Tuesday, November 18, 2003

Oh look, it's Darla!

a.k.a. Darla1972 (and again, and again, and again and the first one), which is a spammer that's been trolling the web for over 2 years (longer?) and that every time I get their e-mail I do some digging to try and get closer to nailing them with legal action. Now, the really funny thing is that someone e-mailed me last week and wondered how to get rid of Darla because they were constantly getting bugged and had found my site. Well, I actually hadn't been bothered by this crew for a number of months so I figured they were done and gone (or at least got smart enough to take me off their list)... but nope... they're still around and they sent me a spam tonight.

Oh, and as always, googling can be amusing... Fried Green al-Qaedas, looks like she hit a mailing list (but with a different return address), another blogger goes digging (and an updated entry). And lastly, a page on ConsumerAbuse.org about the darla1972 spams (the C.A.P.A. site doesn't seem to actually represent any government agency or non-profit group... in fact, I'm not even 100% sure they're legit or whether they're just a hobby for someone with an axe to grind).

------------------------------------------------------------------------
X-Apparently-To: wuphonsreach@ via 216.109.118.113; Tue, 18 Nov 2003 14:26:42 -0800
X-YahooFilteredBulk: 12.153.47.178
Return-Path:
Received: from 12.153.47.178 (EHLO server.ciesurplus.com) (12.153.47.178) by mta129.mail.scd.yahoo.com with SMTP; Tue, 18 Nov 2003 14:26:42 -0800
Received: from smtp0000.mail.yahoo.com ([200.95.11.100]) by server.ciesurplus.com with Microsoft SMTPSVC(5.0.2195.6713); Tue, 18 Nov 2003 16:56:43 -0500
Date: Tue, 18 Nov 2003 21:58:33 GMT
From: "LonelyDarla567573413" Add to Address Book
X-Priority: 3
To: wuphonsreach@
Subject: wuphonsreach,last try .....:)
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: base64
Return-Path: justdarla1veutwvw9@mercuryin.es
Message-ID:
X-OriginalArrivalTime: 18 Nov 2003 21:56:43.0812 (UTC) FILETIME=[DAB60640:01C3AE1E]
Content-Length: 831


I think you answered my ad longtime ago if it was not you I am sorry.
If it was I could not answer
you because my Eudora died and I could not get it to work but my friend
got the emails address out for me ..:)
I hope it was you and you are still interested,
as I realize lots of time has past.
I really don't know where to start ....
Maybe you can tell me little more about yourself since I lost your
first email ,
what you look like,age,and are you still looking ?
If you are interested learning more about me, I have a profile at :

http://www.cherrydating.com/


I am NOT a Porn Chick ..:-)
I just chose it because you don't have to pay,
And they allow any pictures I want .:).
Oh yea , My username is darla1972 .
Don't really know what else to say for now I hope this is the right
address .
Let me know if you are interested, And I hope
you don't run when you see my picture :-)

Bye ..... :)D

------------------------------------------------------------------------
DIG results for cherrydating.com

Domain: cherrydating.com.
Primary Nameserver: ns1.daisycut.com
E-mail Contact: webmaster@onenightdate.com
/www/cgi-bin/demon/external/bin/dig @ns1.daisycut.com cherrydating.com. axfr

; <<>> DiG 2.1 <<>> @ns1.daisycut.com cherrydating.com. axfr
; (1 server found)
cherrydating.com. 86400 SOA ns1.daisycut.com. webmaster.onenightdate.com. (
982954 ; serial
28800 ; refresh (8 hours)
3600 ; retry (1 hour)
604800 ; expire (7 days)
86400 ) ; minimum (1 day)
cherrydating.com. 86400 NS ns1.daisycut.com.
cherrydating.com. 86400 A 64.156.186.23
www.cherrydating.com. 86400 A 64.156.186.23
cherrydating.com. 86400 SOA ns1.daisycut.com. webmaster.onenightdate.com. (
982954 ; serial
28800 ; refresh (8 hours)
3600 ; retry (1 hour)
604800 ; expire (7 days)
86400 ) ; minimum (1 day)
;; Received 5 records.
;; FROM: www.demon.net to SERVER: 66.6.128.230
;; WHEN: Wed Nov 19 02:13:27 2003

------------------------------------------------------------------------
WHOIS results for cherrydating.com

whois -h whois.joker.com cherrydating.com

domain: cherrydating.com
status: production
organization: cyberspacesolutions
owner: Steve woodward
email: woodward1955@hotmail.com
address: 1700 14th Ave.
city: Sofia
postal-code: A8G F77
country: BG
admin-c: woodward1955@hotmail.com#0
tech-c: woodward1955@hotmail.com#0
billing-c: woodward1955@hotmail.com#0
nserver: ns1.daisycut.com
nserver: ns2.daisycut.com
registrar: JORE-1
created: 2003-11-12 04:16:44 UTC JORE-1
expires: 2004-11-11 23:16:24 UTC
source: joker.com


db-updated: 2003-11-19 03:09:47 UTC

------------------------------------------------------------------------
Other domains that are involved (or at least hosting the DNS records or the web sites) according to the DNS information:

DIG results for onenightdate.com

; <<>> DiG 2.1 <<>> @ns1.daisycut.com onenightdate.com. axfr
; (1 server found)
onenightdate.com. 86400 SOA ns1.daisycut.com. webmaster.onenightdate.com. (
132954 ; serial
28800 ; refresh (8 hours)
3600 ; retry (1 hour)
604800 ; expire (7 days)
86400 ) ; minimum (1 day)
onenightdate.com. 86400 NS ns1.daisycut.com.
onenightdate.com. 86400 A 64.156.186.23
www.onenightdate.com. 86400 A 64.156.186.23
onenightdate.com. 86400 SOA ns1.daisycut.com. webmaster.onenightdate.com. (
132954 ; serial
28800 ; refresh (8 hours)
3600 ; retry (1 hour)
604800 ; expire (7 days)
86400 ) ; minimum (1 day)
;; Received 5 records.
;; FROM: www.demon.net to SERVER: 66.6.128.230
;; WHEN: Wed Nov 19 02:17:16 2003

DIG results for daisycut.com

; <<>> DiG 2.1 <<>> @ns1.daisycut.com daisycut.com. axfr
; (1 server found)
daisycut.com. 9600 SOA ns1.daisycut.com. hostmaster.daisycut.com. (
2002011401 ; serial
10800 ; refresh (3 hours)
3600 ; retry (1 hour)
648000 ; expire (7 days 12 hours)
38400 ) ; minimum (10 hours 40 mins)
daisycut.com. 9600 NS ns1.daisycut.com.
daisycut.com. 9600 NS ns2.daisycut.com.
daisycut.com. 9600 A 205.216.254.230
ns2.daisycut.com. 9600 A 205.216.254.231
ns1.daisycut.com. 9600 A 205.216.254.230
www.daisycut.com. 9600 A 205.216.254.230
daisycut.com. 9600 SOA ns1.daisycut.com. hostmaster.daisycut.com. (
2002011401 ; serial
10800 ; refresh (3 hours)
3600 ; retry (1 hour)
648000 ; expire (7 days 12 hours)
38400 ) ; minimum (10 hours 40 mins)
;; Received 8 records.
;; FROM: www.demon.net to SERVER: 66.6.128.230
;; WHEN: Wed Nov 19 02:17:41 2003

posted by Wuphon's Reach at 9:11 PM