Hello. We were attacked by the same spammer more than a dozen times yesterday. He tried to drop a message with a hyperlink that leads to their site. The site is empty. There is just a GIF animation or something. (Don't go there.) My e-mail program crashed right after visiting this guy's site although I don't think that's related. There's a screenshot of their website posted at our blog if you want to see it. Anyway, this guy's intentions are uknown, so it's kind of scary as to what he is going to do next.
The site is located at informazionidiretto.info. They also use several other domain aliases although none of them has a dedicated IP address. The IP address of the website is 18.104.22.168. The site seems to be harbored by a czech web hosting company named 'UPL TELECOM.' I e-mailed them (email@example.com) three times to remind them that one of their clients is a spammer. But there is no response.
Apparently, this guy is disguising his IP address. I don't know exactly how he does. He must be using an anonymizer application, proxy or whatever. Since he shows various IP addresses, there is no point of blocking any of the IP addresses to prevent him from coming.
For now, he's been quite. I advise you to put the following words in the black list even before he comes.
It seems that his spammer comes from Italy or its neighboring country. But who know? Anyway, if you have any advice or comments or whatever, let me know. There is more information about this cyber criminal at http://machouse.mhouse-j.com/?p=142