Welcome, Guest. Please login or register.
Wednesday, September 8th, 2010, 8:49pm
Home Help Calendar Search Register Login

Forum Login
Username: Create a new Account
Password:     Forgot Password

 Board Index    Spam    Spam Fighting Tips & Techniques  ›  Elite Herbal spam scam
Users Browsing Forum
No Members and 1 Guests

 Pages: 1
Recommend Print
  Author    Elite Herbal spam scam  (currently 879 views)
MarkGiles
Posted on: Saturday, November 10th, 2007, 5:11am Report to Moderator
All-Star


Posts: 363
Sitting under the name servers ns1.a200dns.com and ns2.a200dns.com are a slew of illegal web sites - Elite Herbal.
This scam is exposed in the EU Spam Wiki at <<Exposure on Elite Herbals>>

Numeroue alerts have been sent to the registrars from the Castlecops Spam Incident Reporting and Temination project (SIRT)
<<Report on alqim.com>>
<<Report on altrant.com>>

The name servers are registered with Beijing Innovative Linkage Technology, a registrar who is yet to learn how to effectively suspend name servers.
They persist in treating the process the same as the one used to remove web sites - i.e. merely setting the status to clientHold:

Status: clientHold
Updated Date: 01-nov-2007

Sadly, that does not do the job. To suspend a name server domain, they need to change the addresses to something that does does not route to the addresses of the web sites. This could be 0.0.0.0 or 127.0.0.1 or 61.61.61.61 for example.

Then they need to set the status so that the criminal owner can no longer update it, delete it and redefine it with another registrar, or do a transfer.
That means setting the status to
* clientUpdateProhibited
* clientDeleteProhibited
* clientTransferProhibited
* clientHold

The sites themselves can be suspended individually by their registrar,
COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM

Some have already been suspended:
jigzpone.com
clientDeleteProhibited
clientHold
clientRenewProhibited
clientTransferProhibited
clientUpdateProhibited


icbnc.com
clientDeleteProhibited
clientHold
clientRenewProhibited
clientTransferProhibited
clientUpdateProhibited


The McAfee Site Advisor reviews of these sites show what people think of them

http://siteadvisor.com/sites/oafacrew.net
http://siteadvisor.com/sites/oxotis.com
http://siteadvisor.com/sites/ovacions.com
http://siteadvisor.com/sites/ohmylyts.com
http://siteadvisor.com/sites/ochitaro.net
http://siteadvisor.com/sites/ohmidas.net
http://siteadvisor.com/sites/obresos.net
http://siteadvisor.com/sites/napapyri.com
http://siteadvisor.com/sites/nbvad.com
http://siteadvisor.com/sites/nyoutub.com
http://siteadvisor.com/sites/nbnad.com
http://siteadvisor.com/sites/ncdesc.com
http://siteadvisor.com/sites/naturpia.com
http://siteadvisor.com/sites/nyclba.com
http://siteadvisor.com/sites/larobid.com
http://siteadvisor.com/sites/larorum.com
http://siteadvisor.com/sites/myxdcc.com
http://siteadvisor.com/sites/nacizmus.com
http://siteadvisor.com/sites/nasionex.com
http://siteadvisor.com/sites/laregal.com
http://siteadvisor.com/sites/ixalon.com
http://siteadvisor.com/sites/ivylamb.com
http://siteadvisor.com/sites/icsgrt.com
http://siteadvisor.com/sites/besbal.com
http://siteadvisor.com/sites/jigzpone.com
http://siteadvisor.com/sites/icbnc.com

Logged Offline
Private Message
MarkGiles
Posted on: Saturday, November 10th, 2007, 5:36am Report to Moderator
All-Star


Posts: 363
And if that wasn't enough, this crazy spammer has registered dozens of other Elite Herbal spam sites under name servers ns1.masterdns555.com andns2.masterdns555.com servers, as well as ns1.jdns555.com, ns2.jdns555.com

Example reviews will be found for masterdns555.com at
http://siteadvisor.com/sites/hkpcu.com
http://siteadvisor.com/sites/hutsac.com
http://siteadvisor.com/sites/kaooopk.com
http://siteadvisor.com/sites/juliedee.com
http://siteadvisor.com/sites/jocbazar.com
http://siteadvisor.com/sites/cavbelas.net
http://siteadvisor.com/sites/jerkyez.com
http://siteadvisor.com/sites/kalint.com
http://siteadvisor.com/sites/hipopp.com
http://siteadvisor.com/sites/hipusaa.com
http://siteadvisor.com/sites/halomds.com
http://siteadvisor.com/sites/holadgo.com
http://siteadvisor.com/sites/inutime.com
http://siteadvisor.com/sites/ikanpan.com
http://siteadvisor.com/sites/gzlweb.com
http://siteadvisor.com/sites/kalyin.com
http://siteadvisor.com/sites/kaptesy.com
http://siteadvisor.com/sites/chwias.net
http://siteadvisor.com/sites/jorjaer.com
http://siteadvisor.com/sites/kacktis.com
http://siteadvisor.com/sites/chraap.com
http://siteadvisor.com/sites/ciabp.com
http://siteadvisor.com/sites/cimbfm.com
http://siteadvisor.com/sites/kaaboing.com
http://siteadvisor.com/sites/jungx.com
http://siteadvisor.com/sites/cimenax.com
http://siteadvisor.com/sites/cebuonas.net
http://siteadvisor.com/sites/kamoush.com
http://siteadvisor.com/sites/chefurka.com
http://siteadvisor.com/sites/cgamail.com
http://siteadvisor.com/sites/chesfi.com
http://siteadvisor.com/sites/kartuuun.com
http://siteadvisor.com/sites/joomaya.com
http://siteadvisor.com/sites/jrorange.com
http://siteadvisor.com/sites/joyntoys.com
http://siteadvisor.com/sites/johanab.com
http://siteadvisor.com/sites/jugps.com
http://siteadvisor.com/sites/jornalet.com
http://siteadvisor.com/sites/cedohc.com
http://siteadvisor.com/sites/cheshiye.com
http://siteadvisor.com/sites/jogodama.com
http://siteadvisor.com/sites/cheetps.com
http://siteadvisor.com/sites/chirslee.com
http://siteadvisor.com/sites/jolesech.com

and for jdns555.com at
http://siteadvisor.com/sites/matrive.com
http://siteadvisor.com/sites/materdai.com
http://siteadvisor.com/sites/massvieb.com
http://siteadvisor.com/sites/merflog.com
http://siteadvisor.com/sites/massabda.com
http://siteadvisor.com/sites/merecola.com
http://siteadvisor.com/sites/merdjobs.com
http://siteadvisor.com/sites/mempco.com
http://siteadvisor.com/sites/mascrash.com
http://siteadvisor.com/sites/memdry.com
http://siteadvisor.com/sites/melbahs.com
http://siteadvisor.com/sites/mejlss.com

These sites can be reported to COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
on their web site http://www.joker.com
Logged Offline
Private Message Reply: 1 - 1
 Pages: 1
Recommend Print

Locked Board Board Index    Spam Fighting Tips & Techniques  [ previous | next ] Switch to:

Thread Rating
There is currently no rating for this thread
 
Forum Rules
You may not post new threads
You may not post new threads
You may not post polls
You may not post attachments
HTML is off
Blah Code is on
Smilies are on

Powered by E-Blah Platinum 9 © 2001-2005