ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Chuck An / iomega

Evidence Menu:

Chuck An / iomega Index


Country: United States
State: Vermont
Spam-for-hire shop, spams anything (maybe not porn) via proxies. Also sells lists and how-to-spam instructions. Claims 170 million opt-in addresses. Home-base in Massachusetts and/or Vermont.


Chuck An / iomega SBL Listings History
Current SBL Listings
Archived SBL Listings

advertising spam services


http://www.webservertalk.com/archive154-2004-4-202249.html
http://www.webservertalk.com/message202249.html

NoLegs

04-28-04 12:35 PM

Seems while I explored the spammer Expedite Media Group I uncovered
another bulk spammer. I wonder where he got the 5M email addresses?

Regards,
NoLegs

Seems he sign up for hosting, spammed, got the host blocklisted, ISP
was charged a clean-up fee to host but host could not get the spammer
to pay. Why would anyone host "horizon-bulk-email-marketing.com"
http://www.webhostingtalk.com/showt...threadid=228329

From the spammer's web page: http://www.iomegaone.com/

"We have noted from experience that the larger your order the more
traffic you get. And the more traffic you get the better chance you
have for meeting your traffic needs. We have three large packages on
discount now.
5 million for $1399.99
1.2 million for $379.99
600,000 for $199.99"
" Time Counts - Our Software can send 70,000 every hour if you have
high speed!"

" Sec4 - Buy Email Software for Ownership
Do you want a reliable software that can protect you from ISP
shutdowns. It will allow you to do all your email Marketing for Your
Business without using you ISPs mail server. It has its own built in
SMTP server- Try one of our 2 email sending software below, We will
send you a link to download the software after you order it ,That way
you can get started immediately"
Software:
"Auto Connection Email Sender - Sends Up to 40,000 emails per hour."
"Anonymous Ghost email Sender - (70,000 per hour)"

Iomega ONE Billing Dept.
70 S. Winooski Ave # 278 <--Mail Boxes Etc.
Burlington VT 05401

From web page whois:
Charlie (chuck) Avalon, AKA Charles Keys
9 Walden Street. Cambridge, MA 02133 US
1-802-310-6683 <--same phone number
and
700 S. Brokton Boston, MA 02234 US
1-508-380-2608
and
Winooski Ave Burlington, VT 05401 US
+1.8023106683 Fax: +1.8023106683 <--same phone number
1-866-646-6342
Fax: 1-617-588-0698
info@iomegaone.com
billing@iomegaone.com
moneyorder@iomegaone.com
http://www.iomegaone.com/

servertron.com (66.54.155.4)
iomegaone.com (66.218.79.159)
horizon-bulk-email-marketing.com (66.218.79.165)
iomega1.com (64.125.96.137)
horizon-place.com (64.125.96.137)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL15796
omegaone-sender.com (66.218.79.158)
emaildeuce.com (64.125.96.137)
serverlon.com (207.150.192.12)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL15790






Buster

04-28-04 01:36 PM

NoLegs wrote:
>
> Seems while I explored the spammer Expedite Media Group I uncovered
> another bulk spammer. I wonder where he got the 5M email addresses?

< snip >

This spammer has been around for a long time. There are nanae posts
associating him with DHS club back in December of 2002.

He operated on primarily on Yahoo for a long time, using domains such as
horizon-stop, i8i.us, s--r.com, v--i.com, il-r.com, h-i1.com and
i-5l.com.

Yahoo has been happily hosting http://iomegaone.com/ for at least a
year, perhaps all the way back to 2002.





Bill Carton - (The Roadie)
04-28-04 04:36 PM

Buster <curiousjohn@excite.com> wrote:

>NoLegs wrote:
>
>< snip >
>
>This spammer has been around for a long time. There are nanae posts
>associating him with DHS club back in December of 2002.
>
>He operated on primarily on Yahoo for a long time, using domains such as
>horizon-stop, i8i.us, s--r.com, v--i.com, il-r.com, h-i1.com and
>i-5l.com.
>
>Yahoo has been happily hosting http://iomegaone.com/ for at least a
>year, perhaps all the way back to 2002.

He's got my address on a list of MLM "opportunity seekers" he sells to new
idiots as a safe list. Since any list that has me on it cannot possibly be
considered "safe", there's a succession of astonished people who get LARTed
when they spam me.

IIRC, the first 1UpAutomated spam I got was by this vector.

If you ever call his voicemail, he sounds very much like some addled crack
addict who spams to support his habit.

--
Bill "the Roadie" Carton
http://www.theclubbuiltonspam.com/1upautomated.html




[whois.directnic.com]

Registrant:
Iomega ONE
9 Walden Street.
Cambridge, MA 02133
US
1-802-310-6683

Domain Name: IOMEGAONE.COM

Administrative Contact:
INC, Iomega ONE chuck@iomegaone.com
9 Walden Street.
Cambridge, MA 02133
US
1-802-310-6683


Technical Contact:
INC, Iomega ONE chuck@iomegaone.com
9 Walden Street.
Cambridge, MA 02133
US
1-802-310-6683


Record last updated 06-12-2005 10:11:34 AM
Record expires on 06-30-2006
Record created on 06-30-2001

Domain servers in listed order:
YNS1.YAHOO.COM 66.218.71.205
YNS2.YAHOO.COM 216.109.116.20
NS1.REDPAL.NET 219.150.118.12
NS2.REDPAL.NET 219.150.118.22



Why those 'redpal.net' nameservers are listed is a mystery; they are in China:

[whois.apnic.net]
inetnum: 219.150.112.0 - 219.150.255.255
netname: CHINATELECOM-ha
descr: CHINANET henan province network


But they are bogus, anyway:

$ dig @NS2.REDPAL.NET iomegaone.com ns
; <<>> DiG 9.2.4 <<>> @NS2.REDPAL.NET iomegaone.com ns
;; global options: printcmd
;; connection timed out; no servers could be reached

$ dig @ns1.REDPAL.NET iomegaone.com ns
; <<>> DiG 9.2.4 <<>> @ns1.REDPAL.NET iomegaone.com ns
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62233
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 14

;; QUESTION SECTION:
;iomegaone.com. IN NS

;; AUTHORITY SECTION:
com. 22837 IN NS G.GTLD-SERVERS.NET.
com. 22837 IN NS H.GTLD-SERVERS.NET.
com. 22837 IN NS I.GTLD-SERVERS.NET.
com. 22837 IN NS J.GTLD-SERVERS.NET.
com. 22837 IN NS K.GTLD-SERVERS.NET.
com. 22837 IN NS L.GTLD-SERVERS.NET.
com. 22837 IN NS M.GTLD-SERVERS.NET.
com. 22837 IN NS A.GTLD-SERVERS.NET.
com. 22837 IN NS B.GTLD-SERVERS.NET.
com. 22837 IN NS C.GTLD-SERVERS.NET.
com. 22837 IN NS D.GTLD-SERVERS.NET.
com. 22837 IN NS E.GTLD-SERVERS.NET.
com. 22837 IN NS F.GTLD-SERVERS.NET.

;; ADDITIONAL SECTION:
A.GTLD-SERVERS.NET. 89350 IN A 192.5.6.30
A.GTLD-SERVERS.NET. 89352 IN AAAA 2001:503:a83e::2:30
B.GTLD-SERVERS.NET. 89360 IN A 192.33.14.30
B.GTLD-SERVERS.NET. 89358 IN AAAA 2001:503:231d::2:30
C.GTLD-SERVERS.NET. 89358 IN A 192.26.92.30
D.GTLD-SERVERS.NET. 89360 IN A 192.31.80.30
E.GTLD-SERVERS.NET. 89358 IN A 192.12.94.30
F.GTLD-SERVERS.NET. 89358 IN A 192.35.51.30
G.GTLD-SERVERS.NET. 89358 IN A 192.42.93.30
H.GTLD-SERVERS.NET. 89352 IN A 192.54.112.30
I.GTLD-SERVERS.NET. 89358 IN A 192.43.172.30
J.GTLD-SERVERS.NET. 89358 IN A 192.48.79.30
K.GTLD-SERVERS.NET. 89352 IN A 192.52.178.30
L.GTLD-SERVERS.NET. 89358 IN A 192.41.162.30

;; Query time: 350 msec
;; SERVER: 219.150.118.12#53(ns1.REDPAL.NET)
;; WHEN: Sat Jul 16 19:55:07 2005
;; MSG SIZE rcvd: 503





[whois.enom.com]

Registration Service Provided By: Domain Name Registration Center
Contact: domain@trainingcenter.com
Visit: http://www.domainnameregistrationcenter.com

Domain name: omegaone-sender.com

Registrant Contact:
omegaone-sender.com
omegaone-sender.com Company (info@omegaone-sender.com)
+1.8023106683
Fax: +1.8023106683
S Winooski
Burlington, VT 05401
US

Administrative Contact:
omegaone-sender.com
omegaone-sender.com Company (info@omegaone-sender.com)
+1.8023106683
Fax: +1.8023106683
S Winooski
Burlington, VT 05401
US

Technical Contact:
omegaone-sender.com
omegaone-sender.com Company (info@omegaone-sender.com)
+1.8023106683
Fax: +1.8023106683
S Winooski
Burlington, VT 05401
US

Billing Contact:
omegaone-sender.com
omegaone-sender.com Company (info@omegaone-sender.com)
+1.8023106683
Fax: +1.8023106683
S Winooski
Burlington, VT 05401
US

Status: Locked

Name Servers:
yns1.yahoo.com
yns2.yahoo.com

Creation date: 13 Mar 2002 09:15:05
Expiration date: 13 Mar 2006 09:15:05






[whois.directnic.com]

Registrant:
Iomega ONE
9 Walden Street.
Cambridge, MA 02133
US
1-802-310-6683

Domain Name: HORIZON-BULK-EMAIL-MARKETING.COM

Administrative Contact:
INC, Iomega ONE chuck@iomegaone.com
9 Walden Street.
Cambridge, MA 02133
US
1-802-310-6683

Technical Contact:
INC, Iomega ONE chuck@iomegaone.com
9 Walden Street.
Cambridge, MA 02133
US
1-802-310-6683

Record last updated 06-12-2005 10:11:54 AM
Record expires on 10-29-2005
Record created on 10-29-2003

Domain servers in listed order:
YNS1.YAHOO.COM 66.218.71.205
YNS2.YAHOO.COM 216.109.116.20
NS1.REDPAL.NET 219.150.118.12
NS2.REDPAL.NET 219.150.118.22




[whois.directnic.com]

Registrant:
Iomega ONE
9 Walden Street.
Cambridge, MA 02133
US
1-802-310-6683


Domain Name: IOMEGA1.COM

Administrative Contact:
INC, Iomega ONE chuck@iomegaone.com
9 Walden Street.
Cambridge, MA 02133
US
1-802-310-6683

Technical Contact:
INC, Iomega ONE chuck@iomegaone.com
9 Walden Street.
Cambridge, MA 02133
US
1-802-310-6683

Record last updated 03-21-2005 06:00:09 AM
Record expires on 05-11-2007
Record created on 05-11-2003

Domain servers in listed order:
YNS1.YAHOO.COM 66.218.71.205
YNS2.YAHOO.COM 216.109.116.20





[whois.enom.com]

Registration Service Provided By: Domain Name Registration Center
Contact: domain@trainingcenter.com
Visit: http://www.domainnameregistrationcenter.com

Domain name: horizon-place.com

Registrant Contact:
horizon-place.com
Charlie An (chuck@iomegaone.com)
+1.8023106683
Fax: +1.8023106683
Winooski Ave
Burlington, VT 05401
US

Administrative Contact:
horizon-place.com
Charlie An (chuck@iomegaone.com)
+1.8023106683
Fax: +1.8023106683
Winooski Ave
Burlington, VT 05401
US

Technical Contact:
horizon-place.com
Charlie An (chuck@iomegaone.com)
+1.8023106683
Fax: +1.8023106683
Winooski Ave
Burlington, VT 05401
US

Billing Contact:
horizon-place.com
Charlie An (chuck@iomegaone.com)
+1.8023106683
Fax: +1.8023106683
Winooski Ave
Burlington, VT 05401
US

Status: Locked

Name Servers:
yns1.yahoo.com
yns2.yahoo.com

Creation date: 28 Aug 2002 00:00:00
Expiration date: 28 Aug 2006 00:00:00




Maybe this one, too?

[whois.enom.com]

Registration Service Provided By: Domain Name Registration Center
Contact: domain@trainingcenter.com
Visit: http://www.domainnameregistrationcenter.com

Domain name: emaildeuce.com

Registrant Contact:
emaildeuce.com
emaildeuce.com Company (info@emaildeuce.com)
+1.8666466342
Fax: +1.11
7 Brighton Ave
Boston, 02124
US

Administrative Contact:
emaildeuce.com
emaildeuce.com Company (info@emaildeuce.com)
+1.8666466342
Fax: +1.11
7 Brighton Ave
Boston, 02124
US

Technical Contact:
emaildeuce.com
emaildeuce.com Company (info@emaildeuce.com)
+1.8666466342
Fax: +1.11
7 Brighton Ave
Boston, 02124
US

Billing Contact:
emaildeuce.com
emaildeuce.com Company (info@emaildeuce.com)
+1.8666466342
Fax: +1.11
7 Brighton Ave
Boston, 02124
US

Status: Locked

Name Servers:
YNS1.YAHOO.COM
YNS2.YAHOO.COM

Creation date: 10 Dec 2002 00:00:00
Expiration date: 11 Dec 2006 02:22:51


Yes, definitely:

--- reading URL emaildeuce.com
--- contacting host emaildeuce.com [206.251.184.100] on port 80

HTTP/1.1 200 OK
Date: Mon, 10 Apr 2006 x GMT
Server: tigershark/3.0.118 (dn10.directnic.com)
Connection: close
Content-Type: text/html
Content-Length: 332

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML>
<HEAD>
<META http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<TITLE>emaildeuce.com</TITLE>
</HEAD>
<FRAMESET rows="100%,*" border=0 frameborder=0 framespacing=0>
<FRAME name=top src="http://www.iomegaone.com" noresize>
</FRAMESET>
</HTML>

--- connection closed


[whois.directnic.com]

Registrant:
Hardware Dev Technology Serv.
788 Brighton Ave.
Boston, MA 02133
US
15208446226

Domain Name: EMAILDEUCE.COM

Administrative Contact:
Davis, Matt hdtserver@yahoo.com
788 Brighton Ave.
Boston, MA 02133
US
15208446226

Technical Contact:
Davis, Matt hdtserver@yahoo.com
788 Brighton Ave.
Boston, MA 02133
US
15208446226

Record last updated 03-30-2006 10:48:37 AM
Record expires on 12-11-2007
Record created on 12-11-2002

Domain servers in listed order:
NS0.DIRECTNIC.COM 204.251.10.100
NS1.DIRECTNIC.COM 206.251.177.2

-----

Sept. 26 2005 (Added by Rune/SR19)
And this one:

Domain Name: EPHEDRA-BODYBUILDING-WEIGHT-LOSS.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: YNS1.YAHOO.COM
Name Server: YNS2.YAHOO.COM
Name Server: NS1.REDPAL.NET
Name Server: NS2.REDPAL.NET
Status: ACTIVE
Updated Date: 04-aug-2005
Creation Date: 04-aug-2005
Expiration Date: 04-aug-2006

>>> Last update of whois database: Mon, 26 Sep 2005 02:11:28 EDT <<<

Registrant:
Design and Optimization
70 S. Winooski
Burlington, VT 05401
US
800-519--76-96

Domain Name: EPHEDRA-BODYBUILDING-WEIGHT-LOSS.COM

Administrative Contact:
Anu, Charlie mark5_24@yahoo.com
70 S. Winooski
Burlington, VT 05401
US
800-519--76-96

Technical Contact:
Anu, Charlie mark5_24@yahoo.com
70 S. Winooski
Burlington, VT 05401
US
800-519--76-96

Record expires on 08-04-2006
Record created on 08-04-2005

Domain servers in listed order:
YNS1.YAHOO.COM 66.218.71.205
YNS2.YAHOO.COM 216.109.116.20
NS1.REDPAL.NET 219.150.118.12
NS2.REDPAL.NET 219.150.118.22

Connect to 66.218.79.178 on port 80 ... ok

GET / HTTP/1.1[CRLF]
Host: ephedra-bodybuilding-weight-loss.com[CRLF]
Connection: close

-----

(Domain dead)
Domain Name: DEVEGRAPHICS.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: YNS1.YAHOO.COM
Name Server: YNS2.YAHOO.COM
Status: ACTIVE
Updated Date: 01-mar-2005
Creation Date: 01-mar-2005
Expiration Date: 01-mar-2006

>>> Last update of whois database: Mon, 26 Sep 2005 02:11:28 EDT <<<

Registrant:
IOM1
69 Brighton Ave
Boston, MA 02133
US
800-5-19-76-96

Domain Name: DEVEGRAPHICS.COM

Administrative Contact:
Anu, James mark5_24@yahoo.com
69 Brighton Ave
Boston, MA 02133
US
800-5-19-76-96

Technical Contact:
Anu, James mark5_24@yahoo.com
69 Brighton Ave
Boston, MA 02133
US
800-5-19-76-96

Record last updated 03-04-2005 11:44:54 AM
Record expires on 03-01-2006
Record created on 03-01-2005

Domain servers in listed order:
YNS1.YAHOO.COM 66.218.71.205
YNS2.YAHOO.COM 216.109.116.20

-----


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK5346/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy