Spamhuntress

Update: Proof of concept

Remember a little while ago, that a spammer said spamming had moved on anyway? Well, I believed him, and have been anticipating evidence of the new types of spam.

I found one today.

A yahoo group started by a spammer, with public archives.

There’s only one message, and that message was linked to from a guestbook spam entry somewhere.

spammer yahoo group
(Update: Yahoo already acted on my complaint. The group is history, a mere hours after my report. But they still have a lot of work to do, because they didn’t nuke all his pages. They should have some way of nuking all of them, don’t you think?)

Details:
The affiliate links are in an iframe in the body of the message in that group.

The guestbook spambot was 69.50.187.242
And the affiliate feed was from 69.50.191.22

The whois on the domain is:

Zuluz Networks Inc.
David Zuluz (ppcse@te.net.ua)
175, Carnival str.
San Diego
,45789
US
Tel. +95.22564879

ns1.loldns.com
ns2.loldns.com

That name server domain is on: 69.50.191.21

The domain itself, disorders.biz, has a WP blog on it. It actually looks legit, like a bona fide medical info site. It even has a masthead with a photo of a doctor on it. But the most recent article was lifted from eMedicine. A splog, in other words.

The domain was once linked to Webtouch.

But my main question is: How do we notify Yahoo about this? There’s bound to be more of this sort of thing, and we need a way to make them aware. They actually have to delete groups! Not something they’re likely to do, but there’s no way around it. Either they start doing it, or the next splog like hysteria will be Y!spamgroups…

Here’s a start point: yahoo groups TOS reporting

This entry was posted on Wednesday, December 14th, 2005 at 6:42 am and is filed under Preachy, Splogs. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.