Websites Set Up By Richard Rutkowski
I'm actually surprised nobody has figured out all the websites owned by Richard Rutkowski/Jeremy Jaynes and posted them to the web. So I'm exposing them here for the first time on 8/18/04.
Here are just a few of the ones I ran across while doing my research.
The following websites all seem to be promoting CNDD right now (8/18/04) as "The $tock Insider":
Coincidentally, they are all registered to:
IBT Telecoms LTD
1811 NW 51st suite 2508
Ft Lauderdale, FL 33309
as is the domain:
This is the same spammer as webmailspace.com (also used to promote stocks) which uses an address of:
IST Consultants LTD.
7226 W. Colonial Dr #273
Orlando, Florida 32818
As can be verified at NAP of the Americas - Representative Customer List, Red Rock Hosting is the same as IBT Telecom aka IBT Telecoms LTD. Red Rock Hosting I know from subpoena belong to Richard Rutkowski who works for Jeremy Jaynes which totally explains the tie with our Kos-Heysek stock promo team. So the spam component is Jaynes-Rutkowski's contribution (spam promo) as well as some other technical services Rutkowski provided to the Kos-Heysek part of the gang.
Similarly, email with a removal address of:
1413 1/2 #134
W. Kenneth Rd.
Glendale, CA 91201
means you've been spammed by Jaynes and his boys.
But Rutkowski doesn't always use the same information when registering sites.
For example, all of the following domains were registered by Richard Rutkowski and can be traced back to him, but only an expert would be able to tell this since it is not obvious (the whois records are all different (he's not THAT stupid)):
as well as:
All these sites immediately above have home pages that are a variant of each other, e.g., compare sweptaHome.pdf with WishFulWingHome.pdf. So they do the minimum to make each site look unique and sometimes they make the sites so fast, e.g., WishFulWingHome.pdf, that the graphic name on the home page doesn't match the URL and the text. FlyHighOffer.com does indeed exist and everything is consistent. But when they made WishFulWing, they changed the text, but forgot to change the graphic (left to be the same as FlyHighOffer).
Here's the SGNJ promo on the swepta.com (220.127.116.11) website: sweptaSGNJ.pdf
Here's the CNDD promo on the lunchparty.com (18.104.22.168) home page: lunchpartyCNDD.pdf
IP address range: 22.214.171.124/21
They send out email from swepta.com, and lunchparty.com, among others. Therefore, all the following are Rutkowski sites, for example (this is just the tip of the iceberg):
These are all some of the domains set up by Richard Rutkowski for spam.
Here's are a some spams I got from Richard's machines ("The Stock Insider") on CNDD on August 19, 2004 and Aug 20: SpamCNDD.txt
Those spams were from domains known to be set up by Rutkowski: zunitoe.com and talulie.com as noted above.
Here's the jump page from the spam. It was on one of the domains identified above: zunitoeCNDD.pdf
They used to route via global crossing till global crossing kicked them off:
- SenderBase was showing that CYBERDOMAINSPOT.COM was
- sending enough email to give it a rank around 30,
- which at the time was above such sources of email
- as dartmail.net (Doubleclick), eBay, etc.
- This network appears to have more than just a
- mailing address in Florida: the bandwidth
- on Global Crossing is also routed there:
- 9 pos3-0-2488M.cr1.NYC1.gblx.net (126.96.36.199) [AS 3549] 12 msec
- 10 pos2-0-2488M.cr1.MIA1.gblx.net (188.8.131.52) [AS 3549] 44 msec
- 11 so1-0-0-622M.ar2.MIA1.gblx.net (184.108.40.206) [AS 3549] 40 msec
- 12 IBT-Telecoms.ge-6-1-0.1006.ar2.MIA1.gblx.net (220.127.116.11) [AS 3549] 44 msec
- 13 talls221.cyberdomainspot.com (18.104.22.168) [AS 3549] 44 msec