A bunch of spam
Date:Sat Oct 2 14:00:46 PDT 2004
I noticed a pattern in a chunk of spam from September 2004. All the domains below share the same NS records in their DNS zone files. Oh, and the domains are all return address to spam that hit my mail server.
My spam monitoring software picked these up (due to trouble with boucnes to the domains), but all of these domains are on one or both of the two lists below:
  • http://www.joewein.de/sw/blacklist/dom-bl.txt
  • http://www.stearns.org/sa-blacklist/sa-blacklist.current.domains
    • I recommend adding both of these blacklists to your mail server.
    - Frank Chillamos

    Spammy Domain Names

    abandoned6soothes.com
atonement9529pirrs.com
barefoot7752rneds.us
brimming6028pill.biz
callup6305rneds.com
carving5618tads.com
casuistic4394drygs.com
david5567pi11.us
dreamland3expiate.com
faire4813rneds.com
hudson1962pirrs.us
humpback726pirrs.com
moderately7545drygs.us
motherless9bargraph.com
nurturing3894drygs.com
ortcard4slats.com
oxeye5192drygs.com
palindrome9700nx.com
projector5alcohol.com
recently7568pinn.com
replenish4787nx.com
resist9528rneds.com
respond693biz.com
satrapy8385tads.com
scam2381nx.com
scrimmages5308pirrs.com
sectility8symposia.com
sharif7046rx.us
sidewall5187pi11.us
simular8clerical.com
sip2thickness.com
snivel157tads.com
solaria8488nx.com
spiritous5262dryg.us
stiffed5912tads.com
stilled5soapsuds.com
surprint8030biz.com
tiled2118rneds.com
toothbrush8419pinn.com
tootsie7742rneds.com
trashed7739pinn.com
tryout2523drygs.com
urethral5529pirrs.com
waggish172dryg.com
willow5ferocious.com
winning7272tads.com

    Example Registrar Record for a domain above

    Domain name: tootsie7742rneds.com

Registrant Contact:
   Uno More
   tiiri konkretno admin@sanita77.biz
   371-6352202 fax: 371-6352202
   Briezha 5-6
   Riga Riga LV 1021
   LV

Administrative Contact:
   tiiri konkretno admin@sanita77.biz
   371-6352202 fax: 371-6352202
   Briezha 5-6
   Riga Riga LV 1021
   LV

Technical Contact:
   tiiri konkretno admin@sanita77.biz
   371-6352202 fax: 371-6352202
   Briezha 5-6
   Riga Riga LV 1021
   LV

Billing Contact:
   tiiri konkretno admin@sanita77.biz
   371-6352202 fax: 371-6352202
   Briezha 5-6
   Riga Riga LV 1021
   LV

DNS:
ns3.airmaramba.biz
ns3.avk29.biz

Created: 2004-09-09
Expires: 2005-09-09

    Registrar Record for the DNS server for above domains

    Domain Name:                                 AIRMARAMBA.BIZ
Domain ID:                                   D5180844-BIZ
Sponsoring Registrar:                        TUCOWS INC.
Sponsoring Registrar IANA ID:                69
Domain Status:                               clientHold
Domain Status:                               clientTransferProhibited
Registrant ID:                               TUPP6G2F0XR9UJNH
Registrant Name:                             domain administrator
Registrant Organization:                     Tehillimzeiger Pushkaya
Registrant Address1:                         Suite M-242, Christamar 43-B
Registrant Address2:                         Avda. De las Naciones Unidas
Registrant City:                             Puerto Banus - Marbella
Registrant State/Province:                   Malaga
Registrant Postal Code:                      29660
Registrant Country:                          Spain
Registrant Country Code:                     ES
Registrant Phone Number:                     +371.7338359
Registrant Email:                            admin@mango34ef.biz
Administrative Contact ID:                   TUSYGOYGKZV70ORN
Administrative Contact Name:                 domain administrator
Administrative Contact Organization:         Tehillimzeiger Pushkaya
Administrative Contact Address1:             Suite M-242, Christamar 43-B
Administrative Contact Address2:             Avda. De las Naciones Unidas
Administrative Contact City:                 Puerto Banus - Marbella
Administrative Contact State/Province:       Malaga
Administrative Contact Postal Code:          29660
Administrative Contact Country:              Spain
Administrative Contact Country Code:         ES
Administrative Contact Phone Number:         +371.7338359
Administrative Contact Email:                admin@mango34ef.biz
Billing Contact ID:                          TU7HEOUJ57SYRFDJ
Billing Contact Name:                        domain administrator
Billing Contact Organization:                Tehillimzeiger Pushkaya
Billing Contact Address1:                    Suite M-242, Christamar 43-B
Billing Contact Address2:                    Avda. De las Naciones Unidas
Billing Contact City:                        Puerto Banus - Marbella
Billing Contact State/Province:              Malaga
Billing Contact Postal Code:                 29660
Billing Contact Country:                     Spain
Billing Contact Country Code:                ES
Billing Contact Phone Number:                +371.7338359
Billing Contact Email:                       admin@mango34ef.biz
Technical Contact ID:                        TUPL7KGZPMXM1ETW
Technical Contact Name:                      domain administrator
Technical Contact Organization:              Tehillimzeiger Pushkaya
Technical Contact Address1:                  Suite M-242, Christamar 43-B
Technical Contact Address2:                  Avda. De las Naciones Unidas
Technical Contact City:                      Puerto Banus - Marbella
Technical Contact State/Province:            Malaga
Technical Contact Postal Code:               29660
Technical Contact Country:                   Spain
Technical Contact Country Code:              ES
Technical Contact Phone Number:              +371.7338359
Technical Contact Email:                     admin@mango34ef.biz
Name Server:                                 NS1.BEER99.BIZ
Name Server:                                 NS1.LUNOMUN.BIZ
Created by Registrar:                        TUCOWS INC.
Last Updated by Registrar:                   TUCOWS INC.
Domain Registration Date:                    Mon Aug 18 18:07:59 GMT 2003
Domain Expiration Date:                      Wed Aug 17 23:59:59 GMT 2005
Domain Last Updated Date:                    Thu Sep 23 09:22:26 GMT 2004