More Mysteries of Seemingly Unrelated December 11th Domains Implicating Moniker Online Services (MONIKER.COM)

TOKYO (MacHouse) – Three days ago, we reported that 82 domains controlled by the Casino/Insurance Spammer are all registered through a Pompano Beach/Florida-based registrar called Moniker Online Services. And 53 of them were registered on a single day, December 11, 2008. Furthermore, multiple junk websites found at some of these domains are traced to the same web server. For example, the junk websites hosted at the domains of checkquickloans.com, easykasinospel.com, everyhealthinsure.com, funjeuxdecasino.com, usspielbank.com and viponlinebingo.com are all traced to the web server at the IP address of 209.200.48.22. This web server belongs to a New York-based web hosting company called Webair.

casino insurance spam WebAir Convergent Network Services Moniker Online spam

Screenshot 01 – Source: MacHouse

Screenshot 02 – Source: MacHouse

Screenshot 03 – Source: MacHouse

Bad news is that the following 13 spam domains have emerged in the past three days. Again, all of them were registered through Moniker Online Services in December 11th. Spam posts involving some of these domains are shown in Screenshot 01-3.

getrummy.com thebingosala.com viewpokerkasino.com anreplicawatch.com lawfulpokergratis.com yoursgiocaapoker.com usefulcreditcheck.com hugeequityloans.com viewpaydayloans.com everyblackjack.com yourslivepoker.com wowonlinebingo.com allcasinogratuit.com

Last time, we implied that the Florida-based domain registrar might take part in a large-scale spam campaign. There are now at least 66 67 December 11th spam domains that are controlled by the Casino/Insurance Spammer. Somehow, they were registered on the same day, implying that they sent a bulk domain list to Moniker Online Services. But none of them shares the same registrant’s name. In fact, each domain registration has unique registrant’s name, address and e-mail address. And none of the domain registration has been altered since December 11th. It sounds like a unique registrant is responsible for each domain. But the following table implies otherwise.

Table 1: List of December 11th spam domain registrations

Spam domains	Domain registration
tenprivateloans.com	Aethelbert Farnsworth 2354 South Shady Grove Road Memphis, TN 38120 US dns@tenprivateloans.com Phone: +1.9018168244 Fax: +1.9018168176
onpokercasino.com	Amira Yoo 484 Old State Rd Chardon, OH 44024 US support@onpokercasino.com Phone: +1.4402835854 Fax: +1.4402835932
yourslivepoker.com	Angelica Elwell 920 Nd St. Inwood, IA 51240 US dns@yourslivepoker.com Phone: +1.7127515990 Fax: +1.7127516016
bestofhealthplans.com	Annie Moberly 2141 West Airport Hwy Swanton, OH 43558 US postmaster@bestofhealthplans.com Phone: +1.4198244774 Fax: +1.4198244856
worthcazino.com	Arjun Wiggins 1273 Buffalo Rd. Bryan, OH 43506 US postmaster@worthcazino.com Phone: +1.4196342910 Fax: +1.4196342918
onemotorinsure.com	Baldhere Sparks 1881 E Main St Columbus, OH 43213 US postmaster@onemotorinsure.com Phone: +1.6148597120 Fax: +1.6148597095
usspielbank.com	Bede Craft 2336 East Gold Street Mccormick, SC 29835 US webmaster@usspielbank.com Phone: +1.8648511053 Fax: +1.8648511110
allpokerkasino.com	Blagdon Rambo 1938 Ashley Phosphate Rd N Charleston, SC 24906 US support@allpokerkasino.com Phone: +1.8438227436 Fax: +1.8438227418
finebingo.com	Branden Palm 2098 Yeager Rd Ste D West Lafayette, IN 47906 US postmaster@finebingo.com Phone: +1.7654951984 Fax: +1.7654952010
ancasinovirtuel.com	Burrell Bromley 1812 Knight Arnold Rd. Starkville, MS 39759 US admin@ancasinovirtuel.com Phone: +1.6623222239 Fax: +1.6623222242
myonlinegiochi.com	Candace Radtke 1998 Clark St. Newell, IA 50568 US contact@myonlinegiochi.com Phone: +1.7122704397 Fax: +1.7122704396
thegiocaapoker.com	Candi Dasilva 2005 Quest Avenue Kingsley, IA 51028 US webmaster@thegiocaapoker.com Phone: +1.7123763934 Fax: +1.7123763929
legalhomeequity.com	Casandra Orourke 3120 Northpointe Blvd Elkhart, IN 46514 US dns@legalhomeequity.com Phone: +1.5742623273 Fax: +1.5742623309
apokerenligne.com	Chad Aucoin 1233 Hwy Myrtle Beach, SC 29588 US hostmaster@apokerenligne.com Phone: +1.4408016348 Fax: +1.4408016339
realgiocaapoker.com	Colleen Emerson 2261 E. Rd Avenue Villisca, IA 50864 US dns@realgiocaapoker.com Phone: +1.7128243625 Fax: +1.7128243647
fullsizedebthelp.com	Cyndi Shaner 2578 A Garners Ferry Rd Columbia, SC 29209 US contact@fullsizedebthelp.com Phone: +1.8036406401 Fax: +1.8036406387
viewpokerkasino.com	Dael Holland 3984 Inglesby Pkwy Duncan, SC 29334 US contact@viewpokerkasino.com Phone: +1.9373737235 Fax: +1.9373737230
everyblackjack.com	Deanna Mahler 2574 Howard Dr Jasper, IN 47547 US dns@everyblackjack.com Phone: +1.8124807234 Fax: +1.8124807254
anotherkasinos.com	Debra Grasso 3540 Hwy South Cheraw, SC 29520 US support@anotherkasinos.com Phone: +1.8435359223 Fax: +1.8435359252
modernpokerenvivo.com	Deorwine Abrams 1419 Pippin Rd Cincinnati, OH 45231 US admin@modernpokerenvivo.com Phone: +1.5135191107 Fax: +1.5135191088
wantbingo.com	Derward Huskey 880 Mall Road St Clairsville, OH 43950 US support@wantbingo.com Phone: +1.7406932129 Fax: +1.7406932150
viewruleta.com	Earlean Puga 2084 Corporate Dr Johnston, IA 50131 US dns@viewruleta.com Phone: +1.5152690103 Fax: +1.5152690080
hugeequityloans.com	Edgar Dye 2312 S Reynolds Rd Toledo, OH 43614 US hostadmin@hugeequityloans.com Phone: +1.4198638224 Fax: +1.4198638213
anreplicawatch.com	Edward Stewart 1986 Us Highway Elkhart, IN 46517 US dns@anreplicawatch.com Phone: +1.5748736222 Fax: +1.5748736179
goreplicawatch.com	Elda Pimentel 3072 W State Highway Spencer, IN 47460 US hostmaster@goreplicawatch.com Phone: +1.8128270695 Fax: +1.8128270759
usefulhomeloans.com	Fullere Wyman 4474 Sycamore St Anderson, IN 46018 US contact@usefulhomeloans.com Phone: +1.7656472367 Fax: +1.7656472403
everyspades.com	Garwood Liddell 3470 Woodies Ln Bremen, IN 46506 US contact@everyspades.com Phone: +1.5745444567 Fax: +1.5745444619
eachspades.com	Gisele Menard 1564 North Market St. Oskaloosa, IA 52577 US hostadmin@eachspades.com Phone: +1.6416711432 Fax: +1.6416711382
getrummy.com	Harrison Moten 4128 J St Bedford, IN 47421 US contact@getrummy.com Phone: +1.8122737054 Fax: +1.8122737085
hugespielbank.com	Inga Oswald 2020 E. Nodaway Clarinda, IA 51632 US domains@hugespielbank.com Phone: +1.7125405583 Fax: +1.7125405577
funbingosala.com	Jannie Ryals 3663 B Avenue East Oskaloosa, IA 52577 US domains@funbingosala.com Phone: +1.6416714095 Fax: +1.6416714132
localpokerenlinea.com	Jaxon Leahy 1618 Deerwood Dr San Marcos, TX 78666 US webmaster@localpokerenlinea.com Phone: +1.5123942304 Fax: +1.5123942317
everyhealthinsure.com	Jaylyn Starnes 1552 E Main St Walhalla, SC 29691 US hostmaster@everyhealthinsure.com Phone: +1.8646367413 Fax: +1.8646367441
validblackjack.com	Jayme Pride 3117 Columbus Street Grove City, OH 43123 US admin@validblackjack.com Phone: +1.6148732361 Fax: +1.6148732423
lawfulpokergratis.com	Jordell Butts 1402 Greyston Blvd Columbia, SC 29210 US support@lawfulpokergratis.com Phone: +1.8032508250 Fax: +1.8032508179
wowrummy.com	Josefina Cobb 3570 Kingland Dr West Chester, OH 45069 US admin@wowrummy.com Phone: +1.5137778439 Fax: +1.5137778402
checkquickloans.com	Kade Corcoran 1776 Day Dr Parma, OH 44129 US domains@checkquickloans.com Phone: +1.4408847189 Fax: +1.4408847202
maxrummy.com	Layla Fite 1204 Ridge Rd Parma, OH 44129 US dns@maxrummy.com Phone: +1.4408828961 Fax: +1.4408828992
toppokerhemsida.com	Lenard Clouse 2511 Pearl Rd Strongsville, OH 44136 US webmaster@toppokerhemsida.com Phone: +1.4402369173 Fax: +1.4402369254
wowonlinebingo.com	Lia Lind 1575 Hwy N Augusta, SC 29841 US hostmaster@wowonlinebingo.com Phone: +1.4352775353 Fax: +1.4352775451
viewpaydayloans.com	Maelwine Deluca 4440 Scenic Plaza West Union, SC 29696 US contact@viewpaydayloans.com Phone: +1.8646370629 Fax: +1.8646370635
megacasinogioco.com	Meghan Maier 1932 Gwinnett Drive Charleston, SC 29418 US hostmaster@megacasinogioco.com Phone: +1.5744990100 Fax: +1.5744990139
easykasinospel.com	Milman Nail 2044 N E St Richmond, IN 47375 US domains@easykasinospel.com Phone: +1.7659604578 Fax: +1.7659604647
thebingosala.com	Miracle Mahon 2397 Hidden Cove Greenbrier, TN 37073 US hostmaster@thebingosala.com Phone: +1.6152871296 Fax: +1.6152871325
usefulhealthplans.com	Naoma Toke 1803 Colerain Ave Cincinnati, OH 45251 US dns@usefulhealthplans.com Phone: +1.5133833345 Fax: +1.5133833327
supercarinsure.com	Nelly Petersen 1699 Monroe St Toledo, OH 43623 US admin@supercarinsure.com Phone: +1.4198398706 Fax: +1.4198398727
itspielpoker.com	Nyah Spear 1762 Harcourt Rd Mount Vernon, OH 43050 US support@itspielpoker.com Phone: +1.7403957075 Fax: +1.7403957117
latestcarinsure.com	Perkin Alarcon 2742 W Wesmark Blvd Sumter, SC 29150 US domains@latestcarinsure.com Phone: +1.8037718412 Fax: +1.8037718442
standardsdebthelp.com	Philip Rasmussen 1849 Parkview Towers, , Th Av Nashville, TN 37203 US hostmaster@standardsdebthelp.com Phone: +1.6153196732 Fax: +1.6153196744
thisiscreditcheck.com	Raina Mullin 4000 Blue Heron Drive Tillamook, OR 97141 US webmaster@thisiscreditcheck.com Phone: +1.5038409354 Fax: +1.5038409454
webcasinogioco.com	Redmund Rocha 1728 Th Street Boone, IA 50036 US hostadmin@webcasinogioco.com Phone: +1.5154311823 Fax: +1.5154311822
allcasinogratuit.com	Rhett Pryor 2266 Chester Blvd Richmond, IN 47374 US support@allcasinogratuit.com Phone: +1.7652849961 Fax: +1.7652849977
wildkasinospel.com	Robert Vermillion 2403 Holt Rd Columbus, OH 43228 US hostadmin@wildkasinospel.com Phone: +1.6148690018 Fax: +1.6148690032
usalledepoker.com	Selwine Stowers 1843 Engle Rd Middleburg Hts, OH 44130 US domains@usalledepoker.com Phone: +1.4408251006 Fax: +1.4408251006
moreruleta.com	Seymour Salvatore 1888 Para Cincinnati, OH 45237 US contact@moreruleta.com Phone: +1.5132407335 Fax: +1.5132407351
eachdebtsolution.com	Sid Owen 1342 Stearns Avenue Wilmington, VT 05363 US admin@eachdebtsolution.com Phone: +1.8024623439 Fax: +1.8024623386
viewlivepoker.com	Sissie Scruggs 1053 Kensington Drive Murfreesboro, TN 37130 US webmaster@viewlivepoker.com Phone: +1.6154930807 Fax: +1.6154930857
wildpokerraum.com	Su Chew 888 Clarence Coker Hwy Turbeville, SC 29162 US domains@wildpokerraum.com Phone: +1.8434243673 Fax: +1.8434243692
yoursgiocaapoker.com	Susan Pettus 2718 Shelburne Rd., Shelburne, VT 05482 US admin@yoursgiocaapoker.com Phone: +1.8029833603 Fax: +1.8029833628
usefulcreditcheck.com	Susie Hull 997 Rosewood St. C Lake Oswego, OR 97035 US support@usefulcreditcheck.com Phone: +1.5036972185 Fax: +1.5036972231
newbingosala.com	Teddy Burchfield 2414 Longwood Place Nashville, TN 37215 US hostadmin@newbingosala.com Phone: +1.6152963046 Fax: +1.6152963062
funjeuxdecasino.com	Tedric Aronson 3609 Hilliard Rome Road Hilliard, OH 43026 US postmaster@funjeuxdecasino.com Phone: +1.6147695727 Fax: +1.6147695755
viponlinebingo.com	Towley Olson 2157 Reading Road Cincinnati, OH 45241 US hostadmin@viponlinebingo.com Phone: +1.5137319273 Fax: +1.5137319285
hotspielpoker.com	Tracee Jerome 1948 W Main St Mason, OH 45040 US dns@hotspielpoker.com Phone: +1.5133961324 Fax: +1.5133961284
yourruleta.com	Tuyet Wheeler 1388 Keystone Blvd Jeffersonville, IN 47130 US webmaster@yourruleta.com Phone: +1.8122830706 Fax: +1.8122830676
okreplicaclock.com	Wanda Eades 2739 Old Muscatine Road Wilton, IA 52778 US hostadmin@okreplicaclock.com Phone: +1.5637303975 Fax: +1.5637304039
realjeuxpoker.com	Yee Fraser 789 Stone St. Port Huron, MI 49505 US postmaster@realjeuxpoker.com Phone: +1.8109801241 Fax: +1.8109801189

Ordered alphabetically in terms of domain registrants

Let us tell you why this table should look odd to you in a few aspects. Every single domain registration in the table has a U.S. address. Common U.S. states are Indiana, Iowa, Ohio and South Carolina. Hmm… That’s probably not odd enough?

Let’s take a look at e-mail addresses. Every single domain registration in the list indicates an e-mail address whose mail domain is the domain itself. That’s strange. None of the registrants uses Hotmail, Yahoo! or Gmail accounts. And the most crucial point is the usernames they use. Take a close look at every single e-mail address. Every registration indicates one of the following 9 usernames with no exceptions : dns, support, postmaster, webmaster, admin, contact, hostmaster, hostadmin and domains.

· The number of registrations where ‘dns’ is the username: 10
· The number of registrations where ‘support’ is the username: 8
· The number of registrations where ‘postmaster’ is the username: 6
· The number of registrations where ‘webmaster’ is the username: 7
· The number of registrations where ‘admin’ is the username: 7
· The number of registrations where ‘contact’ is the username: 8
· The number of registrations where ‘hostmaster’ is the username: 7
· The number of registrations where ‘hostadmin’ is the username: 7
· The number of registrations where ‘domains’ is the username: 6 7

It looks quite obvious that the same criminal organization is responsible for these 66 spam domains. So they registered all these domains in December 11th, sending a bulk list to Moniker Online Services? And they changed every single registration within the same day? Might be… But when the number of December 11th domains grows 100, we can assure you that you will have a strong doubt.

Spam domains	Server IP address	Web hosts
allcasinogratuit.com	69.42.90.164	Webair
allpokerkasino.com	206.71.151.203	Convergent
ancasinovirtuel.com	69.42.67.198	Webair
anltexasholdem.com	216.130.187.100	Webair
anolimitstexasholdempoker.com	216.130.185.254	Webair
anotherbingo.com	209.200.18.166	Webair
anothercazinos.com	70.84.180.52	ThePlanet.com
anotherkasinos.com	209.200.11.105	Webair
anreplicawatch.com	206.71.151.203	Convergent
apkoer.com	69.42.75.110	Webair
apokerenligne.com	206.71.151.203	Convergent
atexasholdpoker.com	69.42.67.197	Webair
beneficialcraps.com	69.42.67.196	Webair
bestlifereinsure.com	216.130.187.102	Webair
bestofhealthplans.com	206.71.147.29	Convergent
checkquickloans.com	209.200.48.22	Webair
eachdebtsolution.com	69.42.75.108	Webair
eachspades.com	209.200.48.20	Webair
easykasinospel.com	209.200.48.22	Webair
everyblackjack.com	206.71.147.28	Convergent
everyhealthinsure.com	209.200.48.22	Webair
everyspades.com	216.130.187.102	Webair
finebingo.com	206.71.151.206	Convergent
fullsizedebthelp.com	206.71.152.157	Convergent
funbingosala.com	206.71.151.203	Convergent
funjeuxdecasino.com	209.200.48.22	Webair
getrummy.com	206.71.152.154	Convergent
goreplicawatch.com	206.71.152.154	Convergent
gothomeinsure.com	209.200.18.166	Webair
hotspielpoker.com	206.71.151.204	Convergent
hugeequityloans.com	206.71.151.205	Convergent
hugeruleta.com	216.130.185.254	Webair
hugespielbank.com	69.42.75.110	Webair
ijugarcasino.com	209.200.18.165	Webair
inclusivepolicy.com	209.200.48.20	Webair
itfamilyinsure.com	216.130.187.102	Webair
itspielpoker.com	209.200.18.165	Webair
latestcarinsure.com	216.130.185.253	Webair
lawfulpokergratis.com	209.200.48.22	Webair
legalhomeequity.com	206.71.151.202	Convergent
localpokerenlinea.com	206.71.151.206	Convergent
maxrummy.com	69.42.75.109	Webair
megacasinogioco.com	69.42.67.196	Webair
modernpokerenvivo.com	216.130.185.254	Webair
moreruleta.com	216.130.187.101	Webair
mychildinsure.com	69.42.75.108	Webair
myonlinegiochi.com	209.200.18.164	Webair
newbingosala.com	209.200.18.166	Webair
okreplicaclock.com	206.71.152.154	Convergent
onbleckjack.com	206.71.147.26	Convergent
oncasino21.com	209.200.48.21	Webair
onemotorinsure.com	206.71.151.206	Convergent
onpokercasino.com	69.42.75.108	Webair
onshebanginsure.com	69.42.67.197	Webair
propercover.com	69.42.75.110	Webair
realgiocaapoker.com	69.42.90.166	Webair
realinsurer.com	216.130.187.100	Webair
realjeuxpoker.com	206.71.152.154	Convergent
reallycarinsurance.com	216.130.185.252	Webair
standardsdebthelp.com	206.71.152.155	Convergent
supercarinsure.com	216.130.185.254	Webair
tenprivateloans.com	206.71.151.204	Convergent
texasholdnpoker.com	206.71.147.27	Convergent
the21bj.com	206.71.147.26	Convergent
the21blackjack.com	216.130.187.100	Webair
thebingosala.com	69.42.90.165	Webair
thebleckjack.com	206.71.147.30	Convergent
thegiocaapoker.com	206.71.151.206	Convergent
thenolimittexasholdempoker.com	216.130.187.101	Webair
thisiscreditcheck.com	206.71.151.203	Convergent
topgiocarepoker.com	209.200.11.105	Webair
topgiocarepoker.com	216.130.185.254	Webair
usalledepoker.com	206.71.151.202	Convergent
usefulcreditcheck.com	69.42.75.108	Webair
usefulhealthplans.com	216.130.185.253	Webair
usefulhomeloans.com	206.71.152.154	Convergent
ushabitatinsure.com	69.42.67.197	Webair
usspielbank.com	209.200.48.22	Webair
validblackjack.com	216.130.187.101	Webair
viewlivepoker.com	216.130.187.102	Webair
viewpaydayloans.com	69.42.75.108	Webair
viewpokerkasino.com	69.42.90.165	Webair
viewruleta.com	69.42.90.164	Webair
vipinsurer.com	206.71.151.202	Convergent
viponlinebingo.com	209.200.48.22	Webair
wantbingo.com	216.130.187.100	Webair
webcasinogioco.com	209.200.48.21	Webair
wildkasinospel.com	206.71.151.203	Convergent
wildpokerraum.com	206.71.151.205	Convergent
worthcazino.com	206.71.152.158	Convergent
wowonlinebingo.com	69.42.90.164	Webair
wowrummy.com	209.200.48.20	Webair
yourruleta.com	206.71.147.30	Convergent
yoursgiocaapoker.com	209.200.48.22	Webair
yourslivepoker.com	209.200.48.20	Webair

One Response to More Mysteries of Seemingly Unrelated December 11th Domains Implicating Moniker Online Services (MONIKER.COM)

Administrator says:

December 27, 2008 at 9:12 pm

A correction has been made. For some reason, ‘funbingosala.com’ was missing in the tables. Our apology for any inconvenience we have caused…

edsbali on Is Clicksor a Scam?

I just try to use clicksor ads for 24 hour and, I decided to shot it down. What you explained...

Posted Apr 21, 2012

fefgw on Tutorial: How to Transfer Domains Out Of GoDaddy’s Resellers

This tutorial is old

Posted Mar 23, 2012

Georgia Murc on Review on Advertising Network for Publishers: Gunggo

I've used Gunggo in the very recent past. I have been working with them and my site for about 1...

Posted Mar 05, 2012

domain reseller on Tutorial: How to Transfer Domains Out Of GoDaddy’s Resellers

If you are hoping to become a domain name reseller you will need to have a reseller hosting account with...

Posted Jul 08, 2011

TimmyLicious on Review on Advertising Network for Publishers: Blue Advertise

i email them also about their pop up advertisement and i got ignored as well. But the good thing is...

Posted Jul 01, 2011

balon turu on Spam Message Wrongly Implicating The Christian Broadcasting Network

Secondly, we tried to contact the Christian Broadcasting Network. But our kind notification appears to be ignored since we haven’t...

Posted Jun 14, 2011

SEO Brisbane on Clicksor Popup Ad Redirecting Internet Users to a Malware Scam Website

With these kinds of pop up ads, spamming is increased. Advertisers have to keep this thing in mind before publishing...

Posted Jun 05, 2011

Ange Wayne on More Porn Websites Found at Google-Owned Blogspot and Tutorial for Dummies: How to Subscribe to Blogspot Porn Lists

Why did they allow this kind of blogs? There are lots of under 18 who are using internet nowadays. They...

Posted May 24, 2011

Ange Wayne on Fake PornTube Website With Computer Virus Targeting Mac Users

So they are just targeting Mac Users? Every time people must be careful in surfing the internet, downloading everything,...

youporn on YouTube Becoming a Means of Advertising Porn Website Again?

spammers or the porn industry, you’ve got to be able to appreciate how creative people get for finding solutions to...

Posted Apr 17, 2011