On 04/09/2009 10:22 AM, David B Teague wrote:
> 
> Of course, _THIS IS A SCAM_. These are the folks that brought you the 
> PDF Reader 2008/9, the AntiVirus 2009 and other hostage-holding malware.
> 
> My question is, does anyone know of a way we can help stop these 
> "gentlemen"?
> 
> David Teague

Enjoy...

--- reading URL http://bulletindweekly.com/re.php?lnk=1203442131
--- contacting host bulletindweekly.com [77.75.123.117] on port 80
HTTP/1.1 302 Found
Date: Thu, 09 Apr 2009 17:38:04 GMT
Server: Apache
X-Powered-By: PHP/5.1.6
Location:
http://officetools.su/officesuite/promo/index.asp?aff=001&camp=oo_e2o&kbid=1587&sub=oo_e2o
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

$ host OFFICETOOLS.SU
OFFICETOOLS.SU has address 84.244.174.179

domain:     OFFICETOOLS.SU
nserver:    ns0.dnsmadeeasy.com.
nserver:    ns1.dnsmadeeasy.com.
nserver:    ns2.dnsmadeeasy.com.
nserver:    ns3.dnsmadeeasy.com.
nserver:    ns4.dnsmadeeasy.com.
state:      REGISTERED, DELEGATED
org:        Internet Office Solutions
phone:      +1613 2767886
e-mail:     [email protected]
registrar:  RUCENTER-REG-FID
created:    2008.11.06
paid-till:  2009.11.06

http://www.google.com/search?complete=0&hl=en&q=(613)+276-7886
http://www.google.com/search?complete=0&hl=en&q=OFFICETOOLS.SU
It is of course the same signupsystem group:
http://signupsystem.com/

<http://www.joewein.net/blog/2008/06/12/spammers-hitch-a-ride-on-google-earth/>
http://www.trustedsource.org/query/77.75.123.117
http://www.trustedsource.org/query/84.244.174.179
<http://www.senderbase.org/senderbase_queries/detailip?search_string=84.244.174.179>


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to