Re: sortnoxington.com - stagedgarage.com - Anything else I can do to stop the spam?

"Chris" <[email protected]> Thu, 18 May 2006 22:53:46 +0100
Newsgroups gmane.mail.spam.spamcop.user
Organization SpamCop
Message-ID <[email protected]>
Hi Mike

Thank you for your input. Please forgive me that I am not as clued up and 
I.T. literate as most appear to be on this Forum.

I just wanted to clear up a few points.

My reference in relation to 'attack' was specifically that I am getting a 
very large amount of spam emails with a specific FROM domain name. I 
appreciate that spam origins can be faked, altered etc
I percieve this as an ATTACK as it is starting to affect my business and is 
unwanted. 40/50 is a very large amount of junk I have to sift through on a 
daily basis from one 'apparent' source.
Perhaps 'sift through' is the wrong term, but since I am now reporting all 
the Spam I get BY HAND to Spamcop, and I keep on seeing 'sortnoxington' and 
'stagedgarage' constantly every day, I wondered if the two domains rang a 
bell with anyone else, but they do not appear to have done.

Example from 'Stagedgarage.com'

http://www.spamcop.net/mcgi?action=gettrack&reportid=1752930315

http://www.spamcop.net/mcgi?action=gettrack&reportid=1751181161

Example from 'SortNoxington.com'

http://www.spamcop.net/mcgi?action=gettrack&reportid=1749236197

http://www.spamcop.net/mcgi?action=gettrack&reportid=1748973853

I did exactly the same as you did and searched the net on the Domain names 
and found the webpage that you did.

I would GUESS that this particular spam company uses a FROM domain alias for 
a few weeks, and then changes it. This domain hasn't appeared for a day or 
two now. Seems 'HARBLES.COM' has taken its place for exactly the same 
purpose.

I am NOT running the JW software - In a previous message I did state that I 
was running MailWasher, which runs quite well.

In case your 'fishy' comment was that I had any affiliation with the JW 
website, I can state to you now that I do not.
I do appreciate your help, and will continue to run with SPAMCOP and try to 
assist your team by regular and early spam reports, specifically to make 
sure your blacklist runs as well as it can.

Chris


"Mike Easter" <[email protected]> wrote in message 
news:[email protected]...
> Mike Easter wrote:
>> Chris wrote:
>
>>> Currently, the spams I receive have (in their FROM: tag) . . .
>>> [email protected]   and/or [email protected].
>
>> I also seem to recall that you have some kind of jwspamspy software.
>>
>> If I search for sortnoxington.com - it doesn't turn up very many
>> places except for posts by you and it also shows up on the jwspamspy
>> page http://www.joewein.de/sw/bl-log-2006-05-10.htm
>>
>> 7 hits for googleweb search  http://snipurl.com/qmo8
>> 0 hits for googlegroups search
>
> If I search for stagedgarage.com -- it doesn't turn up very many places
> at all -- and of the very few places it occurs, it shows up on the
> juspamspy page  http://www.joewein.de/sw/bl-log-2006-05-13.htm
>
> 4 hits for googleweb search http://snipurl.com/qmoo
> 0 hits for googlegroups search
>
> What I'm saying is that those domainnames are practically 'google
> unheard of' -- making them very very unusual.  So, the entire web has
> almost never heard of them.  Practically the only people who have ever
> heard of them is you, who allege to receive 30-40 spamFroms a day, and
> your previously mentioned $30 filter which I've never heard of before
> namely jwSpamSpy  http://www.jwspamspy.net/  Only US$29.95 / ? 25 / £ 18
>
> That whole story I'm describing above seems very very strange to me -- 
> like something fishy is going on here.
>
> -- 
> Mike Easter
> kibitzer, not SC admin
>