[email] [drugs - SPUR-M] (sierrasailing.com - anytablets.com - hotspurmonline4u.com) Private Message Notification
TomezNet
IP 220.173.154.184
(at CHINANET-GX)
Spamvert:
www.sierrasailing.com IP 216.40.47.17
(SBL44852) (at tucows.com)
Frames Redirected to:
http://anytablets.com
AND:
http://hotspurmonline4u.com/spurm/index.php
anytablets.com IP 69.25.142.3 and 64.74.96.243
(at eNom.com / internap.com)
hotspurmonline4u.com IP 221.203.189.114
(SBL43171) (at cncgroup-ln)
SPUR-M - © 2005 Trusted Meds Inc. All rights reserved.
More SPUR-M (over 6,690 listing) sightings:
http://groups.google.com/groups/search?q=%22SPUR-M%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Jerry Guthrie <qvqlvq...@wolff-andreas.de>
X-SID-Result: TempError
X-Message-Info: txF49lGdW42hdBdbUE9/AJCCxYp8jHv9m5w+sl4jFqk=
Received: from tomts32-srv.bellnexxia.net ([209.226.175.106]) by
bay0-pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 1 Aug 2006 08:29:19 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip1.bellnexxia.net with ESMTP; 01 Aug 2006 11:29:01 -0400
Received: (qmail 7617 invoked by uid 110); 1 Aug 2006 11:29:00 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 7576 invoked from network); 1 Aug 2006 11:28:56 -0400
Received: from unknown (HELO 207.58.1....) (220.173.154.184)
by xx..xx..xx.net with SMTP; 1 Aug 2006 11:28:56 -0400
Received: from twain by gino.sincere.sitadelle.com with close id
1A670K-0481Jb-00
for <qvqlvq...@wolff-andreas.de>; Tue, 01 Aug 2006 13:22:01
-0300
Message-ID: <14231002160...@cosy.tech.sitadelle.com>
References: <qvqlvq...@wolff-andreas.de>
<E1A4npj-0002ZF...@wolff-andreas.de>
In-Reply-To: <E1A4npj-0002ZF...@wolff-andreas.de>
Date: Tue, 01 Aug 2006 10:27:01 -0600
From: "Jerry Guthrie" <qvqlvq...@wolff-andreas.de>
To: xx..xx@xx..xx.com
Subject: Private Message Notification
Return-Path: qvqlvq...@wolff-andreas.de
X-OriginalArrivalTime: 01 Aug 2006 15:29:19.0901 (UTC)
FILETIME=[41F9ECD0:01C6B57F]
Icrease Your S''exual Desire and S''perm volume by 500%
L'onger o''rgasms - The longest most intense o''rgasms of your life
Multiple o''rgasms - Cum again and again
S'PUR-M is The Newest and The Safest Way
100% N''atural and No Side Effects - in contrast to well-known brands.
Experience three times longer o''rgasms
World Wide shipping within 24 hours
Clisk here http://www.sierrasailing.com
anarchy during census stargaze percent piston prosecution gazelle
fiction sousa german dickerson hiss schlesinger belgium waterhouse
-- END OF SPAM --
Identical spam as Re:
www.djsscool.net IP 216.40.47.17
(SBL44852) (at tucows.com)
futilely.net IP 221.206.84.92
(SBL42570 - SBL44804) (at cncgroup-hl)
See:
IP 220.173.154.184
http://www.moensted.dk/spam/?addr=220.173.154.184
http://www.spamhaus.org/query/bl?ip=220.173.154.184
More 220.173.154.184 sightings:
http://groups.google.com/groups/search?q=220.173.154.184+group%3A*abuse
inetnum: 220.173.0.0 - 220.173.255.255
netname: CHINANET-GX
descr: CHINANET guangxi province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
route: 220.173.0.0/16
descr: China Telecom Guangxi province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 220.160.0.0 to 220.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
More CHINANET-GX sightings:
http://groups.google.com/groups/search?q=CHINANET-GX+group%3A*abuse&start=0&scoring=d&
See:
www.sierrasailing.com IP 216.40.47.17
dns1.registerfly.com [216.40.47.15]
dns2.registerfly.com [216.40.47.16]
NS records at your nameservers are:
ns2.mdnsservice.com [64.97.159.10]
ns3.mdnsservice.com [65.22.7.10]
ns1.mdnsservice.com [216.40.47.18]
www.sierrasailing.com has no MX records -> sierrasailing.com has no MX
records
http://www.moensted.dk/spam/?addr=216.40.47.17
http://www.spamhaus.org/query/bl?ip=216.40.47.17
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
route: 216.40.32.0/20
descr: IBM
origin: AS19152
mnt-by: MAINT-AS19152
ASN: 19152
ASN Name: IBMCCH-TOR
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44852
216.40.47.17/32 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 22:51 GMT | SR04
giveawaysblog.info - redirect (come on Tucows!)
See: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42570
10 SBL/ROKSO listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
maruyama
negisi 5-4-6-702
saitamasi, NA 336-0024
JP
Domain name: SIERRASAILING.COM
Administrative Contact:
maruyama, toru torumaruyama[]fastmail.jp
negisi 5-4-6-702
saitamasi, NA 336-0024
JP
+1.81344966482 Fax: +1.81344966482
Technical Contact:
maruyama, toru toruma...@fastmail.jp
negisi 5-4-6-702
saitamasi, NA 336-0024
JP
+1.81344966482 Fax: +1.81344966482
Registration Service Provider:
RegisterFly.com, inc., sup...@registerfly.com
+1.9737362545
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 01-Aug-2006.
Record expires on 01-Aug-2007.
Record created on 01-Aug-2006.
Domain servers in listed order:
DNS2.REGISTERFLY.COM 216.40.47.16
DNS1.REGISTERFLY.COM 216.40.47.15
Domain status: REGISTRAR-LOCK
See frames source:
<html>
<frameset framespacing="0" rows="100%,*" cols="100%"
frameborder="no" border="0">
<frame name="XYZZY2" scrolling="auto" src="http://anytablets.com"
noresize>
<frame name="XYZZY" scrolling="no" noresize>
<noframes>
<h1><a
href="http://anytablets.com">http://anytablets.com</a></h1>
<p>Please <a href="http://anytablets.com">click here</a> to
view the non-framed version.</p>
</noframes>
</frameset>
</html>
See:
anytablets.com IP 69.25.142.3 and 64.74.96.243
dns1.name-services.com A IN 3600 69.25.142.1
dns2.name-services.com A IN 3600 216.52.184.230
dns3.name-services.com A IN 3600 63.251.92.193
dns4.name-services.com A IN 3600 64.74.96.242
dns5.name-services.com A IN 3600 70.42.37.1
See IP 69.25.142.3
No PTR records exist for 69.25.142.3
at ns-c.pnap.net / eNom / internap.com
Internap Network Services PNAP-12-2002 (NET-69-25-0-0-1)
69.25.0.0 - 69.25.255.255
eNom INAP-SEF-ENOM-1761 (NET-69-25-142-0-1)
69.25.142.0 - 69.25.142.63
CustName: eNom
NetRange: 69.25.142.0 - 69.25.142.63
CIDR: 69.25.142.0/26
NetName: INAP-SEF-ENOM-1761
NetHandle: NET-69-25-142-0-1
route: 69.25.128.0/20
descr: PNAP-SEF SEF-BLOCK
origin: AS14744
mnt-by: INAP-MAINT-MCI
changed: slei...@internap.com
ASN: 14744
ASN Name: INTERNAP-BLOCK-4
Country IP Range: 69.25.0.0 to 69.25.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=14744
32 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com
More 69.25.142.3 sightings:
http://groups.google.com/groups/search?q=69.25.142.3+group%3A*abuse&start=0&scoring=d&
See: IP 64.74.96.243
[2] customerblast/jhthosting/sex-rx/cjlinc, see
http://spews.org/html/S2452.html
No PTR records exist for 64.74.96.243
at ns1.chg.pnap.net / ns1.pnap.net / internap.com / eNom / Internap
Internap Network Services PNAP-SEA-BLOCK4 (NET-64-74-0-0-1)
64.74.0.0 - 64.74.255.255
eNom PNAP-CHG-ENOM-RM-01 (NET-64-74-96-224-1)
64.74.96.224 - 64.74.96.255
CustName: eNom
NetRange: 64.74.96.224 - 64.74.96.255
CIDR: 64.74.96.224/27
NetName: PNAP-CHG-ENOM-RM-01
NetHandle: NET-64-74-96-224-1
route: 64.74.96.0/20
descr: PNAP-CHG
origin: AS19024
mnt-by: INAP-MAINT-RADB
changed: so...@internap.com
ASN: 19024
ASN Name: INTERNAP-BLK5
Country IP Range: 64.74.0.0 to 64.75.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=19024
3 SBL listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com
More 64.74.96.243 sightings:
http://groups.google.com/groups/search?q=64.74.96.243+group%3A*abuse&start=0&scoring=d&
See:
hotspurmonline4u.com IP 221.203.189.114
ns1.wehostitfree4now.com A IN 126968 221.203.189.114
ns2.wehostitfree4now.com A IN 126968 221.203.189.114
[hotspurmonline4u.com has 1 MX record hotspurmonline4u.com.(0)]
http://www.moensted.dk/spam/?addr=221.203.189.114
http://www.spamhaus.org/query/bl?ip=221.203.189.114
inetnum: 221.200.0.0 - 221.203.255.255
netname: CNCGROUP-LN
descr: CNCGROUP Liaoning Province Network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
route: 221.200.0.0/14
descr: CNC Group LiaoNing Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169
Backbone)
Country IP Range: 221.200.0.0 to 221.207.255.255
http://www.cidr-report.org/cgi-bin/as-report?as= 4837
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43171
221.203.189.96/27 is listed on the Spamhaus Block List (SBL)
10-Jun-2006 05:57 GMT | SR20
Hoodia, penis patch, pheromones, etc. spam site
11 SBL/ROKSO listings for IPs under the responsibility of cncgroup-ln
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-ln
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/
Domain name: hotspurmonline4u.com
Registrant Contact:
WhoisGuard
WhoisGuard Protected
(7a988ce96ae448179b9c...@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd
8939 S. Sepulveda Blvd
Westchester, CA 90045
US
Administrative Contact:
WhoisGuard
WhoisGuard Protected
(7a988ce96ae448179b9c9a34a632f3d3.protect[]whoisguard.com)
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd
8939 S. Sepulveda Blvd
Westchester, CA 90045
US
Technical Contact:
WhoisGuard
WhoisGuard Protected
(7a988ce96ae448179b9c...@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd
8939 S. Sepulveda Blvd
Westchester, CA 90045
US
Status: Locked
Name Servers:
ns1.wehostitfree4now.com OLD name => NS1.ANYHOSTINGSOLUTIONS.COM
ns2.wehostitfree4now.com
Creation date: 21 Jul 2006 09:37:51
Expiration date: 21 Jul 2007 09:37:51
More 221.203.189.114 sightings:
http://groups.google.com/groups/search?q=221.203.189.114+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/a938452ca2b48acd
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: