[email] [drugs - ED Pills] [81.99.71.105] (iksli.com / official-medicals.com / lacklalders.com / dnscherry.com / eNom.com / name-services.com) AUTHENTIC VIAGRA AND CIALIS
TomezNet
IP 81.99.71.105 cpc1-blfs7-0-0-cust872.belf.cable.ntl.com
(at ntli.net / ntlworld.com)
Spamvert:
www.iksli.com IP 64.74.96.243
iksli.com IP 216.52.184.240
www.iksli.com IP 63.251.92.195
iksli.com IP 69.25.142.3
(All at name-services.com / eNom.com / internap.com)
mail.iksli.com IP 72.36.143.223
(at layeredtech.com) => Open Relay
Redirected this time at eNom to:
http://www.official-medicals.com/
NEW Redirect is to:
http://205.lacklalders.com
205.lacklalders.com IP 221.11.71.125
(SBL52714 - SBL54930 / ROK6138) (at cncgroup-sn)
www.official-medicals.com IP 64.74.96.243
official-medicals.com IP 216.52.184.240
www.official-medicals.com IP 63.251.92.195
official-medicals.com IP 64.74.96.243
official-medicals.com IP 69.25.142.3
(Now All back at eNom)
(OLD IP 124.42.8.150 => SBL54680) (was at sinnet.com.cn)
mail.official-medicals.com IP 124.42.8.150
(SBL54680) (still at sinnet.com.cn)
official-medicals.com was a replacement for genuine-pharmacy.com
Title:
Ed Pills - Don't let ED affect your sex life. Take control.
Much More Ed Pills sightings:
http://groups.google.com/groups/search?q=%22Ed+Pills%22+group%3A*abuse&start=0&scoring=d&
eNom knows about spammer but refused to take any action for months
disregarding spam reports!
Much More info below:
====================
Return-Path: <sa...@iksli.com>
Delivered-To: [MUNGED]
Received: (qmail 21870 invoked from network); 31 May 2007 18:34:40
-0400
Received: from cpc1-blfs7-0-0-cust872.belf.cable.ntl.com (HELO Sparky)
(81.99.71.105)
by [MUNGED] with SMTP; 31 May 2007 18:34:40 -0400
Message-ID: <046001c7a3d3$057cf132$69476351@Sparky>
From: "Sales Department" <sa...@iksli.com>
To: "Francis Kurt" <[MUNGED]>
Subject: AUTHENTIC VIAGRA AND CIALIS
Date: Thu, 31 May 2007 22:32:14 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1441
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Spam-Prev-Subject: AUTHENTIC VIAGRA AND CIALIS
Now you can order Authentic Viagra directly from Pfizer
Here: http://www.iksli.com/
All prices are tax/vat free and same-day free worldwide shipping also
included.
--
mhhrhnhghmfohqhkhkiohuinmtihisit
-- END OF SPAM --
The same as was for pulseambulanceservice.com, direttaspettacoli.com,
AKzOnObelInc.com, MarcusSjogren.com, Uisxksdcinaltd.com,
riverrockdirectbill.com, brewcitycruisers.com, eraoftechnology.com,
redavisandsoninc.com, theshiremusic.com, ltkdesigns.com and plenty
more on the same IP(s) with full support of eNom (hosting, DNS and
domains registration).
abuse[]name-services.com is listed in rfc-ignorant.org database
See also more ED Pills long history with redirection, hosting and
domain registration services:
See:
IP 81.99.71.105 cpc1-blfs7-0-0-cust872.belf.cable.ntl.com
http://www.moensted.dk/spam/?addr=81.99.71.105
Spam source - http://wpbl.info/record?ip=81.99.71.105
http://spamcop.net/w3m?action=checkblock&ip=81.99.71.105
inetnum: 81.99.64.0 - 81.99.95.255
netname: NTL
descr: NTL Infrastructure - Belfast
country: GB
role: NTLI Network Management Centre
address: NTL Internet
postmaster and abuse[]ntli.net are listed in rfc-ignorant.org database
route: 81.98.0.0/15
descr: NTL-UK-IP-BLOCK
origin: AS5089
mnt-by: AS5089-MNT
changed: hostm...@ntli.net
Prefix: 81.96.0.0/14
Prefix Name: NTL UK IP BLOCK
AS: 5089
AS Name: NTL NTL Group Limited Hook, Hampshire United Kingdom
http://www.cidr-report.org/cgi-bin/as-report?as=5089
Much More ntl.com sightings:
http://groups.google.com/groups/search?q=ntl.com+group%3A*abuse&start=0&scoring=d&
Spamver URL:
http://www.iksli.com/
HTTP/1.1 302 Object moved
Connection: close
Date: Fri, 01 Jun 2007 00:17:02 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Location: http://www.official-medicals.com
Cache-Control: private
Content-Type: text/html
Content-Length: 153
<head><title>Object moved</title></head><body><h1>Object Moved</
h1>This object may be found <a HREF="http://www.official-
medicals.com">here</a>.</body>
Redirected to:
http://www.official-medicals.com/
AND Redirected again this time at eNom to:
http://205.lacklalders.com
HTTP/1.1 302 Object moved
Connection: close
Date: Fri, 01 Jun 2007 00:24:32 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Location: http://205.lacklalders.com
Cache-Control: private
Content-Type: text/html
Content-Length: 147
<head><title>Object moved</title></head><body><h1>Object Moved</
h1>This object may be found <a HREF="http://205.lacklalders.com">here</
a>.</body>
See:
www.iksli.com IP 64.74.96.243
iksli.com IP 216.52.184.240
www.iksli.com IP 63.251.92.195
iksli.com IP 69.25.142.3
dns1.name-services.com [69.25.142.1] [TTL=172800] [US]
dns2.name-services.com [216.52.184.230] [TTL=172800] [US]
dns3.name-services.com [63.251.92.193] [TTL=172800] [US]
dns4.name-services.com [64.74.96.242] [TTL=172800] [US]
dns5.name-services.com [70.42.37.1] [TTL=172800] [US]
SOA record [TTL=1800] is:
Primary nameserver: dns1.name-services.com
Hostmaster E-mail address: in...@name-services.com
Serial #: 2002050701
1 MX record is:
10 mail.iksli.com [TTL=1800] IP=72.36.143.223 [TTL=1800] [US]
Spammer MX record moved from IP 64.92.172.210 to IP 72.36.143.223 =>
still at layeredtech.com
72.36.143.223 = 223.143.36.72.static.reverse.layeredtech.com
WARNING:
mail.iksli.com.com appears to be an open relay: 250 ok
See also More 64.92.172.210 sightings:
http://groups.google.com/groups/search?q=64.92.172.210+group%3A*abuse&qt_s=Search
OrgName: Layered Technologies, Inc.
OrgID: LAYER-3
NetRange: 72.36.128.0 - 72.36.255.255
CIDR: 72.36.128.0/17
NetName: LAYERED-TECH-
NetHandle: NET-72-36-128-0-1
Parent: NET-72-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.LAYEREDTECH.COM
NameServer: NS2.LAYEREDTECH.COM
Comment: Please send all abuse complaints to
Comment: ab...@layeredtech.com => ???
postmaster and abuse[]layeredtech.com are listed in rfc-ignorant.org
database
network:Class-Name:network
network:ID:ORG-LAYER03-72.36.128.0/18
network:Auth-Area:72.36.128.0/18
network:Org-Name:STARTRUNGROW
network:Network-Name:ORG-LAYER-3-72.36.143.217
network:IP-Network:72.36.143.217/29
network:Organization;I:STARTRUNGROW
network:Street-Address:P.O. BOX 447
network:City:HERNDON
network:State:VA
network:Postal-Code:20172-0447
network:Country-Code:US
network:Phone:N/A
network:Class-Name:network
network:ID:ORG-LAYER-3-72.36.128.0/17
network:Auth-Area:72.36.128.0/17
network:Org-Name: neptune.customhostingservers.com
network:Network-Name:72.36.143.216/29
network:IP-Network:72.36.143.216/29
network:Organization;I: neptune.customhostingservers.com
network:Street-Address:P.O. Box 47954
network:City:Indianapolis
network:State:IN
network:Postal-Code:46247-0954
network:Country-Code:US
network:Phone:972-398-7998
Prefix: 72.36.128.0/18
Prefix Name: error
AS: 3561
AS Name: SAVVIS SAVVIS Communications
http://www.cidr-report.org/cgi-bin/as-report?as=3561
Much More layeredtech.com sightings:
http://groups.google.com/groups/search?q=layeredtech.com+group%3A*abuse&start=0&scoring=d&
Let see whois:
Registration Service Provided By: eNom, Inc.
Contact: in...@eNom.com
Domain name: iksli.com
Administrative Contact:
friede prl
reinhold friede (reinhold.friede[]gmail.com)
+49.0455196180
Fax: -
grunewaldstrase 14
hamburg, HAMBURG 84125
DE
Technical Contact:
friede prl
reinhold friede (reinhol...@gmail.com)
+49.0455196180
Fax: -
grunewaldstrase 14
hamburg, HAMBURG 84125
DE
Registrant Contact:
friede prl
reinhold friede (reinhol...@gmail.com)
+49.0455196180
Fax: -
grunewaldstrase 14
hamburg, HAMBURG 84125
DE
Status: Locked
Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com
Creation date: 29 May 2007 02:43:38
Expiration date: 29 May 2008 02:43:38
See:
www.official-medicals.com IP 64.74.96.243
official-medicals.com IP 216.52.184.240
www.official-medicals.com IP 63.251.92.195
official-medicals.com IP 64.74.96.243
official-medicals.com IP 69.25.142.3
(official-medicals.com OLD IP 124.42.8.150 => SBL54680)
dns1.name-services.com [69.25.142.1] [TTL=172800] [US]
dns2.name-services.com [216.52.184.230] [TTL=172800] [US]
dns3.name-services.com [63.251.92.193] [TTL=172800] [US]
dns4.name-services.com [64.74.96.242] [TTL=172800] [US]
dns5.name-services.com [70.42.37.1] [TTL=172800] [US]
SOA record [TTL=1800] is:
Primary nameserver: dns1.name-services.com
Hostmaster E-mail address: in...@name-services.com
Serial #: 2002050701
1 MX record are:
10 mail.official-medicals.com [TTL=1800] IP=124.42.8.150 [TTL=1800]
[CN]
http://www.moensted.dk/spam/?addr=124.42.8.150
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?124.42.8.150
http://www.spamhaus.org/query/bl?ip=124.42.8.150
inetnum: 124.42.0.0 - 124.42.127.255
netname: SINNET
descr: Beijing Guanghuan Xinwang Digital Technology co.Ltd
person: Chen hao
nic-hdl: CH471-AP
e-mail: lic...@sinnet.com.cn
person: Wang Huijun
nic-hdl: WH271-AP
e-mail: che...@sinnet.com.cn
abuse[]sinnet.com.cn is listed in rfc-ignorant.org database
Prefix: 124.42.0.0/19
Prefix Name: error
AS: 23844
AS Name: BJ GUANGHUAN AP Beijing Guanghuan Xinwang Digital Technology
Co , LTD
http://www.cidr-report.org/cgi-bin/as-report?as=23844
route: 124.42.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: y...@chinaunicom.com.cn
http://www.cidr-report.org/cgi-bin/as-report?as=4134
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL55063
124.42.8.150/32 is listed on the Spamhaus Block List (SBL)
29-May-2007 09:04 GMT | SR22
Spam webhosting - official-medicals.com
Spam redirection target: visitors that visit the URL mentioned in spam
get redirected to www.official-medicals.com, which is on 124.42.8.150.
This site is selling counterfeit prescription drugs, highly illegal!
1 SBL listings for IPs under the responsibility of sinnet.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=sinnet.com.cn
See:
official-medicals.com IP 216.52.184.240
http://www.moensted.dk/spam/?addr=216.52.184.240
http://www.apews.org/?page=test&C=82&E=162808&ip=216.52.184.240
Blocked - see http://www.spambag.org/cgi-bin/spambag?mailfrom=enom
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?216.52.184.240
Much More 216.52.184.240 sightings:
http://groups.google.com/groups/search?q=216.52.184.240+group%3A*abuse&start=0&scoring=d&
Internap Network Services PNAP-8-98 (NET-216-52-0-0-1)
216.52.0.0 - 216.52.255.255
eNom PNAP-DAL-ENOM-RM-01 (NET-216-52-184-224-1)
216.52.184.224 - 216.52.184.255
OrgName: Internap Network Services
OrgID: PNAP
NetRange: 216.52.0.0 - 216.52.255.255
CIDR: 216.52.0.0/16
NetName: PNAP-8-98
NetHandle: NET-216-52-0-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.PNAP.NET
NameServer: NS2.PNAP.NET
CustName: eNom
NetRange: 216.52.184.224 - 216.52.184.255
CIDR: 216.52.184.224/27
NetName: PNAP-DAL-ENOM-RM-01
NetHandle: NET-216-52-184-224-1
Parent: NET-216-52-0-0-1
NetType: Reassigned
route: 216.52.176.0/20
descr: PNAP-DAL
origin: AS12179
mnt-by: INAP-MAINT-RADB
changed: pe...@internap.com
Prefix: 216.52.176.0/20
Prefix Name: PNAP DAL PNAP DAL
AS: 12179
AS Name: INTERNAP-2BLK Internap Network Services
http://www.cidr-report.org/cgi-bin/as-report?as=12179
19 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com
5 SBL/ROKSO listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com
See:
www.official-medicals.com IP 63.251.92.195
www.official-medicals.com has no MX records -> [official-medicals.com
has 1 MX record mail.official-medicals.com (10)]
http://www.sorbs.net/lookup.shtml?63.251.92.195
Much More 63.251.92.195 sightings:
http://groups.google.com/groups/search?q=63.251.92.195+group%3A*abuse&start=0&scoring=d&
Internap Network Services NETBLK-PNAP-11-99 (NET-63-251-0-0-1)
63.251.0.0 - 63.251.255.255
eNom INAP-WDC002-ENOM-1942 (NET-63-251-92-192-1)
63.251.92.192 - 63.251.92.255
CustName: eNom
Address: 2002 156th Ave NE
NetRange: 63.251.92.192 - 63.251.92.255
CIDR: 63.251.92.192/26
NetName: INAP-WDC002-ENOM-1942
NetHandle: NET-63-251-92-192-1
Parent: NET-63-251-0-0-1
NetType: Reassigned
route: 63.251.80.0/20
descr: PNAP-WDC
descr: InterNAP
origin: AS10913
mnt-by: INAP-MAINT-MCI
changed: jo...@internap.com
Prefix: 63.251.80.0/20
Prefix Name: PNAP WDC InterNAP PNAP WDC InterNAP
AS: 10913
AS Name: INTERNAP-BLK Internap Network Services
http://www.cidr-report.org/cgi-bin/as-report?as=10913
See:
official-medicals.com IP 69.25.142.3
http://www.moensted.dk/spam/?addr=69.25.142.3
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?69.25.142.3
Internap Network Services PNAP-12-2002 (NET-69-25-0-0-1)
69.25.0.0 - 69.25.255.255
eNom INAP-SEF-ENOM-1761 (NET-69-25-142-0-1)
69.25.142.0 - 69.25.142.63
Much More 69.25.142.3 sightings:
http://groups.google.com/groups?q=69.25.142.3+group%3A*abuse&start=0&scoring=d&
See:
official-medicals.com IP 64.74.96.243
http://www.moensted.dk/spam/?addr=64.74.96.243
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?64.74.96.243
Internap Network Services PNAP-SEA-BLOCK4 (NET-64-74-0-0-1)
64.74.0.0 - 64.74.255.255
eNom PNAP-CHG-ENOM-RM-01 (NET-64-74-96-224-1)
64.74.96.224 - 64.74.96.255
Much More 64.74.96.243 sightings:
http://groups.google.com/groups/search?q=64.74.96.243+group%3A*abuse&start=0&scoring=d&
Let see whois for official-medicals.com:
Registration Service Provided By: eNom, Inc.
Contact: in...@eNom.com
Domain name: official-medicals.com
Administrative Contact:
escher
michael escher (info[]remara.com)
+49.8654806103
Fax: -
meierstrase 3
hamburg, HAMBURG 21233
DE
Technical Contact:
escher
michael escher (in...@remara.com)
+49.8654806103
Fax: -
meierstrase 3
hamburg, HAMBURG 21233
DE
Registrant Contact:
escher
michael escher (in...@remara.com)
+49.8654806103
Fax: -
meierstrase 3
hamburg, HAMBURG 21233
DE
Status: Locked
Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com
Creation date: 24 May 2007 14:56:28
Expiration date: 24 May 2008 14:56:28
More official-medicals.com sightings:
http://groups.google.com/groups/search?q=official-medicals.com+group%3A*abuse&qt_s=Search
Redirected to:
http://205.lacklalders.com
See:
205.lacklalders.com IP 221.11.71.125
Resolved 205.lacklalders.com to lacklalders.com to 221.11.71.125
ns1.dnscherry.com [221.11.71.125] [TTL=172800] [CN]
ns2.dnscherry.com [221.7.193.185] [TTL=172800] [CN]
NS records at your nameservers are:
ns1.lacklalders.com [221.11.71.125] [TTL=172800]
ns2.lacklalders.com [221.11.71.125] [TTL=172800]
SOA record [TTL=86400] is:
Primary nameserver: ns1.lacklalders.com
Hostmaster E-mail address: webm...@lacklalders.com
Serial #: 1180667720
205.lacklalders.com has no MX records -> lacklalders.com has no MX
records
www.lacklalders.com CNAME lacklalders.com [TTL=60]
http://www.moensted.dk/spam/?addr=221.11.71.125
http://www.spamhaus.org/query/bl?ip=221.11.71.125
inetnum: 221.11.0.0 - 221.11.127.255
netname: CNCGROUP-SN
descr: CNC Group Shannxi province network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
route: 221.11.0.0/17
descr: CNC Group CHINA169 Shanxi Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: ab...@cnc-noc.net => ???
whois, postmaster and abuse[]cnc-noc.net are listed in rfc-
ignorant.org database
IP: 221.11.71.125
Reverse:
Aliases:
abcofgoat.com
ns1.abcofgoat.com
ns2.abcofgoat.com
asimilatecat.com
ns1.asimilatecat.com
ns2.asimilatecat.com
bathtubhrewardzz.com
ns1.bathtubhrewardzz.com
ns2.bathtubhrewardzz.com
ityzqadneds.com
ns1.ityzqadneds.com
ns2.ityzqadneds.com
keleqdtnslot.com
ns1.keleqdtnslot.com
ns2.keleqdtnslot.com
keletnqdsinch.com
ns1.keletnqdsinch.com
ns2.keletnqdsinch.com
llcrap.com
ns1.llcrap.com
ns2.llcrap.com
newtwooeztnoodle.com
ns1.newtwooeztnoodle.com
ns2.newtwooeztnoodle.com
superhjdiapera.com
ns1.superhjdiapera.com
ns2.superhjdiapera.com
swimauponland.com
ns1.swimauponland.com
ns2.swimauponland.com
tmuckinmationdad.com
ns1.tmuckinmationdad.com
ns2.tmuckinmationdad.com
tozfdqoots.com
ns1.tozfdqoots.com
ns2.tozfdqoots.com
uisxksdcinaltd.com
ns1.uisxksdcinaltd.com
ns2.uisxksdcinaltd.com
Prefix: 221.11.0.0/17
Prefix Name: CNC Group Shanxi1 Network CNC Group CHINA169 Shanxi
Province Network
AS: 4837
AS Name: China Network Communications Group China Network
Communications (CNC Group)
http://www.cidr-report.org/cgi-bin/as-report?as=4837
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL52714
221.11.70.0/23 is listed on the Spamhaus Block List (SBL)
24-Mar-2007 01:25 GMT | SR04
Dirty block - Months of spammer hosting (escalation)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54930
221.11.71.125/32 is listed on the Spamhaus Block List (SBL/ROKSO)
25-May-2007 20:28 GMT | SR21
Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov.
Spam DNS Server
Main Info:
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK6138
4 SBL/ROKSO listings for IPs under the responsibility of cncgroup-sn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-sn
Let see whois:
Domain Name: lacklalders.com
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET
whois, postmaster and abuse[]nameservices.net are listed in rfc-
ignorant.org database
Registrant Contact
Name: jack mcdonald
Address: 380 Crete Place
vanier, ON K1L 7K8
CA
Email Address: jackmcdo[]coldmail.ca
Phone Number: (613)255-2162
Administrative Contact
Name: jack mcdonald
Address: 380 Crete Place
vanier, ON K1L 7K8
CA
Email Address: jack...@coldmail.ca
Phone Number: (613)255-2162
Technical Contact
Name: jack mcdonald
Address: 380 Crete Place
vanier, ON K1L 7K8
CA
Email Address: jack...@coldmail.ca
Phone Number: (613)255-2162
Record Created on........ 2007-05-30 22:58:13.937
Expire on................ 2008-05-30 22:04:00.000
Domain servers in listed order:
ns1.dnscherry.com
ns2.dnscherry.com
See:
ns2.dnscherry.com IP 221.7.193.185
ns2.dnscherry.com has no MX records -> dnscherry.com has no MX records
http://www.moensted.dk/spam/?addr=221.7.193.185
http://www.spamhaus.org/query/bl?ip=221.7.193.185
http://www.spamhaus.org/pbl/query/PBL111818
inetnum: 221.7.193.184 - 221.7.193.191
netname: gxjxtech-com
country: CN
descr: guangxigxjxtech-com
admin-c: LH602-AP
tech-c: LH602-AP
status: ASSIGNED NON-PORTABLE
person: liu huanyi
nic-hdl: LH602-AP
e-mail: nn...@gxcc.com.cn
abuse[]gxcc.com.cn is listed in rfc-ignorant.org database
IP: 221.7.193.185
Reverse:
Aliases:
parcasforu.com
ns1.parcasforu.com
ns2.parcasforu.com
Prefix: 221.7.128.0/17
Prefix Name: Due to SAVVIS AUP violations, this prefix has been
deliberately blackholed within the AS3561 network Any questions should
be directed to abuse@savvis net CNC Group GuangXi Network CNC Group
CHINA169 Guangxi Province Network
AS: 4837
AS Name: China Network Communications Group China Network
Communications (CNC Group)
http://www.cidr-report.org/cgi-bin/as-report?as=4837
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54820
221.7.193.185/32 is listed on the Spamhaus Block List (SBL/ROKSO)
21-May-2007 14:31 GMT | SR22
Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov.
Spam webhosting - millickentistiredd.com
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54944
221.7.193.0/24 is listed on the Spamhaus Block List (SBL)
26-May-2007 08:21 GMT | SR02
HerbalKing @ 221.7.193.184
Geocities redirector to this server...
11 SBL/ROKSO listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gx
Let see whois:
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
abuse[]NameCheap.com are listed in rfc-ignorant.org database
Domain name: dnscherry.com
Registrant Contact:
mcd inc.
jack mcdonald (jackmcdo[]coldmail.ca)
+1.6132552162
Fax: +1.5555555555
380 Crete Place
vanier, ON K1L 7K8
CA
Administrative Contact:
mcd inc.
jack mcdonald (jack...@coldmail.ca)
+1.6132552162
Fax: +1.5555555555
380 Crete Place
vanier, ON K1L 7K8
CA
Technical Contact:
mcd inc.
jack mcdonald (jack...@coldmail.ca)
+1.6132552162
Fax: +1.5555555555
380 Crete Place
vanier, ON K1L 7K8
CA
Status: Active
Name Servers:
ns1.dnscherry.com
ns2.dnscherry.com
Creation date: 31 May 2007 01:52:35
Expiration date: 31 May 2008 01:52:35
See also more coldmail.ca spam support sightings:
http://groups.google.com/groups/search?q=coldmail.ca+group%3A*abuse&start=0&scoring=d&
abuse[]coldmail.ca is listed in rfc-ignorant.org database
See also more genuine-pharmacy.com sightings:
http://groups.google.com/groups/search?q=genuine-pharmacy.com+group%3A*abuse&qt_s=Search
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/db7c5f6e620c396c
See also thread:
http://groups.google.com/group/news.admin.net-abuse.email/browse_thread/thread/e2d44e663c4f6c33/3e4917b26de1b918#3e4917b26de1b918
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: