Keeping an eye on the Ultimate-Anonymity spammer scammer and doing everything we can to make him stop spamming.

Sunday, November 23, 2008

Take action against Ultimate-Anonymity

Getting frustrated of seeing the Ultimate-Anonymity spam everywhere?

Here are some action steps. Please comment if you can think of anything else.

Complain to Midphase who are hosting the main site Ultimate-Anonymity.com (support@midphase.com

Complain to http://www.smartdots.com who hosts their URL-forwarding URLs such as:-

privacy.es.tc
internet-anonymity.net.tc
online-privacy.cz.tc
privacy-tools.at
privacy-center.ru.tc
anonweb.eu.tc
anonweb.net.tc
anonymize.us.tc
anonsurf.net.tc
anonymize.kr.tc
privacy.mx.tc
privacy.cz.tc
crypted.de.tc
anontools.hk.tc
anonymity.pro.tc

(and probably more)


Get the WOT firefox addon (and McAfee Siteadvisor) and give the UA sites negative ratings. This will warn WOT/Siteadvisor users of the scam business UA.

http://www.mywot.com/en/scorecard/ultimate-anonymity.com
http://www.siteadvisor.com/sites/ultimate-anonymity.com/summary/


Report the user RedFoxOne on Flickr here (click Report Abuse). Here's all his spam on Flickr

Good news; Flickr closed down RedFoxOne's spam account!

Thanks for the info. We greatly appreciate the time that
you've taken to help us keep Flickr a community free of
spam. We've scrubbed the Flickrverse of the spam and have
terminated the account.

Regards,
Joe


Report the iurlz urls:

www.iurlz.com/datools
www.iurlz.com/demtools

here




Thursday, November 13, 2008

and another....

Shorturl shot down the previous one =) but, here's another fresh one

http://web-anonymity.vze.com
http://www.google.fi/search?q=web-anonymity.vze.com


Ultimate-Anonymity sucks.

www.anolite.echoz.com

www.anolite.echoz.com
http://www.google.com/search?q=www.anolite.echoz.com


Reported to http://echoz.com/

Tuesday, November 4, 2008

http://www.iurlz.com/datools

Ultimate Anonymity is also spamming Flickr.

See http://www.google.com/search?q=redfoxone+site%3Aflickr.com


Spamming as RedFoxOne.

Advertising the URL http://www.iurlz.com/datools (http://www.google.fi/search?q=iurlz.com/datools)

Reported him to Flickr and Iurlz.com, I hope they shut down his accounts.

Sunday, November 2, 2008

www.internet-anonymity.net.tc

More "Ultimate Anonymity" spam

www.internet-anonymity.net.tc
http://www.google.com/search?q=internet-anonymity.net.tc

Saturday, October 25, 2008

online-privacy.cz.tc

Spotted yet another Ultimate Spamomity URL:


http://www.google.com/search?q=online-privacy.cz.tc


Looks like others are getting tired of seeing his spam too...

Wednesday, October 15, 2008

privacy-tools.at.tc

Ultimate Anonymity, the lamest comment spammer uses a new url-forwarding link:

privacy-tools.at.tc
http://www.google.com/search?q=privacy-tools.at

URL-forwarding service: Smartdots

Friday, October 3, 2008

privacy-center.ru.tc

And again, a new spam url from "Ultimate-Anonymity.com", the greatest manual comment spammer there ever was

privacy-center.ru.tc

http://www.google.com/search?q=privacy-center.ru.tc

Wednesday, September 24, 2008

New spam alias

The Ultimate-Anonymity.com spammer keeps spamming, day in and out. Here's a new URL he's using to promote his junk:

http://www.anonweb.eu.tc


Another one that is hosted (url forwarded) on http://www.smartdots.com

Wednesday, September 10, 2008

More and more spam from Ultimate-Anonymity

www.anonweb.net.tc
http://www.google.com/search?q=www.anonweb.net.tc


Take a look at this sad page, 9 pages full of his spam on a site:

http://www.livescience.com/common/community/profile.php?plckPersonaPage=PersonaComments&plckUserId=963177&userid=963177&sid=sitelife.livescience.com

Tuesday, September 9, 2008

Knujon

If you get Ultimate-Anonymity spam on your forum or blog you can report it to Knujon.com which is a very active anti-spam company.

http://www.knujon.com/forumspam.html

"...Yes, we also process forum and blog spam. Forum spam presents several problems because unlike email it can't be filtered and many people may read a spammed forum post whereas an email is usually sent to an individual. Emails can be deleted by the recipient, but spam postings usually have to be reported and deleted by an administrator. To combat this, forums often require users to become members and enter verification codes before posting, but spammers have found ways to force or spoof membership applications and they have already cracked the verification code systems of many forums.

Forward us spammed postings in text or html at: forumjunk@coldrain.net. This will be processed just like other junk. If you have a large active forum with a serious spam problem, become a KnujOn member and we will work with you to get your forum abuse problem under control...."

Monday, September 8, 2008

Midphase

Midhpase (aka Anhosting) refuses to take action against the spammers site http://ultimate-anonymity.com even though I've mailed them Usenet spam and showed them how much UA spam there is on the web.
Let's add this to the wealth of info about Midphase on google: Midphase sucks?

Abuse letter

Here is a copy of a message I've just sent Smartdots, which is one of many URL forwarding services that the UA spammer abuses.

-----------------------------------
Dear Smartdots,

Please take action against the "ultimate-anonymity" spammer who is clearly breaking your TOS and ruining the internet experience for the rest of us.


anonymize.us.tc
anonsurf.net.tc
anonymize.kr.tc
privacy.mx.tc
privacy.cz.tc
crypted.de.tc
anontools.hk.tc

http://www.google.com/search?q=anonymize.us.tc
http://www.google.com/search?q=anonsurf.net.tc
http://www.google.com/search?q=anonymize.kr.tc
http://www.google.com/search?q=privacy.mx.tc
http://www.google.com/search?q=privacy.cz.tc
http://www.google.com/search?q=crypted.de.tc
http://www.google.com/search?q=anontools.hk.tc

Sunday, September 7, 2008

1998, the year of dropshadow

Let us take a dive into the Internet Archive:

http://web.archive.org/web/*/http://ultimate-anonymity.com

"The principals of Ultimate Anonymity are three longtime friends who formed Cyber Solutions in 1991. Cyber Solutions main function was building and maintaining custom networks and personal computers. In mid 1994 we shifted more towards website development and hosting, as well as promotions. We currently maintain several of our own websites and are still active in site design & promotion."


Hilarious: "What others are saying" -Most reviews clearly written by UA themselves:


http://web.archive.org/web/*/http://cyber-so.com

cs.jpg (13268 bytes)


bluline.gif (11170 bytes)

Welcome to Cyber Solutions. Your One Stop Promotion Shop. Getting you noticed is what we do.

We will provide you with meta tags needed to give you a good indexing on major search engines, and then list you with over 600 search engines and links pages. We will then launch an aggressive newsgroup ad campaign to drive traffic to your website. Press the promotions button to the left for more information.

We offer several options from a single blast, twice a week, every other day or every day ad campaigns at very reasonable prices. We will post images, text ads or "forced hits" or any combination to ALL adult oriented newsgroups driving qualified traffic to your service. We have been promoting quality sites & services since 1997 and rely on repeat clientele.

Hot tip:

Here are some examples of our site design work

FetishSCAT

SlutCITY

Quik-Host

Ultimate Anonymity


Awesome designs there, 1998 ruled....

Skateboards, Harleys and HGH's in the Florida sun

Here's a little look at some identities the UA spammer uses...

floridaskater

http://www.google.com/search?q=floridaskater+ultimate-anonymity.com

fake testimonial (from here)

"Spam/Scam my ass. I have ordered several of their pre-paid cards over that last year and every single one of them showed up and each one of them worked. How is that a scam? Moron!"

in reply to

Well known Florida, USA based SPAM n' SCAM operation claiming to be in a country that doesn't even exist!

If you send these people a nickel your nuts.


Again a fake testimonial (from here)

I think for the one time fee its well worth it. I have been using them on a regualr basis since late 1998 or early 1999 so I have certainly got my monies worth.

Them and Cotse are pretty much all I use and they work well together.

RW

etc.

comment spam: here

Usenet spam: here with email address floridaskater@gmail.com,

Above email address used here with the name name Robert Wahl


Question: is the floridaskater above (the UA spammer) the same person as this, the person behind http://floridaskater.com ?





HarleyDeals.net (see our previous post)

StalkingHorse@HarleyDeals.net


http://www.google.fi/search?q=harleydeals.net


He seems to be into, and selling Human Growth Hormones (see here and here)

Usenet spam + new mirrors

Here's a screenshot what Ultimate-Anonymitys spam on smut-usenet groups looks like:







New mirrors:

anoweb.alturl.com/
harleydeals.net/ua/


domain: harleydeals.net
created: 24-Oct-2006
last-changed: 19-Sep-2007
registration-expiration: 24-Oct-2008

nserver: ns51.1and1.com 74.208.2.8
nserver: ns52.1and1.com 74.208.3.7

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: William
registrant-lastname: Moffatt
registrant-street1: 8879 W Colonial DR
registrant-street2: Suite 143
registrant-pcode: 34761
registrant-state: FL
registrant-city: Ocoee
registrant-ccode: US
registrant-phone: +1.8636983793
registrant-email: dexxa@att.net

admin-c-firstname: William
admin-c-lastname: Moffatt
admin-c-street1: 8879 W Colonial DR
admin-c-street2: Suite 143
admin-c-pcode: 34761
admin-c-state: FL
admin-c-city: Ocoee
admin-c-ccode: US
admin-c-phone: +1.8636983793
admin-c-email: dexxa@att.net

tech-c-firstname: Hostmaster
tech-c-lastname: ONEANDONE
tech-c-organization: 1&1 Internet Inc.
tech-c-street1: 701 Lee Rd.
tech-c-street2: Suite 300
tech-c-pcode: 19087
tech-c-state: PA
tech-c-city: Chesterbrook
tech-c-ccode: US
tech-c-phone: +1.8774612631
tech-c-fax: +1.6105601501
tech-c-email: hostmaster@1and1.com

bill-c-firstname: Hostmaster
bill-c-lastname: ONEANDONE
bill-c-organization: 1&1 Internet Inc.
bill-c-street1: 701 Lee Rd.
bill-c-street2: Suite 300
bill-c-pcode: 19087
bill-c-state: PA
bill-c-city: Chesterbrook
bill-c-ccode: US
bill-c-phone: +1.8774612631
bill-c-fax: +1.6105601501

Saturday, September 6, 2008

seo-tools.org

Here' another of "Cyber Solutions" sites:

seo-tools.org

Registered to Bill Thompson according to whois.


Domain ID:D149869192-LROR
Domain Name:SEO-TOOLS.ORG
Created On:20-Nov-2007 16:46:41 UTC
Last Updated On:20-Jan-2008 03:50:41 UTC
Expiration Date:20-Nov-2008 16:46:41 UTC
Sponsoring Registrar:1 & 1 Internet AG (R73-LROR)
Status:OK
Registrant ID:SPAG-36256834
Registrant Name:Bill Thompson
Registrant Organization:PC Doctor
Registrant Street1:211 Bloxam Ave
Registrant Street2:
Registrant Street3:
Registrant City:Clermont
Registrant State/Province:FL
Registrant Postal Code:34711
Registrant Country:US
Registrant Phone:+1.3523947148
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:ZooYorksCool@aol.com
Admin ID:SPAG-36256834
Admin Name:Bill Thompson
Admin Organization:PC Doctor
Admin Street1:211 Bloxam Ave
Admin Street2:
Admin Street3:
Admin City:Clermont
Admin State/Province:FL
Admin Postal Code:34711
Admin Country:US
Admin Phone:+1.3523947148
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:ZooYorksCool@aol.com
Tech ID:SPAG-32126886
Tech Name:Hostmaster ONEANDONE
Tech Organization:1&1 Internet Inc.
Tech Street1:701 Lee Rd.
Tech Street2:Suite 300
Tech Street3:
Tech City:Chesterbrook
Tech State/Province:PA
Tech Postal Code:19087
Tech Country:US
Tech Phone:+1.8774612631
Tech Phone Ext.:
Tech FAX:+1.6105601501
Tech FAX Ext.:
Name Server:NS57.1AND1.COM
Name Server:NS58.1AND1.COM
Name Server:

personfinders.org

"Bill Collins" signs his mails Cyber Solutions. A little googling brings up his other site personfinders.org


Cyber Solutions teams up with American International Recovery & Investigations, Inc. to bring you Person Finders.

We find people. It is all we do. We locate people for large banks, collection agencies, repossession companies, attorney's, process servers and other professionals who must locate people to conduct their livelihoods.

Now, we find people for individuals like you. Our full professional resources are at your disposal. Here is what you Get!

Cyber Solutions is a FL State Licensed Collection / Skip Trace Agency, Florida License CCA 0500013.American International Recovery & Investigations, Inc is a State Licensed Private Investigative agency, Florida Agency License A9700228. We utilize resources that are simply not available to the general public. Our online service is streamlined and requires a low overhead which allows us to offer this service at a reasonable cost and quick turn around.

One of our investigators will work with you on a one to one basis. Investigate, analyze data, and answer any questions you may have. We offer a personal touch and that is what makes us different. Try us, you will see for yourself.

We can locate people, assets, criminal records, driving records, registered vehicles, real estate drivers license and social security numbers (for court ordered issues) and other information on individuals. We can establish a profile on your subject with very little information, in most cases first and last name, approx age and last known state.

We can search by Social Security Number (SSN). Provide us with an SSN alone and we can run a full profile on a subject in minutes.







WHOIS

Domain ID:D98530631-LROR
Domain Name:PERSONFINDERS.ORG
Created On:24-Jul-2003 21:36:14 UTC
Last Updated On:28-Jul-2008 19:47:45 UTC
Expiration Date:24-Jul-2009 21:36:14 UTC
Sponsoring Registrar:Domain People Inc. (R30-LROR)

Status:CLIENT TRANSFER PROHIBITED
Registrant ID:NN-1191711930587
Registrant Name:Domain Administrator
Registrant Organization:Cyber Solutions
Registrant Street1:Suite 302
Registrant Street2:
Registrant Street3:
Registrant City:BARTOW
Registrant State/Province:FL
Registrant Postal Code:33830
Registrant Country:US
Registrant Phone:+1.8636983793
Registrant Phone Ext.:
Registrant FAX:+1.8636983793
Registrant FAX Ext.:
Registrant Email:Dexxa@worldnet.att.net
Admin ID:NN-1191711931809
Admin Name:Domain Administrator
Admin Organization:Cyber Solutions
Admin Street1:Suite 302
Admin Street2:
Admin Street3:
Admin City:BARTOW
Admin State/Province:FL
Admin Postal Code:33830
Admin Country:US
Admin Phone:+1.8636983793
Admin Phone Ext.:
Admin FAX:+1.8636983793
Admin FAX Ext.:
Admin Email:Dexxa@worldnet.att.net
Tech ID:NN-1191711931989
Tech Name:Domain Tech
Tech Organization:ValueWeb
Tech Street1:3250 W. Commercial Blvd.
Tech Street2:
Tech Street3:
Tech City:Ft. Lauderdale
Tech State/Province:FL
Tech Postal Code:33309
Tech Country:US
Tech Phone:+1.9543348000
Tech Phone Ext.:
Tech FAX:+1.9543348000
Tech FAX Ext.:
Tech Email:domaintech@valueweb.net
Name Server:NS57.1AND1.COM
Name Server:NS58.1AND1.COM

anonsurf.net.tc

Yet another mirror found:

http://www.google.com/search?q=anonsurf.net.tc

Friday, September 5, 2008

Sting operation?

A bit of conspiracy-theory:

from here

Besides speculation and rumor, does anyone know any

hard facts about Ultimate Anonymity....i.e. who runs
it, are they true privacy advocates, etc.?
They claim to have over 10,000 members. I'm not so sure.
I have a U.A. account, so I am familiar with the two
primary "From" headers that are used when you post via
Ultimate Anonymity....CybaAnonym...@nym.alias.net and
Mailda...@nym.alias.net.
Just out of curiosity I did a DejaNews search for a posting
history of these two "From" headers, just to get some idea of
how many other people might be using U.A., and what variety of
newsgroups they post to.
It seems the vast majority of posts thru U.A. are very poorly
disguised promotions for U.A....posts with texts like "Wow, it
sure is kewl posting anonymously like this! Go to www.ultimate-
anonymity.com"
Also disturbing is that most of these "plugs" for U.A., from U.A.,
seem to be aimed at various perverted alt.sex newsgroups...prettyboy,
teens, necrophilia, bestiality, etc. Sick...
Anyone have the true skinny on these guys?????



>They're spammers, and they're using nym.alias.net's free service, and
probalby charging for it. That's enough; don't use them.


Here's something interesting from this thread (
Note, it says: The author of this message requested that it not be archived. This message will be removed from Groups in 4 days (Sep 10, 6:14 am).

After paying the big $$ &c.my PC started running r e a l l y s l o w.

Spyware doctor says I've picked up a rootkit.
Is UA a front org for the DHS?

This message is followed by UA shilling as "Winston Doolittle" signed "Jiff" defending UA....



Another usenet thread:

UltimateAnonymity, has all the numbers to be a sting, it is impossible
to run a privacy service under those prices, the money must come in
from other sources I suspect, come on...life membership at $58?

Yeah sure.And who pays the server bandwith, the domain name, the
staff,the taxes, and so much more involved.

When I first found UA a few years back I though they would take the
money then shut down the company and that is your life membership gone,
but seeing they are still in business, I can just think of an NSA
operation, with spamming rights included so they even look half criminal.

The NSA wants as many people as possible using their sting operation and
the best way of doing that is making it as cheap as possible.

I dont have any proof, but common sense tells me it is impossible to run
the service on $58 for life, not even $100.

Digging up dirt on Usenet

Ultimate-Anonymity is a scam. Thats what someone one Usenet thinks.

However, "Josh Mandell" and "Ormond Laplunk" two extraordinary satisfied customers bravely defend the product. Right! They are clearly the scammer of UA just like the original poster thinks:

"What I bet is that you have something to do with ultimate-anonymity. I have
complied with all the above, thanks for pointing out you can log in from
anywhere, it proves my point that UA is a rip off that cancells accounts at
different times, as I have read in google newsgroup searches! As I have not
forgot my passwords, they are ripping me and others off as they come into
the need for money. Do a google newsgroups search of ultimate anonymity and
see what the previous poster is talking about. I have no doubt you will get
a response right away from them. I never have, at any time. By the way, I
wrote to that address you had mentioned in an earlier post, no reply.
SCAMMER. "



Others aren't too happy either:

> All they do is sell someone elses re-mailers (only thing they give is
> the interface) with out of date proxies and old free software. They
> are a TOTAL RIP OFF


"ULTIMATE ANONYMITY IS A WORTHLESS SCAM - And a MOUNTAIN OF SPAM

And U-A must be really hurting for money just now. They are now
hitting the newsgroups harder than ever.

He's actually flooding some newsgroups now.

Many machines running, making a pass about every 3-4 hours, dumping
100 or more posts per newsgroup per pass. I wouldn't bother even
calculating the BI -- He must be in the triple-digits by now

He's using several different NSP's (mainly Newsfeeds), and a whole
bunch of click-through redirector sites.

As to the value of what he's selling... I won't even go near him.
Anybody that spams to the extent this jerkwad is spewing has got to be
a scamming a worthless product, trying to bait as many suckers as he
can before the filters kick in. "

And again we have "Josh Mandell", who's just a happy UA users (yeah right) protecting UA claiming it's the resellers/associates fault! Wow, the same excuse "Bill Collins" had.

That is the main problem with reseller programs. You start using
resellers or "associates" as some sites call them (Evidence Eliminator
was good for this) and that is what you get. Idiots using disposable
ISPs, news accounts and a bulk posting program trying to get rich.


I'm glad to see I'm not the only one who sees what a lying, scamming, spamming company UA is:

http://groups.google.com/groups/search?hl=en&qt_s=1&q=%22ultimate-anonymity%22

Most messages are from 2004 and earlier, so he's been doing his dirty stuff long enough don't you think?

The spammers real identity?

Is Bill Collins really William Moffatt or is this just one of his many fake names? Is there another guy called Josh Rankin?


From: http://websites-4-sale.com/ultimate-anonymity.htm

Ultimate-Anonymity

William Moffatt
907 N Wilson Ave #302
Bartow, FL 33830
WebMaster@ultimate-anonymity.com
863-227-3772

http://www.ultimate-anonymity.com

www.ultimate-anonymity.com,ultimate-anonymity.org & www.ultimate-anonymity.net 6 years in business, established privacy & anonymity site.

Has netted over $200,000.00 (documented) in a single year working average 6 hours a day from home. Am pursuing other ventures.

Price = $25,000.00 USD




Domain Name: ULTIMATE-ANONYMITY.COM
]
] Administrative Contact:
] Moffatt, W. (OFRKPPAKPI) NymBox@aol.com
] 907 N Wilson Avenue
] Suite 302
] Bartow, FL 33830
] US
] 863-698-3973
] Technical Contact:
] Rankin, Josh (IAWVWWXKFI) JRankin@cyber-so.com
] Cyber Solutions
] 907 N Wilson Avenue
] Suite 302
] Bartow, FL 33830
] US
] 863-677-3434

www.anonymize.kr.tc

www.anonymize.kr.tc
http://www.google.fi/search?q=anonymize.kr.tc

Another day, another spam(s), another mirror....

Thursday, September 4, 2008

Dude Ultimate Anonymity is Awesome! (NOT)

Here's another sad example,


Someone on a forum asking whether ultimate-anonymity is any good:

h**p://w3.ultimate-anonymityc0m/products.htm

"They are offering lifetime subscriptions at the moment but most of their services can be obtained free by using free software and information found on the internet. Is there any advantages to be gained by using their services? Their anonymous visa might be interesting but I think they don't give enough information about it."

A little bit further down the thread we found a positive review from a happy customer (apparenty)

GreyHatsRule

"Where you get that you can get everything they have for "free" elsewhere. Did you even look at the products page? I have used Ultimate Anonymity for a couple years now and they offer some pretty cool self branded software that works exactly as advertised. I elected the lifetime option and feel I got my moneys worth with just one of the programs from their site. I have bought two of their anonymous Visa cards and they work as described. I was able to set each one up with a different name and address and was able to make purchases from websites without giving any of my personal details. Very neat indeed. I also am a fan of Usenet so I use the usenet service they provide and stopped paying my monthly service. its worth it dude."


Join Date: May 2008
Posts: 1

"GreyHatsRule" joined in May, the same month as this thread was made, and has only posted one post; This message above. Dude, what a coincidence, I wonder who he is, dude!


The same thing here:

http://www.xomreviews.com/ultimate-anonymity.com

We see that "GreyHatsRule" also posts a positive review and after him someone called "skateharder" (Remeber Bill Collins said " I myself use a url in my signature line and its usually either to a skateboarding or surf ing website that I like..." so it's probable that "skateharder" is also him. Josh T, looks like a nickname he uses, as does most of them.

Edward on the other hand seems like a reasonable fellow:

Ultimate-Anonymity are spammers of usenet and elsewhere and their product provides nothing you can not do (for free) by following simple guides found on the Internet. As their spam messages on Usenet include fake testimonials, I would not be surprised if the messages in support of ultimate/anonymity above are fake also. If their product is good why do they have to resort to such spam tactics to sell it?


Also, the IP addresses on that page look familiar, ones that "Bill Collins" uses, at least two IPs at Embarq corporation 65.40.0.0 - 65.41.255.255) and two at AOL. One through Anonymouse (Who adds reviews/comments through anonymouse and why?) Two IPs at fdcservers.net (I bet ultimate-anonymous has a mirror or two there too)

These fake reviews just go on and on . Tons of fake reviews by "various people". Take Josh Saunders for instance: http://www.google.com/search?q=%22josh+saunders%22+ultimate-anonymity.com . Sad

"Bill Collins" spams again

Another day, another spam from Bill Collins of "Cyber Solutions".

Dude that is quite fascinating indeed. Those scientists dudes are pretty smart.

Jiff
www.anonymize.us.tc


If that isn't a spam masked with a superficial comment I don't know what is.

And again a new mirror site.

http://www.google.com/search?q=www.anonymize.us.tc


Wednesday, September 3, 2008

http://www.privacy.mx.tc - Yet another Ultimate Spammer URL

And so the spammer opens yet another mirror site. His plan seems to be to have many mirrors and spam each one just slightly.


privacy.mx.tc
http://www.google.com/search?q=privacy.mx.tc


Here's two more:
http://www.datools.echoz.com/
http://www.google.com/search?q=datools.echoz.com

http://www.iurlz.com/datools
http://www.google.com/search?q=iurlz.com/datools

The biggest comment-spammer is back!

I decided to put this blog on hibernation mode as long as the spammer stopped spamming. But now he's back!


"Way to go theire speilberg. Rack up some mo money! Josh www.privacy.cz.tc "


http://www.google.fi/search?q=www.privacy.cz.tc

Take my advice, don't trust Ultimate-anonymity.com

Wednesday, August 27, 2008

datools.net.tc

Yet another domain used:

datools.net.tc
http://www.google.com/search?q=datools.net.tc

UA Responds

As you can see someone from Ultimate-Anonymity has posted a message for me, here, here, and here.

Here's the message:

Good day,

I am an administrator for Ultimate-Anonymity.com and one of our subscribers brought your blog to my attention.

I have identified the associate responsible for the comment spamming you reference in your blog. We have over 2,000 active associates (resellers) and our associate Terms of Service (TOS) strictly prohibits spamming or network abuse in any way, shape or form.

We have as of late yesterday terminated this associates account and that associate acknowledged early this morning the termination. As such he has forfeited any earnings and said earnings will be donated to the American Red Cross (this is a stipulation clearly stated in our associate program TOS to which each associate agrees). As such, the comment spamming will stop immediately. The associate in question admitted that he watched digg.com and reddit.com and would leave comments with his associate url or use url forwarders to redierct to those urls to direct traffic to those urls.

We are hoping that based on this information and the fact that the comment spamming issue has been resolved that you will delete the blog defaming our character so that no further action will be needed. We take our name quite seriously and will defend it using whatever means are at our disposal. In over 11 years of business with over a half million subscriptions our associate program has been successful however, on occasion a bad apple slips through the cracks that must be dealt with accordingly as this case demonstrated.

I apologize for any inconvenience you may have experienced and wish that you would have contacted us directly with your concerns as this issue could have been resolved much earlier as such abuse simply will not be tolerated.

Regards,

Bill Collins
Cyber Solutions
SupportDesk@Ultimate-Anonymity.com



Do I buy it? No.

1) If it was a reseller doing the spamming, then how does Ultimate-Anonymity.com keep track of what he sells when he advertises (spams) the site directly, and not using some kind of identifier such as for instance ultimate-anonymity.com/ref?=4320 which would allow UA to track his sales and then pay him his commission.

I've asked "Bill Collins" this question. Here's his reply:

Hi there,

I spent some time yesterday checking digg and reddit articles to find the spam comments in question and the ones I found (there were several) lead me right back to a coded associate signup page which is how I was able to identify the associate.

I either suspect by posting our direct url that the associate made an error (he really isnt very bright) or that it was a genuine subscriber just using the url in their in their signature line. I dont subscribe to many blogs but the ones I do participate in, I myself use a url in my signature line and its usually either to a skateboarding or surfing website that I like or even my personal myspace page. Signature links ae not that uncommon and with as many subscribers as we have wouldnt surprise me.

I am watching the digg and reddit articles myself for the last few hours and will continue to do so and have not seen any abuse therefore, I am assuming the problem as solved. We have also taken further measures to ensure the abusing associate is not able to signup for a new associate account as well as suspended his UA access in general by revoking his user ID.

Regards,

Bill Collins
Cyber Solutions

I've not found any of these signup pages he mentions (in red).

The part in orange looks to me like he is trying to downplay it, and even admitting he does do it, and that it's quite common etc etc...

2) If I do a Google search for "Bill Collins" and "Ultimate-Anonymity" I find signs that the spammer JT/JJ/etc etc etc... also has been calling himself Bill Collins (among other names):










http://ccinsider.comedycentral.com/cc_insider/2008/07/jeffrey-tambor.html (Bill Collins)
http://earth2tech.com/2008/05/21/garbage-will-lead-the-biofuel-revolution/ (John Collins)

If I look at who's been visiting this blog I see that the IP 69.69.28.85 just visited a while ago. This is the very same IP that the spammer has been using and that I've mentioned in my first post. See what a Google search for it brings up:

http://www.google.fi/search?q=69.69.28.85

It's very fishy.

Here's a discussion about it on Castle Cops
As you can see someone from Ultimate-Anonymity has posted a message for me, here, here, and here.

Here's the message:

Good day,

I am an administrator for Ultimate-Anonymity.com and one of our subscribers brought your blog to my attention.

I have identified the associate responsible for the comment spamming you reference in your blog. We have over 2,000 active associates (resellers) and our associate Terms of Service (TOS) strictly prohibits spamming or network abuse in any way, shape or form.

We have as of late yesterday terminated this associates account and that associate acknowledged early this morning the termination. As such he has forfeited any earnings and said earnings will be donated to the American Red Cross (this is a stipulation clearly stated in our associate program TOS to which each associate agrees). As such, the comment spamming will stop immediately. The associate in question admitted that he watched digg.com and reddit.com and would leave comments with his associate url or use url forwarders to redierct to those urls to direct traffic to those urls.

We are hoping that based on this information and the fact that the comment spamming issue has been resolved that you will delete the blog defaming our character so that no further action will be needed. We take our name quite seriously and will defend it using whatever means are at our disposal. In over 11 years of business with over a half million subscriptions our associate program has been successful however, on occasion a bad apple slips through the cracks that must be dealt with accordingly as this case demonstrated.

I apologize for any inconvenience you may have experienced and wish that you would have contacted us directly with your concerns as this issue could have been resolved much earlier as such abuse simply will not be tolerated.

Regards,

Bill Collins
Cyber Solutions
SupportDesk@Ultimate-Anonymity.com



Do I buy it? No.

1) If it was a reseller doing the spamming, then how does Ultimate-Anonymity.com keep track of what he sells when he advertises (spams) the site directly, and not using some kind of identifier such as for instance ultimate-anonymity.com/ref?=4320 which would allow UA to track his sales and then pay him his commission. I've asked "Bill Collins" this question but not received a reply yet.

2) If I do a Google search for "Bill Collins" and "Ultimate-Anonymity" I find signs that the spammer JT/JJ/etc etc etc... also has been calling himself Bill Collins (among other names):










http://ccinsider.comedycentral.com/cc_insider/2008/07/jeffrey-tambor.html (Bill Collins)
http://earth2tech.com/2008/05/21/garbage-will-lead-the-biofuel-revolution/ (John Collins)

3) If I look at who's been visiting this blog I see that the IP 69.69.28.85 just visited a while ago. This is the very same IP I mention in my first post. See what a Google search for it brings up:

Tuesday, August 26, 2008

Ultimate-Anonymity spamming usenet

He's also been spamming usenet.

Here's someone commeting about him in 2005:

">> The SCAM Spam Ultimate Anonymity DAILY inflicts this Usenet Abuse
>> on hundreds of Usenet newsgroups with lots of non-commercial NGs
>> being Usenet abused two, three & four times on a SINGLE day."

http://newsgroups.derkeiler.com/Archive/Alt/alt.fan.howard-stern/2005-11/msg00653.html

New URLS:

The spammer just keeps spamming.


I would never buy a product from a suspicious and dishonest company like this.

Here are some new URLs that he is spamming.
http://www.useurl.us/17n
http://www.crypted.de.tc/
http://s184554097.onlinehome.us/ua

Wednesday, August 20, 2008

New Mirror

Now he's using a new mirror:-

decrypt.net.tc

hosted at: http://www.smartdots.com/contact/?LANG=US


http://www.google.com/search?q=decrypt.net.tc

Monday, August 18, 2008

http://www.northbridgesucks.com/ua

Today the spammer started spamming (1, 2) a new site (same Ultimate-Anonymity content) at http://www.northbridgesucks.com/ua . At the moment through the URL-forwarding service www.useurl.us (www.useurl.us/126).

The site is hosted at http://1and1.com/

$ whois northbridgesucks.com
[Querying whois.internic.net]
[Redirected to whois.schlund.info]
[Querying whois.schlund.info]
[whois.schlund.info]


domain: northbridgesucks.com
created: 06-Nov-2006
last-changed: 19-Sep-2007
registration-expiration: 06-Nov-2008

nserver: ns51.1and1.com 74.208.2.8
nserver: ns52.1and1.com 74.208.3.7

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: Oneandone
registrant-lastname: Private Registration
registrant-organization: 1&1 Internet, Inc. - http://1and1.com/contact
registrant-street1: 701 Lee Road, Suite 300
registrant-street2: ATTN: northbridgesucks.com
registrant-pcode: 19087
registrant-state: PA
registrant-city: Chesterbrook
registrant-ccode: US
registrant-phone: +1.8772064254
registrant-email: proxy494017@1and1-private-registration.com

admin-c-firstname: Oneandone
admin-c-lastname: Private Registration
admin-c-organization: 1&1 Internet, Inc. - http://1and1.com/contact
admin-c-street1: 701 Lee Road, Suite 300
admin-c-street2: ATTN: northbridgesucks.com
admin-c-pcode: 19087
admin-c-state: PA
admin-c-city: Chesterbrook
admin-c-ccode: US
admin-c-phone: +1.8772064254
admin-c-email: proxy494017@1and1-private-registration.com

tech-c-firstname: Oneandone
tech-c-lastname: Private Registration
tech-c-organization: 1&1 Internet, Inc. - http://1and1.com/contact
tech-c-street1: 701 Lee Road, Suite 300
tech-c-street2: ATTN: northbridgesucks.com
tech-c-pcode: 19087
tech-c-state: PA
tech-c-city: Chesterbrook
tech-c-ccode: US
tech-c-phone: +1.8772064254
tech-c-email: proxy494017@1and1-private-registration.com

bill-c-firstname: Oneandone
bill-c-lastname: Private Registration
bill-c-organization: 1&1 Internet, Inc. - http://1and1.com/contact
bill-c-street1: 701 Lee Road, Suite 300
bill-c-street2: ATTN: northbridgesucks.com
bill-c-pcode: 19087
bill-c-state: PA
bill-c-city: Chesterbrook
bill-c-ccode: US
bill-c-phone: +1.8772064254
bill-c-email: proxy494017@1and1-private-registration.com

Data on Ultimate-Anonymity.com

Ultimate-Anonymity.com is one of the most annoying spammers on the net right now.

His modus operandi is to visit popular articles featured on social-news sites such as Digg.com and Reddit.com and add a quick superficial comment to the article along with an URL to his site, either directly to Ultimate-Anonymity.com or to a mirror/via a URL-redirection service.

Visit these Google searches to see some of this spam:

http://www.google.com/search?q=ultimate-anonymity.com

http://www.google.com/search?q=privacy-center.net

http://www.google.com/search?q=fireme.to/udi

http://www.google.com/search?q=an0n.mirrorz.com (shut down)

http://www.google.com/search?q=anondo.alturl.com


Known Aliases:

JT, maybe stands for John Thomas. aka John Roberts, aka RedFoxOne, aka JummyDoDrop, aka Johny Frost, aka doswheeler, aka JoshTwoLittle, aka JimMcDish, aka JJ....

Known IPs:

69.69.28.85

Site-aliases:

www.Privacy-Center.net (same contents, hosted on a different server)

http://www.northbridgesucks.com/ua/ (same contents, hosted on a different server)

www.FireMe.To/udi (url redirection)

www.an0n.mirrorz.com (url redirection)

www.anondo.alturl.com (url redirection)

www.useurl.us/126

www.useurl.us/12m


Address: (according to http://www.aboutus.org/Ultimate-Anonymity.com)

13750 W Colonial Dr Suite 350-252
Winter garden, FL 34787 US

+1 863 402-1608,
Fax: +1 863-402-1608


This site has the same physical address/telephone number:

http://www.personfinders.org/

See http://shurl.org/CWBrh for more info ( real names?)


Reddit profiles:

http://www.reddit.com/user/JoshTwolittle

http://www.reddit.com/user/Juppylolo/


Take action:

His site Ultimate-Anonymity.com is hosted at midphase.com - mail support@midphase.com)

Another one: privacy-center.net is hosted at routhost.com - mail abuse@routhost.com

Yet another one: http://www.northbridgesucks.com/ua is hosted at oneandone.net - mail abuse@oneandone.net

http://forum3.midphasetalk.com/showthread.php?p=37364#post37364

AbuseDept@ShortURL.com (very helpful abuse department)

http://www.siteadvisor.com/sites/ultimate-anonymity.com

http://www.mywot.com/en/scorecard/ultimate-anonymity.com