Contributed by: Michael Brusletten
Have you often wondered where the spam is being generated now, since the shut down of McColo.com’s internet access by their upstream providers? Here is a great location to look at for a strong possibility. We’ve traced a good chunk of it coming out of the Hollywood Interactive network located at
600 W. 7th Street, Ste. 360,
Los Angeles, CA 90017.
They have the IP information:
NetRange: 64.27.0.0 – 64.27.31.255
CIDR: 64.27.0.0/19
NetName: HOLLYWOOD-INTERACTIVE
NetHandle: NET-64-27-0-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.CALPOP.COM
NameServer: NS2.CALPOP.COM
If you find a spam link that resolves to a page that says “Independent Pharmaceutical Association” and links to any of these IP address’s, most likely it was a bot master running on their network. There are a great many spam domains that are controlled by Russian spammers known to be linked to Russian Business Network that was up rooted by Spamhaus over a year ago and it looks like they’ve put roots into a hosting service located in Los Angeles. Here are a few spam domains known to be hosted or associated by them.
- nextdayfioricet.com
- justpills.com
- edrugsviaweb.com
- iorderpills.com
- phenterminerankings.com
- freepornmoviesworld.net
- tramadolsales.com
- pillorder.com
- fdapharmacy.com
- gncpharmacy.com
- zpharmacy.com
- drugstore-online.us
- mypharma.us
- officialgeneric.com
- approved-medical.com
- myweightlosspills.net
- generic-junction.com
- approved-pharm.com
- top-rx-pharm.com
- metabofire.com
- us-pharm.com
- discountrxmeds.net
- usmedsatcost.com
- lab88.com
- weightlossmeds.net
- medsforcost.com
- pill-pharm.com
- officialgeneric.com
- approved-medical.com
- foreign-drugstores-online.com
- mydoctorconsultonline.com
- norxservices.com
- rxservices.info
- infomoz.com
- goodpharm.org
- pharmotek.com
- toplinerx.com
- titanpharmacy.com
- eforeignpharmacies.com
- onlinepharmacy.vg
- ed-department.com
- allpillsrx.com
- pharmacy-on-line.com
- newpharm.net
- rx-giant.com
- viagravscialis.net
- medscost.net
- medsjoy.com
- canadianpharmacyltd.com
- thecanadianmeds.com
- pillschoice.com
- half-price-pharmacy.com
- canadianmedicationsonline.com
- ed-choice.com
- canadianmedsworld.com
- needtabs.com
- rxfeel.com
- officialgeneric.com
- approved-medical.com
- generic-junction.com
- Fast-pills-search.com
- ipafeed.com
scamFRAUDalert®Pharmacies Checker 
Recently i noticed increase in racism in Seattle, they also include foreigners that are abundant in the US. Look at this young Moldovan guy’s response to my email about renting a room on craigslist. Although a russian speaker himslef who is trying to get a job fixing computers, he refused to rent me a room after i told him that I speak russian:
On Sun, Dec 19, 2010 at 10:54 PM, Vadim Zubarev-Friedman wrote:
I’m from Eastern Europe, country called Moldavia, it used to be one of the best countries to live in during soviets.
How many people? Me and another guy.
————-
Vadim Zubarev-Friedman
to me
show details 11:00 PM (10 hours ago)
Yes I do, but I’m not looking for russian speaking roomates,
Sorry.
——————-
I’m not looking for russian speaking because i dont want to speak russian.Thats all.
Its simple
bye-bye dude. You might not even answer and waste your time because i wont answer you – added you in the black list.
p.s you are not my friend, dude, just remember that
Also the spam seems to have made a trace to many message board and selected blog sites, it seems their targets are being focused mainly on message boards owned by SMF, and seem to have no problem registering their username and breaking capacha no problem since the ZeuS and SpyEye are controling the bots,
Also the domains are tested by the url of 1.allbestlinks.info, the server is hosted in the LEAST focused country that any spam, and it is the smallest of the EU countries, Luxembourg, next to Germany, and France, thought I wanted to fresh up this page with new infomation on it since IPA runs a redirect link from allbestlinks.info posted on forums mainly.
And the Domain update info will include it’s affliate allbestlinks.info with top-low-price-sites.com affliates, please make note and notify Spamhaus of root.lu of another spam support ISP,
www. ipahere .com(not affliated with ipafeed(or so to speak from the Russian Business Network),
DNS servers
ns1.ipahere.com [178.63.78.131]
ns2.ipahere.com [109.206.161.55]
ns3.ipahere.com [78.46.182.137]
Answer records
ipahere.com SOA server: ns.ipahere.com
email: serg@ipahere.com
serial: 1172073947
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 86400
86400s
ipahere.com NS ns1.ipahere.com 86400s
ipahere.com NS ns3.ipahere.com 86400s
ipahere.com NS ns2.ipahere.com 86400s
ipahere.com A 109.206.161.55 86400s
ipahere.com MX preference: 30
exchange: ASPMX3.GOOGLEMAIL.com
86400s
ipahere.com MX preference: 30
exchange: ASPMX4.GOOGLEMAIL.com
86400s
ipahere.com MX preference: 30
exchange: ASPMX5.GOOGLEMAIL.com
86400s
ipahere.com MX preference: 10
exchange: ASPMX.L.GOOGLE.com
86400s
ipahere.com MX preference: 20
exchange: ALT1.ASPMX.L.GOOGLE.com
86400s
ipahere.com MX preference: 20
exchange: ALT2.ASPMX.L.GOOGLE.com
86400s
ipahere.com MX preference: 30
exchange: ASPMX2.GOOGLEMAIL.com
86400s
Additional records
ns1.ipahere.com A 178.63.78.131 86400s
ns2.ipahere.com A 109.206.161.55 86400s
ns3.ipahere.com A 78.46.182.137 86400s
Domain Name: IPAHERE.COM
Registrar: INTERNET.BS CORP.
Whois Server: whois.internet.bs
Referral URL: http://www.internet.bs
Name Server: NS.IPAHERE.COM
Name Server: NS1.IPAHERE.COM
Name Server: NS2.IPAHERE.COM
Status: clientTransferProhibited
Updated Date: 02-nov-2010
Creation Date: 02-nov-2010
Expiration Date: 02-nov-2011
Domain ipahere.com
Date Registered: 2010-11-2
Date Modified: 2010-11-2
Expiry Date: 2011-11-2
DNS1: ns.ipahere.com
DNS2: ns1.ipahere.com
DNS3: ns2.ipahere.com
Registrant
Private Whois Service
Private Whois Service kca59aq4d9580ccb6caa@oqjij874d9300d54bd95.privatewhois.net
*******PLEASE DO NOT SEND LETTERS******
****Contact the owner by email only****
c/o ipahere.com
N4892 Nassau
Bahamas
Administrative Contact
Private Whois Service
Private Whois Service ktmcbsy4d9580ccc2410@oqjij874d9300d54bd95.privatewhois.net
*******PLEASE DO NOT SEND LETTERS******
****Contact the owner by email only****
c/o ipahere.com
N4892 Nassau
Bahamas
Tel: +852.81720004
Technical Contact
Private Whois Service
Private Whois Service tjsprss4d9580ccbd1ff@oqjij874d9300d54bd95.privatewhois.net
*******PLEASE DO NOT SEND LETTERS******
****Contact the owner by email only****
c/o ipahere.com
N4892 Nassau
Bahamas
Tel: +852.81720004
Registrar: Internet.bs Corp.
Registrar’s Website : http://www.internetbs.net/
and last,
inetnum: 109.206.160.0 – 109.206.191.255
netname: SERVEREL
descr: Serverel Corp.
country: EU
org: ORG-SC64-RIPE
admin-c: SN2485-RIPE
tech-c: SN2485-RIPE
status: ASSIGNED PI
notify: noc@serverel.com
mnt-by: RIPE-NCC-END-MNT
mnt-by: SERVEREL-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-routes: SERVEREL-MNT
mnt-domains: SERVEREL-MNT
changed: noc@serverel.com 20110306
source: RIPE
organisation: ORG-SC64-RIPE
org-name: Serverel Corp
org-type: OTHER
address: 970 Corte Madera ave, Sannyvale, CA, US
phone: +18772467863
e-mail: noc@serverel.com
abuse-mailbox: abuse@serverel.com
admin-c: AN495-RIPE
tech-c: SN2485-RIPE
mnt-ref: SERVEREL-MNT
mnt-by: SERVEREL-MNT
changed: ripe@serverel.com 20110302
source: RIPE
person: Serverel NOC
address: 970 Corte Madera ave, Sannyvale, CA, US
phone: +1(877)246 78 63
abuse-mailbox: abuse@serverel.com
nic-hdl: SN2485-RIPE
mnt-by: SERVEREL-MNT
changed: noc@serverel.com 20110314
source: RIPE
% Information related to ‘109.206.160.0/19AS50245’
route: 109.206.160.0/19
descr: Serverel Data Center
origin: AS50245
mnt-by: SERVEREL-MNT
changed: ripe@serverel.com 20100609
source: RIPE
and for it’s related domain affliate program allbestlinks,
DNS servers
ns2.low-price-sites.com
ns1.low-price-sites.com
Answer records
1.allbestlinks.info A 212.117.174.175 14400s
Authority records
allbestlinks.info NS ns1.low-price-sites.com 14400s
allbestlinks.info NS ns2.low-price-sites.com 14400s
Additional records
ns1.low-price-sites.com A 212.117.174.175 14400s
ns2.low-price-sites.com A 212.117.174.176 14400s
Domain ID:D31294738-LRMS
Domain Name:ALLBESTLINKS.INFO
Created On:26-Jan-2010 15:32:14 UTC
Last Updated On:03-Jan-2011 12:33:56 UTC
Expiration Date:26-Jan-2012 15:32:14 UTC
Sponsoring Registrar:UK2 Group Ltd. (R212-LRMS)
Status:OK
Registrant ID:PP-SP-001
Registrant Name:Domain Admin
Registrant Organization:PrivacyProtect.org
Registrant Street1:ID#10760, PO Box 16
Registrant Street2:Note – All Postal Mails Rejected, visit
Registrant City:Nobby Beach
Registrant State/Province:
Registrant Postal Code:QLD 4218
Registrant Country:AU
Registrant Phone:+45.36946676
Registrant Email:contact@privacyprotect.org
Admin ID:PP-SP-001
Admin Name:Domain Admin
Admin Organization:PrivacyProtect.org
Admin Street1:ID#10760, PO Box 16
Admin Street2:Note – All Postal Mails Rejected, visit Privacyprotect.org
Admin City:Nobby Beach
Admin State/Province:
Admin Postal Code:QLD 4218
Admin Country:AU
Admin Phone:+45.36946676
Admin Email:contact@privacyprotect.org
Billing ID:PP-SP-001
Billing Name:Domain Admin
Billing Organization:PrivacyProtect.org
Billing Street1:ID#10760, PO Box 16
Billing Street2:Note – All Postal Mails Rejected, visit Privacyprotect.org
Billing City:Nobby Beach
Billing State/Province:
Billing Postal Code:QLD 4218
Billing Country:AU
Billing Phone:+45.36946676
Billing Email:contact@privacyprotect.org
Tech ID:PP-SP-001
Tech Name:Domain Admin
Tech Organization:PrivacyProtect.org
Tech Street1:ID#10760, PO Box 16
Tech Street2:Note – All Postal Mails Rejected, visit Privacyprotect.org
Tech City:Nobby Beach
Tech State/Province:
Tech Postal Code:QLD 4218
Tech Country:AU
Tech Phone:+45.36946676
Tech Email:contact@privacyprotect.org
Name Server:NS1.LOW-PRICE-SITES.COM
Name Server:NS2.LOW-PRICE-SITES.COM
inetnum: 212.117.160.0 – 212.117.175.255
netname: SERVER-NETWORK
descr: root SA
country: LU
admin-c: AB99-RIPE
tech-c: RE655-RIPE
status: ASSIGNED PA
mnt-by: ROOT-MNT
changed: noc@as5577.net 20090424
source: RIPE
role: root eSolutions
address: 35, rue John F. Kennedy
address: 7327 Steinsel
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
e-mail: info@root.lu
abuse-mailbox: abuse@as5577.net
remarks:
remarks: +————————————+
remarks: | Operational Issues: |
remarks: | noc@as5577.net |
remarks: +————————————+
remarks: | Abuse and Spam: |
remarks: | abuse@as5577.net |
remarks: +————————————+
remarks:
admin-c: RE655-RIPE
tech-c: AB99-RIPE
nic-hdl: RE655-RIPE
mnt-by: ROOT-MNT
changed: noc@as5577.net 20051124
source: RIPE
person: Andy BIERLAIR
address: root SA
address: 35, rue John F. Kennedy
address: 7327 Steinsel
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
nic-hdl: AB99-RIPE
mnt-by: ROOT-MNT
remarks:
remarks: +————————————+
remarks: | I did *NOT* spam your mailbox! |
remarks: | I will *NOT* reply to abuse mails! |
remarks: | |
remarks: | Please contact abuse@as5577.net ! |
remarks: +————————————+
remarks:
e-mail: ab@root.lu
notify: ab@root.lu
changed: ab@root.lu 20110207
source: RIPE
Information related to ‘212.117.160.0/19AS5577’
route: 212.117.160.0/19
descr: root SA
origin: AS5577
mnt-by: ROOT-MNT
notify: noc@as5577.net
changed: noc@as5577.net 20100519
source: RIPE
Notify Spamhaus of this IP address and it’s domains that root.lu, INTERNET.BS CORP, Serverel Data Center, and UK2 Group they are in violation of selling fake pharma affliate sites and also are spamming forums with their content owned and Operated by the Russian Business Network and it’s Co-Affliated Spam Gangs.
http://allbestlinks.info/
http://cheaptabsshop.biz/
http://low-price-sites.com/
http://ottur.com/
http://www.allbestlinks.info/
http://www.ottur.com/
Address lookup
canonical name http://www.allbestlinks.info.
aliases
addresses 212.117.174.175
Domain Whois record
Queried whois.afilias.info with “allbestlinks.info”…
Domain ID:D31294738-LRMS
Domain Name:ALLBESTLINKS.INFO
Created On:26-Jan-2010 15:32:14 UTC
Last Updated On:03-Jan-2011 12:33:56 UTC
Expiration Date:26-Jan-2012 15:32:14 UTC
Sponsoring Registrar:UK2 Group Ltd. (R212-LRMS)
Status:OK
Registrant ID:PP-SP-001
Registrant Name:Domain Admin
Registrant Organization:PrivacyProtect.org
Registrant Street1:ID#10760, PO Box 16
Registrant Street2:Note – All Postal Mails Rejected, visit
Privacyprotect.org
Registrant Street3:
Registrant City:Nobby Beach
Registrant State/Province:
Registrant Postal Code:QLD 4218
Registrant Country:AU
Registrant Phone:+45.36946676
Registrant Email:contact@privacyprotect.org
Admin ID:PP-SP-001
Admin Name:Domain Admin
Admin Organization:PrivacyProtect.org
Admin Street1:ID#10760, PO Box 16
Admin Street2:Note – All Postal Mails Rejected, visit Privacyprotect.org
Admin City:Nobby Beach
Admin State/Province:
Admin Postal Code:QLD 4218
Admin Country:AU
Admin Phone:+45.36946676
Admin Email:contact@privacyprotect.org
Billing ID:PP-SP-001
Billing Name:Domain Admin
Billing Organization:PrivacyProtect.org
Billing Street1:ID#10760, PO Box 16
Billing Street2:Note – All Postal Mails Rejected, visit Privacyprotect.org
Billing Street3:
Billing City:Nobby Beach
Billing State/Province:
Billing Postal Code:QLD 4218
Billing Country:AU
Billing Phone:+45.36946676
Billing Email:contact@privacyprotect.org
Tech ID:PP-SP-001
Tech Name:Domain Admin
Tech Organization:PrivacyProtect.org
Tech Street1:ID#10760, PO Box 16
Tech Street2:Note – All Postal Mails Rejected, visit Privacyprotect.org
Tech Street3:
Tech City:Nobby Beach
Tech State/Province:
Tech Postal Code:QLD 4218
Tech Country:AU
Tech Phone:+45.36946676
Tech Email:contact@privacyprotect.org
Name Server:NS1.LOW-PRICE-SITES.COM
Name Server:NS2.LOW-PRICE-SITES.COM
Network Whois record
Queried whois.ripe.net with “-B 212.117.174.175″…
Information related to ‘212.117.160.0 – 212.117.175.255’
inetnum: 212.117.160.0 – 212.117.175.255
netname: SERVER-NETWORK
descr: root SA
country: LU
admin-c: AB99-RIPE
tech-c: RE655-RIPE
status: ASSIGNED PA
mnt-by: ROOT-MNT
changed: noc@as5577.net 20090424
source: RIPE
role: root eSolutions
address: 35, rue John F. Kennedy
address: 7327 Steinsel
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
e-mail: info@root.lu
abuse-mailbox: abuse@as5577.net
remarks:
remarks: +————————————+
remarks: | Operational Issues: |
remarks: | noc@as5577.net |
remarks: +————————————+
remarks: | Abuse and Spam: |
remarks: | abuse@as5577.net |
remarks: +————————————+
remarks:
admin-c: RE655-RIPE
tech-c: AB99-RIPE
nic-hdl: RE655-RIPE
mnt-by: ROOT-MNT
changed: noc@as5577.net 20051124
source: RIPE
person: Andy BIERLAIR
address: root SA
address: 35, rue John F. Kennedy
address: 7327 Steinsel
address: Luxembourg
phone: +352 20.500
fax-no: +352 20.500.500
nic-hdl: AB99-RIPE
mnt-by: ROOT-MNT
remarks:
remarks: +————————————+
remarks: | I did *NOT* spam your mailbox! |
remarks: | I will *NOT* reply to abuse mails! |
remarks: | |
remarks: | Please contact abuse@as5577.net ! |
remarks: +————————————+
remarks:
e-mail: ab@root.lu
notify: ab@root.lu
changed: ab@root.lu 20110207
source: RIPE
% Information related to ‘212.117.160.0/19AS5577’
route: 212.117.160.0/19
descr: root SA
origin: AS5577
mnt-by: ROOT-MNT
notify: noc@as5577.net
changed: noc@as5577.net 20100519
source: RIPE
DNS records
name class type data time to live
http://www.allbestlinks.info IN A 212.117.174.175 14400s (04:00:00)
allbestlinks.info IN MX
preference: 10
exchange: mail.allbestlinks.info
14400s (04:00:00)
allbestlinks.info IN TXT v=spf1 a mx ip4:212.117.174.175 ~all 14400s (04:00:00)
allbestlinks.info IN A 212.117.174.175 14400s (04:00:00)
allbestlinks.info IN SOA
server: ns1.low-price-sites.com
email: hostmaster.allbestlinks.info
serial: 2010111104
refresh: 14400
retry: 3600
expire: 1209600
minimum ttl: 86400
14400s (04:00:00)
allbestlinks.info IN NS ns1.low-price-sites.com 14400s (04:00:00)
allbestlinks.info IN NS ns2.low-price-sites.com 14400s (04:00:00)
175.174.117.212.in-addr.arpa IN PTR ip-212-117-174-175.server.lu 3600s (01:00:00)
— end —
wow… and what do you hope to accomplish with all of this? single handedly battle each and every spammer in the world? Cmon… get a life. You have enough data there to indict Obama…. but at the end of the day, what are you gonna do with it? Drive out to and bash someone over the head? If you spent this much time collecting data on our economy, you could probably become very wealthy. But i suspect this is all for show.. “look at how much data I can collect… and unlike you other twits… I understand each and every letter and number!” Well good for you, but at the end of the day your still a worthless, broke computer hacker that has no power at all in reality.
http://www.gofuckyourself.com
Address lookup
canonical name http://www.gofuckyourself.com.
aliases
addresses 4.28.42.196
Domain Whois record
Queried whois.internic.net with “dom gofuckyourself.com”…
Domain Name: GOFUCKYOURSELF.COM
Registrar: MONIKER ONLINE SERVICES, INC.
Whois Server: whois.moniker.com
Referral URL: http://www.moniker.com
Name Server: NS10.DNSMADEEASY.COM
Name Server: NS11.DNSMADEEASY.COM
Name Server: NS12.DNSMADEEASY.COM
Name Server: NS13.DNSMADEEASY.COM
Name Server: NS14.DNSMADEEASY.COM
Name Server: NS15.DNSMADEEASY.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 13-apr-2011
Creation Date: 19-jul-1999
Expiration Date: 19-jul-2015
Last update of whois database: Fri, 01 Jul 2011 07:47:17 UTC
Queried whois.moniker.com with “gofuckyourself.com”…
Domain Name: GOFUCKYOURSELF.COM
Registrar: MONIKER
Registrant [3521410]:
Theo Sapoutzis theo@avn.com
AVN Media Network Inc
9400 Penfield Avenue
Chatsworth
CA
91311
US
Administrative Contact [3521410]:
Theo Sapoutzis theo@avn.com
AVN Media Network Inc
9400 Penfield Avenue
Chatsworth
CA
91311
US
Phone: +1.8187185788
Fax: +1.8187185799
Billing Contact [3521410]:
Theo Sapoutzis theo@avn.com
AVN Media Network Inc
9400 Penfield Avenue
Chatsworth
CA
91311
US
Phone: +1.8187185788
Fax: +1.8187185799
Technical Contact [3521410]:
Theo Sapoutzis theo@avn.com
AVN Media Network Inc
9400 Penfield Avenue
Chatsworth
CA
91311
US
Phone: +1.8187185788
Fax: +1.8187185799
Domain servers in listed order:
NS14.DNSMADEEASY.COM
NS10.DNSMADEEASY.COM
NS12.DNSMADEEASY.COM
NS13.DNSMADEEASY.COM
NS11.DNSMADEEASY.COM
NS15.DNSMADEEASY.COM
Record created on: 1999-07-19 13:22:25.0
Database last updated on: 2011-04-13 02:27:04.56
Domain Expires on: 2015-07-19 13:22:25.0
Network Whois record
Queried whois.arin.net with “n ! NET-4-28-0-0-1″…
NetRange: 4.28.0.0 – 4.28.255.255
CIDR: 4.28.0.0/16
OriginAS:
NetName: LVLT-STATIC-4-28-16
NetHandle: NET-4-28-0-0-1
Parent: NET-4-0-0-0-1
NetType: Reallocated
Comment: This space is statically assigned
RegDate: 2010-09-28
Updated: 2010-09-28
Ref: http://whois.arin.net/rest/net/NET-4-28-0-0-1
OrgName: Level 3 Communications, Inc.
OrgId: LVLT
Address: 1025 Eldorado Blvd.
City: Broomfield
StateProv: CO
PostalCode: 80021
Country: US
RegDate: 1998-05-22
Updated: 2008-10-04
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
Ref: http://whois.arin.net/rest/org/LVLT
OrgTechHandle: TPL1-ARIN
OrgTechName: Tech POC LVLT
OrgTechPhone: +1-877-453-8353
OrgTechEmail: ipaddressing@level3.com
OrgTechRef: http://whois.arin.net/rest/poc/TPL1-ARIN
OrgTechHandle: ARINC4-ARIN
OrgTechName: ARIN Contact
OrgTechPhone: +1-800-436-8489
OrgTechEmail: arin-contact@genuity.net
OrgTechRef: http://whois.arin.net/rest/poc/ARINC4-ARIN
OrgAbuseHandle: APL8-ARIN
OrgAbuseName: Abuse POC LVLT
OrgAbusePhone: +1-877-453-8353
OrgAbuseEmail: security@level3.com
OrgAbuseRef: http://whois.arin.net/rest/poc/APL8-ARIN
DNS records
DNS query for 196.42.28.4.in-addr.arpa returned an error from the server: NameError
name class type data time to live
http://www.gofuckyourself.com IN A 4.28.42.196 21600s (06:00:00)
gofuckyourself.com IN SOA
server: ns10.dnsmadeeasy.com
email: dns.dnsmadeeasy.com
serial: 2009010138
refresh: 43200
retry: 3600
expire: 1209600
minimum ttl: 180
86400s (1.00:00:00)
gofuckyourself.com IN MX
preference: 5
exchange: mx2.chi.playboy.com
21600s (06:00:00)
gofuckyourself.com IN MX
preference: 5
exchange: mx.la.playboy.com
21600s (06:00:00)
gofuckyourself.com IN NS ns11.dnsmadeeasy.com 86400s (1.00:00:00)
gofuckyourself.com IN NS ns10.dnsmadeeasy.com 86400s (1.00:00:00)
gofuckyourself.com IN NS ns12.dnsmadeeasy.com 86400s (1.00:00:00)
gofuckyourself.com IN NS ns14.dnsmadeeasy.com 86400s (1.00:00:00)
gofuckyourself.com IN NS ns15.dnsmadeeasy.com 86400s (1.00:00:00)
gofuckyourself.com IN NS ns13.dnsmadeeasy.com 86400s (1.00:00:00)
gofuckyourself.com IN A 4.28.42.196 21600s (06:00:00)
— end —
Well let me get this straight, knowing you seem to have a mood that ranges to the point of wanting to become racist, well right now you can blame more than just RBN for the crap, but rather the Russian Government as being the ones causing this mess, and them already acting on and using Xrumer as a choice to spam forums, and then partially hack those forums to disable half of the Anti-Spam settings and restrict Capetcha to a limited set of formats just to get in much easily, and so far some admins refuse to do much or anything to reinforce the board with more anti-spam protect, such as using StopForumSpam and Project Honeypot’s trackers built into the Registration system, that way they would prove that any Capetcha Breaking methods or code is used during registration, it will track that IP violating it and then they get hit with a ban message or the account can not be activated because of something failed the bot test, because one of the forums I post on, korraforums.com using SMF, they already have partially hacked the board mainly of the registration system, and thus that is why I am here reporting the pharma links that are advertised for link fwording using a 2 way Xrumer SEO tactic that most blacklistings can’t detect or determined where they are at, something RBN has now become more traditional spamming tactic.
I hope this message will take note on why I report new links when ever RBN changes it’s tactics and infects new hosts and servers and report them here, because I know Project Honeypot and ScamFraudAlert can’t detect this, RBN knowing it is fool-proof by them.