 |
|
 |
|
|
 |
THEHOTTESTTHINGAROUND.COM |
 |
 |
|
|
04-24-05 07:45 AM
I have been getting spam from the same group for months now. The domain
names change but they are all registered to the same company
(THEHOTTESTTHINGAROUND.COM) in Canada. Without fail SpamCop is never
able to resolve any of their names an yet they are always pingable for
me. What is going on?
----------------------------------------------------------------------------
----------
X-YPOPs-Folder: Inbox
X-Apparently-To: x via 216.109.117.231; Fri, 22 Apr 2005 11:41:18 -0700
X-Rocket-Spam: 69.228.162.29
X-YahooFilteredBulk: 69.228.162.29
Authentication-Results: mta141.mail.dcn.yahoo.com
from=jmhgturxpwse.backpost.biz; domainkeys=neutral (no sig)
X-Originating-IP: [69.228.162.29]
Return-Path: <wiywlpky@jmhgturxpwse.backpost.biz>
Received: from 69.228.162.29 (EHLO cildcft.backpost.biz) (69.228.162.29)
by mta141.mail.dcn.yahoo.com with SMTP; Fri, 22 Apr 2005 11:38:50 -0700
From: "Limited Promotion" <wiywlpky@jmhgturxpwse.backpost.biz>
To: <wfesocc@jmhgturxpwse.backpost.biz>
Subject: Review stores in your area
Date: Fri, 22 Apr 2005 11:41:20 -0800
MIME-Version: 1.0
Content-Type: text/html;
Content-Length: 1493
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2523" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV align=center><FONT face=Arial color=#ffffff size=2>pssbqxfl
hrbujhuddlms ceoicloui mniasyq wpckqzvezm
eycivulllc rdjkvzmveub feoibcaeqjbxt<BR>ymbbfu
azgurgwls zmkbolnho braelhgsfmtwk diozwbrklvr
lvtwmfkfa pumxuagsi sloddgikeafp<BR>pgejnomceqciq
cujhjk yzloeedxsp fetipnbevvix vzkpnwvxy
gvlukoxcnsu vbxdnirfify hkskwugjpx<BR>jktcabbnbbgak
gtilarsn glbwpqgxouwu kdiecdujv ffmshutquio
ehfhvhymtyx soqyzpfjtwa icyuofrhrem<BR>uxetpuk
nulwpdptklym yfmczb gttxncdrokymh sxxxgdagx
tavwektqp prpiyngs gwarmhlhdlxs<BR>deeuck
oemuczli xgzlkm gjwlmbnejgg ewhjiqp
rrkwuzctzbzzh yhdqye mijfskyv</FONT></DIV>
<DIV align=center><FONT face=Arial size=2><A
href="http://jmhgturxpwse.backpost.biz/shopper.html?xvweruwbzbbyh"><IMG
alt="" hspace=0
src="http://jmhgturxpwse.backpost.biz/123.gif?iqpyko" align=baseline
border=0></A></FONT></DIV>
<DIV align=center><FONT face=Arial color=#ffffff size=2>qvqrevraslnn
grizjuwmx htcpkmsws cyqnedrz mvqpsiejkrr
ljzrjokk xlndbw cldyudsgkqac<BR>whznnxww
xnbfhfv iwobdmhqeqfc tgxdivyl dpgbgqdp
rnbdveonwajve nwcqmboojxms eyumtn<BR>jthith
liintpaas sawgoq nshxytfmvqgv zivtsfpgy
mqjoegdwrp grvtxgiieqxt bhiangygip<BR>ygbopbdbevyq
zwzjipxzsvsox nsowsnypnfh jxlusxlkc jcnddinc
wnhxtrrk ewcitzodwmd jeatnt<BR>aylrirp
ydxrcvdh haaqjaffq gixtwhv cvgkluwdrth
rkqjcahf mvjuifl takguevqq<BR>jvesnvzc
afgwydaeh tpiapibahgknd wfvpsnqrls ghfwsz
qihukaqpdg mzkgexqzlcu ebrblo</FONT></DIV><FONT
face=Arial size=2>
<DIV align=left><A
href="http://jmhgturxpwse.backpost.biz/n.htm?wwsivlck"><IMG
alt="" hspace=0 src="http://jmhgturxpwse.backpost.biz/lil.gif?cwloxyjpe"
align=baseline border=0></A></DIV>
<DIV align=left><FONT color=#ffffff>sribnjjcxp utbblnhxtcp
hnsujz nzqqqbbbq txnjbi hmtgyfpx
haiibsjlrx phaefpbwniu<BR>gyfnloexkb eswvcnv
ltqfhyrhisdkn bylldjv teuskvpagdihq wbxyhs
jelbkaeobd eohitf<BR>acawpdux kkfzfa
apolpajb eekkdvbgj rbmyqhx xxvcnzv
hcbjdhjczp oiikhxinl<BR>kdxlmuizi muozeyucbdpcr
qsqoziwrsf aldgrnizzbej vwhrronisnxn gbohmzla
hcwquq dvawxabnbv<BR>wfhvarhkwhs ebupjf
gzvxtundvsh dydvrlawayr cmfqzg kgchwppebm
xqmmpu npxzrhcauugqf<BR>kubwfld cfffmxylhrsa
bxbjmi zctjtjofayax xfbxzfujeussp tebnmika
imlxmisj ihwuofkh</FONT></FONT><FONT face=Arial
size=2></FONT></DIV></BODY></HTML>
[ Post a follow-up to this message ]
|
|
|
 |
|
 |
|
 |
|
|
|
Re: THEHOTTESTTHINGAROUND.COM |
|
|
|
|
04-24-05 07:45 AM
"Tom Ruehle" <NoSpam@NoSpam.com> wrote in message
news:d4f00m$jl7$1@news.spamcop.net...
> I have been getting spam from the same group for months now. The domain
> names change but they are all registered to the same company
> (THEHOTTESTTHINGAROUND.COM) in Canada. Without fail SpamCop is never
> able to resolve any of their names an yet they are always pingable for
> me. What is going on?
>
First, NEVER post SPAM as you did, if u feel the need you can post a tracker
(the link at the top of as parse or post in .spam.
Now, It seems the name servers also owned by the same outfit, which by the
way has moved around canada, from Nanaimo to Laval and still uses the name
Software Factory Solutions seem to have conspired, along with MCI to block
SpamCop queries.
I bet the registration address is a mailboxes etc or similar . type POBox
which forwards the mail, or trashes it, I doubt the offender is ever near
the registered addresses., possibly never even in Canada.
they must have had a pink contract with ATMLinkInc and CalPOP for spamming
for quite a while but seem to have had to move to SBCGlobal recently which
seems to be trying to compete with kornet, tietong, cnc-noc and the
hana-fools for spammer business. I've notied more and more spam sourced from
SBCGlobal and a few websites recently.
Anyway this jerks crap doesn't trickle out of a zombie net, it comes from a
relatively stable netblock cycling through 1-255 of the last quartet in it's
IP space, so it's a kind of "mainsleaze". There are some threads on
SBCGlobal in news.spamcop, and others relating to this spew.
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: THEHOTTESTTHINGAROUND.COM |
|
|
|
|
|
|
|
Re: THEHOTTESTTHINGAROUND.COM |
|
|
|
|
04-24-05 07:45 AM
"DJ Mike" <I_Report_Spam@webtv.net> wrote in message
news:24090-426B47AE-219@storefull-3274.bay.webtv.net...
> Since spamcop doesn't resolve domains on 69.228.162.13, I keep a list of
> domains hosted there so I don't spend time looking them up every time:
>
> http://eclecticdjs.com/mike/spam/spam-4-05.html#mci
>
> Since they know mci ignores complaints they never change their IP.
Interesting my IP (always the same) is different from yours, 63.82.96.35
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: THEHOTTESTTHINGAROUND.COM |
|
|
|
|
04-24-05 10:45 PM
From: bar_n0ne@hotmail.com (Berny)
>"DJ Mike" <I_Report_Spam@webtv.net>
> wrote in message
>news:24090-426B47AE-219@storefull-32
>74.bay.webtv.net...
[vbcol=seagreen]
[vbcol=seagreen]
>Interesting my IP (always the same) is
> different from yours, 63.82.96.35
My mistake. 69.228.162.13 (sbcglobal.net) is the IP they are being sent
from. 63.82.96.35 (MCI) is the IP where the web sites live.
Would be nice if I could have email from 69.228.162.13 directed to
Trash before spamcop's filter directs it to Held. Or bounced back to
sbcglobal.net.
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: THEHOTTESTTHINGAROUND.COM |
|
|
|
|
04-24-05 10:45 PM
On Sun, 24 Apr 2005 09:22:14 -0700, DJ Mike scratched out the following:
> My mistake. 69.228.162.13 (sbcglobal.net) is the IP they are being sent
> from. 63.82.96.35 (MCI) is the IP where the web sites live.
>
> Would be nice if I could have email from 69.228.162.13 directed to Trash
> before spamcop's filter directs it to Held. Or bounced back to
> sbcglobal.net.
It's always good to post these IPs in the spam forums with a subject like
"I enjoy constant pinging" or some such thing. If they want visitors, let
them have them.
NG's such as *.spamtrap, *.spam, *.spamming etc are good groups in which
to enter IP addresses "of interest" to the world.
--
Once movie theaters gave out steak knives
Today they confiscate them
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: THEHOTTESTTHINGAROUND.COM |
|
|
|
|
04-25-05 12:45 PM
"eddie" <eddie@eddie.web> wrote in message
news:pan.2005.04.24.20.53.14.777000@eddie.web...
> On Sun, 24 Apr 2005 09:22:14 -0700, DJ Mike scratched out the following:
>
>
Trash[vbcol=seagreen]
>
> It's always good to post these IPs in the spam forums with a subject like
> "I enjoy constant pinging" or some such thing. If they want visitors, let
> them have them.
> NG's such as *.spamtrap, *.spam, *.spamming etc are good groups in which
> to enter IP addresses "of interest" to the world.
>
> --
> Once movie theaters gave out steak knives
> Today they confiscate them
There is something very fishy with 63.82.96.35
SC always triesd to parse the links, and a parse Always takes forever, often
SEVERAL minutes, and then gives up and calls the sites fake.
Tracert goes into stealth mode (returns *.*.*.*) as soon as the tracing
leaves my netspace and enters MCI
You cannot ping these sites (firewalled I imagine)
MCI is up to their necks with supporting this site.
Yahoo and SBC have joined in Cable and DSL services about the same time my
Yahoo account started receiving this spew (by the way, that account is a
pure spamtrap, no mails sent for over 4 years, and this spew started a few
months ago) interestingly this Yahoo account has an apparent address in
SBC's service area, Did Yahoo pass on the addy?
Well of course this outfit started spamming from ATMLinkinc and Calpop space
so the SBC/Yahoo link is very speculative or does SBC lord over ATMLinkinc
space now? I don't follow all the takeovers and ownerships.
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: THEHOTTESTTHINGAROUND.COM |
|
|
|
|
04-26-05 07:46 AM
From: bar_n0ne@hotmail.com (Berny)
>There is something very fishy with
> 63.82.96.35
>SC always triesd to parse the links, and
> a parse Always takes forever, often
> SEVERAL minutes, and then gives up
> and calls the sites fake.
Some time ago, someone posted a simular situation. In that case, there
was a name server not listed in the whois. The listed name servers did
nothing and you got passed on to the unlisted one. The process took so
long that SC just gave up.
>Tracert goes into stealth mode (returns
> *.*.*.*) as soon as the tracing leaves my
>netspace and enters MCI
Before I made my list, I did my tracerouted them through Opus One:
http://www.opus1.com/www/traceroute.html
which is on MCI. I like the idea of using their bandwidth without paying
for it.
I noticed that the Return-Path contains the domain name in this format:
[random string][dirty domain name].com.
I added a couple of them to my blocked addresses like this:
[dirty domain name].com
to see if they would get blocked w/o the random string. Getting pritty
fed up with them. They spam me more than almost all other sources put
together.
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: THEHOTTESTTHINGAROUND.COM |
|
|
|
|
04-27-05 12:45 PM
Berny, <bar_n0ne@hotmail.com>, the docile, septic flatworm, and assistant to
the shot firer in the pits, groaned:
> First, NEVER post SPAM
Why not?
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
Re: THEHOTTESTTHINGAROUND.COM |
|
|
|
|
04-27-05 12:45 PM
"Kadaitcha Man" <nospam@XXXX-off-and-die.com> wrote in message
news:6ae940cefe4b4129805ee0dc4e34dbe3@al
t.binaries.erotica.up-the-duff...
> Berny, <bar_n0ne@hotmail.com>, the docile, septic flatworm, and assistant
to
> the shot firer in the pits, groaned:
>
>
>
> Why not?
Because, if it's left around at room temperature, out of the can, it begins
to smell after a day or so.
spam of course, has it's own newsgroup; .spam , where you may post spam to
your hearts content.
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
Sponsored Links |
|
|
|
|
 |
All times are GMT. The time now is 08:46 AM. |
 |
|
|
 |
|
 |
|
|
 |
|
Forum Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
|
HTML code is OFF
vB code is ON
Smilies are ON
[IMG] code is OFF
|
|
|
|
|
 |
|
 |
|
