A couple of new spam-server domains in use by the Data Champions/Sloan Marketing B2B spam group are hosted at bodhost.com
: 101server.com
[174.141.227.188], hostedmailsend.com
[174.141.226.241]. Bodhost.com
has a history of supporting this B2B spam group who sells email addresses using many, many domain names.
To go with these new spam servers, a new front-end domain name was registered for spamming a few days ago: eventinfopark.com
.
These new spam domains don’t have a web site, their domain registration is anonymous, and all we’ve seen from them so far is a trickle of spam. Bodhost.com
probably hosts some legitimate domains in addition to spammers, but we haven’t checked.
The 101server.com
[174.141.227.188] domain name is part of a lineage of Data Champions spam servers domains that include the word “server.” Others include serverny.com, serveridreambiz, dataserver.com, eserver2.com, infomediaserver.com, texserver13.net
, etc.
Likewise, their new hostedmailsend.com
[174.141.226.241] spam domain is part of a list of junk domains containing the word “host,” to make them sound like legitimate hosting services. For example, netgamehost.com, foxwebhosting.com, greenwebhost.in, beetalhosting.com, appdns3host.com, hostforweb.net, hostserver045, webhostingcloud.us, mailhostbox.com
are all spam server domains under their control.
The SpamAssassin rule that we use below covers most of our blocking needs with regards to Data Champions spam servers:
describe B2BL_SL_SRV Domain touches/sends Data Champions B2B spam
full B2BL_SL_SRV /((eddy|auth|iba|iqube)(mailer|india|sender)|hostedmailsend|aemsolutionsinc|serverny|baxterop|sambizsolution|extremeonlinebiz|marketviaemail|gohsphere|investorsatisfaction|visionharvest|t001s|newcustomised|gosafehome|(netgame|beetal|appdns3|((fox|green)web))host(ing)?|\b(server)?idream(biz|cloud)?|teraboard|ackermanequities|glazingm|salespass|superiorns|interactiveone|\b(tex(as)?|data|e|101|infomedia)server[0-9]{0,3}|junipertechconsulting|(mail)?host(box|forweb|key53|hat|server045)|\bdns[a-z]{2,3}|webhosting(cloud|noida)|srteck|stechblr|mail-zap|mailbox29|mail365mx|nseasy)\.(com|net|info|biz|us|org|in)/i
score B2BL_SL_SRV 20