Report joe-jobs here.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Wed Feb 06, 2013 6:00 pm

@ Donsorg thank you for your information. Maybe you could consider starting a separate thread like: "Information (or discussion?) about sites that are victim of joe jobs". This thread is meant to report the sites that are victim of joe jobs, not to discuss the nature of those domains. If information about a site is given, it is only meant to explain why a site has no reason to send worldwide spam. It is quite possible that illegal sites that maybe deserve poor comments and ratings, can also be the victim of joe jobs by competitors. If so, they should be commented (and/or rated) because of the content of the website. This thread is meant to prevent that sites are commented/rated only because a competitor makes it look like that site is sending lots of spam.

adicerni
Posts: 2
Joined: Thu Feb 14, 2013 11:25 pm

RE: Report joe-jobs here.

Post by adicerni » Thu Feb 14, 2013 11:25 pm

<quote user="boonsiri">
Latest victim proberry.de. This is a site in German, which offers information on the cultivation of strawberries.
Another site that will not send worldwide spam. http://www.mywot.com/en/scorecard/proberry.de
[/quote]

I've been receiving many of these emails like this one from email address 131lfmlg@jaxheart.com

Sicherheit im Beerenanbau
http://proberry.de

Georg Schemmel

I get maybe 20 a day from different email addresses and names. The website it points to is not sending these emails.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Mon Feb 25, 2013 2:28 pm

@adicerni. Thank you for wanting to share your experience. As for the email address(es) these joe jobs use, those are forged. Though I appreciate your intentions, new received messages on domains that are already confirmed as victim of joe-jobs do not need to be reported.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Fri Mar 01, 2013 7:40 pm

Latest victim: uahim.ru a Russian wholesale company in chemicals. Domain is in Russian. This domain will not be looking for non-Russian speaking costumers and will not send spam.
http://www.mywot.com/en/scorecard/www.uahim.ru

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Sat Mar 02, 2013 10:20 am

One more victim: chemrc.biz another Russian domain that seems to offer synthetic recreation drugs. The domain is an easy target for a joe-job as it has the unlikely description "Motorists Life". Like previous domain like the narkop.* the issue at stake is, that this site is not aimed at people outside of Russia. Therefore it would mean just wasting money for them to send worldwide spam to 'markets' they have no intention to reach. It may look like a questionable domain, but it should not be rated or commented on just because some criminal spammer invites us to do just that.
http://www.mywot.com/en/scorecard/www.chemrc.biz

NotBuyingIt
Posts: 6563
Joined: Fri Mar 11, 2011 6:21 pm

RE: Report joe-jobs here.

Post by NotBuyingIt » Sat Mar 02, 2013 3:39 pm

<quote user="boonsiri">
It may look like a questionable domain, but it should not be rated or commented on just because some criminal spammer invites us to do just that.
http://www.mywot.com/en/scorecard/www.chemrc.biz
[/quote]\

"WOT has detected unusual behavior on the scorecard." It is typical of someone using sock puppets to attempt to manipulate a site's reputation. Perhaps the WOT staff could make an accurate assessment of the situation; but I cannot.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Sun Mar 03, 2013 2:35 am

<quote user="notbuyingit">
\

"WOT has detected unusual behavior on the scorecard." It is typical of someone using sock puppets to attempt to manipulate a site's reputation. Perhaps the WOT staff could make an accurate assessment of the situation; but I cannot.
[/quote]Neither can I. Though if spammers take the trouble to use their botnets to damage the reputation of a site through a joe-job, I would not be surprised if they would try to provoke more irritation through scorecard-manipulation. Anyhow, I am happy with WOT disabling comment votes and making rating less easy in this kind of cases.


Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Sun Mar 03, 2013 2:37 am

The joe-job victim narkop.me which was briefly suspended, is up again. One can now only access the formum by pressing "Enter" in this message (both in English and Russian):
We don't send spam

Our enemies are using dirty methods of slander, sending SPAM emails containing links to our site. Please accept our sincere apologies for any inconvenience caused. If you have been followed to the site by SPAM, please excuse us and leave the site.

Leave the site if you are under 20 years old.

Carefully read the forum rules when registering.
The Russian text has this additional warning:
Propagation, sale and advertising of narcotic and potent substances prohibited - for it immediately banned.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Wed Mar 06, 2013 3:43 pm

yesche.biz is another victim of a joe-job.
This is another forum on recreational drugs. Because it is again a domain in local language targeted at local people, it is not a domain that will be looking for customers in the whole wide world. The domain opens with text in Russian that is difficult to understand in the translations by Google and Yandex, but the Yandex translation seems to indicate that the site does not allow advertisements offering drugs for sale.
Edit : I originally misspelled the name as esche.biz. NotBuyingIt brought that to my attention. Thanks!!

NotBuyingIt
Posts: 6563
Joined: Fri Mar 11, 2011 6:21 pm

RE: Report joe-jobs here.

Post by NotBuyingIt » Wed Mar 06, 2013 5:57 pm

<quote user="boonsiri">
esche.biz is another victim of a joe-job.
Because the domain does not resolve and DomainTools has no useful information, I don't know the nature of esche.biz. Whatever it is, no doubt it is again a domain in local language targeted at people living in the Ukrain. Not a domain that will be looking for customers in the whole wide world.
[/quote]

esche.biz automatically redirects to http://www.esche.de/ ([url=http://www.mywot.com/en/scorecard/esche.de t=_self]scorecard[/url]) and its domain registration lists is owner as Esche Schuemann Commichau in Hamburg. Both domains trace to IP 85.13.148.104 in Germany. The website declares that "Esche Schümann Commichau is one of the largest multi-disciplinary partnerships in Germany" of "lawyers, tax accountants and auditors." (Google translation)

Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests