This web page is intended to act as a quick way to identify a specific spammer or other person or organization involved in the fight against spam. It is perpetually under development.
If you can add any information about any particular spammer, please contact me at firstname.lastname@example.org
Similar lists are carried at
The Spamhaus Project,
Spammers often go to great lengths to hide their identities. Addresses
in this file are those provided by the Internic or other sources and
are often fraudulent. Do not firebomb anybody's house based on what
you read here.
A B C D
E F G H
I J K L
M N O P
Q R S T
U V W X
See Globalipx and
On 13 Mar 2012, sentenced to 15 months for mail fraud; see press release.
|Haberstroh, Brian||Owner of Atriks and Fresh Healthy Stuff, LLC|
|Hale, Vernon||Purveyor of spamware. See Industry Standard article Who's Spamming Whom?|
|Hall, Jon||See Firepower.com|
|Hall, Jonathan David||See Foonet|
|Hamlin, Jack||Professional spammer, connected with Americaint spam factory. See also Keith Taub|
|Happyday01.com||See Alan Ralsky|
|Happypussy.com||Alias of AdultSight.|
|Harddicks.com||Porn spammer. See Morgan Hill Entertainment.|
|Hardigree, Steve||Owner or associate of eDirect. See OptInInc Uncovered web page.|
|Hardsexjunkies.com||Porn spammer. Kevin Freeman, 47 Campbell St., Red Bank, NJ 07701, Kevin@WCD.NET|
Email spammer, kicked off the net by AGIS,
Gstdata.net, Sprint, Netcom and
Digex.net. Currently hosted by Netcom.
Also known as Savoynet and Merchant Direct. Notorious for the fact that they published their "remove" list on the net for other spammers to download. Currently using domain names that look like IP addresses but aren't (e.g. "126.96.36.1998.com") Visit The Harris Tracker for more information.
|Harris Polling||Opinion poll company. Added to RBL in 2000 for spamming opinion polls. Responded by suing AOL, MAPS. See Yahoo news article CLARIFICATION of BW2679, NY-HARRIS-INTERACTIVE for more information. A copy of the lawsuit may be found on the MAPS website.|
|Harris, Ron||Owner of LibidoX.|
Computer hardware vendor. Spams anyone who has ever
given them their email address. Claims to respect
opt-out requests, but spams you again anyway.
Never give your email address to
Intenet and spamming services provided by Netline.com. For more information, see netnews thread "HARDWARESTREET.COM"
|Haselton, Bennet||Owner or admin of Peacefire.|
|Hatfield, Lauren||Alias of Noel Westerlind, owner of Adult Sights|
|Hawke, Davis Wolfgang||
Porn and drug spammer. Sued for $12.8 million by AOL. See
With shovels, AOL looks for retribution
(last update: 16 Aug 2006)
|Hayes, Joseph||Admin of Media3|
|Heartofwax.net||Domain owned by Joe Melle|
|Heavenlyhealing.com||Medical spammer. See Jason Vale. Contact: email@example.com Hosted by Deltanet|
|Heckel, Jason||Scam-spammer. See Natural Instincts for more.|
|Hecox, Gayle||Registered owner of Special-FX.|
|Henderson, Charles||Owner of Specialized Programming and Marketing|
|Hewlet Packard||Computer manufacturer. Known to advertise via spam.|
|Hipcrime||Nick-name of a rogue netnews canceller who was active for several months. For more information, see:|
|Hipgirl.com||Alias of Tom Saylor|
Porn spammer. See
There is at least one documented case of Hirsch sending spam to an address used to register a Canon scanner.
|HkStar||Major ISP in Hong Kong. Source of some netnews spam.|
|HKT.net||Owned by Hong Kong Telecom. Network service provider to most isps in Hong Kong, including Ctinet.|
|Ho, Calvin||Alias of Rick Yang. See Optin Global.|
|HollywoodWhores.com||Porn spammer. Unified Productions (HOLLYWOODWHORES2-DOM), PMB 345 2251 N. Rampart Blvd., Las Vegas, CA 89128-7640 Contact: Admin, Up Air (UA79) root@SERVER.TRISTARCREATIONS.COM (800)882-5284|
|Home Shopping Network||Known to advertise via spam|
Original registrant of HotSexNow.
Suspected of being the Baltimore Blaster.
Honick insists that he is not the true owner of HotSexNow; that it was his college roommate borrowing his computer that registered the domain under his name. He declines to identify the roommate.
See HotSexNow web page for more info.
|Hostall||Porn site. HostAll, Inc., 11715 Fox Road Suite 400-126, Indianapolis, IN 46236, Jacob Cazzell, jacobcaz@NETDIRECT.NET, (317) 823-3924 (FAX) (317) 826-1997. See whois info for more.|
|Hostcomm||Believed to be alias or partner of Empire Communications. They deny this in netnews article "EMP - BI>28200 - Matt Middleton's dedicated spam-feed through newsfeed.poshnet.com (2)". This thread is worth reading, as it shows very clearly that Hostcomm, Poshnet, Empire, and PDXFiber are all very thoroughly intertwined.|
Web service provider. Permits spamming by their customers
as long as the spam is done from third-party systems.
Update: I am informed that Hostpro has nuked at least one spammer. Perhaps they've turned themselves around. (last update: 28 Apr 2000)
|Hot-live-sex.com||Email porn spammer in Hallandale, FL. See Whois entry.|
Adware vendor. See Ziff-Davis article
files suit to label adware.
Recently merged with 180solutions to form Zango. See
makers 180solutions, Hotbar merge
(last update: 07 Jun 2006)
|Hotgrrls||Alias of OverTheAir.|
Large ISP whose name is often forged into spam.
Hotmail is usually innocent, although they are sometimes used as
Hotmail admins advise that Ids beginning with numbers are not valid (e.g. "firstname.lastname@example.org"). Also, all outgoing messages from Hotmail with contain an "X-originating-IP" header line.
|HotSexNow||Porn spammer, 537 Bonnie Meadow, New York, NY. See HotSexNow info page. Probably related to ChickenShack|
|HouseOfSkin.com||Porn spammer. As of 24 June 1998, posting through Home.com. Web site hosted by Atmnet.|
|Hufnal, Dan||Email spammer, associated with TheHitMan.com. Possible alias of John Hufnal Smith? Owner of DEAA. AKA "Genesis II Spammer". (last update: 25 Aug 2000)|
Credit card processing service that provides
service to spammers. Placed on the
RBL in 1998. Returned
to the RBL in July, 2000.
Leaked 17 million customer records to the internet in 2005,
including names, phone numbers, addresses, e-mail addresses
internet IP addresses, logins, passwords, credit card types,
and purchase amounts. See Wired news article
Porn Billing Leak Exposes Buyers.
|IC Marketing||Mortgage lead company, uses spam to obtain leads. See MSNBC article Who profits from spam? Surprise|
|ICI.net||Internet Connection Inc. Network service provider. Possibly rogue. See ICI Info page|
Network service provider. Possibly rogue. Provides connectivity
ICon CMT Corp, 1200 Harbor Blvd, Weehawken, NJ 07087. Contact: dns-admin@ICONNET.NET 201-601-2000 Ext. 1600 Technical Contact: Rod Nayfield, rod@ICONNET.NET 201-601-2000 (FAX) 201-601-2018
|Idg Books||Sellers of email spam lists. See Dow Jones article Some e-mail ads use a new "Netiquette"|
|IEMMC||Internet E-Mail Marketing Council. Hosted by AGIS. President Walter Rines, president of QuantumCom. An attempt to legitimize email spam by instituting a global "remove" list and rules of ethics for spammers. IEMMC rules were ignored by the members right from the beginning, and IEMMC was widely regarded as a sham. See AGIS FAQ.|
|ifc12.com||Alias of Worlddata|
|iLeadSource.com||Associate or alias of Premier Services. 28262 Sorrento Suite 137; Laguna Niguel, CA 92677|
IMC Marketing, PO Box 61798, Boulder, CO 89006.
Owned by Joe Melle
whois info. Note that address may be
at least partly fraudulent. Zip code 89006 is Boulder City,
NV, not Boulder, CO. Phone number given in whois info is for
Rickie Rodriguez, Chino, CA.|
Alternate address: MBE # 1874, 806 BUCHANAN BLVD STE 115, BOULDER CITY, NV 89005-2144, Phone: (702)293-5788 Fax: (702)293-2164, IN SHOPPING CENTER NEXT TO SAV-ON.
Infospace.com gives amusing information for this phone number. (Go to reverse lookup page and enter 909-627-3557.)
|Improvesexlife.com||Scam spammer selling Vigorex and other nostrums via spam. Believed to be owned by Steve Repsis. Hosted by e.spire.|
|InfoClear||Mortgage lead company, employs spammers to obtain leads. See MSNBC article Who profits from spam? Surprise|
|Inetcharge.com||On-line credit-card billing service. Associated with Tom Gartman|
|Owner or owned by Nanycnet. See Spam Information Center for more info.|
|Intel Telecom Corporation||Alias of Netzilla|
|Interaccess.com||Service provider to email spammers. See netnews article "More interaccess.com spam, despite AUP".|
American ISP known to host spyware and other malware.
For more details, see
Washington Post article
spyware - who are they?.
Associated with Atrivo.
(last update: 03 Dec 2007)
|Interracialerotica.com||Alias of Tom Saylor|
|International-isp.net||Alias of Tom Gartman. Current address: 512 Main Street, Suite 803; Fort Worth, TX 76102. Old address: 201 Main St; 13th Floor Suite 1350; FortWorth, TX 76102. Note that old address is identical to Dfw.net. (last update: 26 Oct 2000)|
|Internet America||See Eddy Marin|
|Interramp||Internet Service Provider owned by PSI.net|
Internet Response Systems, P.O. Box 613, Columbia, SC 29202.
whois info for more details.
Web site used (Dec, 1998) by JTSR. Suspected rogue site, see netnews article Re: "This company is Cookin'- JTSR '97 thru '98 300% Revenue Growth" JT's Restaurants - at it again!
|Intuit||Purveyor of fine financial software. Known to collect personal information from its customers and sell it to spammers. Never give your real email address or other personal information to Intuit. See netnews thread: Intuit sells customer mailing list to Mattel Interactive|
|IPNS||Internet Professional Network Solutions, 715 SW Morrison #908, Portland, OR 97205. Zone Contact: Daniel Nolan, dan@IPNS.COM 1-503-205-4767 (FAX) 1-503-205-4768 Rogue site; host of GDMS|
|Ironserver.com||"Bullet-proof" spam hosting service operated by Bill Stanley.|
|Isaksen, Jason||Owner of Crown Industries.|
|IsraelTheChurch.com||Church spammer that offers money for doing their mission work. Possible cover for a MLM scam.|
|Isrv.com||Web service provider to spammers. Rogue site. Postmaster and abuse addresses previously routed to /dev/null. If email does not reach Isrv, call them at 1-724-445-2488 or 1-724-431-4778. Added to RBL Sept, 2000; see RBL nominations.|
|Itouchmyself||Alias of LibidoX.|
|iVillage.com||Service provider to Crown Industries.|
|Ivy Mortgage||Mortgage broker; uses spam to advertise (possibly unknowingly). See MSNBC article Who profits from spam? Surprise|
|Jam.net||Alias of newsfeeds.com.|
AKA Gaven Stubberfield.
Aliases and/or associates include:
GS Enterprises, Vanderbilt
International, Killer Web Concepts, Neohosting Networks,
Innovative E Commerce, National Wealth Builders, Free Webland,
livexxxaction, Sean Hearn, Jeremy Jones, jerj@MINDSPRING.COM,
Associates include: Frank Bell, Raleigh, NC;
Bill Jaynes, Raleigh, NC;
Vic Stuart, Raleigh, NC;
Fred Anderson, Charlotte, NC;
Franklin Thomas, Raleigh, NC;
David Martin, AKA David Martinelli, Terryville, CT.
First spammer actually jailed for spamming. See AP article " Judge Sentences Spammer to Nine Years". Sentenced along with his sister Jessica DeGroot. Associate Richard Rutkowski was acquitted.
See Rokso listing for more info.
From the Rokso listing:
A non-stop group of porn spammers with T1 access. Multiple machines pumping scam and porn spam around the clock. Notorious for "horsey porn" spam starring "Rambo." Jeremy Jaynes, aka "Gaven Stubberfield" seems to be in charge of this sleazy operation. Richard Ruckowski (Richard Rutkowski) signs up for much of the hosting service.
Nashville ISP, disconnected Absolute Write web
site after bogus DMCA claim from a scammer exposed by
Absolute Write. See BoingBoing article
Anti-publishing-scam site shut down by "agent"
(last update: 31 May 2006)
Email spammer, based at UUNet.
John Groves, |
See netnews articles "How to identify a spammer's identity while he is still on-line!" and "jgroves spammer LOCATED" for more info.
|JD Publishing||Seller of spamware. Alias of Crown Industries|
|JN Publishing||Alias of Jerry Nardini.|
California politician running for governer. Sent out campaign
spam in violation of California law, relaying through an open
server in Korea, defense department computers, and others.
See Sacramento Bee article
Jones Web site yanked after flood of e-mail,
Bill Jones' internet abuse an "urban myth"?,
|Jones, Dana||Owner of "Golf Balls Unlimited". Persistant email spammer.|
|Jones, Michael||Owner of "Dirty Dick's Erotic Cartoons", email@example.com 245 E. Fifth, floor 2, Erie, PA 16507; P.O. Box 1513, Erie, PA 16512. Spams via AT&T Worldnet. Hosted by imagiware.com. (Imagiware is hosted by Netcom.) (whois)|
|Jonson, Bruce||Aliases of Christopher William Smith|
|JTSR||Scam spammer. Sells a penny stock called "JT's Restraunt". Almost certainly a fraud. Connectivity provided by Intersponse.com. Contact the SEC at firstname.lastname@example.org. If the spam claims that JT's Restraunt is on NASDAQ (they're not), also send mail to email@example.com. See also: EvenTemp.|
Large ISP whose name is often forged into spam.
Juno is usually innocent, although they are sometimes used as
It is believed that Juno does not allow user ids that start with a digit, so anything that fits that pattern may safely be discarded as spam.
|Justsextoys.com||Sex spammer. Spams in alt.sexual.abuse.recovery. Hosted by UUNet|
|Katz, Kevin||Founder and largest shareholder of fax.com|
|Kelly, Robert||Original registered coordinator of International-isp. Associate or alias of Tom Gartman. (last update: 26 Oct 2000)|
Originally an admin at Netcom, notorious for
answering spam complaints by (wrongly) insisting the problem didn't
come from Netcom, and enclosing a header-reading tutorial. Often,
netnews spam complaints would result in an email tutorial and
visa-versa. Often known as "Keman the Clueless"
Currently working at Exodus
|Kesl.net||Associated with or alias of EscortGuide.|
|Khuri, Sam||"Toner Cartridge" spammer. See netnews article Re: Two issues See also Benchmark Print Supply|
Major porn spammer, given 5 years in prison for conspiracy, money
laundering, fraud, and transportation of obscene materials.
See Spam Diaries, PC World, WiReD, East Valley Tribune.
See also James Schaffer, Andrew Ellifson, Kirk Rogers, and Jennifer Clason.
|Kissing Girls||Alias of LibidoX.|
|Knotwork.com||Associated with or alias of EscortGuide.|
Owner of Gevalia Kaffe coffee. Advertises via spam in violation of Can Spam act. See MSNBC article Who profits from spam? Surprise. Currently being sued by Hypertouch. See also: ISP Steaming Over Coffee Spam, Kraft sued over alleged Gevalia spam.
|Kraft, Lesa||Registered agent for spamkiller.net and others associated with Netzilla|
|Kramer, Brian||Major email spammer. See Expedite Media and Spamhaus record.|
|Krista.com||Porn spammer. Thundercom, Inc., 1725 California, San Francisco, CA, 94122. (address is probably fraudulent) Administered by Morgan Hill Entertainment|
|KSCable.com||Multimedia Cablevision, Inc. See Roadrunner.|
Spam site -- hosts spammer web pages as long as spam is sent
via 3rd parties. Clients include the
Believed to be under investigation by Washington State
Owned by Turner Scott. 12311 Maplewood Ave., Edmonds, WA, 98026. Contact: Scott, Turner scotty@HOTHOTMAIL.COM, 425 889-0811
Connectivity provided by Queenanne.net.
|La-Exotics.com||Porn site owned by Adult Promo. AKA qtime.qtime.com.|
|Lansky, Jared||Spyware distributor. Co-defendant with Sanford Wallace in fake anti-spyware software scandal.|
|Lantz, Gordon||Major spammer; see Spamhaus listing Gordon Lantz & Gretchen Aitken/emailoffer.net|
|Laser Web Hosting||Alias of Bill Waggoner|
|Lawlor, Phil||President of AGIS, an internet backbone provider with pro-spam policies. See AGIS FAQ.|
|Lawrence, John||Owner of Woodside Literary Agency.|
Email porn-spammer hosted by AGIS.
AKA WebPromo, AKA mail-promo.
LCGM, 204 West Eleven Mile Rd., Madison Heights, MI 48071,
Contact: Francis Sharrak,
(810)584-3300, (810)584-3400, Fax: (810)584-2229.
Also: (415) 851-0251 (FAX) (415) 851-5668 (unverified).
Update: I am informed that this is actually the address of a barber shop.
|Lead Association||AKA Neighborhood Loan. Mortgage lead broker, known to hire spammers, at least indirectly. Former business partner with Ameriquest. Notable for having sued Robert Braver in retaliation for his anti-spam lawsuit against them and Ameriquest.|
|Leadplex||Business owned by Ryan Pitylak|
|Lederman, Ryan Matthew||Co-founder of BumpTech|
|Lesbiansexfun.com||Alias of Tom Saylor|
Associate or alias of Dean Westbury|
(last update: 10 Jan 2002)
|Letsmarket||Alias of Crushnet.com.|
|Level3||Network service provider with pro-spam history. See Level 3 info page.|
|LibidoX||Porn spammer in Santa Monica, CA. See LibidoX info page.|
|Licht, Daniel & Ernst||Spammers; works by hijacking open proxies. Ernst Licht Embroidery and Imports (ERNSTLICHT-DOM); 347 Main Street, POBox 255; Oley, PA 19547; US. Service provided by Verio and Dial Tone Internet.|
|Lick.com||Porn spammer in New York, hosted by Sprint. See Whois info for more information.|
|Liddell, Karen||Name attached to a chain letter. Possibly ficticious. See "Home Page of Karen Liddell" for more information. See also netnews thread "Karen Liddell spam-again"|
Pill spammer. Business partner of Alan Ralsky. Pled
guilty to three felony counts in Jan 2006.
See Spam Kings article
Team effort on Lin case. Ralsky next?
|Lindsay, Michael||Owner of iMedia Networks, and Galaxy-net.net|
|Lingeriegirl.com||Alias of Tom Saylor|
AKA Northshore Hosting Company.
Business associate of Brian Haberstroh.
Details of their relationship are sketchy at this time.
Linhardt seems to be the preferred service provider for Haberstroh.
Also associated with Brian Kramer (Expedite Media Group) and
See ROKSO record ROK7008
Obtained a TRO against Spamhaus in an Illinois court in 2006. See Spamhaus response.
|Linkus.com||Spam-tolerant isp. Provider for, or the same as, Classy-Fieds.com. Rogue site, see letter. Disconnected by Netcom, 15 June 1998. Connected by Best, late June 1998.|
|Lipsitz, Kevin||Spammer. Aka "Krazy Kevin". Magazine spammer. Convicted of fraud June 1997. Returned October, 1999. See Lipsitz tracking page for more information.|
|Lipstick-lesbian.com||Alias of Tom Saylor|
|Lister, Steve||Alias of Bill Waggoner|
|Livebeachbabes.com||Porn spammer. Alias of SluttyGirls|
|Livewetpussy.com||Porn spammer. Alias of SluttyGirls|
|LiveWhoreHouse.com||Email porn spammer. Hosted by Netcom. Reckless Romance Communications, 22156 Del Valle Street, Woodland Hills, CA 91364, Kiki Riedel, kiki9@IX.NETCOM.COM 818/340-0443. Email address is reported to be non-working.|
|LLV.com||Login Las Vegas, Major email spammer, including the "Princess "Diana Tee Shirt" spam. See Spam Information Center for more info. May be identical to NevWest.|
|LMW Consulting||Associated with Web877.com. Initials of Lawrence Wojtowicz. Believed to be a major binary spammer.|
|LoanWeb||Mortgage broker; uses spam to advertise (possibly unknowingly). See MSNBC article Who profits from spam? Surprise|
|Lopermanagement.com||See Alan Ralsky|
|Lopez, Gilberto||"Credit Repair" and "Internet Spy" email spammer, aka West Coast Publications, aka MyWebSiteOnline, Inc, aka Thesecretword.com. See FTC complaint and News Release. (last update: 20 Aug 1999)|
|Lovezoo.com||Alias of Babenet.|
|Lusky, Fred||See Empire Towers.|
|Lustland.com||Porn site; advertised by Jerry Nardini.|
|Macro Computer Solutions||News server used (Nov 1998) by Tom Saylor to inject spam. Owned and/or operated by Karl Denninger. Same as or sharing facilities with GTMI. Connectivity provided by nap.net.|
|Major, Ursula||Alias of Tom Saylor|
See T3 Direct and
Prosecuted by Australian Communications Authority; see ZDNet article ACA to prosecute alleged spammer and Infoworld Nederlands article Landmark spam case begins in the Australian court. Update: see court order.
Seen 11 May 2006, advertising a seminar on email
|Manuchie, Joe||Florida vaction spammer. Contact: 813-908-9448. See E-Travel.|
Mail Abuse Protection System. Operator of the
Realtime Blackhole List (RBL). The MAPS database
lists sites which are the source of spam or maintain
open relays being used by spammers. See the
for more information.
|Mail-promo.com||Email porn-spammer. Alias of LCGM.|
|Mailcom||Alias of Bill Waggoner|
|Mailexcite.com||Name often attached to spam. Not known if this is actually related to the real mailexcite.com|
Florida porn and gambling spammers. Former cocaine dealer &
drug money launderer.
AKA Internet Video Network,
AKA One Stop Data,
AKA Direct Marketing Entertainment.
Joined forces with Thomas Cowles who
subsequently stole their computer equipment and fled to Ohio.
Described by a Miami Herald reporter as
"A pathetic little guy I met three years ago in a deserted porn
See New Times article South Florida's Eddy Marin went from cocaine to porn to spam
See Chickenboner.com for more information.
|Marketfiles.com||Generic spammers. Spam begins with a line saying "this is not a spam".|
|Martinson, John Robert||Author of fake spyware-removal software. Co-defendant with Sanford Wallace in fake anti-spyware software scandal.|
|Mastermerchant.com||Porn vender that advertises via spam in alt.sexual.abuse.recovery. Associated with Tom Gartman (see <firstname.lastname@example.org>). Fort Lauderdale Network, 1299 E. Commercial Blvd., Fort Lauderdale, FL 33334. Contact: dns@LAUDERDALE.NET (954)489-3981 (FAX) (954)489-3986|
|Mathiesen, Mike||Owner or operator of Firstfamily.|
|Maverick Direct||Shell corporation which owns Bargain Depot and is owned by David Linhardt. See affidavit and business search.|
Domain owned by Max Stemple.|
Maxcom (NOCOSTPORN2-DOM), PO BOX 1711, Fort Worth, TX 76018.
Contact: Stemple, Max (MS22564) max@INETCHARGE.COM 1-817-905-7529 (FAX) 1-817-905-7529
Major ISP. 244 listings at Spamhaus
as of Feb 2006. Now merged with UUnet and Verizon
(last update: 07 Jul 2006)
|Mci2000||Rogue news server operated by Tom Gartman. Not associated with MCI in any way. Connectivity provided by PSI.|
|McCreary, James||Porn spammer. See Web877.com info page.|
|McDowell, Brent||Registered owner of Inetcharge.com. Brother in law of Tom Gartman. Sentenced to 30 months in prison on obscenity charges August 24, 2006.|
|MCS.com, MCSNet||Macro Computer Solutions|
|Media Breakaway||See Scott Richter. Previously known as OptinRealBig. In 2009, settled a class-action lawsuit concerning "cramming" mobile cell phone customers with unauthorized charges (Vandyke et al v. Media Breakaway, LLC, No. 08-cv-22131.)|
|Media One||Porn spammer in Clearwater Fl. See Media 1 Info Page.|
|Media3||Network service provider -- hosts known spammers. See Peacefire for more info.|
|MediaBroadcast.com||Allegedly part of the Extractor Pro spamglomerate. See netnews article tekker.com begs not to be held accountable|
|MeetHerLive.com||Email porn spammer. Profesional Teleconferences Inc., 7028 Bandera Rd, Ste. 176, San Antonio, Tx 78238, David Myles, video1@TOOEASY.NET, 210/681-7770. Domain Servers: NS1.TOOEASY.NET, WWW.TOOEASY.NET Connectivity provided by MCI through TooEasy.net.|
|Mega$Nets||Chain letter scam. See "Cracking the MEGA$NETS Chain Letter Scam" by Wallace Wang at Boardwatch. See also MMF Hall Of Shame Update: the Mega$Nets author, Kalvin P. Schmidt, has signed a consent decree with the federal trade commission agreeing to cease and desist distributing Mega$Nets.|
Dutch internet service provider. Associates or owners of
Cyberangels. Operated by Martijn Bevelander. Known to
hack into innocent computers to use them as web page hosts.
See BBC article
Spam peddlers hijack computers, spamvrij.nl article
Cyberangels.nl domain now owned by spam fighters,
and spamvrij.nl article
Analysis of incoming cyberangels.nl mail.
Kicked off spanish service provider Telefonica 30 June 2003.
|Mehler, Matthew||Porn spammer. See apeepingtom.com|
|Melhalf, Ric||Alias of Bill Waggoner|
|Melle, Damien||Spammer. Brother of Joe Melle. See Industry Standard article Who's Spamming Whom?|
|Melle, Joe||Former email spammer. No longer found on Rokso list. See New York Times article "The American Way of Spam" for more info.|
|Meoli Industries||Alias of Joe Melle.|
|Merchant Direct||Alias of Harris Marketing.|
|Merchant Online||Email spam site. MerchantOnline.com, 1600 S Dixie Hwy, Boca Raton, FL 33432. Contact: Tarek Kirschen, 561/395-3585, 800/316-1936, fax 451/482-5253. See internic entry for more. Hosted by UUNet.|
|Message Media||Dedicated spam site. Blackhole them.|
|Metranet.com||Metropolis Internet Group, Rochester, NY. (See whois info for more details.) Service provider with a pro-spam policy. See netnews article "Metranet says "Just hit delete" for more.|
|Metrosupport.com||Alias of EscortGuide.|
|Microsoft.com||Major corporate monopoly. Known to advertise via spam. See InfoWorld article "Don't look now, Microsoft might be spamming you".|
|Microsys Technologies||See Campbell, Rusty.|
|MidAtlantic-Isp.net||Rogue network service provider. Connected with TheHitMan.com. See netnews article Spammer Attitude(tm) at MIDATLANTIC-ISP.NET|
|Middleton, Matt||Owner of Empire Communications. See also Middleton info page.|
|Miller||Beer manufacturer. Hired Equifax and Naviant to track down people who had managed to escape their spam list and add them back in. See Spam Kings' excellent analysis|
|Mindshare Design||Also known as pm0.net. Email spammer. Web site includes removal methods which do not work. (info provided by a reader, not verified) (last update: 9 Jan 2002)|
|Miss Clean||Television psychic. Known to advertise via spam.|
|Mleads.com||Mortgage lead company, employs spammers to obtain leads. See MSNBC article Who profits from spam? Surprise|
Professional spam site. Tricked PaeTec Communications
into signing a
pink contract and obtained
a restraining order when PaeTec tried to disconnect them.
See CNet article
Giving spam the network boot.
Customers include OverStock.com, ProFlowers.com, Ourhouse.com
See http://litigation.paetec.net for more information.
|Morgan Hill Entertainment||
Morgan Hill Entertainment, 1032 Irving Street, Ste# 978,
San Francisco, CA 94122, 415-541-5093.|
Admin for porn sites Nymphette.com Cherrypoppers.com and sexypussy.com. Currently (30 Jan 1998) spamming from Ici.
Hosted by CRL
AKA: 24hrxxx Online, All Amateurs Online, Barely19 Online, Cherrypoppers Onlne, Dirtysecrets.com, fleshzone.com, 24hoursex.com, pussykat.com, sexpussy.com, quim.com, fasterpussy.com, m-gallery.com, Naughty Girls Co., Stormworx Direct Video, ThudnerCom, XXX Streams Online, etc. See Morgan Hill Info Page for more info.
|Morice, Margaret||Alias or associate of Richard Scoville. See SamSpade.org info.|
|Moshou, Peter||Major email spammer; found guilty under CAN SPAM act in June, 2005. Faces $350,000 in fines and 3 years in jail. See Internet Patrol article How to Go from Spamming to Prison in 6 Short Months. Unrepentant to the last; see his comments.|
|Mscomm.com||Mountain States Communications, 14444 California Ave., Suite D, Victorville, CA, 92392. Rogue site; permits email spam from its customers. Contact: Tim Harris, email@example.com, 619-245-1161 (FAX) 619-245-1860. Hosted by bbnplanet.net.|
|MSI.com||Service provider to Cybercreek. Rogue provider.|
|MSN.com||Microsoft-owned ISP. Known to advertise via spam. See MSN Info Page. Also a major source of spam from its customers. MSN is also frequently used as the fake "From" address. It is believed that MSN does not allow user ids that start with a digit, so anything that fits that pattern may safely be discarded as spam.|
|Musicblvd.com||Music seller. Known to spam. See netnews article "musicblvd.com spam"|
|MXOL||Matrix On-Line. See MXOL info page.|
|Mydomain.com.com||"White hat" provider -- has an effective AUP and enforces it.|
|Myeroticdiary.com||Alias of Tom Saylor|
|MyWebSiteOnline||See Gilberto Lopez|
|Myworld02.com||See Alan Ralsky|
|n-case||Adware program installed by 180solutions.|
|Nameservices.net||Alias of Advanced Internet Technologies.|
|Nancynet||Major email spammer. Owned by Walter Rines. For more information, see Spam Information Center for more info.|
Porn spammer. Owner of lustland.com, clubteen.com, amateur-sex.com,
dikes.com, teentown.com, sexbabes.nu.
Notorious for sending explicit porn
ads to alt.sexual.abuse.recovery.|
Whois gives the following information:
112a Cervantes Street, San Francisco, CA 94123. 415/928-6025. jnardini@ISP.NET
25 Stillman st. #200, San Francico, CA 94109. 415/281-3104. firstname.lastname@example.org
Aliases include "Jan Nicholson", "JN Publishing". Reminder: some or all of this information may be fraudulent. Currently spamming through Epoch.
Hosted by Galaxy-Net.net.
See Jerry Nardini info page for more.
Porn spammer, part of the Morgan Hill Entertainment
Nasty Girls Co., 3131 Market Street Suite 399, Redwood City, CA 94064. (address is probably fraudulent)
|National Collector's Mint||
Purveyor of collector's coins. Advertised heavily via spam
through subcontractors starting in 2002.
See sample spam
Fined $369,000 in 2005 for their "Freedom Tower" coin scam.
|National Fidelity Funding||Mortgage company that advertises via spam. See c|net article.|
|Nationwide.net||Alias of Dfw.net|
|Naturalgirl.com||Alias of Tom Saylor|
|Naturalhealings.com||Medical spammer. See Jason Vale. Contact: email@example.com Hosted by bbnplanet.net.|
|Natural Instincts||Scam spammer. Jason Heckel. See Wired coverage. More links at|
|Naviant||Professional spam operation, associated with Scott Hirsch As of Feb 2006, working for Miller and Equifax. See Spam Kings excellent analysis Inside the creepy Miller Brewing spam probe.|
|NCSDI.net||Spam site. Creates ficticious downstream sites to spam. Then, when you complain to NCSDI, they collect your email address for more spam. Associated with USA-MERCHANT aka TrafficBoost. See netnews thread "Spammer's new tactic Re: NCSDI.NET".|
|Neiuport Marketing||See Robert Soloway|
|Nelroy Ltd.||Pay-per-click advertiser that uses spammers for advertising. See Guardian article An unwelcome guest of spam|
|Nenacherry.com||Porn spammer that posts to alt.sexual.abuse.recovery. 8330 Rustling Leaves, Houston, TX 77083 Peer Ben, bpeer@WXS.COM, 713/286-8777|
Marketing company that uses spam. See
(last update: 16 Mar 2006)
Marketing company that hires known spammers.
Formerly YFDirect Inc. AKA
Marketsurveygroup.com, AKA EasyEZStreet.com, AKA
MinglyComp.info, AKA EveryFreeGift.com
See Hypertouch Web site for info about various lawsuits against NetBlue. See expert witness testimony for details on how they work.
|Netcom||Major ISP with a pro-spam policy. See Netcom info page.|
|Netline.com||Service providers and spammers-for-hire for hardwarestreet.com. For more information, see netnews thread "HARDWARESTREET.COM"|
|Netvigator.com||Largest ISP in Hong Kong. Recently acquired by Hkstar.com.|
|NetVirgins||Porn-spammer. See NetVirgins info page.|
|Network Associates||Makers of PGP and other crypto software, McAfee VirusScan and other products. Now spamming via email. See netnews threads "McAfee/Network Associates spamming again" (news.admin.net-abuse.email) and "More spam from NAI/McAfee :(" (alt.security.pgp)|
|Networkbeat.net||See Alan Ralsky.|
|Networkerotica||Domain owned by Tom Gartman|
|Networkpride.net||See Alan Ralsky|
|Netzilla||The largest netnews porn spammer on the internet. See Netzilla info page.|
|Nevada Server||Alias of Bill Waggoner|
|Nevwest.com||Major email spam source. For more information, see the Nevwest info page at e-scrub.com. Currently hosted by ACSI. May be identical to LLV.|
|Neways||Alias of Bill Waggoner|
|Newport Marketing||Known spamhaus. Sellers of spamware. Client of Media 3|
|Newpowerdomain.com||See Alan Ralsky|
|News-Erotica.com||Domain owned by Tom Gartman|
|Newsfeeds.com||newsfeeds corp, 3799 Las Vegas Blvd. South, Las Vegas, NV 89109 Contact: postmaster@JAM.NET. Contact phone number in whois info is fradulent. Network service provider for Brian Schuster and sexylolitas.net. Originally a rogue site. Believed to be an alias of Netzilla. More recently, Newsfeeds seems to have become a legitimate business. (last update: 22 July 2000)|
|NicholsOnline.com||Website occasionally accused of spamming. They do have an anti-spam policy statement, and they seem to enforce it properly.|
|NIFS||National Integrated FoodService Corporation. New name for JT's Restraunt. See PR announcement at http://biz.yahoo.com/prnews/981210/ny_nat_l_i_1.html|
Owner and/or operator of the sites
usachat.com, blitzit.com and
Innova Interactive, 225 S. Lake Ave., Suite 300, Pasadena, CA, 91101. FAX: 626-405-2358 (disconnected)
See netnews article Re: NEED HELP TO STOP SPAM!!!
nLayer Communications. Service provider to Findmorepill, and
(last update: 25 Apr 2006)
|Nobody@nowhere||Fraudulent name often attached to spam. Nowhere.com is innocent and welcomes polite reports of spam sent out in their name.|
|Nodomain.com||Fraudulent name often attached to spam. Nodomain.com is innocent.|
|NOIC||National Organization of Internet Commerce. Spammers union. President Joe Melle attempted to blackmail AOL into accepting spam. See L.A. Times article "Group Says It May Post AOL User Addresses" Only known members of NOIC are Joe Melle and Connectup.|
|Nolan, Rich||See Yourleadsource.com|
|Northshore Hosting Company||Alias of David Linhardt|
|Northstart Financial||Mortgage company that advertises via spam. See c|net article.|
|Novell||Seller of networking software. Known to sell email addresses to itsimazing.net for spamming purposes.|
|Nowak, Craig||Owner of or associated with C.N. Enterprises. Found guilty of forging flowers.com in from: header of spam. See court ruling|
|Nowhere.com||Fraudulent name often attached to spam. Nowhere.com is innocent and welcomes polite reports of spam sent out in their name.|
Network Solutions Inc. Company that currently holds the
government contract to run domain registration for the major
top-level domains (.com, .net, etc.) Also sells spamming
services on the side. See internet.com article
"No Escaping Junk E-Mail From Network Solutions".
See also: The Sordid Saga of Sex.com, Sex.com Saga Still Sizzling, Network Solutions Liable For Sex.com Theft, NSI screws over grad student, gets away with it, Domain Winner Loses Big, E-Riots Threaten EToys.com, Excite.com Goes to Illinois, vy.com stolen due to NSI error, and New York's Oldest ISP Gets Domain-Jacked
|Nsiweb.com||Spam-friendly web hosting provider. Specifically allows spammers to maintain web sites there. Service provider to Steve Repsis. See netnews article Re: Spam-friendly host|
|Numberop.com||See Alan Ralsky|
|Nwregion.net||Alias or partner of Empire Communications|
|Nymphette.com||Porn spammer. THUNDERCOM,INC., 1725 California, San Francisco, CA 94122. Contact: J Sears, stormwx@EARTHLINK.NET 510-874-4735, 415-541-5093 (address is probably fraudulent) Administered by Morgan Hill Entertainment.|
Professional spammers. AKA offshoredirect.
Same as or associated with Bulk ISP|
Offshore ISP Corp; 3759 Cardiff Avenue Suite 307 (actually an apartment, not an office); Los Angeles, CA 90034; Phone / Fax: (310) 839-1363. Hosted by CoreComm
|Omaha Steaks||Mainsleeze spammer. See Usenet thread Just got done talking with Omaha steaks. Hosted by UUNet.|
|Online18.com||Porn spam site owned by Christopher Ferri. See Online18 info page.|
|OnlineBiz.net||Parent site to TheHitMan.com|
|Online-success||Site which sells spam services and hosts web pages. Down stream from Linkus.com.|
|Optigate||"Bullet proof" spam hosters. Listed by SPEWS as having pumped more spam than any other network in the world (see SPEWS record S2537). Dubbed "worst spam network on earth". Believed associated with Scott Richter; see records S511, S2067, and S2378. Service provided by Above.net.|
|OptinRealBig||Now known as Media Breakaway.|
Major email spam operation;
fined by FTC
(last update: 13 Apr 2006)
|Opt-In Services||Florida porn spammers. Associated with Eddy Marin|
|Optin Trade||See Jared Lansky|
|Orbit Communications||See Jay Echouafni|
Open Relay Blocking System.
Similar to the MAPS blackholelist, the ORBS
database lists sites which maintain open relays which may be
abused by spammers. The ORBS database is more aggressive than
the MAPS databse. See the
for more information.
ORBS is considered excessively aggressive by many. For example, sites that do not permit ORBS to scan their IP ranges, or which otherwise piss off the ORBS administrators, are added to the ORBS database in retaliation.
It should be remembered that a listing in the ORBS database does not mean that the listed site is or ever was a source of spam. It merely means that the listed site has an open relay or has done something to annoy the ORBS administrators.
In late 1998, Orbs was kicked off the internet by their backbone provider BCTAC in response to complaints. As most service providers in the area received connectivity from BCTAC, it was very difficult for Dorkslayer to return to the net. See netnews article " BCTAC and Dorkslayers - BCTAC response" for the full story.
|O'Sullivan, Michael||Alias or associate of Scott Wilkerson|
|Otginc.com||Web site owned by Melvin Sleight, used in the "Diana Tee Shirt" web page.|
Online drug dealer. Advertises via email spam. Registered to
Michalis Del A Sol, 12 Miller Street, Hill End, Brisbane,
Queensland 4101, Australia, +617 33427350,
(last update: 27 Jan 2006)
|Ourhouse.com||On-line business that advertises by spam. Customer of MonsterHut.|
|OverStock.com||On-line business that advertises by spam. Customer of MonsterHut.|
|Over The Air Equipment||2054 East Desert Inn Rd. Suite C, Las Vegas, NV 98109, Owned and/or administered by Joe Tajalle, 702/733-1028. Aggressive email spammer, currently being sued by AOL and by Strong Funds. AKA: babeview, hotgrrls, xtc4u2c, camelot, atlantis.|
|Ozona||ISP known for harboring spammers. See SPEWS listing for details.|
|Pacbell.net||Pacific Bell -- rogue site. See Pacbell page.|
|Pacific Educational Productions Limited||Alias of or associated with Bill Waggoner|
|Pacific Internet Exchange||
Network provider to Atrivo.
Atrivo around 12 Sept 2008 when
other network providers were disconnecting them. Reversed their decision
about 22 Sept.
President David Grieshaber said he took Atrivo on as a customer because he was good friends with Atrivo founder Emil Kacperski. See Washington Post article Internet Shuns U.S. Based ISP Amid Fraud, Abuse Allegations
Previously hosted/routed Scott Richter and Alan Ralsky. Removed from Spamhaus 22 Sep 2008.
(last update: 22 Sep 2008)
|Pacstar.net||Alias or partner of Empire Communications|
|Paetec Communications||PaeTec Communications. Network provider tricked into signing pink contract with Monsterhut. See http://litigation.paetec.net for more information.|
|Pallorium.com||Unsuccesfully sued relays.orisoft.com for listing their open server.|
Travel agency in Ormond Beach, FL. Sued by Verizon Wireless
for sending 98,000 spam text messages to Verizon customers.
See Reuters article
Verizon Wireless wins injunction in spam case.
(last update: 02 Feb 2006)
|Patton, Dave||Creator of Lightspeed Marketing, makers of "Nexus" and "Dark Mailer" spam software. Pled guilty as part of the case against Alan Ralsky|
|Paypal||On-line payment processing service aimed at servicing on-line auctions. Known to sell its customer's email addresses to spammers.|
|PayPerAction||Business owned by Ryan Pitylak|
|Pdxfiber.net||Alias of or front for Empire Communications Hosted by Verio.net. Rogue site.|
Non-profit political site. In July, 2000, Peacefire was
moved by their network provider, Media3,
into a block of addresses which were in the rbl.
This may have been at Peacefire's request, in which
case it was likely to have been done as a publicity
stunt. It is also likely that Media3 moved Peacefire
into the RBL'd block as a sort of "human shield."
Neither Media3 nor Peacefire are willing to clarify this.
When email to Peacefire began to bounce, Peacefire began to complain loudly of censorship. Peacefire admin, Bennet Haselton refused all suggestions that he move back out of the RBL'd netblock, and refused all offers of free internet hosting with other providers.
For more information, see netnews article The truth behind Peacfire/Media3 and San Francisco Chronicle article Spam Wars -- Markets battle with e-mail activists over your inbox.
2533 N. Carson St., Suite 2982,
Carson City, Nevada 89706.|
Contact: techassistance@COMSTAR.NET 702.841.3965 (FAX) 702.883.2384
Contact: Quixotik, Inc. - Domains (QID-ORG) domains@IMPULSIVE.COM 702.841.3965, Fax- 702.883.2384
Connectivity provided by Icix.net.
Email spammer. Owner of T-Rex Media. Former sales
manager for Scott Richter.
(last update: 26 Jan 2006)
|Pervert.net||Porn spammer. OK Internet Services, Inc., PO Box 1013, Urbana, IL 61803, 217/398-7326 (FAX) 217/398-7326.|
|PG & C Leasing||Apparent porn spammer. 1299 E. Commercial Blvd, Fort Lauderdale, FL, 33334. Hosted by Lauderdale.net|
|Phoenix Photo||Alias of Woodside|
|Pickle Jar||Nickname of spammer Walter Rines. See netnews post Spam Report sent to IEMMC.ORG on the occasion of their being lying bastards...|
|Pinballcorp||Alias of Zango|
Major mortgage spammer; former college student at University of Texas.
Once considered fourth worst spammer in the world, sending 25
See It's a Spammer's Life, Email Battles article After fines, convicted spammer opens anti-spam service, SC magazine article Former spam king Pitylak now trying to earn firms' trust as anti-spam consultant, San Antonio Express news article Former spam king seen as good kid gone astray (Article indicates that he had more than 3,000 domain names, 100,000 Hotmail addresses, and 300 assumed business names), his op-ed piece Confessions of a former spam king, Guardian article Spam king Ryan Pitylak turns "activist", DN Forum thread Looking for Ryan Pitylak or Mark Trotter and Rokso entry 4555.
Now claims to be an "ex-spammer" and has a blog called
|Plaxo||Contact management service. Causes you to receive emails puportedly from friends, asking you to update your contact info. Believed to be used by spammers to build email lists. It is probably best to ignore unsolicited emails from Plaxo. See also letter of apology from Plaxo president.|
Images Marketing GRoup,
23 Cedrus St. Sunnybank,
Brisbane, QLD 4109,
Administrative Contact: Steven Harris steve@PLAYGAL.COM +61-7-3863 1599 (FAX) +61-7-3863 1297 Techinical Contact: Network Control Center, support@EXODUS.NET (408) 486-5000 (FAX) (408) 486-5001.
Connectivity provided by Exodus.net
|Plumpgirl.com||Alias of Tom Saylor|
Email spammer. Pop Mail, Bayonne, NJ 07002
Connectivity provided by Exodus.net
|Pope, Andy||See Empire Towers.|
|Popsite.com||Dial-up access provider. Very poor response to spam complaints. Note that legitimate email from popsite does not have "popsite" in the Received: headers. If you receive email with "popsite" in the Received: headers, it is spam.|
|Pornishere.com||Porn spammer. Joseph Reynolds, 1550 Terrell Mill Rd. Apt 25B, Marietta, GA 30067. jgreynolds@MINDSPRING.COM 770-956-9558, 314-416-1982, Fax- 314-416-1982 Connectivity provided by Completeweb.net|
|Pornmountain.com||Porn spammer. Christopher, Connally. p.o. box 748, DeFuniak Springs, FL 32435. 847-818-8458j, 705-721-6680. Has over 500 domain names. Connectivity provided by Brevard.com.|
|Pornomaster.com||Porn spammer. IMA Enterprises PORNOMASTER-DOM 4057 US Hwy 9 North Suite 177, Howell, NJ 07731. Contact: Pete Erickson, roselle@SUPERLINK.NET 1-800-502-2761, (FAX) 732-918-8103, Daryl Gregg, daryl@IMA-WEB.COM. Connectivity provided by Completeweb.net|
Porn spammer based at powernet.co.uk.
European Connections, Suite 20, Singel 417,
Porn spammer based at powernet.co.uk.
European Connections, Suite 20, Singel 417,
1012 WP 1012 WP, NL.
Contact: Steven Scott,
003120 6258455 (FAX) 003120 6387894.
Last seem spamming from Shaw Fiberlink Limited.
|Poshnet.com||Alias or partner of Empire Communications|
|Power-blast.net||Alias of C-Flash.net.|
|Powernets.org||See Alan Ralsky|
|Poxteam2001.com||See Alan Ralsky|
|Pregnanterotica.com||Alias of Tom Saylor|
Professional email spam operation.
Premier Services; 22934 Johnson Drive, Clarkesville, TN 37042
Read all about them in detail in Behind Enemy Lines -- Premier Services Exposed.
|PrettySexyGirls.com||Alias of Tom Saylor.|
|Profitsnow.net||Alias of SJ Enterprises.|
|ProFlowers.com||On-line business that advertises by spam. Customer of MonsterHut.|
|PSI||Performance Systems International. Once considered a rogue site. Recently discovered to issue pink contracts. See PSI Info Page for more information.|
|Pusztai, Anton F.||Viagra spammer. Arrested April, 2001. See Smh.com.au article Australian Viagra Mogul indicted to US|
|Pussyairlines.com||Porn spammer. MILE HIGH PRODUCTIONS, 1938 ARTHUR RD, WINDSOR, ON N8W4V4, CA. See nic listing for more info. (Note that whois entry contains at least some fraudulent information.) Connectivity provided by AdvanceNet Corporation, 201 W. Springfield, Suite 909, Champaign, IL 61820.|
|Qlink2info.com||Alias of LLV.com|
|QuantumCom||Major email spammer. Owned by Walter Rines. For more information, see Spam Information Center.|
|Quantum Leap BBS||Porn-spammer; spams alt.sexual.abuse.recovery. The Quantum Leap BBS, P.O. Box 1524, Bellmawr, NJ 08099. Domain Name: WEBSEXNOW.COM. Contact: Dianne E Ursini, webmistress@NETCRUISER.NET (609) 931-4566 (FAX) (609) 931-4013. Connectivity provided by interactive.net.|
Online ad company. Sued for $2M by New York times over
fraudulent subscriptions. See Online Media Daily
Times Wins Suit Against Online Ad Company.
(last update: 22 Jan 2006)
|Quicken Loan||Mortgage broker; uses spam to advertise. See MSNBC article Who profits from spam? Surprise, c|net article, and PC World article Spam Slayer|
|QWest.com||Internet service provider. Host of the berrytrim and Asian-girl-erotica.com spammers. The abuse address for qwest is firstname.lastname@example.org. Do not contact email@example.com; that number is for abuse from qwest employees only.|
|Rackshack.com||Web page hosting service. Permits customers to spam as long as spam is sent via a third party.|
Pro-spam network service provider.
Has anti-spam policy but was extremely lax about enforcing it.
Clients have included herbmeister.net, Josh Baer,
Alan Ralsky, penisgrowth.com and many others.
More recently have acquired a good reputation for fighting spam, now considered to be (mostly) one of the good guys.
(last update: 06 Jul 2009)
|Ragsdale, Garry||Dalls police officer and partner to Tom Gartman. Sentenced to 33 months in prison on obscenity charges March 5, 2004.|
|Ragsdale, Tamara||Wife of Garry Ragsdale. Sentenced to 30 months in prison on obscenity charges March 5, 2004.|
Well-known spammer, moves from ISP to ISP. Uses a lot of domain
Connectivity previously provided by Sprint and UUNet.
Domains include 123asdf.com, alotta34.com, bemybabey.com,
checkingone12.com, coolman01.com, daychore.com, domainstop.org,
fixit02.com, goingoutforlunch.com, grindbind.com,
happyday01.com, lopermanagement.com, myworld02.com,
networkbeat.net, networkpride.net, newpowerdomain.com,
numberop.com, powernets.org, poxteam2001.com, rellingup.com,
servicenetbest.com, theslotsaretalkingtome.com, tivodom.com,
yellowsun01.com (this list is probably out of date)
Convicted 1994 of falsifying documents to defraud two banks in Michigan and Ohio. See c|net story for more convictions and other legal actions.
See http://hairy.linuxnuts.net/anti-spam/ralsky/ for a more complete domain list.
Ralsky-owned domains can often be identified by their use
of networkbeat.net and grindbind.com as name servers.
Connected to convicted pill spammer Daniel Lin, see
Spam Kings article
Team effort on Lin case. Ralsky next?
|Rambam, Steven||See Steven Rombom|
|RapeMovies.net||Alias of Tom Gartman|
|RapePictures.net||PO Box 171139, Arlington, TX 76003. Alias of Tom Gartman|
|Rape.Sex-predator.net||2110 Gorky Park Ln, Dallas, TX 76006 Alias of Tom Gartman|
|RBC||Royal Bank of Canada. Advertise via forged email spam. See netnews article RBC Dominion Securities: "UBE is not SPAM". See also netnews article containing a copy of the spam.|
|RBL||Realtime Blackhole List. See MAPS for more information.|
|Ready2play.com||Alias of AISI|
Suppliers of Real Audio and other multimedia software.
Progressive Networks, Inc, 1111 Third Avenue, 29th Floor,
Seattle, WA 98101.
Advertise via spam. When downloading files from real.com, they
ask for your email address. There's a box you can check to
indicate that you don't want spam, but they ignore it.
NEVER give your email address to real.com. It has been
demonstrated that "remove" requests cause you to be *added*
to the spam list.
Service provided by eli.net.
NOTE: It has been discovered that Real.com's CD player software automatically sends information to Real.com every time you play a music CD. Software also searches your disk for music stored there and sends results to Real.com. See New York Times article CD Software Is Said to Monitor Users' Listening Habits
UPDATE: Real.com has been taken to court. See the following:
(last update: 7 June 2000)
|Register.com||Internet domain registry. Known to sell its email list to spammers.|
|Reckless Romance||Porn spammer. Owns LiveWhoreHouse.com, livenudepussy.com, cumcravers.com and pinkpussyclub.com. Previously hosted by Netcom which has a pro-spam policy. Current whereabouts unknown.|
|Rellingup.com||See Alan Ralsky|
|Removealert.com||Scam. Web site which accepts your email address for a "global remove list", but in fact probably gives it to spammers. Service provided by Concentric.net.|
|Remove-List.com||Scam. Web site which accepts your email address for a "global remove list", but in fact gives it to spammers. Operated by PinPoint Media (Bulkbarn.com, AdultPatrol.com, etc.) See netnews article "Update on Remove-List"|
|Replyman.com||Alias of ExtractorPro.|
|Repsis, Steve||Spammer. Known for the "pheremone" scam, the "cable descrambler" scam and "Quitsmokingforever". See Repsis info page for more.|
Clearing house of email addresses for email marketing.
See netnews thread
does the Return Path company provide spam support?
Consensus seems to be that they do everything possible to avoid spamming.
Filed an Amicus Brief on behalf of Spamhaus in 2007.
(last update: 13 Mar 2007)
|Reynolds, Jerry||Owner of Netzilla.|
|Rezsoft.com||Seller of web page obfuscation program intended to make it harder to reverse-engineer html code. Sometimes used by spammers to make tracking difficult. Author of rezsoft insists that this was an unintended consequence.|
|Rice, Chris||Associate or alias of Ronnie Scelson|
Father of Scott Richter. Acts as Scott's lawyer and president
of Media Breakaway.
(last update: 06 Jan 2008)
Major spammer; owner of OptinRealBig, myemailwizard.com, CPA
Empire.com, Media Breakaway.
May have run WholesaleBandwidth.
sued by Microsoft.
See Reuters article
Microsoft settles suit against one-time 'spam king'
and Register article
Lawsuits drive 'Spam King' Richter to bankruptcy.
Successfully Sued in New York for deceptive business practices, Dec 2003.
Switched to opt-in and removed from ROKSO in July 2005. See also SPEWS records S511, S2067, and S2378.
Attempted to sue SpamCop for listing him as a spammer, May 2004.
Sued Sept 2006 by Infinite Monkeys & Co., LLC for spamming. See press release and complaint (pdf).
Sued Jan 2007 by MySpace for phishing and spamming.
Sued June 2007 in small claims court for spamming.
Seems to be trying to go legit; hired anti-spam lawyer Pete Wellborn in 2007. Major donor to David Ritz defense fund, 2008.
Daily Show interview.
(last update: 31 Jan 2008)
|Rickson, Jim||Suspected alias of Bill Stanley, see Spammer makes threats to shut down site|
Brother of Walter Rines; former VP of sales and marketing
for GTMI. Owner of MediaHeights LLC, aka EmailResults.net.
See Spam Kings article
The duke of spam
(last update: 8 Dec 2005)
|Rines, Walter||Owner of QuantumCom and Nancynet, president of IEMMC, owner and/or operator of GTMI. Former partner of Sanford Wallace. Accused of installing spyware by FTC; see WiReD article Spyware Purveyor in Cross Hairs|
|Rizler||Alias of Christopher William Smith|
|Rjbtelcom.com||Porn spammer, hosted by Above.net. Owner or associate of porn sites totallyteens.com, iwantnetsex.com, maximumcash.com, greenstedcom.com, karasxxx.com, teenx.com, karasamateurs.com, tranniesonline.com, asianpleasures.com, majormelons.com, teensteam.com, absolutelymale.com, justasianteens.com, exithits.com, ebonyfantasy.com, classicmature.com, lesbianpink.com, sinfulmail.com, razormagazine.com|
|Roadrunner||Major ISP, hosts Mike Cunningham and Andrew Amend.|
|Roby, Richard||See Foonet|
|Rodriguez, Rickie||Alias or associate of Joe Melle. See IMC-Marketing for more info.|
Major porn spammer, pled guilty to porn spamming, Jan 2006
See Spam Diaries, U.S. Newswire.
See also Jeffrey Kilbride, James Schaffer, Andrew Ellifson, and Jennifer Clason.
|Rombom, Steven||AKA Steven Rambam. Owner of or associated with Pallorium.com. Unsuccesfully sued relays.orisoft.com for listing their open server. Publicly arrested July 2006 by the FBI on charges of impersonating a federal investigator and witness tampering.|
|Roth, Gregory||President of 30 Minute Mortgage, a mortgage spam site shut down by the FTC in 2006.|
|Rslive.com||Porn site hosted by Netcom. Advertises via spam.|
|Ruckowski, Richard||Associate and co-defendent of Jeremy Jaynes|
|Russian Business Network||Russian hosting site that offered "bulletproof" hosting to various questionable activites such as viruses, malware, spamming, child porn and others. See Washington Post article Shadowy Russian Firm Seen as Conduit for Cybercrime and Spamhaus info page.|
Partner of Bill Stanley, owner of Anti-Spam-America.com
or search for "Russo" at
(last update: 10 Jun 2006)
|Rutman, Yuri||Malicious spammer. Lost his account at joes.com and retaliated with forged spam intended to look like it came from firstname.lastname@example.org, in order to cause trouble for joes.com. The backlash from people who did not know the message was a forgery was sufficient to effectively destroy joes.com. This is the origin of the term "Joe Job". See archived messages from Rutman at The "El Cheepo" and "Thinning Hair" Email Spam Headers|
|Rutkowski, Richard||Alias of Richard Ruckowski|
Back to top
The opinions expressed on this page are solely those of Ed Falk and do not necessarily represent those of any other organization, (although I hope they do). I wish to thank Rahul.net for hosting this web page.