Published On:Monday, 6 May 2013
Posted by Unknown
Use of .pw Domains for Spam
At the end of April, security firm Symantec reported seeing an increase in the number of spam messages that contain links to .pw (Palau) top-level domains (TLD). Now, the company says their numbers have grown even more.
According to experts, the IP ranges from which the spam emails are being sent constantly change.
However, they’ve been able to observe multiple companies hosting .pw spam websites registered to the same physical address in Nevada, US.
The most common spam subject lines used in these messages read something like this:
- For all the moms in your life on Mother's Day;
- Tax Relief Notification;
- Remove IRS Tax Penalties;
- Save on the most beautiful bouquets for Mom;
- Reusable K Cup for Keurig or single-brew coffee maker;
- Garden Today says, "By far the easiest hose to use";
- HOME: Amazingly Strong water hose you can fit anywhere.
Symantec has created anti-spam filters to protect its customers. In addition, the company has reached out to Directi – the registrar that allows the general public to purchase .pw domains rebranded as “Professional Web” – in an effort to take down the domains associated with the spam campaigns.
