Spam sites seeking PII for plausible abuse
most are Fake Medication sites or redirects.
119.39.238.2
124.42.121.39
202.75.37.168
203.93.208.86
209.160.64.193
209.44.113.54
212.174.200.111
218.75.144.6
220.248.167.100
220.248.172.37
222.241.150.146
61.191.191.241
64.234.120.130
72.46.131.80
76.164.232.46
aeinared.cn
aeipocau.cn
avkjiw.cn
awaycanyon.com
bcewoquw.cn
bnogiqum.cn
brafiyon.cn
bsacapop.cn
chaqifuw.cn
csocomew.cn
dependprefer.com
dhelatab.cn
dogdoorgone.com
dqetisaq.cn
famousloyal.com
fkixicev.cn
gfapomom.cn
gmajifet.cn
gruqeluh.cn
gtuhifin.cn
gvugeyec.cn
gyecelid.cn
hcanofes.cn
hluwemut.cn
jsanobek.cn
kjakiran.cn
kruretez.cn
kupi-y-nas.ru
kxalusez.cn
kxalusez.cn
kxutohag.cn
kypi-y-nas.ru
letterwant.com
lsiyevab.cn
lzufuhew.cn
magicwisdom.com
medultimateobject.com.cn
mfimsomej.cn
mightwatchess.cn
moosemeal.com
mpesudev.cn
mxaletim.cn
myoxufop.cn
mzowubar.cn
ndebezof.cn
ndicoxis.cn
nsayecob.cn
ntekotab.cn
perfectpharmsteam.com
plantseedsown.com
pmezukim.cn
proveextra.com
pticoted.cn
qdasolir.cn
qfitosac.cn
qkagaxel.cn
rbuvipoc.cn
rjewuyig.cn
storemedsthank.com
thebugek.cn
thifibis.cn
vkjeeiw.cn
vrotikag.cn
vtumovif.cn
wziwajid.cn
xhaliron.cn
xliwuwim.cn
xvaxewun.cn
xviwaxos.cn
yheqopal.cn
ykafucir.cn
ymegerix.cn
ymimubox.cn
yourfavoritepet.com
yposaxih.cn
yrirayun.cn
zdahidag.cn
zdusaqox.cn
zmoyihit.cn
zmurihuv.cn
ztuneyet.cn
zwiwagug.cn
zxusnofax.cn
source:
AbuseButler - Spamvertised Domains
Last hour report, will change frequently.
{EDIT 31 July, 2009}
removed (loopback):
Johnny will have to hack his own brain and loop it through Jones.
127.0.0.1
127.0.0.127
Red Paint provided Free of charge !!
Fri 03 Jul 2009 11:01:57 AM UTC — AthloniteFunny how most are of the .cn and .ru extension . I guess they Are that bad. With all the knowledge they possess , it's too bad they can only use to do bad things.
Thanks g7w. have rated and commented.
Athlonite.
Your help is always needed.
All rated / commented.
Fri 03 Jul 2009 11:39:08 AM UTC — shazzaThanks g7w!
Done
Fri 03 Jul 2009 12:02:43 PM UTC — cconniejeanAll rated and commented
Done 2
Fri 03 Jul 2009 01:20:55 PM UTC — cotojoUsed my new toy :-)

Colin
http://freepcsecurity.co.uk
"If you have knowledge, let others light their candles with it" - Winston Churchill
Done
Sat 04 Jul 2009 01:19:42 AM UTC — phantazmThere were exactly 100 sites:
Only one click...
;-)
127.0.0.1
Fri 31 Jul 2009 07:45:53 PM UTC — GalaxyfoxSorry to bring this thread back up but I was checking the scorecard of 127.0.0.1 which is local host and saw Spam references to this thread. Isn't 127.0.0.1 the localhost?
Freedomstar
http://wintechpedia.blogspot.com
Re: 127.0.0.1
Fri 31 Jul 2009 07:53:21 PM UTC — SamiIsn't 127.0.0.1 the localhost?
Yes, the whole 127.0.0.0/8 address block is reserved for loopback.
re: 127.0.0.1 -removed from list
Fri 31 Jul 2009 08:42:13 PM UTC — g7wThanks for catching that, I wonder how many other times I've rated it via IP listings.
Edited start topic, removed from list, re-rate Green or delete existing ratings and comments I suppose...
I stole a quote from an old movie Johnny Mnemonic for my comment
@ Sami LOL "... there's no place like 127.0.0.1"
127.0.0.0/8 means all numerical sequences between 127.0.0.0 through 127.255.255.255 are Loopback IP's
-------
Against Intuition - gives us safety through Web of Trust.
WOT Community - gives us security through unity.
Thank you all
- G7W
for g7w : your quote ?
Mon 10 Aug 2009 11:37:33 PM UTC — RonanKERhello David,
can you explain me why the quote "Johnny will have to hack his own brain and loop it through Jones" ? What does it mean exactly, because for people like me who aren't english fluent, it's quite hard to understand...
(is it for the word "loop" that's near "loopback")
i've just found that the full sentense is "Johnny will have to hack his own brain and loop it through Jones. That has to supplant any techno-babble as the most addled tech-jargon I’ve ever heard. Takashi arrives with katana and gun in hand." but that didn't help me understanding it...
(http://www.geocities.com/sideorderofninjas/reviews...
And why are you so sure that 127.0.0.0/8 is safe ?
re: my quote
Tue 11 Aug 2009 02:13:36 AM UTC — g7wOld movie
Johnny Mnemonic [part 8/10] >> 07:15
The actual quote is "The only way left is to hack your own brain, then loop it through Jones [the dolphin]"
And why are you so sure that 127.0.0.0/8 is safe ?
IP block is IANA Reserved
why local=safe ?
Mon 10 Aug 2009 11:24:11 PM UTC — RonanKERPlease explain me why should we consider localhost safe ?
On a standard PC I think local port 80 (and others) should not respond, or if it does the user should know why. If he doesn't know why and/or if the localhost site is not what he expects, it can be a trojan on his computer. Some virus/trojan can make a local fake site on localhost and then stole information from the user through this site...
I don't know how "spam" can be linked to localhost but sure it corresponds to a form of attack.
When using WOT, i think a user that have configured a local site on his computer should exclude it from WOT in the config... And for other users, then it should alert it's unsafe...
is it possible to have a specific alert for localhost domains/IP to explain more precisely to the user why this is so special ?
re: localhost
Tue 11 Aug 2009 02:19:15 AM UTC — g7wlocalhost is the alphanumeric representation for IP: 127.0.0.1 and means this computer (your PC). Is not your computer safe for you?
it's exactly what i understand
Wed 26 Aug 2009 07:58:24 AM UTC — RonanKERI totally understand that 127.*.*.* = loopback = own computer....
But I refuse to admit that it's safe ! even if in majority it is,
There is some trojan/virus that can use localhost to show you a fishing site or else...
I think when localhost responds and the user doesn't know why, it's probably not safe.
when localhost is used, the user should know why and generally he may exclude this from WOT in his config.
I think that for specific cases like localhost/127.* WOT should just give an advice that explains what it is, and not take any note from users...