Adsoft Development
From Spamhuntress
I got comment spam to spamhuntress.com from this outfit late October 2005. They spamvertized go-monaco.com and a few others, including some pills sites. I also found guestbook spam on Google.
I found lots of domains on one spamvertized page, and started tracking. Turns out the pages were made by a webdesign company advertising the website adsoft-development.com. I of course don't know if the pages are owned by them, since they do work for others. But read on and judge for yourself if they're totally clean.
Some more digging shows that they've got a web award that they've awarded to lots of sites, thus there are many sites with a link to them. But wait, one blogger reports that they goofed when they sent him an e-mail saying he'd gotten their award. Maybe their mail merge program was on the fritz? I'd call this spam, though intelligent spam. Read his report on their efforts to spread their spammy links.
Most of the domains have e-mail addresses in the whois info from the domain sslpayments.com, which is owned by Andrew Kartashov at adsoft-development.com. Andrew has also been known to hawk his services on forums. He's got pretty high visibility in Google. It's likely this is the guy who owns the company who designed those sites.
Among other things, he's been in a tiff with GlobalRX over some domain names. He's also a FreeBSD fan. He's also implicated in the whois info in a comment spamming case in November 2003. His mates on a drug affiliate forum in 2004 also seem convinced he's a linkspammer.
So, let's get on with the spam and spammy sites...
Spambots (probably proxies?):
- 195.241.74.83
- 200.219.184.80
- 211.184.141.2
- 221.7.7.94
- 212.88.183.187
User agent:
- PEAR HTTP_Request class ( http://pear.php.net/ )
Domains:
- australia-online-hotel-reservations.com
- austria-hotelsonline.com
- canada-hotels-online.com
- czech-hotel-guide.com
- france-online-hotel-reservations.com
- germany-hotelsonline.com
- go-finland.com
- go-monaco.com
- go-moscow.com
- go-sweden.com
- go-vietnam.com
- greece-hotelsonline.com
- hotels-in-indonesia.com
- hungary-hotelsonline.com
- irish-hotel-rates.com
- italy-online-hotel-reservations.com
- unitedstates-hotelsonline.com
- world-of-travel.net
- adsoft-development.com
- 0-casino.info
- 0-online-casino.us
- adipex-phentermine-medications.com
- baccarat.nu
- cheap-phentermine-now.com
- craps.bz
- free-internet-casino.us
- gambling-now.net
- i-online-casino.net
- internet-online-casino-directory.biz
- phentermine.bz
- phentermineeffect.com
- slots.nu
- someviagra.info
- viagra-exchange.com
- viagra-here.com
- viagra-online--now.com
IP numbers:
- 64.151.75.252
- 206.123.101.140
- 206.145.80.64
- 206.145.80.66
- 206.145.80.235
- 206.145.81.12
- 206.145.81.13
- 206.145.81.15
- 206.145.81.16
- 206.145.81.17
- 206.145.81.22
- 206.145.81.24
- 206.145.81.27
- 206.145.81.28
- 206.145.81.45
- 206.145.81.49
- 206.145.81.54
- 206.145.81.55
- 206.145.81.56
- 206.145.81.57
- 206.145.81.61
- 206.145.81.62
- 207.44.220.3
- 216.7.171.28
- 216.7.171.34
- 216.55.162.3
- 216.93.164.60
- 216.217.213.173
- 216.217.213.174
- 216.217.213.182
- 216.217.213.186
- 216.217.213.189
- 217.75.249.55
- 217.75.249.57
Sample whois data:
go-monaco.com
Hotels Hot Str Moscow, central 987534 RU +7.095875342x095 McCabe, Antonia whois820@sslpayments.com Hot Str Moscow, central 987534 RU +7.095875342x095 NS0.DIRECTNIC.COM 204.251.10.100 NS1.DIRECTNIC.COM 206.251.177.2 Record last updated 09-08-2005 06:46:58 AM Record expires on 07-01-2007 Record created on 07-01-2003
sslpayments.com
ADSoft Ozernaya 13-103 Moscow, NA 119361 RU +7-095-430-77-02 Kartashov, Andrew info@adsoft-development.com Ozernaya 13-103 Moscow, NA 119361 RU +7-095-430-77-02 Record last updated 07-17-2002 09:20:43 AM Record expires on 11-23-2006 Record created on 11-23-2001 Domain servers in listed order: NS0.DIRECTNIC.COM 204.251.10.100 NS1.DIRECTNIC.COM 206.251.177.2
