Someone Decided to Send Millions of Spam Emails in the QN name....HELP

lotsofissues · 08-30-2004, 01:32 PM

ev1 has received over 100 complaints -- I urgently need to shut down these subdomains. However, my technical partner who created hte script is on vacation.

The subdomains used to be organized in one folder. Now I can't find them anywhere (he reorganized).

Anyone have ideas where I could locate the folders (6th programmer sense) or any other method of stopping activity on a specific subdomain?

www.qn.com is the service

Thank you.

LeeRyder · 08-30-2004, 05:46 PM

are they sending out mail bombs? (thousands of emails to one recipient?)

firstly, I would create a .hta access folder and block the person from the site/ip addy of your company.

RJ · 08-30-2004, 05:53 PM

qn is just a redirection service right? you don't host the actual website? so what folders are you looking for? I would guess it's setup to run from a database, reading the subdomain upon a visit, looking it up in the database, and redirecting them based on a result.

qn.com's homepage is index.php. Reading through the php code in that file may give some clues on how it's setup. Also could be done using a .htaccess file?

100 spam complaints, yikes!

Jeff · 08-30-2004, 07:06 PM

Hot topic right now - spam complaints - and they're cracking down hard!
Hoping everything gets straightened away for you very soon, Lots ... I wouldn't know how to advise with the location of the folders, how to shut it all down, etc.

All the best!

theparrot · 08-30-2004, 07:43 PM

remove the subdomain from the dns, that would shut them down.

also install spf entries to help prevent them from being used as spoofed addresses (more so for the future then now)

lotsofissues · 08-30-2004, 09:22 PM

RJ - it's just redirection - but the spammers are also advertising sites using qn subdomains.

Parrot - subdomains do not appear in DNS

Neither are there any database entries.

Im at a loss - where to delete these subdomains.

DSL · 08-30-2004, 09:26 PM

Hi your partner first of all is probably using mod_rewrite to do the subdomain redirection. To get rid of the subdomain go into mysql and delete the row where that subdomain is. Therefore if you get complaints you can have proof that that subdomain does not exist.

lotsofissues · 08-30-2004, 10:21 PM

Hi guys,

I've found a solution! Thanks.

lotsofissues · 08-31-2004, 08:23 PM

Need help once again - how do I edit a page such as this:

http://www.qn.com/signup.php?username=asdasd I want to note on this page that the account has been disabled. How do I edit a page that has already set an input such as the username in this case?

Thanks.

lotsofissues · 09-01-2004, 04:11 AM

bumpage

RJ · 09-01-2004, 02:15 PM

Originally Posted by lotsofissues

Need help once again - how do I edit a page such as this:

http://www.qn.com/signup.php?username=asdasd I want to note on this page that the account has been disabled. How do I edit a page that has already set an input such as the username in this case?

Thanks.

Just edit the .php file in question and add some simple PHP code to it.

PHP Code:

 
if ($username == "asdasd") { 

?>

 
This account has been closed due to abuse!  

(Insert HTML here)

 
 
<?

exit;

}

lotsofissues · 09-01-2004, 06:16 PM

Thanks RJ

08-30-2004, 01:32 PM	THREAD STARTER #1 (permalink)
lotsofissues Join Date: Mar 2003 Posts: 1,209	Someone Decided to Send Millions of Spam Emails in the QN name....HELP ev1 has received over 100 complaints -- I urgently need to shut down these subdomains. However, my technical partner who created hte script is on vacation. The subdomains used to be organized in one folder. Now I can't find them anywhere (he reorganized). Anyone have ideas where I could locate the folders (6th programmer sense) or any other method of stopping activity on a specific subdomain? www.qn.com is the service Thank you.

08-30-2004, 05:53 PM	#3 (permalink)
RJ NamePros Webmaster Join Date: Feb 2003 Posts: 12,930 Follow @DomainBuyer	qn is just a redirection service right? you don't host the actual website? so what folders are you looking for? I would guess it's setup to run from a database, reading the subdomain upon a visit, looking it up in the database, and redirecting them based on a result. qn.com's homepage is index.php. Reading through the php code in that file may give some clues on how it's setup. Also could be done using a .htaccess file? 100 spam complaints, yikes! __________________ @DomainBuyer facebook

08-30-2004, 07:06 PM	#4 (permalink)
Jeff Emeritus Join Date: May 2003 Location: Winter Break© Posts: 29,526	Hot topic right now - spam complaints - and they're cracking down hard! Hoping everything gets straightened away for you very soon, Lots ... I wouldn't know how to advise with the location of the folders, how to shut it all down, etc. All the best! __________________ Be cool. Be polite. Be professional.™

08-30-2004, 07:43 PM	#5 (permalink)
theparrot NamePros Regular Join Date: Mar 2004 Posts: 633	remove the subdomain from the dns, that would shut them down. also install spf entries to help prevent them from being used as spoofed addresses (more so for the future then now) __________________ Need a break? Check out TheDamnBlog.com Free $6.95 directi accounts at Directi Name Bin Instant free $8.95 eNom accounts at Dncube.com

08-30-2004, 05:46 PM	#2 (permalink)
LeeRyder Account Closed Join Date: Jan 2004 Location: Left Coast Posts: 3,508	are they sending out mail bombs? (thousands of emails to one recipient?) firstly, I would create a .hta access folder and block the person from the site/ip addy of your company.

08-30-2004, 09:22 PM	THREAD STARTER #6 (permalink)
lotsofissues Join Date: Mar 2003 Posts: 1,209	RJ - it's just redirection - but the spammers are also advertising sites using qn subdomains. Parrot - subdomains do not appear in DNS Neither are there any database entries. Im at a loss - where to delete these subdomains.

08-30-2004, 09:26 PM	#7 (permalink)
DSL Senior Member Join Date: Jun 2003 Posts: 2,115	Hi your partner first of all is probably using mod_rewrite to do the subdomain redirection. To get rid of the subdomain go into mysql and delete the row where that subdomain is. Therefore if you get complaints you can have proof that that subdomain does not exist.

08-30-2004, 10:21 PM	THREAD STARTER #8 (permalink)
lotsofissues Join Date: Mar 2003 Posts: 1,209	Hi guys, I've found a solution! Thanks.

08-31-2004, 08:23 PM	THREAD STARTER #9 (permalink)
lotsofissues Join Date: Mar 2003 Posts: 1,209	Need help once again - how do I edit a page such as this: http://www.qn.com/signup.php?username=asdasd I want to note on this page that the account has been disabled. How do I edit a page that has already set an input such as the username in this case? Thanks.

09-01-2004, 04:11 AM	THREAD STARTER #10 (permalink)
lotsofissues Join Date: Mar 2003 Posts: 1,209	bumpage

09-01-2004, 06:16 PM	THREAD STARTER #12 (permalink)
lotsofissues Join Date: Mar 2003 Posts: 1,209	Thanks RJ

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)