I received a spam from avsMUNGED-gold.com. They are a porn site and all signs lead to blocking them except how long their domain has been around and the lack of information showing up in the tools I didn't block them. Comments?
Lindsay
On Tuesday, April 12, 2005, 7:38:34 AM, Lindsay Snider wrote:
I received a spam from avsMUNGED-gold.com. They are a porn site and all signs lead to blocking them except how long their domain has been around and the lack of information showing up in the tools I didn't block them. Comments?
Lindsay
They seem to be hosted on dtag.de, which is not a usual haven for spammers. Their servers are not on SBL or common RBLs. No NANAS. 2002 registration:
Domain Name: AVS-GOLD.COM Registrar: DEUTSCHE TELEKOM AG Whois Server: whois.registrar.telekom.de Referral URL: http://www.registrar.telekom.de Name Server: PNS.DTAG.DE Name Server: SECONDARY000.DTAG.NET Status: ACTIVE Updated Date: 06-aug-2004 Creation Date: 05-aug-2002 Expiration Date: 05-aug-2005
Doesn't look like a typical blackhat spammer.
Jeff C. -- "If it appears in hams, then don't list it."
On Tuesday, April 12, 2005, 7:59:34 AM, Jeff Chan wrote:
On Tuesday, April 12, 2005, 7:38:34 AM, Lindsay Snider wrote:
I received a spam from avsMUNGED-gold.com. They are a porn site and all signs lead to blocking them except how long their domain has been around and the lack of information showing up in the tools I didn't block them. Comments?
Lindsay
They seem to be hosted on dtag.de, which is not a usual haven for spammers. Their servers are not on SBL or common RBLs. No NANAS. 2002 registration:
Domain Name: AVS-GOLD.COM Registrar: DEUTSCHE TELEKOM AG Whois Server: whois.registrar.telekom.de Referral URL: http://www.registrar.telekom.de Name Server: PNS.DTAG.DE Name Server: SECONDARY000.DTAG.NET Status: ACTIVE Updated Date: 06-aug-2004 Creation Date: 05-aug-2002 Expiration Date: 05-aug-2005
Doesn't look like a typical blackhat spammer.
Note that I'm not saying they're not spammers, just that it's not a typical host for spammers.
Also since they're in Germany on the German phone company's network it's possible that reporting abuse to them *may* have more success than say reporting abuse to Korea.
Lindsay, Have you tried complaining to:
% whois -h whois.abuse.net DTAG.DE abuse@t-ipnet.de (for dtag.de) sls.dk-cc@telekom.de (for dtag.de)
If so, what did they say?
Jeff C. -- "If it appears in hams, then don't list it."
They seem to be hosted on dtag.de, which is not a usual haven for spammers. Their servers are not on SBL or common RBLs. No NANAS. 2002 registration:
Domain Name: AVS-GOLD.COM Registrar: DEUTSCHE TELEKOM AG Whois Server: whois.registrar.telekom.de Referral URL: http://www.registrar.telekom.de Name Server: PNS.DTAG.DE Name Server: SECONDARY000.DTAG.NET Status: ACTIVE Updated Date: 06-aug-2004 Creation Date: 05-aug-2002 Expiration Date: 05-aug-2005
Doesn't look like a typical blackhat spammer.
Note that I'm not saying they're not spammers, just that it's not a typical host for spammers.
Also since they're in Germany on the German phone company's network it's possible that reporting abuse to them *may* have more success than say reporting abuse to Korea.
Lindsay,
Hello! Sorry for the slow response, I was away yesterday.
Have you tried complaining to:
% whois -h whois.abuse.net DTAG.DE abuse@t-ipnet.de (for dtag.de) sls.dk-cc@telekom.de (for dtag.de)
I reported it to abuse@nic.telekom.de the owner of the ip 62.157.174.118 I received the email from. After seeing this email, I also reported it to the two addresses you suggested.
If so, what did they say?
sls.dk-cc@telekom.de was accepted and then bounced by an exchange server. No word back yet from abuse@nic.telekom.de or abuse@t-ipnet.de
Jeff C.
"If it appears in hams, then don't list it."
Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss
On Thursday 14 April 2005 11:09 am, Lindsay Snider wrote:
They seem to be hosted on dtag.de, which is not a usual haven for spammers. Their servers are not on SBL or common RBLs. No NANAS. 2002 registration:
Domain Name: AVS-GOLD.COM Registrar: DEUTSCHE TELEKOM AG Whois Server: whois.registrar.telekom.de Referral URL: http://www.registrar.telekom.de Name Server: PNS.DTAG.DE Name Server: SECONDARY000.DTAG.NET Status: ACTIVE Updated Date: 06-aug-2004 Creation Date: 05-aug-2002 Expiration Date: 05-aug-2005
Not to beat a dead horse but I checked our system and I was one of 24 people to receive this email from them.
Lindsay
-
Jeff Chan -
Lindsay Snider