 Pages: 1 |
 Author |
 Penis enlargement (currently 3,278 views) |
| dj |
| Posted on: Saturday, January 6th, 2007, 5:52pm |
 |
|
Super Spam Fighter 
Posts: 108
|
Ever since the spammers decided to use two of my urls as the basis of the faked mail addresses last week, > I have been receiving heaps of returned emails that I did not send. I have decided as a result to go through my inbox thoroughly. Everything gets sent to knujon, stock spams to enforcement at sec.gov and stockjunk at coldrain.com and I have been grouping them into related sites and then reporting the nameservers used.
The latest to get my attention are some penis enlargement sites – sedior.net, hindair.net
nameservers. -
ns1.fadunt.com [211.160.17.25]
ns1.husfut.com [218.106.165.205]
http://www.dnsstuff.com/tools/whois.ch?ip=fadunt.com
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
http://www.dnsstuff.com/tools/whois.ch?ip=husfut.com
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Probably not going to get a lot of joy out of Beijing Innovative if past performance is anything to go by, but you have to hope. 
|
Dave
"Now its personal" "Don't get mad, get even!" |
|
|
|
|
|
| MarkGiles |
| Posted on: Saturday, January 6th, 2007, 10:43pm |
|
|
Posts: 363
|
|
|
|
 |
Reply: 1 - 8 |
|
|
| dj |
| Posted on: Sunday, January 7th, 2007, 2:20pm |
|
|
Super Spam Fighter
Posts: 108
|
Yesterday I reported sedior.net, hindair.net, today it is loomlong.net , officeoferi.net.
They all use -
ns1.fadunt.com [211.160.17.25]
ns1.husfut.com [218.106.165.205]
|
Dave
"Now its personal" "Don't get mad, get even!" |
|
|
|
|
Reply: 2 - 8 |
|
|
| Antispam-Noob |
| Posted on: Sunday, January 14th, 2007, 8:04am |
|
|
Posts: 14
|
Just received the following spam "[re:] size your prick!" linking to http://www.greennb.com/:
Quoted Text The Most Potent Male Muscle Boosting System! The better and most powerful product to enlarge your schlong available on the market! This products tested, analyzed and approved by doctors. Order Our Product NOW! You can do it here: http://www.greennb.comP.S.: If it doesn't work for you, we garantee 100% of your money back! -- jggugogoiofqftgkggfpfktgujtftlultftupotrtr bjeriowhwioefjsdlkgjghdf now he had been the only person left on the second floor and a childish, uncontrollable fear overcame him at the thought. He shuddered to think that he would have to walk alone through the empty passages and down the staircase. He feverishly grabbed the magic roubles from his desk, stuffed them into his briefcase and coughed to summon up a little courage. His cough sounded hoarse and weak. At this moment he noticed what seemed to be a damp, evil-smelling substance oozing under the door and into his office. A tremor ran down the treasurer's spine. Suddenly a clock began to strike midnight and even this made him shudder. But his heart sank completely when he heard the sound of a |
Received: (qmail 22156 invoked from network); 14 Jan 2007 03:47:22 +0100
Received: from Unknown (HELO ja-c3cc00557e2b.generic-hostname.arrownet.dk) (91.100.24.116)
by server158-han.de-nserver.de (qpsmtpd/0.32) with SMTP; Sun, 14 Jan 2007 03:47:22 +0100
Message-ID: <1fa801c73786$0c64952e$7418645b@ja-c3cc00557e2b.generic-hostname.arrownet.dk>
From: "Haifi Jill" <Viola@cineismo.com>
To: "Hammond Daniel" <ina@,,,,,,.de>
Subject: [re:] size your prick!
Date: Sun, 14 Jan 2007 02:46:55 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2527
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
X-SpamAssassin: $spamass_status
Please tell me where to report them too and how to get the relevant information out of this?
Thanks bunches,
Ina |
|
|
|
|
Reply: 3 - 8 |
|
|
| Antispam-Noob |
| Posted on: Sunday, January 14th, 2007, 8:07am |
|
|
Posts: 14
|
The information I could find on it seems bogus. So where to go from here?
Registrant:
Akb&inshaat
vasif aliyev 3 house 5 app 211
baku, NA 370011
AZ
Domain name: GREENNB.COM
Administrative Contact:
Mehman, Gurbanov *************@box.az
vasif aliyev 3 house 5 app 211
baku, NA 370011
AZ
+994.02221519 Fax: +994.02221519
Technical Contact:
Mehman, Gurbanov *************@box.az
vasif aliyev 3 house 5 app 211
baku, NA 370011
AZ
+994.02221519 Fax: +994.02221519
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 12-Jan-2007.
Record expires on 13-Jan-2008.
Record created on 13-Jan-2007.
Domain servers in listed order:
DNS2.REGISTERFLY.COM 216.40.47.16
DNS1.REGISTERFLY.COM 216.40.47.15 |
|
|
|
|
Reply: 4 - 8 |
|
|
| Antispam-Noob |
| Posted on: Sunday, January 14th, 2007, 8:10am |
|
|
Posts: 14
|
Same Content was also spammed via several email the past few days. Other URLs used were:
http://www.katejudgemusic.com
http://lgsgenetics.com
Too bad I am a woman... what if I wanted to become a man? With a 18 Month supply I guess I could grow myself a nice 8 inch penis? I am so glad these guys keep in touch with me just in case I would like to change gender! 
Here is the mail property info:
Received: (qmail 24148 invoked from network); 10 Jan 2007 01:11:13 +0100
Received: from bzq-84-109-8-180.red.bezeqint.net (HELO i-world) (84.109.8.180)
by server158-han.de-nserver.de (qpsmtpd/0.32) with SMTP; Wed, 10 Jan 2007 01:11:13 +0100
Message-ID: <21fb01c7344b$2988c76e$b4086d54@i-world>
From: "Batstra Lyne" <Antunes@cedarcreek.ws>
To: "Baron Lussana" <ina@,,,,,,,,,,,,.de>
&
Received: (qmail 22299 invoked from network); 13 Jan 2007 07:24:35 +0100
Received: from Unknown (HELO [81.84.172.61]) (81.84.172.61)
by server158-han.de-nserver.de (qpsmtpd/0.32) with SMTP; Sat, 13 Jan 2007 07:24:35 +0100
Message-ID: <4ba901c736db$0209db64$3dac5451@[81.84.172.61]>
From: "Fuhry Michele" <Cheprakova@meremereonline.net>
To: "Dutton Lukasz" <ina@,,,,,,,,.de>
&
Received: (qmail 22156 invoked from network); 14 Jan 2007 03:47:22 +0100
Received: from Unknown (HELO ja-c3cc00557e2b.generic-hostname.arrownet.dk) (91.100.24.116)
by server158-han.de-nserver.de (qpsmtpd/0.32) with SMTP; Sun, 14 Jan 2007 03:47:22 +0100
Message-ID: <1fa801c73786$0c64952e$7418645b@ja-c3cc00557e2b.generic-hostname.arrownet.dk>
From: "Haifi Jill" <Viola@cineismo.com>
To: "Hammond Daniel" <ina@,,,,,,,,,,.de> |
|
|
|
|
Reply: 5 - 8 |
|
|
| Dave |
| Posted on: Sunday, January 14th, 2007, 2:55pm |
|
|
Posts: 19
|
Hi please see other replies to you from me this one is possibly the most complex as
I have had a quick look and come up with a lot of bits and associated names
Registrfly is the registrar.
If you load the page right click then page properties _Everworldwide.com
google everworldwide.com - gientcommunications.com
also appearing at Burnsdecor.com
dayworldwide.com
and no doubt many others
and I also stumbled across Tucoes as the registrar for one of the nameservers.
You should have Hours of fun tracking and reporting this mob. |
|
|
|
|
Reply: 6 - 8 |
|
|
| MarkGiles |
| Posted on: Sunday, January 14th, 2007, 4:54pm |
|
|
Posts: 363
|
|
|
|
|
Reply: 7 - 8 |
|
|
| MarkGiles |
| Posted on: Sunday, January 14th, 2007, 5:04pm |
|
|
Posts: 363
|
|
|
|
|
Reply: 8 - 8 |
|
Pages: 1 |
Logged
Locked Board