As a matter of course these days, when I get a submit from someone who isn't already a regular submitter, I do a whois on the domain (amazing how many people you catch that way huh).
Lately I've been seeing something unusual, but am unsure if i'm onto something...or merely paranoid.
The pattern goes like this: (for example)
Domain: someporndomain.com
Email:
webmaster@someporndomain.com
Username: someporn or porndomain (some derivative of the domain name)
Now the interesting bit...the name servers:
ns1.someporndomain.com
ns2.someporndomain.com
I hope I'm making sense...essentially the domain used is showing up in the url, the email, the username, AND the name servers.
I'm seeing this across a variety of domains from several submitters...whois info isn't matching at all, even the ip's are different, but in my experience the ns you use is a general one that all webmasters using that host will use, not a custom one that matches your domain name...
Opinions on my paranoia or otherwise would be welcome.
