Spamvert:
www.graphicaprinter.com IP 216.52.184.240
(at name-services.com / eNom.com / internap.com)
Redirected to:
http://www.doubleworldwide.com/ms/?bb
www.doubleworldwide.com IP 220.179.67.138
(at CHINANET-AH)
Much More Man XL sightings:
http://groups.google.com/groups/search?q=%22Man+XL%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Vickie Church <or...@partysajter.com>
X-Message-Info:
txF49lGdW41fPU1evRfZKjsvs52J5Ps8Qj1IMUgCUpRxli63UxIAbNRpAS60NHtx
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by bay0-
pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 11 May 2007 08:10:26 -0700
Received: from [MUNGED]
by toip16.srvr.bell.ca with ESMTP; 11 May 2007 11:10:16 -0400
Received: (qmail 3297 invoked by uid 110); 11 May 2007 11:10:16 -0400
Delivered-To: [MUNGED]
Received: (qmail 3205 invoked from network); 11 May 2007 11:10:14
-0400
Received: from 87.68.27.121.cable.012.net.il (87.68.27.121)
by [MUNGED] with SMTP; 11 May 2007 11:10:14 -0400
Return-Path: <or...@partysajter.com>
Received: from vulgar (87.68.27.121 [87.68.27.121])
by localhost (8.13.0/8.12.10) with SMTP id j5CLcYC1836878
for <[MUNGED]>; Fri, 11 May 2007 08:10:10 -0800
Received: (qmail 51481 invoked by uid 469); Fri, 11 May 2007 08:10:10
-0800
Mailing-List: contact hollo...@lists.thewoodworthgroup.com; run by
ezmlm
List-ID: <devious.thewoodworthgroup.com>
Precedence: bulk
List-Help: <mailto:or...@partysajter.com>
List-Unsubscribe: <mailto:or...@partysajter.com>
List-Post: <mailto:or...@partysajter.com>
List-Archive: http://epileptic.thewoodworthgroup.com/announce/119
Delivered-To: mailing list or...@partysajter.com
Delivered-To: moderator for or...@partysajter.com
Received: (qmail 7005 invoked by uid 685); Fri, 11 May 2007 08:10:10
-0800
Received-SPF: pass (anecdotal.thewoodworthgroup.com: local policy)
Mime-Version: 1.0 (Apple Message framework v623)
Message-Id:
<e611cf6514fba542...@cart.thewoodworthgroup.com>
Content-Transfer-Encoding: 7bit
To: [MUNGED]
From: "Vickie Church" <or...@partysajter.com>
Subject: RE: Court Report
Date: Fri, 11 May 2007 08:10:10 -0800
X-Mailer: Apple Mail (2.628)
X-Virus-Scanned: by amavisd-new at consequent.thewoodworthgroup.com
X-OriginalArrivalTime: 11 May 2007 15:10:26.0851 (UTC)
FILETIME=[81877730:01C793DE]
Sensationall revoolution in medicine!
E''nlarge your p''enis up to 10 cm or up to 4 inches!
Its h'erbal solution what hasnt side effect, but has 100% guaranted
results!
Dont lose your chance and but know wihtout doubts, you will be
impressed with results!
Clisk here: http://www.graphicaprinter.com
It seemed to him that if he made the first two fingers of his hand
into a V and attempted to poke them up her nostrils, they might go
less than an eighth of an inch before encountering a solid (if
slightly yielding) obstruction; that even her gray cardigan and frumpy
house skirts and faded outside-work jeans were part of that solid
fibrous unchannelled body.
I wouldn't be a bit surprised.
Being such a straight arrow was part of the reason for this amazing
fecundity, but Annie herself was a bigger one.
-- END OF SPAM --
Web Title:
Man XL Gain 3 inches
© 2002 - 2005 WW3 DISTRIBUTERS LLC
See more spammer sightings:
http://groups.google.com/groups/search?q=%22WW3+DISTRIBUTERS+LLC%22+group%3A*abuse&start=0&scoring=d&
See:
IP 87.68.27.121 87.68.27.121.cable.012.net.il
http://www.moensted.dk/spam/?addr=87.68.27.121
NJABLBHNC NJABL Bad host, no cookie:
http://njabl.org/cgi-bin/lookup.cgi?query=87.68.27.121
inetnum: 87.68.24.0 - 87.68.35.255
netname: GOLDENLINES-CABLE
role: DNS REG
remarks: DNS Registration and LIR
remarks: Golden Lines International Communication Services
Ltd.
address: Hasivim 25 Petach-Tikva,Israel
postmaster and abuse[]goldenlines.net.il are listed in rfc-
ignorant.org database
route: 87.68.16.0/20
descr: PROVIDER Local Registry
descr: Golden Lines International Communication Services
Ltd.
origin: AS9116
http://www.cidr-report.org/cgi-bin/as-report?as=9116
16 SBL/ROKSO listings for IPs under the responsibility of
goldenlines.net.il
http://www.spamhaus.org/sbl/listings.lasso?isp=goldenlines.net.il
1 SBL listings for IPs under the responsibility of 012.net.il
http://www.spamhaus.org/sbl/listings.lasso?isp=012.net.il
See:
www.graphicaprinter.com IP 216.52.184.240
dns1.name-services.com [69.25.142.1] [TTL=172800] [US]
dns2.name-services.com [216.52.184.230] [TTL=172800] [US]
dns3.name-services.com [63.251.92.193] [TTL=172800] [US]
dns4.name-services.com [64.74.96.242] [TTL=172800] [US]
dns5.name-services.com [70.42.37.1] [TTL=172800] [US]
SOA record [TTL=1800] is:
Primary nameserver: dns1.name-services.com
Hostmaster E-mail address: in...@name-services.com
Serial #: 2002050701
2 MX records are:
5 eforwardct.name-services.com [TTL=1800] IP=216.163.188.58 [TTL=1800]
[US]
10 eforward8a.name-services.com [TTL=1800] IP=70.42.37.3 [TTL=1800]
[US]
mx eforward8a.name-services.com 70.42.37.3(US) (220 eforward8a.name-
services.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830
ready at Wed, 21 Feb 2007 10:02:10 -0800)
mx eforwardct.name-services.com 216.163.188.58(US) (220
c9mailgw26.amadis.com ESMTP Postfix (Debian/GNU))
770 hosts sharing the same ip
mailserver for 3 domains the same ip
885 domains sharing mailservers with www.graphicaprinter.com
http://www.moensted.dk/spam/?addr=216.52.184.240
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?216.52.184.240
Much More 216.52.184.240 sightings:
http://groups.google.com/groups/search?q=216.52.184.240+group%3A*abuse&start=0&scoring=d&
Internap Network Services PNAP-8-98 (NET-216-52-0-0-1)
216.52.0.0 - 216.52.255.255
eNom PNAP-DAL-ENOM-RM-01 (NET-216-52-184-224-1)
216.52.184.224 - 216.52.184.255
OrgName: Internap Network Services
OrgID: PNAP
NetRange: 216.52.0.0 - 216.52.255.255
CIDR: 216.52.0.0/16
NetName: PNAP-8-98
NetHandle: NET-216-52-0-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.PNAP.NET
NameServer: NS2.PNAP.NET
CustName: eNom
NetRange: 216.52.184.224 - 216.52.184.255
CIDR: 216.52.184.224/27
NetName: PNAP-DAL-ENOM-RM-01
NetHandle: NET-216-52-184-224-1
Parent: NET-216-52-0-0-1
NetType: Reassigned
route: 216.52.176.0/20
descr: PNAP-DAL
origin: AS12179
mnt-by: INAP-MAINT-RADB
changed: pe...@internap.com
Prefix: 216.52.176.0/20
Prefix Name: PNAP DAL PNAP DAL
AS: 12179
AS Name: INTERNAP-2BLK Internap Network Services
http://www.cidr-report.org/cgi-bin/as-report?as=12179
18 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com
5 SBL/ROKSO listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com
Let see whois:
Registration Service Provided By: eNom, Inc.
Contact: in...@eNom.com
Domain name: graphicaprinter.com
Administrative Contact:
stephaneprade
stephane prade (stephaneprade[]gmail.com)
+33.614334291
Fax: -
35 impasse des lilas
aquitaine, SAINT JEAN D' ILLAC 33127
FR
Technical Contact:
stephaneprade
stephane prade (stepha...@gmail.com)
+33.614334291
Fax: -
35 impasse des lilas
aquitaine, SAINT JEAN D' ILLAC 33127
FR
Registrant Contact:
stephaneprade
stephane prade (stepha...@gmail.com)
+33.614334291
Fax: -
35 impasse des lilas
aquitaine, SAINT JEAN D' ILLAC 33127
FR
Status: Locked
Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com
Creation date: 09 May 2007 23:42:35
Expiration date: 09 May 2008 23:42:35
Redirected to:
http://www.doubleworldwide.com/ms/?bb
Again Redirected to:
http://www.doubleworldwide.com/ms/index.php?k=f18bea34797f62747f45f58119bf20d8
See:
www.doubleworldwide.com IP 220.179.67.138
ns1.martsuper.com [220.179.67.138] [TTL=172800] [CN]
ns2.martsuper.com [220.179.67.138] [TTL=172800] [CN]
SOA record [TTL=600] is:
Primary nameserver: ns1.martsuper.com
Hostmaster E-mail address: em...@mail.com
Serial #: 3606
1 MX record is:
0 doubleworldwide.com [TTL=600] IP=220.179.67.138 [TTL=600] [CN]
www.doubleworldwide.com has no MX records -> [doubleworldwide.com has
1 MX record doubleworldwide.com (0)]
inetnum: 220.178.0.0 - 220.180.255.255
netname: CHINANET-AH
country: CN
descr: CHINANET anhui province network
descr: China Telecom
role: ANHUI TELECOM
address: 305 Changjiang West Road
address: Hefei Anhui China
country: CN
phone: +86 0551 5185089
fax-no: +86 0551 5185500
e-mail: wangl...@anhuitelecom.com
trouble: send spam reports to ab...@ah163.com => ???
postmaster and abuse[]ah163.com are listed in rfc-ignorant.org
database
postmaster and abuse[]anhuitelecom.com are listed in rfc-ignorant.org
database
route: 220.179.0.0/16
descr: China Telecom Anhui Province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
route: 220.179.0.0/16
descr: China Telecom Anhui Province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
http://www.cidr-report.org/cgi-bin/as-report?as=4134
4 SBL/ROKSO listings for IPs under the responsibility of CHINANET-AH
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-AH
Let see whois:
DOMAIN: DOUBLEWORLDWIDE.COM
RSP: domaindiscount24.com
URL: http://www.dd24.net
created-date: 2007-03-09
updated-date: 2007-03-09
registration-expiration-date: 2008-03-09
owner-contact: P-OBR49
owner-fname: orker
owner-lname: rob
owner-street: 7 Ambroise Pare
owner-city: paris
owner-zip: 75000
owner-country: FR
owner-phone: 33675793162
owner-email: orkerrob[]gmail.com
admin-contact: P-OBR49
admin-fname: orker
admin-lname: rob
admin-street: 7 Ambroise Pare
admin-city: paris
admin-zip: 75000
admin-country: FR
admin-phone: 33675793162
admin-email: orke...@gmail.com
tech-contact: P-OBR49
tech-fname: orker
tech-lname: rob
tech-street: 7 Ambroise Pare
tech-city: paris
tech-zip: 75000
tech-country: FR
tech-phone: 33675793162
tech-email: orke...@gmail.com
billing-contact: P-OBR49
billing-fname: orker
billing-lname: rob
billing-street: 7 Ambroise Pare
billing-city: paris
billing-zip: 75000
billing-country: FR
billing-phone: 33675793162
billing-email: orke...@gmail.com
nameserver: ns1.martsuper.com
nameserver: ns2.martsuper.com
; Please register your domains at
; http://www.dd24.net
See:
ns1.martsuper.com IP 220.179.67.138
ns1.martsuper.com has no MX records -> martsuper.com has no MX records
http://www.moensted.dk/spam/?addr=220.179.67.138
More 220.179.67.138 sightings:
http://groups.google.com/groups/search?q=220.179.67.138+group%3A*abuse&qt_s=Search
Let see whois:
DOMAIN: MARTSUPER.COM
RSP: domaindiscount24.com
URL: http://www.dd24.net
created-date: 2007-03-09
updated-date: 2007-03-09
registration-expiration-date: 2008-03-09
owner-contact: P-OBR49
owner-fname: orker
owner-lname: rob
owner-street: 7 Ambroise Pare
owner-city: paris
owner-zip: 75000
owner-country: FR
owner-phone: 33675793162
owner-email: orke...@gmail.com
admin-contact: P-OBR49
admin-fname: orker
admin-lname: rob
admin-street: 7 Ambroise Pare
admin-city: paris
admin-zip: 75000
admin-country: FR
admin-phone: 33675793162
admin-email: orke...@gmail.com
tech-contact: P-OBR49
tech-fname: orker
tech-lname: rob
tech-street: 7 Ambroise Pare
tech-city: paris
tech-zip: 75000
tech-country: FR
tech-phone: 33675793162
tech-email: orke...@gmail.com
billing-contact: P-OBR49
billing-fname: orker
billing-lname: rob
billing-street: 7 Ambroise Pare
billing-city: paris
billing-zip: 75000
billing-country: FR
billing-phone: 33675793162
billing-email: orke...@gmail.com
nameserver: ns1.domaindiscount24.net
nameserver: ns2.domaindiscount24.net
nameserver: ns3.domaindiscount24.net
; Please register your domains at
; http://www.dd24.net
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/d26d2e883d59aaab
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: