[email] [drugs - Trusted Meds] (hollywoodhotgirlz.info - shopzebras.com - niceshops.net - skvodka.com - tucows.com) Billing Statement
TomezNet
IP 24.77.18.39 s0106000ae6ef13c3.wp.shawcable.net
(at ns2.nr.wp.shawcable.net / sjrb.ca)
Spamvert:
www.hollywoodhotgirlz.info IP 216.40.47.17
(SBL44852 - SBL45242) (at dns3.tucows.com / managednsservice.com)
Frames Redirected to:
http://www.niceshops.net
And:
http://shopzebras.com/spurm/index.php
HOMEPAGE on SPUR-M by Trusted Meds Inc.
shopzebras.com IP 221.206.84.110
(SBL44804 / SBL45241 / SBL45244) (at CNCGROUP-HL)
www.niceshops.net IP 63.251.92.195
(at ns2.wdc.pnap.net / internap.com / eNom.com)
More SPUR-M (over 6,690 listing) sightings:
http://groups.google.com/groups/search?q=%22SPUR-M%22+group%3A*abuse&start=0&scoring=d&
Tucows ignores any spam complains!
Much More Tucows sightings:
http://groups.google.com/groups/search?q=Tucows+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Leopoldo Villegas <XWXK...@cvsh.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43vgbPr6SR9QmWX9SFgUu2XOeKrtifAX+I=
Received: from tomts26-srv.bellnexxia.net ([209.226.175.189]) by
bay0-pamc1-f11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 7 Aug 2006 19:25:57 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip6.bellnexxia.net with ESMTP; 07 Aug 2006 22:25:39 -0400
Received: (qmail 32057 invoked by uid 110); 7 Aug 2006 22:25:40 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 32044 invoked from network); 7 Aug 2006 22:25:38 -0400
Received: from s0106000ae6ef13c3.wp.shawcable.net (24.77.18.39)
by xx..xx..xx.net with SMTP; 7 Aug 2006 22:25:38 -0400
Received: from lenny.striker.ottawa.on.ca ([1] helo=mail.nitros3.org)
by demark.striker.ottawa.on.ca with esmtp (catcall 3.35 #1 (car))
id 071nlc-0030MM-00
for <XWXK...@cvsh.com>; Mon, 07 Aug 2006 22:23:41 -0500
Message-Id: <E0A4nm6-...@mail.nitros7.org>
X-Sender: XWXK...@cvsh.com
Date: Tue, 08 Aug 2006 08:23:41 +0500
From: "Leopoldo Villegas" <XWXK...@cvsh.com>
To: xx..xx@xx..xx.com
Subject: Billing Statement
Return-Path: XWXK...@cvsh.com
X-OriginalArrivalTime: 08 Aug 2006 02:25:57.0689 (UTC)
FILETIME=[FB5DCA90:01C6BA91]
Icrease Your S''exual Desire and S''perm volume by 500%
L'onger o''rgasms - The longest most intense o''rgasms of your life
Multiple o''rgasms - Cum again and again
S'PUR-M is The Newest and The Safest Way
100% N''atural and No Side Effects - in contrast to well-known brands.
Experience three times longer o''rgasms
World Wide shipping within 24 hours
Clisk here http://www.hollywoodhotgirlz.info
kindred durer cloudy carbonaceous allyn hobart migratory drumlin
divisor clinton ecliptic feudatory emcee choirmaster haggle handout
-- END OF SPAM --
More Trusted Meds sightings:
http://groups.google.com/groups/search?q=%22Trusted+Meds%22+group%3A*abuse
futilely.net IP 221.206.84.92
(SBL42570 - SBL44804) (at cncgroup-hl)
See:
IP 24.77.18.39 s0106000ae6ef13c3.wp.shawcable.net
http://www.moensted.dk/spam/?addr=24.77.18.39
[1] shawcable, see http://spews.org/html/S3163.html
OrgName: Shaw Communications Inc.
OrgID: SHAWC
NetRange: 24.76.0.0 - 24.79.255.255
CIDR: 24.76.0.0/14
NetName: SHAW-COMM
NetHandle: NET-24-76-0-0-1
route: 24.77.0.0/19
descr: NETBLK-FIBERLINK-CABLE-2BLK
Shaw Cablesystems GP
origin: AS6327
notify: ipa...@shaw.ca
mnt-by: MAINT-AS6327
changed: ipa...@shaw.ca
ASN: 6327
ASN Name: SHAW
Country IP Range: 24.76.0.0 to 24.79.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=6327
3 SBL listings for IPs under the responsibility of shawcable.net
http://www.spamhaus.org/sbl/listings.lasso?isp=shawcable.net
See:
www.hollywoodhotgirlz.info IP 216.40.47.17
dns2.registerfly.com [216.40.47.16]
dns2.registerfly.com [216.40.47.16]
D9.INFO.AFILIAS-NST.info. [199.7.67.33]
ns3.mdnsservice.com [65.22.7.10]
ns1.mdnsservice.com [64.97.159.10]
ns2.mdnsservice.com [216.40.47.18]
www.hollywoodhotgirlz.info has no MX records -> hollywoodhotgirlz.info
has no MX records
http://www.moensted.dk/spam/?addr=216.40.47.17
http://www.spamhaus.org/query/bl?ip=216.40.47.17
216.40.47.17 PTR record: redirect.managednsservice.com
More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44852
216.40.47.17/32 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 22:51 GMT | SR04
giveawaysblog.info - redirect (come on Tucows!)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45242
216.40.47.16/31 is listed on the Spamhaus Block List (SBL)
06-Aug-2006 09:49 GMT | SR02
11 SBL/ROKSO listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
route: 216.40.32.0/20
descr: IBM
origin: AS19152
mnt-by: MAINT-AS19152
ASN: 19152
ASN Name: IBMCCH-TOR
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
http://www.cidr-report.org/cgi-bin/as-report?as=
Let see whois.afilias.info:
Domain ID:D14326855-LRMS
Domain Name:HOLLYWOODHOTGIRLZ.INFO
Created On:08-Aug-2006 02:25:31 UTC
Last Updated On:08-Aug-2006 02:25:32 UTC
Expiration Date:08-Aug-2007 02:25:31 UTC
Sponsoring Registrar:RegisterFly.com, Inc. (R318-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:turdRtEJRK4d4YOH
Registrant Name:patrice pennetier
Registrant Organization:pennetier
Registrant Street1:rue notre dame, 21
Registrant Street2:
Registrant Street3:
Registrant City:tubize
Registrant State/Province:NA
Registrant Postal Code:1480
Registrant Country:BE
Registrant Phone:+1.3292313108
Registrant Phone Ext.:
Registrant FAX:+1.3292313108
Registrant FAX Ext.:
Registrant Email: pennetier[]the-quickest.com
Admin ID:turdRtEJRK4d4YOH
Admin Name:patrice pennetier
Admin Organization:pennetier
Admin Street1:rue notre dame, 21
Admin Street2:
Admin Street3:
Admin City:tubize
Admin State/Province:NA
Admin Postal Code:1480
Admin Country:BE
Admin Phone:+1.3292313108
Admin Phone Ext.:
Admin FAX:+1.3292313108
Admin FAX Ext.:
Admin Email: penn...@the-quickest.com
Billing ID:turdRtEJRK4d4YOH
Billing Name:patrice pennetier
Billing Organization:pennetier
Billing Street1:rue notre dame, 21
Billing Street2:
Billing Street3:
Billing City:tubize
Billing State/Province:NA
Billing Postal Code:1480
Billing Country:BE
Billing Phone:+1.3292313108
Billing Phone Ext.:
Billing FAX:+1.3292313108
Billing FAX Ext.:
Billing Email: penn...@the-quickest.com
Tech ID:turdRtEJRK4d4YOH
Tech Name:patrice pennetier
Tech Organization:pennetier
Tech Street1:rue notre dame, 21
Tech Street2:
Tech Street3:
Tech City:tubize
Tech State/Province:NA
Tech Postal Code:1480
Tech Country:BE
Tech Phone:+1.3292313108
Tech Phone Ext.:
Tech FAX:+1.3292313108
Tech FAX Ext.:
Tech Email:penn...@the-quickest.com
Name Server:DNS1.REGISTERFLY.COM
Name Server:DNS2.REGISTERFLY.COM
See frames source:
<html>
<frameset framespacing="0" rows="100%,*" cols="100%"
frameborder="no" border="0">
<frame name="XYZZY2" scrolling="auto"
src="http://www.niceshops.net" noresize>
<frame name="XYZZY" scrolling="no" noresize>
<noframes>
<h1><a
href="http://www.niceshops.net">http://www.niceshops.net</a></h1>
<p>Please <a href="http://www.niceshops.net">click here</a> to
view the non-framed version.</p>
</noframes>
</frameset>
</html>
See:
www.niceshops.net IP 63.251.92.195
dns1.name-services.com A IN 3600 69.25.142.1
dns2.name-services.com A IN 3600 216.52.184.230
dns3.name-services.com A IN 3600 63.251.92.193
dns4.name-services.com A IN 3600 64.74.96.242
dns5.name-services.com A IN 3600 70.42.37.1
http://www.moensted.dk/spam/?addr=63.251.92.195
Spam Received See: http://www.sorbs.net/lookup.shtml?63.251.92.195
No PTR records exist for 63.251.92.195 at ns2.wdc.pnap.net
More 63.251.92.195 sightings:
http://groups.google.com/groups/search?q=63.251.92.195+group%3A*abuse&start=0&scoring=d&
Let see whois:
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/
Domain name: niceshops.net
Registrant Contact:
WhoisGuard
WhoisGuard Protected
(0708971453db4d0d9b0b1d2edff9070a.protect[]whoisguard.com)
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd
8939 S. Sepulveda Blvd
Westchester, CA 90045
US
Administrative Contact:
WhoisGuard
WhoisGuard Protected
(0708971453db4d0d9b0b...@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd
8939 S. Sepulveda Blvd
Westchester, CA 90045
US
Technical Contact:
WhoisGuard
WhoisGuard Protected
(0708971453db4d0d9b0b...@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd
8939 S. Sepulveda Blvd
Westchester, CA 90045
US
Status: Locked
Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com
Creation date: 02 Aug 2005 20:05:56
Expiration date: 02 Aug 2007 20:05:56
Internap Network Services NETBLK-PNAP-11-99 (NET-63-251-0-0-1)
63.251.0.0 - 63.251.255.255
eNom INAP-WDC002-ENOM-1942 (NET-63-251-92-192-1)
63.251.92.192 - 63.251.92.255
CustName: eNom
NetRange: 63.251.92.192 - 63.251.92.255
CIDR: 63.251.92.192/26
NetName: INAP-WDC002-ENOM-1942
NetHandle: NET-63-251-92-192-1
route: 63.251.80.0/20
descr: PNAP-WDC
InterNAP
origin: AS10913
mnt-by: INAP-MAINT-RADB
changed: jo...@internap.com
ASN: 10913
ASN Name: INTERNAP-BLK
Country IP Range: 63.251.0.0 to 63.251.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=10913
32 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com
4 SBL listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com
See:
shopzebras.com IP 221.206.84.110
www.shopzebras.com IP N/A
ns1.skvodka.com [221.206.84.110]
ns2.skvodka.com [221.206.84.110]
[shopzebras.com has 1 MX record shopzebras.com (0)]
http://www.moensted.dk/spam/?addr=221.206.84.110
http://www.spamhaus.org/query/bl?ip=221.206.84.110
inetnum: 221.206.0.0 - 221.206.255.255
netname: CNCGROUP-HL
route: 221.206.0.0/16
descr: CNC Group CHINA169 Heilongjiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country IP Range: 221.200.0.0 to 221.207.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44804
221.206.0.0/16 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 08:01 GMT | SR02
CNCGROUP-HL province network (escalated listing)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45241
221.206.84.110/32 is listed on the Spamhaus Block List (SBL)
08-Aug-2006 02:59 GMT | SR02
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45244
221.206.84.0/24 is listed on the Spamhaus Block List (SBL)
06-Aug-2006 10:04 GMT | SR02
Dirty Block
94 SBL/ROKSO listings for IPs under the responsibility of cncgroup-hl
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hl
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
dory
rue de la hausche 18
rossart, - 6880
BE
Domain name: SHOPZEBRAS.COM
Administrative Contact:
Gerd Mueller, - Mue...@legalaxis.org
Haldenpfad 7
Halle, NA 86456
DE
493452307003 Fax: 493452307003
Technical Contact:
dory, michael mich...@pacificrimemail.com
rue de la hausche 18
rossart, - 6880
BE
+1.3227062109 Fax: +1.3227062109
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 05-Aug-2006.
Record expires on 22-Mar-2007.
Record created on 22-Mar-2006.
Domain servers in listed order:
DNS1.REGISTERFLY.COM 216.40.47.15
DNS2.REGISTERFLY.COM 216.40.47.16
DNS3.REGISTERFLY.COM 204.50.180.55
Domain status: REGISTRAR-LOCK
More shopzebras.com sightings:
http://groups.google.com/groups/search?q=shopzebras.com+group%3A*abuse
See:
ns1.skvodka.com IP 221.206.84.110
Let see whois for skvodka.com:
Registrar: REGISTERFLY.COM, INC.
Registrant:
dory
rue de la hausche 18
rossart, - 6880
BE
Domain name: SKVODKA.COM
Administrative Contact:
Gerd Mueller, - Mue...@legalaxis.org
Haldenpfad 7
Halle, NA 86456
DE
493452307003 Fax: 493452307003
Technical Contact:
dory, michael mich...@pacificrimemail.com
rue de la hausche 18
rossart, - 6880
BE
+1.3227062109 Fax: +1.3227062109
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 05-Aug-2006.
Record expires on 22-Mar-2007.
Record created on 22-Mar-2006.
Domain servers in listed order:
NS1.SKVODKA.COM 221.206.84.110
NS2.SKVODKA.COM 221.206.84.110
Domain status: REGISTRAR-LOCK
See:
legalaxis.org IP N/A
Let see whois for legalaxis.org from registrant contact:
Domain ID:D106714229-LROR
Domain Name:LEGALAXIS.ORG
Created On:24-Jun-2005 18:28:36 UTC
Last Updated On:25-Jun-2006 01:51:20 UTC
Expiration Date:24-Jun-2007 18:28:36 UTC
Sponsoring Registrar:Network Solutions LLC (R63-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT HOLD
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:39627998-NSIV
Registrant Name:Jean Banaix
Registrant Street1:ATTN insert domainname here
Registrant Street2:care of Network Solutions
Registrant Street3:
Registrant City:Herndon
Registrant State/Province:VA
Registrant Postal Code:20172
Registrant Country:US
Registrant Phone:+1.5707088780
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:r63n7...@networksolutionsprivateregistration.com
Admin ID:39627998-NSIV
Admin Name:Jean Banaix
Admin Street1:ATTN insert domainname here
Admin Street2:care of Network Solutions
Admin Street3:
Admin City:Herndon
Admin State/Province:VA
Admin Postal Code:20172
Admin Country:US
Admin Phone:+1.5707088780
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:r63n7...@networksolutionsprivateregistration.com
Tech ID:39627998-NSIV
Tech Name:Jean Banaix
Tech Street1:ATTN insert domainname here
Tech Street2:care of Network Solutions
Tech Street3:
Tech City:Herndon
Tech State/Province:VA
Tech Postal Code:20172
Tech Country:US
Tech Phone:+1.5707088780
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:r63n7...@networksolutionsprivateregistration.com
Name Server:NS2.INVERBLOOM.ORG
Name Server:NS1.INVERBLOOM.ORG
More legalaxis.org sightings:
http://groups.google.com/groups/search?q=legalaxis.org+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/6983ba9a430f0de7
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/047cf017c940a751
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: