Last week I blogged about the spammers on drupal.org and how we remove their accounts. This week I've again looked at the newly created accounts and also added some other domains to the access rules (mainly aliases of mailinator.com).
There is one new player on the mail provider list. Apparently somebody created a domain to use for mail in order to be able to register at sites like drupal.org. And that they did: they created almost 500 accounts on d.o during the last week. They are of course all blocked now.
Strangely enough, the domain is registered to an Algerian company. The domain is hosted in the Netherlands, the spamvertized site is hosted in Moldova, and the registrant of that hides behind an anonymizer service. The only other use of the original spammer domain points to another domain that is suspended.
I've contacted the registrar of the domain and will see if I can get it suspended too.
Update: the spamvertized site is only a redirect to a porn site owned by a Russian and hosted in the US. A truly international cooperation.
