Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [drugs - ED Pills] [88.230.146.66] (pulseambulanceservice.com / eNom.com / uisxksdcinaltd.com / dnsburger.com / name-services.com / genuine-pharmacy.com) Authentic Viagra and Cialis by Pfizer for Sale Now

8 views

Skip to first unread message

TomezNet

unread,

May 26, 2007, 1:30:03 PM5/26/07

Received From:
IP 88.230.146.66
(at ttnet.net.tr / turktelekom.com.tr / telekom.gov.tr)

Spamvert:
pulseambulanceservice.com IP 64.74.96.243
www.pulseambulanceservice.com IP 216.52.184.240
www.pulseambulanceservice.com IP 63.251.92.195
pulseambulanceservice.com IP 69.25.142.3
(All at name-services.com / eNom.com / internap.com)

mail.pulseambulanceservice.com IP 64.92.172.210
(at layeredtech.com) => Open Relay

Redirected to:
http://www.genuine-pharmacy.com/

AND Redirected Again at eNom to:
https://www.genuine-pharmacy.com/

www.genuine-pharmacy.com new IP 63.251.92.195
genuine-pharmacy.com new IP 216.52.184.240
(now at name-services.com / eNom.com / internap.com)

www.genuine-pharmacy.com IP 124.42.127.50
(SBL54680) (at sinnet.com.cn)

Redirected Again to:
http://205.uisxksdcinaltd.com/

205.uisxksdcinaltd.com IP 221.11.71.125
(SBL52714) (at cncgroup-sn)

Title:
Ed Pills - Don't let ED affect your sex life. Take control.

Much More Ed Pills sightings:
http://groups.google.com/groups/search?q=%22Ed+Pills%22+group%3A*abuse&start=0&scoring=d&

Much More info below:
====================

Return-Path: <sa...@pulseambulanceservice.com>
Delivered-To: [MUNGED]
Received: (qmail 6037 invoked from network); 26 May 2007 07:23:29
-0400
Received: from unknown (HELO ?88.230.146.66?) (88.230.146.66)
by [MUNGED] with SMTP; 26 May 2007 07:23:29 -0400
Message-ID: <7e5b01c79f88$11d88ca7$4292e658@[88.230.146.66]>
From: "Sales Department" <sa...@pulseambulanceservice.com>
To: <[MUNGED]>
Subject: Authentic Viagra and Cialis by Pfizer for Sale Now
Date: Sat, 26 May 2007 11:21:40 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

Now you can order Original Viagra directly from Pfizer

Here: http://www.pulseambulanceservice.com/

All prices are tax/vat free and same-day free worldwide shipping also
included.

--
tgquqoqtqlopqpqhqjppqtomrungnrno

-- END OF SPAM --

See more eNom long connection to ED Pills with redirection, hosting
and domain registration services:
http://groups.google.com/groups/search?q=216.40.47.17+eNom+group%3A*abuse&qt_s=Search

The same as was for direttaspettacoli.com and redavisandsoninc.com on
the same IP(s) with full support of eNom (hosting, DNS, domain
registration).

abuse[]name-services.com is listed in rfc-ignorant.org database
eNom sucks by default

See:
IP 88.230.146.66

http://www.moensted.dk/spam/?addr=88.230.146.66
http://www.spamhaus.org/query/bl?ip=88.230.146.66
http://www.spamhaus.org/pbl/query/PBL113996

inetnum: 88.230.128.0 - 88.230.191.255
netname: TurkTelekom
descr: TT ADSL-alcatel dynamic_ulus
role: TT Administrative Contact Role
address: Turk Telekom
address: Bilisim Aglari Dairesi
address: Aydinlikevler
address: 06103 ANKARA
phone: +90 312 313 1950
fax-no: +90 312 313 1949
e-mail: abuse[]ttnet.net.tr

whois, postmaster and abuse[]ttnet.net.tr are listed in rfc-
ignorant.org database
whois, postmaster and abuse[]telekom.gov.tr are listed in rfc-
ignorant.org database

route: 88.230.128.0/17
descr: TurkTelecom
origin: AS9121
mnt-by: AS9121-MNT
changed: i...@turktelekom.com.tr
http://www.cidr-report.org/cgi-bin/as-report?as=9121

22 SBL/ROKSO listings for IPs under the responsibility of ttnet.net.tr
http://www.spamhaus.org/SBL/listings.lasso?isp=ttnet.net.tr

Spamver URL:
http://www.pulseambulanceservice.com/

See sorce code:
HTTP/1.1 302 Object moved
Connection: close
Date: Sat, 26 May 2007 15:18:25 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Location: http://www.genuine-pharmacy.com
Cache-Control: private
Content-Type: text/html
Content-Length: 152

<head><title>Object moved</title></head><body><h1>Object Moved</
h1>This object may be found <a HREF="http://www.genuine-
pharmacy.com">here</a>.</body>

Redirected to:
http://www.genuine-pharmacy.com/

AND Redirected again at eNom to:
https://www.genuine-pharmacy.com/

HTTP/1.1 302 Object moved
Connection: close
Date: Sat, 26 May 2007 16:05:09 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-AspNet-Version: 1.1.4322
Location: http://205.uisxksdcinaltd.com
Cache-Control: private
Content-Type: text/html
Content-Length: 150

<head><title>Object moved</title></head><body><h1>Object Moved</
h1>This object may be found <a HREF="http://
205.uisxksdcinaltd.com">here</a>.</body>

See:
pulseambulanceservice.com IP 64.74.96.243
www.pulseambulanceservice.com IP 216.52.184.240
www.pulseambulanceservice.com IP 63.251.92.195
pulseambulanceservice.com IP 69.25.142.3

dns1.name-services.com [69.25.142.1] [TTL=172800] [US]
dns2.name-services.com [216.52.184.230] [TTL=172800] [US]
dns3.name-services.com [63.251.92.193] [TTL=172800] [US]
dns4.name-services.com [64.74.96.242] [TTL=172800] [US]
dns5.name-services.com [70.42.37.1] [TTL=172800] [US]

SOA record [TTL=1800] is:
Primary nameserver: dns1.name-services.com
Hostmaster E-mail address: in...@name-services.com
Serial #: 2002050701

1 MX record are:
10 mail.pulseambulanceservice.com [TTL=1800] IP=64.92.172.210
[TTL=1800] [US]

64.92.172.210 = 210.172.92.64.static.reverse.layeredtech.com

WARNING: mail.pulseambulanceservice.com appears to be an open relay:
250 ok

More 64.92.172.210 sightings:
http://groups.google.com/groups/search?q=64.92.172.210+group%3A*abuse&qt_s=Search

postmaster and abuse[]layeredtech.com are listed in rfc-ignorant.org
database

IP: 64.92.172.210
Reverse: 210.0-24.172.92.64.in-addr.arpa
211.172.92.64.static.reverse.layeredtech.com
Prefix: 64.92.160.0/20
Prefix Name: error
AS: 3561
AS Name: SAVVIS SAVVIS Communications
http://www.cidr-report.org/cgi-bin/as-report?as=3561

1 SBL listings for IPs under the responsibility of layeredtech.com
http://www.spamhaus.org/SBL/listings.lasso?isp=layeredtech.com

See:
pulseambulanceservice.com IP 216.52.184.240

http://www.moensted.dk/spam/?addr=216.52.184.240
http://www.apews.org/?page=test&C=82&E=162808&ip=216.52.184.240
Blocked - see http://www.spambag.org/cgi-bin/spambag?mailfrom=enom
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?216.52.184.240

Much More 216.52.184.240 sightings:
http://groups.google.com/groups/search?q=216.52.184.240+group%3A*abuse&start=0&scoring=d&

Internap Network Services PNAP-8-98 (NET-216-52-0-0-1)
216.52.0.0 - 216.52.255.255
eNom PNAP-DAL-ENOM-RM-01 (NET-216-52-184-224-1)
216.52.184.224 - 216.52.184.255

OrgName: Internap Network Services
OrgID: PNAP
NetRange: 216.52.0.0 - 216.52.255.255
CIDR: 216.52.0.0/16
NetName: PNAP-8-98
NetHandle: NET-216-52-0-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.PNAP.NET
NameServer: NS2.PNAP.NET

CustName: eNom
NetRange: 216.52.184.224 - 216.52.184.255
CIDR: 216.52.184.224/27
NetName: PNAP-DAL-ENOM-RM-01
NetHandle: NET-216-52-184-224-1
Parent: NET-216-52-0-0-1
NetType: Reassigned

route: 216.52.176.0/20
descr: PNAP-DAL
origin: AS12179
mnt-by: INAP-MAINT-RADB
changed: pe...@internap.com
Prefix: 216.52.176.0/20
Prefix Name: PNAP DAL PNAP DAL
AS: 12179
AS Name: INTERNAP-2BLK Internap Network Services
http://www.cidr-report.org/cgi-bin/as-report?as=12179

17 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com

5 SBL/ROKSO listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com

See:
www.pulseambulanceservice.com IP 63.251.92.195

www.pulseambulanceservice.com has no MX records ->
[pulseambulanceservice.com has 1 MX record
mail.pulseambulanceservice.com (10)]

http://www.sorbs.net/lookup.shtml?63.251.92.195

Much More 63.251.92.195 sightings:
http://groups.google.com/groups/search?q=63.251.92.195+group%3A*abuse&start=0&scoring=d&

Internap Network Services NETBLK-PNAP-11-99 (NET-63-251-0-0-1)
63.251.0.0 - 63.251.255.255
eNom INAP-WDC002-ENOM-1942 (NET-63-251-92-192-1)
63.251.92.192 - 63.251.92.255

CustName: eNom
Address: 2002 156th Ave NE
NetRange: 63.251.92.192 - 63.251.92.255
CIDR: 63.251.92.192/26
NetName: INAP-WDC002-ENOM-1942
NetHandle: NET-63-251-92-192-1
Parent: NET-63-251-0-0-1
NetType: Reassigned

route: 63.251.80.0/20
descr: PNAP-WDC
descr: InterNAP
origin: AS10913
mnt-by: INAP-MAINT-MCI
changed: jo...@internap.com
Prefix: 63.251.80.0/20
Prefix Name: PNAP WDC InterNAP PNAP WDC InterNAP
AS: 10913
AS Name: INTERNAP-BLK Internap Network Services
http://www.cidr-report.org/cgi-bin/as-report?as=10913

See:
pulseambulanceservice.com IP 69.25.142.3

http://www.moensted.dk/spam/?addr=69.25.142.3
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?69.25.142.3

Internap Network Services PNAP-12-2002 (NET-69-25-0-0-1)
69.25.0.0 - 69.25.255.255
eNom INAP-SEF-ENOM-1761 (NET-69-25-142-0-1)
69.25.142.0 - 69.25.142.63

Much More 69.25.142.3 sightings:
http://groups.google.com/groups?q=69.25.142.3+group%3A*abuse&start=0&scoring=d&

See:
pulseambulanceservice.com IP 64.74.96.243

http://www.moensted.dk/spam/?addr=64.74.96.243
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?64.74.96.243

Internap Network Services PNAP-SEA-BLOCK4 (NET-64-74-0-0-1)
64.74.0.0 - 64.74.255.255
eNom PNAP-CHG-ENOM-RM-01 (NET-64-74-96-224-1)
64.74.96.224 - 64.74.96.255

Much More 64.74.96.243 sightings:
http://groups.google.com/groups/search?q=64.74.96.243+group%3A*abuse&start=0&scoring=d&

Let see whois:
Registration Service Provided By: eNom, Inc.
Contact: in...@eNom.com

Domain name: pulseambulanceservice.com

Administrative Contact:
arnaudt
arnaud tailliez (tailliez.a[]gmail.com)
+33.2808116551
Fax: -
38 bis avenue de suffren
le touquet, NORD-PAS-DE-CALAIS 62520
FR

Technical Contact:
arnaudt
arnaud tailliez (taill...@gmail.com)
+33.2808116551
Fax: -
38 bis avenue de suffren
le touquet, NORD-PAS-DE-CALAIS 62520
FR

Registrant Contact:
arnaudt
arnaud tailliez (taill...@gmail.com)
+33.2808116551
Fax: -
38 bis avenue de suffren
le touquet, NORD-PAS-DE-CALAIS 62520
FR

Status: Locked

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 25 May 2007 15:55:33
Expiration date: 25 May 2008 15:55:33

Redirected to:
https://www.genuine-pharmacy.com/

And Redirected Again at eNom to:
http://205.uisxksdcinaltd.com/

See:
www.genuine-pharmacy.com IP 124.42.127.50
www.genuine-pharmacy.com new IP 63.251.92.195
genuine-pharmacy.com new IP 216.52.184.240

SOA record [TTL=1800] is:
Primary nameserver: dns1.name-services.com
Hostmaster E-mail address: in...@name-services.com
Serial #: 2002050701

1 MX record is:
10 mail.genuine-pharmacy.com [TTL=1800] IP=124.42.8.150 [TTL=1800]
[CN]

www.genuine-pharmacy.com has no MX records -> [genuine-pharmacy.com
has 1 MX record mail.genuine-pharmacy.com (10)]

http://www.moensted.dk/spam/?addr=216.52.184.240
http://www.moensted.dk/spam/?addr=63.251.92.195

Both IP at eNom

SEE
www.genuine-pharmacy.com IP 124.42.127.50
mail.genuine-pharmacy.com MX record IP 124.42.8.150

http://www.moensted.dk/spam/?addr=124.42.8.150
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?124.42.8.150

inetnum: 124.42.0.0 - 124.42.127.255
netname: SINNET
descr: Beijing Guanghuan Xinwang Digital Technology co.Ltd
person: Chen hao
nic-hdl: CH471-AP
e-mail: lic...@sinnet.com.cn
person: Wang Huijun
nic-hdl: WH271-AP
e-mail: che...@sinnet.com.cn

abuse[]sinnet.com.cn is listed in rfc-ignorant.org database

Prefix: 124.42.0.0/19
Prefix Name: error
AS: 23844
AS Name: BJ GUANGHUAN AP Beijing Guanghuan Xinwang Digital Technology
Co , LTD
http://www.cidr-report.org/cgi-bin/as-report?as=23844

route: 124.42.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: y...@chinaunicom.com.cn
http://www.cidr-report.org/cgi-bin/as-report?as=4134

SEE OLD Listing for IP 124.42.127.50
http://www.spamhaus.org/query/bl?ip=124.42.127.50
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54680
124.42.127.50/32 is listed on the Spamhaus Block List (SBL)

21-May-2007 13:49 GMT | SR22

Spam webhosting - genuine-pharmacy.com

1 SBL listings for IPs under the responsibility of sinnet.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=sinnet.com.cn

Let see whois:
Domain name: genuine-pharmacy.com

Administrative Contact:
trustedmedicals
Daffis Maxime (admin[]wiccanwell.org)
+33.870447578
Fax: -
54 Bd Frederic Arnaud
Midi-Pyrinies, SAINT-GIRONS 09200
FR

Technical Contact:
trustedmedicals
Daffis Maxime (ad...@wiccanwell.org)
+33.870447578
Fax: -
54 Bd Frederic Arnaud
Midi-Pyrinies, SAINT-GIRONS 09200
FR

Registrant Contact:
trustedmedicals
Daffis Maxime (ad...@wiccanwell.org)
+33.870447578
Fax: -
54 Bd Frederic Arnaud
Midi-Pyrinies, SAINT-GIRONS 09200
FR

Status: Locked

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 03 May 2007 15:20:01
Expiration date: 03 May 2008 15:20:01

More genuine-pharmacy.com sightings:
http://groups.google.com/groups/search?q=genuine-pharmacy.com+group%3A*abuse&qt_s=Search

SEE from registrant email record whois wiccanwell.org:
Domain ID:D106838779-LROR
Domain Name: WICCANWELL.ORG
Created On:07-Jul-2005 14:36:19 UTC
Last Updated On:11-May-2007 09:26:22 UTC
Expiration Date:07-Jul-2007 14:36:19 UTC
Sponsoring Registrar:Go Daddy Software, Inc. (R91-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:GODA-012767367
Registrant Name:Registration Private
Registrant Organization:Domains by Proxy, Inc.
Registrant Street1:DomainsByProxy.com
Registrant Street2:15111 N. Hayden Rd., Ste 160, PMB 353
Registrant Street3:
Registrant City:Scottsdale
Registrant State/Province:Arizona
Registrant Postal Code:85260
Registrant Country:US
Registrant Phone:+1.4806242599
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: WICCANW...@domainsbyproxy.com
Admin ID:GODA-212767367
Admin Name:Registration Private
Admin Organization:Domains by Proxy, Inc.
Admin Street1:DomainsByProxy.com
Admin Street2:15111 N. Hayden Rd., Ste 160, PMB 353
Admin Street3:
Admin City:Scottsdale
Admin State/Province:Arizona
Admin Postal Code:85260
Admin Country:US
Admin Phone:+1.4806242599
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: WICCANW...@domainsbyproxy.com
Tech ID:GODA-112767367
Tech Name:Registration Private
Tech Organization:Domains by Proxy, Inc.
Tech Street1:DomainsByProxy.com
Tech Street2:15111 N. Hayden Rd., Ste 160, PMB 353
Tech Street3:
Tech City:Scottsdale
Tech State/Province:Arizona
Tech Postal Code:85260
Tech Country:US
Tech Phone:+1.4806242599
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: WICCANW...@domainsbyproxy.com
Name Server: NS6.SECUREDC.COM
Name Server: NS5.SECUREDC.COM

wiccanwell.org IP 75.126.45.171
=> NO Active website / Login to Control Panel
16 Aliases on this IP

[wiccanwell.org has 1 MX record mail9.securedc.com (10)]

Prefix: 75.126.0.0/16
Prefix Name: SoftLayer Technologies Inc dal01 netblock5 PNAP DAL
softlayer
AS: 36351
AS Name: SOFTLAYER SoftLayer Technologies Inc
http://www.cidr-report.org/cgi-bin/as-report?as=36351

75.126.45.171 = securedc.com at softlayer.com

And More securedc.com sightings:
http://groups.google.com/groups/search?q=securedc.com+group%3A*abuse&start=0&scoring=d&

See:
205.uisxksdcinaltd.com IP 221.11.71.125

Resolved 205.uisxksdcinaltd.com to uisxksdcinaltd.com to 221.11.71.125

www.uisxksdcinaltd.com CNAME uisxksdcinaltd.com [TTL=60]

ns1.dnsburger.com [221.11.71.125] [TTL=172800] [CN]
ns2.dnsburger.com [221.7.193.185] [TTL=172800] [CN]

NS records at your nameservers are:
ns1.uisxksdcinaltd.com [221.11.71.125] [TTL=172800]
ns2.uisxksdcinaltd.com [221.11.71.125] [TTL=172800]

SOA record [TTL=86400] is:
Primary nameserver: ns1.uisxksdcinaltd.com
Hostmaster E-mail address: webm...@uisxksdcinaltd.com
Serial #: 1180109728

205.uisxksdcinaltd.com has no MX records -> uisxksdcinaltd.com has no
MX records

http://www.moensted.dk/spam/?addr=221.11.71.125
http://www.spamhaus.org/query/bl?ip=221.11.71.125

10 hosts sharing 205.uisxksdcinaltd.com ip
abcofgoat.com
asimilatecat.com
bathtubhrewardzz.com
keleqdtnslot.com
keletnqdsinch.com
newtwooeztnoodle.com
superhjdiapera.com
tmuckinmationdad.com
tozfdqoots.com
uisxksdcinaltd.com

inetnum: 221.11.0.0 - 221.11.127.255
netname: CNCGROUP-SN
descr: CNC Group Shannxi province network
descr: China Network Communications Group Corporation

route: 221.11.0.0/17
descr: CNC Group Shanxi1 Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
http://www.cidr-report.org/cgi-bin/as-report?as=4837

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL52714
221.11.70.0/23 is listed on the Spamhaus Block List (SBL)

24-Mar-2007 01:25 GMT | SR04

Dirty block - Months of spammer hosting (escalation)

3 SBL/ROKSO listings for IPs under the responsibility of cncgroup-sn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-sn

Let see whois:
Domain Name: uisxksdcinaltd.com
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET

Registrant Contact
Name: kevin benson
Address: 1098 Queen St
halifax, ns b3h2r9
CA
Email Address: kevinbenson007[]coldmail.ca
Phone Number: (902)412-1798

Administrative Contact
Name: kevin benson
Address: 1098 Queen St
halifax, ns b3h2r9
CA
Email Address: kevinbe...@coldmail.ca
Phone Number: (902)412-1798

Technical Contact
Name: kevin benson
Address: 1098 Queen St
halifax, ns b3h2r9
CA
Email Address: kevinbe...@coldmail.ca
Phone Number: (902)412-1798

Record Created on........ 2007-05-22 00:09:51.994
Expire on................ 2008-05-21 23:15:03.000

Domain servers in listed order:
ns1.dnsburger.com
ns2.dnsburger.com

More uisxksdcinaltd.com sightings:
http://groups.google.com/groups/search?q=uisxksdcinaltd.com+group%3A*abuse&qt_s=Search

See:
ns2.dnsburger.com IP 221.7.193.185

ns2.dnsburger.com has no MX records -> dnsburger.com has no MX records

http://www.moensted.dk/spam/?addr=221.7.193.185
http://www.spamhaus.org/query/bl?ip=221.7.193.185
http://www.spamhaus.org/pbl/query/PBL111818

More 221.7.193.185 sightings:
http://groups.google.com/groups/search?q=221.7.193.185+group%3A*abuse&qt_s=Search

inetnum: 221.7.193.184 - 221.7.193.191
netname: gxjxtech-com
country: CN
descr: guangxigxjxtech-com
admin-c: LH602-AP
tech-c: LH602-AP
status: ASSIGNED NON-PORTABLE
changed: nn...@gxcc.com.cn 20060427
mnt-by: MAINT-CNCGROUP-GX
source: APNIC
route: 221.7.128.0/17
descr: CNC Group CHINA169 Guangxi Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: ab...@cnc-noc.net => ???

bogusmx, whois, postmaster and abuse[]cnc-noc.net are listed in rfc-
ignorant.org database
abuse[]gxcc.com.cn is listed in rfc-ignorant.org database

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54820
221.7.193.185/32 is listed on the Spamhaus Block List (SBL/ROKSO)

21-May-2007 14:31 GMT | SR22

Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov.
Spam webhosting - millickentistiredd.com

7 SBL/ROKSO listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gx

Let see whois:
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com

abuse[]NameCheap.com is listed in rfc-ignorant.org database

Domain name: dnsburger.com

Registrant Contact:
northern Inc.
kevin benson (kevster[]coldmail.ca)
+1.9024121798
Fax: +1.5555555555
1098 Queen St
halifax, NS B3H 2R9
CA

Administrative Contact:
northern Inc.
kevin benson (kev...@coldmail.ca)
+1.9024121798
Fax: +1.5555555555
1098 Queen St
halifax, NS B3H 2R9
CA

Technical Contact:
northern Inc.
kevin benson (kev...@coldmail.ca)
+1.9024121798
Fax: +1.5555555555
1098 Queen St
halifax, NS B3H 2R9
CA

Status: Locked

Name Servers:
ns1.dnsburger.com
ns2.dnsburger.com

Creation date: 22 May 2007 02:12:49
Expiration date: 22 May 2008 02:12:49

abuse[]coldmail.ca is listed in rfc-ignorant.org database

More dnsburger.com sightings:
http://groups.google.com/groups/search?q=dnsburger.com+group%3A*abuse&qt_s=Search

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages