Possible cheater...opinions please?

Lisa · 2005-10-26, 09:09 PM

As a matter of course these days, when I get a submit from someone who isn't already a regular submitter, I do a whois on the domain (amazing how many people you catch that way huh).

Lately I've been seeing something unusual, but am unsure if i'm onto something...or merely paranoid.

The pattern goes like this: (for example)

Domain: someporndomain.com
Email: webmaster@someporndomain.com
Username: someporn or porndomain (some derivative of the domain name)

Now the interesting bit...the name servers:

ns1.someporndomain.com
ns2.someporndomain.com

I hope I'm making sense...essentially the domain used is showing up in the url, the email, the username, AND the name servers.

I'm seeing this across a variety of domains from several submitters...whois info isn't matching at all, even the ip's are different, but in my experience the ns you use is a general one that all webmasters using that host will use, not a custom one that matches your domain name...

Opinions on my paranoia or otherwise would be welcome.

MrYum · 2005-10-26, 10:18 PM

I've seen it tossed around that having ns the same as your domain name is a possible sign of nefarious intententions. And I'm sure it's true in some instances.

However, one of my hosts specifically asked me to purchase a domain to be used as my name servers. I don't use that domain for anything other than ns...but a whois lookup on that domain does in fact reflect my company information...not that of my host.

Doesn't really answer your question fully. But, just a heads up that there are legit webmasters using custom ns instead of those of their host

Lisa · 2005-10-26, 10:31 PM

Ok thanks Carl, I'll keep that in mind...

Just seemed odd to me that within a week, I started getting several of these type submissions (when I'd never seen it before)...also the fact that ALL of them are using some derivation of the domain name as the username (surely that can't be a coincidence)...and the fact that they are on different hosts also makes it unlikely that several hosts would be doing this custom ns thing, no?

I honestly don't know...for now I'm declining.

MrYum · 2005-10-27, 12:13 AM

Don't blame you a bit for declining. Frankly, the vast majority of submissions I get with custom ns are pure shit anyway. Don't think I've seen the other specifics you mention...yet.

I think more hosts offering custom ns as an option though. I've been with the host where I have custom ns for a few years. It was last year when he moved me to new servers that he requested I purchase a domain to use as ns. I honestly don't recall what his reasoning was as to why to do it that way.

Earlier this year, I moved one of my servers to another host. While setting up that box, the host asked me if I wanted to use custom ns or use theirs...I chose the latter.

The fact that more hosts are offering this as an option may explain why we're seeing more of it in whois lookups. Still doesn't make sense to use the same domain for ns and for submissions.

Custom ns do make it more difficult to determine if someone is using freehosting. Dunno...we might be seeing the beginnings of a new submission rule on the horizon

Linkster · 2005-10-27, 08:29 AM

Lisa - that is a technique that is being used by some multisubmitters on some banned hosts - and you are correct - its increasing every day - and most LLs have now just started deleting those types of submits

Lisa · 2005-10-27, 08:38 AM

Linkster, thank you!

If nothing else, you've convinced me I'm not going mad.

2005-10-26, 09:09 PM	#1
Lisa I'm going to the backseat of my car with the woman I love, and I won't be back for TEN MINUTES Join Date: Apr 2003 Location: Brisbane, Australia Posts: 83	Possible cheater...opinions please? As a matter of course these days, when I get a submit from someone who isn't already a regular submitter, I do a whois on the domain (amazing how many people you catch that way huh). Lately I've been seeing something unusual, but am unsure if i'm onto something...or merely paranoid. The pattern goes like this: (for example) Domain: someporndomain.com Email: webmaster@someporndomain.com Username: someporn or porndomain (some derivative of the domain name) Now the interesting bit...the name servers: ns1.someporndomain.com ns2.someporndomain.com I hope I'm making sense...essentially the domain used is showing up in the url, the email, the username, AND the name servers. I'm seeing this across a variety of domains from several submitters...whois info isn't matching at all, even the ip's are different, but in my experience the ns you use is a general one that all webmasters using that host will use, not a custom one that matches your domain name... Opinions on my paranoia or otherwise would be welcome.

2005-10-26, 10:18 PM	#2
MrYum Arghhhh...submit yer sites ya ruddy swabs! Join Date: May 2004 Location: Sunny Florida! Posts: 5,108	I've seen it tossed around that having ns the same as your domain name is a possible sign of nefarious intententions. And I'm sure it's true in some instances. However, one of my hosts specifically asked me to purchase a domain to be used as my name servers. I don't use that domain for anything other than ns...but a whois lookup on that domain does in fact reflect my company information...not that of my host. Doesn't really answer your question fully. But, just a heads up that there are legit webmasters using custom ns instead of those of their host __________________ Porno Flixxx Submissions SOTI Site Submissions Free Porn Resource Submissions

2005-10-27, 12:13 AM	#4
MrYum Arghhhh...submit yer sites ya ruddy swabs! Join Date: May 2004 Location: Sunny Florida! Posts: 5,108	Don't blame you a bit for declining. Frankly, the vast majority of submissions I get with custom ns are pure shit anyway. Don't think I've seen the other specifics you mention...yet. I think more hosts offering custom ns as an option though. I've been with the host where I have custom ns for a few years. It was last year when he moved me to new servers that he requested I purchase a domain to use as ns. I honestly don't recall what his reasoning was as to why to do it that way. Earlier this year, I moved one of my servers to another host. While setting up that box, the host asked me if I wanted to use custom ns or use theirs...I chose the latter. The fact that more hosts are offering this as an option may explain why we're seeing more of it in whois lookups. Still doesn't make sense to use the same domain for ns and for submissions. Custom ns do make it more difficult to determine if someone is using freehosting. Dunno...we might be seeing the beginnings of a new submission rule on the horizon __________________ Porno Flixxx Submissions SOTI Site Submissions Free Porn Resource Submissions

2005-10-27, 08:29 AM	#5
Linkster NO! Im not a female - but being a dragon, I do eat them. Join Date: Mar 2003 Location: Sex Delta Posts: 5,084	Lisa - that is a technique that is being used by some multisubmitters on some banned hosts - and you are correct - its increasing every day - and most LLs have now just started deleting those types of submits __________________ Pussy Chompers Porn Links NSCash

2005-10-26, 10:31 PM	#3
Lisa I'm going to the backseat of my car with the woman I love, and I won't be back for TEN MINUTES Join Date: Apr 2003 Location: Brisbane, Australia Posts: 83	Ok thanks Carl, I'll keep that in mind... Just seemed odd to me that within a week, I started getting several of these type submissions (when I'd never seen it before)...also the fact that ALL of them are using some derivation of the domain name as the username (surely that can't be a coincidence)...and the fact that they are on different hosts also makes it unlikely that several hosts would be doing this custom ns thing, no? I honestly don't know...for now I'm declining.

2005-10-27, 08:38 AM	#6
Lisa I'm going to the backseat of my car with the woman I love, and I won't be back for TEN MINUTES Join Date: Apr 2003 Location: Brisbane, Australia Posts: 83	Linkster, thank you! If nothing else, you've convinced me I'm not going mad.