cputerace Posted February 7, 2005 Share Posted February 7, 2005 Got the following error: Tracking link: http:// what.phillysayswhat. biz/ 736460/ chws/fullpage.php No recent reports, no history available got sigalarm, taking too long to process, aborted. Perhaps you can wait a few minutes and reload? Any suggestions? Link to comment Share on other sites More sharing options...
Wazoo Posted February 7, 2005 Share Posted February 7, 2005 For starters, please hit the Forum FAQ / Glossary and read what a Tracking URL actually is ... what you posted was a link to a porn site .... not funny .. edited that link ... If you want to talk about your spam, then please use an actual Tracking URL .... on the other hand, a search within this Forum for "sigalarm" will get you into many previous discussions on the causes of this issue. Link to comment Share on other sites More sharing options...
cputerace Posted February 7, 2005 Author Share Posted February 7, 2005 sorry about that, i copied the text right out of the spamcop page, it called it a tracking link and i didnt change it. Link to comment Share on other sites More sharing options...
get-even Posted February 7, 2005 Share Posted February 7, 2005 Got the following error: Tracking link: http:// what.phillysayswhat. biz/ 736460/ chws/fullpage.php No recent reports, no history available got sigalarm, taking too long to process, aborted. Perhaps you can wait a few minutes and reload? Any suggestions? 24035[/snapback] It seem that the "No recent reports" is unreliable -I reported that site yesterday (and they are already blacklisted a few other places now). Also, wildcard DNS: % dig '*.phillysayswhat.biz' any ; <<>> DiG 9.3.0 <<>> *.phillysayswhat.biz any ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62958 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 2 ;; QUESTION SECTION: ;*.phillysayswhat.biz. IN ANY ;; ANSWER SECTION: *.phillysayswhat.biz. 3577 IN CNAME www.phillysayswhat.biz. ;; AUTHORITY SECTION: phillysayswhat.biz. 3577 IN NS ns7.bighostsolutions.com. phillysayswhat.biz. 3577 IN NS ns1.realdnssystem.com. phillysayswhat.biz. 3577 IN NS ns3.autonameservers.com. phillysayswhat.biz. 3577 IN NS ns4.bighostsolutions.com. ;; ADDITIONAL SECTION: ns3.autonameservers.com. 41026 IN A 61.240.131.209 ns4.bighostsolutions.com. 35877 IN A 218.7.120.118 ;; Query time: 3 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Mon Feb 7 14:12:58 2005 ;; MSG SIZE rcvd: 210 At least it is a spammer with a sense of humor - he also has been using the domain "bagelsandcreamcheese.biz" -- BTW. The actual operator is either or both of "Clever Link Trading Limited" and "Fantasy Content" of 14150 NE 20th St. Suite #99 Bellevue WA. 98007. He also has a few dozen other domains (whch I know of) that reference the same site. He tries to be legal (at least the porn part) - His "18 U.S.C. section 2257" filing copy is readable at (google cached copy, not the original) the URL: http://216.239.57.104/search?q=cache:b6cCg...Cyprus%22&hl=en (Note: the site it was cached from "parkleah.biz" is down.) Link to comment Share on other sites More sharing options...
get-even Posted February 9, 2005 Share Posted February 9, 2005 It seem that the "No recent reports" is unreliable -I reported that site yesterday (and they are already blacklisted a few other places now). Also, wildcard DNS: I hate to reply to my own post, but I just reported another spam from the same site. Again, "No recent reports". Note, the wildcard DNS on the domain in the previous post and that there only one 'A' record if you follow the trail from the CNAME. % dig www.phillysayswhat.biz any [at]218.7.120.118 ; <<>> DiG 9.3.0 <<>> www.phillysayswhat.biz any [at]218.7.120.118 ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63865 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 2 ;; QUESTION SECTION: ;www.phillysayswhat.biz. IN ANY ;; ANSWER SECTION: www.phillysayswhat.biz. 30 IN A 211.144.164.204 ;; AUTHORITY SECTION: phillysayswhat.biz. 3600 IN NS ns1.realdnssystem.com. phillysayswhat.biz. 3600 IN NS ns3.autonameservers.com. phillysayswhat.biz. 3600 IN NS ns4.bighostsolutions.com. phillysayswhat.biz. 3600 IN NS ns7.bighostsolutions.com. ;; ADDITIONAL SECTION: ns4.bighostsolutions.com. 3600 IN A 218.7.120.118 ns7.bighostsolutions.com. 3600 IN A 222.223.134.244 ;; Query time: 504 msec ;; SERVER: 218.7.120.118#53(218.7.120.118) ;; WHEN: Tue Feb 8 18:18:21 2005 ;; MSG SIZE rcvd: 210 Also, as I mentioned before, at least nearly a dozen other (also reported) domains refer to the same IP (it does move around, see that the TTL is only one hour for the name servers and just 30 seconds for the actual site). Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.