- This topic is empty.
-
AuthorPosts
-
December 17, 2007 at 6:08 pm #606478supervinceMember
I am getting spam with redirects through bonus-analyze.com
Registrant:
Domains by Proxy, Inc.DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United StatesRegistered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: BONUS-ANALYZE.COM
Created on: 05-Dec-07
Expires on: 05-Dec-08
Last Updated on: 05-Dec-07Administrative Contact:
Private, Registration BONUS-ANALYZE.COM@domainsbyproxy.com
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2599Technical Contact:
Private, Registration BONUS-ANALYZE.COM@domainsbyproxy.com
Domains by Proxy, Inc.
DomainsByProxy.com
15111 N. Hayden Rd., Ste 160, PMB 353
Scottsdale, Arizona 85260
United States
(480) 624-2599 Fax — (480) 624-2599Domain servers in listed order:
NS27.DOMAINCONTROL.COM
NS28.DOMAINCONTROL.COMRegistry Status: clientRenewProhibited
Registry Status: clientTransferProhibited
Registry Status: clientUpdateProhibited
Registry Status: clientDeleteProhibitedRedirects are going to Grand Mondial, Platinum Play, 7-Sultans, and Royal Vegas
Here are some of the affiliate links being used.
xxxhttp://www.platinum-play.com/default.asp?BTag=MS_673700_824830_104054
xxxhttp://www.7-sultans.com/default.asp?btag=MS_673700_824830_104054
xxxhttp://www.royalvegas.com/countdown/default.asp?BTag=MS_673700_824830_104054
xxxhttp://g3.grandmondial.com/en/href.g3?ai=10935_t1_enI have been getting a lot of spam emails lately from casinos and usually I don’t have time to do anything about them so I just mark as spam and move on but its starting to get annoying. I would like to find out who is selling these email addresses or who is behind all this so I think I will start posting them here more often.
Edit: Here are the headers
Delivered-To: xxxxxxxx@gmail.com
Received: by 10.100.225.4 with SMTP id x4cs201367ang;
Mon, 17 Dec 2007 09:20:34 -0800 (PST)
Received: by 10.142.165.9 with SMTP id n9mr790614wfe.93.1197912033203;
Mon, 17 Dec 2007 09:20:33 -0800 (PST)
Return-Path:
Received: from k2smtpout05-01.prod.mesa1.secureserver.net (k2smtpout05-01.prod.mesa1.secureserver.net [64.202.189.56])
by mx.google.com with SMTP id h14si5005982wxd.2007.12.17.09.20.32;
Mon, 17 Dec 2007 09:20:33 -0800 (PST)
Received-SPF: pass (google.com: domain of bounce@bonus-analyze.com designates 64.202.189.56 as permitted sender) client-ip=64.202.189.56;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of bounce@bonus-analyze.com designates 64.202.189.56 as permitted sender) smtp.mail=bounce@bonus-analyze.com
Received: (qmail 30325 invoked from network); 17 Dec 2007 17:20:32 -0000
Received: from unknown (HELO bonus-analyze.com) (72.167.115.144)
by k2smtpout05-01.prod.mesa1.secureserver.net (64.202.189.56) with ESMTP; 17 Dec 2007 17:20:31 -0000
Received: from http://www.bonus-analyze.com ([127.0.0.1]) by bonus-analyze.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 17 Dec 2007 10:20:31 -0700
To: xxxxxxxx@gmail.com
Subject: =?UTF-8?B?TmV3IEltcHJvdmVkIENhc2lubyBLaXQg?=
Message-ID: <988de94eef404327d5fac1b690c29bd7@www.bonus-analyze.com>
Return-Path: bounce@bonus-analyze.com
Date: Mon, 17 Dec 2007 06:30:06 -0700
From: “=?UTF-8?B?T3ByYSBXLg==”
Reply-To: reply@bonus-analyze.com
MIME-Version: 1.0
X-Mailer-LID: 6,8
X-Mailer-SID: 16
X-Mailer-Sent-By: 1
Content-Type: text/html; charset=”UTF-8″
Content-Transfer-Encoding: 8bit
X-OriginalArrivalTime: 17 Dec 2007 17:20:31.0935 (UTC) FILETIME=[2099C4F0:01C840D1]December 17, 2007 at 7:25 pm #756737goldaMemberI don’t think that site is even up?
December 17, 2007 at 7:52 pm #756740supervinceMemberThere is no home page. It was registered on December 5th and it appears they are just using it for redirects. Since they only registered it for 1 year then they probably expect it to get blacklisted soon and will use another domain when that happens.
December 17, 2007 at 8:35 pm #756743AnonymousInactiveIf it is used for re-directing only, then it really doesn’t matter if it is ever blacklisted.
December 17, 2007 at 8:45 pm #756747supervinceMemberIt doesn’t matter if its blacklisted by the search engines. What I meant was that it will eventually be blacklisted by the major email programs such as yahoo, aol, gmail, etc and any emails from that domain will automatically be filtered.
December 17, 2007 at 8:50 pm #756750AnonymousInactive@Rob472 148405 wrote:
It doesn’t matter if its blacklisted by the search engines. What I meant was that it will eventually be blacklisted by the major email programs such as yahoo, aol, gmail, etc and any emails from that domain will automatically be filtered.
Ah! Good point.
-
AuthorPosts