|
 |
|||||||
|
From 2003, Yambo's ssl4all.com, name15.com, and host2010.com were payloads for the CoolWebSearch (CWS) browser-hijacking trojan, redirecting the web browsers of trojaned PCs to porn pages: (Though ssl4all.com, name15.com, and host2010.com are in this list, not all may be related to Yambo. However, all are Russian/Eastern European, so it is a good possibility they are related. Also note the "APS Telecom" entries. "APS Telecom" is all over Pavka/Artofit SBL/ROKSO records. ---------------------------------------------------------- From http://home.comcast.net/~webhelper/CWS/cwswhoisinfo.html - CWS Whois Information This is an on-going project, so not all domains will be shown here at this time. Active Eastern Europe and Russian Whois Active Coolwebsearch - Canadian Based Whois Terminated CWS Domains Whois ********************************************************************** WHOIS DOMAINS - ACTIVE EASTERN EUROPE AND RUSSIA ********************************************************************** umaxsearch.com = [ 64.124.210.98 ] Registrant: Leos Rousek wello@mail.ru 420 721 121 332 Leos Rousek Na Prikope 858/20 Praha 1 Praha Czech Republic 113 80 Domain Name: umaxsearch.com Record last updated at 2003-09-11 06: 46: 35 Record created on 2003/9/11 Record expired on 2004/9/11 Domain servers in listed order: ns000.onlinenic.com ns4.onlinenic.com Administrator: Na Prikope 858/20 Praha 1 Praha Czech Republic 113 80 name: (Leos Rousek) mail: wello@mail.ru 420 721 121 332 Leos Rousek Technical Contactor: Na Prikope 858/20 Praha 1 Praha Czech Republic 113 80 name: (Leos Rousek) mail: wello@mail.ru 420 721 121 332 Leos Rousek Billing Contactor: Na Prikope 858/20 Praha 1 Praha Czech Republic 113 80 name: (Leos Rousek) mail: wello@mail.ru 420 721 121 332 Leos Rousek Registration Service Provider: name: tel: 4.20721121332 fax: 4.20721121332 ********************* eSearch.cc 195.190.118.170 Kot Sapogah Bespont 11 Vasuki, Newmoscow 450032 Russian Federation Registered through: GoDaddy.com (http://www.godaddy.com) Domain Name: ESEARCH.CC Created on: 15-Jun-04 Expires on: 15-Jun-05 Last Updated on: 16-Jun-04 Administrative Contact: Sapogah, Kot support@esearch.cc Bespont 11 Vasuki, Newmoscow 450032 Russian Federation 79059079385 Technical Contact: Sapogah, Kot support@esearch.cc Bespont 11 Vasuki, Newmoscow 450032 Russian Federation 79059079385 Domain servers in listed order: NS1.ESEARCH.CC NS2.ESEARCH.CC ********************* yellow500.com Loopen street 456/548 Pskov, ru 000000 RU +7.5017000206 Domain Name: 7DAYS.WS onlysex.ws Administrative Contact: Bromel, Harry webmaster@yellow500.com Loopen street 456/548 Pskov, ru 000000 RU +7.5017000206 Technical Contact: Bromel, Harry webmaster@yellow500.com Loopen street 456/548 Pskov, ru 000000 RU +7.5017000206 Record last updated 04-29-2003 01:01:51 PM Record expires on 04-29-2005 Record created on 04-29-2003 Domain servers in listed order: NS1.7DAYS.WS 81.3.164.4 NS2.7DAYS.WS 217.146.192.17 ********************* Registrant: Net Search corp. PO BOX 2014 Novomoskovsk Ru - RU 7.5017000206 Domain Name: RUNSEARCH.COM Administrative Contact: Jordan Anrew admin@700k.com PO BOX 2014 Novomoskovsk Ru - RU 7.5017000206 Technical Contact: Jordan Anrew admin@700k.com PO BOX 2014 Novomoskovsk Ru - RU 7.5017000206 Record last updated 05-30-2003 04: 28: 56 AM Record expires on 04-15-2005 Record created on 04-15-2003 Domain servers in listed order: NS1.HOTBOOKMARK.COM NS2.HOTBOOKMARK.COM ** Hot Bookmark Ink. Universitetskaya street 3 Izhevsk Udmurt Republic 426034 RU 7.5017000206 Domain Name: HOTBOOKMARK.COM Administrative Contact: Rosenblum Paul domain@hotbookmark.com Universitetskaya street 3 Izhevsk Udmurt Republic 426034 RU 7.5017000206 Technical Contact: Rosenblum Paul domain@hotbookmark.com Universitetskaya street 3 Izhevsk Udmurt Republic 426034 RU 7.5017000206 Record last updated 04-15-2003 07: 07: 51 AM Record expires on 04-15-2005 Record created on 04-15-2003 Domain servers in listed order: NS1.HOTBOOKMARK.COM NS2.HOTBOOKMARK.COM ** searchx.cc Galina Charmandjieva (xboy66a@yahoo.com) City Chess 8.1 Elista, NONE 358000 RU 5-41-62 ** ewizard.cc Registrant: Galina Charmandjieva (xboy66a@yahoo.com) City Chess 8.1 Elista, NONE 358000 RU 5-41-62 ** coolwebsearch.cc Registrant: Ivan Sidorov (hali@volny.cz) Volutova 2520 Praha, NONE 15800 CZ 420776667666 ** ************* searchcentral.cc Ivan Sergeev (ranker@pisem.net) OOO Realny Poisk 25 Krasnih Partizan ap.25 Krasnoyarsk, NONE 660075 RU +7-902-9414220 ** Ivan Sergeev The department on struggle with affilates which is broken with rules of advertising of Realnii Poisk LLC. mailto:ranker@pisem.net ** search-web.cc Ivan Bragin (search_web@supermail.ru) ZAO Internet Search Service 25 Krasnih Partizan ap.26 Krasnoyarsk, NONE 660075 RU 902-9414220 ** buysearch.cc Isaak Kolsygovitch (buysearch@e-mail.ru) Free email server OOO Globalnye Systemy Poiska 25 Krasnih Partizan ap.26 Krasnoyarsk, NONE 660075 RU +7-902-9414220 domain: E-MAIL.RU type: CORPORATE descr: Free Mail Server admin-o: JKP-ORG-RIPN nserver: ns1.agava.net.ru. nserver: ns2.agava.net.ru. ** search-web.cc Ivan Bragin (search_web@supermail.ru) ZAO Internet Search Service 25 Krasnih Partizan ap.26 Krasnoyarsk, NONE 660075 RU +7-902-9414220 ** home-search.cc Peter Zuhelmann (home_search@pisem.net) ZAO Internet Search Service 25 Krasnih Partizan ap.25 Krasnoyarsk, NONE 660075 RU +7-902-9414220 ** search-biz.cc Ivan Sergeev (ranker@pisem.net) OOO Realny Poisk 25 Krasnih Partizan ap.25 Krasnoyarsk, NONE 660075 RU +7-902-9414220 ** get-search.cc Oleg Petroff (get_search1@fromru.com) On net Search ZAO 11 Lenin Ave off.311 Krasnoyarsk, NONE 660079 RU 902-9414220 ** best-search.cc Ann Timofeeva (best_search@mail333.com) ZAO Internet Search Service 11 Lenin Ave off.311 Krasnoyarsk, NONE 660079 RU 902-9414220 ** your-search.cc Ivan Sergeev (ranker@pisem.net) OOO Realny Poisk 25 Krasnih Partizan ap.25 Krasnoyarsk, NONE 660075 RU +7-902-9414220 ** Domain Name: SEARCHV.COM Registrant: Hot Bookmark Ink. Pavel Rosenblum (admin@fucking-machine.net) Universitetskaya street 3 Izhevsk Udmurt Republic,426034 RU Tel. +7.5017000206 Creation Date: 05-May-2003 Expiration Date: 05-May-2005 Domain servers in listed order: ns1.searchv.com ns2.searchv.com *********** Domain Name: ICANFINDIT.NET Registrant: huevo K Ermolenko A.V. (gosh1312@hotmail.com) Savushkina st., 130/2, 102 Saint Petersburg Primorskii,197374 RU Tel. +812.3452624 Creation Date: 29-Dec-2003 Expiration Date: 29-Dec-2004 Domain servers in listed order: ns1.icanfindit.net ns2.icanfindit.net *********** Domain Name: 4-COUNTER.COM Registrant: huevo K Ermolenko A.V. (gosh1312@hotmail.com) Savushkina st., 130/2, 102 Saint Petersburg Primorskii,197374 RU Tel. +812.3452624 Creation Date: 29-Dec-2003 Expiration Date: 29-Dec-2004 Domain servers in listed order: ns1.icanfindit.net ns2.icanfindit.net *********** Domain Name: GIGAFINDER.COM Registrant: Blank Inc Novukov N V (gigafinder@hotmail.com) Novoorlovskaya st., 16, 108 Moscow Leninskiy,119633 RU Tel. +812.7317807 Creation Date: 29-Dec-2003 Expiration Date: 29-Dec-2004 Domain servers in listed order: ns1.icanfindit.net ns2.icanfindit.net *********** Domain Name: FUCKING-MACHINE.NET Registrant: Hot Bookmark Ink. Pavel Rosenblum (admin@fucking-machine.net) Universitetskaya street 3 Izhevsk Udmurt Republic,426034 RU Tel. +7.5017000206 Creation Date: 11-Jun-2002 Expiration Date: 11-Jun-2005 Domain servers in listed order: prim1.gpisoft.com sec1.gpisoft.com *********** Black wood S.R.O. 88 Jugmanova 23 Prague 1, CZ 11000 CZ Registrar: DOTSTER Domain Name: SEBASTACZ.COM Created on: 18-AUG-03 Expires on: 19-AUG-04 Last Updated on: 20-AUG-03 Administrative, Technical Contact: Perero, Sebastano sovsem@nevest.net Black wood S.R.O. 88 Jugmanova 23 Prague 1, CZ 11000 CZ 420602885127 420251617695 Domain servers in listed order: NS1.SEBASTACZ.COM NS2.SEBASTACZ.COM ** Domain Name: PISEM.NET OOO Marketing v Internete (PISEM2-DOM) Profsouznaya st, 78 Moscow 117393 RU hosting@rbc.ru +7 095 363-03-09 fax: +7 095 363-03-18 Record expires on 19-Nov-2004. Record created on 19-Nov-1999. Database last updated on 8-Jun-2004 21:19:59 EDT. Domain servers in listed order: RELAY.HOTBOX.RU 80.68.244.2 RELAY1.HOTBOX.RU 194.186.36.181 ** Domain Name: FROMRU.COM OOO Marketing v Internete (FROMRU-DOM) Profsouznaya st, 78 Moscow 117393 RU hosting@rbc.ru +7 095 363-03-09 fax: +7 095 363-03-18 Record expires on 15-Jan-2006. Record created on 15-Jan-2001. Database last updated on 8-Jun-2004 22:06:30 EDT. Domain servers in listed order: RELAY.HOTBOX.RU 80.68.244.2 RELAY1.HOTBOX.RU 194.186.36.181 *************************************** nkvd.us, SMART-FINDER.BIZ *************************************** Domain Name: SMART-FINDER.BIZ Domain ID: D5858038-BIZ Sponsoring Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM) Domain Status: ok Registrant ID: DI_343675 Registrant Name: Zhavoronkov Dmitry Registrant Organization: none Registrant Address1: Karamzina street 7 Registrant City: Kaliningrad Registrant State/Province: na Registrant Postal Code: 236029 Registrant Country: Russian Federation Registrant Country Code: RU Registrant Phone Number: +7.293572 Registrant Email: alex_ser_gay@hotmail.com Administrative Contact ID: DI_343675 Administrative Contact Name: Zhavoronkov Dmitry Administrative Contact Organization: none Administrative Contact Address1: Karamzina street 7 Administrative Contact City: Kaliningrad Administrative Contact State/Province: na Administrative Contact Postal Code: 236029 Administrative Contact Country: Russian Federation Administrative Contact Country Code: RU Administrative Contact Phone Number: +7.293572 Administrative Contact Email: alex_ser_gay@hotmail.com Billing Contact ID: DI_343675 Billing Contact Name: Zhavoronkov Dmitry Billing Contact Organization: none Billing Contact Address1: Karamzina street 7 Billing Contact City: Kaliningrad Billing Contact State/Province: na Billing Contact Postal Code: 236029 Billing Contact Country: Russian Federation Billing Contact Country Code: RU Billing Contact Phone Number: +7.293572 Billing Contact Email: alex_ser_gay@hotmail.com Technical Contact ID: DI_343675 Technical Contact Name: Zhavoronkov Dmitry Technical Contact Organization: none Technical Contact Address1: Karamzina street 7 Technical Contact City: Kaliningrad Technical Contact State/Province: na Technical Contact Postal Code: 236029 Technical Contact Country: Russian Federation Technical Contact Country Code: RU Technical Contact Phone Number: +7.293572 Technical Contact Email: alex_ser_gay@hotmail.com Name Server: NS1.NKVD.US Name Server: NS2.NKVD.US Created by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM) Last Updated by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM) Domain Registration Date: Thu Dec 11 17:21:09 GMT 2003 Domain Expiration Date: Fri Dec 10 23:59:59 GMT 2004 Domain Last Updated Date: Wed Apr 14 11:42:59 GMT 2004 ****************************************** Hughesearch.net Registrant: Ernesto Hans Grepplyngvn. 24 Alta NG 9514 NO null ernesto@zeos.net +47.78430016 Administrative Contact: Name: Ernesto Last Name: Hans Address: Grepplyngvn. 24 City: Alta State: NG Zip Code: 9514 Country: NO Company: null Email: ernesto@zeos.net Telephone: +47.78430016 Fax: null Billing Contact: Name: Ernesto Last Name: Hans Address: Grepplyngvn. 24 City: Alta State: NG Zip Code: 9514 Country: NO Company: null Email: ernesto@zeos.net Telephone: +47.78430016 Fax: null Technical Contact: Name: Ernesto Last Name: Hans Address: Grepplyngvn. 24 City: Alta State: NG Zip Code: 9514 Country: NO Company: null Email: ernesto@zeos.net Telephone: +47.78430016 Fax: null Domain Name Created On: 2003-11-10 10:05:00.0 Domain Name Expires On: 2004-11-09 23:00:00.0 Name Servers: Name Server 1: ns1.hugesearch.net Name Server 2: ns2.hugesearch.net ***************** 209.66.114.129 ***************** Domain Name: 008K.COM First Aid PO BOX 5874 Gasa, Not Applicable 541245 WS +12.1234567890 Domain Name: 008K.COM Administrative Contact: Yohansen, Olaf support@searchv.com PO BOX 5874 Gasa, Not Applicable 541245 WS +12.1234567890 Record last updated 05-16-2003 06:58:10 AM Record expires on 05-16-2005 Record created on 05-16-2003 Domain servers in listed order: NS1.008I.COM 209.66.123.10 NS2.008I.COM 209.66.123.10 ** IP Data: CustName: APS Telecom Address: 1802 N carson street City: Carson City StateProv: NV PostalCode: 89701 Country: US RegDate: 2003-05-29 Updated: 2003-05-29 NetRange: 209.66.114.0 - 209.66.115.255 CIDR: 209.66.114.0/23 NetName: MFN-C231-209-66-114-0-23 NetHandle: NET-209-66-114-0-1 Parent: NET-209-66-64-0-1 NetType: Reassigned Comment: Abuse issues to noc@apxtelecom.com RegDate: 2003-05-29 Updated: 2003-05-29 ** Domain Name: 00HQ.COM Registrant: None Pavel Petroff (name@yellow500.com) PO BOX 2176 c/o Pint spb N20 Slough PDO ,SL3 0PE GB Tel. +7.5017000206 Creation Date: 16-May-2003 Expiration Date: 16-May-2005 Domain servers in listed order: ns1.008i.com ns2.008i.com ********************** 38.117.144.162 ********************** 008i.com First Aid PO BOX 5874 Gasa, Not Applicable 541245 WS +12.1234567890 Domain Name: 008I.COM Administrative Contact: Yohansen, Olaf support@searchv.com PO BOX 5874 Gasa, Not Applicable 541245 WS +12.1234567890 ** IP Data OrgName: Performance Systems International Inc. Address: 1015 31st Street, NWCity: WashingtonStateProv: DCPostalCode: 20007Country: US ** 8ad.com None Pavel Petroff (name@yellow500.com) PO BOX 2176 c/o Pint spb N20 Slough PDO ,SL3 0PE GB Tel. +7.5017000206 Creation Date: 08-Jul-2003 Expiration Date: 08-Jul-2005 Domain servers in listed order: ns1.8ad.com ns2.8ad.com *************** 62.65.252.226 *************** ssl4all.com Yambo Financials Inc. (DE)1001 SW 16th Avenue, 103,Gainesville, FL 32601United States -- USemail: ssl@host2010.com phone: 8778542861fax: 8778542861 Name Servers ns.host2010.com 62.65.252.227 ns2.host2010.com 62.65.252.228 ** Domain Name: HOST2010.COM Registrant: Virtual World Ltd. Andrey Burdin (client09@ssl4all.com) 313 Victoria House Victoria null,n/a SC Tel. +187.78542861 Creation Date: 23-Mar-2000 Expiration Date: 23-Mar-2005 Domain servers in listed order: ns2.host2010.com ns.host2010.com ************** 66.132.171.152 ************** Domain Name: NAME15.COM Registrant: Individual Andrey Burdin (ab@ssl4all.com) Lyakisheva 9-169 Perm ,614051 RU Tel. +791.27831530 Creation Date: 16-May-2003 Expiration Date: 16-May-2006 Domain servers in listed order: 24572.dns1.myorderbox.com 24572.dns2.myorderbox.com 24572.dns3.myorderbox.com 24572.dns4.myorderbox.com ******* Domain Name: YOURSEARCH247.COM Registrant: SEadmin SEadmin (seadmin@mail15.com) Moskow Tverskaya 36, 24 Moskow null,876549 RU Tel. +095.1073312 Creation Date: 13-Jan-2004 Expiration Date: 13-Jan-2005 Domain servers in listed order: ns1.mature-sex-live.com ns2.mature-sex-live.com ************ autosearch.cc Registrant: Michael Cesarevsky (svinson@post.cz) Lykova Str. 12 Prague, NONE 11000 CZ +420224494353 ** bestsearch.cc Registrant: Michael Cesarevsky (svinson@post.cz) Lykova Str. 12 Prague, NONE 11000 CZ +420224494353 *************************** Domain Name:sesupport.com *************************** Pojan Rousov wm@perfect.siberia.net +420.2248362563 Pojan Rousov 53 Smetanovo Praha 1,Prague,CZ 88327 Domain Name:sesupport.com Record last updated at 2004-01-07 16:26:34 Record created on 2004/1/7 Record expired on 2005/1/7 Domain servers in listed order: ns1.dns-diy.com ns2.dns-diy.com ** Administrator: name:(Pojan Rousov) Email:(wm@perfect.siberia.net) tel-- +420.2248362563 Pojan Rousov 53 Smetanovo\r t Praha 1Prague,CZ zipcode:88327 Technical Contactor: name:(Pojan Rousov) Email:(wm@perfect.siberia.net) tel-- +420.2248362563 Pojan Rousov 53 Smetanovo\r t Praha 1Prague,CZ zipcode:88327 Billing Contactor: name:(Pojan Rousov) Email:(wm@perfect.siberia.net) tel-- +420.2248362563 Pojan Rousov 53 Smetanovo\r t Praha 1Prague,CZ zipcode:88327 Registration Service Provider: name: tel: +4202248362563 fax: +4202248362563 web:http:// ** lookingfor.cc Registrant: Tomas Lopez (tomas_lopezz@yahoo.com) CABO LA HUERTA 34-9 ALICANTE, NONE 03540 ES +349651302910 Administrative, Technical, Billing Contact: Tomas Lopez (tomas_lopezz@yahoo.com) CABO LA HUERTA 34-9 ALICANTE, NONE 03540 ES +349651302910 Record expires on: Apr 14 2005 Record created on: Apr 14 2004 Domain Name Servers: ns1.riviera.cc ns3.riviera.cc ** Google News Group From: Alex Wello (wello@mail.ru) Subject: Mitsubishi for Sale! Newsgroups: alt.autos.mitsubishi Date: 2001-06-16 02:16:13 PST umaxsearch.com = [ 64.124.210.98 ] Registrant: Leos Rousek wello@mail.ru carslook.com = [ 64.15.205.183 ] Domain carslook.com Local Services ICN P O Box 33180 Sheung Wan Hong Kong HK 00000 HK Administrative contact: Technical contact: Billing contact: Local Services ICN Domain Adminisrator lsicndom@yahoo.com P O Box 33180 Sheung Wan Hong Kong HK 00000 HK Phone: 852.25434601 Fax: Record dates: Record created on: 2002-07-03 11: 27: 22 PDT (0) Record modified on: 2002-11-27 00: 19: 09 PDT (0) Record expires on: 2004-07-03 PDT (0) Nameservers: ns1.fabulous.com 64.15.205.211 ns2.fabulous.com 64.15.205.212 ** fabulous.com = [ 64.15.205.166 ] Domain fabulous.com DBS Administration Pty. Ltd. GPO Box 278 Brisbane QLD 4001 AU Administrative contact: Technical contact: Billing contact: DBS Administration Pty. Ltd. Domain Hostmaster hostmaster@darkbluesea.com GPO Box 278 Brisbane QLD 4001 AU Phone: 61.7 3007 0000 Fax: 61.7 3007 0001 Record dates: Record created on: 1997-03-16 00: 00: 00 PDT (0) Record modified on: 2003-01-28 21: 21: 19 PDT (0) Record expires on: 2004-12-07 PDT (0) Nameservers: ns1.darkbluesea.com 64.15.205.133 ns2.darkbluesea.com 64.15.205.134 ** darkblue.com = [ 64.15.205.161 ] Domain darkblue.com DBS Administration Pty. Ltd. GPO Box 278 Brisbane QLD 4001 AU Administrative contact: Technical contact: Billing contact: DBS Administration Pty. Ltd. Domain Hostmaster hostmaster@darkbluesea.com GPO Box 278 Brisbane QLD 4001 AU Phone: 61.7 3007 0000 Fax: 61.7 3007 0001 Record dates: Record created on: 1996-07-11 00: 00: 00 PDT (0) Record modified on: 2003-06-16 21: 17: 08 PDT (0) Record expires on: 2004-07-10 PDT (0) Nameservers: ns1.darkbluesea.com 64.15.205.133 ns2.darkbluesea.com 64.15.205.134 Volutova 2520 Praha 15800 Czech Republic Registered through: GoDaddy.com (http://www.godaddy.com) Domain Name: RAPE-COOL-VIDEO.COM Created on: 05-Jan-03 Expires on: 05-Jan-05 Last Updated on: 04-Nov-03 Administrative Contact: Fedorov, Vadim sp@prague-sex.com SP Volutova 2520 Praha 15800 Czech Republic 602885127 Fax -- 251617695 Technical Contact: Fedorov, Vadim sp@prague-sex.com SP Volutova 2520 Praha 15800 Czech Republic 602885127 Fax -- 251617695 Domain servers in listed order: NS1.SEBASTACZ.COM NS2.SEBASTACZ.COM ************************************* WHOIS COOLWEBSEARCH SITES ************************************* Go Top Coolwebsearch.com = [ 66.250.74.150 ] domain: coolwebsearch.com status: production organization: InterWeb Solutions Inc owner: InterWeb Solutions Inc email: admin@iweb-commerce.com address: P.O. Box 362 address: Road Town city: Tortola postal-code: 65113 country: IO admin-c: admin@iweb-commerce.com0 tech-c: admin@iweb-commerce.com0 billing-c: admin@iweb-commerce.com0 nserver: ns1.maximumhost.com nserver: ns2.rosexxxgarden.com registrar: JORE-1 created: 2001-06-01 04: 51: 34 UTC JORE-1 modified: 2004-03-17 14: 59: 02 UTC JORE-1 expires: 2007-05-31 22: 51: 23 UTC source: joker.com db-updated: 2004-06-14 15: 32: 51 UTC *** iweb-commerce.com = [ 66.250.74.45 ] Domain: iweb-commerce.com Registrant: InterWeb Solutions Inc P.O. Box 362 Road Town Tortola British Virgin Islan 65113 US Administrative Contact Technical Contact Billing Contact Zone Contact: IWeb Server Administrator (SER00039) interweb@maximumhost.com ** maximumhost.com = [ 66.250.74.20 ] Domain: maximumhost.com Registrant: HyperSpace Communications Inc 14975 Pierrefonds P.O. Box 124 Pierrefonds Quebec H9H 4K8 CA Administrative Contact Technical Contact Billing Contact Zone Contact: Louise Vitte (VIT00007) support@maximumhost.com HyperSpace Communications Inc 14975 Pierrefonds P.O. Box 124 Pierrefonds Quebec H9H 4K8 CA Tel: 514.5826765 Domain servers in listed order: ns1.rosexxxgarden.com 66.250.74.10 ns2.rosexxxgarden.com 66.250.74.11 Record expires on 2006-02-20 21: 25: 1311 Record last updated on 2004-01-05 23: 14: 3411 Record created on 2002-02-21 14: 35: 1311 Domain created on 2000-02-20 21: 25: 13.0 ** rosexxxgarden.com = [ 66.250.74.4 ] Registrant: RXG Ltd ATTN: ROSEXXXGARDEN.COM c/o Network Solutions P.O. Box 447 Herndon VA. 20172-0447 Domain Name: ROSEXXXGARDEN.COM Administrative Contact: RXG y537p8df53g@networksolutionsprivateregistration.com ATTN: ROSEXXXGARDEN.COM c/o Network Solutions P.O. Box 447 Herndon VA 20172-0447 570-708-8780 Technical Contact: Network Solutions LLC. customerservice@networksolutions.com 13200 Woodland Park Drive Herndon VA 20171-3025 US 1-888-642-9675 fax: 571-434-4620 Record expires on 26-Jul-2006. Record created on 27-Jul-1998. Database last updated on 14-Jun-2004 11: 40: 02 EDT. Domain servers in listed order: NS1.ROSEXXXGARDEN.COM 66.250.74.10 NS2.ROSEXXXGARDEN.COM 66.250.74.11 ******************************** TERMINATED CWS DOMAINS ******************************** Go Top Domain Name: YOURBOOKMARKS.WS Registrant: TERMINATED for Using CoolWebSearch Browser Hijack Troja Domain created on 2004-04-07 11:11:11 Domain last updated on 2003-06-18 10:09:13 Name servers: nulldns2.coolwebsearch.com.cws 1.1.1.1 nulldns1.coolwebsearch.com.cws 1.1.1.1 ***** Domain Name: SMARTSEARCH.WS Registrant: TERMINATED for Using CoolWebSearch Browser Hijack Trojan Virus Domain created on 07-APR-04 Domain last updated on 04-MAR-04 Name servers: nulldns2.coolwebsearch.com.cws 1.1.1.1 nulldns1.coolwebsearch.com.cws 1.1.1.1 ** Domain Name: SEARCHNOW.WS Registrant: TERMINATED for Using CoolWebSearch Browser Hijack Trojan Virus Domain created on 07-APR-04 Domain last updated on 01-FEB-03 Name servers: nulldns2.coolwebsearch.com.cws 1.1.1.1 nulldns1.coolwebsearch.com.cws 1.1.1.1 ** Domain Name: MAGICSEARCH.WS Registrant: TERMINATED for Using CoolWebSearch Browser Hijack Trojan Virus Domain created on 07-APR-04 Domain last updated on 17-FEB-04 Name servers: nulldns2.coolwebsearch.com.cws 1.1.1.1 nulldns1.coolwebsearch.com.cws 1.1.1.1 ** about-blank.ws Domain Name: ABOUT-BLANK.WS Registrant: TERMINATED for Using CoolWebSearch Browser Hijack Troja Domain created on 2004-04-07 11: 11: 11 Domain last updated on 2004-03-04 14: 52: 30 Name servers: nulldns2.coolwebsearch.com.cws 1.1.1.1 nulldns1.coolwebsearch.com.cws 1.1.1.1 | Home | Main Menu Frame |Go Top | 
Related URLsRelated links http://home.comcast.net/~webhelper/CWS/cwswhoisinfo.html (archive.org)
|
||||||
The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies. |
|
Yambo Financials Index
|