Check Assist Manager

The Purpose of this post is to ALERT you that the job you are about to apply for or may have applied For or is CONSIDERING APPLYING FOR is FRAUDULENT. These job postings are an attempt to lure you into cashing counterfeit checks and have you wire funds via Western Union or MoneyGram. Essentially You Become A Money or RePackage Mule.

  1. Understanding The Cyber Theft Ring
  2. Money Mule Explained
  3. Washingtonpost.com by Brian Kerbs
  4. Interview With A Money Mule

Email Header Analysis

IP Address:  122.168.159.56 (ABTS-mp-Dynamic-056.159.168.122.airtelbroadband.in)
IP Address Country:  India
IP Continent:  Asia
IP Address City Location:  Indore
IP Address Region:  Madhya Pradesh
IP Address Latitude:  22.7167,
IP Address Longtitude:  75.8333
Organization:  Airtel


X-Apparently-To: SCAMFRAUDALERT via 98.138.213.211; Mon, 15 Oct 2012 03:33:22 -0700
Return-Path: <esofthervidridouin@hotmail.com>
X-Yahoofilteredbulk: 65.55.90.236
Received-Spf: pass (domain of hotmail.com designates 65.55.90.236 as permitted sender)
X-Ymailisg: j4OFhXMWLDuVnYi4_MdYGavmO8Sh6u9BlE0aBwvG0TaERfFM cgBfUxMM.w9ocpBL9W.x06p8L_Axt9JpOALl1uy1.a8qM7eCcnmeVYdAmhKz bnvQBj_36Wm_wWxT_demZOISDTXch_8n9v0G_jA6UA6KByswG1I0vf137Q_7 7_WnecgIjq2HJQNdq8maBKIFgAwQUYskPIO7c4IoOZw3YnIeza5KgZJ_sh1M 1VAWXWpy6YotENSGl_6VX6nsHH66oMQrGwsFNqDTD5n_oAdql7Kvr.1WfAny w2ncTEw998WAqCNWUIPkAmlw5YZdaiGBNZOH.pmhtQTx3lpfgoyojjKUBZmt kKTR.gjZQhuhmky3NWZ3hxPXQv8o3najmb0EcK7FAXxu3M6hSPfs7M8Om6ff _CcHr3j6bc0HW.sVVkCEP4.M3JK5bFRr9szsVMYoXRT8plTjWk0tk9hmxJVP .sacHjKeA_0lHubh1IELT.z2ZPzs995G.dmmfHumPcTScft9_M7ghEd1HLzW .fIZhHvntHJBilCLBviQgRqaU9Oqas.YAXFb0PS3pEsRGigXbyNMl1Vj2wf3 b0ha65RmawKMQ8edq9ajgI9hKUR71xHtBMpAvFxpgPFeCFkA.7rrXzAvD4_Y B0tDAXHFv7ctJlwTI9MCEHQ6nNFzwWVZZNVg1LpOia7Jcwb7to72OWIwSwRQ 7bjrZP3fCMiObAmjy5rbNh4vU7mbDP5_bxDN3wKVnseQRF8oP7mORDdxoJJ4 aF9AV9yz8O0cteUcK4uIaodOOyrTYEAh0yV.3Bq0qIj53I25sBlw1yjSm6bZ aqqSfZns8Y.ix4QkfjcQj2y.GMnvtoC3zEGBgA5lhrjuaHdeS6lUZQR4Dyvx 6gwDtlixxdHGVyURiWUFjgPfS1dvr1oQysNywuhgq98QMuvmvpNbIu2cBMjm MN2YMQZRoAYDIqr7oXb0h6G7.ZgBWBYJRyhn5C1oSEG9ZFtGJh8g35rVYZKM Tdxd2itQSOnbg4nfheaT.jFHPOTxHxsVGlDHAC_dZBZ1K5JBaISOgu96NXZz 14TeXNSt4jFjVgmVAV0w64Z5CpH1rmPQC3iOuTqB44ud.3PrBn.Yd6Np3xn1 jB25aIONuzdeeI8dspgTOKXmM13CSzFQzUZkAITeLcX4IRU-
X-Originating-Ip: [65.55.90.236]
Authentication-Results: mta1269.sbc.mail.gq1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc4-s33.snt0.hotmail.com) (65.55.90.236) by mta1269.sbc.mail.gq1.yahoo.com with SMTP; Mon, 15 Oct 2012 03:33:22 -0700
Received: from SNT136-DS16 ([65.55.90.200]) by snt0-omc4-s33.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 15 Oct 2012 03:33:21 -0700
X-Originating-Ip: [122.168.159.56]
X-Eip: [gCq83Fn7I08aAyOnpsVWxns+TI8UDfGh]
X-Originating-Email:esofthervidridouin@hotmail.com
Message-Id: <SNT136-ds1693308E6C7264D41BBF37C2710@phx.gbl>
Return-Path: esofthervidridouin@hotmail.com
From: Esther Drouin EsoftherviDridouin@hotmail.com
To: scamFRAUDalert
Reply-To: JulieexrkAnderson@gmail.com
Subject: JOB OFFER
Date: Mon, 15 Oct 2012 06:22:17 -0500
Mime-Version: 1.0
X-Priority: 3
X-Msmail-Priority: Normal
Importance: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8064.206
X-Mimeole: Produced By Microsoft MimeOLE V14.0.8064.206
Content-Type: text/html; charset=”utf-8″
Content-Transfer-Encoding: binary
X-Originalarrivaltime: 15 Oct 2012 10:33:21.0417 (UTC) FILETIME=[7F8F8F90:01CDAAC0]
Content-Length: 687

Dear scamFRAUDalert,
a successful organization is looking for a Check Assist Manager to join their team.

The position that we offer is a part-time job with no fixed schedule. You will need approximately 1-2 hours per day for communication and other purposes mostly in the morning.

Essential Functions:

– Ensure accurate reporting
– Ensure your job is completed in time
– Provide excellent customer service in a timely manner
– Carrying out instructions furnished in written form
– Other additional duties as assigned
Average salary is $650-850$ per week.

If you are the right candidate, please reply to this letter

WhoIs ~ ggbb.org

Buying Prescription Drugs Online May Be Dangerous Says
Drug Enforcement Administration
Scam Alert 1

DEA Logo - Buying Proscription Drugs

National Association of Boards of Pharmacy (NABP)
Warning

“The Canadian Pharmacy, Canadian/European Pharmacy”, “Canadian Healthcare” and “US Drugstore” are brands of one of the most disgusting illegal online pharmacy group well organized CRIMINAL OPERATION of all times. “GREED” is the driving force behind this operation. Don’t let them fool you. They will never send you any genuine drugs. If they ever send anything at all, it may consist of literally anything from sugar to wall plaster, and they certainly don’t care that you will endanger your health by taking those dangerous counterfeit drugs.

Who's Behind Online Pharmacy 

Today a shadowy, transnational network of illicit drug manufacturers, traders, doctors, Web site operators, spammers and criminals makes up the online pharmacy world.

Buying Medication Online Can Be Safe

There are many options out there when it comes to buying medication online. We have looked at websites after websites. Some sites feature offshore pharmacies that do not require a prior prescription. Others feature licensed pharmacies that do require a prescription from your doctor.
Before making a purchase that can effect your health, we strongly recommend that you consult your physician & DO NOT self-medicate. Ordering medication online can be a safe, money-saving experience. When done through licensed online pharmacies that require a prescription, you can be assured that the medication you get is exactly what you need to treat your ailments.


Address lookup
canonical name ggbb.org

aliases
addresses:66.147.242.87
Domain Whois record

Queried whois.publicinterestregistry.net with “ggbb.org

Domain ID:D68705454-LROR
Domain Name:GGBB.ORG

Created On:02-Apr-2001 18:51:43 UTC
Last Updated On:03-Nov-2011 22:49:37 UTC
Expiration Date:02-Apr-2013 19:51:43 UTC
Sponsoring Registrar:Register.com, Inc. (R71-LROR)
Status:CLIENT TRANSFER PROHIBITED

Registrant ID:18484199f7ed7600
Registrant Name:Domain Discreet Privacy Service
Registrant Organization:ATTN: ggbb.org
Registrant Street1:12808 Gran Bay Pkwy
Registrant City:West Jacksonville
Registrant State/Province:FL
Registrant Postal Code:32258
Registrant Country:US
Registrant Phone:+1.9027492701
Registrant Email:500f4e570a1612203f78d43e8f5eb133@domaindiscreet.com

Admin ID:93595819f7ae9615
Admin Name:Domain Discreet Privacy Service
Admin Organization:ATTN: ggbb.org
Admin Street1:12808 Gran Bay Pkwy
Admin City:West Jacksonville
Admin State/Province:FL
Admin Postal Code:32258
Admin Country:US
Admin Phone:+1.9027492701
Admin Email:500f4e550a1612200af91b1279be9c24@domaindiscreet.com

Tech ID:78557579f7fee639
Tech Name:Domain Discreet Privacy Service
Tech Organization:ATTN: ggbb.org
Tech Street1:12808 Gran Bay Pkwy
Tech City:West Jacksonville
Tech State/Province:FL
Tech Postal Code:32258
Tech Country:US
Tech Phone:+1.9027492701
Tech Email:500f4e590a1612201873c2bcc0e710c2@domaindiscreet.com

Name Server:W.DNS.NETNATION.COM
Name Server:X.DNS.NETNATION.COM

DNSSEC:Unsigned

Network Whois record

Queried whois.arin.net with “n 66.147.242.87″…

NetRange: 66.147.240.0 – 66.147.255.255
CIDR: 66.147.240.0/20
OriginAS: AS46606
NetName: BLUEHOST-NETWORK-4
NetHandle: NET-66-147-240-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
RegDate: 2008-05-05
Updated: 2011-11-29
Ref: http://whois.arin.net/rest/net/NET-66-147-240-0-1

OrgName: Bluehost Inc.
OrgId: BLUEH-2
Address: 1958 South 950 East
City: Provo
StateProv: UT
PostalCode: 84606
Country: US
RegDate: 2006-08-08
Updated: 2011-09-27
Ref: http://whois.arin.net/rest/org/BLUEH-2

OrgTechHandle: NETWO2081-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-801-765-9400
OrgTechEmail: netops@bluehost.com
OrgTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

OrgAbuseHandle: NOC2320-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-801-765-9400
OrgAbuseEmail: abuse@bluehost.com
OrgAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

RAbuseHandle: NOC2320-ARIN
RAbuseName: Network Operations Center
RAbusePhone: +1-801-765-9400
RAbuseEmail: abuse@bluehost.com
RAbuseRef: http://whois.arin.net/rest/poc/NOC2320-ARIN

RTechHandle: NETWO2081-ARIN
RTechName: Network Operations
RTechPhone: +1-801-765-9400
RTechEmail: netops@bluehost.com
RTechRef: http://whois.arin.net/rest/poc/NETWO2081-ARIN

RNOCHandle: TECHN497-ARIN
RNOCName: Technical Operations
RNOCPhone: +1-801-765-9400
RNOCEmail: support@bluehost.com
RNOCRef: http://whois.arin.net/rest/poc/TECHN497-ARIN

DNS records
name class type data time to live
ggbb.org IN SOA
server: ns1.netnation.com
email: hostmaster@netnation.com
serial: 2010032717
refresh: 14400
retry: 1800
expire: 3600000
minimum ttl: 300
300s (00:05:00)
ggbb.org IN MX
preference: 10
exchange: mail.ggbb.org
14400s (04:00:00)
ggbb.org IN NS ns1.netnation.com 14400s (04:00:00)
ggbb.org IN NS ns2.netnation.com 14400s (04:00:00)
ggbb.org IN A 66.147.242.87 14400s (04:00:00)
87.242.147.66.in-addr.arpa IN PTR box487.bluehost.com 86400s (1.00:00:00)
242.147.66.in-addr.arpa IN NS ns2.bluehost.com 86400s (1.00:00:00)
242.147.66.in-addr.arpa IN SOA
server: ns1.bluehost.com
email: abuse@bluehost.com
serial: 2008051502
refresh: 28800
retry: 14400
expire: 3600000
minimum ttl: 300
86400s (1.00:00:00)
242.147.66.in-addr.arpa IN NS ns1.bluehost.com 86400s (1.00:00:00)

— end —

WORK FROM HOME VACANCY ~UK

Ever wanted to be your own boss?

We have a selection of Work from home business opportunity vacancies available across the UK and Northern Ireland.

Whether you’re looking for a full or part time opportunity, or even just to work a few hours at the weekend, we have the right options for you.

Potential earnings can range from £100 – £2000+ per month depending on how much work you put in.

Candidates must be at least 18 years old.

Immediate starts available

To apply for this position click ‘Apply Now’

 

YOU HAVE WON £950,000.00 CONGRATULATION

from: info@claims.com
reply-to: claimsdesk332@hotmail.com
to: scamfraudalert@gmail.com
date: Sun, Oct 14, 2012 at 6:03 PM
subject: YOU HAVE WON £950,000.00 CONGRATULATION

Dear scamFRAUDalert,

The batch number below relates to your winnings.

  1. Batch number……….MY092011XN
  2. Reference number……MY35537UK
  3. Winning number……..ZX09789DG

This is to inform you that you have won a prize money of Nine Hundred and

Fifty Thousand Great British Pound (£950,000.00) for the month of October,

2012 Lottery promotion which is organized by YAHOO/MSN LOTTERY INC, WINDOWS

LIVE, & MICROSOFT WINDOWS, collects all the email addresses of the people

that are active online, Among the million that subscribed to INTERNET we

only select five people every Month as our winners through electronic

balloting System without the winners applying, We congratulate you for being

one of the people selected.

These numbers fall within your Location file, you are requested to contact

the events manager, send your winning identification numbers to him,to

enable him verify your claims. How ever you will
have to fill and submit this form to the events manager for verification &

direction on how you can claim your winning fund.

Forward the following details to help facilitate the processing of your

claims:

1. Full Names:
2. Address:
3. Phone Number:
4. Sex:
5. Age:
6. Occupation:
7. Nationality:
8. Country of Residence:
9. Date Notified:

(CONTACT EVENTS MANAGER)
Name: Dr.Kelvin Brown
Email:claimsdesk332@hotmail.com
Telephone: +447 0317 45638

Thank you and accept my hearty congratulations once again!

Yours faithfully,
Mrs. Lisa Lee.

Copyright? © 1994-2011 Microsoft/Yahoo Internet E-mail Lottery.

SPAMHAUS Reports ~ Quick Cart Pro

Quick Cart Pro is a online internet pharmacy distributors. Spamhaus have complied the report below:

American operation with Philippines, Russian and Canadian connections, this large spam operation mostly promotes fake pharmaceuticals using classic “snowshoe” methods with countless IP ranges and domains. Many fictitious identities and aliases.

They own at least to ICANN registrars and use them to obtain an unlimited stream of domains to spam.

Related Companies:

  1. Altima Ventures LLC
  2. Beeline Meridian, LLC
  3. Calima Ventures, LLC
  4. Clearwater House, LLC
  5. Everglade Scripts, LLC
  6. Everglades Scripts On Line, LLC
  7. Manalapan Medical Services, LLC
  8. Marathon Supplements, LLC
  9. Natural Lotus LLC
  10. New Orient Trading, LLC
  11. Punjabi Medical LLC
  12. Rameshkumar Patel
  13. Chung Ping Yu

This outfit was identified early on as “Quick Cart Pro.” We knew of them in early 2009 and they were active prior to that. They have since morphed that name to many variations such as “Best Cart Solutions” and many more.

They sell spam-for-hire services and have an affiliate program to help them pump spam.

Their modus operandi is classic snowshoe with endless dedicated IP ranges and countless domains, often issued by their dedicated spam registrar.

Domains and back-end DNS services are operated by a branch of the organization known as “AB Systems”. That registrar (absystems.com) is fully dedicated to providing them with an ever-changing array of domains. Domains change on a daily basis or even more frequently than that.

Spam content varies widely as they tailor the content for each client.

Domain Name: EVILLEMON.NET
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.EVILLEMON.NET
Name Server: NS2.EVILLEMON.NET
Status: ok
Updated Date: 30-aug-2010
Creation Date: 21-aug-2009
Expiration Date: 21-aug-2011

Domain name: evillemon.net

Registrant Contact:
Jfkdsl Technics, technics1962@evillemon.net
301 sw 14th street
Pendleton, OR 97801
US
+1.5412763830

Administrative Contact:
Jfkdsl Technics, technics1962@evillemon.net
301 sw 14th street
Pendleton, OR 97801
US
+1.5412763830

Billing Contact:
Jfkdsl Technics, technics1962@evillemon.net
301 sw 14th street
Pendleton, OR 97801
US
+1.5412763830

Technical Contact:
Jfkdsl Technics, technics1962@evillemon.net
301 sw 14th street
Pendleton, OR 97801
US
+1.5412763830

Status:
Active

Name Servers:
NS1.EVILLEMON.NET
NS2.EVILLEMON.NET

Creation date: 21 Aug 2009 15:44:36
Expiration date: 21 Aug 2011 10:66:20

_________________________________________

Domain Name: TOP-PREMIUM-CART.COM
Registrar: WILD WEST DOMAINS, INC.
Whois Server: whois.wildwestdomains.com
Referral URL: http://www.wildwestdomains.com
Name Server: NS33.DOMAINCONTROL.COM
Name Server: NS34.DOMAINCONTROL.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 08-apr-2010
Creation Date: 08-apr-2010
Expiration Date: 08-apr-2011

Registrant:
Domains by Proxy, Inc.

Registered through: http://www.dynonames.com
Domain Name: TOP-PREMIUM-CART.COM

Domain servers in listed order:
NS33.DOMAINCONTROL.COM
NS34.DOMAINCONTROL.COM

Quick Cart Pro
(888) 224-7215
8345 NW 66TH ST
Miami, Florida 33166
United States
quickcartpro@gmail.com

Administrative Contact
Robert Davis
Quick Cart Pro
(888) 224-7215
8345 NW 66TH ST
Miami, Florida 33166
United States
quickcartpro@gmail.com

Technical Contact
Robert Davis
Quick Cart Pro
(888) 224-7215
8345 NW 66TH ST
Miami, Florida 33166
United States
quickcartpro@gmail.com

Registered through: http://www.dynonames.com
Domain Name: top-premium-cart.com
Created on: 2010-04-08 12:14:11
Expires on: 2011-04-08 12:14:11
Last Updated on: 2010-04-08 12:14:11

______

Domain Name: QUICK-CART-PRO.COM
Registrar: WILD WEST DOMAINS, INC.
Whois Server: whois.wildwestdomains.com
Referral URL: http://www.wildwestdomains.com
Name Server: NS15.DOMAINCONTROL.COM
Name Server: NS16.DOMAINCONTROL.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 14-sep-2009
Creation Date: 11-nov-2008
Expiration Date: 11-nov-2010

Registrant:
Quick Cart Pro

8345 NW 66TH ST
Miami, Florida 33166
United States

Registered through: http://www.dynonames.com
Domain Name: QUICK-CART-PRO.COM
Created on: 11-Nov-08
Expires on: 11-Nov-10
Last Updated on: 14-Sep-09

Administrative Contact:
Davis, Robert quickcartpro@gmail.com
Quick Cart Pro
8345 NW 66TH ST
Miami, Florida 33166
United States
(888) 224-7215

Technical Contact:
Davis, Robert quickcartpro@gmail.com
Quick Cart Pro
8345 NW 66TH ST
Miami, Florida 33166
United States
(888) 224-7215

Domain servers in listed order:
NS15.DOMAINCONTROL.COM
NS16.DOMAINCONTROL.COM

__________________________

Domain Name: QUICKCARTPRO.COM
Registrar: WILD WEST DOMAINS, INC.
Whois Server: whois.wildwestdomains.com
Referral URL: http://www.wildwestdomains.com
Name Server: NS10530.NOINHOCLUB.COM
Name Server: NS10531.NOINHOCLUB.COM
Name Server: NS996.NOINHOCLUB.COM
Name Server: NS997.NOINHOCLUB.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 16-apr-2010
Creation Date: 15-apr-2006
Expiration Date: 15-apr-2011

Registrant:
Robert Bishop
401 Ash
Richland, Washington 99352
United States

Registered through: Bishop Digital
Domain Name: QUICKCARTPRO.COM
Created on: 15-Apr-06
Expires on: 15-Apr-11
Last Updated on: 16-Apr-10

Administrative Contact:
Bishop, Robert bob@bishopdigital.com
401 Ash
Richland, Washington 99352
United States
(509) 943-4723

Technical Contact:
Bishop, Robert bob@bishopdigital.com
401 Ash
Richland, Washington 99352
United States
(509) 943-4723

Domain servers in listed order:
NS1.BISHOPDIGITALHOSTING.COM
NS2.BISHOPDIGITALHOSTING.COM
NS997.NOINHOCLUB.COM
NS996.NOINHOCLUB.COM

________________________________________________

[67.219.57.247]
NS2.SORUEAIF.COM
NS1.SORUEAIF.COM

Domain Name: SORUEAIF.COM
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.SORUEAIF.COM
Name Server: NS2.SORUEAIF.COM
Status: ok
Updated Date: 15-mar-2010
Creation Date: 09-feb-2010
Expiration Date: 09-feb-2011

____________

[67.219.57.100]
NS1.ALLAMERICALAWNS.COM
NS2.ALLAMERICALAWNS.COM

Domain Name: ALLAMERICALAWNS.COM
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.ALLAMERICALAWNS.COM
Name Server: NS2.ALLAMERICALAWNS.COM
Status: ok
Updated Date: 15-mar-2010
Creation Date: 09-feb-2010
Expiration Date: 09-feb-2011
________________________________________________

Aliases:

Top Premium Cart
Gareth McDowell
8345 NW 66th Street
Miami, FL 33166 US
888-224-7215

Best Cart Solutions
James Blackwood
8345 nw 66th st
Miami, FL 33166
866-627-6486

Registrant Street1:10730 NW 66TH ST UNIT 309\
Registrant City:Miami
Registrant State/Province:FL
Registrant Postal Code:33178
Registrant Country:US
Registrant Phone:+1.3054365058

This address is a postal “Drop box” place:
http://www.usabox.com/instructions1583.asp

USABOX, INC.
8345 NW 66TH ST
MIAMI FL 33166

CustName: Quick Cart Pro
Address: 324 E. 11th St.
Address: Suite 1000
City: Kansas City
StateProv: MO
PostalCode: 64106
Country: US

OrgName: Quick Cart Pro
OrgId: QUICK-41
Address: 8345 nw 66th St.
City: Miami
StateProv: FL
PostalCode: 33165
Country: US
RegDate: 2009-01-08
Updated: 2009-01-08
Ref: http://whois.arin.net/rest/org/QUICK-41

OrgTechHandle: DRO234-ARIN
OrgTechName: Robert, Davis
OrgTechPhone: +1-888-224-7215

Registered through: Bishop Digital
Domain Name: QUICKCARTPRO.COM
Bishop, Robert bob@bishopdigital.com
401 Ash
Richland, Washington 99352
United States
(509) 943-4723

network:IP-Network-Block:72.249.110.0 – 72.249.110.255
network:Org-Name:Online Data Solutions, LLC
network:Street-Address:1133 Broadway, #706
network:City:New York
network:State:NY
network:Postal-Code:10010
network:Country-Code:US

__________________

Also?

OrgName: Mambahosting
OrgId: MAMBA-3
Address: 93 So. Jackson St
Address: Suite 88657
City: Seattle
StateProv: WA
PostalCode: 98104
Country: US
RegDate: 2009-11-11
Updated: 2009-11-11
Ref: http://whois.arin.net/rest/org/MAMBA-3

OrgTechHandle: BCO241-ARIN
OrgTechName: Corbin, Blake
OrgTechPhone: +1-206-274-8105
OrgTechEmail: bcorbin@mambahosting.com

________________________________________________

QUICK CART PRO (C02101850) 066205071000-11252008 (NET-66-205-71-0-1) 66.205.71.0 – 66.205.71.255
Quick Cart Pro (C02299063) RSPC-1250821092396251 (NET-204-232-151-128-1) 204.232.151.128 – 204.232.151.135
Quick Cart Pro (C02377272) WII-2118-10063011 (NET-204-12-202-0-1) 204.12.202.0 – 204.12.202.15
Quick Cart Pro (C02437059) RSPC-1267800249582880 (NET-72-32-117-64-1) 72.32.117.64 – 72.32.117.95
Quick Cart Pro (C02473183) PS-74-122-238 (NET-74-122-239-0-1) 74.122.239.0 – 74.122.239.255
Top Premium Cart (C02561784) TOPPREMIUMCART (NET-67-227-85-0-1) 67.227.85.0 – 67.227.85.255

________________________________________________

Robert Davis
8345 nw 66th st
Miami, FL 33166 United States
bestcartsolutions@gmail.com
+13054283686 305-428-3686
robert@quick-cart-pro.com

Robert Davis
Quick Cart Pro
IL United States
robert@quick-cart-pro.com
_______________________

Robert Mcgowan
(Quality Fountain INC)
quality.fount4@gmail.com
8721 santa monica blvd,
Los Angeles, CA, 90069
United States
866-920-1418
_______________________

Domain Name: COAST-TO-COAST-HOSTING.COM
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS09.DOMAINCONTROL.COM
Name Server: NS10.DOMAINCONTROL.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 13-sep-2010
Creation Date: 13-sep-2010
Expiration Date: 13-sep-2011

Registrant:
COAST-TO-COAST-HOSTING

112 S Court Ave #11
Orlando, California 32801
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: COAST-TO-COAST-HOSTING.COM
Created on: 13-Sep-10
Expires on: 13-Sep-11
Last Updated on: 13-Sep-10

Administrative Contact:
Smith, Adam manager@COAST-TO-COAST-HOSTING.com
COAST-TO-COAST-HOSTING
112 S Court Ave #11
Orlando, California 32801
United States
+1.8669201418

Technical Contact:
Smith, Adam manager@COAST-TO-COAST-HOSTING.com
COAST-TO-COAST-HOSTING
112 S Court Ave #11
Orlando, California 32801
United States
+1.8669201418

Domain servers in listed order:
NS09.DOMAINCONTROL.COM
NS10.DOMAINCONTROL.COM

_______________________

%rwhois V-1.5:003eff:00 rs2.ezzi.net (by Network Solutions, Inc. V-1.5.9.6)
network:Class-Name:network
network:ID:NETBLK-EZZINET.66.199.224.0/19
network:Auth-Area:66.199.224.0/19
network:Network-Name:EZZISUBNET-66.199.249.8
network:IP-Network:66.199.249.8/29
network:IP-Network-Block:66.199.249.8 – 66.199.249.15
network:Organization;I:Darroll-Nielsen-4254
network:Tech-Contact;I:hostmaster@ezzi.net
network:Admin-Contact;I:AD125-ARIN
network:Created:20010919
network:Updated:20100409
network:Updated-By:hostmaster@ezzi.net
________________________

Darroll Nielsen
130 Church ST
New York, New York 10007
Phone: 800-571-0235
Fax: 866-624-8372

darroll@topshoppingcart.com
darroll@ultimateshoppingcart.com

Domain Name: ULTIMATESHOPPINGCART.COM
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS1.COVE.COM.AU
Name Server: NS2.COVE.COM.AU
Name Server: NS3.COVE.COM.AU
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 14-jun-2010
Creation Date: 12-jun-2009
Expiration Date: 12-jun-2011

Registrant:
Company Director
PO Box 2103
Prahran, Victoria 3181
Australia

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: ULTIMATESHOPPINGCART.COM
Created on: 12-Jun-09
Expires on: 12-Jun-11
Last Updated on: 14-Jun-10

Administrative Contact:
Director, Company go29twbf4xurp@aubrands.com
PO Box 2103
Prahran, Victoria 3181
Australia
61386102016 Fax — +613.86102016

Technical Contact:
Director, Company go29twbf4xurp@aubrands.com
PO Box 2103
Prahran, Victoria 3181
Australia
61386102016 Fax — +613.86102016

Domain servers in listed order:
NS1.COVE.COM.AU
NS2.COVE.COM.AU
NS3.COVE.COM.AU
________________________________

Domain Name: TOPSHOPPINGCART.COM
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.TOPSHOPPINGCART.COM
Name Server: NS2.TOPSHOPPINGCART.COM
Status: ok
Updated Date: 23-jan-2010
Creation Date: 22-jan-2008
Expiration Date: 22-jan-2011

Domain name: topshoppingcart.com

Registrant Contact:
Organization
Gherghy Jiku, jiku2343@gmail.com
567 hero street
georgia, NY 10002
US
+1.1111111112 Fax: +1.1111111112

Administrative Contact:
Organization
Gherghy Jiku, jiku2343@gmail.com
567 hero street
georgia, NY 10002
US
+1.1111111112 Fax: +1.1111111112

Billing Contact:
Organization
Gherghy Jiku, jiku2343@gmail.com
567 hero street
georgia, NY 10002
US
+1.1111111112 Fax: +1.1111111112

Technical Contact:
Organization
Gherghy Jiku, jiku2343@gmail.com
567 hero street
georgia, NY 10002
US
+1.1111111112 Fax: +1.1111111112

Status:
Active

Name Servers:
NS1.TOPSHOPPINGCART.COM
NS2.TOPSHOPPINGCART.COM

Creation date: 22 Jan 2008 13:37:12
Expiration date: 22 Jan 2011 13:37:12

______________________________

ns1.ransomeneterpises.net A 66.199.249.10
http://www.ransomeneterpises.net A 66.199.249.10
http://www.server73.net A 66.199.249.10

Domain Name: RANSOMENETERPISES.NET
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.RANSOMENETERPISES.NET
Name Server: NS2.RANSOMENETERPISES.NET
Status: ok
Updated Date: 04-jul-2010
Creation Date: 03-jul-2009
Expiration Date: 03-jul-2011

Domain Name: SERVER73.NET
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: NS1.RANSOMENETERPISES.NET
Name Server: NS2.RANSOMENETERPISES.NET
Status: ok
Updated Date: 24-may-2010
Creation Date: 17-mar-2010
Expiration Date: 17-mar-2011

Domain Name: HOST567.NET
Registrar: ABSYSTEMS INC
Whois Server: whois.yournamemonkey.com
Referral URL: http://www.yournamemonkey.com
Name Server: No nameserver
Status: pendingDelete
Updated Date: 13-oct-2010
Creation Date: 22-apr-2006
Expiration Date: 22-apr-2011

________________

[ 173.233.88.2] ns1.beaverviking.com
[ 173.233.88.3] ns1.capecodrealastate.com
[ 173.233.88.4] http://www.capecodrealastate.com
[ 173.233.88.5] mx0.capecodrealastate.com
[ 173.233.88.6] pop3.capecodrealastate.com
[ 173.233.88.7] smtp.capecodrealastate.com
[ 173.233.88.8] admin.capecodrealastate.com
[ 173.233.88.9] secure.capecodrealastate.com
[ 173.233.88.10] ns1.interknotlyra.com
[ 173.233.88.11] http://www.interknotlyra.com
[ 173.233.88.12] mx0.interknotlyra.com
[ 173.233.88.13] pop3.interknotlyra.com
[ 173.233.88.14] smtp.interknotlyra.com
[ 173.233.88.15] admin.interknotlyra.com
[ 173.233.88.16] secure.interknotlyra.com
etc
___________

Clearwather House LLC
Mordechai Eilos
clearwaterhouse@gmx.com
223 East Flagler Street, S-218
Miami Florida 33131
786-429-6256

First Name: Mordechai
Last Name: Ailos
Company: Marathon Supplements LLC
Address: 223 East Flagler Street
Miami, FL 33131
Phone: 877-792-2969 / 786-429-6256
Email: marathonsupplements@yahoo.com

Natural Lotus LLC
Ailos Mordechai
223 East Flagler Street, Suite 218
Miami FL 33131
naturallotus@gmail.com

http://www.whitepages.com/name/Mordechai-M-Ailos/Fort-Lauderdale-FL/2k0dhs0

Mordechai M Ailos
1842 NE 26th Ave
Fort Lauderdale, FL 33305-3524
Age: 40-44
Associated: Limor Ailos

Name: Mordechai Ailos
Company: Calima Ventures LLC
Address: 223 East Flagler Street, Suite 218
Miami, FL 33131 US
E-mail: calimaventuresllc@yahoo.com
Phone: 877-792-2969

___________

First Name Gareth
Last Name McDowell
Company Name Top Premium Cart
Email Address gareth@top-premium-cart.com
Address 1 8345 NW 66TH ST
Address 2
City Miami
State Florida
Postcode 33166
Country US – United States
Phone Number 8882247215

ns3.netrxorder.com. 172800 IN A 66.199.249.10
ns1.netrxorder.com. 172800 IN A 74.52.22.93
ns2.netrxorder.com. 172800 IN A 74.52.22.93

________________________

http://cidr-report.org/cgi-bin/as-report?as=AS55751

aut-num: AS55751
as-name: KIROT-NET-PH
descr: Unit 503 Philcom Bldg. Pase de Roxas
country: PH
admin-c: KIRO1-AP
tech-c: KIRO1-AP
mnt-by: MAINT-KIROT-NET-PH
mnt-routes: MAINT-KIROT-NET-PH
changed: hm-changed@apnic.net 20100906
source: APNIC

role: KNOWLEDGE INFORMATION RESOURCES OPERATIONS TECHN
address: Unit 503 Philcom Bldg. Pase de Roxas Makati City
country: PH
phone: +63-2-856-7629
fax-no: +63-2-403-7478
e-mail: marvin.guillen82@yahoo.com
admin-c: KIRO1-AP
tech-c: KIRO1-AP
nic-hdl: KIRO1-AP
mnt-by: MAINT-KIROT-NET-PH
changed: hm-changed@apnic.net 20100906
source: APNIC
______________________________________

Possible a/k/a:

CustName: Nuclear Fallout Enterprises
Address: 526 Belmont Ave E
Address: #204
City: Seattle
StateProv: WA
PostalCode: 98102
Country: US
RegDate: 2010-06-23
______________________________________

Possibly related snowshoe spam operations:

GlassHouseHosting (Glass House Hosting)
GlassHouseMarketing (Glass House Marketing) (Stephen Bradley)
MambaHosting (Mamba Hosting)

Source: http://www.spamhaus.org/rokso/evidence/ROK9183/quick-cart-pro/main-info