Slashdot Mirror
Spammer Hangout's Membership Roster Left Exposed
MikeCapone writes "According to an article at Wired News, spammers feel the need to be part of a community too. The Bulk Club is one such community. A message on the site states that it offers, for a $20 monthly fee, a variety of how-to articles, spamming software, a members' message board area, and 300,000 FRESH e-mails/week. Unsurprisingly, the 'Law & Ethics' section is 'Members Only.' The good part is that, because of a glitch, the membership list of this charming organization was left exposed on the website."
What's the difference between these remarkle advertising vehicles? Don't be left without the proper knowledge when sending out your offering to the masses. Along with our other various How Tos, learn the difference before any mailing.
I have never felt so good to be part of the Slashdot effect.
BTW, as pointed to in the article, a list of members was posted to Usenet w/a list of memberships. There was also a link to an archive of the contents of the site; here's a link:
http://jscript.dk/2003/8/thebulkclub.com.zip
and a mirror:
http://saintaardvarkthecarpeted.com/thebulkclub.co m/thebulkclub.com.zip
A list of the files in the archive can be found here:
http://saintaardvarkthecarpeted.com/thebulkclub.co m/contents.txt
Grab a copy and post your own links!
Carousel is a lie!
One word: Putty.
"Have a heart, people! Sure, spammers are jerks, we can laugh at them and make fun of them, but don't you have any sense of decency?"
Never measure one's decency based solely on an expression of their emotions. Imagine PETA frowning over use of the term "I'm so hungry I could eat a horse."
http://www.spamhaus.org/
Who is the Bulk Club? I dunno, you tell me whois! By the way, I'd rather not call that phone number, can anyone confirm if it is fake or not? Last time I checked, 666 was not a local prefix.
Organization:
The Bulk Club LLC
The Bulk Club LLC The Bulk Club LLC
3867 W. Market St #272
Akron, OH 44333
US
Phone: 330-666-7625
Email: aumaninc@hotmail.com
Registrar Name....: Register.com
Registrar Whois...: whois.register.com
Registrar Homepage: http://www.register.com
Domain Name: THEBULKCLUB.COM
Created on..............: Thu, Aug 29, 2002
Expires on..............: Sun, Aug 29, 2004
Record last updated on..: Tue, Aug 26, 2003
Administrative Contact, Technical Contact, Zone Contact:
The Bulk Club LLC
The Bulk Club LLC The Bulk Club LLC
3867 W. Market St #272
Akron, OH 44333
US
Phone: 330-666-7625
Email: aumaninc@hotmail.com
Domain servers in listed order:
NS2.ITBRAZIL.COM - 216.162.103.31
NS0000.4AMDNS.COM - 202.54.192.205
NS5.4AMDNS.COM - 203.199.113.19
traceroute www.thebulkclub.com ...
traceroute to www.thebulkclub.com (216.162.103.31), 30 hops max, 40 byte packets
[snippage]
17 mo1-edge-03.inet.qwest.net (205.171.29.158) 62.364 ms 62.466 ms 62.264 ms
18 65.123.132.254 (65.123.132.254) 62.9 ms 62.795 ms 62.734 ms
19 gig000.magic.cybercon.com (216.15.195.37) 159.064 ms 69.802 ms 199.813 ms
20 lindbergh.valuenet.net (64.37.126.10) 64.008 ms 63.91 ms 64.375 ms
21 www.it-india.com (216.162.103.31) 64.948 ms 65.241 ms 64.86 ms
ValueNet... I seem to recall that domain from a few other traces of spammer's web hosts. Hat check, anyone?
-jcr
The only title of honor that a tyrant can grant is "Enemy of the State."
Here you go:
This is the jackass that runs the site bulkclub.com
Drew Auman
The Bulk Club LLC
3867 W. Market St #272
Akron, OH 44333
330-666-7625
Last known home address from yahoo people search (the phone number matches from the contact on a whois on the site registration info):
Drew Auman
113 Hunt Club Dr
Copley, OH 44321-2759
330-666-7625
That prefix is quite fitting don't you think?
You've got an easy breezy wind at your back...most of the time.
If this data were left exposed, collected and put online about most any other group, be it alcoholics or political dissidents, you people would all be appalled...
The difference would be that the other groups you mention aren't engaging in millions of counts of petty theft on a daily basis.
-jcr
The only title of honor that a tyrant can grant is "Enemy of the State."
c=0; while true; do lynx -dump http://www.thebulkclub.com >/dev/null; c=`expr $c + 1`; echo $c; done
If you don't have Lynx installed either, try this:
c=0; while true; do (echo "GET / HTTP/1.0"; echo "") | nc www.thebulkclub.com 80 >/dev/null; c=`expr $c + 1`; echo $c; done
If you don't have netcat installed, what kind of l4m3r are you? :-)
20 January 2017: the End of an Error.
Well while we're on the subject of revenge served cold... **Oops! SPAM SITES LIST**
Seems I accidentally dropped a link... No what can we do to slashd- I mean 'fix' that?
Business \Busi"ness\, n.;
A scam in which all people involved perceive as beneficial...
Crap, forgot to include what the OP wanted. :D
I'll reply to my own comment anonymously so as not to whore.
Auman's email contact for bulkmail.com is: aumaninc@hotmail.com
aumaninc@aol.com is the one listed with yahoo.
Carousel is a lie!
If you want to get rid of the spammers you are going to need to get rid of companies like this
If they can't just point and click there will be a lot less spammers just trying to make a quick buck.
Drew Auman
/. effect can you think of?
113 Hunt Club Dr
Copley, OH 44321-2759
330-666-7625
Just to save you some time.. randomly pick a couple.. it only takes a couple minutes. And what better use of the
catalog request
Speak before you think
Ah, but that is what Mailinator is for. It's one of those goofy ideas that amuses me no end and I've actually found useful. If you haven't checked it out, do so. It's really rather interesting.
Anyway, can't beat the ballistics on a .50 cal
Oh yes, you can:
It fires 20 gramm (308 grains) tungsten dart (fleschette) with muzzle velocity of 1450 meters per second (4750 fps). At 1000 meters this projectile will penetrate a 40 mm of RHA (rollded homogenous steel armour) and will result in serious secondary fragmentation effect behind the armour. That said, it will penetrate two walls of any modern APC at one kilometer range. The trajectory is very flat and does not rise higher than 800 mm above the line of sight when fired to 1000 meters.
Sigged!
dont forget the other site,
Organization:
The Bulk Club
Bulk Club
3867 W. Market Street #272
Akron, OH 44333-4506
US
Phone: (703) 286-2074
Email: aumaninc@hotmail.com
Registrar Name....: Register.com
Registrar Whois...: whois.register.com
Registrar Homepage: http://www.register.com
Domain Name: MYBULKCLUB.COM
Created on..............: Sat, Jan 25, 2003
Expires on..............: Sun, Jan 25, 2004
Record last updated on..: Thu, Jun 19, 2003
Administrative Contact, Technical Contact, Zone Contact:
The Bulk Club
Bulk Club
3867 W. Market Street #272
Akron, OH 44333-4506
US
Phone: (703) 286-2074
Email: aumaninc@hotmail.com
Domain servers in listed order:
DNS1.SERVERSTODAY.COM 209.123.49.192
NS1.ESPHINX.NET 216.127.76.56
DNS2.SERVERSTODAY.COM 209.123.49.193
NS2.ESPHINX.NET 216.127.76.243
and the IP address of the spammers home/biz machine (used for ftp upload)
somehost.affinity.com 207.150.221.94
Domain Name.......... affinity.com
Creation Date........ 2000-01-08
Registration Date.... 2001-02-16
Expiry Date.......... 2008-01-08
Organisation Name.... Affinity Internet Inc.
Organisation Address. 101 Continental Boulevard, 3rd Floor
Organisation Address. _
Organisation Address. El Segundo
Organisation Address. 90245
Organisation Address. CA
Organisation Address. UNITED STATES
For those Mac OS X people, the line is /dev/null http://www.thebulkclub.com/benefits.asp; done
bash-2.05a$ while [ true ]; do curl -o
It appears that our Mr. Auman has some other ventures. This one, "The Music Man DJ Service", even has a picture of him:
http://www.musicman-dj.com/meetdj/default.asp
I'm assuming that this is the same Drew Auman, as they both operate out of Akron, OH.
They even have an 800 # - 800-717-1476
And OH! Is that a real phone # there at the bottom? I wonder if he's awake...
Swampfox
Real Hacker (tm) Wanna-be
Deals
Don't use the fax number: it's a crime. Telephoning is ok until he tells you not to, and if you hang up early enough......
I will spend about 3-4 bucks per spammer, you are asking me to spend 20-30 bucks. 50. is fine.
An Education is the Font of All Liberty
That would be ironic. But, alas, the buttons are server-side. Disable JavaScript on your browser, and you still can't get through.
People discover the meaning of life between getting piss drunk and the following hangover.
You should check out one of the free (as in beer) "fake" email services. Take a look at:
;-) then you pick AnyUserName@mailinator.com, Mailinator will capture the email, and allow you to look at it. I saw this in Cringely's column, and really like it.
Sneakemail Basic account is free, premium service is $2/month. This is a wonderful service where you set up an address that will act as a front door and forward mail to an address you specify. You can have dozens of addresses, each for a specific company. Whenever you like, you can delete the address; no more spam problem.
Mailinator If you ever need a temporary throwaway email address just to sign up for something you're unsure of, use Mailinator. Once you sign up for Mailinator (using your Sneakemail address above
Two extremely handy services. I use both quite often!
Ceci n'est pas une pipe.
Actually, he lives in the Hunt Club apartment complex. I know because I used to live there, too. The house with the pool is the clubhouse, not his apartment - although he lives right around the corner from it. I wonder what would happen with repeated calls to the apt complex business office about wild 3:00am parties coming from 113....
Oh, not that I'd ever do such a thing....
When I tried it www.thebulkclub.com was down.
But this worked, though
http://64.78.42.11/tos.asp
update: it appears that they have changed their DNS tables to stave of a slashdotting. however, their IP address still points to their server!
/dev/null ; done
:)
while [ true ] ; do wget -O - http://64.78.42.11/benefits.asp >
let the slashdotting continue
No they changed the DNS records around 6 hours ago so you have done nothing but bombarded an empty space. Try substituting the IP number..
They are not gone nor is the sight down. If you point to http://64.78.42.11/members/login.asp it is still up and running.
DP
"(I) have this unfortunate condition that causes me not to believe a single thing any politician says when a mic's on.