Yea, its long - but it should be worth it. Followups (if any) should make
sure to snip the full domain list before posting.
Alrighty, time to take the recent hacking of Cyberpromo and put it to good
use. The CyberPromo named boot file was posted, which itself isn't a
security hack, but does provide everyone with a convenient list of domains
which Spammy the Sperm currently hosts. In my book, they're all spammers,
and even if they weren't, they deserve to be purged from my inbox merely by
association with Spammy. Hey, my inbox isn't a democracy...
First, _currently_, Spammy has the following netblocks, as reported by
InterNIC:
Cyber Promotions Inc (NETBLK-CYBERPROMO-205-199) CYBERPROMO-205-199
205.199.212.0 - 205.199.212.255
Cyber Promotions Inc (NETBLK-CYBERPROMO-205-199B) CYBERPROMO-205-199B
205.199.2.0 - 205.199.2.255
Both are subnets from AGIS, which is comprised of the following NETBLK
records at InterNIC:
AGIS (Apex Global Information Services) (NETBLK-BLOCK-AGIS3) BLOCK-AGIS3
205.254.160.0 - 205.254.191.0
AGIS/Net99 (NETBLK-NET99-CIDR1) NET99-CIDR1 204.157.0.0 - 204.157.255.0
AGIS/Net99 (NETBLK-NET99-CBLK7) NET99-CBLK7 206.84.0.0 - 206.85.255.0
AGIS/Net99 (NETBLK-NET99-BLK5) NET99-BLK5 206.42.0.0 - 206.43.255.0
AGIS/Net99 (NETBLK-NET99-BLK4) NET99-BLK4 205.198.0.0 - 205.199.255.0
AGIS/Net99 (NETBLK-BLOCK-AGIS4) BLOCK-AGIS4 206.62.0.0 - 206.62.255.0
AGIS/Net99 (NETBLK-NET99-BLK6) NET99-BLK6 206.148.0.0 - 206.149.255.0
AGIS/Net99 (NETBLK-NET99-BLK7) NET99-BLK7 206.185.0.0 - 206.185.255.0
AGIS/Net99 (NETBLK-NET99-BLK8) NET99-BLK8 206.249.0.0 - 206.250.255.0
AGIS/Net99 (NETBLK-AGISAA) AGISAA 204.137.128.0 - 204.137.223.255
AGIS/Net99 (NETBLK-AGISCC) AGISCC 205.164.64.0 - 205.164.255.255
Apex Global Information Services, Inc. (NETBLK-AGIS2) AGIS2
205.137.48.0 - 205.137.63.0
Apex Global Information Systems (NETBLK-AGIS-BLK10) AGIS-BLK10
209.14.0.0 - 209.14.255.255
Apex Global Information Systems (NETBLK-AGIS-BLK9) AGIS-BLK9
207.142.0.0 - 207.142.255.255
The sorted AGIS netblocks are then:
204.137.128.0 - 204.137.223.255
204.157.0.0 - 204.157.255.0
205.137.48.0 - 205.137.63.0
205.164.64.0 - 205.164.255.255
205.198.0.0 - 205.199.255.0
205.254.160.0 - 205.254.191.0
206.42.0.0 - 206.43.255.0
206.84.0.0 - 206.85.255.0
206.62.0.0 - 206.62.255.0
206.148.0.0 - 206.149.255.0
206.185.0.0 - 206.185.255.0
206.249.0.0 - 206.250.255.0
207.142.0.0 - 207.142.255.255
209.14.0.0 - 209.14.255.255
There may be other records I've missed. Anyone with more complete
knowledge is invited to share.
Now, here is the sorted list of CyberPromo primaries, which is followed by
three shorter lists at the bottom, representing some additional domains.
This is suitable for cut and paste to a file for using in an egrep match
against domain names in headers.
1-500-fingers.com
123go.net
1stbiz.com
1stworldwidemedia.com
2mansions.com
411network.com
4yourpleasure.com
50andup.com
6thsense.com
7thmillennia.com
aaaapix.com
aaapix.com
abcguitars.com
abcybermall.com
ablocator.com
absolute1.com
abvintel.com
abvintl.com
accessiblepleasures.com
adbenterprises.com
adult-webmaster.com
advanced-web.com
advogate.com
afterhoursmag.com
alwaysaboveaverage.com
amateurknight.com
amateurnude.com
amazingproducts.com
americancoin.com
americapro.com
amponline.com
amv-inc.com
anatole.com
androtec.com
anotherdomain.com
answerme.com
aplay2.com
apsi.com
apwcogan.com
ar-web-service.com
artemis23.com
artimages.com
asiannude.com
astroluz.com
attorneycrawford.com
audioforum.com
awgroup.com
babchurch.org
babeclub.com
banner-year.com
bealeader.com
best-solution.com
betterways.net
bhoman.com
big-web.com
bighotdeals.com
biolynx.com
bisopps.com
biz-net-usa.com
biz-webmaster.com
bizstn.com
blowjobsex.com
bluediamondu.com
bluehorizons.com
bowecay.com
breakthroughproducts.com
breakthruint.com
briarwood.com
bridge-technologies.com
bulletproofvoicemail.com
bvbotanicals.com
c-s-consulting.com
cafegirls.com
californiaonline.com
carcar.com
carproinc.com
cartridgeusa.com
cbt.com
cbt400.com
ccsplprod.com
ceeweb.com
cefali.com
celebritypussy.com
celebritysex.com
centurycigar.com
ch-export.net
ch-non-food.com
cheapcalls.com
choice-mill-2000.com
cindymccain.com
clanorchids.com
collegezone.com
conceptsmg.com
conestogasupply.com
consolidatedmold.com
contactmarket.com
contempogroup.com
coolmorning.com
creativemedia.com
creditmds.com
crt-enterprises.com
crystalpalace.com
cyberfamily.net
cybermaxx.com
cybermirror1.com
cybermoments.com
cyberout96.com
cyberpath.org
cyberpromo.com
cyberpromo.net
cyberpros.com
cybersexbrothel.com
cyberstation.com
cybersyst.com
cybertrade1.com
cyberwarecorp.com
d3vdo.com
danlaw.net
darnassoc.com
datagoldsystems.com
daveweil.com
daviscomputers.com
delatech.com
denco-bus.com
dens.com
desen.com
developers-boutique.com
devotion.com
digital-market.com
digitalenergy.net
divcomm.com
domainseller.com
domainsellers.com
dranimal.com
dstrahan.com
e-health.com
earthfriends.com
easywave.com
eatatmuffys.com
econ-enterprises.com
effectiveinventory.com
elfworks.com
emailad.com
emutoday.com
eroticconnections.com
eroticsites.com
escorts-on-line.com
fastcolor.com
fastcolor.net
fastone.com
fastresults.com
fatalblindness.com
feir.com
ffinternet.com
findcash.com
findsuccess.com
first-team.com
flasexnet.com
foamworks.com
foodmagic.com
fordandassoc.com
forfree.com
fotip.com
fpausa.com
freedomnet.net
freenudity.com
freepromo.com
freesugar.com
ftpftpftp.com
gcproductions.com
gemstars.com
genasys-mechanical.com
generalstor.com
getwealthy.com
ginette.com
girlsplay.com
glenfinnan.com
global-stock-exchange.com
globalitems.net
globalnet4u.com
globaltech2000.com
globalwebestate.com
godhatesfags.com
golden-pages.com
goldweb.net
good-earth.com
gotchi.com
gps2.com
graves.com
growthbusassoc.com
growthfunding.com
grphcimgs.com
hardcore-pics.com
hardcorealley.com
hbhinc.com
hi-cap.com
hitmasters.com
hiv-test.com
home-biz.net
hotlady69.com
hottstuff.com
huxtableassociates.com
i-machine.com
ideastream.com
iiua.org
imc3.com
indusnet.net
infinitelegacies.com
infinitepleasures.com
info-mart.com
info98.com
infoutlet.com
inspirexcellence.com
interace.com
iodmail.com
islandcoin.com
islandtradersintl.com
ispam.net
jcgear.com
jcpromotions.com
jobshopstaffing.com
jobspc.com
jpro.com
jservices.com
justamazing.com
kazuyoshi.com
kckprod.com
keepmailing.com
keygate.net
keyinfonet.com
klnv.com
koolshade.com
kopensky.com
kzweb.com
labornet.com
ladygodivanetwork.com
lakeinwoodsresort.com
lanphere1.com
larsonsauto.com
lasvegasxxx.com
laurient.com
lbt.com
libertyteam.com
light-avenue.com
live-xxx.net
liveass.com
ljsimon.com
locationmanagement.com
lostintime.com
lrspublications.com
ltgcomm.com
lucky-star.com
mail-gram.com
makingmoney1.com
malenude.com
mallmaster.com
managementresultsinc.com
marcouscheaffer.com
mariner.com
marketing-associates.com
marketing-center.com
marketingsuccess.com
martianconsulate.com
mary-world.com
mas-automate.com
matrixcapital.com
max2001.com
mconsult.com
megafone.com
megapromo.com
merchantquest.com
merchantsoft.com
microsrcmall.com
midnightmm.com
midwestmkg.com
milfordcommptnrs.com
millenn2000.com
millenniumconsultants.com
miradainn.com
mitnet.com
mjcw.com
mlm-support.com
mlmman.com
mlmopolis.com
mlmwealth.com
moneyaction.com
moneyads.com
moneyspider.com
mountaineerhomes.com
mq.com
mr-software.com
mrbo.com
mrnodomain.com
mtec2.com
mwcc.net
mysource.com
mystars.com
nakedmen.com
nakedvisions.com
nasty-snatch.com
nasty-teens.com
nationalguild.com
navigation-station.com
nbirnbaum.com
nefis.com
neo-axiom.com
neo-quest.com
net-offers.com
net-wwworth.com
netgenius.com
nethello.com
nethunks.com
netramp.com
netscum.net
netweddings.com
neverbusyfax.com
newdiscoveries.com
newera2001.com
newmillenniumgroup.com
nicers.com
nim.com
nj-retax.com
nmsystms.com
nordatasys.com
nudeimages.com
nudemales.com
nudenude.com
nudephotography.com
nudeporn.com
nudesexpictures.com
nudeteens.com
nudewoman.com
nw-oralsurgery.com
ogden1.com
ohioamish.com
ohiosuperbike.com
only4adults.com
opportunityhotline.com
oralsexpictures.com
orbitmag.org
originalbodysugar.com
outgoing.com
oxbridge.org
p-lenahan.com
pagansex.com
pagespages.com
paradigmcaps.com
paradigmcompanies.com
paradigmdirect.com
paradigmsecurities.com
partygirls.com
pedcom-la.com
peggyhn.com
pegmark.com
penrod1.com
perli.com
petbiz.com
pfsconsulting.com
phantomcom.com
pier37.com
pierenterprises.com
pigskininsider.com
pj-computing.com
planetroanoke.com
platinumteam.com
platos.com
playforprofit.com
pleaseread.com
pleasurecraft.com
pleasureproducts.com
plusnow.com
pornographicpictures.com
powermarket.net
powertise.com
prescriptionsportswear.com
prininfo.com
probasketball.com
probe2000.com
profitwave.com
prunj.com
pussypictures.com
pussypussypussy.com
pynet.com
qquote.org
quintessentialsinc.com
rapiddrug.com
ratite-mall.com
rbmall.com
realmoneynow.com
realreturn.com
realtimemedia.com
realtimesystems.com
refcom.com
reichl.com
resumes-on-disk.com
rhokis.com
rkn.com
robustcordless.com
romanceoutlet.com
roobar.com
rtsweb.com
runtouch.com
sabith.com
samalama.com
samenet.com
samintlinc.com
savannahlakesvillage.com
savenergy.com
savetrees.com
saylorphoto.com
scottees.com
sdmr.com
seamaxx.com
seduce.com
server3.com
sexcitychronicles.com
sexgeardesigns.com
sexland.com
sexlink.com
sexmansion.com
sexnude.com
sexphoto.com
sexplex.com
sexsexsexsex.com
sexy-teens.com
sfedora.com
shamrock.com
shemalesex.com
shematech.com
silveradopdx.com
slipinside.com
slmslm.com
slutpics.com
smickandsmodoo.com
smokingbabes.com
spamford.com
spamford.net
spencepublishing.com
stake-your-claim.com
stobbs.com
stoneinc.com
strutyourstuff.com
submitking.com
success-excellence.com
sultans-harem.com
sunsetpark.com
superfortress.com
superiormall.com
superparty.com
superweb.net
tactique.com
talktel.com
tamsmedia.com
taras-intl.com
tarasys-rdx.com
taser.com
teakusa.com
temple-x.com
theadnet.com
thebldg.com
thedatezone.com
theduplicator.com
theglobalmarketer.com
themailpro.com
thephotostudio.com
thesubmitking.com
thethornco.com
tickettime.com
tiffanyxxx.com
todaysmoney.com
toptek-tmi.com
tosguard.com
totallynude.com
tp-associates.com
tpionline.com
tpitravel.net
tpnid.com
travelbyways.com
trueteam.com
tutcom.com
tweakusa.com
twenty-firstsentry.com
ubs95.com
unfairadvantages.com
vaginasexpictures.com
validreturn.com
vd.com
vigina.com
virtualslut.com
visionquest.com
viteal.com
vulva.com
wallstr278.com
wbuilders.com
wealthexpress.com
webcruiser.com
webdirectusa.com
webevangelist.com
webexposure.net
webnetbooks.com
webspecific.com
webtradectr.com
weeklyhoroscope.com
well-ness.com
wellness2.com
wholesaleclubcybermall.com
wildcardstudios.com
wilmingtonhomes.com
wiltechctr.com
winacar.net
winnerslink.com
wisefool.com
wnyftz.com
worldofserenity.com
worldwizard.com
wvvw.com
wwd.org
wwmen.com
x-ratedweb.com
xxx-mall.com
xxx-search.com
xxxbecky.com
xxxsc.com
y2kconsult.com
yepitslegal.com
ynterpro.com
youropportunity.com
yoursavings.com
zapback.com
zearesservices.com
zlite.com
zorro-rojo.com
The following are in the primaries file, but are commented out. Perhaps
they were previously hosted by Spammy the Sperm and LEFT, or who knows.
I'm happy to add 'em all to my kill file as well anyway:
merchantacct.com
audioforum.com
advogate.com
p-strategies.com
cyber-foxes.com
cartridgeusa.com
dragonkenpo.com
These are secondaries, and are all clearly UCE related:
bulksendit.com
bulkreadit.com
bulkseeit.com
cyber-o-0-o.com
cyber-l-i-1.com
cyber-t-p-l.com
cyber-s-i-q.com
These domains were obtained simply by performing a whois "Cyber
Promotions", and removing entries already listed above. I find it
interesting that he decided to beat the public to the punch on registering
the "SCAMFORD" domains.
freeresponder.com
cyberpromotions.com
cpmall.com
ispam.com
freerelays.com
scamford.com
scamford.net
scamford.org
reedrules.com
noblock.com
fight4rights.com
yougotmail.com
swallace.com
nocensorship.com
1stamend.com
mailreport.com
sanfordw.com
savepaper.com
cyberemag.com
Well, thats it for the list I've got here on initial inspection. Unless
someone else here has a good egrep-based recipe for filtering out messages
based on matches in the header, I think I'll be spending some time this
weekend polishing up mine...
---
Please DO NOT carbon me on list replies. I'll get my copy from the list.
Sean B. Straw / Professional Software Engineering
Post Box 2395 / San Rafael, CA 94912-2395