TG-1 * Transgallaxys Forum 1

"Nigerianer" und andere Betrueger => Emailbetrueger und anderer Abschaum der Menschheit => Topic started by: Kristallkugelwächterin on June 10, 2019, 08:22:39 AM

Title: Warning: The fraud Chris Brooks on tour again
Post by: Kristallkugelwächterin on June 10, 2019, 08:22:39 AM
A warning email about the fraud "Chris Books" tells us about a new wave of attacks.

We constantly monitor the traffic to Allaxys to observe attacks as early as possible, and to block them. If necessary we block entire IP-ranges or the traffic from certain providers. We did that already in connection with OVH (in something called "Roubaix", wherever that might be) and Hetzner (somewhere in Germany). We are very strict and act fast and with ultimate force. If necessary we shut off the whole domain. We did that in the past several times.

The warning comes at the time that http://psiram.com is plagued by increasing numbers of registrations by dumb spammers. So there are new waves of attacks, in different ways. And some of the methods are old.

The warning email is from an ariplex.com background observer.

1st. email that showed up at certain accounts on ariplex.com servers:

[*quote*]
-------- Original Message --------
Subject: Broken link on ariplex.com
Date: 2019-06-01 18:19
From: Chris Brooks <cbrooks@madberry.com>
To: [honeypot]@ariplex.com

Hi [honeypot],

I noticed that you have a broken link to Compaq.com. That site was first
published way back in 1996 but unfortunately, it is no longer a working
website.

You link to Compaq on this page: http://www.ariplex.com/tina/tengines.htm

We recently published an article that explains what happened to
Compaq.  I think
it's an interesting story, and it could be useful to your readers.

Here's the article if you want to take a look:
https://www.pcguide.com/news/what-happended-to-compaq/

Would you consider swapping out the broken link for our article?

Please let me know if you have any questions and thank you for your time.

Sincerely,
-Chris
[*/quote*]


The honeypot email address is in no way associated with the TINA page the fraud Chris Brooks mentions.

2nd. email by the fraud Chris Brooks:

[*quote*]
-------- Original Message --------
Subject: Re: Broken link on ariplex.com
Date: 2019-06-06 19:51
From: Chris Brooks <cbrooks@madberry.com>
To: [honeypot]@ariplex.com

Hi again,

I wanted to check in and see if you got my note about the broken link on
your site.

Thanks!
-Chris

On Saturday, June 1, 2019 at 5:19 PM, Chris Brooks <cbrooks@madberry.com>
wrote:

> Hi [honeypot],
>
> I noticed that you have a broken link to Compaq.com. That site was first
> published way back in 1996 but unfortunately, it is no longer a working
> website.
>
> You link to Compaq on this page: http://www.ariplex.com/tina/tengines.htm
>
> We recently published an article that explains what happened to Compaq.  I think
> it's an interesting story, and it could be useful to your readers.
>
> Here's the article if you want to take a look:
> https://www.pcguide.com/news/what-happended-to-compaq/
>
> Would you consider swapping out the broken link for our article?
>
> Please let me know if you have any questions and thank you for your time.
>
> Sincerely,
> -Chris
[*/quote*]


Yesterday a 3rd. email arrived. Again, by the fraud Chris Brooks.

[*quote*]
-------- Original Message --------
Subject: Re: Broken link on ariplex.com
Date: 2019-06-09 22:06
From: Chris Brooks <cbrooks@madberry.com>
To: [honeypot]@ariplex.com

Hey,

After emailing you, I realized this may not be your responsibility and
you're focused on other stuff.

Who's the best person on your team to talk to about this?

Thanks in advance!
-Chris

On Thursday, June 6, 2019 at 4:51 PM, Chris Brooks <cbrooks@madberry.com>
wrote:

> Hi again,
>
> I wanted to check in and see if you got my note about the broken link on
> your site.
>
> Thanks!
> -Chris
>
> On Saturday, June 1, 2019 at 5:19 PM, Chris Brooks <cbrooks@madberry.com>
> wrote:
>
>> Hi [honeypot],
>>
>> I noticed that you have a broken link to Compaq.com. That site was first
>> published way back in 1996 but unfortunately, it is no longer a working
>> website.
>>
>> You link to Compaq on this page: http://www.ariplex.com/tina/tengines.htm
>>
>> We recently published an article that explains what happened to Compaq.
>> I think it's an interesting story, and it could be useful to your
>> readers.
>>
>> Here's the article if you want to take a look:
>> https://www.pcguide.com/news/what-happended-to-compaq/
>>
>> Would you consider swapping out the broken link for our article?
>>
>> Please let me know if you have any questions and thank you for your time.
>>
>> Sincerely,
>> -Chris
[*/quote*]


The email is sent to [honeypot]. [honeypot] is, you already guessed it, a [honeypot].  8)

Anyone sending an email to [honeypot] demonstrates his stupidity by not realizing that [honeypot] is a [honeypot]. 8)


We do show the url the fraud Chris Brooks tries to inject. We are not afraid of that. So we do not hide it. We hit back by telling the public who Chris Brooks is and what he does.

What he is, is clear: He is a fraud. In the next post I will show some details about him.
Title: Re: Warning: The fraud Chris Brooks on tour again
Post by: Kristallkugelwächterin on June 10, 2019, 09:41:06 AM
In this piece, archived in the web archive, the fraud Chris Brooks confesses what he does: Write some garbage, then trick out people to make links, etc., to get traffic there, then sell the whole crap.

madberry.com, his domain, is really his, and it dates back to way before 2007, the date of the archived item:

http://web.archive.org/web/20071102224841/http://www.madberry.com/2007_03_01_archive.html

[*quote*]
Not Yet Retitled

An analytics approach to SEO, link-building and monetization.
Friday, March 30, 2007
 
If only Ask.com's traffic was as good as their support...

Listen to this article Listen to this article as an mp3 file
I must say, I'm impressed with Ask.com's support folks. I bought 183 clicks from ask on a very competitive keyword. And the average user that came from their network of sites viewed exactly 1.0 pages. Not 1.06 pages, not 1.3 pages, 1.0 pages. During the same time period, the rest of the traffic that came to the site averaged more than 3 pageviews per user.

If you know anything about buying traffic from second tier sources, you know what this means: click fraud. (Someone set up a site, displayed my ads on their site, and then had a bot click on the ad. They got paid, Ask got paid, I lost money.)

Now, this is not a post about the evils of click fraud. As John Battelle would say, it's simply a tax, and if you want to play this game you pay the tax.

But Ask did the right thing when I complained. They researched it, they blocked traffic from that site, they refunded my money and they called me to explain the situation.

The most interesting lesson learned? If you want your ads to appear on Ask.com for competitive terms, buy AdWords ads. Ask backfills their own search results with AdWords. Think about that for a second.

# posted by Chris Brooks @ 7:10 PM 0 comments 
Wednesday, March 21, 2007
 
This is no longer the Talkr Blog

Listen to this article Listen to this article as an mp3 file
So, it's official. If you want to latest news on Talkr, you'll need to go to the new official Talkr blog: http://blog.talkr.com.

I have completed Talkr's sale to LiveOnTheNet.com. You can read the press release here. That's a smart bunch of folks over there, and I think they're going to do great things with Talkr and with the other tools that they're working on.

If you're still reading, here's the sort of stuff that I'll be posting on this blog: experiments in search engine optimization, link-building, and improving monetization. If you have a sneaking hunch that the world already has enough blogs on these topics, you may be right. Here are a handful of blogs that I read religiously:

    SearchBlog (John Battelle)
    Matt Cutts
    JenSense
    linkbuildingblog.com
    ShoeMoney
    Cost Per News

Still reading? Really?

Okay, then I suppose I should tell you what I do. I build content websites that have old-fashioned, useful content on them. Then I drive traffic to them. And then I monetize that traffic. Doing that successfully is all about testing -- A/B testing, multivariate testing, back-of-the-envelope "does it feel like this works" testing. So if you continue to subscribe to this feed, that's what you'll find. Lots of analytics, lots of testing. If that gets your motor running, stay tuned. If not, point your browser to blog.talkr.com.

# posted by Chris Brooks @ 7:46 PM 0 comments 

This page is powered by Blogger. Isn't yours?
Links

    Talkr

archives

    March 2005
    April 2005
    May 2005
    June 2005
    July 2005
    September 2005
    November 2005
    December 2005
    January 2006
    June 2006
    July 2006
    September 2006
    October 2006
    November 2006
    December 2006
    January 2007
    March 2007
    September 2007
    Current Posts
[*/quote*]
Title: Re: Warning: The fraud Chris Brooks on tour again
Post by: Kristallkugelwächterin on June 10, 2019, 10:37:03 AM
talkr.com ,the domain the fraud Chris Brooks in 2007 said he sold, is in the web-archive, archived already in 2005. Let us assume that in 2005 it was not sold and the address is his.

"phone: 603-686-5151
fax: 603-686-5185"


and

"78 Madbury Road
Durham, NH 03824
USA"

sounds like his address. "madbury" is a name he also abused.

http://web.archive.org/web/20050712000154/http://www.talkr.com/company/contact.html

[*quote*]
Talkr logo: Letting blogs speak for themselves

Angled purple box Navigation

      Home
      Getting Started
      Login
      Register
      Subscribe


Angled purple box Feeds

      My Feeds
      Browse Feeds
      Search for Feeds
      Free Audio


Angled purple box Help

      What is Talkr?
      The Talkr blog
      Help Center

Contact Information
Email

You can contact Talkr at the following email addresses:

    Technical Support: support at talkr dot com
    Sales: sales at talkr dot com
    Press Inquiries: pr at talkr dot com

Phone

phone: 603-686-5151
fax: 603-686-5185


Street Address

Talkr.com
78 Madbury Road
Durham, NH 03824
USA

Two Audiobooks for FREE from Audible

home  |  login  |  help center  |  contact  |  privacy

Copyright 2005 Talkr (tm)

Talkr (tm) is provided "as is" and without warranty of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.
[*/quote*]
Title: The fraud Chris Brooks on Twitter
Post by: Kristallkugelwächterin on June 10, 2019, 11:03:02 AM
(https://pbs.twimg.com/profile_images/1778430427/chris_brooks_edited-150x150_400x400.jpg)

https://pbs.twimg.com/profile_images/1778430427/chris_brooks_edited-150x150_400x400.jpg

https://twitter.com/madbury?lang=en

[*quote*]
Chris Brooks
@madbury
Durham, NH

Joined May 2008
[*/quote*]


DO NOT DARE TO CHEAT UNSUSPECTING PEOPLE INTO MAKING LINKS TO YOUR DRECK TO BOOST YOUR GOOGLE-RANKING!


The fraud Chris Brooks wants to be famous? Sure. Here is:

[*quote*]
Chris Brooks, (603) 868-2603, 78 Madbury Rd, Durham, NH | Nuwber
https://nuwber.com › States › NH › Durham › 78 Madbury Rd

Diese Seite übersetzen
Name: Chris Brooks, Phone number: (603) 868-2603, State: NH, City: Durham, Zip Code: 03824 and more information.
Wendy M Brooks, (603) 868-2603, 78 Madbury Rd, Durham, NH ...
https://nuwber.com › States › NH › Durham › 78 Madbury Rd

Diese Seite übersetzen
Wendy M Brooks, age 50-55. Landline number. (603) 868-2603. Relatives. Chris Brooks · 78 Madbury Rd, Durham, NH, 03824-2018 ...
Furnacecompare.com | Better Business Bureau® Profile
https://www.bbb.org/.../nh/durham/.../furnacecomparecom-0051-...

Diese Seite übersetzen
Furnace Sales in Durham, NH. See BBB rating, reviews, complaints, & more. ... 78 Madbury Rd, Durham, NH 03824 ... Chris Brooks, Owner. Customer Contact.
Webmaster: Chris Brooks in Durham, NH - dexr.io
https://dexr.io/nh/durham/chris-brooks
- Diese Seite übersetzen
Contact webmaster Chris Brooks in Durham, NH by owner name, email, phone or ... Address. 78 Madbury Rd. City. Durham, NH. State. NH. Zip. 03824. Email.
About FurnaceCompare.com
https://www.furnacecompare.com/company/about.html

Diese Seite übersetzen
Our mailing address is: FurnaceCompare.com 78 Madbury Rd Durham, NH 03824 ... -Chris Brooks, Founder. home contact privacy FAQs site search about us.
Chris Brooks (@madbury) | Twitter
https://twitter.com/madbury?lang=de

Diese Seite übersetzen
Chris Brooks · @madbury. Durham, NH ... Chris Brooks @madbury 7 Jan 2014. More. Copy link to ... Chris Brooks @madbury 20 Feb 2012. More. Copy link to ...
Es fehlt: 78 ‎03824
Furnacecompare Durham NH, 03824 – Manta.com
https://www.manta.com › ... › Unclassified

Diese Seite übersetzen
78 Madbury Road Durham, NH 03824 ... Furnacecompare is a privately held company in Durham, NH and is a Single Location business. ... Name: Chris Brooks
Chris Brooks Public Records - Family Tree Now
https://www.familytreenow.com/records/people/brooks/chris
- Diese Seite übersetzen
Research Chris Brooks's Public Records, We're 100% Free! First Name .... Addresses: 78 Madbury Rd, Durham, NH 03824-2018 119 Fidelity St #C3, Carrboro ...
Madbury Web Development Ventures, LLC - BizStanding
https://bizstanding.com › ... › FU › Fur-N-Feathers Pet Spa, LLC

Diese Seite übersetzen
Madbury Web Development Ventures, LLC. 78 Madbury Rd, Durham, NH 03824. Doing business ... Member:Chris Brooks (Owner). Agent:Jerry Karcher
Chris Brooks - 279 Records Total - People Finder - uFind.name
ufind.name/Chris+Brooks

Diese Seite übersetzen
279 Records - Chris Brooks's LinkedIn & Facebook Profiles (62) Chris Brooks's Addresses, Phone Numbers (25) Chris ... 78 MADBURY RD DURHAM NH 03824.
[*/quote*]


DO NOT TOUCH HONEYPOTS. THEY DO BITE...
Title: Re: Warning: The fraud Chris Brooks on tour again
Post by: Zoran on June 10, 2019, 06:09:11 PM
Well, well, well... He isn't so very bright, isn't he? His portrait at Twitter is overwhelmingly convincing.  :P

The trick with "link exchanges" is so old. It is one of the oldest tricks ever. First, there is something at the page the victim is made to make link to. Then, suddenly, without any warning, the original content is gone and porn advertising or other shit is there. Since nearly nobody checks the sites one makes links to, the fraud will not be detected by the victims.

Yes, the old saying was proven right again: "Do not mess up with Antareans. The revenge of the galaxy will get you."  8)


Here is the story how the spammer Rodona Garst was caught in the act:


http://blank.org/memory/busted/

[*quote*]
A Spammer's Luck Runs Out When
She Forges The Wrong Domain

Hacked
by
"Man In The Wilderness"

    "Man In The Wilderness"
    Named after the song by STYX
    From the album "The Grand Illusion"
[*quote*]


http://blank.org/memory/busted/index2.htm

[*quote*]
    Chapters

    The Story (Start here)
    Who is Premier Services
    Whois Domain Information
    Nslookup Information
    Contact Information and Photo Gallery *
    Rodona Garst Spam Signatures
    The Mortgage Spams
    The Merchant Spams
    The Pump-And-Dump Stock Spams *
    The Life-Force Spams
    How Premier Services Steals AOL Usernames and Passwords
    Two Years of Premier Services Internal ICQ Message Logs! *
    Miscellaneous Documents
    Lets Get Brutal!
[*/quote*]

That even was no attack on Antares InfoPlex. But the revenge was severe. And it persists.

This is some data and a photo gallery:

http://blank.org/memory/busted/contact-info.htm

[*quote*]
Premeir Services Contact Information
and Photo Gallery

Premier Services
(Also known as Premier Marketing)

P.O. Box 10003
Clarksville, TN 37042 USA
Phone: 931-431-9984

and

Premier Marketing, Inc.
1960-J Madison Street
PMB 325 Clarksville, TN 37043-5064

Rodona Garst

Click the image above to see more photos of Rodona.
Photos were taken from 1996 to 2000. Watch Rodona grow up.

Voice and Data Lines:
+1 (931) 431-0524 Rodona Garst 1226 Cobblestone Ln Clarksville TN 37042-5890
+1 (931) 431-0527 Rodona Garst 1226 Cobblestone Ln Clarksville TN 37042-5890
+1 (931) 431-0531 Rodona Garst 1226 Cobblestone Ln Clarksville TN 37042-5890
+1 (931) 431-0532 Rodona Garst 1226 Cobblestone Ln Clarksville TN 37042-5890
+1 (931) 431-6711 Rodona Garst 1226 Cobblestone Ln Clarksville TN 37042-5890

Office: +1 (931) 358-0175 (most recent phone number)
Home Address: Rodona H. Garst 1224 Cobblestone Lane - Clarksville, TN 37042
Cell Phone: 931-216-8259
ICQ #:696128 (Rodona), 3483645 (Rodona Server)
Email Address: sales@virtualpages.net, contactme@premierservices.com, Iamhit1998@aol.com
Social Security Number: 228-21-1858
Birthdate: 09/28/1964
Spammer V-Card: Rodona-Garst.vcf

Shary Valentine

Click the image above to see more photos of Shary.

Cell phone:931-216-9583
ICQ #:15341609 (Aspen), 42502246 (Shary1), 36545850 (Shary2), 5483009 (Shary4)
Email Address: SharyTN@aol.com, billpop@host4net.com, warmrain56@prodigy.net, shary@takeaction.com

Shannon Redmond

Phone: 727-643-3681
ICQ #: 22447762 (Shannon)
Email Address: amazon7890@aol.com, sales@takeaim.net

Heather Graham
(This may be an alias for Rodona Garst, but I'm not sure)

Phone:
ICQ #:
Email Address: heathergraham@earthlink.net

Lin Valentine

Phone:
ICQ #: 15801977 (Lin Valentine), 34113524 (David Valentine)
Email Address: geode@1stconnect.com, morebusiness@msn.com, atlantis3@msn.com
Location: Sedona, AZ

Varnjeet Khalsa
(Nickname: VJ)

Home Phone: 310-201-9689
Work Phone: 310-787-0200
ICQ #: 22775534 (VJ), 12334520 (Varnjeet), 12336105 (Varnjeet), 12579129 (Varnjeet)
Email Address: vj235@aol.com, varnjeet@msn.net
Address: 8849 Horner Street - Los Angeles, CA - zip 90035-4202
[*/quote*]



http://blank.org/memory/busted/brutal.htm

[*quote*]
Lets Get Brutal!

Some of the information I gleaned from Premier Services could be quite embarrasing should it be posted on the Internet. I initially did quit a bit of soul searching. Eventually I decided to post these tidbits based on the following facts:

    Premier Services has been flooding the Internet with millions of spams every week for five years.
    Premier Services has stolen a verified 1300+ accounts from stupid AOL users. The stolen accounts were used to send even more spam. Despite being threatened by AOL, account "fishing" is still a common practice at Premier Services.
    The stupid AOL users were probably accused of spamming and lost their accounts. They were only guilty of stupidity.
    Premier Services has been laughing all the way to the bank with their ill-gotten profits
    Premier Services sends porno and fraudulent emails to everyone from a 1st grader to grandma with no remorse.
    Premier Services has used "pump-and-dump" and insider stock trading to make money at someone else's expense.
    Premier Services has forged the domains of innocent companies on more than one occasion.
    If Premier Services had not forged my domain in the first place I wouldn't be creating this web page now.
    Premier Services has been threatened by AOL lawyers to stop spamming AOL at least once. It didn't work.
    Premier Services has already been hauled in to court by the S.E.C for pump-n-dump. That didn't work either.

So...without further delay........

Lets Get Brutal!

    Number of Freckles on Rodona Garst Ass
http://blank.org/memory/busted/RodonasFreckleCount.htm

    Rodona Garst Breast Size
http://blank.org/memory/busted/RodonasBreastSize.htm

    A Date With A Spam Queen (Shary Valentine)
http://blank.org/memory/busted/brutal/Date-With-A-Spam-Queen.htm

    Kinky Stories Written by Premier Services #1
http://blank.org/memory/busted/brutal/4tim2.htm

    Kinky Stories Written by Premier Services # 2
http://blank.org/memory/busted/brutal/4tim3.htm
[*/quote*]

Title: Re: Warning: The fraud Chris Brooks on tour again
Post by: Ayumi on September 12, 2020, 05:43:56 PM
Just a reminder.  8)