The Reffy spammers

From Spamhuntress

Reffy changed its name to PRstorm, and was then sold on eBay. We don't know who bought it. But to users of the software: You could lose your internet connection, like this guy did. Or get your domains banned in Google (very likely if you get caught).

The Reffy spammers are a team of one Norwegian and one Australian who sells software for referrer spamming, among other things.

By now they've gone through a number of domain names, probably because Google keeps banning them.

And they're trying to hide a little better than they did in the beginning.

Let's start with the Norwegian, who goes by the alias M0nkey.

One upon a time he used this whois info:

William Indre (acyon at acyon dot com)
 1.5555555555
Fax:  1.5555555555
Austrevaagen 40
Bergen, ST 5244
NO

He's gone through many revisions since we figured out that there's a guy with an extremely similar name in the house next door to that address. I doubt if anyone but a Norwegian would have figured it out, though. It's written in such a way that a local postman would figure out who to deliver it to, but it's virtually impossible unless you know local geography! I still have the phone number for this guy, but haven't called him.

His IP number still is: