The Airline Ticket Spammer is still at it, but with a new "identity" and email address. His latest domains are registered to
Beres (vitos@tiscali.es)
str.Miders 43
Dallas
Texas,534343
It's still the same guy, though, as these domains still redirect to "search engines" and use the affiliate ID aid=34671 in the redirect.
For a second I also thought he was probing for phpBB forums (phpBB recently had yet another security issue and is a popular hacking target at the moment), but then I realised that he was only using the same open proxy as that amateur hacker: 65.165.84.11. That proxy is also in the (long) list of proxies used by our Bulgarian friends, so blocking it would be a good idea.
Comments (0)
Damn Spam!
http://spam.tinyweb.net/article.php/new-identity-old-tricks