Spamhuntress

A comment spam contained a redirect URL that eventually led to a page on the search-4-pills.com site.

I accessed the root site, and found this meta code:

That looked suspicious, so I checked around some.

The side panels also include links with that affiliate code in them. But those only go back to the same site. However, the payoff links are to klik.php on 64.111.210.10.

So, I guess the game is deniability. When someone complains about their spamming, they’ll tell their webhost that no, they don’t spam. It was one of their affiliates who spammed!

Problem is, I believe this is a ploy. The real affiliate links are the klik.php ones, and the typical affiliate links on the site are put there to throw off anti-spammers and the webhost.

So complain away, if you get spam that ends up on one of their sites.

Here’s whois and IP:

09/07/06 14:33:41 whois search-4-pills.com
208.66.194.130
Registrant Contact:
izaak Inc
tanney stern enos@search-4-pills.com
1000910598 fax: 1000496838
Suite 653
Fort Wayne Fort Wayne 1360
GB

DNS:
ns3.cnmsn.com
ns4.cnmsn.com

Created: 2006-06-05
Expires: 2007-06-05

That IP also contains two other sites:

09/07/06 14:39:21 whois YOURBESTPILLS.COM

Registrant Contact:
waverley Inc
talbert vaughn nicholas@yourbestpills.com
1000443914 fax: 1000107590
Suite 496
Portland Portland 4319
GB

Created: 2006-05-17
Expires: 2007-05-17

09/07/06 14:40:56 whois CHOSENMEDS.COM

Registrant Contact:
olav Inc
tom emmit wheeler@chosenmeds.com
1000566354 fax: 1000144511
Suite 986
Kurgan Kurgan 4383
GB

Created: 2006-05-17
Expires: 2007-05-17

And a third used to be on there. It currently doesn’t resolve:

09/07/06 14:41:51 whois REDIRFEED.COM

Registrant Contact:
darnell Inc
lyle emmanuel xenos@redirfeed.com
1000125582 fax: 1000094719
Suite 150
Libreville Libreville 1544
GB

DNS:
ns3.cnmsn.com
ns4.cnmsn.com

Created: 2006-03-22
Expires: 2007-03-22

That site had the same code, according to the Google cache. The affiliate number was different, but otherwise, it’s the same type of site.

And they have and image at the bottom with this text:
Copyright 2006
Online Pharmacy Catalog
All rights reserved

This entry was posted on Thursday, September 7th, 2006 at 7:05 am and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.