CastleCops® King Replica Spam

SIRT^(TM)

Spam Incident Reporting and Termination^(TM) Squad

How-To / FAQ

SIRT

Confirmed Spam

Terminated Spam

evidence status: confirmed spam

ID	201330 (termination link)
Title	King Replica
Entry	http://clappeal.com/
SIRT Squad Reporter	jimVO
Timestamp	19 Jul, 2008 @ 18:05:40
Topic ID	225214 - Read/respond to SIRT commentary.
Handler Note: 19 Jul, 2008 22:20:50	tembow: Criminal Evidence See the Spam Wiki entry at http://www.spamtrackers.eu/wiki/index.php?title=King_Replica or from China: http://www.spamtrackers.hk/wiki/index.php?title=King_Replica See the McAfee Site Advisor information at http://siteadvisor.com/sites/clappeal.com > Registrar: 35 TECHNOLOGY CO., LTD REGISTRATION OF THE WEB SITE: clappeal.com ACTION: To suspend this criminal site which breaks your terms of service, set the domain status to clientHold > HICHINA ZHICHENG TECHNOLOGY LTD. REGISTRATION OF THE NAME SERVERS These name servers are registered by criminals to resolve only illegal web sites. This breaks your terms of service. You can safely suspend them: NS3.BYIUEAHEI.COM NS4.BYIUEAHEI.COM ACTION: To suspend these name servers successfully, follow these steps. 1. set the ns Address records to a non-routable address, such as 127.0.0.1 or 61.61.61.61. 2. Set the domain status to clientUpdateProhibited, clientTransferProhibited, clientDeleteProhibited, and clientHold > CNCGROUP-ZJ chenrenhai@china-netcom.com IP ADDRESS OF HOST: clappeal.com has address 60.12.107.8 The IP address of this criminal site is within your allocated address space. ACTION: Black-hole the route to this address to prevent further criminal activity
Handler Note: 19 Jul, 2008 23:31:19	tembow: Generated and sent email spam alert to respective parties.
Fetched URLs	http://clappeal.com/

Report for at 19 Jul, 2008 @ 22:20:49

fetched page

at 19 Jul, 2008 @ 23:30:42
MD5 Fingerprint: b5f023080ab958fba684526d31d5bb0d
SHA1 Fingerprint: faee5861b1eab7bf13eb89185bb46540cb37697e

HTTP/1.1 200 OK
Date: Sat, 19 Jul 2008 23:29:40 GMT
Server: Apache/2.0.58 (Unix) mod_ssl/2.0.58 OpenSSL/0.9.7f PHP/4.4.7
Connection: close
Set-Cookie: DOM=clappeal.com:2133302102; path=/
Set-Cookie: AFF=0116444927; path=/
Set-Cookie: PAGE=3934442362; path=/
Content-type: text/html
Content-Length: 764

<html><head><title></title></head>
<body bgcolor="#FFFFFF" text="#000000" link="#0000FF" vlink="#800080" alink="#FF0000">
<div align="center">KING REPLICA 
 
Looking to buy your partner or loved one a beautiful gift? 
Or maybe just to reward yourself with a gift for once? 
 
We have over 5000 Replica products in stock ranging from Rolex, Cartier and Breitling watches, to Gucci and Louis Vuitton Bags at heavily discounted prices! 
 
All orders are shipped via Express Courier delivery to ensure fast and prompt delivery. 
 
<a href="main.php">ENTER OUR SHOP HERE</a> </div>
</body>
</html>


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 159ppm 0.152s (0.027s) Making cybercriminals unhappy since 2002*

SIRT(TM)

Spam Incident Reporting and Termination(TM) Squad

evidence status: confirmed spam

Report for at 19 Jul, 2008 @ 22:20:49

fetched page

SIRT^(TM)

Spam Incident Reporting and Termination^(TM) Squad