More information on web sites set up by Richard Rutkowski
I'm actually surprised nobody has figured out all the websites owned by
Richard Rutkowski/Jeremy Jaynes and posted them to the web. So I'm exposing them
here for the first time on 8/18/04.
Here are just a few of the ones I ran across while doing my research.
The following websites all seem to be promoting CNDD right now (8/18/04) as
"The $tock Insider":
Coincidentally, they are all registered to:
IBT Telecoms LTD
1811 NW 51st suite 2508
Ft Lauderdale, FL 33309
as is the domain:
This is the same spammer as webmailspace.com (also used to promote stocks) which uses an address of:
IST Consultants LTD.
7226 W. Colonial Dr #273
Orlando, Florida 32818
As can be verified at
NAP of the Americas - Representative Customer List, Red Rock Hosting is the
same as IBT Telecom aka IBT Telecoms LTD. Red Rock Hosting I know from
subpoena belong to
Richard Rutkowski who works for Jeremy Jaynes which totally explains the tie
with our Kos-Heysek stock promo team. So the spam component is
Jaynes-Rutkowski's contribution (spam promo) as well as some other technical
services Rutkowski provided to the Kos-Heysek part of the gang.
Similarly, email with a removal address of:
1413 1/2 #134
W. Kenneth Rd.
Glendale, CA 91201
means you've been spammed by Jaynes and his boys.
But Rutkowski doesn't always use the same information when registering sites.
For example, all of the following domains were registered by Richard
Rutkowski and can be traced back to him, but only an expert would be able to
tell this since it is not obvious (the whois records are all different (he's not
as well as:
All these sites immediately above have home pages that are a variant of each
other, e.g., compare sweptaHome.pdf with
WishFulWingHome.pdf. So they do the minimum to
make each site look unique and sometimes they make the sites so fast, e.g.,
WishFulWingHome.pdf, that the graphic name on
the home page doesn't match the URL and the text. FlyHighOffer.com does indeed
exist and everything is consistent. But when they made WishFulWing, they changed
the text, but forgot to change the graphic (left to be the same as FlyHighOffer).
Here's the SGNJ promo on the swepta.com (220.127.116.11) website:
Here's the CNDD promo on the lunchparty.com (18.104.22.168) home page:
IP address range: 22.214.171.124/21
They send out email from swepta.com, and lunchparty.com, among others.
Therefore, all the following are Rutkowski sites, for example (this is just the
tip of the iceberg):
all some of the domains set up by Richard Rutkowski for spam.
a some spams I got from Richard's machines ("The Stock Insider") on CNDD on August 19,
2004 and Aug 20: SpamCNDD.txt
were from domains known to be set up by Rutkowski: zunitoe.com and talulie.com
as noted above.
jump page from the spam. It was on one of the domains identified above:
to route via global crossing till global crossing kicked them off:
SenderBase was showing that CYBERDOMAINSPOT.COM was
sending enough email to give it a rank around 30,
which at the time was above such sources of email
as dartmail.net (Doubleclick), eBay, etc.
This network appears to have more than just a
mailing address in Florida: the bandwidth
on Global Crossing is also routed there:
9 pos3-0-2488M.cr1.NYC1.gblx.net (126.96.36.199) [AS 3549] 12 msec
10 pos2-0-2488M.cr1.MIA1.gblx.net (188.8.131.52) [AS 3549] 44 msec
11 so1-0-0-622M.ar2.MIA1.gblx.net (184.108.40.206) [AS 3549] 40 msec
12 IBT-Telecoms.ge-6-1-0.1006.ar2.MIA1.gblx.net (220.127.116.11) [AS 3549]
13 talls221.cyberdomainspot.com (18.104.22.168) [AS 3549] 44 msec