[email] [drugs] [61.225.13.24] (dywanlida.info - Tucows - managednsservice.com - hotworldwide.net - superready.net - RegisterFly.com) Chicken Born With Ducka?Ts Webbed Feet
TomezNet
IP 61.225.13.24 61-225-13-24.dynamic.hinet.net
(at ipdns1.hinet.net)
Spamvert:
dywanlida.info IP 216.40.47.17
(at dns1.tucows.com / redirect.managednsservice.com)
See OLD => SBL44852 / SBL45242
Tucows.com and RegisterFly.com are ignoring any SPAM complaints for
months!
Frame load / redirected to:
www.hotworldwide.net IP 124.42.8.149
(at ns1.superready.net / dns.sinnet.com.cn / asianetcom.com)
www.superready.net IP 72.51.37.200
(at NS2.SERVERBEACH.COM / peer1.net / ns1.geodns.net)
All domains (identical spam) divyatimes.info, kingsreport.info,
hffzxw.info, itcongress.info, thaipoon.info, marketableincome.info,
moneyask.info, dywanlida.info and hotworldwide.net, superready.net,
everworldwide.com, worldwideready.com
=> Registrar: RegisterFly.com, Inc.
postmaster and ab...@RegisterFly.com are listed in rfc-ignorant.org
database
SEE Also More Tucows spam support sightings:
http://groups.google.com/groups/search?q=Tucows+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from domain registration.
More info below:
====================
X-SID-PRA: Tikhonov Alex <Silv...@johnandsueenglish.com>
X-Message-Info: txF49lGdW43II1qPhqbZyrOwfFS00dLIl0LDWSi06hE=
Received: from tomts3-srv.bellnexxia.net ([209.226.175.115]) by bay0-
pamc1-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 5 Feb 2007 05:25:20 -0800
Received: from [MUNGED]
by toip15.srvr.bell.ca with ESMTP; 05 Feb 2007 08:25:16 -0500
Received: (qmail 11479 invoked by uid 110); 5 Feb 2007 08:25:16 -0500
Delivered-To: [MUNGED]
Received: (qmail 11427 invoked from network); 5 Feb 2007 08:25:15
-0500
Received: from 61-225-13-24.dynamic.hinet.net (HELO ub1dvnf5fdlge6y)
(61.225.13.24)
by [MUNGED] with SMTP; 5 Feb 2007 08:25:15 -0500
Message-ID: <0ec101c74928$0c86ffd8$180de13d@ub1dvnf5fdlge6y>
From: "Tikhonov Alex" <Silv...@johnandsueenglish.com>
To: [MUNGED]
Subject: Chicken Born With Duckâ?Ts Webbed Feet
Date: Mon, 05 Feb 2007 13:24:39 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1437
Return-Path: Silv...@johnandsueenglish.com
X-OriginalArrivalTime: 05 Feb 2007 13:25:20.0804 (UTC)
FILETIME=[1596CE40:01C74929]
Hello,
Now you can order Original Viagra directly from Pfizer.
Here: http://www.dywanlida.info
All prices are tax/vat free and free same-day worldwide shipping also
included.
--
[MUNGED]
-- END OF SPAM --
SEE Also More RegisterFly.com spam support sightings:
http://groups.google.com/groups/search?q=RegisterFly.com+group%3A*abuse&start=0&scoring=d&
See:
IP 61.225.13.24 61-225-13-24.dynamic.hinet.net
http://www.moensted.dk/spam/?addr=61.225.13.24
http://www.spamhaus.org/query/bl?ip=61.225.13.24
http://www.spamhaus.org/pbl/query/PBL012981
http://spamcop.net/w3m?action=checkblock&ip=61.225.13.24
http://www.spamsources.fabel.dk/ip/61.225.13.24
More hinet.net sightings:
http://groups.google.com/groups/search?q=hinet.net+group%3A*abuse&start=0&scoring=d&
inetnum: 61.220.0.0 - 61.227.255.255
netname: HINET
descr: Data Communication Business Group, Chunghwa Telecom Co.,
Ltd.
descr: Commerical ISP
person: HINET Network-Adm
address: CHTD, Chunghwa Telecom Co., Ltd.
e-mail: netwo...@hinet.net
e-mail: cyk...@ms1.hinet.net
Chunghwa Telecom Data communication Business Group
Netname: HINET-NET
Netblock: 61.225.0.0/16
Administrator contact:
cyk...@ms1.hinet.net
Technical contact:
cyk...@ms1.hinet.net
route: 61.225.0.0/16
descr: (HiNet) Chunghwa Telecom Co., Ltd.
origin: AS3462
member-of: RS-COMM_NSFNET
mnt-by: MAINT-AS3462
changed: cyk...@ms1.hinet.net
ASN: 3462
ASN Name: HINET (Data Communication Business Group)
Country (per IP registrar): TW [Taiwan]
Country IP Range: 61.224.0.0 to 61.231.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3462
29 SBL/ROKSO listings for IPs under the responsibility of hinet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=hinet.net
Spamvert URL:
http://dywanlida.info/
<html>
<framesetframespacing="0"rows="100%,*"cols="100%"frameborder="no"border="0">
<framename="XYZZY2"scrolling="auto"src="http://
www.hotworldwide.net"noresize>
<framename="XYZZY"scrolling="no"noresize>
<noframes>
<h1><ahref="http://www.hotworldwide.net">http://www.hotworldwide.net</
a></h1>
<p>Please<ahref="http://www.hotworldwide.net">clickhere</
a>toviewthenon-framedversion.</p>
</noframes>
</frameset>
</html>
See:
dywanlida.info IP 216.40.47.17
dns2.registerfly.com. [64.97.159.10 (NO GLUE; CNAME encountered-
>ns2.mdnsservice.com.)] [CA]
dns1.registerfly.com. [216.40.47.18 (NO GLUE; CNAME encountered-
>ns1.mdnsservice.com.)] [CA]
NS records at nameservers are:
ns1.mdnsservice.com [216.40.47.18]
ns3.mdnsservice.com [65.22.7.10]
ns2.mdnsservice.com [64.97.159.10]
SOA record [TTL=300] is:
Primary nameserver: ns1.mdnsservice.com
Hostmaster E-mail address: hostmaster.mdnsservice.com
Serial #: 821499601
dywanlida.info has no MX records
http://www.moensted.dk/spam/?addr=216.40.47.17
Spam Received Recently See: http://www.sorbs.net/lookup.shtml?
216.40.47.17
216.40.47.17 PTR record: redirect.managednsservice.com
at dns1.tucows.com
So Much More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&
See OLD => SBL44852 / SBL45242
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Assignment
RNOCEmail: dnsa...@tucows.com
RTechEmail: dns...@tucows.com
route: 216.40.32.0/20
descr: Tucows International
origin: AS15348
mnt-by: MAINT-AS15348
changed: ddiac...@tucows.com
ASN: 19152
ASN Name: IBMCCH-TOR
Country (per IP registrar): CA [Canada]
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
1 SBL listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
Let see whois.afilias.info:
Domain ID: D16270407-LRMS
Domain Name: DYWANLIDA.INFO
Created On: 28-Jan-2007 14:16:07 UTC
Last Updated On: 28-Jan-2007 14:16:08 UTC
Expiration Date: 28-Jan-2008 14:16:07 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status: CLIENT TRANSFER PROHIBITED
Status: CLIENT UPDATE PROHIBITED
Status: TRANSFER PROHIBITED
Registrant ID: tutQKKpxNKeH5lOw
Registrant Name: Peter Kurelja
Registrant Organization: Kurelja
Registrant Street1: PO Box 239
Registrant Street2:
Registrant Street3:
Registrant City: West Milton
Registrant State/Province: PA
Registrant Postal Code: 17844
Registrant Country: US
Registrant Phone: +1.5704126667
Registrant Phone Ext.:
Registrant FAX: +1.5704126667
Registrant FAX Ext.:
Registrant Email: heartw...@dejazzd.com
Admin ID:tutQKKpxNKeH5lOw
Admin Name:Peter Kurelja
Admin Organization:Kurelja
Admin Street1:PO Box 239
Admin Street2:
Admin Street3:
Admin City:West Milton
Admin State/Province:PA
Admin Postal Code:17844
Admin Country:US
Admin Phone:+1.5704126667
Admin Phone Ext.:
Admin FAX:+1.5704126667
Admin FAX Ext.:
Admin Email: heartw...@dejazzd.com
Billing ID:tutQKKpxNKeH5lOw
Billing Name:Peter Kurelja
Billing Organization:Kurelja
Billing Street1:PO Box 239
Billing Street2:
Billing Street3:
Billing City:West Milton
Billing State/Province:PA
Billing Postal Code:17844
Billing Country:US
Billing Phone:+1.5704126667
Billing Phone Ext.:
Billing FAX:+1.5704126667
Billing FAX Ext.:
Billing Email: heartw...@dejazzd.com
Tech ID:tutQKKpxNKeH5lOw
Tech Name:Peter Kurelja
Tech Organization:Kurelja
Tech Street1:PO Box 239
Tech Street2:
Tech Street3:
Tech City:West Milton
Tech State/Province:PA
Tech Postal Code:17844
Tech Country:US
Tech Phone:+1.5704126667
Tech Phone Ext.:
Tech FAX:+1.5704126667
Tech FAX Ext.:
Tech Email: heartw...@dejazzd.com
Name Server: DNS1.REGISTERFLY.COM
Name Server: DNS2.REGISTERFLY.COM
See More Registrant email: heartwoodpjk[]dejazzd.com sightings:
http://groups.google.com/groups/search?q=%22heart...@dejazzd.com%22+group%3A*abuse
See:
Title => Ed Pills - Don't let ED affect your sex life. Take control.
www.hotworldwide.net IP 124.42.8.149
ns1.superready.net [124.42.8.149] [TTL=172800] [CN]
ns2.superready.net [124.42.8.149] [TTL=172800] [CN]
SOA record [TTL=600] is:
Primary nameserver: ns1.superready.net
Hostmaster E-mail address: email.mail.com
Serial #: 617
1 MX record is:
0 hotworldwide.net [TTL=600] IP=124.42.8.149 [TTL=600] [CN]
www.hotworldwide.net has no MX records -> [hotworldwide.net has 1 MX
record hotworldwide.net (0)]
http://www.moensted.dk/spam/?addr=124.42.8.149
Blocked - see http://www.spambag.org/cgi-bin/spambag?mailfrom=sinnet
No PTR records exist for 124.42.8.149 at dns.sinnet.com.cn
abuse[]sinnet.com.cn is listed in rfc-ignorant.org database
abuse[]asianetcom.com is listed in rfc-ignorant.org database
More 124.42.8.149 sightings:
http://groups.google.com/groups/search?q=124.42.8.149+group%3A*abuse
inetnum: 124.42.0.0 - 124.42.127.255
netname: SINNET
descr: Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr: 2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr: Dong Cheng Dstrict,Beijing
nic-hdl: CH471-AP
e-mail: lic...@sinnet.com.cn
changed: ip...@cnnic.cn
person: Wang Huijun
nic-hdl: WH271-AP
e-mail: che...@sinnet.com.cn
person: Chen hao
nic-hdl: CH471-CN
e-mail: lic...@sinnet.com.cn
route: 124.42.0.0/17
descr: Asia Netcom (proxy-registered route object)
origin: AS23844
remarks: This route object is for a ANC customer route
notify: anc.i...@asianetcom.com
mnt-by: MAINT-AS10026
changed: anc.i...@asianetcom.com
route: 124.42.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: y...@chinaunicom.com.cn
ASN: 23844
ASN Name: BJ-GUANGHUAN-AP (Beijing Guanghuan Xinwang Digital)
Country (per IP registrar): CN [China]
Country IP Range: 124.42.0.0 to 124.42.127.255
http://www.cidr-report.org/cgi-bin/as-report?as=23844
3 SBL listings for IPs under the responsibility of sinnet.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=sinnet.com.cn
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
grattatrola, roberto rob...@recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
More hotworldwide.net sightings:
http://groups.google.com/groups?q=hotworldwide.net+group%3A*abuse
See:
ns1.superready.net IP 124.42.8.149
ns1.superready.net has no MX records -> superready.net has no MX
records
http://www.moensted.dk/spam/?addr=124.42.8.149
See:
www.superready.net IP 72.51.37.200
dns1.registerfly.com [216.40.47.18] [TTL=172800] [CA]
dns2.registerfly.com [64.97.159.10] [TTL=172800] [CA]
dns3.registerfly.com [65.22.7.10] [TTL=172800] [CA]
NS records at nameservers are:
ns1.mdnsservice.com [216.40.47.18]
ns3.mdnsservice.com [65.22.7.10]
ns2.mdnsservice.com [64.97.159.10]
SOA record [TTL=300] is:
Primary nameserver: ns1.mdnsservice.com
Hostmaster E-mail address: hostmaster.mdnsservice.com
Serial #: 819168045
http://www.moensted.dk/spam/?addr=72.51.37.200
More 72.51.37.200 sightings:
http://groups.google.com/groups/search?q=72.51.37.200+group%3A*abuse
No PTR records exist for 72.51.37.200
at NS2.SERVERBEACH.COM / ns1.geodns.net
Peer 1 Network Inc. PEER1-BLK-08 (NET-72-51-0-0-1)
72.51.0.0 - 72.51.63.255
ServerBeach PEER1-SERVERBEACH-06A (NET-72-51-32-0-1)
72.51.32.0 - 72.51.47.255
OrgName: Peer 1 Network Inc.
OrgID: PER1
NetRange: 72.51.0.0 - 72.51.63.255
CIDR: 72.51.0.0/18
NetName: PEER1-BLK-08
NetHandle: NET-72-51-0-0-1
Parent: NET-72-0-0-0-0
NetType: Direct Allocation
RNOCEmail: net-...@peer1.net
OrgName: ServerBeach
OrgID: SERVE-32
NetRange: 72.51.32.0 - 72.51.47.255
CIDR: 72.51.32.0/20
NetName: PEER1-SERVERBEACH-06A
NetHandle: NET-72-51-32-0-1
Parent: NET-72-51-0-0-1
NetType: Reallocated
RTechEmail: hostm...@serverbeach.com
OrgTechEmail: ipa...@serverbeach.com
whois and abuse[]serverbeach.com are listed in rfc-ignorant.org
database
route: 72.51.32.0/20
descr: Peer1 Route Object
origin: as13768
mnt-by: maint-as13768
changed: v...@peer1.net
ASN: 13768
ASN Name: PEER1
Country (per IP registrar): US [United States]
Country IP Range: 72.51.0.0 to 72.51.63.255
http://www.cidr-report.org/cgi-bin/as-report?as=13768
1 SBL/ROKSO listings for IPs under the responsibility of
serverbeach.com
http://www.spamhaus.org/sbl/listings.lasso?isp=serverbeach.com
1 SBL listings for IPs under the responsibility of peer1.net
http://www.spamhaus.org/sbl/listings.lasso?isp=peer1.net
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
grattatrola
via gramsci 44
alessandria, NA 15100
IT
Domain name: SUPERREADY.NET
Administrative Contact:
grattatrola, roberto roberto[]recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185
postmaster and abuse[]RegisterFly.com are listed in rfc-ignorant.org
database
See More Registrant email: roberto[]recordonilne.com sightings:
http://groups.google.com/groups/search?q=%22ro...@recordonilne.com%22+group%3A*abuse
More superready.net sightings:
http://groups.google.com/groups/search?q=superready.net+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/ce16762cd12d4976
And:
http://groups.google.com/group/news.admin.net-abuse.email/msg/fcef8fe0eaf52022
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: