ICANN ICANN Email List Archives

[raa-consultation]


<<< Chronological Index >>>    <<< Thread Index >>>

Mass deletion of serial spamming Registrants domains

  • To: <raa-consultation@xxxxxxxxx>
  • Subject: Mass deletion of serial spamming Registrants domains
  • From: "Mark Samson" <Mark_Samson@xxxxxxxxxxxxxx>
  • Date: Mon, 10 Sep 2007 00:42:24 +0100

Mass deletion of serial spamming Registrant domains
===================================================

Spam is a serious problem with over 85% of email now spam emails. This is a
major source of crime on the Internet, leading to credit card fraud, id
theft and denial of service attacks.

Accredited Registrars must have the proper tools to enable them to mass
delete the domains of Registrants that have proved to be serial spammers.
They must also block continuing attempts at registering spam domains by the
same Registrant. Now that spammers are using massive networks of botnets, it
is often just the Registrar that can take any useful immediate action to
make spam domains unavailable.

The Registrar's Agreement states:

http://www.icann.org/registrars/ra-agreement-17may01.htm#3
"3.7.7.9 The Registered Name Holder shall represent that, to the best of the
Registered Name Holder's knowledge and belief, neither the registration of
the Registered Name nor the manner in which it is directly or indirectly
used infringes the legal rights of any third party."

A Registrant is clearly in breach of the agreement when they are responsible
for multiple spam domains. Registrars should take the proper action to deal
with serial abusers. It is often seen that a Registrar will only deal with
domains for which they are shown spam emails, even though they may be taking
action on a regular basis to delete domains for spamming by an individual
Registrant. They continually accept new domains by the same Registrant
whilst they are deleting a sample of the older domains. This would seem to
make Registrars a knowing participant in the infringement of 3rd party legal
rights that the serial spamming Registrant is committing.

Example
=======

Registrants "Liquid Ventures Inc, Pump It Productions, Etty Productions
Limited, Black Network INC, Health Worldwide Inc, Optin Media Inc and
Speshilov INC have continually been registering domains used in spam emails
on the joker.com Registrar.

This spam group is believed to be part of the "HerbalKing" spam group
documented here:
http://www.spamtrackers.eu/wiki/index.php?title=Herbal_King#Related_Spams

I've sent 3 registered letters and filed over 28 reports with joker.com
since 6th June 2007 concerning these Registrants that continually register
new spam domains under the same nameserver, which is owned by same
registrants and can be on joker.com or Beijing Innovative. joker.com has
thankfully started to take action deleting spam domains after 28 reports,
but continues to accept the continuous stream of further registrations by
these serial spam Registrants. The domains I can report are only a fraction
of those registered. Many other people receiving these spams are reporting
them too.

Recent test of some 120 met-dns.com spam domains reported (spam group has
since moved domains to metdns99.com nameserver). Examples of father spam
domains reported follows.


        met-dns.com          nameserver
Health Worldwide Inc      Registrar:     BEIJING INNOVATIVE LINKAGE
TECHNOLOGY LTD. DBA DNS.COM.CN
Tested  3rd Sept 1530                Domain            Date/Time Added
Registrant
        hold,disabled-due-spa#1      dranik.com        Wed, 29 Aug 2007
19:02:43 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #2      drbana.com        Wed, 29 Aug 2007
18:59:07 +0000    Speshilov INC             Registrar:   JOKER.COM
        hold,disabled-due-spa#3      droegt.com        Wed, 29 Aug 2007
19:46:42 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #4      drogulus.com      Wed, 29 Aug 2007
18:53:54 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #5      droway.com        Wed, 29 Aug 2007
19:17:04 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #6      drugfiar.com      Fri, 31 Aug 2007
00:18:10 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #7      dstripes.com      Wed, 29 Aug 2007
18:53:29 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #8      dtaefree.com      Wed, 29 Aug 2007
18:45:21 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #9      dtosa.com         Wed, 29 Aug 2007
18:46:02 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #10     dudehyip.com      Wed, 29 Aug 2007
18:53:41 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #11     dueiya.com        Thu, 30 Aug 2007
23:18:37 +0000    Speshilov INC             Registrar:   JOKER.COM
        hold,disabled-due-spa#12     dugmu.com         Wed, 29 Aug 2007
18:49:37 +0000    Speshilov INC             Registrar:   JOKER.COM
        hold,disabled-due-spa#13     dukangzy.com      Wed, 29 Aug 2007
18:57:30 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #14     dunmuns.com       Wed, 29 Aug 2007
19:17:17 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #15     duskphan.net      Wed, 29 Aug 2007
18:45:33 +0000    Speshilov INC             Registrar:   JOKER.COM
        hold,disabled-due-spa#16     duyudi.com        Wed, 29 Aug 2007
18:56:42 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #17     dvmesh.com        Wed, 29 Aug 2007
19:02:21 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #18     dwebmax.com       Wed, 29 Aug 2007
19:27:33 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #19     hialang.com       Fri, 31 Aug 2007
01:31:00 +0000    Speshilov INC             Registrar:   JOKER.COM
        hold,disabled-due-spa#20     hiape.com         Fri, 31 Aug 2007
01:41:32 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #21     highfed.net       Fri, 31 Aug 2007
01:55:56 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #22     hilliys.com       Fri, 31 Aug 2007
01:34:09 +0000    Speshilov INC             Registrar:   JOKER.COM
        hold,disabled-due-spa#23     hipmine.com       Fri, 31 Aug 2007
01:57:59 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #24     hipsigns.com      Fri, 31 Aug 2007
01:26:30 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #25     hirmat.com        Fri, 31 Aug 2007
01:52:10 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #26     hitsebiz.com      Fri, 31 Aug 2007
01:52:53 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #27     hjhail.com        Fri, 31 Aug 2007
01:32:15 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #28     hjpercor.com      Fri, 31 Aug 2007
01:42:16 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #29     hlaby.com         Fri, 31 Aug 2007
01:39:18 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #30     hndykj.com        Fri, 31 Aug 2007
01:52:22 +0000    Speshilov INC             Registrar:   JOKER.COM
        hold,disabled-due-spa#31     hnshny.com        Fri, 31 Aug 2007
01:38:36 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #32     hnxcly.com        Fri, 31 Aug 2007
01:32:33 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #33     hoboyo.com        Fri, 31 Aug 2007
01:57:23 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #34     holidayy.com      Fri, 31 Aug 2007
01:29:23 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #35     honopple.com      Fri, 31 Aug 2007
01:56:16 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #36     hotbdz.com        Mon, 27 Aug 2007
07:58:51 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #37     hoteltgp.com      Sun, 26 Aug 2007
01:17:12 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #38     hotheelw.com      Sun, 26 Aug 2007
03:23:12 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #39     kaluke.com        Mon, 27 Aug 2007
10:10:57 +0000    Health Worldwide Inc      Registrar:   JOKER.COM
        Active               #40     mammail.com       Mon, 27 Aug 2007
09:14:11 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #41     mamuuko.com       Mon, 27 Aug 2007
09:09:23 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #42     mankine.com       Mon, 27 Aug 2007
09:07:22 +0000    Pump It Productions       Registrar:   JOKER.COM
        hold,disabled-due-spa#43     maozhiv.com       Mon, 27 Aug 2007
09:14:28 +0000    Pump It Productions       Registrar:   JOKER.COM
        hold,disabled-due-spa#44     mapkuist.com      Mon, 27 Aug 2007
09:07:56 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #45     maqmicro.com      Mon, 27 Aug 2007
09:09:42 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #46     maquedit.com      Tue, 28 Aug 2007
00:08:58 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #47     maramaru.com      Mon, 27 Aug 2007
08:58:39 +0000    Pump It Productions       Registrar:   JOKER.COM
        hold,disabled-due-spa#48     maricius.com      Mon, 27 Aug 2007
09:24:55 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #49     marlcon.com       Mon, 27 Aug 2007
09:24:26 +0000    Pump It Productions       Registrar:   JOKER.COM
        hold,disabled-due-spa#50     masoclub.com      Wed, 29 Aug 2007
00:01:29 +0000    Pump It Productions       Registrar:   JOKER.COM
        hold,disabled-due-spa#51     matargat.com      Mon, 27 Aug 2007
09:06:24 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #52     mathcefe.com      Mon, 27 Aug 2007
09:00:48 +0000    Pump It Productions       Registrar:   JOKER.COM
        hold,disabled-due-spa#53     maturmom.com      Mon, 27 Aug 2007
09:16:37 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #54     maximeus.com      Mon, 27 Aug 2007
08:58:20 +0000    Pump It Productions       Registrar:   JOKER.COM
        hold,disabled-due-spa#55     maximoit.com      Mon, 27 Aug 2007
08:59:43 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #56     mayoeb.com        Mon, 27 Aug 2007
09:16:10 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #57     mazekte.com       Mon, 27 Aug 2007
08:58:59 +0000    Pump It Productions       Registrar:   JOKER.COM
        Active               #58     mbtradin.com      Mon, 27 Aug 2007
09:16:22 +0000    Pump It Productions       Registrar:   JOKER.COM
        hold,disabled-due-spa#59     paydonle.com      Sun, 26 Aug 2007
04:22:09 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #60     pbottom.com       Sun, 26 Aug 2007
04:20:39 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        hold,disabled-due-spa#61     pfcrips.com       Wed, 29 Aug 2007
06:14:39 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #62     pfcrips.info      Tue, 28 Aug 2007
03:53:36 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #63     phaonica.com      Wed, 29 Aug 2007
06:21:29 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        CLIENT HOLD          #64     phaonica.info     Tue, 28 Aug 2007
03:37:02 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        CLIENT HOLD          #65     phdrops.info      Tue, 28 Aug 2007
03:50:46 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #66     phptonet.com      Wed, 29 Aug 2007
06:09:44 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        CLIENT HOLD          #67     phptonet.info     Tue, 28 Aug 2007
03:46:10 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #68     pickdash.info     Tue, 28 Aug 2007
03:27:21 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #69     pickdash.net      Wed, 29 Aug 2007
06:09:33 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        hold,disabled-due-spa#70     picsword.com      Wed, 29 Aug 2007
06:18:47 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #71     picsword.info     Tue, 28 Aug 2007
03:33:50 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #72     piczvo.com        Wed, 29 Aug 2007
17:58:01 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #73     piczvo.info       Tue, 28 Aug 2007
05:40:25 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #74     pierric.com       Wed, 29 Aug 2007
18:49:51 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #75     pierric.info      Tue, 28 Aug 2007
03:33:10 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #76     pigtun.com        Wed, 29 Aug 2007
06:06:55 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #77     pigtun.info       Tue, 28 Aug 2007
03:41:07 +0000    Optin Media Inc           Registrar:   JOKER.COM
        Active               #78     pilipuig.com      Wed, 29 Aug 2007
17:56:41 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #79     pilipuig.info     Tue, 28 Aug 2007
04:10:39 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #80     pinester.com      Wed, 29 Aug 2007
18:30:23 +0000    Speshilov INC             Registrar:   JOKER.COM
        Active               #81     pinester.info     Tue, 28 Aug 2007
04:02:35 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        CLIENT HOLD          #82     pintpong.info     Tue, 28 Aug 2007
04:22:18 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #83     pintpong.net      Wed, 29 Aug 2007
06:14:28 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #84     pinzhili.com      Wed, 29 Aug 2007
06:59:56 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        CLIENT HOLD          #85     pinzhili.info     Tue, 28 Aug 2007
03:35:18 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #86     piskp.net         Wed, 29 Aug 2007
06:16:32 +0000    Liquid Ventures Inc       Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        CLIENT HOLD          #87     piskp1.info       Tue, 28 Aug 2007
03:59:38 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #88     pkcable.com       Wed, 29 Aug 2007
06:39:22 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        CLIENT HOLD          #89     pkcable.info      Tue, 28 Aug 2007
04:00:59 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #90     pkgsolar.com      Wed, 29 Aug 2007
06:07:48 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        CLIENT HOLD          #91     pkgsolar.info     Tue, 28 Aug 2007
03:24:37 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #92     planetwo.com      Wed, 29 Aug 2007
11:44:23 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        CLIENT HOLD          #93     planetwo.info     Tue, 28 Aug 2007
20:08:29 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #94     platchat.com      Wed, 29 Aug 2007
06:31:24 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #95     platchat.info     Tue, 28 Aug 2007
03:24:48 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #96     playhas.com       Wed, 29 Aug 2007
06:05:16 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #97     playhas.info      Tue, 28 Aug 2007
05:24:29 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #98     polaice.com       Wed, 29 Aug 2007
00:53:11 +0000    Liquid Ventures Inc       Registrar:   JOKER.COM
        Active               #99     polaice.info      Tue, 28 Aug 2007
04:09:54 +0000    Optin Media Inc           Sponsoring Registrar: CSL
(d.b.a. Joker.com)
        Active               #100    wetpusay.com      Mon, 27 Aug 2007
04:41:08 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #101    wetpusdy.com      Sun, 26 Aug 2007
14:50:45 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        hold,disabled-due-spa#102    wetpuswy.com      Sun, 26 Aug 2007
15:16:27 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #103    wfbiz.net         Mon, 27 Aug 2007
05:13:21 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #104    whatsnu.net       Wed, 29 Aug 2007
02:46:10 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #105    whatsnu.net       Sun, 26 Aug 2007
14:49:23 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        hold,disabled-due-spa#106    whizwit.com       Tue, 28 Aug 2007
07:59:10 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #107    whtaier.com       Sun, 26 Aug 2007
07:42:20 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #108    wigirl.net        Sun, 26 Aug 2007
14:51:25 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #109    wiinfo.net        Sun, 26 Aug 2007
15:41:36 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        hold,disabled-due-spa#110    wiirmote.com      Sun, 26 Aug 2007
07:35:53 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #111    wikeecn.com       Sun, 26 Aug 2007
14:53:48 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #112    wiligril.com      Mon, 27 Aug 2007
05:57:27 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #113    winidows.com      Mon, 27 Aug 2007
03:19:50 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #114    winnone.com       Mon, 27 Aug 2007
05:19:13 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #115    wiresjw.com       Sun, 26 Aug 2007
14:39:26 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        hold,disabled-due-spa#116    wisols.net        Sun, 26 Aug 2007
14:46:13 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        hold,disabled-due-spa#117    wizybiz.com       Sun, 26 Aug 2007
14:50:21 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #118    wlissa.com        Mon, 27 Aug 2007
01:17:30 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #119    wofrum.com        Sun, 26 Aug 2007
17:54:24 +0000    Etty Productions Limited  Registrar:   JOKER.COM
        Active               #120    womencon.com      Sun, 26 Aug 2007
14:42:25 +0000    Etty Productions Limited  Registrar:   JOKER.COM

31st August:

chongdns67.com nameserver - 122 spam domains using Liquid, Etty, Health,
Pump, Speshilov
 ahajikes.com, dahetong.com, daishing.com, dajiasex.com, dellceo1.com,
dentromx.com, easlopen.com, fbdcn.com, fbdining.com, fbisi.com, gotmynba.cn,
gotmynba.cn, gotmynfl.cn, gotmynfl.cn, hiatto1.com, hlwcn.com, hmpspkr.com,
hotgaem.com, hotghot.com, jeuts.com, jmpaweb.com, jmypoint.com,
jnfozine.com, jnpcb.com, joannea.com, jobcnb.com, johanak.com, jokarpp.com,
kaluke.com, kalupas.com, kaluriel.com, kaluthota.com, kalvns.com,
kalwaske.com, kimpagel.com, kimpitts.com, lebbooks.com, leckn.com,
leeest.com, leenuk.com, leitaly.com, lemayweb.com, lenalag.net, leotads.com,
lerlivro.com, mazikadg.com, maziksty.com, mcgras.com, mchacity.com,
mchens.com, mcvsd.net, mewun.com, mfagg.com, mikepool.com, napaayto.com,
nastyews.com, navtep.com, nbetgear.com, obzesion.cn, oceanfam.cn,
odogtags.cn, oemmusic.cn, ofdreams.cn, oftnyx.cn, ogamibg.cn, ogamijg.cn,
ogamint.cn, ogamjng.cn, ogamkng.cn, oidigi.cn, ojuma.cn, okadaair.cn,
okrav.cn, pavalova.com, phpzabi.com, piarnic.com, picatcho2.com,
pickatop2.com, pifczo.com, schsans.com, schstic.com, schwanms.com,
sciakira.com, scioop.com, scivbiz.com, scoutik.com, scsdvd.com, serezha.com,
sertyapi.com, spefora.com, tecnt.net, telebath.com, teleconm.net,
teliname.com, temogic.com, tewolfe.com, thhz.net, tiflt.com, tkycc.com,
tmnes.com, tnitp.com, tnrsm.com, tongn.com, tppxc.com, trapach.net,
trasnfer.net, treadmls.net, treefx.net, trextel.net, trioabf.net, tsagw.com,
tsln.net, tufuz.com, wsyws.net, wtkfa.com, wuhuu.net, wumed1.com, wvdmw.com,
zatzycom.com, zawyz.com, zceffron.com, zdraweya1.com

met-dns.com nameserver - 120 spam domains using Liquid, Etty, Pump, Health,
Optin, Speshilov
 dranik.com, drbana.com, droegt.com, drogulus.com, droway.com, drugfiar.com,
dstripes.com, dtaefree.com, dtosa.com, dudehyip.com, dueiya.com, dugmu.com,
dukangzy.com, dunmuns.com, duskphan.net, duyudi.com, dvmesh.com,
dwebmax.com, hialang.com, hiape.com, highfed.net, hilliys.com, hipmine.com,
hipsigns.com, hirmat.com, hitsebiz.com, hjhail.com, hjpercor.com, hlaby.com,
hndykj.com, hnshny.com, hnxcly.com, hoboyo.com, holidayy.com, honopple.com,
hotbdz.com, hoteltgp.com, hotheelw.com, kaluke.com, mammail.com,
mamuuko.com, mankine.com, maozhiv.com, mapkuist.com, maqmicro.com,
maquedit.com, maramaru.com, maricius.com, marlcon.com, masoclub.com,
matargat.com, mathcefe.com, maturmom.com, maximeus.com, maximoit.com,
mayoeb.com, mazekte.com, mbtradin.com, paydonle.com, pbottom.com,
pfcrips.com, pfcrips.info, phaonica.com, phaonica.info, phdrops.info,
phptonet.com, phptonet.info, pickdash.info, pickdash.net, picsword.com,
picsword.info, piczvo.com, piczvo.info, pierric.com, pierric.info,
pigtun.com, pigtun.info, pilipuig.com, pilipuig.info, pinester.com,
pinester.info, pintpong.info, pintpong.net, pinzhili.com, pinzhili.info,
piskp.net, piskp1.info, pkcable.com, pkcable.info, pkgsolar.com,
pkgsolar.info, planetwo.com, planetwo.info, platchat.com, platchat.info,
playhas.com, playhas.info, polaice.com, polaice.info, wetpusay.com,
wetpusdy.com, wetpuswy.com, wfbiz.net, whatsnu.net, whatsnu.net,
whizwit.com, whtaier.com, wigirl.net, wiinfo.net, wiirmote.com, wikeecn.com,
wiligril.com, winidows.com, winnone.com, wiresjw.com, wisols.net,
wizybiz.com, wlissa.com, wofrum.com, womencon.com

jdns67.com nameserver - 69 spam domains using Liquid, Health, Etty, Pump
 acarudio.com, accredex.com, acescn.com, acessatt.com, achntix.com,
actiopc.com, actofoil.com, dehavik.com, dehey.com, dehoof.com, dehucat.com,
deicie.com, deighty.com, kravietz.com, kssinmun.com, ksunion.com,
kueteto.com, kurocop.com, kwikbuys.com, kylefx.com, kylic.com, lamoc.com,
lasno.com, lderili.com, ldivas.com, leasign.com, lebbooks.com, leckn.com,
leeest.com, leenuk.com, leitaly.com, lemayweb.com, lenalag.net, leotads.com,
lerlivro.com, mojame.com, molimex.com, moojan.com, mornoni.com,
morocamp.com, musapace1.com, muscclub1.com, mutheh1.com, muwaffaq1.com,
mxttabs.com, myartsy1.com, mycix.com, obragolf.com, ocieb.com, octolee.com,
oedyn.com, oekakie.com, ofhnia.com, ohhinsa.com, ohmyfyi.com, tamxo.com,
teang.net, tecnt.net, thhz.net, tiflt.com, tkycc.com, tmnes.com, tnitp.com,
tnrsm.com, tongn.com, tppxc.com, tsagw.com, tsln.net, tufuz.com

master67.com nameserver - 85 spam domains using Liquid, Pump, Health, Etty,
Optin, Speshilov
adwaw.com, adzmag.com, aeakh.com, aeakx.com, aejung.com, aeklnet.com,
aeroux.com, affgf.com, afforddj.com, afitzer.com, akscar.com, alainna.com,
alamiry.com, alfymail.com, alhnd.com, alibabua.com, allabour.net,
allosp1.com, allpogo1.com, aloewet.com, mnouser.cn, mnsoor.cn, mobanweb.cn,
mobiprof.cn, mobsobs.cn, mobybox.cn, mocauto.cn, mocominc.cn, modables.cn,
modidiye.cn, njmvg.com, njyueyi1.com, nkenprat.com, nlnbiz.com, nmacon.com,
nnante.com, nokaire.com, nooneelb.com, noopdog1.com, noreboo.com,
onjavaa.cn, onliesbh.cn, onlinegi.cn, radiozup1.com, rahnamaa.com,
railiks.com, rajshril.com, rajshril.com, rajvarna.com, rankstt.com,
rapornet.com, rapvsroj.com, raskool.com, raunow.com, skippyk.com,
sksetia.com, slimast.com, slrtech.com, smartmes.com, smiggol.com,
smiileys.com, smutdeal.com, smxsina.com, snicbids.com, snowsoar.com,
vdiect.com, vdmspm.com, veragm.com, versasol.com, vestare.com, vfbftw.com,
vgiguide.com, vhtown1.com, viafacli.com, vicehd.com, yourprp.com,
youshed.com, youthtue.com, yoybute.com, yoyer.com, yppsucks.com, yputwo.com,
ypyey.com, yrsmrt.com, ythyfz.com


8th August:
masterkeydns.com nameserver - 41 spam domains using Health
 nnasaez.cn, gernardi.cn, gersclub.cn, germons.cn, gerlsusa.cn, geriatis.cn,
wepdata.com, wepricon.com, weolvehk.com, onlyisdn.cn, onlycara.cn,
weonei.com, onmipod.cn, werac.com, weouncil.com, weordcup.com, onlyrzr.cn,
weragel.com, onmooms.cn, onmays.cn, werbartz.com, werktec.com, muzholic.cn,
onfosel.cn, muttzoh.cn, muytay.cn, mycampas.cn, mutirata.cn, myasthen.cn,
muvidd.cn, mycornex.cn, mwmmusic.cn, myatma.cn, myaacn.cn, mxdmm.cn,
muzule.cn, mvesper.cn, myacyv.cn, mutore.cn, mycitui.cn, muzigida.cn

erongames.com nameserver - 14 spam domains using Health, Etty
 htatats.cn, hascj.cn, hasbror.cn, weweekly.com, hatbiyim.cn, gotlyts.cn,
hatchetv.cn, wewireit.com, gotmynfl.cn, gotmynba.cn, gottroks.cn,
maloocafe.mobi, goologl.cn, mtrtr.cn

goldfux.com nameserver - 18 spam domains using Health
 mates.com, mtlau.com, bonniehn.com, bonitane.com, bonieva.com,
mtkollam.com, mtkflash.com, mtitub.com, mtilist.com, mtichell.com,
htbridal.com, hswar.com, hugdens.com, mtgitar.com, mtfcm.com, hrnny.com,
hoymodei.com, bonviz.com

b12dns.com nameserver - Liquid, Etty, Health
 masterkeydns.com, erongames.com, goldfux.com, cowtree.com, mulfnow.cn,
mulotov.cn

cowtree.com nameserver - Liquid
 upyahoo.com, jeppin.com, metrfm.com, metsgee.com, metorus.com

19th July:
mfonzone.com nameserver - 43 spam domains using - Liquid, Health, Etty,
Black registrants
 hotboil.com, hotdied.com, holyvod.com, maloocafe.mobi, holtu.com,
holzrad.com, homable.com, homesbf.com, holzta.com, homaqil.com, homedoe.com,
homelak.com, homails.com, mnevills.com, mnetkb.com, addonde.com,
mnetbank.com, mnibike.com, bigger-man.net, canexpro.com, hotdemi.com,
hoteeyw.com, bigger-man.net, addonde.com, mancxheck.com, manclipz.com,
mancolog.com, mandaryan.com, manciolli.com, mancheeck.com, manchneck.com,
mancitty.com, mancorpt.com, paleague.com, gichael.com, shnegda.com,
mancuwok.com, shokwaz.com, hotbvot.com, mamigs.com, addonie.com, chciw.com,
adamraz.com

funfies.com nameserver - 7 spam domains by Liquid
 jhbsc.com, metorus.com, hutsem.com, jhflc.com, vermms.com, weantv.com,
metoius.com

ageborn.com nameserver - 36 spam domains by Liquid, Health:
 showmaury.com, showbizlv.com, kalimetry.com, showdox.com, kaleibela.com,
trwuck.com, kalilian.com, serikata.com, seriols.com, serlf.com,
kaligrrl.com, kalifaco.com, kalianna.com, kalfran.com, kalfood.com,
pochz.com, kaletatv.com, pocida.com, kaleradyo.com, kaleoo.com, pocdots.com,
kaleoband.com, pocelana.com, pocate.com, kaleform.com, tryvian.com,
tryppi.com, tryonl.com, pochmart.com, pobjfkhs.com, pobroca.com,
tryfase.com, trusns.com, truois.com, trulase.com, truevnc.com

15th July 2007 34 spam domains using ageborn.com nameserver (reported on
joker.com webpage and by registered post) Liquid, Etty and Pump It
registrants
 trueltv.com, truckct.com, trtuyap.com, trtlive.com, trshov.com,
trsakti.com, deighty.com, trraxas.com, trqla.com, trqins.com,  dehucat.com,
trpgil.com, dehoof.com, marcist.com, marcxxx.com, trotebe.com, maralua.com,
dehey.com, troplag.com, dehavik.com,  maquar.com, maraaa.com,
offvids.com,oesporte.com, maraltp.com, maracat.com, maragoa.com, oensky.com,
maqnox.com, mapytv.com,  odssnet.com, odridos.com, odinvn.com, odikaz.com

12th July 2007: 22 spam domains using ageborn.com name server. Liquid, Etty
and Pump It registrants
 nitelfe.com, nitarde.com, nitamb.com, pakasit.com, pakelake.com,
pajunda.com, paixaki.com, pairjack.com, nissanu.com, nisoni.com,
pajitan.com, pajeadas.com, nishtest.com, pajjama.com, nisandra.com,
nirtomix.com, pairedit.com, paintass.com, niritake.com, paionee.com,
maesud.com, maepanom.com

11th July 2007: 49 spam domains registered by Liquid Ventures Inc on
Joker.com, using ageborn.com nameserver
 maeinas.com, madrua.com, stentrx.com, stenge.com, steales.com,
maebhart.com, stashow.com, starnud.com, starsta.com, madurain.com,
madtunbs.com, madsul.com, stcpage.com, stavig.com, stcharl.com,
madrigar.com, starade.com, stambes.com, stamods.com, madponys.com,
madnms.com, madmiser.com, sebvizor.com, secinema.com, secbio.com,
secuok.com, secubus.com, secrar.com, seawbee.com, sebuca.com,  madmalls.com,
madiwon.com, madipub.com, madhdunt.com, madeuira.com, mademike.com,
kaluh.com, kagnassy.com, kariyem.com, madellc.com,
 madecorp.com, madcho.com, maddifox.com, kaeupspc.com, kaferia.com,
kafetico.com, madblest.com, madapge.com, kagala.com

9th July 2007 16 spam domains using funfies.com nameserver all registered at
joker.com by Liquid Ventures Inc
trixtie.com, hutam.com, metorus.com, oomair.com, jhbsc.com, metoius.com,
weantv.com, metqa.com, oompaa.com, jgury.com,  jhuyg.com, ghqd.net,
mutw.net, agesets.com, jinnc.com, thires.com

2nd July (reported on joker.com webpage and by registered post): 135  Liquid
Ventures Inc Pump It Productions" and "Etty Productions Limited" domains,
 nourser.com, bowlly.com, blaiso.com, motiem.com, bkcause.com, tidkar.com,
bjgqhg.com, notpots.com, bioraed.com, noserge.com,  norwock.com, tilra.com,
bintzs.com, bidhoo.com, mutw.net, jgury.com, mothrev.com, norosti.com,
northnc.com, notenia.com,  nortrup.com, bayerah.com, agesets.com, bpoap.com,
enlargeplus.net, nortarh.com, bapww.com, nosalar.com, jinnc.com, bplnj.com,
jhuyg.com, motervs.com, hornasy.com, carzgames.net, jowtoga.com, bpgepp.com,
bpbcinc.com, bpadyv.com, bozmall.com, boyxz.com,  boyutx.com, mobskeb.com,
mobhk.com, boysgoy.com, boysba.com, boysaa.com, mnaacp.com, mmysd.com,
boypp.com, balria.com,  mnoche.com, mnstarz.com, mnoarch.com, auored.com,
atptubo.com, apomes.com, cherlocks.com, aphofos.com, anzendo.com,
mnetal.com, alhjr.com, mnmasa.com, alaplya.com, aishot.net, mnelec.com,
abuntec.com, dabyoo.com, mnagu.com, mnatel.com,  mncquay.com, oolnavy.com,
ubbui.com, mmftab.com, mmflae.com, mmgmd.com, jmmfb.com, latermore.com,
buddysand.com, likesalsa.com,  latniass.com, bulkjars.com, gndyazilim.com,
jmpeck.com, trreo.com, macmanger.com, jmops.com, jmlsd.com, bobrole.com,
madkie.com,  jmossad.com, jnaison.com, dmafcu.com, gasslo.com, jnctrl.com,
jmylmp.com, jngajam.com, gadlic.com, gaemea.com, mmcnh.com,  mmdiana.com,
madamhost.com, madsblast.com, fonaphu.com, gassdo.com, fomua.com,
fondany.com, jmxqzs.com, gachief.com, gabva.com,  gabgc.com, jazika.net,
gnmil.com, focbox.com, jeppin.com, foasp.com, fnikes.com, agepoem.com,
cangear.com, bogget.com,
 pashiud.com, pashira.com, pasetio.com, paseals.com, pasctel.com,
bolgha.com, bodycup.com, pascoso.com, pasawim.com,  gasrmfg.com,
pasatex.com, parwade.com, masterofpenis.com, thepenismaster.com

All Liquid Ventures Inc spam domains:
27th June 2007 partspo.com
26th June 2007 gaoves.com
25th June 2007 abtol.com
23rd June 2007 phenergine.com
23rd June 2007, 25th June 2007, 26th June 2007, 27th June 2007 jbardns.com
23rd June 2007 mobeds.com
23rd June 2007 mbcpmp.com
23rd June 2007 funfies.com
21st June 2007 bdns3.com
6th June 2007 and 8th June 2007 jjjdns.com
8th June 2007 toasteddns.com
8th June 2007 strawberrydns.com
8th June 2007 fpbpe.com
6th June 2007 cavetl.net
6th June 2007 bresao.com
6th June 2007 caznue.info
6th June 2007 sttavn.info







<<< Chronological Index >>>    <<< Thread Index >>>