Moniker Privacy Online Services

The comments spammers are backarooni! After the last time I did this they disappeared for several weeks, so maybe time for another dose. The links point to http://2ee.us/shitetheyreadvertising.html, so let’s play WHOIS whack-a-mole!

Domain Name: 2EE.US
Domain ID: D9234416-US
Sponsoring Registrar: MONIKER ONLINE SERVICES, LLC
Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registrant ID: MONIKER190258
Registrant Name: DARVA DEGEN DEGEN
Registrant Address1: San adrian, 467
Registrant City: USA
Registrant State/Province: NY
Registrant Postal Code: 90210
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.14859716581
Registrant Facsimile Number: +1.4859716581
Registrant Email: darvadegen@gmail.com
Registrant Application Purpose: P3
Registrant Nexus Category: C11
Administrative Contact ID: MONIKER190258
Administrative Contact Name: DARVA DEGEN DEGEN
Administrative Contact Address1: San adrian, 467
Administrative Contact City: USA
Administrative Contact State/Province: NY
Administrative Contact Postal Code: 90210
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.14859716581
Administrative Contact Facsimile Number: +1.4859716581
Administrative Contact Email: darvadegen@gmail.com
Administrative Application Purpose: P3
Administrative Nexus Category: C11
Billing Contact ID: MONIKER190258
Billing Contact Name: DARVA DEGEN DEGEN
Billing Contact Address1: San adrian, 467
Billing Contact City: USA
Billing Contact State/Province: NY
Billing Contact Postal Code: 90210
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.14859716581
Billing Contact Facsimile Number: +1.4859716581
Billing Contact Email: darvadegen@gmail.com
Billing Application Purpose: P3
Billing Nexus Category: C11
Technical Contact ID: MONIKER190258
Technical Contact Name: DARVA DEGEN DEGEN
Technical Contact Address1: San adrian, 467
Technical Contact City: USA
Technical Contact State/Province: NY
Technical Contact Postal Code: 90210
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.14859716581
Technical Contact Facsimile Number: +1.4859716581
Technical Contact Email: darvadegen@gmail.com
Technical Application Purpose: P3
Technical Nexus Category: C11
Name Server: NS1.2EE.US
Name Server: NS2.2EE.US
Created by Registrar: MONIKER ONLINE SERVICES, LLC
Last Updated by Registrar: MONIKER ONLINE SERVICES, LLC
Domain Registration Date: Mon Dec 26 13:56:12 GMT 2005
Domain Expiration Date: Mon Dec 25 23:59:59 GMT 2006
Domain Last Updated Date: Fri Jan 13 07:39:38 GMT 2006

Now, I’m pretty sure that billing address is a fake. Wasn’t it Beverly Hills 90210? It wasn’t New York, at any rate.

Tracert to 2ee.us takes us to the IP address 69.50.163.166 on AS27595 INTERCAGE. Who they?

[whois.arin.net]
OrgName: InterCage, Inc.
OrgID: INTER-359
Address: 1955 Monument Blvd.
Address: #236
City: Concord
StateProv: CA
PostalCode: 94520
Country: US

ReferralServer: rwhois://rwhois.intercage.com:4321/

NetRange: 69.50.160.0 – 69.50.191.255
CIDR: 69.50.160.0/19
NetName: INTERCAGE-NETWORK-GROUP
NetHandle: NET-69-50-160-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: MAIL.ATRIVO.COM
NameServer: PAVEL.ATRIVO.COM
Comment:
RegDate: 2003-06-04
Updated: 2005-09-01

OrgAbuseHandle: ABUSE735-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-925-550-3947
OrgAbuseEmail: abuse@intercage.com

OrgNOCHandle: NETWO670-ARIN
OrgNOCName: Network Operations
OrgNOCPhone: +1-925-550-3947
OrgNOCEmail: noc@intercage.com

OrgTechHandle: INE4-ARIN
OrgTechName: IP Network Engineering
OrgTechPhone: +1-925-550-3947
OrgTechEmail: ipeng@intercage.com

Ah, a hosting company. But whaat’s this? Try browsing to www.intercage.com. It’s not there, although the domain name is registered by dire spam enabler GoDaddy.com. The details are..

Registrant:
InterCage, Inc.

1955 Monument Blvd.
Concord, California 94520
United States

Registered through: GoDaddy.com (http://www.godaddy.com)
Domain Name: INTERCAGE.COM
Created on: 29-Aug-04
Expires on: 29-Aug-06
Last Updated on: 29-Aug-05

Administrative Contact:
Kacperski, Emil emilk@intercage.com
InterCage, Inc.
1955 Monument Blvd.
Concord, California 94520
United States
9255503947

Technical Contact:
Kacperski, Emil emilk@intercage.com
InterCage, Inc.
1955 Monument Blvd.
Concord, California 94520
United States
9255503947

Domain servers in listed order:
NS1.INTERCAGE.COM
NS2.INTERCAGE.COM

Meanwhile, the hotel spam is back, too, and it’s still coming from sites around travel-host.net, which of course means this sorry lot:

Moniker Privacy Services TRAVEL-HOST.NET@domainservice.com
Moniker Privacy Services
20 SW 27th Ave.
Suite 201
Pompano Beach
FL
33069
US
Phone: +1.9549848445
Fax: +1.9549699155

That email address gives yet another address in the same place, and another domain name (domainsystems.com) which lives at the first address and gives @domainservice.com as a contact. They seem to be hosted on Rackspace.com, who are usually reasonable…