Reporting spam email to Registrars and ISPs

Wednesday, October 17 2007 @ 12:38 AM Eastern Daylight Time

Contributed by: Michael Brusletten

Did you ever wonder why one of the reasons spammers are so difficult to knock off the net?  Well, we might just have the answer why.  From what I've been told by the registrars is that you need to send them the entire email, including full headers, the raw email text form that has the html coding in it.  Now most of you are wondering what I mean.  What this means is that if you look at the properties of the email, and then open the source of the email up...it will look really strange to allot of you.  That's fine, because this is what the abuse departments of the registrars and including ISPs will want.  Here's an example (at the bottom) of what they are looking for in a complete spam email that should be sent to them.  I've starred out the To: email name as we do not want to advertise a working email here at Spacequad Anti-Spam.  However, you will not want to alter anything when sending this information to them.  

Update We are now submitting spam complaints directly to the Registrars. So far they are terminating any domain names that have exibited spam or virus qualities to them. If we all start doing this, then maybe the spammers will start getting the message that we as a whole, do not accept their tactics. Besides, its got to be costing them some serious money now to register a domain name to find out within a few days after the spam messages went out, that they no longer have a domain name to have these spam link to link to that work. Lets all keep up the great work!

Here's the nice thing about it.  After you lookup the domain name in the whois to find out who they had registered the domain name through, you can then goto that Registrar and get the correct abuse department's email to forward the information onto.  Hopefully within days of you reporting this spammer/hacker/phisherman to the proper Registrar, the site will be shut down.  The really nice part about it, is that most of these spammers have fake information in their domain records and will never get the email because the email that they provided in the records along with the name and address are fake also.  So, in conclusion, what does this mean to you.  The domain owner doesn't get the notice from the Registrar and they end up getting suspended or terminated.  Then you can say, congratulations, you helped take down a dirty spammer.


Received: from 91.122.165.140 by node4.ns2.spacequad.com (LogSat Software SMTP Server); Thu, 25 Oct 2007 19:47:55 -0400
Received: from [91.122.165.140] by mx.jenithea.com; Fri, 26 Oct 2007 02:49:50 +0300
From: "Kip Rubio" <akstcjenitheamnsdgs@jenithea.com>
To: <******@spacequad.com>
Subject: oeminoem
Date: Fri, 26 Oct 2007 02:49:50 +0300
Message-ID: <01c8177a&#36;e0a75210&#36;8ca57a5b@akstcjenitheamnsdgs>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_000E_01C8177A.E0A75210"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4927.1200
Importance: Normal
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <akstcjenitheamnsdgs@jenithea.com>
X-SF-HELO-Domain: [91.122.165.140]
X-Rejection-Reason: 15 - 550 The sender did not meet Sender Policy Framework rules. Please see http://spf.pobox.com

This is a multi-part message in MIME format.

------=_NextPart_000_000E_01C8177A.E0A75210
Content-Type: text/plain;
	charset="iso-8859-2"
Content-Transfer-Encoding: 7bit

VIEW ALL PRODUCTSadditivesMost popular products:afghaniMicrosoft Windows Vista Businessacrostically
  Retail Price &#36;299.00admittible
  Our       &#36;79.95acclaimerMicrosoft Office 2007 Enterprise adherescence
  Retail Price &#36;899.00aidmen
  Our       &#36;79.95acylsMacromedia Dreamweaver 8aesopian
  Retail Price &#36;399.99acidimetry
  Our       &#36;49.95agonesAdobe Creative Suite 3 Design Premium for Windows acridnesses
  Retail Price &#36;1799.00acknowledgment
  Our       &#36;269.90ablationMicrosoft Office 2003 Professional with Business Contact Manager for Outlookagglutinable
  Retail Price &#36;550.00adiabatic
  Our       &#36;69.95aeromarineAdobe Illustrator CS2 aida
  Retail Price &#36;499.00adducent
  Our       &#36;59.95 actinomycomaAdobe Premiere 2.0 agrosteral
  Retail Price &#36;849.00acquaintant
  Our       &#36;59.95 aggregativeCorelDraw Graphics Suite X3aheap
  Retail Price &#36;399.00abdicant
  Our       &#36;59.95 abseilsMacromedia Studio 8abaxile
  Retail Price  999.00accentless
  Our        99.95 afterwordAutodesk AutoCAD 2007 adnominal
  Retail Price &#36;3995.00abdomen
  Our       &#36;129.95agnomicalVIEW ALL PRODUCTSactivating


------=_NextPart_000_000E_01C8177A.E0A75210
Content-Type: text/html;
	charset="iso-8859-2"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META content=3D"text/html; charset=3Diso-8859-2" http-equiv=3DContent-Ty=
pe>
<META content=3D"MSHTML 5.50.4927.1200" name=3DGENERATOR></HEAD>
<BODY>
<body>
<p><a href=3D"http://qbqasru.forupremiumsoft.net"><strong>VIEW ALL PRODUC=
TS</strong></a><font color=3D"#FFFFFF">additives</font></p>
<p><strong>Most popular products</strong>:<font color=3D"#FFFFFF">afghani=
</font></p>
<p><strong>Microsoft Windows Vista Business</strong><font color=3D"#FFFFF=
F">acrostically</font><br>
  <em>Retail Price &#36;299.00</em><font color=3D"#FFFFFF">admittible</font><=
br>
  <strong>Our       &#36;79.95</strong><font color=3D"#FFFFFF">acclaimer</fon=
t></p>
<p><strong>Microsoft Office 2007 Enterprise</strong> <font color=3D"#FFFF=
FF">adherescence</font><br>
  <em>Retail Price &#36;899.00</em><font color=3D"#FFFFFF">aidmen</font><br>
  <strong>Our       &#36;79.95</strong><font color=3D"#FFFFFF">acyls</font></=
p>
<p><strong>Macromedia Dreamweaver 8</strong><font color=3D"#FFFFFF">aesop=
ian</font><br>
  <em>Retail Price &#36;399.99</em><font color=3D"#FFFFFF">acidimetry</font><=
br>
  <strong>Our       &#36;49.95</strong><font color=3D"#FFFFFF">agones</font><=
/p>
<p><strong>Adobe Creative Suite 3 Design Premium for Windows</strong> <fo=
nt color=3D"#FFFFFF">acridnesses</font><br>
  <em>Retail Price &#36;1799.00</em><font color=3D"#FFFFFF">acknowledgment</f=
ont><br>
  <strong>Our       &#36;269.90</strong><font color=3D"#FFFFFF">ablation</fon=
t></p>
<p><strong>Microsoft Office 2003 Professional with Business Contact Manag=
er for Outlook</strong><font color=3D"#FFFFFF">agglutinable</font><br>
  <em>Retail Price &#36;550.00</em><font color=3D"#FFFFFF">adiabatic</font><b=
r>
  <strong>Our       &#36;69.95</strong><font color=3D"#FFFFFF">aeromarine</fo=
nt></p>
<p><strong>Adobe Illustrator CS2 </strong><font color=3D"#FFFFFF">aida</f=
ont><br>
  <em>Retail Price &#36;499.00</em><font color=3D"#FFFFFF">adducent</font><br=
>
  <strong>Our       &#36;59.95 </strong><font color=3D"#FFFFFF">actinomycoma<=
/font></p>
<p><strong>Adobe Premiere 2.0 </strong><font color=3D"#FFFFFF">agrosteral=
</font><br>
  <em>Retail Price &#36;849.00</em><font color=3D"#FFFFFF">acquaintant</font>=
<br>
  <strong>Our       &#36;59.95 </strong><font color=3D"#FFFFFF">aggregative</=
font></p>
<p><strong>CorelDraw Graphics Suite X3</strong><font color=3D"#FFFFFF">ah=
eap</font><br>
  <em>Retail Price &#36;399.00</em><font color=3D"#FFFFFF">abdicant</font><br=
>
  <strong>Our       &#36;59.95 </strong><font color=3D"#FFFFFF">abseils</font=
></p>
<p><strong>Macromedia Studio 8</strong><font color=3D"#FFFFFF">abaxile</f=
ont><br>
  <em>Retail Price  999.00</em><font color=3D"#FFFFFF">accentless</font><=
br>
  <strong>Our        99.95 </strong><font color=3D"#FFFFFF">afterword</fo=
nt></p>
<p><strong>Autodesk AutoCAD 2007 </strong><font color=3D"#FFFFFF">adnomin=
al</font><br>
  <em>Retail Price &#36;3995.00</em><font color=3D"#FFFFFF">abdomen</font><br=
>
  <strong>Our       &#36;129.95</strong><font color=3D"#FFFFFF">agnomical</fo=
nt></p>
<p><a href=3D"http://qbqasru.forupremiumsoft.net"><strong>VIEW ALL PRODUC=
TS</strong></a><font color=3D"#FFFFFF">activating</font></p>
</body>
</BODY></HTML>

------=_NextPart_000_000E_01C8177A.E0A75210--

.

Comments (1)


Spacequad AntiSpam Services
http://www.spacequad.com/article.php/reporting_spam_mail