August 2008

What rubbish have we received today? Below is a partial list of the "spamvertised" domains sent to our accounts.

Note that this is a listing of spam received by us, not sent by us. We do not send unsolicited bulk email but spammers routinely forge our domain name in the From: line of their junk.

The pharmacy/replica spammers appear to have joined forces, with nearly identical emails, domain registrations and spamming patterns.

Organisation Domain Name Date
Black Network Inc., Canadian Drugstore, Canadian Healthcare, Canadian Pharmacy, Chang Limited, Cheap OEM Software, Cheap Software & OEM Downloadable CDs, Downloadable Software, ED Choice, ED Choise, ED Express, ED Pill Store, EliteHerbal Inc., Etty Productions Limited, European Pharmacy, Express Herbal Inc., Express Herbals, Exquisite Footware & Bags, Exquisite Replica, Forex Hosting, Hae Dong Limited, Health Worldwide Inc., Herbal Doctors Inc., HerbalKing, HerbalMart, King Replica, Kyung Kim LLC, Liquid Ventures Inc., LNHSolutions, MailienPharmacy Online, ManSter Penis Enlargement Formula, MaxGain+, MaxHerbal Inc., MegaDik, Mohamed Ahmed Inc., MyCanadianPharmacy, Oemcd.net, Official Medicine, Official Medicines, Optin Media Inc., Pharmacy Express, PharmSite, PowerEnlarge, Prestige Footwear, Preto Productions, Pump It Productions, Soft Eden, Speshilov Inc., Stiomal.net, Tolmen Star Enterprises Ltd., United Pharmacy, VPXL, WonderCum Inc., Xingu Inc., xtrasize-plus.com, XtraSize+ blinklate.com, earlyblink.com 1 August
coolamaze.com, strapfast.com 4 August
bandlike.com 6 August
ktz.wythex.com.cn → rangequality.com 7 August
pillhigh.com, zoompaid.com 9 August
falldoor.com 10 August
leapfade.com 13 August
padfade.com, tapewill.com 18 August
pillsrenew.com 20 August
holeace.com, sandtall.com, tearfold.com 21 August
hirefade.com 23 August
fastwait.com 25 August
lsewmoag.cn, shinecome.com 26 August
goodbring.com, realizationfield.com 29 August
nonebring.com 30 August
nearcute.com 31 August
DebtFree, Diamond Replicas, Diamond Swiss, Diamond Watches, Direct Pharmacy, E2 Finance, Euro Vegas, Euro VIP Casino, Fly Watches, Fortune Las Vegas, Freedom4U, Freedom From Debt Forever!, Gambling Online Casino, Gold Promotion Casinos, Golden Gate Casino, Jackpot Casino, Magic Jackpot Casino, Mortgage-Infinity, Online Casino, The Palace Group, Prestige Replicas, Royal Casino, Royal Club Casino, Royal-Euro Casino, ScratchCards.com, Spin Palace Casino, Vegas Casino, Vegas VIP Casino, World Casino, World Jackpot Casino, World Pharm, World Pharmacy lousne.com 3 August
ducespotmor.com 4 August
nevob.com 6 August
alinegladysip.com, chimeequipoak.com 8 August
pulsedaddylux.com 10 August
luckgalcoins.com 20 August
luckgalcoins.com 21 August
"Link Farms" humaninjection.leadhoster.com 13 August
watch.ru watch.ru 20 August
watch.ru 21 August
watch.ru 22 August
watch.ru 24 August
watch.ru 25 August
"Phishers" Domain Name Date
posing as Lloyds TSB gktii.cn 13 August
Malware Domain/Executable Date
(hacked) biomaxima.com/livestreaming.html → ? 1 August
(hacked) apiedeobra.com/index1.html → get_flash_update.exe 4 August
Angelina_Jolie.rar,
(hacked) attomega.com/index2.html → get_flash_update.exe,
(hacked) dztransporte.de/index2.html → get_flash_update.exe
5 August
(hacked) enersolar.com.ve/cnnplus.html → adobe_flash.exe,
(hacked) itwebservice.it/cnnonline.html → adobe_flash.exe
8 August
(hacked) dialogprint.ru/cnncurrent.html → adobe_flash.exe 9 August
(hacked) bad-partner.ru/cnnheadlines.html → ? 10 August
(hacked) beachcomber.de/update.html → ? 13 August
(hacked) donovanpinscherclub.com/index1.html → install.exe,
(hacked) iispc.net/index1.html → install.exe,
(hacked) islamicstore.biz/index1.html → install.exe
18 August
(hacked) polidados.com/vid.exe 20 August
(hacked) traquejo.com.br/msvid32.exe 21 August
(hacked) marketah.mysteria.cz/player.exe 22 August
(hacked) thesocialstop.com/video_4.exe 24 August
(hacked) dhs.com.co/index99.html → video99.exe 28 August
Unknown/Unresolved Domain Date
9 August
priceaceclear.com 10 August
dimeforubigtime.com 11 August
Addresses Receiving Spam Total
Nonexistant and Catch-all 0
Various Compromised Mailing Lists 46
Personal 0
Obliquity.com Domain Registration 17
Obliquity.com Contact Form 1