 Pages: 1, 2, 3 : All |
 Author |
 Automated complaining to Registrars (currently 6,624 views) |
| MarkGiles |
| Posted on: Saturday, February 10th, 2007, 4:10am |
 |
|
Posts: 363
|
COMPLAINTERATOR V.22.0
Dateline: JULY 6, 2008
A system to assist you in reporting spam sites to registrars.
Complaints are based on the name servers used by a spamvertized website.
It runs under Windows and Firefox / Mozilla / SeaMonkey / Opera / Internet Explorer.
It has been tested successfully with these emailers: MS Outlook, Outlook Express, Gmail, Opera Mail, Thunderbird, Lotus Notes, Yahoo! email - others may work directly, or via using a fall-back method.
It is all explained in the documentation.
Download, Unzip, read the docs, and launch complainterator from its folder.
Feed back your reactions, questions, problems, suggestions in this message thread, or at the Castlecops Complainterator support forum..
The latest version is V 22.
It contains a revised version of the Registrar Contacts file
It has the first implemeentation of a link obfuscater to hande those registrars who block mail containing spammed site names.
It contains a feature to prevent generating messages to registrars to remove their own servers. Previously it was the user's responsibility to remove these.
These download sites to choose from
* Click => Download from SpamTrackers EU < =
* Complainterator home page
Support forum
* => Castlecops support site for Complainterator <=
|
|
|
|
|
|
| MarkGiles |
| Posted on: Saturday, February 10th, 2007, 10:17pm |
|
|
Posts: 363
|
In response to requests for additional mailer support, I have provided V 4a, which allows you to be prompted for where to put each of these fields.
V 4 and V 4a also store the message contents in the program folder.
The previous message has the primary and alternative download links |
|
|
|
 |
Reply: 1 - 31 |
|
|
| pensioner |
| Posted on: Sunday, February 11th, 2007, 1:01pm |
|
|
Posts: 21
|
| V 4a is a great tool Mark! Hope that many people will use it. |
|
|
|
|
Reply: 2 - 31 |
|
|
| tracker |
| Posted on: Monday, February 12th, 2007, 12:08pm |
|
|
Posts: 41
|
| Well, there's no guarantee that all of the Registrars will do anything, but this is surely looking much more like the cat's meow for making it easier for people to report (complain) about their spam. |
|
|
|
|
Reply: 3 - 31 |
|
|
| pensioner |
| Posted on: Tuesday, February 13th, 2007, 7:00am |
|
|
Posts: 21
|
At least some DO, and fast. Just over 12 hours after I had used the program to report generalworldwide.info (Pharma Shop) to Estdomains Inc., I received their reply that they had suspended the domainname. Btw, Estdomains does not accept e-mails. As they write, they get too much spam.... In the complaintform to which they did sent me a link, I copied the text generated by the complainterator, adding the original full UBE.
A DNS traversal now gives the response: [Reports no A record (NXDOMAIN)], and I can't access http://www.generalworldwide.info any longer. |
|
|
|
|
Reply: 4 - 31 |
|
|
| MarkGiles |
| Posted on: Tuesday, February 13th, 2007, 6:24pm |
|
|
Posts: 363
|
Version 5 is available for download from the same links.
This version will generate one email where there are multiple name servers on the same domain.
eg: ns1.chamgogos.com and ns2.chambogos.com will create the one message requesting the removal of both servers.
Copies of all messages generated are stored in the Complainterator folder to track your efforts. Find them under the domain name of the nameserver, eg chambogos.com.txt. |
|
|
|
|
Reply: 5 - 31 |
|
|
| pensioner |
| Posted on: Tuesday, February 13th, 2007, 7:27pm |
|
|
Posts: 21
|
Nice addition Mark, as I did myself already combine mails in such cases into one. Saves a lot of copy/paste and editing.
A little set-back:
it looks like Joker (info@nrw.net) also quickly responds to the complainterator.
All reports (also if the text is changed) get bounced, because they are considered to be spam.
As I had included cc's for ICANN and FTC, I have -after the first bounce- kindly asked ICANN in one of their confirmation reports, to be as kind as to deliver my spam-complaint to spam-generator Joker, as legitimate mail does not seem to be able to get through Joker's anti-complaint-filter.
Update:
Maybe got around the problem. I had myself registered at Joker (yummy, more spam?) and dumped the full report with copy of the UBE in a "spam-report" box.
|
|
|
|
|
Reply: 6 - 31 |
|
|
| MarkGiles |
| Posted on: Wednesday, February 14th, 2007, 10:04pm |
|
|
Posts: 363
|
That is why the contact list has:
The attempt to send will normally hiccup, because the CC is not valid.
Maybe I should not have put in the "valid" address.
|
|
|
|
|
Reply: 7 - 31 |
|
|
| MarkGiles |
| Posted on: Wednesday, February 14th, 2007, 10:11pm |
|
|
Posts: 363
|
Version 6 is available, and has support for Internet Explorer added, as well as some bug fixes.
Download it from here |
|
|
|
|
Reply: 8 - 31 |
|
|
| MarkGiles |
| Posted on: Thursday, March 1st, 2007, 3:56pm |
|
|
Posts: 363
|
Version 8 has
* more improvements,
* support for SeaMonkey,
* detection and warning message for country-level TLDs
* larger contacts list |
|
|
|
|
Reply: 9 - 31 |
|
|
| Ryan |
| Posted on: Sunday, March 11th, 2007, 4:30pm |
|
|
Spam Fighter 
Posts: 76
|
| Any news on the improvements in Version 9? |
A computer once beat me at chess, but it was no match for me at kick boxing.
-- Emo Philips |
|
|
|
 |
Reply: 10 - 31 |
|
|
| MarkGiles |
| Posted on: Wednesday, March 14th, 2007, 5:45pm |
|
|
Posts: 363
|
V 9 is available, and V10 is in test.
You can always download the latest version at the links in the first posting.
This system does not allow me to modify older postings  |
|
|
|
|
Reply: 11 - 31 |
|
|
| MarkGiles |
| Posted on: Friday, March 16th, 2007, 6:47pm |
|
|
Posts: 363
|
Version 10 is available from http://thecarpcstore.com/phpbb2 under Tools. It has
support for Thunderbird mailer,
added [brackets] for IP addresses,
turned off &email option in DNSStuff
Thunderbird is option 3 on the second pop-up, and will automatically put the To and CC on the To line, place the subject in the Subject: line, and the text body, without intervention required.
The reported IP addresses look tidier as in ns1.example.com [123.12.123.12]
With constant calls from the same IP address, DNSStuff can start blocking too many calls with "&email=on" in the URL. Since this option is not necessary to locate the registrar, this version turns it off.
Also, DNSStuff sometimes fails to display, and prompts to click "refresh" from frequent whois users, so this version has a new pop-up to remind the user to do so. |
|
|
|
|
Reply: 12 - 31 |
|
|
| tracker |
| Posted on: Saturday, March 17th, 2007, 11:27pm |
|
|
Posts: 41
|
| I just got through downloading complainterator10 and will give it a shot. Surely a good tool for the trade. |
|
|
|
|
Reply: 13 - 31 |
|
|
| MarkGiles |
| Posted on: Tuesday, March 20th, 2007, 4:56pm |
|
|
Posts: 363
|
Please feed back your experiences, either here or at the download site's forum.
Its development to Version 10 has been in response to users' suggestions. |
|
|
|
|
Reply: 14 - 31 |
|
|
| Ryan |
| Posted on: Monday, April 9th, 2007, 1:52pm |
|
|
Spam Fighter
Posts: 76
|
Thought I'd dust off this thread.
The Complainterator is quickly becoming a tool of choice in reporting spam.
The 11th version is currently being developed and will be even more powerful! |
A computer once beat me at chess, but it was no match for me at kick boxing.
-- Emo Philips |
|
|
|
| |
Reply: 15 - 31 |
|
|
| MarkGiles |
| Posted on: Thursday, April 12th, 2007, 8:58pm |
|
|
Posts: 363
|
|
|
|
|
Reply: 16 - 31 |
|
|
| MarkGiles |
| Posted on: Wednesday, June 13th, 2007, 5:51pm |
|
|
Posts: 363
|
Complainterator has now been upgraded to V14. It has been very successful in getting in the face of the illegal spamming community. A measure of its success can be seen today (June 13) by the DDOS attack on the support forum at thecarpcstore.com
That is the location of one of its download sites and the primary support forum. When spammers divert their attention from using their botnets for sending spam to using them for attacking legitimate sites dedicated to preventing crime, that is an excellent sign that the tide is starting to turn against them.
The likelihood that the FBI will put more of these criminals behind bars simply improves. Jason Downey is the first in line to go down << CLICK HERE FOR MORE INFO
You can help in the fight against criminal web sites and their spammers by using the Complainterator. Despite the DDoS attack on thecarpcstore you can
===Download the version 16 full program package===
* From Spamtrackers.eu << CLICK HERE TO DOWNLOAD ''Version 16''
The introduction for newcomers can be found by clicking here << CLICK HERE TO VIEW
|
|
|
|
|
Reply: 17 - 31 |
|
|
| MarkGiles |
| Posted on: Wednesday, June 20th, 2007, 1:31am |
|
|
Posts: 363
|
Version 16 is now released and available for download.
Spammers have been attacking one of the distribution and support sites in a vain attempt to prevent you from getting access to this tool. |
|
|
|
|
Reply: 18 - 31 |
|
|
| dj |
| Posted on: Wednesday, July 18th, 2007, 6:54am |
|
|
Super Spam Fighter 
Posts: 108
|
I am getting a number of spams which give the numeric address (eg 999.999.999.999) rather than a domain name. How do we tackle these?
The ones I get masquerade as an electronic greeting card which then tries to do a download, so they are quite nasty.
Hi. School friend has sent you a postcard.
See your card as often as you wish during the next 15 days.
SEEING YOUR CARD
If your email software creates links to Web pages, click on your card's direct www address below while you are connected to the Internet:
http://999.999.999.999/?xxxxxxxxxxxxxxxxxxxxxxxxxxx
Or copy and paste it into your browser's "Location" box (where Internet addresses go).
We hope you enjoy your awesome card.
Wishing you the best,
Postmaster,
GreetingCards.Com
|
Dave
"Now its personal" "Don't get mad, get even!" |
|
|
|
|
Reply: 19 - 31 |
|
|
| MarkGiles |
| Posted on: Friday, July 20th, 2007, 10:13pm |
|
|
Posts: 363
|
Complainterator
- the automated spam site complaint generator - is now upgraded to version 18.
Complainterator runs under Windows, and will drive your keyboard, mouse and screen as it looks up the spammed site's registrar, and also the registrars for the name servers for the site.
It allows you to preview the messages it has prepared, so you can add your own additional evidence, and then you can hit "Send" to release them to the registrars.
Complainterator has now accounted for the suspension of thousands of spammed and illegal web sites since its first release.
Why get mad, when you can get even? |
|
|
|
|
Reply: 20 - 31 |
|
|
| MarkGiles |
| Posted on: Monday, August 27th, 2007, 9:32pm |
|
|
Posts: 363
|
One of the distribution sites for Complainterator, together with its support forum, is located at http://www.thecarpcstore.com/phpbb2
This site has been taken off-line (IP address null routed) to thwart a large DDoS attack (August 27th-28th).
Version 19.1 of the Complainterator is still available for download from http://www.complainterator.com
Version 19.1 has changes to support new functions and restrictions in the DNSStuff.com site, which it uses to perform lookups on spammed sites to determine their registrars, their name servers, and their IP addresses. |
|
|
|
|
Reply: 21 - 31 |
|
|
| phantazm |
| Posted on: Saturday, September 1st, 2007, 9:35am |
|
|
New Member 
Posts: 18
|
"This site has been taken off-line (IP address null routed) to thwart a large DDoS attack (August 27th-28th)."
1 Sept today, and still off. When will you come back..?
Perhaps an idea to mirror the site? |
|
|
|
|
Reply: 22 - 31 |
|
|
| spamislame |
| Posted on: Tuesday, September 4th, 2007, 10:26am |
|
|
Posts: 66
|
"This site has been taken off-line (IP address null routed) to thwart a large DDoS attack (August 27th-28th)."
1 Sept today, and still off. When will you come back..? |
Whenever they give up the attack. The attack is still going on (week #3, if my counting skills are correct.)
Perhaps an idea to mirror the site? |
Please keep in mind that this is not our fulltime jobs.  (Though we all wish it were.) KyferEz has bee pretty busy. Mirroring takes time, bandwidth, and money. It's definitely a good idea but for now: not feasible or cost effective.
We'll post back if / whenever it does come back up.
You can still post questions or reports here or at Castlecops of course.
SiL |
|
|
|
|
Reply: 23 - 31 |
|
|
| MarkGiles |
| Posted on: Saturday, October 27th, 2007, 6:38pm |
|
|
Posts: 363
|
VERSION 20.1 is available from the home site at http://www.complainterator.com
This version addresses a problem brought about by some changes at DNSStuff.com.
Frequent users of Complainterator were hitting a usage limit introduced at DNSStuff on "WHOIS" lookups. This newer version of Complainterator allows the user to select an alternative service, so as to reduce the load on DNSStuff.com |
|
|
|
|
Reply: 24 - 31 |
|
|
| MarkGiles |
| Posted on: Friday, March 7th, 2008, 6:12am |
|
|
Posts: 363
|
Version 20.5 was released March 7, 2008
Complainterator version 20 has many new features over previous releases.
20.5 has some new features to help get the message across to the registrars in the People's Republic of China, and to make them more effective in the fight against criminal spammers and fraudsters.
More information can be found at the home site
* * http://complainterator.com * *
and at the support site
* * http://www.castlecops.com/f287-Complainterator.html * *
|
|
|
|
|
Reply: 25 - 31 |
|
|
| MarkGiles |
| Posted on: Friday, March 7th, 2008, 3:55pm |
|
|
Posts: 363
|
The Automated Complaint Generator is updated to version 20.5
The release date is March 7, 2008
See the top posting for details |
|
|
|
|
Reply: 26 - 31 |
|
|
| MarkGiles |
| Posted on: Friday, April 4th, 2008, 3:57am |
|
|
Posts: 363
|
Version 21.0 was released April 4, 2008.
It incorporates a user requested suggestion to prevent invalid requests going to registrars to remove their own servers. Previously, removing these invalid requests was a user responsibility.
Users still need to check the validity of requests, but the likelihood of requesting a major registrar (Google, Yahoo, Lycos, GoDaddy, Enom etc) to remove their name servers is greatly reduced. |
|
|
|
|
Reply: 27 - 31 |
|
|
| MarkGiles |
| Posted on: Sunday, July 6th, 2008, 2:03am |
|
|
Posts: 363
|
| Version 22.0 is out as at July 6th. See the top posting |
|
|
|
|
Reply: 28 - 31 |
|
|
| MarkGiles |
| Posted on: Thursday, July 10th, 2008, 7:16am |
|
|
Posts: 363
|
Some bugs introduced in the new version have been fixed, and the current version is 22.1, dated July 10, 2008.
Download and start complaining |
|
|
|
|
Reply: 29 - 31 |
|
|
| pkiula |
| Posted on: Wednesday, August 13th, 2008, 10:22pm |
|
|
Posts: 1
|
All this is nice and all. When I am the recipient of spam.
But if I am a website that is being "joe-jobbed" or spamvertised against my wishes and tech-idiots are using these tools to report to registrars, the registrars have a lot of stuff to deal with. From users who know no better.
This means registrars now have fees that they charge us domain owners for a service that would have been unnecessary if the spam recipients using these tools were just a touch savvier in WHICH registrar to report to.
If a spammer sends millions of emails with "Yahoo.com" or "Tebweb.com" URLs in it, what can tebweb do about it other than to report to the ISP of the spammer etc? As a website owner, I have done everything technically possible (email reporting of abused URLs for our domain in emails that we do NOT send; web form for reporting which automatically deletes such URLs; banning spammers IPs from accessing our server...and so on).
What else can website owners do when registrars of decent websites are being bombarded by stupid complaints? |
|
|
|
|
Reply: 30 - 31 |
|
|
| MarkGiles |
| Posted on: Thursday, August 14th, 2008, 1:55am |
|
|
Posts: 363
|
When complaints go to registrars, it is up to te registrar to implement their policies. In many cases, the criminal evidence for sites is clear and unequivocal.
However, there is always the exception to the general rule. Examples are
1. sites that are joe-jobbed. These are going to get blacklisted by automated URIBL systems as a matter of course. Major sites will have to approach the URIBL systems and negotiate removal or whitelisting. Registrars usually contact the customer before suspending in such cases.
2. sites are hijacked, and rogue web sites are placed on a subdomain. As in the above case, such a site will go into the automated URIBLs. The site owner will then become indirectly aware that they have a security problem. When requests go to registrars, it is less likely that there will be a clear case of criminal evidence. Again, it is up to the registrar to implement their policies, and to communicate with the customer. This will also serve the useful purpose of alerting the site owner to their security problem.
Running a web site and placing it on the Internet does carry some responsibilities. Reporting sites that are being included in spams is a necessary process, to ensure that site owners are meeting their responsibilities. |
|
|
|
|
Reply: 31 - 31 |
|
Pages: 1, 2, 3 : All |
Logged
Locked Board