[email] [drugs - Trusted Meds] (neilbox.info - kindstudio.com - spurmlifenow.net - Tucows.com - REGISTERFLY.COM - mdx-project.com) Incoming PM
TomezNet
IP 219.128.216.160
(at dns.guangzhou.gd.cn / CHINANET-GD)
Spamvert:
www.neilbox.info IP 216.40.47.17
www.spurmlifenow.net IP 216.40.47.17
(SBL44852 - SBL45242) (at dns1.tucows.com /
redirect.managednsservice.com)
Frames Redirected to:
http://kindstudio.com/spurm/index.php
kindstudio.com IP 125.208.7.120
(SBL45301) (at primetelecom.cn)
Web:
© 2005 Trusted Meds Inc. All rights reserved.
More SPUR-M by Trusted Meds sightings:
http://groups.google.com/groups/search?q=%22SPUR-M%22+group%3A*abuse&start=0&scoring=d&
Also Much More Tucows sightings:
http://groups.google.com/groups/search?q=Tucows+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: TPPVPC...@thecompleteweb.com
X-SID-Result: TempError
X-Message-Info: txF49lGdW43trpqTnsZTj4kUiiOtqbVttQLWb/DTBd4=
Received: from tomts26-srv.bellnexxia.net ([209.226.175.189]) by
bay0-pamc1-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 23 Aug 2006 09:11:34 -0700
Received: from [MUNGED]
by toip5.bellnexxia.net with ESMTP; 23 Aug 2006 12:11:28 -0400
Received: (qmail 7959 invoked by uid 110); 23 Aug 2006 12:11:27 -0400
Delivered-To: [MUNGED]
Received: (qmail 7936 invoked from network); 23 Aug 2006 12:11:24 -0400
Received: from unknown (HELO [MUNGED]) (219.128.216.160)
by [MUNGED] with SMTP; 23 Aug 2006 12:11:24 -0400
Received: from adsorbate. montclair.northeastern.frontiersman.es
([190.128.228.198] helo=ricochet.mail.desty.org)
by smtp8.desty.org with esmtp
id 8A596j-0141FN-00; Wed, 23 Aug 2006 23:08:25 +0600
Message-Id: <E1A572M-1493nV...@thecompleteweb.com>
Sender: TPPVPC...@thecompleteweb.com
Date: Wed, 23 Aug 2006 22:06:25 +0500
In-Reply-To: Your message of "Wed, 23 Aug 2006 21:03:25 +0400."
<20031002150...@asuka.tech.sitadelle.com>
From: "Austin Dwyer" <TPPVPC...@thecompleteweb.com>
To: [MUNGED]
Subject: Incoming PM
Return-Path: TPPVPC...@thecompleteweb.com
X-OriginalArrivalTime: 23 Aug 2006 16:11:34.0498 (UTC)
FILETIME=[CDCD3C20:01C6C6CE]
Icrease Your S''exual Desire and S''perm volume by 500%
L'onger o''rgasms - The longest most intense o''rgasms of your life
Multiple o''rgasms - Cum again and again
S'PUR-M is The Newest and The Safest Way
100% N''atural and No Side Effects - in contrast to well-known brands.
Experience three times longer o''rgasms
World Wide shipping within 24 hours
Clisk here http://www.neilbox.info
"Look out, she's coming!
The other apparently didn't, possibly because Annie's erratic milking
habits had already dried her up.
Poor buggers down there never stopped busting their balls, and -he
didn't envy them one little bit.
-- END OF SPAM --
More Trusted Meds sightings:
http://groups.google.com/groups/search?q=%22Trusted+Meds%22+group%3A*abuse
See:
IP 219.128.216.160
http://www.moensted.dk/spam/?addr=219.128.216.160
http://cbl.abuseat.org/lookup.cgi?ip=219.128.216.160
http://abuse.net/sbl.phtml?IP=219.128.216.160
http://www.spamsources.fabel.dk/ip/219.128.216.160
inetnum: 219.128.0.0 - 219.137.255.255
netname: CHINANET-GD
route: 219.128.0.0/13
descr: Chinanet Guangdong Telecom
origin: AS4813
remarks: this is registered by ruan zhidan
notify: r...@gddc.com.cn
mnt-by: MAINT-AS4813
changed: r...@gddc.com.cn 20020423
source: RADB
route: 219.128.0.0/13
descr: China Telecom guangdong Province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@ns.chinanet.cn.net
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 219.128.0.0 to 219.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
2 SBL listings for IPs under the responsibility of CHINANET-GD
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-GD
See:
www.neilbox.info IP 216.40.47.17
dns2.registerfly.com [64.97.159.10 (NO GLUE; CNAME
encountered->ns2.mdnsservice.com)] [CA]
dns1.registerfly.com [216.40.47.18 (NO GLUE; CNAME
encountered->ns1.mdnsservice.com)] [CA]
NS records at nameservers are:
ns3.mdnsservice.com [65.22.7.10]
ns1.mdnsservice.com [64.97.159.10]
ns2.mdnsservice.com [216.40.47.18]
www.neilbox.info has no MX records -> neilbox.info has no MX records
See Much More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&
http://www.moensted.dk/spam/?addr=216.40.47.17
http://www.spamhaus.org/query/bl?ip=216.40.47.17
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44852
216.40.47.17/32 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 22:51 GMT | SR04
giveawaysblog.info - redirect (come on Tucows!)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45242
216.40.47.16/31 is listed on the Spamhaus Block List (SBL)
06-Aug-2006 09:49 GMT | SR02
12 SBL/ROKSO listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
More mdnsservice.com sightings:
http://groups.google.com/groups/search?q=mdnsservice.com+group%3A*abuse&start=0&scoring=d&
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
route: 216.40.32.0/20
descr: IBM
origin: AS19152
mnt-by: MAINT-AS19152
ASN: 19152
ASN Name: IBMCCH-TOR
changed: dennis....@bellnexxia.com
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
Let see whois.afilias.info:
Domain ID:D14475965-LRMS
Domain Name: NEILBOX.INFO
Created On:23-Aug-2006 16:11:30 UTC
Last Updated On:23-Aug-2006 16:11:31 UTC
Expiration Date:23-Aug-2007 16:11:30 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:tuENmgG5ETaKB5OB
Registrant Name:francois xavier
Registrant Organization:francois
Registrant Street1:12-14 rue de leglise
Registrant Street2:
Registrant Street3:
Registrant City:Paris
Registrant State/Province:NA
Registrant Postal Code:75015
Registrant Country:FR
Registrant Phone:+1.33083417109
Registrant Phone Ext.:
Registrant FAX:+1.33083417109
Registrant FAX Ext.:
Registrant Email: fran...@emsrt.org
Admin ID:tuENmgG5ETaKB5OB
Admin Name:francois xavier
Admin Organization:francois
Admin Street1:12-14 rue de leglise
Admin Street2:
Admin Street3:
Admin City:Paris
Admin State/Province:NA
Admin Postal Code:75015
Admin Country:FR
Admin Phone:+1.33083417109
Admin Phone Ext.:
Admin FAX:+1.33083417109
Admin FAX Ext.:
Admin Email: fran...@emsrt.org
Billing ID:tuENmgG5ETaKB5OB
Billing Name:francois xavier
Billing Organization:francois
Billing Street1:12-14 rue de leglise
Billing Street2:
Billing Street3:
Billing City:Paris
Billing State/Province:NA
Billing Postal Code:75015
Billing Country:FR
Billing Phone:+1.33083417109
Billing Phone Ext.:
Billing FAX:+1.33083417109
Billing FAX Ext.:
Billing Email: fran...@emsrt.org
Tech ID:tuENmgG5ETaKB5OB
Tech Name:francois xavier
Tech Organization:francois
Tech Street1:12-14 rue de leglise
Tech Street2:
Tech Street3:
Tech City:Paris
Tech State/Province:NA
Tech Postal Code:75015
Tech Country:FR
Tech Phone:+1.33083417109
Tech Phone Ext.:
Tech FAX:+1.33083417109
Tech FAX Ext.:
Tech Email: fran...@emsrt.org
Name Server: DNS1.REGISTERFLY.COM
Name Server: DNS2.REGISTERFLY.COM
More Registrant francois[]emsrt.org sightings:
http://groups.google.com/groups/search?q=%22fra...@emsrt.org%22+group%3A*abuse
See:
kindstudio.com IP 125.208.7.120
ns1.mdx-project.com [125.208.7.120] [TTL=172800] [CN]
ns2.mdx-project.com [125.208.7.120] [TTL=172800] [CN]
[kindstudio.com has 1 MX record kindstudio.com (0)]
http://www.moensted.dk/spam/?addr=125.208.7.120
http://www.spamhaus.org/query/bl?ip=125.208.7.120
More 125.208.7.120 sightings:
http://groups.google.com/groups/search?q=125.208.7.120+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45301
125.208.7.120/32 is listed on the Spamhaus Block List (SBL)
14-Aug-2006 10:10 GMT | SR22
Spam webhosting - literatinorthwest.com
6 SBL listings for IPs under the responsibility of primetelecom.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=primetelecom.cn
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
dory
rue de la hausche 18
rossart, - 6880
BE
Domain name: KINDSTUDIO.COM
Administrative Contact:
Gerd Mueller, - Mue...@legalaxis.org
Haldenpfad 7
Halle, NA 86456
DE
493452307003 Fax: 493452307003
Technical Contact:
dory, michael mich...@pacificrimemail.com
rue de la hausche 18
rossart, - 6880
BE
+1.3227062109 Fax: +1.3227062109
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 17-Aug-2006.
Record expires on 22-Mar-2007.
Record created on 22-Mar-2006.
Domain servers in listed order:
NS2.MDX-PROJECT.COM 125.208.7.120
NS1.MDX-PROJECT.COM 125.208.7.120
Domain status: REGISTRAR-LOCK
More Registrant Mueller[]legalaxis.org sightings:
http://groups.google.com/groups/search?q=%22Mu...@legalaxis.org%22+group%3A*abuse
See:
ns1.mdx-project.com IP 125.208.7.120
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
dory
rue de la hausche 18
rossart, - 6880
BE
Domain name: MDX-PROJECT.COM
Administrative Contact:
Gerd Mueller, - Mue...@legalaxis.org
Haldenpfad 7
Halle, NA 86456
DE
493452307003 Fax: 493452307003
Technical Contact:
dory, michael mich...@pacificrimemail.com
rue de la hausche 18
rossart, - 6880
BE
+1.3227062109 Fax: +1.3227062109
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 17-Aug-2006.
Record expires on 22-Mar-2007.
Record created on 22-Mar-2006.
Domain servers in listed order:
NS2.MDX-PROJECT.COM 125.208.7.120
NS1.MDX-PROJECT.COM 125.208.7.120
Domain status: ACTIVE
See also frames source:
<html>
<frameset framespacing="0" rows="100%,*" cols="100%"
frameborder="no" border="0">
<frame name="XYZZY2" scrolling="auto" src="http://spurmlifenow.net"
noresize>
<frame name="XYZZY" scrolling="no" noresize>
<noframes>
<h1><a
href="http://spurmlifenow.net">http://spurmlifenow.net</a></h1>
<p>Please <a href="http://spurmlifenow.net">click here</a> to
view the non-framed version.</p>
</noframes>
</frameset>
</html>
See:
www.spurmlifenow.net IP 216.40.47.17
dns1.registerfly.com [216.40.47.15] [TTL=172800] [CA]
dns2.registerfly.com [216.40.47.16] [TTL=172800] [CA]
ns3.mdnsservice.com [65.22.7.10]
ns1.mdnsservice.com [64.97.159.10]
ns2.mdnsservice.com [216.40.47.18]
http://www.moensted.dk/spam/?addr=216.40.47.17
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
jouanne
breslauerstr 104
dietzenbach, NA 63128
DE
Domain name: SPURMLIFENOW.NET
Administrative Contact:
jouanne, andre admin[]gscyts.net
breslauerstr 104
dietzenbach, NA 63128
DE
+497.19137216 Fax: +497.19137216
Technical Contact:
jouanne, andre ad...@gscyts.net
breslauerstr 104
dietzenbach, NA 63128
DE
+497.19137216 Fax: +497.19137216
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 03-Aug-2006.
Record expires on 03-Aug-2007.
Record created on 03-Aug-2006.
Domain servers in listed order:
DNS2.REGISTERFLY.COM 216.40.47.16
DNS1.REGISTERFLY.COM 216.40.47.15
Domain status: REGISTRAR-LOCK
Let see more Registrants data:
See:
gscyts.net IP 208.53.129.227
ns1.inverbloom.org [208.53.129.226 (NO GLUE)] [US]
ns2.inverbloom.org [208.53.129.227 (NO GLUE)] [US]
[gscyts.net has 1 MX record mail.gscyts.net (10)]
208.53.129.227 PTR record: ns2.endless-anime.com
at NS3.FDCSERVERS.NET
Let see whois:
Registrant:
Devries, Rene
ATTN: GSCYTS.NET
c/o Network Solutions
P.O. Box 447
Herndon, VA. 20172-0447
Domain Name: GSCYTS.NET
Administrative Contact, Technical Contact:
Devries, Rene
ne25g...@networksolutionsprivateregistration.com
ATTN: GSCYTS.NET
c/o Network Solutions
P.O. Box 447
Herndon, VA 20172-0447
570-708-8780
Record expires on 18-Jun-2008.
Record created on 18-Jun-2005.
Database last updated on 23-Aug-2006 14:09:25 EDT.
Domain servers in listed order:
NS1.INVERBLOOM.ORG 216.86.147.136
NS2.INVERBLOOM.ORG 216.86.147.137
See:
emsrt.org IP N/A
dns4.doteasy.com [65.61.199.12 (NO GLUE)] [CA]
dns3.doteasy.com [65.61.198.12 (NO GLUE)] [CA]
Let see whois.publicinterestregistry.net:
Domain ID:D15991049-LROR
Domain Name: EMSRT.ORG
Created On:24-Dec-1999 14:03:29 UTC
Last Updated On:22-Oct-2004 23:15:14 UTC
Expiration Date:24-Dec-2006 14:03:29 UTC
Sponsoring Registrar: Network Solutions LLC (R63-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:28128922-NSI
Registrant Name: Glenn Visser
Registrant Organization:Glenn Visser
Registrant Street1:P.O. Box 540498
Registrant Street2:
Registrant Street3:
Registrant City:Waltham
Registrant State/Province:MA
Registrant Postal Code:02454
Registrant Country:US
Registrant Phone:+1.6178465500
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: ba...@attbi.com
Admin ID:15361869-NSI
Admin Name:Mark Valentine
Admin Organization: ValentineGraphics.net
Admin Street1:16 Wellesley Road
Admin Street2:
Admin Street3:
Admin City:Natick
Admin State/Province:MA
Admin Postal Code:01760
Admin Country:US
Admin Phone:+1.8779547985
Admin Phone Ext.:
Admin FAX:+1.1231231234
Admin FAX Ext.:
Admin Email: 16wellesleyrd[]comcast.net
Tech ID:15361869-NSI
Tech Name:Mark Valentine
Tech Organization: ValentineGraphics.net
Tech Street1:16 Wellesley Road
Tech Street2:
Tech Street3:
Tech City:Natick
Tech State/Province:MA
Tech Postal Code:01760
Tech Country:US
Tech Phone:+1.8779547985
Tech Phone Ext.:
Tech FAX:+1.1231231234
Tech FAX Ext.:
Tech Email: 16well...@comcast.net
Name Server:DNS3.DOTEASY.COM
Name Server:DNS4.DOTEASY.COM
See More REGISTERFLY.COM spam support sightings:
http://groups.google.com/groups?q=REGISTERFLY.COM+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/6ba921abd86a688a
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/19bfd5d5f3ddfd51
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: