Still spamming potenzmittelapotheke24.de

Did you receive an insanely stupid spam message? Or yet another spam message with (!!) no URL? Post it here so we can continue to laugh at mentally-challenged spammers.

Still spamming potenzmittelapotheke24.de

Postby Red Dwarf » Sun May 10, 2015 6:32 pm

This was taken down days ago, but still they are spamming potenzmittelapotheke24.de

A Google search finds that the potenzmittelapotheke24.de site has been seeded into thousands of guestbook entries in the hope of topping the SEO charts.

But really, once it's dead, why still flog it? This reminds me of the famous dead parrot sketch - http://en.wikipedia.org/wiki/Dead_Parrot_sketch
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10518
Joined: Tue Jun 27, 2006 2:01 am

Re: Still spamming potenzmittelapotheke24.de

Postby Nodus » Mon May 11, 2015 4:21 am

I have a little hunch it's a joe job really. I seldom get anything but joe jobs nowadays, and the headers of these spams mostly match the joe jobs that have been trickling into my inbox in the past months. It seems that particular spambot is often used for joe job purposes.

So I guess it's one of those "criminals attacking criminals" schemes once again. They (and God) only know why, and of course don't tell. These mails ceased for me a couple of days ago though.
Arf, she said
User avatar
Nodus
Spammer Obliterator
 
Posts: 2286
Joined: Fri Jun 15, 2007 7:05 pm

Re: Still spamming potenzmittelapotheke24.de

Postby Red Dwarf » Mon May 11, 2015 9:40 pm

I suspected the same at first. What changed my mind was finding over 700 links in over 700 entries in just one guestbook - among many others. If that was a joe-job, it was a particularly heavy one. The web site itself looked like the usual pharmacy fraud, so I shed no tears to see the demise.


Another site for which I am still seeing lots of redirection spam post mortem is
dating-magic-laid2.com

Domain Name: DATING-MAGIC-LAID2.COM
Registrar: HICHINA ZHICHENG TECHNOLOGY LTD.
Status: clientHold
Updated Date: 11-may-2015
(Fake registrant)
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10518
Joined: Tue Jun 27, 2006 2:01 am

Re: Still spamming potenzmittelapotheke24.de

Postby Nodus » Wed May 13, 2015 6:32 am

It's possible it was a genuine spam campaign advertising potenzmittelapotheke24.de, sourced by some inexperienced spammer. But the sheer volume of spam advertising a single domain is one of the things that always makes me suspicious. Real spammers very seldom do things like that, simply because they don't want their domains shut down. They use redirectors, register dozens of new domains every day etc., and mostly use each (advertised) domain for one or two spam runs only.

Of course you know all this already, probably better than I do. But it would be too easy to think that joe jobbers are stupid in that the volume of spam makes it easier to distinguish joe jobs from real spam. They simply see that it works: there are always enough anti-spammers who are not equal to the occasion and complain about those sites anyway. And the more spam the more complaints. It doesn't matter if there are a few of us seeing what's going on, the math works for them.

I'm not sad either when I see one of these clearly criminal domains getting suspended. But the phenomenon itself is quite disturbing, since they can essentially use it against any domain they want, and I haven't figured out what we could do about it. No wonder the method has slowly become more and more popular.

Basically just waffling here... :)
Arf, she said
User avatar
Nodus
Spammer Obliterator
 
Posts: 2286
Joined: Fri Jun 15, 2007 7:05 pm

Re: Still spamming potenzmittelapotheke24.de

Postby Red Dwarf » Sat May 16, 2015 6:37 pm

potenzmittelapotheke24.de - 16 spams in the past 16 hours, but . . .

website wrote:Website is offline No cached version of this page is available.
Error 522 Ray ID: 1e7a8f22694a18f0 • 2015-05-16 22:36:18 UTC
Connection timed out


WHOIS:
Name: Wilfried Wandschneider
Address: Dr. Külz Straße 9
ZIP: 19053
Location: Schwerin
Country: DE
Phone: + 49-385-5508967 (does not exist)
Fax: + 49-385-5508967
E-mail: mamontovdmitry@gmail.com

Sic transit gloria mundi
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10518
Joined: Tue Jun 27, 2006 2:01 am

Re: Still spamming potenzmittelapotheke24.de

Postby Red Dwarf » Tue May 19, 2015 7:36 am

This moronic site is back.

Maybe it's just me but . . .

If I load some purchases into the cart, I can not see any way to go to check-out.

Doh!
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10518
Joined: Tue Jun 27, 2006 2:01 am

Re: Still spamming potenzmittelapotheke24.de

Postby Nodus » Tue May 19, 2015 4:55 pm

Red Dwarf wrote:If I load some purchases into the cart, I can not see any way to go to check-out.

The link is at the right end of the empty rectangle below the gift box ("Unser Geschenk für sie"). I suppose there should be an image there, but it didn't load for me either.

BTW, this is not a new pharma brand. I remember seeing hundreds of these German "Apothekes" already a few years ago. I'm wondering what's going on here and why this one seems to be so special, whether it's spammers or joe jobbers behind this fuss...
Arf, she said
User avatar
Nodus
Spammer Obliterator
 
Posts: 2286
Joined: Fri Jun 15, 2007 7:05 pm

Re: Still spamming potenzmittelapotheke24.de

Postby Red Dwarf » Wed May 20, 2015 3:29 pm

Vielen Dank

I can't feel too downhearted that I can not test it out and find the checkout process due to the site currently not resolving. :o

Looking up at the 2 potenzmittelapotheke24.de. parent servers:

carol.ns.cloudflare.com [173.245.58.80] [Broken DNS server: Reports that it refuses to respond!]
alan.ns.cloudflare.com [173.245.59.57] [Broken DNS server: Reports that it refuses to respond!]
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10518
Joined: Tue Jun 27, 2006 2:01 am

Re: Still spamming potenzmittelapotheke24.de

Postby Red Dwarf » Wed Jun 10, 2015 6:37 pm

Once again I am getting more spams for potenzmittelapotheke24.de
Viagra, Cialis, Kamagra, Levitra & mehr ohne Rezept kaufen - Potenzmittel
rezeptfrei http://www.potenzmittelapotheke24.de/


> Failed to connect to potenzmittelapotheke24.de port 80: Connection refused
I can't load it from my IP nor from a random selection of proxies.
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10518
Joined: Tue Jun 27, 2006 2:01 am

Re: Still spamming potenzmittelapotheke24.de

Postby Nodus » Wed Jun 10, 2015 9:00 pm

Red Dwarf wrote:Once again I am getting more spams for potenzmittelapotheke24.de

Me too. And still baffled as to what's going on there...

I can't load it from my IP nor from a random selection of proxies.

Neither can I. It seems potenzmittelapotheke24.de doesn't even have an IP address at the moment, so no wonder.
Arf, she said
User avatar
Nodus
Spammer Obliterator
 
Posts: 2286
Joined: Fri Jun 15, 2007 7:05 pm

Re: Still spamming potenzmittelapotheke24.de

Postby Red Dwarf » Thu Jun 11, 2015 10:30 pm

Correct.
Looking up at the 2 potenzmittelapotheke24.de. parent servers:

dns30.rezervdns.ru [0.0.0.0] Timeout
dns31.rezervdns.ru [0.0.0.0] Timeout

Check out the name server domain:
WHOIS rezervdns.ru
state: REGISTERED, NOT DELEGATED, UNVERIFIED
registrar: REGTIME-RU
created: 2015.04.24
paid-till: 2016.04.24

Other domains previously resolved by those dead name servers
rbcroyalbankingsolution.com (on Client Hold, June 9, BIZCN)
support780.com (on Client Hold, June 9, BIZCN)
reac1.net (BIZCN)
tdcanadatrustsolution.com (BIZCN)
rbcroyalbanksolution.com (BIZCN)
passport-yandex.org (Regtime, RU)
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10518
Joined: Tue Jun 27, 2006 2:01 am


Return to Sloppy, Lazy and Stupid Spammers

Who is online

Users browsing this forum: No registered users and 1 guest

cron