Home > Junk fax profiles > Winningstockpicks.net

More information on web sites set up by Richard Rutkowski

I'm actually surprised nobody has figured out all the websites owned by Richard Rutkowski/Jeremy Jaynes and posted them to the web. So I'm exposing them here for the first time on 8/18/04.

Here are just a few of the ones I ran across while doing my research.

The following websites all seem to be promoting CNDD right now (8/18/04) as "The $tock Insider":

www.Bufetparty.com
www.Dinnerpub.com
www.Dnswar.com
www.Illlilli.com
www.Lunchhotel.com
www.Lunchparty.com
www.Manchoor.com
www.Meetinguse.com
www.Nprouls.com
www.Pspons.com
www.Publicsup.com
www.Supspread.com
www.Tandoorpub.com
www.Toniclyric.com
www.Viewt.com

Coincidentally, they are all registered to:

Registrant:
 IBT Telecoms LTD
 1811 NW 51st suite 2508
 Ft Lauderdale, FL 33309
 US
 425-952-0630
Fax:425-952-0630
admin@ibttelecoms.com

as is the domain:

streetinsiderstockpicks.com

This is the same spammer as webmailspace.com (also used to promote stocks) which uses an address of:
IST Consultants LTD.
7226 W. Colonial Dr #273
Orlando, Florida 32818
Phone: +1.3212340265
Fax: +1.3212340265

As can be verified at NAP of the Americas - Representative Customer List, Red Rock Hosting is the same as IBT Telecom aka IBT Telecoms LTD.  Red Rock Hosting I know from subpoena belong to Richard Rutkowski who works for Jeremy Jaynes which totally explains the tie with our Kos-Heysek stock promo team. So the spam component is Jaynes-Rutkowski's contribution (spam promo) as well as some other technical services Rutkowski provided to the Kos-Heysek part of the gang.

Similarly, email with a removal address of:

eeeMedia
1413 1/2 #134
W. Kenneth Rd.
Glendale, CA 91201

means you've been spammed by Jaynes and his boys.

But Rutkowski doesn't always use the same information when registering sites.

For example, all of the following domains were registered by Richard Rutkowski and can be traced back to him, but only an expert would be able to tell this since it is not obvious (the whois records are all different (he's not THAT stupid)):

www.4youfromus.com
www.Abovethewater.com
www.Baileyhere.com
www.Biznewz.net
www.Bluecalamitymedia.com
www.Calculatedsigns.com
www.Cherrypickedofferz.com
www.Connectingtoyou.net
www.Driveron.com
www.Easternlywind.com
www.Ebargainoffers.com
www.Edgecombmedia.com
www.Especialdeals.net
www.Estockpicker.com
www.Etalulie1.com
www.Extremeupdates.com
www.Flyhighoffer.com
www.Freeemailcenter.com
www.Garrisonlists.com
www.Goaboutexcellence.com
www.Iceblocker.com
www.Ivaluepack.com
www.Keystoneprinciples.com
www.Luck-emails.com
www.Microcap-research.com
www.Moneyholdem.com
www.Nightlightmagic.com
www.Octoberreservoir.com
www.Offernotify.com
www.Partypromo.com
www.Plesn.com
www.Realmailsavings.com
www.Shootingstaroffer.com
www.Swepta.com
www.Thewebservicecompany.com
www.Wideopendream.com
www.Wishfulwing.com
www.Zunitoe.com

www.1mintoffer.com
www.Aboutexcellence.org
www.Adkudos.com
www.Bigkudos.com
www.Breakthroughretail.com
www.Direct1000.net
www.Dotcominventions.com
www.Eburgerbiter.com
www.Elistmaster.com
www.Enuy.com
www.Epinksheetreporter.com
www.Extremefeel.com
www.Geoneedle.com
www.Globalnews4u.com
www.Holidaywhispers.com
www.Hologramvisions.com
www.Januaryheat.com
www.Knopto.com
www.Lifesmarts.net
www.Likableflow.com
www.Limepear.com
www.Lovewinter.com
www.Microcap-insight.com
www.Moondanceroffer.com
www.Mysticmoondancer.com
www.Nationaltribunenews.com
www.Networksponsor.com
www.Nocostprovider.com
www.Offersusa.com
www.Oneesn.com
www.Oobesh.com
www.Powerdeal.net
www.Powerupyourdotcom.net
www.Pwdelivery.com
www.Samplescents.com
www.Saveborg.com
www.Sillydeer.com
www.Skystarsun.com
www.Skysunny.com
www.Spectacularplanet.com
www.Talulie.com
www.Talulie1.com
www.Techaboutexcellence.com
www.Thebigbonus.com
www.Todaysmoment.com
www.Townsendlists.com
www.Treestem.com
www.Valuenews4u.com
www.Warmcuddle.com
www.Warmegg.com
www.Warmtimes.com
www.Whistlingcurves.com
www.Winterfunland.com
www.Worldtribunenews.com
www.Zanadutimes.com
www.Zuniti.com
www.Zunitie.com

as well as:

www.greatermarketing.com
www.techzensend.com
CYBERDOMAINSPOT.COM
IBTTELECOMS.COM
ibttelecoms.net
talulie.com
stabilityindex.com

All these sites immediately above have home pages that are a variant of each other, e.g., compare sweptaHome.pdf with WishFulWingHome.pdf. So they do the minimum to make each site look unique and sometimes they make the sites so fast, e.g., WishFulWingHome.pdf, that the graphic name on the home page doesn't match the URL and the text. FlyHighOffer.com does indeed exist and everything is consistent. But when they made WishFulWing, they changed the text, but forgot to change the graphic (left to be the same as FlyHighOffer).

Here's the SGNJ promo on the swepta.com (216.93.189.137) website: sweptaSGNJ.pdf

Here's the CNDD promo on the lunchparty.com (64.152.130.4) home page: lunchpartyCNDD.pdf

IP address range: 207.218.144.0/21

They send out email from swepta.com, and lunchparty.com, among others. Therefore, all the following are Rutkowski sites, for example (this is just the tip of the iceberg):

64.152.130.121 vii121.lunchparty.com
64.152.130.122 vii122.lunchparty.com
64.152.130.123 vii123.lunchparty.com
64.152.130.124 vii124.lunchparty.com
64.152.130.125 vii125.lunchparty.com
64.152.130.126 vii126.lunchparty.com
64.152.130.127 vii127.lunchparty.com
64.152.130.128 vii128.lunchparty.com
64.152.130.129 vii129.lunchparty.com
64.152.130.130 vii130.lunchparty.com
64.152.130.131 vii131.lunchparty.com
64.152.130.132 vii132.lunchparty.com
64.152.130.133 vii133.lunchparty.com
64.152.130.134 vii134.lunchparty.com
64.152.130.135 vii135.lunchparty.com
64.152.130.136 vii136.lunchparty.com
64.152.130.137 vii137.lunchparty.com
64.152.130.138 vii138.lunchparty.com
64.152.130.139 vii139.lunchparty.com
69.59.191.120 swp120.swepta.com
69.59.191.121 swp121.swepta.com
69.59.191.130 swp130.swepta.com
69.59.191.131 swp131.swepta.com
69.59.191.132 swp132.swepta.com
69.59.191.133 swp133.swepta.com
69.59.191.134 swp134.swepta.com
69.59.191.143 swp143.swepta.com
69.59.191.147 swp147.swepta.com
69.59.191.148 swp148.swepta.com
69.59.191.25 swa25.swepta.com
69.59.191.26 swa26.swepta.com
69.59.191.27 swa27.swepta.com
69.59.191.65 swa65.swepta.com
69.59.191.66 swa66.swepta.com
69.59.191.67 swa67.swepta.com
69.59.191.90 swp90.swepta.com
69.59.191.91 swp91.swepta.com
69.59.191.92 swp92.swepta.com

These are all some of the domains set up by Richard Rutkowski for spam.

Here's are a some spams I got from Richard's machines ("The Stock Insider") on CNDD on August 19, 2004 and Aug 20: SpamCNDD.txt 

Those spams were from domains known to be set up by Rutkowski: zunitoe.com and talulie.com as noted above.

Here's the jump page from the spam. It was on one of the domains identified above: zunitoeCNDD.pdf

They used to route via global crossing till global crossing kicked them off:

SenderBase was showing that CYBERDOMAINSPOT.COM was
sending enough email to give it a rank around 30,
which at the time was above such sources of email
as dartmail.net (Doubleclick), eBay, etc.

This network appears to have more than just a
mailing address in Florida: the bandwidth
on Global Crossing is also routed there:

(snip)
9 pos3-0-2488M.cr1.NYC1.gblx.net (67.17.64.149) [AS 3549] 12 msec
10 pos2-0-2488M.cr1.MIA1.gblx.net (67.17.93.137) [AS 3549] 44 msec
11 so1-0-0-622M.ar2.MIA1.gblx.net (67.17.67.142) [AS 3549] 40 msec
12 IBT-Telecoms.ge-6-1-0.1006.ar2.MIA1.gblx.net (64.208.158.226) [AS 3549] 44 msec
13 talls221.cyberdomainspot.com (207.218.146.221) [AS 3549] 44 msec

Disclaimer