loads of fakers on this botnet:

Quote:

1. Greentwo.biz 0 listings 0 listings 0 listings 2. Greentwo.net 0 listings 0 listings 0 listings 3. Greentwo.org 0 listings 0 listings 0 listings 4. Grntwo.com 0 listings 0 listings 0 listings 5. Grntwo.net 0 listings 0 listings 0 listings 6. Duty-free-international.org 0 listings 0 listings 0 listings 7. Dutyfreeinternational.org 0 listings 0 listings 0 listings 8. 1291logon.org 0 listings 0 listings 0 listings 9. 1291logon.biz 0 listings 0 listings 0 listings 10. Grntwr.com 0 listings 0 listings 0 listings 11. Grntwr.net 0 listings 0 listings 0 listings 12. Recruiting-info.org

www.grntwr.com

http://db.aa419.org/fakebanksview.php?key=26170

www.Grntwr.net

http://db.aa419.org/fakebanksview.php?key=26171

www.grntwo.com

http://db.aa419.org/fakebanksview.php?key=26172

www.grntwo.net

http://db.aa419.org/fakebanksview.php?key=26173

www.Greentwo.org

http://db.aa419.org/fakebanksview.php?key=26174

www.Greentwo.net

http://db.aa419.org/fakebanksview.php?key=26175

www.Greentwo.biz

http://db.aa419.org/fakebanksview.php?key=26176


I also found:

www.grntwo.org
doesn't resolve atm
http://db.aa419.org/fakebanksview.php?key=26177

nameservers:
Viemn.com

Quote:

Registration Service Provided By: SPIRITDOMAINS/IAREGISTRY Contact: +1.8662720938 Website: http://www.spiritdomains.com Domain Name: VIEMN.COM Domain Name: VIEMN.COM Registrar: THE REGISTRY AT INFO AVENUE D/B/A IA REGISTRY Whois Server: whois.iaregistry.com Referral URL: http://www.iaregistry.com Name Server: NS1.VIEMN.COM Name Server: NS2.VIEMN.COM Status: clientTransferProhibited Updated Date: 30-apr-2008 Creation Date: 30-apr-2008 Expiration Date: 30-apr-2009 Registrant: n/a Gary G Harris (garygharris@uk2.net) 26 Stoner Creek Rd Elkhorn Kentucky,42733 US Tel. +270.1819650 Creation Date: 30-Apr-2008 Expiration Date: 30-Apr-2009 Domain servers in listed order: ns2.viemn.com ns1.viemn.com Administrative Contact: n/a Gary G Harris (garygharris@uk2.net) 26 Stoner Creek Rd Elkhorn Kentucky,42733 US Tel. +270.1819650 Technical Contact: n/a Gary G Harris (garygharris@uk2.net) 26 Stoner Creek Rd Elkhorn Kentucky,42733 US Tel. +270.1819650 Billing Contact: n/a Gary G Harris (garygharris@uk2.net) 26 Stoner Creek Rd Elkhorn Kentucky,42733 US Tel. +270.1819650

NETIPM.COM

Quote:

Domain Name: NETIPM.COM Registrar: KEY-SYSTEMS GMBH Whois Server: whois.rrpproxy.net Referral URL: http://www.key-systems.net Name Server: NS1.NETIPM.COM Name Server: NS2.NETIPM.COM Status: clientTransferProhibited Updated Date: 20-mar-2008 Creation Date: 20-mar-2008 Expiration Date: 20-mar-2009 DOMAIN: NETIPM.COM RSP: IMENA.ua URL: http://www.imena.ua created-date: 2008-03-20 updated-date: 2008-03-20 registration-expiration-date: 2009-03-20 owner-contact: P-GRF104 owner-fname: Girl owner-lname: Fina owner-street: 677 Mesa Dr. owner-city: Camarillo owner-zip: 93010 owner-country: US owner-phone: 8054845800 owner-email: girlfinagh@yahoo.com admin-contact: P-GRF104 admin-fname: Girl admin-lname: Fina admin-street: 677 Mesa Dr. admin-city: Camarillo admin-zip: 93010 admin-country: US admin-phone: 8054845800 admin-email: girlfinagh@yahoo.com tech-contact: P-GRF104 tech-fname: Girl tech-lname: Fina tech-street: 677 Mesa Dr. tech-city: Camarillo tech-zip: 93010 tech-country: US tech-phone: 8054845800 tech-email: girlfinagh@yahoo.com billing-contact: P-GRF104 billing-fname: Girl billing-lname: Fina billing-street: 677 Mesa Dr. billing-city: Camarillo billing-zip: 93010 billing-country: US billing-phone: 8054845800 billing-email: girlfinagh@yahoo.com nameserver: ns1.netipm.com 71.6.211.95 nameserver: ns2.netipm.com 83.80.50.10 ; Please register your domains at ; http://www.imena.ua

1291logon.biz and 1291logon.org show 403 forbidden, the "duty free" fakers are being covered here: http://forum.aa419.org/viewtopic.php?t=20416


1291logon.biz

Quote:

Domain Name: 1291LOGON.BIZ Domain ID: D24816492-BIZ Sponsoring Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. DBA PUBLICDOMAINREGISTRY.COM Sponsoring Registrar IANA ID: 303 Domain Status: clientTransferProhibited Registrant ID: DI_4477717 Registrant Name: Aleksej Bagrov Registrant Organization: N/A Registrant Address1: Troickaya, 40, 55 Registrant City: Novocherkask Registrant State/Province: Novocherkask Registrant Postal Code: 346465 Registrant Country: Russian Federation Registrant Country Code: RU Registrant Phone Number: +7.9655658832 Registrant Email: deretx@rambler.ru Administrative Contact ID: DI_4477717 Administrative Contact Name: Aleksej Bagrov Administrative Contact Organization: N/A Administrative Contact Address1: Troickaya, 40, 55 Administrative Contact City: Novocherkask Administrative Contact State/Province: Novocherkask Administrative Contact Postal Code: 346465 Administrative Contact Country: Russian Federation Administrative Contact Country Code: RU Administrative Contact Phone Number: +7.9655658832 Administrative Contact Email: deretx@rambler.ru Billing Contact ID: DI_4477717 Billing Contact Name: Aleksej Bagrov Billing Contact Organization: N/A Billing Contact Address1: Troickaya, 40, 55 Billing Contact City: Novocherkask Billing Contact State/Province: Novocherkask Billing Contact Postal Code: 346465 Billing Contact Country: Russian Federation Billing Contact Country Code: RU Billing Contact Phone Number: +7.9655658832 Billing Contact Email: deretx@rambler.ru Technical Contact ID: DI_4477717 Technical Contact Name: Aleksej Bagrov Technical Contact Organization: N/A Technical Contact Address1: Troickaya, 40, 55 Technical Contact City: Novocherkask Technical Contact State/Province: Novocherkask Technical Contact Postal Code: 346465 Technical Contact Country: Russian Federation Technical Contact Country Code: RU Technical Contact Phone Number: +7.9655658832 Technical Contact Email: deretx@rambler.ru Name Server: NS1.JUSTQXX.COM Name Server: NS2.JUSTQXX.COM Created by Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. DBA PUBLICDOMAINREGISTRY.COM Last Updated by Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. DBA PUBLICDOMAINREGISTRY.COM Domain Registration Date: Mon May 05 11:02:10 GMT 2008 Domain Expiration Date: Mon May 04 23:59:59 GMT 2009 Domain Last Updated Date: Mon May 05 19:43:49 GMT 2008

whois for 1291logon.org looks the same
_________________
Fraudwatchers.Org

If you want to send an abuse email you may want to include a "couple" other fakers mentioned here.
_________________
Fraudwatchers.Org

All are dead

New one: grntwg.me.uk

Botnet hosted:

Quote:

Server: 70.84.160.11 Address: 70.84.160.11#53 Non-authoritative answer: Name: grntwg.me.uk Address: 79.117.159.100 Name: grntwg.me.uk Address: 79.117.164.198 Name: grntwg.me.uk Address: 79.117.188.192 Name: grntwg.me.uk Address: 89.137.128.144 Name: grntwg.me.uk Address: 89.137.200.165 Name: grntwg.me.uk Address: 89.137.211.69 Name: grntwg.me.uk Address: 78.90.139.19

DB: http://db.aa419.org/fakebanksview.php?key=26617

-------- Original Message --------
From: - Fri May 30 10:08:56 2008
X-Account-Key: account3
X-UIDL: CA8A8D51310FF63FFFD2E5A7EAF2FDD9
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:
Return-Path: <Nelson121@punkass.com>
Received: from aamtain13-winn.ispmail.ntl.com ([81.103.221.35]) by mtain01-winn.ispmail.ntl.com with ESMTP id <20080530010027.CDQL29539.mtain01-winn.ispmail.ntl.com@aamtain13-winn.ispmail.ntl.com>; Fri, 30 May 2008 02:00:27 +0100
Received: from p54BBD77F.dip.t-dialin.net ([84.187.215.127]) by aamtain13-winn.ispmail.ntl.com with SMTP id <20080530005721.KOUQ27941.aamtain13-winn.ispmail.ntl.com@p54BBD77F.dip.t-dialin.net>; Fri, 30 May 2008 01:57:21 +0100
Received: from lucasforums.com (unknown [38.224.8.192]) by adultmovies4tgp.com with SMTP id CJGQRCVPQ6 for <samantha.backhouse@ntlworld.com>; Thu, 29 May 2008 17:55:10 -0800
Received: from peed.tenchiclub.com (tenchiclub.com.kino-govno.com [34.200.232.162]) by omnis.com with SMTP id UIBIPKCOJB for <samantha.backhouse@ntlworld.com>; Thu, 29 May 2008 19:53:10 -0600
X-Sender: Valarie.Lutz@punkass.com
From: Green Tree Ltd <Nelson121@punkass.com>
To: Samantha.backhouse <samantha.backhouse@ntlworld.com>
Subject: green tree (warehousing) ltd is a great place to ffurther your career
X-Sender: Valarie.Lutz@punkass.com
User-Agent: Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)
X-Mailer: Sylpheed version 0.8.2 (GTK+ 1.2.10; i586-alt-linux)
X-Priority: 3 (Normal)
MIME-Version: 1.0
Message-Id: <20080530005721.KOUQ27941.aamtain13-winn.ispmail.ntl.com@p54BBD77F.dip.t-dialin.net>
Date: Fri, 30 May 2008 01:57:22 +0100
X-Antivirus: AVG for E-mail 8.0.100 [269.24.4/1474]
Content-Type: multipart/mixed; boundary="=======AVGMAIL-483FC4280000======="


Dear Sir/Madam,

Your resume has been furnished to our company by www.monster.com web-site as one of the best-qualified job-seekers for a position offered.

Our company - Green Tree (Warehousing) Ltd., as a Third Party Logistics provider (3PL), works closely with major Blue Chip Companies & SME’s, providing mainstream warehousing and materials handling operations, innovative Supply Chain Solutions, Contract Packing and Distribution. We work closely with ou customers to deliver a flexible package that meets their requirements, and place emphasis on value-adding services of proven quality. Business expertise and a high level of diversity gained over 45 years combine to make "Green Tree" an attractive outsourced solution and versatile business partner.

We are currently looking to recruit a Regional Financial Coordinator to manage payments from the customers based within the limits of his country. You will be our financial intermediary in your local area and will be responsible to remit customer payments for the ordered warehousing or shipping to facilitate and fasten payment receipt at the headquarters of the company. This is a brand new part-time position and has been created to improve supply chain performance for the company as we move into a period of substantial expansion where we will double our current turnover.

The role includes dealing with 2-3 customer payments a week; reviewing the balance of the bank account, where the payment is supposed to be debited to; ensuring precise settlements regarding each payment; transmitting the payments to the Headquarters and subsidiaries of the company by means of instant Western Union payment system and providing regular feedback and reports to the Headquarters Office Manager and Supervisor.

It is essential that the candidate promotes positive/can do attitude and discharges his duties urgently, has literate communicational and PC-user skills to interact with other team members and make external contacts related to the job nature.
Successful applicants will need to have a bank account to be used for the customer payments to be debited to, be energetic, enthusiastic and naturally ambitious. This is very much seen as a career progression role that could lead to a management position, so if you are willing to work 1-2 hours a day and be paid on an interest basis (net 10% out of each customer payment you have dealt with) you are welcome to apply now.
So if you are looking for a “career of your life” and would like to find out more about the job specification please visit our web-site at http://

Yours faithfully, Jimmie Hobbs

0x25417825, 0x39, 0x713, 0x7, 0x0443, 0x619, 0x5942, 0x17, 0x85, 0x1406 tmp, E16 1X9: 0x28215707, 0x4480, 0x10, 0x0 0x02475261, 0x1, 0x769, 0x9653, 0x78338383, 0x68388037, 0x02902837, 0x85, 0x34, 0x9739, 0x57 0x7404, 0x61, 0x7, 0x81, 0x6, 0x934, 0x49650603, 0x95197881, 0x22043368, 0x7578, 0x469, 0x09 0x1164, 0x63374432, 0x250, 0x085, 0x991, 0x1893, 0x00, 0x9, 0x3951, 0x1, 0x01, 0x1107, 0x57 0x26, 0x63, 0x7606, 0x5583, 0x8, 0x3, 0x9, 0x4, 0x8, 0x017 0x571, 0x400, 0x31, 0x061, 0x4, 0x30918677, 0x126, 0x30328170, 0x4, 0x48938148, 0x5427, 0x93, 0x83, 0x26, 0x6955 0x3, 0x3, 0x78128057, 0x08524127, 0x64, 0x950, 0x35035024, 0x92849830, 0x9, 0x4317, 0x56

O6K: 0x68690025, 0x4, 0x43226618, 0x12819002, 0x9148, 0x6529, 0x053, 0x307, 0x34944206 M1QO: 0x45, 0x02, 0x3603, 0x98, 0x613, 0x3489, 0x7, 0x246 interface: 0x498, 0x70 6V4B 0x16, 0x07735774, 0x5, 0x918, 0x0996, 0x1356, 0x48355966, 0x531, 0x93199869 0x36382363, 0x3, 0x22594910, 0x3262, 0x86, 0x760, 0x559, 0x249 rev QYR close end 0x894 F87: 0x001, 0x88336810, 0x194, 0x22, 0x91581683, 0x7374, 0x799, 0x85, 0x983, 0x79486128, 0x21936338, 0x3893, 0x37650104, 0x582 GUAS: 0x3672, 0x830, 0x8133, 0x49, 0x20012523, 0x485, 0x36339271, 0x477, 0x2

0x95, 0x76, 0x4 DTL7: 0x195, 0x2050, 0x2271, 0x71, 0x3759, 0x559, 0x65353596, 0x59227503, 0x6, 0x3 0x54748961, 0x8, 0x7787, 0x14154150, 0x18069934, 0x6, 0x746, 0x7, 0x008, 0x2 0x91, 0x5793 BQO9 Y3Y source A9O AZ8M 5VOV W0B7 dec interface. engine: 0x900, 0x4863, 0x48, 0x0277, 0x9138, 0x27849557, 0x41, 0x403, 0x9 IW6H: 0x6, 0x331 0x35613929, 0x6248, 0x429, 0x2172, 0x063, 0x5, 0x66, 0x49718789, 0x54019930, 0x9, 0x2, 0x0 ZIC6, ZNU, Y1OF, FCO, rcs 2P1: 0x2969

Dead

And within a day I get another........


Return-Path: <Jesse.Daniel@chocofan.com>
Received: from aamtain06-winn.ispmail.ntl.com ([81.103.221.35]) by mtain01-winn.ispmail.ntl.com with ESMTP id <20080531165511.BBSZ29539.mtain01-winn.ispmail.ntl.com@aamtain06-winn.ispmail.ntl.com>; Sat, 31 May 2008 17:55:11 +0100
Received: from [81.103.221.10] (really [123.52.32.95]) by aamtain06-winn.ispmail.ntl.com with SMTP id <20080531165317.XHQP27229.aamtain06-winn.ispmail.ntl.com@[81.103.221.10]>; Sat, 31 May 2008 17:53:17 +0100
Received: from gayrated.com (unknown [123.220.250.96]) by info.gamanetwork.com with SMTP id FMUW9J8GWB for <samina.saeed@ntlworld.com>; Sat, 31 May 2008 09:49:35 -0800
Received: from malaysia.net (waylay.malaysia.net [42.111.136.246]) by directnic.com with SMTP id B5COX4AFQO for <samina.saeed@ntlworld.com>; Sat, 31 May 2008 18:46:35 +0100
From: "Green Tree Ltd." <Jesse.Daniel@chocofan.com>
To: "Samina.saeed" <samina.saeed@ntlworld.com>
Subject: The best warehousing logistics company is recruiting!
Comments: tmurv@tenchiclub.com
X-Mailer: PObox II beta1.0
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="--8RPAL1HM_DFKYOX0BOFR"
Message-Id: <20080531165317.XHQP27229.aamtain06-winn.ispmail.ntl.com@[81.103.221.10]>
Date: Sat, 31 May 2008 17:53:19 +0100

Move To: (Choose Folder) SentMail Trash

Dear Sir/Madam,

Your resume has been furnished to our company by www.monster.com web-site as one of the best-qualified job-seekers for a position offered.

Our company - Green Tree (Warehousing) Ltd., as a Third Party Logistics provider (3PL), works closely with major Blue Chip Companies & SME’s, providing mainstream warehousing and materials handling operations, innovative Supply Chain Solutions, Contract Packing and Distribution. We work closely with ou customers to deliver a flexible package that meets their requirements, and place emphasis on value-adding services of proven quality. Business expertise and a high level of diversity gained over 45 years combine to make "Green Tree" an attractive outsourced solution and versatile business partner.

We are currently looking to recruit a Regional Financial Coordinator to manage payments from the customers based within the limits of his country. You will be our financial intermediary in your local area and will be responsible to remit customer payments for the ordered warehousing or shipping to facilitate and fasten payment receipt at the headquarters of the company. This is a brand new part-time position and has been created to improve supply chain performance for the company as we move into a period of substantial expansion where we will double our current turnover.

The role includes dealing with 2-3 customer payments a week; reviewing the balance of the bank account, where the payment is supposed to be debited to; ensuring precise settlements regarding each payment; transmitting the payments to the Headquarters and subsidiaries of the company by means of instant Western Union payment system and providing regular feedback and reports to the Headquarters Office Manager and Supervisor.

It is essential that the candidate promotes positive/can do attitude and discharges his duties urgently, has literate communicational and PC-user skills to interact with other team members and make external contacts related to the job nature.
Successful applicants will need to have a bank account to be used for the customer payments to be debited to, be energetic, enthusiastic and naturally ambitious. This is very much seen as a career progression role that could lead to a management position, so if you are willing to work 1-2 hours a day and be paid on an interest basis (net 10% out of each customer payment you have dealt with) you are welcome to apply now.
So if you are looking for a “career of your life” and would like to find out more about the job specification please visit our web-site at http://grnrwg.co.uk


Yours faithfully, Ken Ortiz

0x0, 0x25, 0x7133 V2MP interface hex X8D E8J6 M6A media 0x67, 0x1, 0x2325, 0x069, 0x75139723 0x3, 0x571, 0x29179467 IIK: 0x20, 0x86 0x52, 0x0 0x1317, 0x84764974, 0x0, 0x3999, 0x015, 0x61 IEJM: 0x20672374, 0x3327, 0x3, 0x63, 0x7, 0x970, 0x6539, 0x6598, 0x3108, 0x3, 0x7280 0x0480, 0x5, 0x372

0x076 0x5, 0x79, 0x3359, 0x7, 0x63, 0x9, 0x65, 0x51147344, 0x6, 0x065, 0x077, 0x867 0x823, 0x8, 0x0, 0x60814166, 0x8184, 0x36, 0x96 update EJ7 type: 0x586, 0x61525766 0x49, 0x298, 0x703, 0x81154869, 0x607, 0x6 exe QTRX F0I8 4WT create TV4 hex C2R IGR. 0x3, 0x2, 0x922, 0x902, 0x1010, 0x881, 0x6, 0x10110987 0x242, 0x9281, 0x9693, 0x9, 0x60982617, 0x8, 0x8, 0x4, 0x865, 0x6, 0x4, 0x5501 0x17, 0x0, 0x8, 0x5, 0x93364121, 0x950, 0x1273, 0x5066, 0x3422, 0x70, 0x54356316, 0x535, 0x270, 0x70999227

U15: 0x721, 0x3004, 0x82895918, 0x1911, 0x22 0x7982, 0x956, 0x88, 0x4207, 0x204, 0x780, 0x2894 0x7920, 0x6672, 0x9, 0x2463 8KV: 0x93113068, 0x4944, 0x226, 0x8, 0x68, 0x81396585 T5D update Y94 media 0x85681174, 0x9900, 0x97998544, 0x94, 0x756, 0x7351, 0x21, 0x8535, 0x564, 0x1484, 0x287, 0x40 0x47658389, 0x47 0x861, 0x0690, 0x62, 0x236, 0x4, 0x90, 0x864, 0x851, 0x2321, 0x4178, 0x83426446, 0x1919 common end MDYX PD1 RXPL engine common T5G: 0x55343975, 0x75367105, 0x0, 0x06018913, 0x7192, 0x73, 0x66, 0x5774, 0x8158, 0x9, 0x148, 0x0, 0x5, 0x46008448, 0x00712341

http://www.grnrwg.co.uk



Looks botnet hosted

Registrar:
GX Networks Ltd t/a 123-Reg.co.uk [Tag = 123-REG]
URL: http://www.123-reg.co.uk

Name servers:
ns1.morestp.com
ns2.morestp.com

DB: http://db.aa419.org/fakebanksview.php?key=26859

As none of the domains above is resolving, I'm changing the state 'offline'.
_________________
„Truth alone will endure; all the rest will be swept away before the tide of time.“ - Mahatma Gandhi

wonderful! thanks for the info..

demande simulation pret personnel en ligne - Pret personnel en ligne et de comparer les meilleurs taux afin de... La demande de prêt personnelen lignedemande simulation pret personnel en ligne