Another method of how cyber criminals operate online. These idiots have no morals.
When I began posting on The Sanford Family Misfit, I never dreamed people would actually read the things I posted. Who would’ve thought I’d eventually earn myself a few loyal readers? It never crossed my mind – the same way it never crossed my mind that I would eventually run into the occasional splog out to turn a buck off of my research, writing, and/or photos. Let’s be honest, at the time I didn’t even know what a splog was.
What is a splog?
A splog is a spam blog. Sploggers basically steal content from legitimate bloggers and repost to their own sites as a way of skewing search results and falsely generating traffic. Basically, they are leeches. You can find more information on splogs here, here, and here.
How do Sploggers steal content?
Sploggers “scrape” a blogs content by leeching off of RSS feeds or copying content directly from the original source. This process is explained more thoroughly here.
What do splogs have to do with Rssing.com?
I recently ran a Google search for The Sanford Family Misfit (I randomly do this from time to time) and bumped into a site called Rssing.com.
Source:http://www.sanfordfamilymisfit.com/updated-copyright-and-rssing-com/
Address lookup
canonical name archive.is
aliases
addresses 91.121.84.91
Domain Whois record
Queried whois.isnet.is with “archive.is”…
% This is the ISNIC Whois server.
%
% Rights restricted by copyright.
% See http://www.isnic.is/copyright.php
domain: archive.is
descr: Denis Petrov
descr: 16 Bilkova
descr: CZ-11000 Prague
admin-c: DP36-IS
tech-c: DP36-IS
zone-c: JB51-IS
billing-c: DP36-IS
nserver: ns.rackspace.com
nserver: ns2.rackspace.com
created: May 16 2012
expires: May 16 2014
source: ISNIC
person: Denis Petrov
address: 16 Bilkova
address: CZ-11000 Prague
e-mail: isnic@denis.biz
nic-hdl: DP36-IS
created: May 16 2012
source: ISNIC
person: Jason Bratton
address: 9725 Datapoint Drive, Suite 100
address: San Antonio, Texas 78229
address: US
phone: +001 210 3124475
e-mail: jbratton@rackspace.com
nic-hdl: JB51-IS
created: August 4 2008
source: ISNIC
Network Whois record
Queried whois.ripe.net with “-B 91.121.84.91″…
% Information related to ‘91.121.64.0 – 91.121.127.255’
inetnum: 91.121.64.0 – 91.121.127.255
netname: OVH
descr: OVH SAS
descr: Dedicated Servers
descr: http://www.ovh.com
country: FR
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
changed: noc@ovh.net 20080310
source: RIPE
role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
e-mail: noc@ovh.net
admin-c: OK217-RIPE
tech-c: GM84-RIPE
nic-hdl: OTC2-RIPE
notify: noc@ovh.net
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
changed: noc@ovh.net 20101005
source: RIPE
person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
e-mail: noc@ovh.net
nic-hdl: OK217-RIPE
abuse-mailbox: abuse@ovh.net
mnt-by: OVH-MNT
changed: noc@ovh.net 20101005
source: RIPE
% Information related to ‘91.121.0.0/17AS16276’
route: 91.121.0.0/17
descr: OVH ISP
descr: Paris, France
origin: AS16276
notify: noc@ovh.net
mnt-by: OVH-MNT
changed: noc@ovh.net 20070511
source: RIPE
% This query was served by the RIPE Database Query Service version 1.69 (WHOIS2)
DNS records
name class type data time to live
archive.is IN SOA
server: ns.rackspace.com
email: webmaster@archive.is
serial: 1380735343
refresh: 21600
retry: 3600
expire: 1814400
minimum ttl: 300
900s (00:15:00)
archive.is IN A 91.121.84.91 300s (00:05:00)
archive.is IN MX
preference: 30
exchange: aspmx4.googlemail.com
300s (00:05:00)
archive.is IN MX
preference: 30
exchange: aspmx3.googlemail.com
300s (00:05:00)
archive.is IN MX
preference: 30
exchange: aspmx2.googlemail.com
300s (00:05:00)
archive.is IN MX
preference: 30
exchange: aspmx5.googlemail.com
300s (00:05:00)
archive.is IN MX
preference: 20
exchange: alt1.aspmx.l.google.com
300s (00:05:00)
archive.is IN MX
preference: 10
exchange: aspmx.l.google.com
300s (00:05:00)
archive.is IN MX
preference: 20
exchange: alt2.aspmx.l.google.com
300s (00:05:00)
archive.is IN NS ns.rackspace.com 86400s (1.00:00:00)
archive.is IN NS ns2.rackspace.com 86400s (1.00:00:00)
91.84.121.91.in-addr.arpa IN PTR k1.archive.is 86400s (1.00:00:00)
84.121.91.in-addr.arpa IN SOA
server: dns10.ovh.net
email: tech@ovh.net
serial: 2013100600
refresh: 43200
retry: 4320
expire: 2419200
minimum ttl: 86400
86400s (1.00:00:00)
84.121.91.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 7200 (02:00:00)
signature expiration: 2013-11-06 10:10:11Z
signature inception: 2013-10-07 09:10:11Z
key tag: 4467
signer’s name: 91.in-addr.arpa
signature:
(1024 bits)
2877E9D2DBA40062204EA668FF51A4C6
E503D50220B1DEE06ECDC07FD9F256C6
47598B34A7701A30063E3933096CFF5D
D124DFE2ADEF9904885FAAA36A1FE38C
DDE6B89C9531B1699216E269EF2898B1
688DE9050C6C1192BB55A3AC5CFC506F
05CBD04CE170419D1CB5EB14CF003155
9824B910E7B04BB6818C8DCF81A0A383
7200s (02:00:00)
84.121.91.in-addr.arpa IN NSEC
next domain name: 85.121.91.in-addr.arpa
record types: NS RRSIG NSEC
7200s (02:00:00)
84.121.91.in-addr.arpa IN NS dns10.ovh.net 8128s (02:15:28)
84.121.91.in-addr.arpa IN NS ns10.ovh.net 8128s (02:15:28)
— end —
Related Article:
http://fraudulent107.rssing.com/browser.php?indx=15224477&item=1
may have applied FOR or is CONSIDERING APPLYING FOR is FRAUDULENT. The identities of an individual or a business entity have been stolen along with fund from their bank accounts.
scamFRAUDalert™ Report 