Posted 3/25/01
The URL:
www.mo3aa.abafbdb.mx=14=02=14=05=14.com|net.ped=02=05=14==02=14=05=14=
14.jjjjjjjj.com:80/mo3/abafbdb
Resolves to:
www.jjjjjjjj.com =127.0.0.1
www.mo3aa.abafbdb.mx.jjjjjjjj.com
= 216.33.20.4 = angelfire <page is dead and has been for awhile>
www.withthecontrolcharactersandotherjunk.jjjjjjjj.com
=63.125.176.179 <Had to munge this one, it will point to the porn site even
without the path of /mo3/abafbdb/ included>
The Redirector is also at 63.125.176.179
63.125.176.179 is Cyber innovations, which is downstream from uu.net.
Cyber Innovations is most likely another alias for Empire Towers.
So, launch the lart at uu.net. Enough complaints and uu.net may take
action.
Cyber Innovations (NETBLK-UU-63-125-176-128)
1558 NE 162 St
North Miami Beach, FL 33162
US
Netname: UU-63-125-176-128
Netblock: 63.125.176.128 - 63.125.176.255
Posted 12/19/00
The URL:
http://www.al3.shutuphoe012.mx=14=02=14=05=14.com|net.abc=02=05=14==02=14=05=14=14.lllllllll.com /al3/shutuphoe012/index.htm
Resolves to either
www.angelfire.com/al3/shutuphoe012/index.html or
208.62.22.18/al3/shutuphoe012/index.htm
It depends or if your browser will process the control characters.
The Redirector:
http://www.downloadac.net.enter.cgi.sexpussy.org:5721/pub/shockwave/cabs/flash/swflash.cab/index.cgi?classid= clsid:D27CDB6E-AE6D-11cf-96B8-444553540000&codeBase=http://3510841963/curr1;nav=msie;http://3516597317 http://3516597319http://3516597321http://3516597323
The final site:
http://208.62.22.27:28522/corbis.mx/@3510841963/http:/203.67.39.102/3510841973/frames.cgi?&program= 3510841973&rep=tonyb&sub=rep1&campaign=currency&ref=&page=index.html
All sites still remain in Bellsouth. Contact Angelfire and Bellsouth.
Posted 12/16/00
The URL:
http://www.ab4.gobbles.mx=14=02=14=05=14.com|net.dce=02=05=14==02=14=05=14=14.lllllllll.com/ ab4/gobbles99/index.html
Resolves to either www.angelfire.com/ab4/gobbles99/index.html or 208.62.22.11/ab4/gobbles99/index.html
It depends or if your browser will process the control characters.
The Redirector:
http://www.downloadac.net.enter.cgi.sexpussy.org:5721/pub/shockwave/cabs/flash/swflash.cab/ index.cgi?classid=clsid:D27CDB6E-AE6D-11cf-96B8-444553540000&codeBase=http://3510841963;nav= msie;http://3516597317http://3516597319http://3516597321http://3516597323http:/
The final site:
http://208.62.22.28:22512/corbis.mx/@3510841963/http:/203.67.39.102/3510841973/frames.cgi?&program =3510841973&rep=dean&sub=etc&campaign=eboom&ref=&page=index.html
The details remain the same as for the one listed below. Lart targets remain Angelfire and Bellsouth.
Additional Info:
The download connects to http://www.eboom.com/bin/blnkExe.htm
eboom is registered to Cityworld (EBOOM-DOM) with contact info of
Parker, Matt (MP14574) pronet@ALLWEBHOSTING.NET
Pronet Enterprises
P.O. Box CB-13039
Nassau, Bahamas
And hosted by Python Communications, who are another Partner/Client? of Empire Towers.
Larts to any of the above is not recommended. Instead go to the upstream and contact Teleglobe.
Posted 12/2/00
The URL:
http://www.ms2.jggfjgfj.mx%3D14%3D02%3D14%3D05%3D14.com%7Cnet.abc%3D02%3D05%3D14%3D%
3D02%3D14%3D05%3D14%3D14.lllllllll.com:80/ms2/jggfjgfj/index.html
The Redirector:
http://www.downloadac.net.enter.cgi.sexpussy.org:5721/pub/shockwave/cabs/flash/swflash.cab
/index.cgi?classid=clsid:D27CDB6E-AE6D-11cf-96B8-444553540000&codeBase=http://3510841963/curr1;
nav=msie;http://3516597317http://3516597319http://3516597321http://3516597323
The final site:
http://208.62.22.28:20512/corbis.mx/@3510841963/http:/203.67.39.102/3510841973/frames.cgi?
&program=3510841973&rep=tonyb&sub=rep1&campaign=currency&ref=&page=index.html
The details:
The details remain the same as for the one posted below. Except for the link to Angelfire.
Aliases:
www.ms2.jggfjgfj.mx=14=02=14=05=14.com|net.abc=02=05=14==02=14=05=14=14.lllllllll.com
Addresses:
208.62.22.11
Fresh as of 11/26/00, it was nice of ET to send me a birthday present.
The URL:
A new Domain:
It might look like the domain name is nine one's, but it's not.
empire towers llc (LLLLLLLLL-COM-DOM)
Independence Dr. 5th Floor
St. John's, AG AG
AG
Domain Name: LLLLLLLLL.COM
Administrative Contact:
Singh Abodjian (SA1455-BR) domainops@arabia.com
Yaman Santuary
PO Box 911288
Anman, Jordan 11191
AE
Phone- 962 6 5154239
Fax-
Technical Contact:
Singh Abodjian (SA1455-BR) domainops@arabia.com
Yaman Santuary
PO Box 911288
Anman, Jordan 11191
AE
Phone- 962 6 5154239
Fax-
Record updated on 2000-09-14.
Record created on 2000-04-06.
Record expires on 2001-04-06.
Database last updated on 2000-11-27 22:02:51 EST.
Domain servers in listed order:
QZ1.QZAA.COM 208.62.22.5
QZ2.QZAA.COM 208.62.22.4
QZ3.QZAA.COM 208.62.22.19
QZ4.QZAA.COM 208.62.22.20
I thought it was nice of Empire Towers to finally list Empire Towers and Yaman Santuary in the same registration.
11/27/00 21:23:55 dns http://www.yt2.thrash5703.mx=14=02=14=05=14.com|nettlb=02=05=14==02=14=05=14=14.lllllllll.com/yt2/thrash5703/
Canonical name: angelfire.com
Aliases:
www.yt2.thrash5703.mx=14=02=14=05=14.com|nettlb=02=05=14==02=14=05=14=14.lllllllll.com
Addresses:
216.35.100.9
216.33.20.4
So, the URL actually resolves as:
www.angelfire.com/yt2/thrash5703
So, it still travels through Angelfire, then sexpussy.org at:
classid=clsid:D27CDB6E-AE6D-11cf-96B8-444553540000&codeBase=http://3510841925/britney1;nav=msie;
http://3516597317http://3516597319http://3516597321http://3516597
and on to final site at:
http://208.62.22.28:20512/corbis.mx/@3510841963/http:/203.67.39.102/3510841925/frames.cgi?
&program=3510841925&rep=hermes&sub=tandl&campaign
=britney&ref=&page=index.html <Hyperlink properties removed>
A new location: Back On Bellsouth
Trying 208.62.22.28 at ARIN
Trying 208.62.22 at ARIN
BellSouth.net Inc. (NETBLK-BELLSNET-BLK7)
301 Perimeter Center North, Suite 400
Atlanta, GA 30346
US
Netname: BELLSNET-BLK7
Netblock: 208.60.0.0 - 208.63.255.255
Maintainer: BELL
Coordinator:
Geurin, Joe (JG726-ARIN) ipadmin@bellsouth.net
678-441-7800 (FAX) 678-441-6968
Sexpussy.org is also on the block on Bellsouth
Canonical name: www.downloadac.net.enter.cgi.sexpussy.org
Addresses:
208.62.22.21
As are all the nameservers,
QZ1.QZAA.COM 208.62.22.5
QZ2.QZAA.COM 208.62.22.4
QZ3.QZAA.COM 208.62.22.19
QZ4.QZAA.COM 208.62.22.20