Tag: scammer

We received another tip from readers about a particular spammer related to hefallsintothe.com. The admin contact of the domain name is leecheryl182@gmail.com. The domain name hefallsintothe.com is using ns1.insulationfromtheelements.com and ns2.insulationfromtheelements.com

The domain names are registered through namecheap.com.

whois hefallsintothe.com:

Administrative Contact:

Web Master (leecheryl182@gmail.com)
+1.7734130857
Fax:
616 Corporate Way
Suite 2
Valley College, NY 10989
US

Creation date: 19 Mar 2013 19:06:00
Expiration date: 19 Mar 2014 11:06:00

whois insulationfromtheelements.com:

Administrative Contact:
Brightness Partners
Network Admin (dns@brightnesspartners.com)
+1.8004094960
Fax: +1.5555555555
6321 W Dempster St
Suite 161
Morton Grove, IL 60053
US

Creation date: 19 Mar 2013 20:53:00
Expiration date: 19 Mar 2014 12:53:00

Whois brightnesspartners.com:

Administrative Contact:
Brightness Partners
Network Admin (dns@brightnesspartners.com)
+1.8004094960
Fax: +1.5555555555
6321 W Dempster St
Suite 161
Morton Grove, IL 60053
US

Creation date: 19 Mar 2013 20:36:00
Expiration date: 19 Mar 2014 12:36:00

Partial list of domain names related to dns@brightnesspartners.com:

• aboveallcanacquire.com
• allusefulhasthe.com
• andhopetoobtain.com
• artitselfbythe.com
• brightnesspartners.com
• colouringheshouldlodge.com
• conductothersashaving.com
• eminencebyothermeans.com
• frivolouspursuitscapacityto.com
• ifhewasallowed.com
• ifoneactexcluded.com
• ihaveseenalso.com
• insulationfromtheelements.com
• inthedrudgeryof.com
• isalwaysathand.com
• isbrilliantthanwith.com
• ithasbeenso.com
• itmaybetaken.com
• managedoftenshortensthe.com
• maneminentforhis.com
• momentthepracticeof.com
• ofagreatdegree.com
• ofthealphabetif.com
• onlybeopposedby.com
• thatidealexcellencewhich.com

 

Partial list of domain names with leecheryl182@gmail.com as admin contacts:

• anypurposewhohave.com
• arrivedattheirutmost.com
• artwhichhemust.com
• bettercoursehavelong.com
• bystudyingtheseauthentic.com
• cannotdobetterthan.com
• easeandreadinessto.com
• farastheyshall.com
• faultifourprogress.com
• formedinitwhich.com
• fromthosewhohave.com
• gratitudeinouracademy.com
• intheirpupilsprobably.com
• inventontheirmethod.com
• itnearthemodel.com
• itrequiresnoeffort.com
• leastcontributetoyour.com
• makesnopretensionsto.com
• mannerofhandlingemulation.com
• politebeendoneby.com
• resultofnaturalpowers.com
• studenthassucceededin.com
• studentssooftendisappoint.com
• tocollectsubjectsfor.com
• whichnaturehasbeen.com

This is the continuation to milkcheesedns.com spammer.

properlymysteriouslyupbeat.com

Registration Service Provided By: Namecheap.com
Contact: support@namecheap.com
Visit: http://namecheap.com

Domain name: properlymysteriouslyupbeat.com

Registrant Contact:
margretriverhosting
Domain Management ()

Fax:
PO Box 66738
Saint Louis, MO 63166-6738
US

Administrative Contact:
margretriverhosting
Domain Management (domains@margretriverhosting.com)
+1.3147146057
Fax: +1.3147146057
PO Box 66738
Saint Louis, MO 63166-6738
US

Technical Contact:
margretriverhosting
Domain Management (domains@margretriverhosting.com)
+1.3147146057
Fax: +1.3147146057
PO Box 66738
Saint Louis, MO 63166-6738
US

Status: Locked

Name Servers:
ns1.safetyorangeblazeorangemule.com
ns2.safetyorangeblazeorangemule.com

Creation date: 30 May 2012 07:20:00
Expiration date: 29 May 2013 23:20:00

margretriverhosting.com

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
Registration Service Provided By: PLANET ONLINE
Contact: +1.8887654932
Website: http://www.planetonline.net

Domain Name: MARGRETRIVERHOSTING.COM

Registrant:
Margret River Hosting
Margret River Hosting        (webmaster@margretriverhosting.com)
PO Box 105603
#88657
Atlanta
Georgia,30348
US
Tel. +404.6719366

Creation Date: 20-Aug-2010
Expiration Date: 20-Aug-2012

Domain servers in listed order:
ns1.planetonline.net
ns2.planetonline.net
ns3.planetonline.net
ns4.planetonline.net

Administrative Contact:
Margret River Hosting
Margret River Hosting        (webmaster@margretriverhosting.com)
PO Box 105603
#88657
Atlanta
Georgia,30348
US
Tel. +404.6719366

Technical Contact:
Margret River Hosting
Margret River Hosting        (webmaster@margretriverhosting.com)
PO Box 105603
#88657
Atlanta
Georgia,30348
US
Tel. +404.6719366

Billing Contact:
Margret River Hosting
Margret River Hosting        (webmaster@margretriverhosting.com)
PO Box 105603
#88657
Atlanta
Georgia,30348
US
Tel. +404.6719366

From contact page, which most likely useless:

(314) 714-6057
PO Box 66738 Saint Louis, MO 63166-6738

The information provided in the contact page can be used to chart the spammer’s pattern.

Note the Name server: safetyorangeblazeorangemule.com

Registration Service Provided By: Namecheap.com
Contact: support@namecheap.com
Visit: http://namecheap.com

Domain name: safetyorangeblazeorangemule.com

Registrant Contact:

Technical Support ()

Fax:
PO Box 29502
Las Vegas, NV 89126
US

Administrative Contact:

Technical Support (domains@newbrandhosting.net)
+1.7026660363
Fax: +1.5555555555
PO Box 29502
Las Vegas, NV 89126
US

Technical Contact:

Technical Support (domains@newbrandhosting.net)
+1.7026660363
Fax: +1.5555555555
PO Box 29502
Las Vegas, NV 89126
US

Status: Locked

Name Servers:
dns1.registrar-servers.com
dns2.registrar-servers.com
dns3.registrar-servers.com
dns4.registrar-servers.com
dns5.registrar-servers.com

The problem is that domain name registrars such as eNom and NameCheap would not take pro-active stance in fighting against these type of spammer. It is pretty obvious that the same individuals are responsible for these domain names. They keep registering new domain names and the domain name registrars did not do a thing to stop them from doing so.