| View previous topic :: View next topic |
| Author |
Message |
trobbins
SIRT Handler
Premium Member
Joined: Feb 19, 2007
Posts: 1176
Location: USA
|
 Posted: Fri Dec 28, 2007 7:45 am Post subject: XIN NET Removals |
|
|
These posts are for documenting bulk removal requests sent to XIN NET. Anyone sending complainterator complaints for XIN NET domains should check here to see if it has already been reported. Sending duplicate reports is counterproductive as it make more work for the registrar. Nodus and myself have recently tried sending bulk reports rather than singly to see what kind of results we would get. So far it looks promising for some of the other registrars so far. To date XIN NET does not seem to suspend any more domains than in the past. This is not to say they do not ever suspend domains, just either selectively or randomly.
I would encourage you to create a list of domains you get in spam and check here to see if they have already been reported or suspended. Then send your own bulk report every 3 to 5 days and post the domains here for us to add to our own lists. I would lean toward 1 bulk report every 5 days if you get more than 10 per day. Feel free to include more than 1 brand in a single report. Simply create a separate section for each brand.
Sample report:
| Quote: | XIN NET TECHNOLOGY CORPORATION
Canadian Pharmacy (73)
arebehind.com
arrivereceive.com
atunder.com
bellpound.com
betweenbe.com
snip....
Criminal Evidence - Fraudulent Pharmacy
--- False Pretenses ---
* False: Verisign secure link claim
* False: Claims to have "ADA" approval
* False: Claims to have "Pharma Checker" approval
* False: Claim of "CIDA Rx" approval
* False: Claim to be Canadian
Their spam messages violate the CAN-SPAM act because they have
forged "from" and "reply to" addresses, are sent from hijacked computers
without the knowledge or permission of the owners, do not include valid information
identifying who has sent the spam or how to opt out, and do not honor opt-out requests
on their websites. Addresses are collected by bots spidering the internet for email addresses.
ACTION
Removal instructions for spammed domains are in this link
> http://www.spamtrackers.eu/wiki/index.php?title=Registrar_Advice
> http://spamtrackers.hk/wiki/index.php/Registrar_Advice
Thank you for your efforts to reduce spam and to keep criminals from abusing your terms of service.
Spamwiki article for this website type:
http://spamtrackers.hk/wiki/index.php/Canadian_Pharmacy
http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Pharmacy
|
|
|
| Back to top |
|
 |
trobbins
SIRT Handler
Premium Member
Joined: Feb 19, 2007
Posts: 1176
Location: USA
|
| Posted: Fri Dec 28, 2007 7:48 am Post subject: |
|
|
Reported on 12/24/2007 and 12/27/2007
Canadian Pharmacy (172)
alwaysor.com
bluedouble.com
boyold.com
carrywild.com
catchpart.com
chairget.com
chartoperate.com
circlenear.com
consonantlost.com
cornerverb.com
coursehigh.com
cowfinish.com
differpaint.com
edgebottom.com
exceptmark.com
experimentglass.com
favormillion.com
favorwritten.com
fellstrong.com
fewidea.com
finesuch.com
finisharrange.com
flathot.com
floorheavy.com
forestunit.com
fractioniron.com
goldinch.com
grandto.com
graysurprise.com
growobserve.com
guidefear.com
holesteam.com
huntexcept.com
includewest.com
ironexample.com
justfew.com
laughwin.com
learnsuch.com
legelectric.com
logsound.com
massrepresent.com
materialeffect.com
mixevery.com
motionthan.com
mountborn.com
musicbroad.com
nineinvent.com
noticeseparate.com
ohwhile.com
onceteach.com
periodfact.com
pickgentle.com
pictureseat.com
posewheel.com
possiblesteam.com
prettypound.com
propercreate.com
pullgroup.com
raillisten.com
ranchild.com
ranmiddles.com
readyonly.com
richwould.com
rubocean.com
rubwing.com
senseprocess.com
sisteryet.com
slavecourse.com
smilecolony.com
streetbetween.com
suchdoor.com
suchdown.com
suddeneight.com
suddenfair.com
sugaronly.com
suggestmix.com
summerobject.com
supportthink.com
swimcloud.com
swimexact.com
takesuch.com
teamprepare.com
teethtone.com
thatfull.com
theirgrew.com
themhunt.com
themstream.com
thoughmove.com
thousandsearch.com
thusarrive.com
turnbetween.com
valleyprocess.com
waitspoke.com
weekbranch.com
windowtotal.com
wishrain.com
woodchild.com
wroteflow.com
yellowask.com
arebehind.com
arrivereceive.com
atunder.com
bellpound.com
betweenbe.com
bothclean.com
broadduck.com
broadlost.com
broughtold.com
chairgeneral.com
chancebreak.com
characterheard.com
claimrise.com
classgeneral.com
cleansee.com
clearthose.com
climbfire.com
coattold.com
collectdetermine.com
earmake.com
easeshort.com
endfamily.com
exactable.com
familysilent.com
feedconsider.com
forcehuge.com
gavecost.com
gladheld.com
glassguess.com
groupoperate.com
guesssaid.com
hasarrange.com
helpduring.com
herewave.com
indicateadd.com
instantmonth.com
ironprepare.com
jumpmatch.com
languagetall.com
madespread.com
mainmeant.com
meantteam.com
metalfinal.com
metalmean.com
methodidea.com
motionmiddle.com
ownsaw.com
persongirl.com
poemcount.com
postperiods.com
printteach.com
propertysymbol.com
railweather.com
readymaterial.com
reasonstory.com
ropenote.com
roseyes.com
rubrather.com
scaleindicate.com
shestudy.com
singinch.com
solutionlot.com
streetstill.com
thanbread.com
tinykind.com
tookocean.com
trainfinal.com
treethrough.com
verbhold.com
villagecollect.com
waitcontain.com
wholeget.com
wildfill.com
Elite Herbal (2)
siboosted.com
sjthenational.com
Express Herbals (179)
124rhsaf.com
adekitop.com
airisturtle.com
allamericanpenis.com
aoueissoi.com
asdroodl.com
askposti.com
asrrwer.com
aussizcrim.com
baabeedoo.com
beegfak.com
beeittee.com
beenyboisters.com
beverguli.com
beveryghiin.com
blinowr.com
boosterherblaz.com
bushsidures.com
canbebiggerst.com
cannyouseethedifference.com
canspomtu.com
cantoiuer.com
canyouseeethedifference.com
cdrxpay.com
chxkyjoint.com
ciytering.com
connisuer.com
coplsow.com
cruuserpo.com
cuytorwe.com
dblornote.com
diecristan.com
djionmm.com
dollarstens.com
dongbdown.com
donutsitome.com
dwqcm8ehxd67xgw0xkw.com
eatlahdun.com
eighwert.com
eihthundplus.com
eitpskdd.com
farraggamo.com
fiedoredi.com
fiewpds.com
foasetss.com
forderenaz.com
fortunesbodnis.com
fouasdme.com
fourwese.com
fpowecc.com
fruitsaga.com
fueepoert.com
fugulistic.com
geninuswe.com
goodtosetto.com
goopoleon.com
goupfurtha.com
gracepoti.com
growthbeforenows.com
gruplsook.com
guwereced.com
heuwiter.com
hgiulemster.com
hjdddin.com
iamonlinz.com
idealsthistas.com
iijop235.com
impfrwarc.com
incrediherbalgrowth.com
ionpion.com
irfansst.com
isthereadifference.com
itsgoodchrt.com
jierose.com
jilkstoras.com
jinasdas.com
joionsd.com
jpismeasd.com
juniberyex.com
juowqps.com
jusous.com
kiteoputer.com
kjiassite.com
kornerrub.com
kruffesits.com
kuriywes.com
lambginor.com
largeandthicks.com
largeincreasezs.com
lemonchixus.com
livemgmts.com
liwersz.com
martiuerc.com
meropers.com
meusnd.com
miosalnisc.com
moeias.com
monstarvol.com
moretorerola.com
morniwer.com
msuituo.com
naturopwe.com
neptiunuei.com
neversmallagains.com
ngwuuie.com
ninewerw.com
ninpoqas.com
nippoaur.com
nmseosc.com
nojoinwer.com
nsyrtures.com
nuojiea.com
nuosets.com
nusteroe.com
nuweions.com
okjiseer.com
onasds.com
onionsareenobli.com
oximorani.com
pikkividdy.com
piowem.com
plancto.com
pokkiut.com
pquerttol.com
putinesush.com
qorigt.com
quattroist.com
quootles.com
raesteromes.com
reemizsoc.com
riflektion.com
rockninht.com
romanemp.com
rotuebu.com
sakeier.com
seetheport.com
sevenhosrt.com
sevoqmwe.com
siousts.com
sitineerus.com
smalrincess.com
southnewti.com
sugarfiszh.com
suhshitee.com
sulescap.com
superbigsizez.com
swernoert.com
sxkwers.com
tenthingstodowiz.com
tenuskd.com
teopwerl.com
theasdpoee.com
thinknicap.com
twaedsh.com
underdawgie.com
unfruers.com
upperslizsca.com
uraouesns.com
uterpoinru.com
uuiowel.com
vicinitao.com
vigulutne.com
viotiener.com
virsucon.com
visfesrals.com
vjiokee.com
volertox.com
weeddee.com
weeloiisre.com
weiouyt.com
wourerst.com
wripoer.com
wrotethatit.com
wuandfiddle.com
wyututzp.com
xiefions.com
xnonoies.com
yuhhutu.com
zoroturo.com
Prestige Replicas (1)
spoeijjj.com
|
|
| Back to top |
|
|
AlphaCentauri
SIRT Handler
Premium Member
Joined: Nov 20, 2003
Posts: 2856
|
| Posted: Fri Dec 28, 2007 7:42 pm Post subject: |
|
|
Have there actually been removals? I was thinking "Xin Net Removals" would be a good topic to start on April Fool's Day 
|
|
| Back to top |
|
|
trobbins
SIRT Handler
Premium Member
Joined: Feb 19, 2007
Posts: 1176
Location: USA
|
| Posted: Sat Dec 29, 2007 2:42 am Post subject: |
|
|
I do have some domains I reported in the past that are dead, but I can not say I personally had anything to do with it. So far, the ones I reported are alive but then it has not been very long either.
|
|
| Back to top |
|
|
trobbins
SIRT Handler
Premium Member
Joined: Feb 19, 2007
Posts: 1176
Location: USA
|
| Posted: Tue Jan 01, 2008 1:48 am Post subject: |
|
|
Reported 2007-12-30
Canadian Pharmacy (13)
ageshell.com
broadhard.com
camefriend.com
flatread.com
footinvent.com
muchwrite.com
patternmen.com
pushfamily.com
racewhether.com
roundenter.com
shinemotion.com
valleyleg.com
windowloud.com
Express Herbals (54)
biggerthanevers.com
bimeuzhu.com
bluntaur.com
boksuep.com
bunkeriuesl.com
chasedoute.com
cramumues.com
darlinzone.com
depiutes.com
eigtjademl.com
flaminhout.com
fuliwer.com
furuespil.com
geejilos.com
hubunell.com
hundpercont.com
ikeir.com
Increasesizenoww.com
jaseuues.com
jueretu.com
kiueklsoe.com
laxeres.com
lenbenden.com
mahemauils.com
mayliane.com
menainpot.com
meurst.com
mewituel.com
mokeushoof.com
mueuepow.com
muntreriv.com
nhtersco.com
nineinchesperfec.com
nubtekue.com
nutyesnio.com
oqpeksm.com
orugne.com
plewuuer.com
poiueyter.com
qoopwer.com
riverpow.com
sanloutye.com
shzehort.com
straepoe.com
swizuos.com
terioinni.com
Toobigforhers.com
uetmhuo.com
vleentube.com
vreypro.com
whatsizeisperfection.com
wonderfullarges.com
xmasghost.com
yourickuis.com
MaxHerbal(1)
Beautifuldics.com
Prestige Replicas (3)
assdefgg.com
assdelle.com
spdooekk.com
|
|
| Back to top |
|
|
ahoier
SIRT Handler
Joined: Jan 14, 2006
Posts: 1086
Location: USA
|
| Posted: Fri Feb 01, 2008 1:24 am Post subject: |
|
|
rxlovecaptain_com is one I've seen hanging around a lot, and well, going through some old geocities spam, I found some 2+ month old geocities pages that were still LIVE and redirecting here.
Of course I mailed geocities network-abuse address.
But it would be great to see the long trail of domains to rxlovecaptain taken down.
Removal request: mukopkufude.com
Removal request: pharokufuma.com
Removal request: nuspharkosa.com
Removal request: kopepharas.com
Removal request: rxlovecaptain.com
|
|
| Back to top |
|
|
AlphaCentauri
SIRT Handler
Premium Member
Joined: Nov 20, 2003
Posts: 2856
|
|
| Back to top |
|
|
spamislame
SIRT Handler
Joined: Apr 19, 2006
Posts: 200
|
| Posted: Thu May 29, 2008 2:03 pm Post subject: |
|
|
This may be a longshot but I attempted to communicate directly with XIN NET regarding mass complaints and the perceived lack of response from them. I am doing so initially in traditional Chinese (thank you Google translations and some friends who are assisting me in proofing these messages.)
Here's what I've gotten so far.
| SiL wrote: | May 28, 2008 4:55PM EDT
support@xinnet.com,registrar@xinnet.com
我想向溝通，以您的投訴辦公室和遵守主任。向誰我可以解決這個投訴？
還：有沒有人對您的員工閱讀英語？
請回复。
謝謝你在前進。
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I wish to send communication to your complaint office and compliance officer. To whom can I address this complaint?
Also: does anyone on your staff read English?
Please respond.
Thank you in advance. |
[support@xinnet.com bounced, of course. But the message actually did get through and support@xinnet.com was the responding address]
| XinNet Support wrote: | May 28, 2008 1:56am EDT
尊敬的新网客户：
您好！
很高兴回答您的问题！
请将投诉信息发送至：tousu@xinnet.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Dear XIN NET customers:
Hello!
Very happy to answer your questions!
Please send complaints to: tousu@xinnet.com |
So I just finished sending the following to tousu@xinnet.com:
| SiL wrote: | 問候。
有人建議，討論ICANN的遵守的罪行，應直接發到您的地址，所以我已決定向您發送電子郵件。
原諒我的中文語文能力。我使用的在線翻譯服務。我會包括原英文版的這宗投訴。
我是一個獨立的調查網絡罪犯的去向。在過去數個月，貴公司似乎是支持許多刑事在線網站，同時也允許從字面上數以十萬計的網站域名註冊，以欺詐手段，使用虛假的聯繫信息或盜竊得來的信用卡（通常是兩個）
我和很多同事已報告此為貴公司的支持，至少有整整一年。
直至目前為止，回應從您的公司已不足，而事實上，你繼續讓數千名以上的網域，必須註冊使用完全相同的虛假的聯繫信息。
這些虛假註冊是違反了ICANN的遵守。
我和許多其他人提出這個問題直接與ICANN ，而我在早期階段，接觸中國的執法，特別是關於"XIN NET"的支持，非法的網上藥房，其中被命名為：
Canadian Pharmacy
US Drugs
US Pharmacy
和非法的"中草藥補救"的網站，如：
MaxGain+
VPXL / Express Herbal
WonderCum
最後，假/副本"時裝設計師"的網站，如：
King Replica
Exquisite Replica
Prestige Replica
所有這些網站是人所共知的，由國際執法機構和已知是非法作業。
" VPXL " ，特別是主題警方調查，在印度，新西蘭和美國就收費，洗錢，非法出售假冒藥品和其它刑事指控。
為什麼我會調查，這些網站呢？因為他們給我以百萬計的電子郵件訊息，每月我不希望接收。("Spamming")
這項活動可能不是非法在中國，但他們的產品正試圖出售是眾所周知的危險性，及出售，違反了國際法。
在繼續容許登記在自己的網站的網域， " XIN NET"似乎是一個支持者，這一國際犯罪活動。
我主要是想討論ICANN的遵約問題。
什麼是最有效的方法，以報告大量的網域註冊的" XIN NET" ？
我們一直試圖在相當長的時間，現在沒有收到任何有效的反應，從您的公司。
哪裡特別，我們應發送詳細的投訴？
" XIN NET"的ICANN的遵守是很可能的危險，被吊銷，除非你採取決定性的行動，以阻止這些欺詐登記從正在取得進展。
是" XIN NET"支持罪犯？看來，方法，世界上大多數。
我很欣賞你注意這個嚴重的問題。
請回复。
非常真誠， SiL / IKS / 關注公民 。
英文版本也會跟進。
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Greetings.
It was recommended that discussion of ICANN compliance offences should be directed to your address, so I have decided to email you.
Forgive my Chinese language skills. I am using online translation services. I will include the original English version of this complaint.
I am an independent investigator of online criminals. In the past several months, your company appears to be supporting many criminal online websites, and has also allowed literally hundreds of thousands of website domains to be registered fraudulently, using false contact information or stolen credit cards (usually both.)
I and many of my colleagues have been reporting this to your company support for at least one full year now.
So far the response from your company has been inadequate, and in fact you continue to allow thousands more domains to be registered using the exact same false contact information.
These false registrations are in violation of ICANN compliance.
I and many others have raised this issue directly with ICANN, and I am in the early stages of contacting Chinese law enforcement, specifically regarding "XIN NET"'s support of illegal online pharmacies which are named:
Canadian Pharmacy
US Drugs
US Pharmacy
And illegal "herbal remedy" sites such as:
MaxGain+
VPXL / Express Herbal
WonderCum
And finally, fake / replica "designer fashion" sites such as:
King Replica
Exquisite Replica
Prestige Replica
All of these websites are well known by international law enforcement agencies and are known to be operating illegally. "VPXL" in particular is the subject of police investigations in India, New Zealand and the United States regarding charges of money laundering, illegal sale of fake pharmaceuticals and other criminal charges.
Why do I investigate these sites? Because they send me millions of email messages per month which I do not wish to receive. ("Spamming")
That activity may not be illegal in China, but the products they are attempting to sell are known to be dangerous, and are sold in violation of international law.
In continuing to allow the registration of their website domains, "XIN NET" appears to be a supporter of this international criminal activity.
I primarily wish to discuss the ICANN compliance issue.
What is the most effective way to report large numbers of domains registered by "XIN NET"?
We have been trying for a long time now and not getting any effective response from your company.
Where specifically should we send detailed complaints?
"XIN NET"'s ICANN compliance is very likely in danger of being revoked unless you take decisive action to stop these fraudulent registrations from being made.
Is "XIN NET" supporting criminals? It appears that way to most of the world.
I appreciate your attention to this serious matter.
Please respond.
Very Sincerely,
SiL / IKS / concerned citizen |
Let's see if anyone responds.
Had anyone already had that email address in their complaints in the past?
I sent copies of this to ICANN as well. I know they tend to take a dimmer view of my types of complaints so I am steering the conversation towards one of "why are you continuing to allow the same fake information to be used in registrations?"
More as it happens. This is the first response I have ever received from XIN NET and I believe use of even rudimentary Chinese translation has aided this communication greatly.
SiL
|
|
| Back to top |
|
|
AlphaCentauri
SIRT Handler
Premium Member
Joined: Nov 20, 2003
Posts: 2856
|
| Posted: Thu May 29, 2008 3:16 pm Post subject: |
|
|
Traditional Chinese is used in Taiwan; I believe Simplified Chinese is a Communist reform and is used in PRC. I don't know about Hong Kong. As far as I know, although Mandarin and Cantonese are different languages, the characters are the same.
I'd recommend short declarative sentences. Chinese doesn't really use dependent clauses, and that is a part of English they have difficulty translating.
|
|
| Back to top |
|
|
Krivoi
Sergeant
Joined: Mar 03, 2008
Posts: 85
|
| Posted: Thu May 29, 2008 9:08 pm Post subject: |
|
|
I just wanted to say Good Effort to spamislame - 
| Quote: | | This is the first response I have ever received from XIN NET and I believe use of even rudimentary Chinese translation has aided this communication greatly. |
I agree.
Every angle of attack must be used! I've suggested in general before about translating the name server removal instructions themselves, but now specifically what about sending even a rudimentary translation to "support"?
That tousu address looks familiar, though. I remember it was on the original "scattergun" list, but I'm afraid I for one never got any reply from it to my English language complaints.
|
|
| Back to top |
|
|
spamislame
SIRT Handler
Joined: Apr 19, 2006
Posts: 200
|
| Posted: Fri May 30, 2008 2:07 pm Post subject: |
|
|
| AlphaCentauri wrote: | | Traditional Chinese is used in Taiwan; I believe Simplified Chinese is a Communist reform and is used in PRC. I don't know about Hong Kong. As far as I know, although Mandarin and Cantonese are different languages, the characters are the same. |
See? I should have asked. 
Either way, the original request got through so I figured this one couldn't hurt.
| AlphaCentauri wrote: | | I'd recommend short declarative sentences. Chinese doesn't really use dependent clauses, and that is a part of English they have difficulty translating. |
Agreed. I actually drastically re-re-re-wrote that whole message several times while testing out the translations. If it made it through and back on Google translate with very little modification: in it went.
Google translation now features a huge list of languages, including Romanian and Croatian. (Romanian in particular is an awesome addition. I'd been trying to contact Romanian law enforcement for the past three years with no tools whatsoever.)
SiL
|
|
| Back to top |
|
|
AlphaCentauri
SIRT Handler
Premium Member
Joined: Nov 20, 2003
Posts: 2856
|
| Posted: Fri May 30, 2008 10:37 pm Post subject: |
|
|
| spamislame wrote: | | Google translation now features a huge list of languages, including Romanian and Croatian. |
From my limited experience, Google seems to do much better than Babelfish at translating Chinese, too, including technical terms like "domain name server."
|
|
| Back to top |
|
|
tembow
Blue Angel
Premium Member
Joined: Oct 10, 2005
Posts: 2930
|
| Posted: Mon Jun 02, 2008 8:46 am Post subject: |
|
|
On top of the 5,500 sites suspended yesterday, Xin Net has suspended another list from the Castlecops wiki, added less than 12 hours before.
Prestige Replicas - 51 suspensions
Exquisite Footwear & Bags - 15 suspensions
King Replica - 130 suspensions
Pharmacy Express - 10 suspensions
ED Express - 4 suspensions
Global Pharm - 5 suspensions
Your Online Pharmacy - 3 suspensions
Online Pharmacy - 1 suspension
WonderCum - 3 suspensions
MaxGain+ - 104 suspensions
Express Herbals - 157 suspensions
LNHSolutions - 14 suspended
ED Pill Store - 16 suspended
Canadian Drugstore - 3 suspended
European Pharmacy - 50 suspended
Canadian Pharmacy - 382 suspended
Canadian Healthcare - 100 suspended
Total = 1048
|
|
| Back to top |
|
|
kamaraju
Corporal
Joined: Mar 07, 2007
Posts: 66
Location: USA
|
| Posted: Mon Jun 02, 2008 1:45 pm Post subject: |
|
|
| tembow wrote: | | On top of the 5,500 sites suspended yesterday, Xin Net has suspended another list from the Castlecops wiki, added less than 12 hours before. |
That's great. Could someone please tell me where this page is? I went to http://wiki.castlecops.com/Main_Page , tried searching for the list of spammed domains, but could not find anything.
The thing is, I have a bunch of XIN NET spam domains which have been persistent for a long time. I have reported them to XIN NET a lot of times, but with no results so far. If there is a list of spammed domains maintained somewhere, I would like to add these domains to that.
Also, is there a similar list available for spammy nameservers as well? I know that there is a thread devoted to "new nameservers". But because the castlecops' forums are very slow (typically takes 1 minute to load each page) this thread is not much useful for me. If there is a wiki page, then I can just search for a particular nameserver. If the nameserver is not present, then I can just add it to the list!
Any ideas?
thanks
raju
|
|
| Back to top |
|
|
ahoier
SIRT Handler
Joined: Jan 14, 2006
Posts: 1086
Location: USA
|
|
| Back to top |
|
|
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
