Report joe-jobs here.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Wed Mar 06, 2013 7:56 pm

@NotBuyingIt Sorry, I made a stupid mistake by forgetting the first letter. Thanks for your reply, which made me aware of my mistake. The domain name should be yesche.biz. That domain now DOES resolve and seems to be another site offering recreation drugs. First thing I noticed was a cartoon with the text "Excellent. Let's make some LSD". Maybe meant as a joke, but it will almost certainly soon turn the site's scorecard red.
The main text on the forum (as translated by Google/Yandex) does not make much sense to me, but might indicate that the forum does forbid advertisements that offer drugs for sale.

NotBuyingIt
Posts: 6562
Joined: Fri Mar 11, 2011 6:21 pm

OT: Report joe-jobs here.

Post by NotBuyingIt » Wed Mar 06, 2013 8:48 pm

<quote user="boonsiri">
First thing I noticed was a cartoon with the text "Excellent. Let's make some LSD"....The main text on the forum (as translated by Google/Yandex) does not make much sense to me, but might indicate that the forum does forbid advertisements that offer drugs for sale.[/quote] \

For several reasons, forums devoted to LSD sometimes may not make much sense in the original language either. <irony>


Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: OT: Report joe-jobs here.

Post by Boonsiri » Wed Mar 06, 2013 9:25 pm

<quote user="notbuyingit">
\

For several reasons, forums devoted to LSD sometimes may not make much sense in the original language either. <irony>
[/quote]Dig it ;]


Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Thu Mar 14, 2013 4:53 am

Latest victims: dumps.cc and labsintez.com.
labsintez.com has already been suspended thanks to the trigger happy helpers of the joe-job-spammers.
Edit: dumps.cc is resolving again. This looks like a criminal domain. It may be a victim of a joe job by competition that offers similar service, but that does not change it's criminal nature.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Mon Mar 18, 2013 3:10 am

milfbeach.com
Porn-site which looks like it was made 20 years ago. Despite it's very poor design, the site still seems to attract enough customers to make a competitor uncomfortable, and decide to put it out of business through a joe job. Glad I don't have to see the site of the competition.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Mon Mar 18, 2013 3:37 pm

forum.chelovekizakon.ru
This seems to be a forum on legal issues on which people can discuss "wrongs" on all kinds of subjects.
As happened in the past with news-sites/blogs on political issues, it is quite possible that authorities that are critisized in this forum are not happy with it and seek to silence it. This is another victim of a joe job, NOT a forum that will gain anything by sending spam to people outside of Russia.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Fri Mar 22, 2013 3:15 am

<sort>Subject: Underage cp archive Target bigxvideos.com*
Subject: Check US CC data‏ Target dutchsextv.com **
Subject: Check US CC data‏ Target suckx.net**
Subject: child porn and zoophilia videos! Target ztod.com***</sort>
* the link for bigxvideos.com is a non-clickable text-link, which on mouse-over reveals that it is just written at the place of the click-able link to ztod.com.
** the text-link dutchsextv.com/xxx-random.html was non-clickable. The same message contained (hidden) the link suckx.net; the message was not parsable for SpamCop that could not find either link.
*** same situation as *: text-link read bigxvideos.com, while mouse-over revealed a click-able link to ztod.com.

Any site that would really offer such content would immediately be suspended by the Registrar, as that would be against the law in every country. The text "Check US CC data‏" seems to refer to the sale of stolen/hacked credit-cards. Also not an activity that would be allowed by most Registrars, and far-fetched in connection with sites that offer adult content.

Post edited on 26-mar-2013 to list Subject and Target in the same way as later posts; some additional information marked with * has been added.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Fri Mar 22, 2013 11:18 pm

The ridiculous joe-jobs against adult domains continue:
Subject: child porn and zoophilia videos! Target: porn-wanted.com
Subject: Underage cp archive Target: young-nudes.net
Subject: Credit Cards from the US Target: exposedwebcams.com
Subject: Only fresh CC Target: sillypornsluts.com*
*The link that reads sillypornsluts.com/index.shtml is not click-able. It is a text-only link, that masks the click-able link, which directs to already listed dutchsextv.com

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Sat Mar 23, 2013 6:32 am

psyhonaft.com. Another domain in Russian language. The joe-job calls this misleadingly "Forum about Bath Salts"
This site contains in depth information on all kinds of herbal and synthetic drugs. The site does not promote drugs. As I don't read Russian I have at random read just some of the content. I saw a long historical article on cocaine, which is called "one of the most dangerous drugs in the world", warnings like "Ritalin kills!" and advise on modest consumption of alcohol.
This looks like a site that wants to educate on the risks of drugs.

Boonsiri
Posts: 268
Joined: Tue Jun 14, 2011 10:06 am

RE: Report joe-jobs here.

Post by Boonsiri » Sun Mar 24, 2013 3:06 am

More adult-sites joe-jobbed through different systems, which all are part of the Festi spambot. Details of IP-addresses used are at the score-cards of the domain. Please do not make many queries, because cbl.abuseat.org is right now under DDOS-attack.
IP-addresses used are in order of below listing: 212.161.128.128 , 59.94.148.243 , 212.161.128.128 , 65.27.107.182 .
Subject: Welcome, we have the best Target: icgirls.com
Subject: Credit Cards from the US Target: myexbf.com*
Subject: Welcome, we have the best Target: teenstubespass.com**
Subject: Download cp movies Target: thetaoofbadass.com
Thetaoofbadass.com seems to be a scam-site, but did not sent messages which such an unlikely subject.
* The link for myexbf.com is a text only link, which on mouse-over reveals that it is just written at the place of a click-able link to earlier mentioned bigxvideos.com.
** The text-link for teenstubespass.com/index2.shtml (followed by a long - hidden - random generated text) was written at the place of a click-able link to icgirls.com.

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests