Don't Forget To Report Them Too!

andypatmore · 2008-08-27 1:09 am

I spotted this on the front page just now and went to the domain (www.gondoni.info). Initially it looks like someones blog, but then it forwards you to a page that looks like Google but isn't!

I seriously recommend people to get the FlagFox add-on for Firefox as you can very easily find a lot out very quickly. gondoni.info is registered to an individual in Kiev and the domain is registered/hosted by EstDomains, Inc.

Whoever submitted this one should consider firing an email off to support@estdomains.com or using their Spam Reporting system http://www.estdomains.com/reports.php?a … eport_spam you will obviously need to be able to supply proof of their activities, but it may be worth a little extra effort!

So yes, submit their activities to the SFS database, but do a little homework and fire off an email to their ISP, Hosting Company or Domain Registrar. Most of organisations take the issue of spam/abuse very seriously.

TeMerc · 2008-08-27 3:04 am

Sending anything other than credit card info to ESTDomains will be a waste of time.

They are a notorious rogue registrar who do not respond to anyone for anything.

You'll see that domain pop up often in the malware world once you've been around a while.

Erik · 2008-09-09 9:34 am

hi,

A while back i found a website that claimed it can check if somebody has blocked (or deleted) you on msn messenger.It whas asking for people Msn passwords and it had also a "spammy" agreement you had to agree width if you used the service.My research proved the involved website whas a password phising site so i put up a complained at the dns registerar(Directi)I did get a reply but it whas not what i wanted to here.

"I suggest you contact the website owner at (mail here)"

Come on is that all they do ? instead of deleting him and thanking me i've found a criminal on there dns servers i get that [Censored because I cant articulate my thoughts]

it's a frusterating fact that allmost no providers actually do something about the spammers i guess spammers money is money to ...

TeMerc · 2008-09-10 6:34 am

Yeah, Directi is in the same category as EstDomains, actually, they are sorta being torn down, see the following threads:
http://www.theregister.co.uk/2008/09/03 … ikes_back/
http://www.avertlabs.com/research/blog/ … s-domains/
http://hostexploit.com/index.php?option … exploitcom
http://msmvps.com/blogs/hostsnews/archi … 46857.aspx
http://voices.washingtonpost.com/securi … v=rss_blog
http://hostexploit.com/index.php?option … ious-posts
http://securehomenetwork.blogspot.com/2 … edown.html
http://msmvps.com/blogs/hostsnews/archi … 47109.aspx
http://voices.washingtonpost.com/securityfix/

And this latest thread where someone at Est is replying, taking down sites as they're posted:
http://www.malwarebytes.org/forums/inde … topic=6159

Only time will tell what happens here, but I'm wagering they just to move to an 100% off shore set up where no one can touch them.

MysteryFCM · 2008-09-13 1:55 pm

http://hphosts.blogspot.com/2008/09/cr4 … recti.html

#1 2008-08-27 1:09 am

Don't Forget To Report Them Too!

#2 2008-08-27 3:04 am

Re: Don't Forget To Report Them Too!

#3 2008-09-09 9:34 am

Re: Don't Forget To Report Them Too!

#4 2008-09-10 6:34 am

Re: Don't Forget To Report Them Too!

#5 2008-09-13 1:55 pm

Re: Don't Forget To Report Them Too!

Board footer