at]yahoo.co

m

Domain Name: acemarla.com - domains[at]huntsvilleconsultants.com mixenfree[at]yahoo.co

m

Domain Name: lectriclime.biz - domains[at]i-global-comm.com buldoservkk_555[at]yahoo.c

om

Domain Name: julydata.net - support27[at]indiatimes.com jumanjibiz[at]yahoo.com

Domain Name: hoolamaco.biz - nospmpls[at]indiatimes.com kampo_eeasure34[at]yahoo.com

Domain Name: bestfourutoo.info - support27[at]indiatimes.com nehocusleep[at]yahoo.com

Domain Name: efigagba.info - kristoffthemilossino[at]joinmail.co expostgroup[at]yahoo.

com

Domain Name: mbsp.biz - kkhan[at]justice.com dreamcast345[at]yahoo.com wfsd[at]163.com

Domain Name: kenasa.com - kenneth[at]kennethphilips.com msn-pa-tech[at]msn.com kennych

iu123[at]yahoo.com.tw

Domain Name: e-casinobliss.net - hostmaster[at]lemon-computing.com ligareltd[at]yahoo.

com

Domain Name: e-casinodelight.net - hostmaster[at]lemon-computing.com ligareltd[at]yaho

o.com

Domain Name: e-gamerdaily.net - hostmaster[at]lemon-computing.com ligareltd[at]yahoo.c

om

Domain Name: e-gamernow.net - hostmaster[at]lemon-computing.com ligareltd[at]yahoo.com

Domain Name: e-gamerreport.com - hostmaster[at]lemon-computing.com ligareltd[at]yahoo.

com

Domain Name: e-gamingdaily.net - hostmaster[at]lemon-computing.com ligareltd[at]yahoo.

com

Domain Name: e-hilarityreport.com - hostmaster[at]lemon-computing.com ligareltd[at]yah

oo.com

Domain Name: e-vacationoffers.net - hostmaster[at]lemon-computing.com ligareltd[at]yah

oo.com

Domain Name: hooplabeat.com - hostmaster[at]lemon-computing.com ligareltd[at]yahoo.com

Domain Name: hoopladaily.com - hostmaster[at]lemon-computing.com ligareltd[at]yahoo.com

Domain Name: herakleitos.info - saralexca[at]lycos.com greatdud45[at]yahoo.com

Domain Name: fatefulbliss.com - robertperriera[at]lycos.com kalimonjasty[at]yahoo.com

Domain Name: covariatea.net - hopomentoser[at]lycos.com nucoolpistuk_oop0[at]yahoo.com

Domain Name: eemciiei.info - afanasiykol[at]mail.ru expostgroup[at]yahoo.com

Domain Name: badhejgh.info - anreygotvinov[at]mail.ru kammasutra_mail[at]yahoo.com

Domain Name: mbagldi.info - karneliykvachen[at]mail.ru palermotizzzaon34[at]yahoo.com

Domain Name: litany2detritus.info - rusecky[at]mail15.com mailko_gnet[at]yahoo.com

Domain Name: duckweight.com - support[at]mailcompanyx.com diamondstyle5[at]yahoo.com

Domain Name: intellectualregulatory.com - support[at]mailcompanyx.com kapel_maydste

r[at]yahoo.com

Domain Name: immediacypark.com - support[at]mailcompanyx.com loopernovsky[at]yahoo.com

Domain Name: basestagger.com - support[at]mailcompanyx.com vorona_vzgramostyah[at]yaho

o.com

Domain Name: benjaminizer.com - registrar[at]marketing4pros.com kolertroop[at]yahoo.co

m

Domain Name: mahina-kikaha.com - webmaster[at]marketingx.com cewrtuoony[at]yahoo.com

Domain Name: mikenessdirect.com - webmaster[at]marketingx.com delikatessing[at]yahoo.c

om

Domain Name: fingertwisted.com - webmaster[at]marketingx.com hoopergradis[at]yahoo.com

Domain Name: kryolnet.com - webmaster[at]marketingx.com sobhi4[at]yahoo.com

Domain Name: bigtopsavings.net - postmaster[at]mediadreamland.com hooferman777[at]yaho

o.com

Domain Name: jobyour.net - postmaster[at]mediadreamland.com unopliksantis8[at]yahoo.co

m

Domain Name: christihaas.net - aljones[at]mofa.com aljones[at]mofa.com chrissstofffer3

4[at]yahoo.com

Domain Name: mydoris.info - aljones[at]mofa.com expostgroup[at]yahoo.com

Domain Name: myelsa.info - aljones[at]mofa.com expostgroup[at]yahoo.com

Domain Name: lagrula.com - aljones[at]mofa.com hecupsdge[at]yahoo.com

Domain Name: family1st.info - lorri_kee[at]msn.com domain.billing[at]yahoo-inc.com

Domain Name: digerhuvud.net - dmorgan[at]myself.com expostgroup[at]yahoo.com

Domain Name: celestecity.com - info[at]nameinvestment.com valenki_moinew3[at]yahoo.com

Domain Name: kdfa.net - soo1996[at]naver.com soo1996[at]koreains.net miraband60[at]yahoo.

co.kr

Domain Name: meteormailer.com - mr9ab4894yx[at]networksolutionsprivateregistration.

com aa_leb[at]yahoo.com

Domain Name: mailandhost.biz - 7ef738b8e00b1946ced842abf630ca75-816186[at]owner.gan

di.net cheap_good_hosting[at]yahoo.ca support[at]gandi.net cheap_good_hosting[at]yahoo.ca

Domain Name: aus-host.com - 9f1d55350095e5f3195a5d62cefbb838-860356[at]owner.gandi.

net domainnameemail[at]yahoo.com.au

Domain Name: jocktryouts.com - b6624d262628323b4a0f987dc267dd0a-517584[at]owner.gan

di.net domains29[at]rackhosters.com masturok458f[at]yahoo.com frederickmalkis[at]yahoo.co

m

Domain Name: happyhourgirls.com - b6624d262628323b4a0f987dc267dd0a-517584[at]owner.

gandi.net domains29[at]rackhosters.com sa[at]tramex.net hunnies56[at]yahoo.com alexanderl

inder[at]163.com kitty_send[at]163.com alexanderlinder[at]163.com