ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
The Register of Known Spam Operations
Streamdirect TV a/k/a "Adober" gang

Evidence Menu:

Streamdirect TV a/k/a "Adober" gang Index

Country: Canada
State: Quebec
*Many have now been arrested*. Spamming for many years. All fraud scam spam. Originally sold fake versions of Adobe/Skype, anti-virus programs, and other software, and unauthorized TV feeds. Have criminally hacked the accounts of ESPs and ESP customers to pump out their spam. Have serially abused cheap VPS servers from IPs at, which does not log connections and cannot trace abusers. Although a Canadian spam operation, they have a strong Russian influence.

Streamdirect TV a/k/a "Adober" gang SBL Listings History
Current SBL Listings
Archived SBL Listings

Main Info

This spam operation has been spamming for much of the past decade. It specializes in spamming to advertise fraudulent/scam products such as fake versions of Adobe/Skype, fake anti-virus programs, other fake software, and most recently pirated feeds of television content through its StreamDirect service.

The Adober gang has switched tactics over the years. At one time it used compromised consumer PCs to send spam. Later it hacked the accounts of ESPs and ESP customers. Currently it is signing up cheap VPS servers and spamming through them from anonymized IPs.

Streamdirect's throwaway click-through domains are registered anonymously just prior to each new spam campaign and change with every new spam campaign. They have included:

When a URL shortener bans their domain, they register a new one. Recently, they have taken to registering free throwaway domains through the FreeNom service.

When confronted by the ISPs and webhosts that host their content, they always claim that an affiliate was responsible for the spam and "now we have banned that affiliate." After so many years of hearing this same story, neither Spamhaus, nor the ISPs, nor the web hosting companies believes it anymore.

Fake addresses and fake companies given in various spams have included:

HDTV Live Inc. 581 Carlton St, Toronto, ON, M5B 2G3, Canada.
HDTV Stream, Inc. 296 Thompson St, New York 10012, US.
Live HDTV Ltd. 315 Upper St, London N1 1RL, United Kingdom.

Media Entertainment Guide
address: P.O. Box SS-6611
address: Shirley Street
address: Nassau
address: Bahamas
phone: +18775566546

org: Media I Consultants
phone: +1 242 502 8715

Domains by Proxy, Inc.
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States

Registered through:, Inc. (


Other anonymously-registered domains that may be associated with this spam operation include:

Registrar: ENOM, INC.
Whois Server:
Referral URL:
Status: clientHold
Updated Date: 16-nov-2011
Creation Date: 14-jun-2011
Expiration Date: 14-jun-2012

Registration Service Provided By:

Domain name:

Registrant Contact:
Casey Matthews ()

1417 Reynolds Alley
San Francisco, CA 94107

Administrative Contact:
Casey Matthews (
Fax: +1.5555555555
1417 Reynolds Alley
San Francisco, CA 94107

Technical Contact:
Casey Matthews (
Fax: +1.5555555555
1417 Reynolds Alley
San Francisco, CA 94107

Status: Locked

Name Servers:

Creation date: 14 Jun 2011 16:10:00
Expiration date: 14 Jun 2012 11:10:00


Related URLs

Adobe warning: Alert: Email phishing scams purport to offer new versions of Adobe products

Zscaler's report on this gang

Stopmalvertising's report on this gang: "Adobe Reader Scams - Conclusion and IP Details"

The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is:

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy