You are viewing a single comment's thread.

view the rest of the comments →

1
9

[–] MadWorld [S] 1 points 9 points (+10|-1) ago  (edited ago)

(looks like the 10,000 char bug is back)

Part 1 of 2


Spammers' domains with similar page source layout:

AUTOMOBILEGUILD.COM
    ...
    <div class="background_overlay"></div>
    <script src="/js/jquery-1.12.4.min.js"></script>
    <script src="/js/angular.min.js"></script>
    <script src="/js/angular-sanitize.min.js"></script>
    <script src="/js/custombox.min.js"></script>
    <script src="/js/js1.js"></script>
    <script src="/js/jquery.form-validator.min.js"></script>
    <script src="/js/App.js?v=2"></script>
    <script src="/js/CommonFactory.js?v=1"></script>
FUNNYBEEZ.COM
    ....
    <div class="background_overlay"></div>
    <script src="/js/jquery-1.12.4.min.js"></script>
    <script src="/js/angular.min.js"></script>
    <script src="/js/angular-sanitize.min.js"></script>
    <script src="/js/js1.js?v=1"></script>
    <script src="/js/jquery.form-validator.min.js"></script>
    <script src="/js/App.js?v=3"></script>
    <script src="/js/CommonFactory.js?v=1"></script>
TIMESHERALDNEWS.COM
    ...
    <div class="background_overlay"></div>
    <script src="/js/jquery-1.12.4.min.js"></script>
    <script src="/js/angular.min.js"></script>
    <script src="/js/angular-sanitize.min.js"></script>
    <script src="/js/js1.js"></script>
    <script src="/js/jquery.form-validator.min.js"></script>
    <script src="/js/App.js?v=3"></script>
    <script src="/js/CommonFactory.js"></script>

Domain registry lookup of relatively new domains used for spamming, likely due to @Mumbleberry exposing their spamming tactic:

  • automobileguild.com
    • Domain Name: AUTOMOBILEGUILD.COM
    • Registry Domain ID: 2219228340_DOMAIN_COM-VRSN
    • Creation Date: 2018-01-27T07:32:24Z
    • Update Date: 2018-01-27T07:32:24Z
    • Registrar Registration Expiration Date: 2019-01-27T07:32:24Z
    • Registrar URL: http://www.godaddy.com
  • funnybeez.com
    • Domain Name: FUNNYBEEZ.COM
    • Registry Domain ID: 2213708513_DOMAIN_COM-VRSN
    • Creation Date: 2018-01-16T12:51:24Z
    • Update Date: 2018-01-16T12:51:24Z
    • Registrar Registration Expiration Date: 2019-01-16T12:51:24Z
    • Registrar URL: http://www.godaddy.com
  • timesheraldnews.com
    • Domain Name: TIMESHERALDNEWS.COM
    • Registry Domain ID: 2197763108_DOMAIN_COM-VRSN
    • Creation Date: 2017-12-09T02:08:35Z
    • Update Date: 2017-12-09T02:08:35Z
    • Registrar Registration Expiration Date: 2018-12-09T02:08:35Z
    • Registrar URL: http://www.godaddy.com

Submitters:

  • fillsimmons (exclusive out of 19)
  • hustonlarry (almost exclusive out of 39)
  • primerotech (almost exclusive out of 39)
  • shiwankaswe (almost exclusive out of 67)

Additional info from @boredTech about domains pointing ghostnet.de datacenter:

https://voat.co/v/whatever/2536840/12713233

traceroute automobileguild.com

12 c07.dwh.fra.ghostnet.de (5.175.255.132) 106.491 ms 106.478 ms 108.475 ms

traceroute timesheraldnews.com

12 c07.dwh.fra.ghostnet.de (5.175.255.132) 109.590 ms 106.742 ms 106.632 ms

traceroute funnybeez.com

12 c07.dwh.fra.ghostnet.de (5.175.255.132) 157.146 ms 156.992 ms 154.604 ms

Recent report, by @srgmpdns, regarding domain spammers:

https://voat.co/v/whatever/2536840/12713188

https://voat.co/user/shiwankaswe

https://voat.co/user/fillsimmons

https://voat.co/user/primerotech

https://voat.co/user/hustonlarry

Example of spambot that follows around user:

https://archive.fo/HXnpQ

https://voat.co/user/rishvi/comments

Shut you cunt mouth @mumbleberry STOP SHIT POSTER#1

User Link
Reported Today https://voat.co/v/ReportSpammers/2525158
Reported Yesterday https://voat.co/v/ReportSpammers/2525025
Up Votes from -561 -51 https://voat.co/v/ReportSpammers/2512928
Reported 6 days ago https://voat.co/v/ReportSpammers/2519674
Reported 9 days agao https://voat.co/v/ReportSpammers/2511587
Reported by User @shiwankaswe https://voat.co/v/ReportSpammers/2519674
Reported 2 months ago https://voat.co/v/ReportSpammers/2436613
Up Votes from 860 to 1400 https://voat.co/v/ReportSpammers/2433483
Reported by User @prameelaranign as DOX. https://voat.co/v/ReportSpammers/2442099
Circulating personal twitter ID here https://voat.co/v/ReportSpammers/2442099 !!

https://archive.fo/0c9CJ

@mumbleberry Alt. Accounts List growing more and more

...


Older domain registry lookup from spammers' old submissions:

  • carvideos.club
    • Domain Name: carvideos.club
    • Creation Date: 2016-11-30T05:41:30Z
    • Updated Date: 2017-12-05T05:56:37Z
    • Registry Expiry Date: 2018-11-29T23:59:59Z
    • Registrant Name: [xxxxxxxxxx]
    • Registrant Organization: [xxxxxxxxxx]
    • Registrant Street: [xxxxxxxxxx]
    • Registrant Street: [xxxxxxxxxx]
    • Registrant City: [xxxxxxxxxx]
    • Registrant State/Province: [xxxxxxxxxx]
    • Registrant Postal Code: [xxxxxxxxxx]
    • Registrant Country: [xxxxxxxxxx]
    • Registrant Phone: [xxxxxxxxxx]
    • Registrant Email: [xxxxxxxxxx]@gmail.com
  • prankpapa.com
    • Domain Name: PRANKPAPA.COM
    • Creation Date: 2016-10-11T11:12:24Z
    • Updated Date: 2017-09-26T04:27:19Z
    • Registrar Registration Expiration Date: 2018-10-11T11:12:24Z
    • Registrar URL: LaunchPad.com
    • Registrant Name: [xxxxxxxxxx]
    • Registrant Organization: [xxxxxxxxxx]
    • Registrant Street: [xxxxxxxxxx]
    • Registrant City: [xxxxxxxxxx]
    • Registrant State/Province: [xxxxxxxxxx]
    • Registrant Postal Code: [xxxxxxxxxx]
    • Registrant Country: [xxxxxxxxxx]
    • Registrant Phone: [xxxxxxxxxx]
    • Registrant Email: [xxxxxxxxxx]@gmail.com

Note: the domain registrar info is publicly available by doing a whois lookup(e.g. internic or godaddy). I have removed personal detail about him.

Submitters:

  • primerotech (almost exclusive out of 39)
  • shanka-office (almost exclusive out of 23)

Vote manipulation & comment spamming:

For those submissions involved, see @Mumbleberry's comment history and all those alt accounts that follow him everywhere. Some comments have consistent +20 downvotes. Here is a short list of examples:

List of accounts(25) in question:

User stats sorted by account date:

Creation Date Username Comments SCP/CCP UV/DV SCP UV/DV CCP Links Discussions
20171030 @rishvi 331 6101 / 729 1042 / 73 1392 / 1037 885 1
20180212 @myasir 68 16 / 207 120 / 27 496 / 519 3 0
20180225 @abdulm 58 0 / 183 81 / 34 482 / 433 0 0
20180225 @akrammd 318 36 / 1001 183 / 74 1066 / 1004 7 0
20180225 @kareemulla 610 120 / 1560 214 / 83 1199 / 1145 38 10
20180225 @mdakram 65 0 / 242 63 / 46 482 / 428 0 0
20180225 @yasirmohammed 160 -10 / 448 114 / 74 915 / 840 4 0
20180226 @sabarahim 102 0 / 341 160 / 57 1013 / 698 1 0
20180301 @dennischandler 39 0 / 199 81 / 21 598 / 333 0 0
20180301 @roofermann 45 8 / 266 89 / 56 557 / 414 1 0
20180306 @jeffrc 66 -2 / 182 130 / 34 462 / 403 3 1
20180307 @jasonhop 90 0 / 286 230 / 36 818 / 578 0 0
20180308 @petesam 56 0 / 252 100 / 32 329 / 317 0 0
20180310 @diallo 43 0 / 191 111 / 45 558 / 414 0 0
20180310 @duckgoduck 50 5 / 304 73 / 38 506 / 368 1 0
20180310 @kingfishers 21 0 / 137 64 / 30 371 / 337 0 0
20180310 @lotusf 16 0 / 162 87 / 37 459 / 318 0 0
20180312 @prameelaranign 9 5 / 63 3 / 0 9 / 0 1 2
20180424 @Joycec 48 0 / 163 8 / 3 47 / 42 0 0
20180424 @Ojas 10 0 / -12 0 / 0 0 / 0 0 0
20180430 @dumbdennis 10 0 / 25 0 / 0 0 / 0 0 0
20180430 @williamchandler 31 1 / 63 2 / 0 9 / 0 1 0
20180505 @luapmurg 4 0 / 3 11 / 0 73 / 0 0 0
20180509 @rFinley 10 0 / -18 0 / 0 0 / 0 0 0
20180509 @Washougal 10 0 / -11 0 / 0 0 / 0 0 0

1
4

[–] MadWorld [S] 1 points 4 points (+5|-1) ago  (edited ago)

Part 2 of 2

Summary of submissions related to the domains in question:

Creation Date Username Comments SCP/CCP UV/DV SCP UV/DV CCP Links Discussions
20161207 @primerotech 33 414 / 24 71 / 0 77 / 0 39 0
20161208 @shanka-office 0 -33 / 0 2 / 0 0 / 0 22 0
20170828 @shiwankaswe 44 558 / 22 108 / 0 102 / 0 64 3
20180422 @hustonlarry 29 103 / 27 88 / 0 68 / 0 39 0
20180423 @fillsimmons 15 106 / 24 29 / 0 44 / 0 18 0

Domain stats:

Submissions Username Domain
15 @primerotech timesheraldnews.com
8 @primerotech funnybeez.com
8 @primerotech automobileguild.com
5 @primerotech prankpapa.com
1 @primerotech imgur.com
1 @primerotech imgoat.com
1 @primerotech facebook.com
1 @primerotech carvideos.club
16 @shanka-office prankpapa.com
5 @shanka-office carvideos.club
2 @shanka-office facebook.com
42 @shiwankaswe timesheraldnews.com
8 @shiwankaswe automobileguild.com
5 @shiwankaswe youtube.com
3 @shiwankaswe cars.com
2 @shiwankaswe imgoat.com
1 @shiwankaswe v/ReportSpammers
1 @shiwankaswe v/newsubverses
1 @shiwankaswe v/AskVoat
1 @shiwankaswe trump-forum.com
1 @shiwankaswe moving.com
1 @shiwankaswe imgur.com
1 @shiwankaswe funnybeez.com
1 @shiwankaswe facebook.com
17 @hustonlarry funnybeez.com
10 @hustonlarry timesheraldnews.com
7 @hustonlarry automobileguild.com
2 @hustonlarry autoblog.com
1 @hustonlarry youtube.com
1 @hustonlarry metro.co.uk
1 @hustonlarry imgur.com
1 @hustonlarry dailymail.co.uk
10 @fillsimmons timesheraldnews.com
6 @fillsimmons funnybeez.com
3 @fillsimmons automobileguild.com

Date accounts started submitting to those domains:

Username Submission Time Title Domain
@primerotech 2018-04-26 01:45:37 The Fine Line Between Friendly and Creepy funnybeez.com
@primerotech 2018-04-25 15:45:36 2019 Lamborghini Aventador S Roadster First Drive Review: Refined bull automobileguild.com
@primerotech 2018-04-24 15:10:15 Trump Planted A Tree In The White House Lawn And Yes, Of Course It Became A Meme timesheraldnews.com
@shiwankaswe 2018-04-23 01:45:48 Watch the Rolls-Royce Cullinan tackle the sand dunes outside Dubai automobileguild.com
@shiwankaswe 2018-04-22 13:07:47 At Least Four People Are Dead After A Shooting In A Waffle House Outside Nashville timesheraldnews.com
@hustonlarry 2018-04-24 01:59:06 Volkswagen Hopes to Break the Pikes Peak EV Record With This Car automobileguild.com
@hustonlarry 2018-04-23 14:06:41 Waffle House shooting suspect thought Taylor Swift was stalking him timesheraldnews.com
@hustonlarry 2018-04-23 12:15:17 47 Pics That Will Make You Cringe Your Pants funnybeez.com
@fillsimmons 2018-04-25 08:14:16 50 Hilarious Stoner Memes That'll Get You Ripped funnybeez.com
@fillsimmons 2018-04-25 02:56:10 WardsAuto Picks its 10 Best Interiors of 2018 automobileguild.com
@fillsimmons 2018-04-24 07:29:28 Mitchell scores 33, Jazz rout Thunder 113-96 timesheraldnews.com
@primerotech 2016-12-15 07:40:55 2016 Chevrolet Camero v6 Review carvideos.club
@primerotech 2016-12-07 18:13:19 Best startup of the month - Watch Internet Funny Videos at one place prankpapa.com
@shanka-office 2016-12-08 11:33:29 2017 Audi TT RS - Exterior and Interior Review carvideos.club
@shanka-office 2016-12-08 08:23:28 LAMBORGHINI Gold Digger Prank pick up girl. prankpapa.com

Additional stats from other user accounts that have made submissions.

Submissions Username Domain
3 @myasir imagehousing.com
5 @akrammd imagehousing.com
1 @akrammd voat.co
1 @akrammd thctalk.com
1 @akrammd breitbart.com
1 @akrammd b3ta.com
27 @kareemulla imagehousing.com
9 @kareemulla voat.co
6 @kareemulla v/ReportSpammers
3 @kareemulla v/whatever
1 @kareemulla v/ProtectVoat
1 @kareemulla img1.imagehousing.com
1 @kareemulla encrypted-tbn0.gstatic.com
1 @kareemulla blogspot.com
2 @yasirmohammed imagehousing.com
2 @yasirmohammed blogspot.com
1 @sabarahim tinypic.com
1 @roofermann imagehousing.com
3 @jeffrc voat.co
1 @jeffrc v/AskVoat
1 @duckgoduck imagehousing.com
1 @prameelaranign v/ReportSpammers
1 @prameelaranign voat.co
1 @prameelaranign v/AskVoat
1 @williamchandler imagehousing.com
54 @rishvi techinsider.gq
42 @rishvi techwire.gq
42 @rishvi herbalhealth.ga
41 @rishvi ztechnews.ml
40 @rishvi esciencetech.gq
36 @rishvi globaltimes.tk
35 @rishvi asbesotoinfos.com
32 @rishvi upi.com
28 @rishvi economybuzz.gq
26 @rishvi funnyworld.cf
25 @rishvi foxnews.com
22 @rishvi techdigital.tk
18 @rishvi nytimes.com
17 @rishvi washingtonpost.com
17 @rishvi onethereum.gq
15 @rishvi etechworld.cf
15 @rishvi cnn.com
12 @rishvi theguardian.com
12 @rishvi bloomberg.com
11 @rishvi startribune.com
11 @rishvi reuters.com

Mumbleberry's stat, if anyone wants to inspect his submissions:

Submissions Username Domain
15 @Mumbleberry v/whatever
14 @Mumbleberry dailymail.co.uk
10 @Mumbleberry v/KukistanisandPajeets
9 @Mumbleberry v/ReportSpammers
6 @Mumbleberry voat.co
5 @Mumbleberry v/ProtectVoat
3 @Mumbleberry youtube.com
2 @Mumbleberry worldnewsdailyreport.com
2 @Mumbleberry v/PatriotsSoapbox
2 @Mumbleberry v/IslamUnveiled
2 @Mumbleberry v/funny
2 @Mumbleberry v/Esseff
2 @Mumbleberry breitbart.com
1 @Mumbleberry ww2today.com
1 @Mumbleberry wric.com
1 @Mumbleberry v/whatever2
1 @Mumbleberry v/WesternChristianity
1 @Mumbleberry v/TruthHurtz
1 @Mumbleberry v/TheDankNation
1 @Mumbleberry v/StreetShitters
1 @Mumbleberry v/Shitholes
1 @Mumbleberry v/MuslimInvaders
1 @Mumbleberry v/koans
1 @Mumbleberry v/Identitarians
1 @Mumbleberry v/Identitarian
1 @Mumbleberry v/Hydrogen
1 @Mumbleberry v/GL
1 @Mumbleberry v/gaming
1 @Mumbleberry v/feminsim
1 @Mumbleberry v/fatpeoplehate
1 @Mumbleberry v/DNM
1 @Mumbleberry v/cucks
1 @Mumbleberry v/BitchAndMoan
1 @Mumbleberry v/AntiSemitismWatch
1 @Mumbleberry thenews.com.pk
1 @Mumbleberry thejakartapost.com
1 @Mumbleberry thegatewaypundit.com
1 @Mumbleberry telegraph.co.uk
1 @Mumbleberry sunnewsonline.com
1 @Mumbleberry republicstandard.com
1 @Mumbleberry nytimes.com
1 @Mumbleberry newobserveronline.com
1 @Mumbleberry liveleak.com
1 @Mumbleberry kek.gg
1 @Mumbleberry justjared.com