Spyware Sucks
“There is no magic fairy dust protecting Macs" – Dai Zovi, author of “The Mac Hacker’s Handbook"

ALERT: Please treat content from Ad-Amazing.com and associated domains with extreme caution

July 24th 2010 in Uncategorized

We already know about the comment posted to my blog about adamazing.com – now we can add ad-amazing.com (notice the added hypen) to the list.

ad-amazing.com have been caught distributing tags that spoof legitimate companies in a way similar to that described in this article about subdomains.

The ad-amazing.com representative supplied the following references to various parties – these pseudonyms should also be treated with extreme caution.

Kerb Consulting (shares IP range with ad-amazing.com, newtonad.com and kolosolutions.com)
1061 Mill Park Dr. Bldg 2, Lancaster, OH 43130 Ray Kerbson
Ray@kerbconsult.com
(740) 205-6909

Newton Advertising LLC
12 Langley Road, office #3, Newton, MA 02459 James Franco
franco@newtonad.com
(617)340-2126

KOLO Solutions
5267 Commerce Rd, Flint, MI 48507
Mark Hamilton
Hamilton@kolosolutions.com
(810) 250-7321

Mind Ads International (mindadsint.com) (shares IP range with flamingonetwork.com and red-ads.com)

Flamingo Network (flamingonetwork.com)

Red-Ads.com (snap quiz: what’s wrong with this paragraph, copied from the red-ads.com website?)
image

 

*****

ad-amazing.com
ICANN Registrar: BIZCN.COM (people, seriously, avoid any domain name registered via BIZCN.COM like the plague, please???)

Created 3 June 2010

IP: 93.174.92.188 – Amsterdam, As29073 Ecatel Ltd

Registrant:  Sparkle Coleman (dns@ad-amazing.com)

Reverse DNS for 93.174.92.188 = mail.ptsupport.info

*****

ptsupport.info – currently inactive but previously at IP 93.174.92.187 – shared IP with kerbconsult.com (which, of course, was put forward as a "referee" for ad-amazing.com) and vipps-nabp.net

Previously registered to "aldo santini" (boldospaz@yahoo.com)

*****

kerbconsult.com
ICANN Registrar: BIZCN.COM

Created 26 May 2010

IP: 93.174.92.187 – Amsterdam, As29073 Ecatel Ltd

Registrant: IT Admin (it@kerbconsult.com)

*****

newtonad.com
ICANN Registrar: BIZCN.COM

Created 3 June 2010

IP: 93.174.92.198 – Amsterdam, As29073 Ecatel Ltd

Registrant: Claire Ferrell (newtonad@registar.com)

*****

kolosolutions.com
ICANN Registrar: BIZCN.COM

Created 3 June 2010

IP: 93.174.92.197

Registrant: IT Admin (it@kolosolutions.com)

*****

red-ads.com
ICANN Registrar: BIZCN.COM
Created 12 July 2010

IP: 94.102.55.110 – Amsterdam, Ecatel Ltd

Registrant: Red Ads Contractors, Charles Mclaughlin (domains@red-ads.com)

*****

flamingonetwork.com
ICANN Registrar: BIZCN.COM
Created 12 July 2010

IP: 94.102.55.105 – Amsterdam, Ecatel Ltd

Registrant: Registar Services, Harold Pinner (registar@flamingonetwork.com)

*****

mindadsint.com
ICANN Registrar: BIZCN.COM
Created 11 July 2010

IP: 94.102.55.107

Registrant: Registar Services, Sarah Avallone (registar@mindadsint.com)

*****

Domains in the IP range 93.174.92.% , that should be treated with extreme caution (especially if selling advertising) include the following:

Blueglad.com, Greenhad.com, Hadsplash.com, Lackstack.com, Ladwhite.com, Mashslack.com, Thehyipzone.com, Highyieldpros.com, Danafund.com, Web-wizard-solution.com, Opprutinv.com, Drunkbots.com, Hacklabonline.com, Indeshawadenaw.com, Indeshawadenaw.net, Onlineaddons.com, Outsistem.net, Rapiddownloads.eu, Steamcomnnity.com, Steamstuff.info, Nettoolz.info, Edskahn.com, Hourluck.com, Deliver2.net, Runelive.org, Vkasse.com, Fap247.com, Fckn.tv, Coraladnetwork.com, Welconetwork.com, Vipps-nabp.net, Kerbconsult.com, Ad-amazing.com, Hyipjurists.com, Imperialex.com, Kolosolutions.com, Newtonad.com, Livebroad.com, Maskbrown.com, Labteh-td.com, Labteh-td.ru, Scriptmafia.org, Ulgsm.net, Vpnshield.net, Nlkoddos.com, Legion-x.com, Hababam.biz, Download–limewire.com, New-limewire-2010.com, Jaamerp.com, Hyip-status.net, Hyipcourt.com, Y-action.com, Yahooaction.com, Yahooaction.net, Yahooaction.org, Bahtimos.com, Hababam.org, Letsvisittrabzon.com, Gratt.net, Abpp.biz, Actpopcorn.com, Adle.info, Aint.biz, Cozzle.com, Fbpnet.com, Forexbotpro.com, Freehondakybs.com, Generationxinvestment.com, Genxclub.com, Hyipalert.com, Hyiptrainwreck.com, Iwwleads.com, Make200bucks.com, Make30bucks.com, Someguyslife.com, Stainlesstoaster.info, Unitedforexfund.com, Woodrefinishing.us, Worldroi.com, Stevehell.com, Childrenofchile.org, Media-beau.com, Intercomm2.com, Intercommweb.com, Intercomp2.com, Lciinternational.com, Mysteryshopnet.com, Veritybuilding.com, Veritybuildingco.com, Bstbuilding.com, Bstbuildingco.com, Netxs.sc, Silverblue.cc, W00h00.nl, Woohoo.nl, Cumhitz.com.

 

Domains in the IP range 94.102.55.%, that should be treated with extreme caution (especially if selling advertising) include the following:

Innovyxinc.com, 4revenuegroup.com, Lacekgroup.com, Flamingonetwork.com, Mindadsint.com, Sunnnysidemedia.com, Red-ads.com, Calinet.info, Casey-computing.com, Casey-consulting.com, Adrenalinepoker.com, Adrenalinepoker.net, Teamvisionz.com, Gamekeys.us, Pleasehack.me, Embedsports.com, Ichuj.be, Bassline-nation.info, Ultimate-shoutcasts.com, Iafst.ir, Mobilestanshop.net, Optical-digital-camera.info, Alasebook.com, Thehappywalrus.org, Nacoobags.com, Cheapgoogleshop.com, Cheapgooglestore.com, Nfljerseysky.com, Packyours01.com, Porn99.info, Transientattack.com, Proebook.net, Icctv.info, Hqsports.info, Cn-puma.com, Discount-puma.com, Picksheepskinboot.com, Sunglasseshats.com, Usapuma.com, A-puma.com, Productsfrominternet.com, Sell-replicawatch.com, Jerseyinus.com, Tigersupermall.com, Serverorigin.nl, Feelshock.com, Dexingzy.com, Chinahandbagssupplier.com, Cn-jersey.com, Webcheapshop.com, Edhardyretail.com, Replicachinese.com, Edhardyshipping.com, Discountrosetta-stone.com, Rosetstones.com, Edhardystock.com, Edhardysuppliers.com, Gemreplica.com, Gemswiss.com, Embedtv.in, Wsm.co.in, Youngnnmodels.biz, Mobilereplicas.com, Tec-cart.com, Watchandbag.com, Sale-ugg.co.uk, Madden-leagues.com, Pllug.com, Ftaboys.com, Softtorrents.net, 7buae.info, Alkhaja-style.com


Comments are closed.

Brought to light via a comment on this blog. adamazing.com ICANN Registrar: Nameking.com Created 19 April 2010 Current IP: 208.73.210.28 Registrant: "Oversee Research and Development, LLC" (admin@overseedomainmanagement.com) Domain is currently "parked", but previously was hosted at IP 69.64.155.14 (Enom Incorporated). […]

Previous Entry

Nokia Theatre L.A. Live (nokiatheatrelalive.com) is serving exploits via aegadvancedmedia.com Historical badness at aegadvancedmedia.com (btw, homedepotcenter.com is still serving exploits – stay away from there too): http://www.google.com/safebrowsing/diagnostic?site=aegadvancedmedia.com   Malicious content (note the 1×1 iframe):     Analysis of content from the IP address […]

Next Entry

Archives