Blog for hpHosts, and whatever else I feel like writing about ....

Monday, 1 February 2010

Update: Craigslist scammers - the domains

The validation and WhoIs hunt is completed, and although I've no doubt there's more domains owned by this person than those I've found, the following are those that are or have been, owned by Melissa/Bob/Jeremy, whatever he/she wants to call him/her self.

Note: It's entirely possible that some of these are now legit, as quite a few on this list were obtained from a dated (08-30-2009) list

First, the simple validation. The following contains only those still resolving;

http://hosts-file.net/misc/hpObserver_results_-_Craigslist_scammer_domains.html

And now, complete with WhoIs information (name/e-mail only)

1910.com    >    74.117.116.65    >    74-117-116-65.parked.com        soly perlstein / solperlstein@gmail.com
1af.info    >    216.8.179.23    >    ptr-216-8-179-23.ptr.nextdimensioninc.com        Rubalier / cvx.conts@gmail.com
1af.org    >    68.178.232.100    >    parkwebwin-v01.prod.mesa1.secureserver.net        Michael Shields / michaelw33@hotmail.com
3m0.net    >    84.51.38.15    >    us.isimtescil.net        Nazim Ozkurt / mc.bakteri@hotmail.com
4r0.com    >    82.98.86.166    >    www166.sedoparking.com        Paul Fisher / pfdl01305@blueyonder.co.uk
6oe.net    >    38.117.90.45    >    Failed resolution        Whois not available at present
ajt.info    >    82.98.86.170    >    www170.sedoparking.com        Frank Becker / becker@agentur.biz
blogspammers.com    >    208.73.210.27    >    parkinglot.information.com        Admin / admin@overseedomainmanagement.com
busstations.net    >    74.117.116.120    >    74-117-116-120.parked.com        solomon perlstein / solomon@synergycr.com
cancersupport.info    >    174.120.21.253    >    fd.15.78ae.static.theplanet.com        Melissa Pechanec / justwannabeme44@gmail.com
customsportscars.net    >    64.95.64.198    >    lander.sitesense-oo.com        Rarenames    >    Inc. / brokerage@buydomains.com
degrades.net    >    216.150.214.58    >    v10.verocity.net        HugeDomains / [REMOVED]
dies.tv    >    174.120.21.252    >    fc.15.78ae.static.theplanet.com        Law, Michael / mikerlaw@gmail.com
dnposition.com    >    174.120.21.250    >    fa.15.78ae.static.theplanet.com        Bob Smith / cupamojoe@gmail.com
dnregistar.com    >    174.120.21.252    >    fc.15.78ae.static.theplanet.com        Bob Smith / cupamojoe@gmail.com
dnregistrarfinder.com    >    174.120.21.254    >    fe.15.78ae.static.theplanet.com        Bob Smith / cupamojoe@gmail.com
dnregistraronline.com    >    174.120.21.254    >    fe.15.78ae.static.theplanet.com        Bob Smith / cupamojoe@gmail.com
dnregistrarsite.com    >    174.120.21.254    >    fe.15.78ae.static.theplanet.com        Bob Smith / cupamojoe@gmail.com
dril.org    >    64.95.64.198    >    lander.sitesense-oo.com        RN WebReg / brokerage@buydomains.com
earncash-fromgrants.com    >    208.78.242.184    >    park.dynadot.com        Pending Renewal or Deletion / expired@dynadot.com
eroticgossip.com    >    64.202.189.170    >    pwfwd-v01.prod.mesa1.secureserver.net        Kevin Sinclair / kevinjsinclair@gmail.com
exhausted.info    >    82.98.86.174    >    www174.sedoparking.com        [REMOVED]
femalemodel.net    >    82.98.86.175    >    www175.sedoparking.com        Helder Luis / hl.entrepreneur@gmail.com
forexgains.info    >    174.120.189.155    >    9b.bd.78ae.static.theplanet.com        Jim Montgomery / jim.mont@gmail.com
forexlist.info    >    208.73.210.27    >    parkinglot.information.com        Registration Private / FOREXLIST.INFO@domainsbyproxy.com
freebie-haven.com    >    208.78.242.184    >    park.dynadot.com        Pending Renewal or Deletion / expired@dynadot.com
freebiesshop.com    >    216.150.214.58    >    v10.verocity.net        HugeDomains / [REMOVED]
freemaxim.com    >    208.78.242.184    >    park.dynadot.com        Pending Renewal or Deletion / expired@dynadot.com
freepokerbux.com    >    64.38.29.126    >    farm1.parklogic.com        Wendy Webbe, Ancient Holdings, LLC / ancientholdings@fastmail.fm
gjt.info    >    74.117.114.87    >    74-117-114-87.parked.com        Tim Schoon / paypal@toiletguides.com
healtharticles.info    >    74.117.116.69    >    74-117-116-69.parked.com        Donald Aquilano / bd77@inbox.com
i7j.net    >    174.120.21.254    >    fe.15.78ae.static.theplanet.com        melissa walker / justwannabeme44@gmail.com
icadets.com    >    208.73.210.27    >    parkinglot.information.com        Gina Brown / jginabrown@sbcglobal.net
idonator.com    >    174.37.172.68    >    174.37.172.68-static.reverse.softlayer.com        [REMOVED]
ilearnpoker.com    >    213.175.206.64    >    nimrod.eukhost.com        Rajendra Shah / shahagra@gmail.com
instinctsite.com    >    208.73.210.27    >    parkinglot.information.com        Admin / admin@overseedomainmanagement.com
instinctsite.net    >    208.73.210.27    >    parkinglot.information.com        Admin / admin@overseedomainmanagement.com
insurancelink.net    >    68.178.232.99    >    parkwebwin-v02.prod.mesa1.secureserver.net        Melissa Pechanec / justwannabeme44@gmail.com
j9y.com    >    82.98.86.178    >    www178.sedoparking.com        Wang Xianwei / xserver@qq.com
jaysfans.com    >    68.178.232.100    >    parkwebwin-v01.prod.mesa1.secureserver.net        THE COMPUTER GUY / yourcomputerhelp@aol.com
lustydestiny.com    >    174.120.21.253    >    fd.15.78ae.static.theplanet.com        Bob Smith c/o Dynadot Privacy / privacy@dynadot.com
manifested.info    >    216.8.179.23    >    ptr-216-8-179-23.ptr.nextdimensioninc.com        Rubalier / cvx.conts@gmail.com
masturbated.info    >    67.55.87.69    >    Failed resolution        James taylor / 2bet.com@gmail.com
mlj.info    >    74.117.114.80    >    74-117-114-80.parked.com        Tim Schoon / paypal@toiletguides.com
myexplaination.com    >    68.178.232.99    >    parkwebwin-v02.prod.mesa1.secureserver.net        Zoran Peric / dorida123@gmail.com
myexplaination.info    >    68.178.232.99    >    parkwebwin-v02.prod.mesa1.secureserver.net        Zoran Peric / dorida123@gmail.com
myexplaination.net    >    68.178.232.99    >    parkwebwin-v02.prod.mesa1.secureserver.net        Zoran Peric / dorida123@gmail.com
myexplaination.org    >    68.178.232.99    >    parkwebwin-v02.prod.mesa1.secureserver.net        Zoran Peric / dorida123@gmail.com
nakedphotos.org    >    69.46.43.2    >    server.pqhost.com. pqhost.lynnwood.netriver.net        james taylor / 2bet.com@gmail.com
nudebeauty.net    >    82.98.86.171    >    www171.sedoparking.com        Arvind Reddy / instantarvind@yahoo.com
onlineaddict.net    >    74.208.19.226    >    perfora.net        Private Registration / proxy2149687@1and1-private-registration.com
pantera.us    >    82.98.86.173    >    www173.sedoparking.com        REMOVED
perfectass.org    >    208.166.55.20    >    parkforward.dynadot.com        Bob Smith / cupamojoe@gmail.com
pertains.net    >    216.150.214.58    >    v10.verocity.net        HugeDomains / [REMOVED]
pfj.info    >    82.98.86.178    >    www178.sedoparking.com        Tim Schoon / schoont@gmail.com
pinkcamclub.com    >    174.120.21.253    >    fd.15.78ae.static.theplanet.com        Domains by Proxy Inc. / pinkcamclub.com@domainsbyproxy.com
princesshannah.info    >    208.78.242.184    >    park.dynadot.com        Pending Renewal or Deletion / expired@dynadot.com
programming.name    >    58.123.163.90    >    Failed resolution        Whois unavailable
promotes.info    >    216.8.179.23    >    ptr-216-8-179-23.ptr.nextdimensioninc.com        Rubalier / cvx.conts@gmail.com
prospectivehiring.com    >    208.78.242.184    >    park.dynadot.com        Pending Renewal or Deletion / expired@dynadot.com
ptj.info    >    82.98.86.174    >    www174.sedoparking.com        Tim Schoon / schoont@gmail.com
realamateur.org    >    72.232.167.95    >    sgrid08a.myinternetservices.com        *. ANT / antcomic@gmail.com
reloadedproxy.info    >    98.129.126.138    >    Failed resolution        Recaptured Domain / Shark@Recaptured.com
rentalcompany.org    >    74.117.116.70    >    74-117-116-70.parked.com        Jeffery Wiggers / domainnamesdaily@yahoo.com
retailbuy.com    >    174.120.31.124    >    7c.1f.78ae.static.theplanet.com        JAE YI / scanpos@sbcglobal.net
robbing.info    >    216.8.179.23    >    ptr-216-8-179-23.ptr.nextdimensioninc.com        Rubalier / cvx.conts@gmail.com
sexysinglesworld.com    >    208.78.242.184    >    park.dynadot.com        Pending Renewal or Deletion / expired@dynadot.com
sexyslut.info    >    74.117.114.74    >    74-117-114-74.parked.com        Lorena Vila / lavinvestments@hotmail.com
supernoah.info    >    208.78.242.184    >    park.dynadot.com        Pending Renewal or Deletion / expired@dynadot.com
thednsite.com    >    174.120.21.252    >    fc.15.78ae.static.theplanet.com        Bob Smith / cupamojoe@gmail.com
tobaccosmoke.info    >    68.178.232.100    >    parkwebwin-v01.prod.mesa1.secureserver.net        Melissa Walker / justwannabeme44@gmail.com
totalnag.com    >    208.87.33.151    >    151.128-191.33.87.208.in-addr.arpa. wc40-alt.medialogik.com        Above.com Domain Privacy / hostmaster@above.com
trafficmethod.com    >    68.178.232.99    >    parkwebwin-v02.prod.mesa1.secureserver.net        Melissa Pechanec / justwannabeme44@gmail.com
university-sports.com    >    209.249.222.18    >    Failed resolution        WhoisGuard / 9d3525d14c6a4d8b9c3149cfc0404878.protect@whoisguard.com
usaforums.org    >    64.95.64.198    >    lander.sitesense-oo.com        Rarenames, Inc. / brokerage@buydomains.com
yyour.com    >    72.29.70.106    >    ns4.emphost.com.br        Michael Evans / mikedoesbooks@yahoo.com


Finally, the complete list, inclusive of those no longer resolving;

0201.org
1910.com
1af.info
1af.org
20oz.org
20x30.net
360xboxstore.net
3m0.net
4r0.com
6oe.net
adultfunnow.com
affiliatesbeingrated.com
ajt.info
basicrecipes.net
blogspammers.com
boycottopec.com
busstations.net
cancersupport.info
contemned.com
customsportscars.net
degrades.net
devoted-daters.com
dies.tv
digitalcamcity.com
digitalcamcity.net
dnbizness.com
dnblocker.com
dnposition.com
dnregistar.com
dnregistrarfinder.com
dnregistraronline.com
dnregistrarsite.com
domesticbrews.info
dril.org
drilloffshore.info
earncash-fromgrants.com
eroticgossip.com
europeanrealtors.info
exhausted.info
ezfuk.com
femalemodel.net
findacure.info
findthecure.info
forexearnings.info
forexgains.info
forexgains.net
forexgains.org
forexlist.info
forextradingcompanies.info
foroufc.com
freebie-haven.com
freebiesforyou.net
freebiesshop.com
freemaxim.com
freepokerbux.com
frickit.info
funz.org
gatoyperro.com
generickeyword.net
generictraffic.net
gjt.info
googl-eadsense.com
gregzlist.org
healtharticles.info
heismancontenders.com
i7j.net
icadets.com
idonator.com
ilearnpoker.com
instinctcellphone.net
instinctsite.com
instinctsite.net
insurancelink.net
itstore.mobi
j9y.com
jaysfans.com
kickapooh.com
lustydestiny.com
manifested.info
marriedtoapornaddict.com
masturbated.info
mdmotorsportsshop.com
melschristmas.com
mlj.info
multifreebies.com
myexplaination.com
myexplaination.info
myexplaination.net
myexplaination.org
nakedbabe.org
nakedphotos.org
nationaleconomy.info
naturalgascartel.com
nudebeauty.net
obamahope.info
onlineaddict.net
p3z.net
pantera.us
perfectass.org
pertains.net
pfj.info
pinkcamclub.com
pizzadeliveries.org
poemshack.com
precognitive.net
princesshannah.info
programming.name
promotes.info
prospectivehiring.com
ptj.info
realamateur.org
reloadedproxy.info
rentalcompany.org
retailbuy.com
robbing.info
sanjosecali.com
saveu.org
sexygallery.info
sexysinglesworld.com
sexyslut.info
slume.com
somememory.net
sultrysins.com
supernoah.info
thednsite.com
theiphonedirect.com
thexbox360store.net
tightens.net
tobaccosmoke.info
totalinvestment.info
totalinvestments.info
totalnag.com
tournamentrules.com
trafficmethod.com
txrentals.info
university-sports.com
usaforums.org
vandalizedmarketing.com
vitalorgans.info
vitalstats.info
websitebuilderz.org
whif.info
yahbot.com
yjjj.info
youtubeanywhere.info
yyour.com


References:

Update: Craigslist phishing domains down
http://hphosts.blogspot.com/2010/02/update-craigslist-phishing-domains-down.html

Craigs List: Allow me to beat you over the head (softly of course)
http://hphosts.blogspot.com/2010/01/craigs-list-allow-me-to-beat-you-over.html

9 comments:

Llael said...

Hi, I bought exhausted.info from a member of Digital Point forums, but am listed here as a Craislist Scammer. This can be verified by checking Wayback, Whois or DigitalPoint.

Please remove my personal information from this list as soon as possible.

Thanks.

MysteryFCM said...

Your domain hasn't been listed as a craigslist scammer, it's been listed as a domain previously owned by a scammer.

As for your personal information, the same information (and more) is available on every WhoIs service so I'm curious as to why you'd want it removed;

http://whois.domaintools.com/exhausted.info

Llael said...

Out of respect for a fellow webmaster, please remove it. This is showing up when my name is googled. I don't mind my who.is information being shared, but I mind when it shows up on Google as the name of a Craislist Scammer.

The context here really gives me a bad rap that I inherited -- I don't deserve to be mentioned here.

I will appreciate your cooperation in removing my details.

MysteryFCM said...

I've removed your name and e-mail address from the listing, but cannot remove the domain as it's listed for historical purposes (i.e. it's previously being owned by a known scammer)

arebe said...

I can confirm a domain on this list (degrades.net) was owned by someone named Melissa.

This domain is now owned by our company and I ask that you remove the email address from this page to prevent bots from picking the email address up.

Thanks.

arebe said...

Actually I realized we now manage 3 domains in that list - all which were expired domains we purchased. Please remove the email address for all three... degrades.net, freebiesshop.com, pertains.net. I can confirm with you that there is no connection.

To me it looks like most of these domains have dropped, and this person is shedding themselves of the domains. Probably because of the information you are publishing.

Thanks

NDev2k said...

I have recently purchased freebie-haven.com from dynadot as it was an expired domain.

I would appreciate it if you could maybe add a list to the site with the domains that have since been re-registered by other users as I don't like my domain being linked to scamming when it has nothing to do with me.

seb said...

i recently regged iDonator.com and has nothing to do with scammers or anything..i have never done an unfair transaction or anything and i am a good person...please remove my name from list above as it pops up on first page when i search for my name in google...

how you could write something like this, based on no facts is terrible...bet there are many more names than mine that shouldnt be in there...pleas edelete my name or will take serious actions towards this since my name is used in bad faith

dmyre said...

My name appears on this list as well after I previously sold pantera.us to a member on a domain forum. Please remove my email address, as it makes it look as if I am a scammer.

This website appears when searching for my email address, and it's affecting my credibility as a REALTOR. Please remove my personal information from this list as soon as possible...