[email] All you need is an email address!
Sun-Tsu
spammy now uses http://aimeecam2.da.ru
These spammers spam via AIM, email and chat room messages and most likely
related to charles charmatz / candidhosting / SPEWS S339
Domain status
domain:
Domain: aimeecam2.da.ru
Status: used
Created: 09.10.2003
Last modified: 09.10.2003
Email: rob...@methodical.us
Type: WWW-address
Title: Aimee's Live WebCam
Description:
Base URL: http://methodical.hornyspace.com/aimee
Masq: on
Trans: off
they use the different numbers for different spam runs and victim lists. it
also allows them to avoid detection and blocking by using 100 different
redirects at da.ru, which was loaded on da.ru in June. It's time AOL took a
closer look at what can be done to dtop these AOL spammers and account thieves
Who is Kathleen Gunn and why is her name big penis?
Lately, almost all of the porn hitting the spam traps leads to da.ru, spammy's
new implement of delivery and favorite of charles charmatz / candidhosting.com
/ SPEWS S339 and servergod / clickMAN / SPEWS S822, who have literally
hundreds of porn sites with da.ru. Digging deeper into the "anals of
spammydumb" while researching
Click Here to Add 2-4 Inches to Your Penis Naturally!
http://www.naturalenlarge31.da.ru/
the "name" Kathleen Gunn appeared again. Who is Kathleen Gunn and why is her
name Big Penis?
Oh, look, another 100 pr0n sites on da.ru all pointing to biggererection.com
Most likely spammy believes that this will protect his domain names from LARTS.
These 100 sites were created on da.ru over 3 months ago by dipl...@mail.com
http://www.naturalenlarge(1-100).da.ru/ redirects to http://big.penis.name/
which redirects to http://www.biggererection.com/ft=econ1431
The .NAME TLD is worthless and appears to be used only by spammers. Has anyone
*ever* seen a valid .NAME domain?
--
Domain: naturalenlarge31.da.ru
Status: used
Created: 24.06.2003
Last modified: 24.06.2003
Email: dipl...@mail.com
Type: WWW-address
Title: Enlargement With No Pumps or Pills!
Description: Enlargement With No Pumps or Pills!
Base URL: http://big.penis.name/
Masq: on
Trans: off
--
big.penis.name resolves to 64.85.73.31
www.big.penis.name resolves to 64.85.73.31
Mail for big.penis.name is handled by 127.0.1.50 (0) 127.0.1.50
--
Domain Name: BIG.PENIS.NAME
Sponsoring Registrar: Dotster, Inc.
Domain Status: ok
Registrant ID: 1050746CONTACT-NAME
Registrant Organization: Kathleen Gunn
Registrant Name: Kathleen Gunn
Registrant Address: 609 Dove Haven
Registrant City: Round Rock
Registrant State/Province: TX
Registrant Country: UNITED STATES
Registrant Postal Code: 78664
Admin ID: 1050747CONTACT-NAME
Admin Organization: Kathleen Gunn
Admin Name: Kathleen Gunn
Admin Address: 609 Dove Haven
Admin City: Round Rock
Admin State/Province: TX
Admin Country: UNITED STATES
Admin Postal Code: 78664
Admin Phone Number: +1.5122387249
Admin Fax Number:
Admin Email: bigpu...@mail.com
Tech ID: 1050749CONTACT-NAME
Tech Organization: Kathleen Gunn
Tech Name: Kathleen Gunn
Tech Address: 609 Dove Haven
Tech City: Round Rock
Tech State/Province: TX
Tech Country: UNITED STATES
Tech Postal Code: 78664
Tech Phone Number: +1.5122387249
Tech Fax Number:
Tech Email: bigpu...@mail.com
Billing ID: 1050748CONTACT-NAME
Billing Organization: Kathleen Gunn
Billing Name: Kathleen Gunn
Billing Address: 609 Dove Haven
Billing City: Round Rock
Billing State/Province: TX
Billing Country: UNITED STATES
Billing Postal Code: 78664
Billing Phone Number: +1.5122387249
Billing Fax Number:
Billing Email: bigpu...@mail.com
Name Server: NS1.NAMERESOLVE.COM
Name Server: NS2.NAMERESOLVE.COM
Name Server: NS3.NAMERESOLVE.COM
Name Server: NS4.NAMERESOLVE.COM
Created On: 2002-11-12T02:03:40Z
Expires On: 2003-11-12T02:07:58Z
Updated On: 2002-11-12T02:03:41Z
--
big.penis.name resolves to 64.85.73.31
3 130.152.180.21 3.673 ms isi-1-lngw2-atm.ln.net [AS226] Los Nettos
origin AS
4 198.172.117.161 6.224 ms ge-9-3.a01.lsanca02.us.ra.verio.net [AS2914]
Verio
5 129.250.29.136 6.701 ms xe-1-0-0-4.r21.lsanca01.us.bb.verio.net
[AS2914] Verio
6 129.250.2.11 7.799 ms p16-7-0-0.r00.lsanca01.us.bb.verio.net
[AS2914] Verio
7 208.173.57.21 8.719 ms bpr1-so-6-0-0.LosAngeles.cw.net
8 208.172.47.1 10.102 ms dcr1-ae1-0.LosAngeles.cw.net
9 208.172.82.62 31.522 ms acr2-loopback.Seattle.cw.net
10 208.172.81.222 31.920 ms bhr2-pos-0-0.Tukwilase2.cw.net
11 216.34.64.42 32.158 ms csr11-ve241.Tukwilase2.cw.net
12 64.85.73.31 31.603 ms m1.dnsix.com (Fake rDNS)
Five Ten (FIVETEN): added 2002-04-09; on netlimited.net and exodus
64.85.73.31
%rwhois V-1.5:001ab7:00 rwhois.exodus.net (Exodus Communications)
network:Class-Name:network
network:Auth-Area:0.0.0.0/0
network:Network-Name:64.85.73.0
network:IP-Network:64.85.73.0/25
network:Organization;I:Dotster, Inc.
network:Name;I:Nick Reeves
network:Email;I:nre...@dotster.com
network:Street;I:11807 N.E. 99th Street.
Suite 1100
network:City;I:Vancouver
network:State;I:WA
network:Postal-Code;I:98682
network:Country-Code;I:USA
network:Class-Name:network
network:Auth-Area:0.0.0.0/0
network:Network-Name:64.85.64.0
network:IP-Network:64.85.64.0/18
network:Organization;I:Exodus IDC - SE/SE2
network:Name;I:Exodus IP Address Administrator
network:Email;I:ipaddre...@exodus.net
network:Street;I:12301 Pacific Coast Hwy
network:City;I:Tukwila
network:State;I:WA
network:Postal-Code;I:98168
network:Country-Code;I:USA
--
biggererection was also used with the 92 subdomains in the form
webcamgirls(1-92).da.ru which was spammed via AIM and in AOL chat rooms like
aimeecam.da.ru
AimeeSexy5476 [4:03 AM]: Hey Mr1800King! 20/F/SoCal! I'm doing a LIVE SHOW on
my WEBCAM!! CLICK HERE to get INSTANT VIP ACCESS!
http://vl...@r.lycos.com/r/dzdsfyg/http://aimeecam.da.ru/
-----------------
Subj: All you need is an email address!
Date: 10/5/2003 2:09:14 AM Canada Central Standard Time
From: Angel18Baby85
CLICK HERE TO WATCH ME AND MY GIRLFRIENDS GET WILD ON OUR WEBCAM!!!
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
<URL:http://www.killfile.org/~tskirvin/nana/>