what is www.hntogrignaeo.com?? - PeachParts Mercedes-Benz Forum

strelnik · #1 01-22-2011, 10:50 PM

Sometimes, with all the protections and site restrictions I have set up to avoid viruses etc, this site pops up:

www.hntogrignaeo.com

However, like the ever-elusive doubleclick.com, which collects info on everyone w/o their consent, you can't go the site and find out what it is, who owns it or what are they doing.

Anyone know?

Botnst · #2 01-22-2011, 11:28 PM

Nope. News to me. What fresh hell is this? Probably some lowlife Russian scumbags taking advantage of people on the Internet. Those Russian jerkoffs have no conscience.

elchivito · #3 01-23-2011, 09:58 AM

I tried a traceroute and it gave me this:

traceroute: Warning: hntogrignaeo.com has multiple addresses; using 63.146.68.201

it timed out after several hops and never got there. Then a whois on that IP turned up this:

williamsblog.com
Williamsblog.com is a domain controlled by two name servers at domaincontrol.com. Both are on different IP networks. The primary name server is ns15.domaincontrol.com. Incoming mail for williamsblog.com is handled by five mail servers at googlemail.com and google.com. All five of them are on different IP networks. williamsblog.com has one IP number (63.146.68.201) , but the reverse is 63-146-68-201.dia.static.qwest.net.
63-146-68-201.dia.static.qwest.net point to the same IP. Watercreek.com, dukeandcompany.com, buypoint.info, njaudubon.org, totaltechedge.com and at least 135 other hosts share name servers with this domain. Onlinepharmacy24-7.net, online-pillstore.net, scriptsusa.net, konaki.net, japanesepartysupply.net and at least 200 other hosts share name servers under another name with this domain. Guevaras.net, factory.org, inezgarcia.com, fazisse.com, claman.net and at least 199 other hosts share mail servers with this domain. Docteroptics.net, ideprosac.com, xn--ykksbonus-27a.com, empa-online.com, molndalstandhalsovard.com and at least 199 other hosts share mail servers under another name with this domain.
More information
You might also be interested in williamsbolton.com, williamsbirn.com, williamsblogger.com, williamsbill.com and williamsblog.net.

It's a spam scam I'd bet.

Botnst · #4 01-23-2011, 11:51 AM

Nice sleuthing!

strelnik · #5 01-24-2011, 11:27 AM

Quote:

Originally Posted by elchivito

I tried a traceroute and it gave me this:

traceroute: Warning: hntogrignaeo.com has multiple addresses; using 63.146.68.201

it timed out after several hops and never got there. Then a whois on that IP turned up this:

williamsblog.com
Williamsblog.com is a domain controlled by two name servers at domaincontrol.com. Both are on different IP networks. The primary name server is ns15.domaincontrol.com. Incoming mail for williamsblog.com is handled by five mail servers at googlemail.com and google.com. All five of them are on different IP networks. williamsblog.com has one IP number (63.146.68.201) , but the reverse is 63-146-68-201.dia.static.qwest.net.
63-146-68-201.dia.static.qwest.net point to the same IP. Watercreek.com, dukeandcompany.com, buypoint.info, njaudubon.org, totaltechedge.com and at least 135 other hosts share name servers with this domain. Onlinepharmacy24-7.net, online-pillstore.net, scriptsusa.net, konaki.net, japanesepartysupply.net and at least 200 other hosts share name servers under another name with this domain. Guevaras.net, factory.org, inezgarcia.com, fazisse.com, claman.net and at least 199 other hosts share mail servers with this domain. Docteroptics.net, ideprosac.com, xn--ykksbonus-27a.com, empa-online.com, molndalstandhalsovard.com and at least 199 other hosts share mail servers under another name with this domain.
More information
You might also be interested in williamsbolton.com, williamsbirn.com, williamsblogger.com, williamsbill.com and williamsblog.net.

It's a spam scam I'd bet.

I need to find out how you do this.

I also blocked it on my browswers.