Overview of spam from Online18

25 Mar 2008

Note: Automated spam monitoring stopped several years ago. These web pages are maintained for historical reasons. Some may be updated from time to time as news about the individual sites becomes available.

No spam today

Overview of last 1 reports

date	posts	total	BI
25 Feb 2000	29	45	33.94	full headers

full history also available

General information about Online18

Added 14 July 1997. Online18 now hosts the Psychic Spammer. Rumor is that Online18 is the Psychic spammer.

Ownership & Contact Info
History

Online18 is also known as 1-800PHONESEX.

Online18 is owned by Chris Ferri. Primary spammer for 1-800 phone sex numbers is Kenny Schaefer, kschaefer@online18.com. Ferri and Schaefer may be the same person.

References about Kenny Schaefer:

Scheafer's aliases and/or accomplices are believed to include "Anthony Lukas", "Vasco Guraj", "Frank Tarul", and other aliases. Addresses include:

86 Sedgwick Ave, Yonkers, NY 10705, 914-973-6834, 914-965-6350
Vasco Guraj, 2412 Huges Ave., Bronx, NY, 10458, 914-973-6834, pager: 914-965-6350, fax: 718-239-0661.
Westford Telecommunications, inc., 700-76 Broadway, suite 168, Westwood, New Jersey 07675, (false phone number provided)
Po Box 1016, Younkers NY 10704, work: 914/965-6350, home: 914/973-6834, fax: 718/239-0661, fax: 712/239-1324
718/239-3155 (confirmed)
718/239-1324
Vasco Guraj, 24 Pebble Beach Drive, Georgetown, DE, 19947, 302/855-5875
Vasco Auraj, 34 Elm St., Kalispell, MT 59901, (406) 257-5098
John Wilson, 1415 Wilmont Rd., Kalispell, MT 59901, (718) 239-0661
Bobby Jones
Brian Sullivan
Marcus Lauda, 78 Gordon, Yonkers, NY 10702, 914/376-0747, 718/239-0662

Note: Scheafer is known to give fraudulent phone numbers when obtaining an account, so many of these phone numbers belong to innocent bystanders.

Scheafer moves around geographically, hitting several servers in an area simultaneously. He is known to use stolen and/or nonexistant credit cards.

The (800) 559-6558 references (900) 344-1122. This number belongs to "Exquisite Telecommunications Inc." (913) 338-1545, also known as "Overland Data Center"

Ownership & Contact Info

Whois indicates that Online18 is

WESTFORD TELECOMMUNICATIONS, INC. (ONLINE16-DOM)
   700-76 BROADWAY, SUITE 168
   WESTWOOD, NEW JERSEY 07675
   USA

   Domain Name: ONLINE18.COM

   Administrative Contact, Technical Contact, Zone Contact:
      FERRI, CHRISTOPHER CFERRI@ONLINE18.COM
      999-999-9999 (FAX) 999-999-9999

   Record last updated on 16-Dec-96.
   Record created on 19-Jun-96.
   Database last updated on 14-Aug-97 04:38:04 EDT.

   Domain servers in listed order:

   WWW.ONLINE18.COM		206.138.239.10
   IPAD.ONLINE18.COM		206.138.239.16

Online18 receives connectivity from AlterNet.

History

Kenny Schaefer moves constantly from ISP to ISP around the country as he loses accounts. This list only includes the highlights.

4 Aug 1998: Now at MegsInet
29 Apr 1998: Kicked off of digisys.net
24 Apr 1998: Now at digisys.net
23 Apr 1998: Now at netaxs.com
22 Apr 1998: Recently seen at Ce.net in Georgetown, DE and Seanet.com in Seattle, WA.
17 Apr 1998: Spamming from Dpliv.net and Waystation.com
9 Apr 1998: Spamming from ni.net, pb.net and Megsinet.
6 Apr 1998: Signed up with amarshallinc.com and kicked off the same day.
2 Apr 1998: Now using sonnet.com, mind.net and cyberrealm.net.
1 Apr 1998: Kicked off of Tacoma.net
31 Mar 1998: Now using Tacoma.net under the "Vasco Guraj" alias.
25 Mar 1998: Now using UUNet
23 Jan 1998: Also hitting Gate.net
21 January 1998: Now hitting sites in West Virginia: Earth1.net, Citynet
14 July 1997: Added to tracking list.

There is no contact info for Online18. Try postmaster

A complete history may also be available.

General notes:

Only a small subset of usenet (261 groups) was sampled. Only articles that hadn't been cancelled yet were counted. Actual spam may have been much greater.
Heuristics that detect single-posted articles are, by their very nature, somewhat shaky. Innocent articles may be tagged as spam because they share certain characteristics or keywords with actual spam. In particular, a posted spam complaint that includes the spam in its entirety will very often be identified as spam.
Some posts may be forgeries intended to look like they came from Online18.
The first entry in the history file is not used to compute peak or average spam counts, as this entry covers an unknown number of days. This may cause an apparent disreprency between spam totals and spam averages.

Return to top | Return to spam summaries | complete history

The opinions expressed on this page are solely those of Ed Falk and do not necessarily represent those of any other organization, (although I hope they do). I wish to thank Rahul.net for hosting this web page.