Wednesday, July 11, 2007

Marriage agency scam: The service providers (part 2)

So lets look at the service providers behind all those different domains and servers which hosts those different domains.

docmaildirect.info:

Domain registered by James Stevenson, Arizona, United states. I don't even bother to check because it is very likely forged information leading nowhere. The registrator is eNom inc., enom.com and I have filed a complaint with them.

Server is hosted on address 123.108.208.21 belonging to BeiJing HuaDa ZhiBao Electronic System CO.,LTD, China. cidc.com.cn and I have filed a complaint with them.

On same server is hosted the domains allwaylove.com and milljob.net so I will take a look at those domains too.

Allwaylove.com:

Site has same content as docmaildirect.info but the registrator is The Name IT Corporation, nameservices.net and I have filed a complaint with them.

Milljob.net:

This is something completely else, Some kind of work home / marketing scam, but by a little searching I can see that this Miller & Morgan inc. "company" is also known for spamming. The registration is Key Systems, key-systems.net and I have filed a complaint with them

Lovewather.com:

The domain is registered by Jonh, Winter, London, United Kingdom (forged as always I guess) and the reigstrator is Gandi, Gandi.net. I have filed a complaint with them and hopefully somethings happens, know from my days of playing with Robert Alan Soloway that Gandi are against spam.

The site is hosted at address 81.29.240.12 which belongs to LLC GlobalWholesaleTrade, Russia. I have filed a complaint with them too.

On the same site is hosted the domain loveattach.com, so lets take a look at that one too

Loveattach.com:

Registered to a MyTop ltd, Kiev, Ukranis and with the registrator Direct Information Pvt Ltd, publicdomainregistry.com and I have filed a complaint with them

Ualadys.com, brladys.com, arladys.com, ruladys.com :

Registered to a Brian Gleason by registrator The Name IT Corporation, nameservices.net and I have filed a complaint with them.

The sites are hosted at address 208.72.171.100 which belongs to McColo Corporation, United States, mccolo.com so a complaint has been send to them.

So it's clear that this spammer is really trying to use many different service providers, probably in order to hide the connection between the sites and maybe to make my work that much harder. But now it's done and I can only wait for the hopefully positive result...

No comments: