Remember a long time ago, when I tracked a longtime blogspammer to Bulgaria? Todor and Iavor Zahariev are spammers, as far as I know.

Trouble is, at some point they seemed to switch gears, and started using Moniker and used fake whois data. The rest seemed identical, so I thought it was the Zahariev twins.

Trouble is, I assumed too much. The Moniker whois coupled with support-something e-mail addresses in the whois, and usually US faked names and addresses, is a mark of another spammer. An early trace led to Israel, but I couldn’t make sense of it and discounted it.

Turns out that was the best trace.

shetef.com

Registrant:
Shetef Solutions Ltd.
10 Azmaut Street
Ness-Ziona, ISRAEL 74010
IL

Administrative Contact, Technical Contact:
Dascalu, Yonat ziv@web2000.us
Shetef Solutions Ltd.
21 Tlalim street
Raanana 43568
IL

I received a piece of information recently that I can’t divulge. But it squared completely with this information. For a while I didn’t see any spam from them. I don’t know if they were inactive or just avoided my friends.

But they seem to be back, if the post below is any indication:

Another trackback spam storm overnight…

This entry was posted on Thursday, May 18th, 2006 at 11:18 am and is filed under Trackback spam. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.