www.paladium.net
www.paladium.net service markSM

Welcome

BURGAS, BULGARIA: ALEX HERGER'S AUTOMATIC TRANSFER PATTERN

This legal, non-criminal page has publicly available information which may include home addresses. We don't know if anyone named on this page is a government officer.

2008mar11

  1. introduction to automatic transfer

    Many domains PPO (privacyprotect.org) has owned fit patterns. This page is about automatic transfer pattern: automatic transfer of websurfer to a different domain which has erotic content. A beneficiary of these transfers seems to be friendfinder.com. Details of automatic transfer have changed and may continue to change. On this page, we describe two automatic transfer patterns: 1 and 2. According to whois and outher sources of information, Bulgaria's Alex Herger seems to own and manage domains involved in the automatic transfer pattern.

    On a different page, we discuss password hack pattern, which resembles automatic transfer pattern in some ways.

  2. automatic transfer pattern 1
    2008may6

    1. introduction to pattern 1

      1. background

        We describe pattern 1 as we observed it on 6 May 2008.

        A search engine links to webpages. For each link listed by the search engine, a URL appears. This is the originating domain. If a websurfer clicks this link, he will automatically be transferred to a different domain, the destination domain. For example, originating domain www-apple-r.8wersi.com/ transfers websurfers to a different domain, its destination domain youtube-hoster.com/porn/. We clicked a photograph in the top row of photographs on the destination page. That lead to a new window, which displayed a third domain:

        http://adultfriendfinder.com/search/g825838-pct?18PG=1&ip=auto&max_age=35&min_age=18&show_city=1&lang=german&picid=2ZCLMTxGoIEiHnXsEIRMAADunAADsEwAA&hr=aHR0cDovL3lvdXR1YmUtaG9zdGVyLmNvbS9wb3JuLw==

      2. adultfriendfinder.com

        According to whois and other sources of information, domain adultfriendfinder.com:

        
        Registrant:
        Various Inc. (now owned by Penthouse)
        445 Sherman Ave
        Suite T
        Palo Alto, CA 94306-1828
        US
        [two doors from the Olive Garden Italian Restaurant at the corner of El Camino Real and Sherman Ave, near the intersection of El Camino Real and Oregon Expressway-Page Mill Road]
        
        Registrar: DOTSTER
        Domain Name: ADULTFRIENDFINDER.COM
        Created on: 29-NOV-97
        Expires on: 28-NOV-11
        Last Updated on: 06-MAR-08
        
        Administrative, Technical Contact:
        Conru, Andrew
        FriendFinder Inc.
        445 Sherman Avenue, Suite T.
        Palo Alto, CA 94306
        US
        650-324-4867
        650-324-9379
        
        Domain servers in listed order:
        PDNS1.ULTRADNS.NET
        PDNS2.ULTRADNS.NET
        PDNS3.ULTRADNS.ORG
        PDNS4.ULTRADNS.ORG
        PDNS5.ULTRADNS.INFO
        PDNS6.ULTRADNS.CO.UK 
        
        IP-Adresse 64.56.205.72
        
        

        Name server domain ultradns.net is owned by:

        Registrant:
        NeuStar, Inc.
        46000 Center Oak Plaza
        Sterling, Virginia 20166
        United States
        
        By the way, Adolescent Substance Abuse Treatment Office is in suite J at 445 Sherman Avenue, the same building as Various Inc., the owner of adultfriendfinder.com. Various seems to occupy most of the building, which architecturally resembles a motel. For example, Various Inc. has an office in suite U:
        Various, Inc.
        445 Sherman Ave Ste U  
        Palo Alto, California  USA  94306-1828
        (650) 324-4867
        description:	Newspapers-Publishing/Printing
        www.gradfinder.com
        
        related domains:
        Friendfinder.com
        Passion.com
        AsiaFriendfinder.com
        Amigos.com
        GermanFriendfinder.com
        KoreanFriendfinder.com
        FrenchFriendfinder.com
        FilipinoFriendfinder.com
        IndianFriendfinder.com
        ItalianFriendfinder.com
        BigChurch.com
        JewishFriendfinder.com
        SeniorFriendfinder.com
        

        We got information about approximately 75 ADULTFRIENDFINDER.COM subdomains at Netcraft; for example:

        Site First seen Netblock OS 1. profile.adultfriendfinder.com March 2000 Various, Inc. unknown 2. search.adultfriendfinder.com August 2002 Various, Inc. unknown 3. chat.adultfriendfinder.com August 1999 Various, Inc. unknown 4. www.adultfriendfinder.com January 1998 Various, Inc. Linux 5. tgp.adultfriendfinder.com August 2005 Various, Inc. unknown 6. photos.adultfriendfinder.com March 2000 ADSL endpoints NAT conections only Linux 7. guest.adultfriendfinder.com August 1999 Various, Inc. Linux 8. livecam.adultfriendfinder.com July 2005 Level 3 Communications, Inc. unknown 9. iframe.adultfriendfinder.com August 2005 Level 3 Communications, Inc. unknown 10. banners.adultfriendfinder.com November 2001 Various, Inc. unknown 11. swingers.adultfriendfinder.com November 2003 Various, Inc. Linux 12. page.adultfriendfinder.com September 2003 Various, Inc. unknown 13. asian.adultfriendfinder.com November 2003 Various, Inc. Linux 14. spell.adultfriendfinder.com August 2005 Various, Inc. Linux 15. german.adultfriendfinder.com December 2005 Various, Inc. Linux 16. graphics.adultfriendfinder.com September 2001 Akamai Technologies Linux 17. lesbian.adultfriendfinder.com August 2005 Various, Inc. Linux 18. ww.adultfriendfinder.com October 2005 Various, Inc. Linux 19. cover9.adultfriendfinder.com August 2005 Various, Inc. Linux 20. interracial.adultfriendfinder.com July 2005 Various, Inc. Solaris 8

        Passiona.com, which has had IP address 209.185.12.52 and has been in German, also seems to be in suite T.

        Adultfriendfinder.com, the third domain above, seems to be be in suite T:

        Registrant:
        Friend Finder Network
        445 Sherman Ave
        Suite T
        Palo Alto, CA 94306
        US
        
        Registrar: DOTSTER
        Domain Name: FRIENDFINDER.COM
        Created on: 05-MAR-98
        Expires on: 04-MAR-10
        Last Updated on: 11-APR-08
        
        Administrative, Technical Contact:
        ,
        Friend Finder Network
        445 Sherman Ave
        Suite T
        Palo Alto, CA 94306
        US
        650-847-3100
        
        Domain servers in listed order:
        PDNS3.ULTRADNS.ORG
        PDNS2.ULTRADNS.NET
        PDNS1.ULTRADNS.NET
        PDNS6.ULTRADNS.CO.UK
        PDNS5.ULTRADNS.INFO
        PDNS4.ULTRADNS.ORG 
        
        Server Type:  	 Apache
        IP Address: 	64.56.205.72
        IP Location 	United States - California - Palo Alto - Various Inc
        Name Server: 	DNS1.FRIENDFINDERINC.COM (has 446 domains)
        

        Notice that the first line of the administrative contact of domain friendfinder.com is a comma (",").

        Perhaps by coincidence on 14 May 2008, this trait (administartive contact of domain begins with a comma) also happens to be true of the domains DNRNETWORK21.COM (admin contact is ", Freddie Perez") and turkeyhotels4u.com (admin contact is ", Venedik Istanbul Hotel"), which are mentioned elsewhere in this website.

        Friendfinder.com is in English and is not pornographic. According to whois on 7 May 2008, the address is in suite T. Friendfidner.com and adultfriendfinder.com both are in suite T according to whois.

        Domain secure.adultfriendfinder.com is in German with other languages possibly available if one clicks the right word, and is erotic.

        Subdomain swingers.adultfriendfinders.com is in English.

        Domain www.lesbianadultfriendfinders.com is in German:

        Registrant: Texas International Property Associates - NA NA 4041 W. Wheatland Suite 156-417 Dallas, TX, 75237 US Registered Through: BudgetNames.com Domain Name: lesbianadultfriendfinders.com Created: 2005-10-28 10:06:44 Expires: 2008-10-28 10:06:44 Administrative Contact: Texas International Property Associates - NA NA 4041 W. Wheatland Suite 156-417 Dallas, TX, 75237 US 214-632-7290

        According to Alacra Store website on 7 May 2008, Friendfinder, Inc., is in suite C:

        
        Friendfinder, Inc.
        445 Sherman Avenue, Suite C
        Palo Alto, CA 94306
        United States
        Tel: 	1/650-324-4867
        URL: 	http://friendfinder.com
        Primary Industry:
        Online Services
        +  SIC Industry Codes:
        4899 - 	Communications Services, NEC
        7375 - 	Information Retrieval Services
        7379 - 	Computer Related Services, NEC
        	
        
        In summary of our example above, we experienced an originating domain listed in the search engine link, a destination domain which we arrived at, and a third domain. The originating and destination domains have a Dutch owner according to whois. The third domain has a Californian owner according to whois. The third domain's homepage was in German and displayed erotic photographs of women, the captions of which imply that the women are in Germany; for example:
        "anne616  22 W
        Hamburg, Deutschland".
        

        The originating domain was in English. The destination domain was in German and English. The third domain was in German. Photographs' captions in the third domain imply that the photographed women are in Germany. Therefore, it's interesting that, according to whois, none of the owners or addresses are German.

      3. Andrew Bryan "the Professor" Conru

        Andrew Conru is the administrative contact of ADULTFRIENDFINDER.COM, the third domain (third domain in automatic transfer pattern 1: originating domain, destination domain, third domain). He used to own 90 percent of Various Inc. Penthouse (PMGI) bought Various. Our website has at least one page for PMGI and its affiliates.

    2. discussion of automatic transfer pattern 1

      The destination domains' homepages are entitled "Wild Girls" and are pornographic. They have still photographs and videos with erotic content. As nearly as we can tell, a color photograph may show, for example: a penis, a woman's face, and what may be semen on her facre or dripping from it. Some of the destination page is in German and some in English. Some photographs' captions imply in German that the women are in Germany.

      In destination domains' homepages, clicking a photograph on the right side of the page leads to a download challenge: an opportunity to download software which opportunity cannot easily be avoided. For example, one is told by a dialongue box to download ("Please donwload ....") but the box has no real alternative to clicking "OK". There is no alternative such as "No". In some dialogue boxes, the box remains on the screen unless one clicks "OK". In other dialogue boxes, there is a pseudo-alternative allowing the websurfer to cancel, but clicking the cancel pseudo-alternative does not really cancel, because a new dialogue box immediately appears. Furthermore, the "quit" function of the browser was disabled. To avoid downloading, we physically disconnected from the Internet by unplugging a wire from a socket, then clicked "OK" to download while the copmputer was offline.

      The originating websites often have words (in the text, URL, and title of the originating pages) which seem to have little or no connection to the content of the destination websites (for example, the words: yahoo, apple, login, youtube). That kind of word is also present in some of the URLs of the destination domains. The word "westfieldstate" often appears in the text of originating pages. We vaguely think that there's a Massachusetts college with a name like that.

    3. list of some originating domains with patttern 1. 2008may6

      Following this sentence are names of some originating domains which seem to have automatic transfer pattern 1.

      1. www-apple-r.8wersi.com/ - 29.7k - Published: 3 days ago - cached - archive [Notice "apple" in subdomain.]

      2. www-caddopa.gorits.com/ - 28.2k - Published: 5 days ago - cached - archive

      3. www-corning.ipogas.com/ - 27.6k - Published: 5 days ago - cached - archive [Notice "corning" in subdomain.]

      4. www-discove259.tsefeg.com/ - 29.7k - Published: 3 days ago - cached - archive

      5. www-empired.ipogas.com/ - 28.8k - Published: 5 days ago - cached Ð archive

      6. www-europar.zoppal.com/ - 29.2k - Published: 3 days ago - cached - archive

      7. www-ezbuydr.qoters.com/ - 28.8k - Published: 5 days ago - cached - archive

      8. www-fotoart.iratop.com/ - 29.1k - Published: 1 day ago - cached - archive

      9. www-fwp-gov.qippok.com/ - 27.5k - Published: 5 days ago - cached - archive

      10. www-gtep-no.qoters.com/ - 28.6k - Published: 5 days ago - cached - archive

      11. www-helicop.iratop.com/ - 29.1k - Published: 3 days ago - cached - archive

      12. www-innerea.ipogas.com/ - 27.9k - Published: 5 days ago - cached - archive

      13. www-kiacars.tsefeg.com/ - 27.8k - Published: 3 days ago - cached - archive

      14. www-meb-oks.gorits.com/ - 28.9k - Published: 5 days ago - cached - archive

      15. www-montcla.pottih.com/ - 29.1k - Published: 5 days ago - cached - archive

      16. www-pocet-p.qoters.com/ - 27.6k - Published: 5 days ago - cached - archive

      17. www-r-l-car.qippok.com/ - 28.3k - Published: 5 days ago - cached - archive

      18. www-real-ma.retsif.com/ - 27.2k - Published: 11 days ago - cached - archive

      19. www-she-mal.weritu.com/ - 27.3k - Published: 7 days ago - cached - archive

      20. www-stores-.iratop.com/ - 28.3k - Published: 3 days ago - cached - archive

      21. www-suzanne.gorits.com/ - 29.0k - Published: 5 days ago - cached - archive

      22. www-unitedd.farugi.com/ - 28.0k - Published: 1 month ago - cached - archive

      23. www-vvisons.qippok.com/ - 27.5k - Published: 5 days ago - cached - archive

      24. www-wallmar.gorits.com/ - 28.7k - Published: 5 days ago - cached - archive

      25. www-wrestle.vihota.com/ - 29.1k - Published: 7 days ago - cached - archive

      26. wwwcontinen.qoters.com/ - 28.6k - Published: 5 days ago - cached - archive

    4. search engine links

      Follwing this sentence are examples of search engine links to pages which seem to have pattern 1 automatic transfer. These links were copied from gigablast.com search engine on 6 May 2008. The examples below are originating URLs, not destination URLs or a third URL.

        On 7 July 2008, we moved the links to a special page for examples of Alex Herger's links. The links are not on this page.

    5. 445 Sherman, Palo Alto: address of Various Inc.

      APN: 124-33-043; 445 SHERMAN AV, PALO ALTO. Billing address: 2600 EL CAMINO REAL, STE. 100, PALO ALTO CA 94306-1705.

      Document No. 	12081293 	
      Transfer Date 	09 / 01 / 1993
      Document Type 	GRANT DEED
       
      assessed vaue as of 30 June 2008
      (copied from county assessor website on 11 May 2008)   	
      $2,639,787
      

    6. PMGI and Penthouse

      PET Capital Partners owns PMGI (Penthouse Media Group Inc., which publishes porn magazines), which owns Various Inc. (which operates websites), which owns FastCupid Inc. PMGI used to be named General Media Inc. (GMI). PMGI's headquarters are in Manhattan, New York. This website has at least one webpage about PMGI and a few of its affiliates, which is linked to from our New York State index page, which is linked to from our home page. On the PMGI page, we discuss FTC and SEC court cases, officers' home addresses, and other topics.


  3. automatic transfer pattern 2
    1. introduction to automatic transfer pattern two

      The description of automatic pattern 2 was written before May 2008. Carefully verify all statements in this website, not just in the material below.

      Some PPO domains and subdomains (roughly a few hundred, we guess) have a pattern which we describe below as well as we know it. Each domain has subdomains. The names of the subdomains, and words listed in webpages of the subdomains, cause those pages to be listed by a search engine in response to a websurfer's request. When the websurfer clicks the search engine link, he reaches the webpage but is is automatically transferred by that page to a different domain with pornography, the destination domain.

    2. originating domains
      1. The domain was created in early 2008.
      2. The domain's Web content includes a list of words many of which may be parts of URLs. Some of those words appear relatively frequently; for example, on 19 March 2008, "amazongames" and "westfieldstate". Some of the words are parts of the names of possibly unrelated businesses.
      3. The domain's home page title is a list of words some of which may be parts of URLs; for example, as far as we know, on about 19 March 2008, "Colepharel sbcglobal net comcast net aol com usa com" was the title, or at least part of the title, of the home page of domain www-westfie.mastr3.com/. By the way, note that subdomain "www-westfie" resembles "westfieldstate", a word frequently found in the content of the homepage.
      4. The domain has a subdomain.
      5. The originating domain's home page has, in its upper left, a link o another website or notice of an opportunity to advertise.

        On 21 March 2008, that was no longer a trait of pages we observed.

      6. The domain's website automatically forwards Web surfers to another domain's website.
      7. The destination domain (the domain to which surfers are automatically forwarded) has much sexual content. As far as we can tell, the Web forwarding is not done as the DNS level. The forwarding seems, as well as we can tell, to be done at the website. Maybe the forwarding is done by a meta tag or script.
      8. In summary, there is an originating domain and a destination domain to which surfers are automatically forwarded.
      9. Originating pages have, on 23 March 2008, two formats: colored text on black background, or black text on white background with a photo of cherries on top of page. An example of a white-background originating domain is http://www-cn-gov-.lihach.com/. At the bottom of that page, there are linksone can click. One link (www videos de michel viet culiando) connects to an originating page (http://www-very-yo802.lihach.com/) much like the one it came from. Another link connects to a page with much sexual content.

    3. example of a black background, originating page

      An example of a black background page (this example may no longer be in effect) is http://www-bigazzb.lastsi.com:

      1. has (when this entry was written, not necessarily when you see it) a link on the upper left of its home page to a German-language gambling site (for example, "... Alle Rechte vorbehalten. Webmasters, vergesst nicht, unserem Casino Affiliate Program beizutreten! ..."), http://www.goldenpalace.com/de/euro/global/_v3/lpv2_casino.php?member=adbrite0108&profile=adtexde2&banner=&t=1&creferer=&referer=http%3a%2f%2fwww%2ehrmovie%2ecom%2fgethtml%2ephp&lang=de. Information about this domain's owner, which we refer to as USI, follows.

        Registrant:
        Universal Spheres Inc [USI]
        ATTN: GOLDENPALACE.COM
        c/o Network Solutions
        P.O. Box 447
        Herndon, VA. 20172-0447
        
        Domain Name: GOLDENPALACE.COM
        
        Domain servers in listed order:
        NS.BAMBLES.COM 200.124.141.76
        NS1.BAMBLES.COM 200.115.159.111
        

        Maybe the casino's CEO has been Richard Rowe. There was, in the WIPO Arbitration and Mediation Center, an ADMINISTRATIVE PANEL DECISION in the case of Universal Spheres, Inc. [USI], Golden Palace Limited v. Jacopo Di Trani, case D2006-1302. In that case, the Complainants were USI (Universal Spheres, Inc.) and Golden Palace Limited, both of Antigua and Barbuda, represented by Weston, Garrou, DeWitt & Walters, of the United States of America.

      2. forwards to another domain, http://cumimo.com, which, on 12 March 2008, had a mostly German language website (for example, "Aktuelle Mitgliederfotos. Andere Daten dienen nur einem illustrativen Zweck. Die weltweit umfangreichsten Seiten mit Kontaktanzeigen ... Sex und Swinger, mit mehr als 20.000.000 Mitgliedern.") with sexually explicit photographs the subtitles of which suggest that the photographed women are in Germany). Info follows about this domain, owned by someone with a possibly Slavic name ("Olga"), an Algerian address, and a telephone number we can't place.

        Registration Service Provided By: VIVIDS MEDIA GMBH
        Contact: +49.3094413291 Germany
        
        Domain Name: CUMIMO.COM
        
        Registrant:
        Uya
        Olga
        Kiruer 73-274
        Juerk
        0,73683
        DZ [Algeria]
        [We could not find this Algerian address on a map.]
        Tel. +83.7472846
        [We don't know the country which has telephone country code 83.
        82 is KR.  84 is VN. DZ is 213.]
        
        Creation Date: 06-Oct-2007
        Expiration Date: 06-Oct-2008
        
        Domain servers in listed order:
        ns2.cumimo.com
        ns1.cumimo.com
        

      3. Information obtained on 12 March 2008 about lastsi.com, the original domain, follows.

        lastsi.com"
        Domainname:
        lastsi.com
        IP-Adresse:
        69.46.19.53
        	
        IP-Location:
        - US - United States
         
        Registration Service Provided By: ESTDOMAINS INC
        Contact: +1.3027224217
        Website: http://www.estdomains.com
        
        Domain Name: LASTSI.COM
        
        Registrant:
        PrivacyProtect.org
        Domain Admin
        P.O. Box 97
        All Postal Mails Rejected, visit Privacyprotect.org
        Moergestel
        null,5066 ZH
        NL
        Tel. +45.36946676
        
        Creation Date: 21-Feb-2008
        Expiration Date: 21-Feb-2009
        
        Domain servers in listed order:
        ns2.lastsi.com
        ns1.lastsi.com
        
        
        Status:ACTIVE
        
        

    4. example of a white background originating page: myspace-com961.asagar.com/
      23 March 2008

      The home page of this subdomain seems to have included, when it was up, "... child porn ...". This was a 17.3k file.

      As far as we know, this domain was first published in about February 2008. The title of the page is "Metlife com dentist ...". The content of the page includes "... www westfieldstate ..." ("westfieldstate" is on many pages of many domains of the group of domains described in this article) and "... www free child porn videos com ...".

      By the way, below is some information from gigablast.com search engine provided on 23 March 2008. The information is in response to a request for links to pages with both "westfieldstate" and "child". The websites mentioned below are not necessarily PPO websites although many of them seem to be.

      On 7 July 2008, we moved the links to a special page for examples of Alex Herger's links. The links are not on this page.

    5. list of some black background, originating pages on 23 March 2008

      http://cumimo.com/)
      http://www-bubajun.masits.com/
      http://lan-com-cl.beloba.com/
      http://www-caldrab.peesda.com/ title "www caldrabandb com, www at twhitepages com, www newenglandaquarium com, www charlestonleather com, www l megafm com, www navsource com, www kvetinypelikan cz 2 1, www omakwa com, www volunteer wa, www shutterfly com pro garcia proaction"
      http://www-pakista636.passaf.com/ title "www pakistani woman sexy photo com pk, www pakistani women born baby in home, www pakistani women com, www pakistani women punjabi images, www pakistani women s sex gallery, www pakistani world sex com, www pakistani xx sex school and college, www pakistani xxx, www pakistani xxx com, www pakistani xxx movies com"
      http://www-freebin.kiska5.com/
      http://amishlife-c.peesda.com/
      http://www-ebonypl.ikasab.com/
      http://www-lucha-c.masits.com/
      http://www-labrado.peesda.com/
      http://www-iowasta.beloba.com/
      

    6. list of some white background pages on 23 March 2008
      1. standard pattern: with photo cf cherries at top

        http://www-bubajun.lihach.com/
        http://www-thebang.jumtan.com/ title "www thebangbros com, all yes www 8teenboys com, www jebacina com 2 3, www americans army com, www xplicitxxx co uk, www florencealabama com, www walmart com shop, www manoranjani com, www pfeifenstudio de, dataset vb net excel"
        http://www-paintco.jumtan.com/ title "www paintcolors com, www philadelphia pa gov, www nhshighland, www ebonyplayas, www smokymountaincabins com, www elmercurio com ch, www outlook education tas gov, www registration brita net lang en, www dslspeed com, www nurisystem com"
        http://www-tarleto.lihach.com/
        http://www-windber.polasvaka.com/
        http://www-georgia777.lihach.com/
        http://myspace-com116.polasvaka.com/
        http://www-treasur.lihach.com/
        http://www-roverca.lihach.com/
        http://www-parents.polasvaka.com/
        http://www-qxl-uk.lihach.com/
        http://www-merrell.lihach.com/
        http://www-rehabs-.lihach.com/
        http://www-brussel.jumtan.com/
        http://www-tpporn-.tasnin.com/
        

      2. white background but not standard pattern

        http://http-pepwat.ogofas.com/ This domain seems to be mostly standard pattern with the chief exception that there is no picture of cherries at the top of the page on 23 March 2008.

        
        Domainname: ogofas.com
        IP-Adresse: 66.232.127.130
        	
        IP-Location:
        - US - United States
          
        Registration Service Provided By: ESTDOMAINS INC
        Contact: +1.3027224217
        Website: http://www.estdomains.com
        
        Domain Name: OGOFAS.COM
         
        Registrant:
        PrivacyProtect.org
        Domain Admin
        P.O. Box 97
        All Postal Mails Rejected, visit Privacyprotect.org
        Moergestel
        null,5066 ZH
        NL
        Tel. +45.36946676
        
        Creation Date: 27-Feb-2008
        Expiration Date: 27-Feb-2009
        
        Domain servers in listed order:
        ns2.ogofas.com
        ns1.ogofas.com
        
        66.232.127.130
        
        IP Address 66.232.127.130  has hostname mx130.interestpeak.com
        
        Ip Address 66.232.127.130 is found in United States
        IP Address 66.232.127.130 resolved to hostname mx130.interestpeak.com
        Guessed City is Tampa. 
        
        Reverse IP: 	11 other sites hosted on this server.
        
        Whois information is not always perfect.
        Read this website skeptically.
        Whois info about interestpeak.com
        Registration Service Provided By: NameCheap.com
        Contact: 
        Visit: http://www.namecheap.com/
        [NameCheap, which has been associated with WhoisGuard,
        is mentioned elsewhere in this website.]
        
        Domain name: interestpeak.com
        
        Registrant Contact:
           
           YellowDogMail
           Brian Appel () [sic]
           +1.443 695-3442
                 
           Fax: +1.5555555555 [?]
        
           3813 Belmont Dr.
           Jarrettsville, MD 21084 [Harford County]
           US
        
        
        Name Servers:
           ns1.benefitbuyers.com
           ns2.benefitbuyers.com
           
        Creation date: 06 Jul 2007 23:10:42
        [a little before midnight]
        Expiration date: 06 Jul 2008 23:10:42
        
        
        Appel's Maryland address is:
        parcel 04 - 001443
        Owner Name:	APPEL ....
        	Use:	RESIDENTIAL
        Principal Residence:	YES
        Mailing Address:	
          3813 BELMONT DRIVE
          JARRETTSVILLE MD 21084
          Deed Reference:	1) / 882/ 450
        
        

  4. ownership of domains 2008jul6

    1. introduction

      Automatic transfer patterns 1 and 2 are described in the PPO section because they were observed only in domains owned by PPO. On 6 July 2008, we obseerved non-PPO ownership. Originating domain www-javacaf.otivom.com leads transfer to destination youtuberz.com. That originating domain otivom.com has:

      Domain Name:  otivom.com
      Registrant (owner):
      Howard & Co
      Howard (mastermail@texas.usa.com)
      111 N Houston Ste 210
      Fort Worth
      Texas,76102
      US
      Tel. +817.3323111
      
      Creation Date: 08-May-2008
      Expiration Date: 08-May-2009
      
      Server Type:  	 Apache/1.3.39 (Unix) mod_ssl/2.8.30
      	OpenSSL/0.9.7a PHP/4.4.7 mod_perl/1.29
      		FrontPage/5.0.2.2510
      IP Address: 	66.232.109.13 
      IP Location 	United States - Florida - Tampa - Noc4hosts Inc
      	Noc4hosts also is mentioned on our password hack pattern page.
      
      There are about 38 domains hosted at that IP address.
      According to domaintools.com, a few are:
         1. Artsag.com
         2. Basaii.com
         3. Bituka.com
      
      ...
      
      Below is some information about ISP noc4hosts.com.
      
      Server Type:  	Microsoft-IIS/5.0
      IP Address: 	206.51.232.5
      IP Location 	United States - New York - New York - Noc4hosts Inc
      Dedicated Hosting: 	noc4hosts.com is hosted on a dedicated server.
      Registrant:
      NOC 4 HOSTS
         400 N Tampa St
         #1025
         Tampa, FL 33602
         US
      

      The above information pertains to originating domain www-javacaf.otivom.com/ The information below pertains to destination youtuberz.com.

      Youtuberz.com
      IP Address: 	66.232.113.44 
      IP Location 	United States - Florida - Tampa - Noc4hosts Inc
      Reverse IP: 	3 other sites hosted on this server.
      Domain Name: YOUTUBERZ.COM 
      
      Registrant (owner):
          Alex
          Herger        (jumerk@gmail.com)
          Niumaja 26-471 [We don't know of anyone on Niumaja.]
          Burgas [Bulgaria's biggest seaport, also spelled "Bourgas"]
          Burgas,8034
          BG  [Bulgaria]
          Tel. (acording to former URL www.bol.bg/services/phone.html, Bulgarian white pages telephone directory) +056.83672638461 
      
      Creation Date: 30-Jun-2008  
      Expiration Date: 30-Jun-2009
      

      We guess that Herger is paid money as the result of purchases by Web surfers referred by him. By the way, "Alex Herger" does not sound Bulgarian to us.

      The text string "herger" happens to be a user name in an email address of a Bulgarian top-level domain, according to a publication of a Bulgarian NGO. That herger may be unrelated to this webpage's Alex Herger..

    2. DamageX.com 2008jul6

      According to whois, Alex Herger owns the destination domain youtuberz.com. He has been written about in a Web forum entitled "sick of these ... scraper/spammers!!!" at DamageX.com. A description of a post about Herger (for example, date of posting), as distinguished from the contents of that post, follows.

      01-27-2008, 01:20 PM, 
      post #9 in a discussion forum on the Web 
      Spacedog [author of post]
      

      Edied excerpts from Spacedog's post follow.

      this spamming ... with all the .cn [Swiss] subdomains I think is 
      also the owner of
      dirtyteenpictures.com ,CIVUHE.COM .
      
      His CECash affiliate ID is 876591
      His Topbucks affiliate id is 22781
      His AdultFriendFinder id is g825838
      	[AdultFriendFinder, which the FTC accused of 
      	illegal Internet marketing, is indirectly owned by PMGI,
      	which we discuss on our PMGI Penthouse page.]
      
      On alot of his spam scraper pages are redirects 
      to various domains all showing Wild & Sexy Girls as 
      the title, always showing same page & content on these domains..
      
      If you visit any of his scraper subdomains directly or 
      via google cache you get sent to various autoinstalls, 
      drive cleaners, popup hells.. when visiting via proxy 
      you get the actual scape page full of thousands of 
      spam links, scraped content & lists of thousands of 
      urls, domain names, pornsite titles, etc.. even mainstream shit
      
      He also owns tymeri.com under whois
      Alex Herger
      Niumaja 26-471
      Burgas
      Burgas,8034
      BG
      
      I believe he also owns these
      Besateg.com
      Bivydur.com
      Cacocyx.com
      

    3. Spacequad AntiSpam Services 2008jul7

      There is a Web forum post about Alex Herger, "Morons amoung us (Moron Spammer)" Thursday, February 21 2008 @ 06:30 AM EST. Edited excerpts follow.

      Domain Name: ZOFARL.COM
      Registrant:
          Alex
          Herger        (jumerk@gmail.com)
          Niumaja 26-471
          Burgas
          Burgas,8034
          BG
          Tel. +056.83672638461
          
      ** 4mkat4.com - 66.232.109.8 - estdomains inc - hivelocity.net
      ** aalita.com - 66.232.109.12 - estdomains inc - hivelocity.net
      ** ababd1.com - 66.232.109.12 - estdomains inc - hivelocity.net
      ** abasti.com - 69.50.188.5 - estdomains inc - intercage, inc.
      ** abbama.com - 66.232.109.9 - estdomains inc - hivelocity.net
      ** aftworld.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** aidlov.com - 66.232.97.19 - estdomains inc - hivelocity.net
      ** alsdf.com - 66.232.113.57 - estdomains inc - hivelocity.net
      ** amstre.com - 66.232.127.128 - estdomains inc - hivelocity.net
      ** aqm-df.com - 66.232.127.128 - estdomains inc - hivelocity.net
      ** ass-sa.com - 66.232.109.11 - estdomains inc - hivelocity.net
      ** astmiv.com - 69.46.19.53 - estdomains inc - hivelocity.net
      ** astsam.com - 69.46.19.58 - estdomains inc - hivelocity.net
      ** awerda.com - 66.232.109.10 - estdomains inc - hivelocity.net
      ** bamima.com - 66.232.120.110 - estdomains inc - hivelocity.net
      ** baquma.com - 66.232.109.13 - estdomains inc - hivelocity.net
      ** basteg.com - 69.46.19.56 - estdomains inc - hivelocity.net
      ** bastre.com - 66.232.120.110 - estdomains inc - hivelocity.net
      ** bastru.com - 66.232.97.15 - estdomains inc - hivelocity.net
      ** basuma.com - 66.232.127.129 - estdomains inc - hivelocity.net
      ** bestaftor.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** bestorlean.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** botast.com - 66.232.109.11 - estdomains inc - hivelocity.net
      ** bs21sa.com - 69.46.19.57 - estdomains inc - hivelocity.net
      ** buldah.com - 66.232.109.11 - estdomains inc - hivelocity.net
      ** bumins.com - 66.232.127.129 - estdomains inc - hivelocity.net
      ** caeserch.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** cafasc.com - 66.232.127.131 - estdomains inc - hivelocity.net
      ** cemast.com - 66.232.127.130 - estdomains inc - hivelocity.net
      ** ceremi.com - 66.232.109.8 - estdomains inc - hivelocity.net
      ** cetuna.com - 66.232.109.13 - estdomains inc - hivelocity.net
      ** cezeke.com - 206.51.226.87 - pdr - hivelocity.net
      ** cilmer.com - 66.232.120.110 - estdomains inc - hivelocity.net
      ** cinast.com - 66.232.127.128 - estdomains inc - hivelocity.net
      ** cinem4.com - 66.232.127.129 - estdomains inc - hivelocity.net
      ** civuhe.com - 74.50.97.54 - pdr - hivelocity.net 
      ** derast.com - 66.232.109.9 - estdomains inc - hivelocity.net
      ** derimc.com - 66.232.127.127 - estdomains inc - hivelocity.net
      ** djdeb.com - 66.232.113.57 - estdomains inc - hivelocity.net
      ** edasim.com - 66.232.127.127 - estdomains inc - hivelocity.net
      ** enteworld.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** eremat.com - 66.232.109.8 - estdomains inc - hivelocity.net
      ** etofas.com - 66.232.109.8 - estdomains inc - hivelocity.net
      ** fasnty.com - 69.46.19.55 - estdomains inc - hivelocity.net
      ** fberg.com - 69.46.29.140 - estdomains inc - hivelocity.net
      ** fedems.com - 66.232.109.13 - estdomains inc - hivelocity.net
      ** fgfde.com - 66.232.113.57 - estdomains inc - hivelocity.net
      ** folast.com - 66.232.109.12 - estdomains inc - hivelocity.net
      ** fthny.com - 66.232.113.57 - estdomains inc - hivelocity.net
      ** fumasd.com - 66.232.109.10 - estdomains inc - hivelocity.net
      ** gagase.com - 66.232.127.131 - estdomains inc - hivelocity.net
      ** greataftorless.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** gumano.com - 66.232.127.128 - estdomains inc - hivelocity.net
      ** hamalo.com - 66.232.109.9 - estdomains inc - hivelocity.net
      ** hilipa.com - 66.232.127.129 - estdomains inc - hivelocity.net
      ** hilipy.com - 66.232.127.128 - estdomains inc - hivelocity.net
      ** hiscm.com - 66.232.113.57 - estdomains inc - hivelocity.net
      ** hovass.com - 69.46.19.54 - estdomains inc - hivelocity.net
      ** il4unu.com - 66.232.109.9 - estdomains inc - hivelocity.net
      ** jastim.com - 66.232.127.130 - estdomains inc - hivelocity.net
      ** jjfar.com - 66.232.113.57 - estdomains inc - hivelocity.net
      ** jumasd.com - 66.232.97.17 - estdomains inc - hivelocity.net
      ** kalloi.com - 66.232.109.8 - estdomains inc - hivelocity.net
      ** kiska2.com - 66.232.127.130 - estdomains inc - hivelocity.net
      ** kom4um.com - 66.232.109.8 - estdomains inc - hivelocity.net
      ** laskai.com - 66.232.109.11 - estdomains inc - hivelocity.net
      ** lavemi.com - 66.232.97.18 - estdomains inc - hivelocity.net
      ** lfamas.com - 69.46.19.54 - estdomains inc - hivelocity.net
      ** lilotu.com - 66.232.120.110 - estdomains inc - hivelocity.net
      ** lim-dv.com - 66.232.109.12 - estdomains inc - hivelocity.net
      ** linserch.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** logasi.com - 69.50.188.5 - estdomains inc - intercage.com
      ** lomsts.com - 66.232.109.11 - estdomains inc - hivelocity.net
      ** map4um.com - 66.232.127.130 - estdomains inc - hivelocity.net
      ** mapas6.com - 66.232.97.16 - estdomains inc - hivelocity.net
      ** masfac.com - 69.46.19.55 - estdomains inc - hivelocity.net
      ** masha3.com - 66.232.109.9 - estdomains inc - hivelocity.net
      ** masiti.com - 66.232.109.13 - estdomains inc - hivelocity.net
      ** masrax.com - 66.232.127.128 - estdomains inc - hivelocity.net
      ** mast3t.com - 69.46.19.53 - estdomains inc - hivelocity.net
      ** masvit.com - 66.232.97.14 - estdomains inc - hivelocity.net
      ** midnis.com - 66.232.109.10 - estdomains inc - hivelocity.net
      ** mihaso.com - 66.232.109.12 - estdomains inc - hivelocity.net
      ** monofu.com - 66.232.120.110 - estdomains inc - hivelocity.net
      ** mrako4.com - 66.232.127.129 - estdomains inc - hivelocity.net
      ** mumin7.com - 66.232.127.127 - estdomains inc - hivelocity.net
      ** myqsf.com - 69.46.29.140 - estdomains inc - hivelocity.net
      ** napas5.com - 66.232.109.13 - estdomains inc - hivelocity.net
      ** nas7fk.com - 66.232.109.9 - estdomains inc - hivelocity.net
      ** nd-tli.com - 66.232.109.11 - estdomains inc - hivelocity.net
      ** nidarim.com - 66.232.127.127 - estdomains inc - hivelocity.net
      ** nihosi.com - 66.232.127.131 - estdomains inc - hivelocity.net
      ** nimast.com - 66.232.97.15 - estdomains inc - hivelocity.net
      ** numasi.com - 66.232.127.128 - estdomains inc - hivelocity.net
      ** numimb.com - 69.46.19.56 - estdomains inc - hivelocity.net
      ** nunata.com - 66.232.127.128 - estdomains inc - hivelocity.net
      ** obosra.com - 66.232.127.127 - estdomains inc - hivelocity.net
      ** opastr.com - 66.232.109.13 - estdomains inc - hivelocity.net
      ** ormme.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** ostgad.com - 66.232.109.13 - estdomains inc - hivelocity.net
      ** pizda4.com - 66.232.127.131 - estdomains inc - hivelocity.net
      ** prampa.com - 66.232.109.13- estdomains inc - hivelocity.net
      ** putsta.com - 66.232.127.131 - estdomains inc - hivelocity.net
      ** sarobo.com - 66.232.127.130 - estdomains inc - hivelocity.net
      ** sdfry.com - 66.232.113.57 - estdomains inc - hivelocity.net
      ** serchlid.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** spiserch.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** tarzuf.com - 66.232.127.130 - estdomains inc - hivelocity.net
      ** tasimd.com - 66.232.97.16 - estdomains inc - hivelocity.net
      ** tehuli.com - 66.232.127.130 - estdomains inc - hivelocity.net
      ** theaftor.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** theorless.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** theorrent.com - 66.232.118.80 - estdomains inc - hivelocity.net
      ** timank.com - 66.232.109.10 - estdomains inc - hivelocity.net
      ** trasum.com - 66.232.127.127 - estdomains inc - hivelocity.net
      ** tymeri.com - 66.232.120.110 - estdomains inc - hivelocity.net 
      ** vacusk.com - 66.232.127.129 - estdomains inc - hivelocity.net
      ** valims.com - 66.232.120.110 - estdomains inc - hivelocity.net
      ** vestuk.com - 66.232.127.127 - estdomains inc - hivelocity.net
      ** waserk.com - 66.232.127.131 - estdomains inc - hivelocity.net
      ** wefki6.com - 66.232.127.129 - estdomains inc - hivelocity.net
      ** xometi.com - 66.232.120.110 - estdomains inc - hivelocity.net
      ** yaskap.com - 66.232.109.12 - estdomains inc - hivelocity.net
      ** ymynan.com - 66.232.109.8 - estdomains inc - hivelocity.net
      ** yunmak.com - 66.232.120.110 - estdomains inc - hivelocity.net
      ** zofarl.com - 66.232.109.10 - estdomains inc - hivelocity.net
      ** arkdo.com - 66.232.113.57 - pdr - hivelocity.net
      
      * 1ubani.com - 66.232.127.127 - estdomains inc - hivelocity.net
      * 4ulins.com - 66.232.109.8 - estdomains inc - hivelocity.net
      * 5evif5.com - 66.232.127.131 - estdomains inc - hivelocity.net
      * aboleb.com - 66.232.127.131 - estdomains inc - hivelocity.net
      * adnure.com - 69.46.19.54 - estdomains inc - hivelocity.net
      * amilop.com - 66.232.109.11 - estdomains inc - hivelocity.net
      * anal-g.com - 66.232.127.127 - estdomains inc - hivelocity.net
      * angast.com - 66.232.109.10 - estdomains inc - hivelocity.net
      * anomil.com - 66.232.109.11 - estdomains inc - hivelocity.net
      * asagar.com - 66.232.97.19 - estdomains inc - hivelocity.net
      * asagat.com - 66.232.97.18 - estdomains inc - hivelocity.net
      * atamor.com - 66.232.97.17 - estdomains inc - hivelocity.net
      * atmoc.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * bdocb.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * beloba.com - 66.232.127.128 - estdomains inc - hivelocity.net
      * bestpaskal.com - 69.46.29.140 - pdr - hivelocity.net
      * bituka.com - 66.232.109.13 - estdomains inc - hivelocity.net
      * bononli.com - 69.46.29.140 - estdomains inc - hivelocity.net
      * boryc.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * boxla.com - 66.232.113.62 - estdomains inc - hivelocity.net
      * boybluejay.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * bumast.com - 66.232.97.17 - estdomains inc - hivelocity.net
      * demo-r.com - 66.232.97.14 - estdomains inc - hivelocity.net
      * derzoe.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * direktder.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * djorr.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * duark.com - 66.232.109.8 - estdomains inc - hivelocity.net
      * dumaso.com - 66.232.109.10 - estdomains inc - hivelocity.net
      * dums4u.com - 66.232.109.13 - estdomains inc - hivelocity.net
      * dusau.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * dutens.com - 206.51.226.87 - estdomains inc - hivelocity.net
      * duwhy.com - 206.51.226.87 - estdomains inc - hivelocity.net
      * ebdoc.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * esmpa.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * esraj.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * ezjor.com - 206.51.226.87 - estdomains inc - hivelocity.net
      * ezkes.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * faysite.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * fedass.com - 66.232.97.15 - estdomains inc - hivelocity.net
      * fumast.com - 66.232.127.127 - estdomains inc - hivelocity.net
      * gastet.com - 66.232.109.9 - estdomains inc - hivelocity.net
      * gastrw.com - 66.232.120.110 - estdomains inc - hivelocity.net
      * g-maste.com - 66.232.127.130 - estdomains inc - hivelocity.net
      * gosa4u.com - 66.232.109.13 - estdomains inc - hivelocity.net
      * greatcherry.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * greatsharp.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * guideoc.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * hipslick.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * ikarsa.com - 66.232.120.110 - estdomains inc - hivelocity.net
      * ikasab.com - 66.232.109.9 - estdomains inc - hivelocity.net
      * irasab.com - 66.232.97.15 - estdomains inc - hivelocity.net
      * jagast.com - 66.232.127.129 - estdomains inc - hivelocity.net
      * jantiq.com - 66.232.120.110 - estdomains inc - hivelocity.net
      * jifat.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * jiinz.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * jojij.com - 69.46.29.140 - pdr - hivelocity.net
      * jumpas.com - 69.46.19.57 - estdomains inc - hivelocity.net
      * justkor.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * kalost.com - 66.232.127.128 - estdomains inc - hivelocity.net
      * kerjy.com - 66.232.113.57 - estdomains inc - hivelocity.net
      * kesdirect.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * keshome.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * kiska5.com - 66.232.120.110 - estdomains inc - hivelocity.net
      * klomas.com - 66.232.109.12 - estdomains inc - hivelocity.net
      * kordirect.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * kweem.com - 66.232.118.84 - estdomains inc - hivelocity.net
      * kwimi.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * kwvet.com - 66.232.118.82 - estdomains inc - hivelocity.net
      * lajik.com - 69.46.29.140 - pdr - hivelocity.net
      * lastsi.com - 69.46.19.53 - estdomains inc - hivelocity.net
      * lihach.com - 66.232.118.243 - estdomains inc - hivelocity.net
      * lima4u.com - 66.232.109.11 - estdomains inc - hivelocity.net
      * limast.com - 66.232.127.130 - estdomains inc - hivelocity.net
      * lipu4u.com - 69.46.19.55 - estdomains inc - hivelocity.net
      * locnation.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * logast.com - 66.232.118.246 - estdomains inc - hivelocity.net
      * lopa4u.com - 66.232.127.129 - estdomains inc - hivelocity.net
      * lordsa.com - 69.46.19.57 - estdomains inc - hivelocity.net
      * masits.com - 66.232.109.12 - estdomains inc - hivelocity.net
      * mastr3.com - 69.46.19.56 - estdomains inc - hivelocity.net
      * mastun.com - 66.232.109.10 - estdomains inc - hivelocity.net
      * mijaso.com - 66.232.97.14 - estdomains inc - hivelocity.net
      * mimija.com - 66.232.127.131 - estdomains inc - hivelocity.net
      * minas3.com - 66.232.127.130 - estdomains inc - hivelocity.net
      * moni4u.com - 66.232.127.129 - estdomains inc - hivelocity.net
      * morekes.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * myhji.com - 69.46.29.140 - pdr - hivelocity.net
      * nim4un.com - 66.232.109.8 - estdomains inc - hivelocity.net
      * ninuni.com - 66.232.109.9 - estdomains inc - hivelocity.net
      * njiko.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * njint.com - 69.46.29.140 - pdr - hivelocity.net
      * nubika.com - 66.232.109.10 - estdomains inc - hivelocity.net
      * ochog.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * ocmug.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * officialkes.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * ogofas.com - 66.232.127.130 - estdomains inc - hivelocity.net
      * okasab.com - 66.232.109.11 - estdomains inc - hivelocity.net
      * orasta.com - 66.232.127.129 - estdomains inc - hivelocity.net
      * orwon.com - 206.51.226.87 - estdomains inc - hivelocity.net
      * panjd.com - 66.232.113.57 - estdomains inc - hivelocity.net
      * paskalsite.com - 69.46.29.140 - pdr - hivelocity.net
      * passaf.com - 66.232.127.128 - estdomains inc - hivelocity.net
      * pee-4a.com - 66.232.118.244 - estdomains inc - hivelocity.net
      * peesda.com - 66.232.109.12 - estdomains inc - hivelocity.net
      * pinac4.com - 66.232.109.8 - estdomains inc - hivelocity.net
      * pogast.com - 69.46.19.58 - estdomains inc - hivelocity.net
      * poskai.com - 66.232.109.13 - estdomains inc - hivelocity.net
      * prasni.com - 66.232.109.11 - estdomains inc - hivelocity.net
      * psater.com - 69.46.19.58 - estdomains inc - hivelocity.net
      * qpdoc.com - 69.50.188.5 - estdomains inc - intercage, inc. 
      * rapcool.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * real-goodnews.com - 69.46.29.140 - pdr - hivelocity.net
      * rekara.com - 66.232.127.127 - estdomains inc - hivelocity.net
      * retsav.com - 66.232.127.127 - estdomains inc - hivelocity.net
      * rional.com - 69.46.19.54 - estdomains inc - hivelocity.net
      * rotast.com - 66.232.109.12 - estdomains inc - hivelocity.net
      * rrwpa.com - 66.232.113.57 - estdomains inc - hivelocity.net
      * rumist.com - 66.232.127.127 - estdomains inc - hivelocity.net
      * script-host-ing.com - 66.232.113.57 - pdr - hivelocity.net - unknown for scripting
      * sduag.com - 66.232.109.8 - estdomains inc - hivelocity.net
      * search-now-best.com - 66.232.113.57 - pdr - hivelocity.net
      * seeallhomes.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * seeallnatural.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * seeallsite.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * seecomplete.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * sjiun.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * sralua.com - 66.232.118.247 - estdomains inc - hivelocity.net
      * stiqua.com - 66.232.109.10 - estdomains inc - hivelocity.net
      * suyplanete.com - 69.46.29.140 - pdr - hivelocity.net
      * suyvirtuel.com - 69.46.29.140 - pdr - hivelocity.net
      * taefis.com - 66.232.127.128 - estdomains inc - hivelocity.net
      * tarfol.com - 66.232.127.130 - estdomains inc - hivelocity.net
      * tasnin.com - 66.232.127.129 - estdomains inc - hivelocity.net
      * ternoc.com - 66.232.97.19 - estdomains inc - hivelocity.net
      * thejie.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * theseeall.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * titkis.com - 66.232.109.8 - estdomains inc - hivelocity.net
      * traeva.com - 66.232.127.131 - estdomains inc - hivelocity.net
      * trastr.com - 66.232.97.18 - estdomains inc - hivelocity.net
      * trumst.com - 66.232.127.127 - estdomains inc - hivelocity.net
      * tuma4u.com - 66.232.109.8 - estdomains inc - hivelocity.net
      * u4utwo.com - 66.232.120.110 - estdomains inc - hivelocity.net
      * ukrosi.com - 66.232.118.245 - estdomains inc - hivelocity.net
      * umasta.com - 66.232.97.16 - estdomains inc - hivelocity.net
      * vmdes.com - 66.232.118.80 - estdomains inc - hivelocity.net
      * vokber.com - 66.232.109.9 - estdomains inc - hivelocity.net
      * wasup4.com - 69.46.19.53 - estdomains inc - hivelocity.net
      * wedast.com - 66.232.109.9 - estdomains inc - hivelocity.net
      * weersa.com - 66.232.127.131 - estdomains inc - hivelocity.net
      * weloba.com - 66.232.120.110 - estdomains inc - hivelocity.net
      * werdq.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * wsurn.com - 69.46.29.140 - pdr - hivelocity.net
      * xjadu.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * xxx-ls.com - 66.232.127.128 - estdomains inc - hivelocity.net
      * yourherlad.com - 66.232.127.130 - estdomains inc - hivelocity.net
      * sokusu.com - 69.46.19.55 - estdomains inc - hivelocity.net
      * cumimo.com - 74.50.97.51 - pdr - hivelocity.net
      * lmatsu.com - 66.232.97.16 - estdomains inc - hivelocity.net
      * godfh.com - 69.46.29.140 - pdr - hivelocity.net
      * solosy.com - 69.46.19.54 - estdomains inc - hivelocity.net
      * geviti.com - 66.232.97.15 - estdomains inc - hivelocity.net
      * suynouveau.com - 69.46.29.140 - pdr - hivelocity.net
      * limbleg.com - 206.51.226.87 - estdomains inc - hivelocity.net
      * yourleg.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * kavkak.com - 69.46.19.58 - estdomains inc - hivelocity.net
      * sokisy.com - 66.232.97.19 - estdomains inc - hivelocity.net
      * kavkak.com - 69.46.19.58 - estdomains inc - hivelocity.net
      * rsunr.com - 69.46.29.140 - pdr - hivelocity.net
      * superlegall.com - 206.51.226.87 - estdomains inc - hivelocity.net
      * thelegant.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * thefineleg.com - 206.51.226.87 - estdomains inc - hivelocity.net
      * yourleg.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * legeof.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      * theighleg.com - 206.51.226.87 - estdomains inc - hivelocity.net
      * falosi.com - 66.232.109.12 - estdomains inc - hivelocity.net
      * olaerg.com - 66.232.127.128 - estdomains inc - hivelocity.net
      * kaloso.com - 66.232.109.13 - estdomains inc - hivelocity.net
      * lpdtem.com - 66.232.127.129 - estdomains inc - hivelocity.net
      * obsosi.com - 66.232.109.8 - estdomains inc - hivelocity.net
      * ulimsd.com - 66.232.127.130 - estdomains inc - hivelocity.net
      * mssux.com - 69.46.29.140 - pdr - hivelocity.net
      * ezdag.com - 206.51.226.87 - estdomains inc - hivelocity.net
      
      dpnag.com - 206.51.226.87 - estdomains inc - hivelocity.net
      asokal.com - 66.232.109.9 - estdomains inc - hivelocity.net
      pillol.com - 66.232.127.131 - estdomains inc - hivelocity.net
      kagdam.com - 66.232.109.10 - estdomains inc - hivelocity.net
      fasmas.com - 66.232.120.110 - estdomains inc - hivelocity.net
      mygyt.com - 72.21.44.74 - estdomains inc - layered technologies, inc.
      faramo.com - 66.232.97.16 - estdomains inc - hivelocity.net
      no4you.com - 69.46.19.55 - estdomains inc - hivelocity.net
      ligarf.com - 69.46.19.56 - estdomains inc - hivelocity.net
      jomsal.com - 66.232.97.17 - estdomains inc - hivelocity.net
      sblin.com - 72.21.44.74 - estdomains inc - layered technologies, inc.
      aggop.com - 206.51.226.87 - estdomains inc - hivelocity.net
      nimaw.com - 66.232.97.18 - estdomains inc - hivelocity.net
      lamjos.com - 69.46.19.57 - estdomains inc - hivelocity.net
      yes2u2.com - 0.0.0.0 -  - estdomains inc - hivelocity.net - shut down
      vorasc.com - 0.0.0.0 -  - estdomains inc - hivelocity.net - shut down
      vorasc.com - 0.0.0.0 -  - estdomains inc - hivelocity.net - shut down
      redponyinc.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      ibigred.com - 72.232.207.138 - estdomains inc - layered technologies, inc. - Used as a java script page launch
      vagalo.com - 0.0.0.0 - estdomains inc - hivelocity.net - shut down
      superponyride.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      komast.com - 0.0.0.0 -  estdomains inc - hivelocity.net - shut down
      redponypro.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      fdzag.com - 0.0.0.0 -  estdomains inc - hivelocity.net - shut down
      yourponyboy.com - 72.232.207.138 - estdomains inc - layered technologies, inc.
      webyourjob.com - 69.46.29.140 - estdomains inc - hivelocity.net
      -----------------------
      govasi.com - 74.50.99.245 - estdomains inc - hivelocity.net
      ciskas.com - 66.232.125.136 - estdomains inc - hivelocity.net
      kaufma.com - 74.50.97.51 - estdomains inc - hivelocity.net
      ricims.com - 66.232.126.212 - estdomains inc - hivelocity.net
      bisema.com - 66.232.126.213 - estdomains inc - hivelocity.net
      mordov.com - 74.50.97.52 - estdomains inc - hivelocity.net
      aradol.com - 74.50.97.53 - estdomains inc - hivelocity.net
      vasaba.com - 66.232.126.214 - estdomains inc - hivelocity.net
      gasima.com - 74.50.97.54 - estdomains inc - hivelocity.net
      cipult.com - 66.232.126.215 - estdomains inc - hivelocity.net
       
      


IMPORTANT NOTICE

This paladium.net Web site and all of its contents are provided as is, solely for informational purposes, and without warranty. There is no express warranty, no implied warranty, and no warranty of fitness for an intended purpose. We are not liable for informational errors or incompleteness. We have no duty to update anything. Verify all statements and claims. Carefully read and consider many sources of information, analysis, and opinion. Please inform us of each and every falsehood in this Web site. We own all email messsages and other communications to us. This Web site contains parody and humor. Our linking to a Web site is not approval or endorsement. This Web site, which is not exclusively about government officers, identifies some people who never were government officers. Our discussions and editorials do not necessarily apply to anyone named or identified in this Web site.






Home Addresses of People Most of Whom Are Current or Former Government Officers

LINKS

publicity about this site search this site an idea research tips
world's governments main page previous page next page

Referrer URL


map to CIA headquarters on Colonial Farm Road in McLean
link to home page