Geektech/Boxfrog - Repeating persistent ICQ and e-mail spammers! boxfrog.com, geektech.com, itmom.com, free-4you.com, thuggee.com, nosuckaz.net, [63.66.136.0 - 63.66.136.255], [64.214.129.0 - 64.214.129.255], [66.235.130.128 - 66.235.130.255]: Access denied! === My 1st complaint === From: Admin Newsgroups: news.admin.net-abuse.sightings Subject: [ICQ] ICQ spam flood (boxfrog.com)! Followup-To: news.admin.net-abuse.misc Date: Sat, 2 Feb 2002 18:48:24 +0000 (UTC) Organization: VeriMod () Lines: 105 Approved: nanas-sub@cybernothing.org Message-ID: <200202022026.15123@dolphinwave.org> Reply-To: abuse@2002.dolphinwave.org Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-15" Content-Transfer-Encoding: 8bit X-Trace: victor.killfile.org 1012675704 14488 216.43.25.138 (2 Feb 2002 18:48:24 GMT) X-Complaints-To: usenet@killfile.org X-No-Confirm: Yes Processed-By: Bob the NANAS ModBot X-Auth: PGPMoose V1.1 PGP news.admin.net-abuse.sightings iD8DBQE8XDR4v1i8LqUfqQURApJzAJ936erhkudx1+Z7Rw4F5Zw/lTIDXgCdGsTC 9D1r7SOuzG0ZXYxOkSBQ07M= =fjzk X-Group-Homepage: X-Mail-Path: root@unagi.cybernothing.org!mail.dolphinwave.org[212.199.62.69]!localhost[UNTRUSTED]!dolphin@dolphin.ath.cx X-Modbot: Bob the NANAS ModBot X-Organization: Private person X-Original-Cc: admin@boxfrog.com X-Original-Date: Sat, 02 Feb 2002 20:47:38 +0200 X-Original-To: Abuse reports , nanas-sub@cybernothing.org, abuse@gblx.net, abuse@mirabilis.com, postmaster@icq.com, abuse@hotmail.com X-Submissions-To: nanas-sub@cybernothing.org ICQ spam flood, obviously using some spamware designed to spam ICQ (I've got THREE the same spams pretending to be from different ICQ accounts)! Please, terminate spammer's accounts as soon as possible! Thanks! ======= The spammer claims to have several ICQ UINs: 149401688, 149401799, 149401837, but those could be forgeries by the spamware, as well as spammer's e-mail address jenny445@hotmail.co (obviously, the spamware has 19-chars limit for the "mail from" field, of the original jenny445@hotmail.com one). Spamvertised URL: http://www.boxfrog.com/enter.php?affid=jenny www.boxfrog.com [64.214.129.129] =============== Registrant: BoxFrog, Inc. 155 5th Ave S Suite 500 Minneapolis, MN 55401 US Domain Name: BOXFROG.COM Sponsoring Reseller; for Technical Support with respect to this domain contact: Intercosmos Media Group Inc. dba directNIC.com, support@directnic.com 504 679 5173 http://www.directnic.com Administrative Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-807-2043 Technical Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-807-2043 Billing Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-807-2043 Record last updated on 02-Feb-2002. Record expires on 15-Feb-2003. Record Created on 15-Feb-2001. Domain servers in listed order: NS.GEEKTECH.COM 206.132.234.3 NS3.GEEKTECH.COM 64.152.107.11 Archer Communciations IP block [64.214.129.0 - 64.214.129.255] which is in the Global Crossing IP range [64.208.0.0 - 64.215.255.255]. ======= SPAMS WERE ======= URL from Jenny (ICQ UIN# 149401799) Sat Feb 2 10:21:46 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === URL from Jenny (ICQ UIN# 149401688) Sat Feb 2 15:58:03 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === URL from Jenny (ICQ UIN# 149401837) Sat Feb 2 19:04:27 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === My 2nd complaint === Message-Id: <200202031719.34208@2002.dolphinwave.org> To: Abuse reports , nanas-sub@cybernothing.org, abuse@gblx.net, postmaster@geektech.com, abuse@mirabilis.com, postmaster@icq.com Subject: [ICQ] More ICQ spam from the boxfrog.com "affiliate"! Date: Sun, 3 Feb 2002 17:32:39 +0200 X-Mailer: KMail [version 1.3.2] Cc: admin@boxfrog.com, support@directnic.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Status: RO X-Status: S And even more ICQ spam from the same spammer, spamvertising the same web page, using the same "affiliate", despite on my complaint sent yesterday! ICQ UIN# 149487910 Alias: Susan Name: Susan Vera E-mail: Susan@boxfrog.com Spamvertised web page: http://www.boxfrog.com/enter.php?affid=jenny www.boxfrog.com [64.214.129.129] =============== Registrant: BoxFrog, Inc. 155 5th Ave S Suite 500 Minneapolis, MN 55401 US Domain Name: BOXFROG.COM Sponsoring Reseller; for Technical Support with respect to this domain contact: Intercosmos Media Group Inc. dba directNIC.com, support@directnic.com 504 679 5173 http://www.directnic.com Administrative Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-807-2043 Technical Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-807-2043 Billing Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-807-2043 Record last updated on 02-Feb-2002. Record expires on 15-Feb-2003. Record Created on 15-Feb-2001. Domain servers in listed order: NS.GEEKTECH.COM 206.132.234.3 NS3.GEEKTECH.COM 64.152.107.11 Archer Communciations IP block [64.214.129.0 - 64.214.129.255] which is in the Global Crossing IP range [64.208.0.0 - 64.215.255.255]. Upstream: Global Crossing (ArcherCommunciations1.pos1-0-0.ar1.MIN1.gblx.net). Nameserver: GEEKTECH.COM === ICQ spam was === URL from Susan (ICQ UIN# 149487910) Sun Feb 3 17:18:55 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === Previous ICQ spams were === URL from Jenny (ICQ UIN# 149401799) Sat Feb 2 10:21:46 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === URL from Jenny (ICQ UIN# 149401688) Sat Feb 2 15:58:03 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === URL from Jenny (ICQ UIN# 149401837) Sat Feb 2 19:04:27 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === My 3rd complaint (e-mail spam, web/Usenet harvest) === Message-Id: <200203011432.18311@2002.dolphinwave.org> To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, support@directnic.com, abuse@gblx.net, postmaster@geektech.com, abuse-noverbose@uu.net Subject: [email] Long-time ICQ and e-mail spammers (boxfrog.com)! [Fwd: Hey website I have another email address!] Date: Fri, 1 Mar 2002 14:58:14 +0200 X-Mailer: KMail [version 1.3.2] X-Sender: dolphin@localhost X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Loop: dev.null@dolphinwave.org Status: R X-Status: N These boxfrog.com spammers were spamming my ICQ number many times in the past, and now they harvest and spam e-mails from the web pages! They've spammed my role account webmaster@... that is being used on my web pages only! Also spamming attempts against my Usenet only (and already expired) e-mail addres, used for spam complaints in the last year only, and posted to the antispam Usenet newsgroup news.admin.net-abuse.sightings (abuse-2001@... - tagged)! Please, terminate spammers' accounts as soon as possible! Thanks! ======= Refusing to deal with your persistent spammers will lead your whole IP range to be blocked from accessing my mailservers ever again, and this info will be shared with other admins and such public shared blocklists as SPEWS! Spammer: mail.boxfrog.com [63.66.136.24] Mail from: bluefrog8@boxfrog.com Collects bounces to: postmaster@boxfrog.com Spamvertised web page: www.boxfrog.com [64.214.129.129] (complained several times in the past - ICQ spam, still alive)! www.boxfrog.com [64.214.129.129] =============== Registrant: BoxFrog, Inc. 155 5th Ave S Suite 500 Minneapolis, MN 55401 US Domain Name: BOXFROG.COM Administrative Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-807-2043 Technical Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-807-2043 Billing Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-807-2043 Registration Service Provider: Intercosmos Media Group Inc. dba directNIC.com, support@directnic.com 504 679 5173 http://www.directnic.com Record last updated on 28-Feb-2002. Record expires on 15-Feb-2003. Record Created on 15-Feb-2001. Domain servers in listed order: NS.GEEKTECH.COM 206.132.234.3 NS3.GEEKTECH.COM 64.152.107.11 Archer Communciations IP block [64.214.129.0 - 64.214.129.255] which is in the Global Crossing IP range [64.208.0.0 - 64.215.255.255]. Upstream: Global Crossing (ArcherCommunciations1.pos1-0-0.ar1.MIN1.gblx.net). mail.boxfrog.com [63.66.136.24] ================ Geek Tech IP block [63.66.136.0 - 63.66.136.255] which is in the UUNET IP range [63.64.0.0 - 63.127.255.255]. Upstream: Global Crossing (ArcherCommunciations1.pos1-0-0.ar1.MIN1.gblx.net). ---------- Forwarded Message ---------- Return-Path: Received: from www.boxfrog.com (mail.boxfrog.com [63.66.136.24] (may be forged)) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g1RINrM05665 for ; Wed, 27 Feb 2002 20:23:53 +0200 Received: (qmail 97077 invoked by uid 1001); 27 Feb 2002 13:30:41 -0000 Date: 27 Feb 2002 13:30:41 -0000 Message-ID: <20020227133041.97076.qmail@www.boxfrog.com> To: website Subject: Hey website I have another email address! From: Status: R X-Status: N Hey website I just wanted to let you know I got a new email address and you will want to add it to your address book as another way to reach me :) My new address is bluefrog8@boxfrog.com You should get an account there too! They are simple, fast, offer huge email boxes, you can access your account from any PC and best of all they are FREE and ANONYMOUS! Check it out website www.boxfrog.com Free Anonymous Email! Claire Marie ------------------------------------------------------- ======= PREVIOUS SPAMS WERE (ICQ spams, no headers) ======= URL from Jenny (ICQ UIN# 149401799) Sat Feb 2 10:21:46 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === URL from Jenny (ICQ UIN# 149401688) Sat Feb 2 15:58:03 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === URL from Jenny (ICQ UIN# 149401837) Sat Feb 2 19:04:27 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! === URL from Susan (ICQ UIN# 149487910) Sun Feb 3 17:18:55 2002 (GMT+0200) Url: http://www.boxfrog.com/enter.php?affid=jenny Description: Don't feel safe giving out your email? Get an ANONYMOUS email account FREE! For your security and safety! ======= USENET HARVEST SPAMMING ATTEMPTS - SENDMAIL LOGS (GMT+0200) ======= Feb 27 20:23:15 orca sendmail[5662]: g1RIN8M05662: ... User unknown Feb 27 20:23:16 orca sendmail[5662]: g1RIN8M05662: from=, size=0, class=0, nrcpts=0, proto=SMTP, daemon=Daemon0, relay=mail.boxfrog.com [63.66.136.24] (may be forged) === "This is one-time mailing... to remove yourself..." === Path: uni-berlin.de!fu-berlin.de!in.100proofnews.com!tdsnet-transit !newspeer.tds.net!sn-xit-02!sn-xit-04!sn-xit-01!sn-post-01!supernews.com !news.supernews.com!not-for-mail From: Eric Smith Newsgroups: news.admin.net-abuse.email Subject: Classic Disclaimer (ITMOM.COM) Date: Wed, 16 Jul 2003 08:08:51 -0700 Organization: Posted via Supernews, http://www.supernews.com Message-ID: X-Newsreader: Forte Agent 1.93/32.576 English (American) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Complaints-To: abuse@supernews.com Lines: 16 Xref: uni-berlin.de news.admin.net-abuse.email:2027765 I couldn't help this. While I rarely read this far into spam, I got curious on this one from BOXFROG.COM (aka GEEKTECH.COM, aka ITMOM.COM). >This is a one time mailing. You will not receive future emails, however, to comply with U.S. >State and Federal laws, we are compiling a database of all removeal requests. If you would like >your email address to be added to this database, simply reply to this message with REMOVE as >the subject line. >All requests will be processed within 48 hours. >If you would like a reply once your email has been added to the remove database, >please use Notify-Remove as the Subject Line of your reply email. (Ignoring spelling) Okay, if this is a one-time mailing, why would they collect email addresses -- and why would they process these within 48 hours? === Some data (16-Jul-2003) === $ whois boxfrog.com [Querying whois.internic.net] [Redirected to whois.directnic.com] [Querying whois.directnic.com] [whois.directnic.com] <...> Registrant: BoxFrog, Inc. 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-847-1282 Domain Name: BOXFROG.COM Administrative Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-847-1282 Technical Contact: Admin, Server admin@boxfrog.com 155 5th Ave S Suite 500 Minneapolis, MN 55401 US 877-847-1282 Record last updated 07-17-2002 09:20:43 AM Record expires on 02-15-2004 Record created on 02-15-2001 Domain servers in listed order: NS.GEEKTECH.COM 206.132.234.3 NS3.GEEKTECH.COM 64.152.107.11 $ whois GEEKTECH.COM [Querying whois.internic.net] [Redirected to whois.directnic.com] [Querying whois.directnic.com] [whois.directnic.com] <...> Registrant: GeekTech, Inc. 155 5th Ave South Suite 500 Minneapolis, MN 55401 US 612-617-0117 Domain Name: GEEKTECH.COM Administrative Contact: Inc., GeekTech, admin@geektech.com 155 5th Ave South Suite 500 Minneapolis, MN 55401 US 612-617-0117 Technical Contact: Inc., GeekTech, admin@geektech.com 155 5th Ave South Suite 500 Minneapolis, MN 55401 US 612-617-0117 Record last updated 07-17-2002 09:20:43 AM Record expires on 06-26-2004 Record created on 06-27-1996 Domain servers in listed order: NS.GEEKTECH.COM 206.132.234.3 NS3.GEEKTECH.COM 64.152.107.11 $ whois ITMOM.COM [Querying whois.internic.net] [Redirected to whois.opensrs.net] [Querying whois.opensrs.net] [whois.opensrs.net] Registrant: GeekTech Inc. 155 5th Ave South #500 Minneapolis, MN 55401 US Domain name: ITMOM.COM Administrative Contact: Inc., GeekTech hostmaster@geektech.com 155 5th Ave South #500 Minneapolis, MN 55401 US 877-807-2043 Technical Contact: Inc., GeekTech hostmaster@geektech.com 155 5th Ave South #500 Minneapolis, MN 55401 US 877-807-2043 Registration Service Provider: Get Megabits, Inc. dba ITmom.com, domains@itmom.com 612-617-0117 http://www.itmom.com/ This company may be contacted for domain login/passwords, DNS/Nameserver changes, and general domain support questions. Registrar of Record: TUCOWS, INC. Record last updated on 03-Jul-2003. Record expires on 09-Jul-2005. Record Created on 09-Jul-2001. Domain servers in listed order: NS0.ITMOM.COM 66.235.130.131 NS1.ITMOM.COM 66.235.130.132 $ whois free-4you.com [Querying whois.internic.net] [Redirected to whois.directnic.com] [Querying whois.directnic.com] [whois.directnic.com] <...> Registrant: Stiffy Productions, Inc. 155 5th Avenue South Suite 500 Minneapolis, MN 55401 US 877-807-2043 Domain Name: FREE-4YOU.COM Administrative Contact: Administrator, Server admin@geektech.com 155 5th Avenue South Suite 500 Minneapolis, MN 55401 US 877-807-2043 Technical Contact: Administrator, Server admin@geektech.com 155 5th Avenue South Suite 500 Minneapolis, MN 55401 US 877-807-2043 Record last updated 07-17-2002 09:20:43 AM Record expires on 03-15-2004 Record created on 03-15-2002 Domain servers in listed order: NS.GEEKTECH.COM 206.132.234.3 NS3.GEEKTECH.COM 64.152.107.11 $ whois thuggee.com [Querying whois.internic.net] [Redirected to whois.directnic.com] [Querying whois.directnic.com] [whois.directnic.com] <...> Registrant: GeekTech Domain Management 155 5th Ave S SUITE 500 Minneapolis, MN 55401 US 1-877-807-2043 Domain Name: THUGGEE.COM Administrative Contact: Support, Web admin@geektech.com 155 5th Ave S SUITE 500 Minneapolis, MN 55401 US 1-877-807-2043 Technical Contact: Support, Web admin@geektech.com 155 5th Ave S SUITE 500 Minneapolis, MN 55401 US 1-877-807-2043 Record last updated 07-17-2002 09:20:43 AM Record expires on 03-25-2004 Record created on 03-25-2000 Domain servers in listed order: NS.GEEKTECH.COM 206.132.234.3 NS3.GEEKTECH.COM 64.152.107.11 $ whois nosuckaz.net [Querying whois.internic.net] [Redirected to whois.directnic.com] [Querying whois.directnic.com] [whois.directnic.com] <...> Registrant: 4th plateau development 332 3rd ave NE Minneapolis, MN 55350 US 612-309-0069 Domain Name: NOSUCKAZ.NET Administrative Contact: Legler, Garrison flackman@disassociative.net 332 3rd ave NE Minneapolis, MN 55350 US 612-309-0069 Technical Contact: Legler, Garrison flackman@disassociative.net 332 3rd ave NE Minneapolis, MN 55350 US 612-309-0069 Record last updated 07-17-2002 09:20:43 AM Record expires on 05-11-2004 Record created on 05-11-2002 Domain servers in listed order: NS.GEEKTECH.COM 206.132.234.3 NS2.GEEKTECH.COM 206.132.234.227 $ host www.boxfrog.com www.boxfrog.com has address 64.214.129.129 $ host geektech.com geektech.com has address 206.132.234.251 $ host itmom.com itmom.com has address 66.235.130.135 $ host free-4you.com free-4you.com has address 64.214.129.130 $ host thuggee.com thuggee.com has address 63.66.136.100 $ host nosuckaz.net nosuckaz.net has address 206.132.234.232 $ jwhois 64.214.129.129 [Querying whois.arin.net] [whois.arin.net] Global Crossing GBLX-11D (NET-64-212-0-0-1) 64.212.0.0 - 64.215.255.255 Archer Communciations GBX-REQ000000012349 (NET-64-214-129-0-1) 64.214.129.0 - 64.214.129.255 # ARIN WHOIS database, last updated 2003-07-15 22:50 $ jwhois 206.132.234.251 [Querying whois.arin.net] [whois.arin.net] Global Crossing GBLX-9-B (NET-206-132-192-0-1) 206.132.192.0 - 206.132.255.255 Archer Communciations FGC-REQ000000003154 (NET-206-132-234-0-1) 206.132.234.0 - 206.132.234.255 # ARIN WHOIS database, last updated 2003-07-15 22:50 $ jwhois 66.235.130.131 [Querying whois.arin.net] [whois.arin.net] Archer Communications ARCHERCOMMS (NET-66-235-128-0-1) 66.235.128.0 - 66.235.143.255 GetMegabits ITMOM (NET-66-235-130-128-1) 66.235.130.128 - 66.235.130.255 # ARIN WHOIS database, last updated 2003-07-15 22:50 $ host 63.66.136.24 24.136.66.63.in-addr.arpa domain name pointer mail.boxfrog.com. $ host 63.66.136.26 26.136.66.63.in-addr.arpa domain name pointer www.itmom.com. $ host 64.214.129.129 129.129.214.64.in-addr.arpa domain name pointer boxfrog.com. $ host 64.214.129.130 130.129.214.64.in-addr.arpa domain name pointer wildcard.free-4you.com. 130.129.214.64.in-addr.arpa domain name pointer affiliate.free-4you.com. 130.129.214.64.in-addr.arpa domain name pointer free-4you.com. 130.129.214.64.in-addr.arpa domain name pointer www.free-4you.com. 130.129.214.64.in-addr.arpa domain name pointer toml.thuggee.com. 130.129.214.64.in-addr.arpa domain name pointer jimmy.nosuckaz.net. 130.129.214.64.in-addr.arpa domain name pointer mail3.boxfrog.com. 130.129.214.64.in-addr.arpa domain name pointer nfs1frog.boxfrog.com. $ host 206.132.234.251 251.234.132.206.in-addr.arpa domain name pointer geektech.com. 251.234.132.206.in-addr.arpa domain name pointer exchange.geektech.com. $ host 206.132.234.250 ;; Truncated, retrying in TCP mode. 250.234.132.206.in-addr.arpa domain name pointer sweetvoyeur.com. 250.234.132.206.in-addr.arpa domain name pointer sweetvoyeur.net. 250.234.132.206.in-addr.arpa domain name pointer amateurhoneys.net. 250.234.132.206.in-addr.arpa domain name pointer naughtymaiden.com. 250.234.132.206.in-addr.arpa domain name pointer www.avssite.com. 250.234.132.206.in-addr.arpa domain name pointer www.xxxfind.net. 250.234.132.206.in-addr.arpa domain name pointer www.bigchics.net. 250.234.132.206.in-addr.arpa domain name pointer www.fuckhost.net. 250.234.132.206.in-addr.arpa domain name pointer www.moreporno.net. 250.234.132.206.in-addr.arpa domain name pointer www.free-adult.net. 250.234.132.206.in-addr.arpa domain name pointer www.mixedfucks.com. 250.234.132.206.in-addr.arpa domain name pointer www.mixedfucks.net. 250.234.132.206.in-addr.arpa domain name pointer www.sweet-teen.net. 250.234.132.206.in-addr.arpa domain name pointer www.eolservices.com. 250.234.132.206.in-addr.arpa domain name pointer www.eolservices.net. 250.234.132.206.in-addr.arpa domain name pointer www.sweet-ebony.com. 250.234.132.206.in-addr.arpa domain name pointer www.sweet-links.com. 250.234.132.206.in-addr.arpa domain name pointer www.sweetvoyeur.com. 250.234.132.206.in-addr.arpa domain name pointer www.sweetvoyeur.net. 250.234.132.206.in-addr.arpa domain name pointer www.amateurhoneys.net. 250.234.132.206.in-addr.arpa domain name pointer www.naughtymaiden.com. 250.234.132.206.in-addr.arpa domain name pointer avssite.com. 250.234.132.206.in-addr.arpa domain name pointer xxxfind.net. 250.234.132.206.in-addr.arpa domain name pointer bigchics.net. 250.234.132.206.in-addr.arpa domain name pointer free-adult.net. 250.234.132.206.in-addr.arpa domain name pointer mixedfucks.com. 250.234.132.206.in-addr.arpa domain name pointer mixedfucks.net. 250.234.132.206.in-addr.arpa domain name pointer sweet-teen.net. 250.234.132.206.in-addr.arpa domain name pointer sweet-ebony.com. 250.234.132.206.in-addr.arpa domain name pointer sweet-links.com.