MainDoctor WhoMusicSoftware
Main Page

Alden Bates' Weblog

Feigning normality since 1973

Spam post #456345673

Filed in: Spam.

Our first contestant this evening posts has been mentioned here

So far he's been posting roughly once a day, leaving comments which start off with phrases like "Pleasse Do not delete this urls , i need money for my child", "Please Do not delete it , I need lots of money urgent.", and "Do not delete it please. I need money urgent". He uses http://google.com/ as a link, probably to trigger whitelisting, but his comments a filled with links to message boards on phpbbx.de (I'm sent an email to their abuse address), myforum.ro. The email addresses he uses are along the lines of corpseh@tut.by, seomail1@tut.by, seomail2@tut.by, etc.

The message board links all redirect to pages on the domain online-deals.org (I've just informed their web host). Whois information is mostly blank, but there is this:

Registrant Name: Alexey Tesliuk
Registrant Organization: BelPromStroy
Registrant Country: BY (Belarus)
Registrant Email: wrestlerr@mail.ru

I have no idea if that's valid info or not. There's a Belpromstroy bank in Minsk...

Contestant number two posts using hotmail addresses like d87s_test994@hotmail.com and d92s_test637@hotmail.com, but all other information is randomised. Comments consist of a random text string followed by four URLs in various formats consisting of links to files on site which allow file uploads. These links redirect to rx-simple.com and rx-simple-pharmacy.com. Both domains have their details protected by WhoisGuard - I've sent them two reports, and also sent abuse reports to the web-hosts the two sites are on.

Posted January 23, 2007 6:49 PM

Post a comment





Tetrap.com Site Map