[email] [drugs - SPUR-M] (djsscool.net - futilely.net - edgily.net) Watch out for El Nino!
TomezNet
IP 59.60.77.67
(at dns.ndptt.fj.cn / CHINANET-FJ)
Spamvert:
www.djsscool.net IP 216.40.47.17
(SBL44852) (at tucows.com)
futilely.net IP 221.206.84.92
(SBL42570 - SBL44804) (at cncgroup-hl)
SPUR-M - © 2005 Trusted Meds Inc. All rights reserved.
More SPUR-M (over 6,690 listing) sightings:
http://groups.google.com/groups/search?q=%22SPUR-M%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: ofhfc...@risjadson.co.id
X-SID-Result: TempError
X-Message-Info: txF49lGdW41xBpIxIAUpnEEuSySATibAlVrf+BYL+e0=
Received: from tomts19-srv.bellnexxia.net ([209.226.175.73]) by
bay0-pamc1-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 31 Jul 2006 00:28:45 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 31 Jul 2006 03:28:40 -0400
Message-Id: <53n6bh$16v...@toip3.bellnexxia.net>
Received: (qmail 30663 invoked by uid 110); 31 Jul 2006 07:28:38 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 30647 invoked from network); 31 Jul 2006 07:28:38
-0000
Received: from softdnserror (HELO 207.58.1....) (59.60.77.67)
by xx..xx..xx.net with SMTP; 31 Jul 2006 07:28:36 -0000
Received: from hightail.starnetusa.net (warsaw.starnetusa.net
[201.194.188.240
Date: Mon, 31 Jul 2006 03:28:45 -0400
From: ofhfc...@risjadson.co.id
Bcc:
Return-Path: ofhfc...@risjadson.co.id
X-OriginalArrivalTime: 31 Jul 2006 07:28:45.0971 (UTC)
FILETIME=[F5339E30:01C6B472]
])
by farce.starnetusa.net with ESMTP id 2C573160
for <ofhfc...@risjadson.co.id>; Mon, 31 Jul 2006 13:22:31 +0500
Message-Id:
<6.6.3.60.2.200314...@chamomile.starnetusa.net>
X-Sender: ofhfc...@risjadson.co.id (Unverified)
X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
Date: Mon, 31 Jul 2006 11:26:31 +0300
From: "Brittany Souza" <ofhfc...@risjadson.co.id>
To: xx..xx@xx..xx.com
Subject: Watch out for El Nino!
Icrease Your S''exual Desire and S''perm volume by 500%
L'onger o''rgasms - The longest most intense o''rgasms of your life
Multiple o''rgasms - Cum again and again
S'PUR-M is The Newest and The Safest Way
100% N''atural and No Side Effects - in contrast to well-known brands.
Experience three times longer o''rgasms
World Wide shipping within 24 hours
Clisk here http://www.djsscool.net
nylon bugle pluton crystal pug icosahedral craftsmen haunt
bracket schaefer typeface ptolemaic perquisite filtrate gilchrist
insignia
-- END OF SPAM --
See:
IP 59.60.77.67
http://www.moensted.dk/spam/?addr=59.60.77.67
NO PTR stuck in a loop! at dns.ndptt.fj.cn
inetnum: 59.56.0.0 - 59.61.255.255
netname: CHINANET-FJ
descr: CHINANET fujian province network
descr: China Telecom
descr: No1,jin-rong Street
descr: Beijing 100032
country: CN
route: 59.60.0.0/15
descr: China Telecom Fujian province
origin: AS4134
mnt-by: MAINT-AS4134
changed: tia...@cndata.com
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 59.32.0.0 to 59.63.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
3 SBL listings for IPs under the responsibility of CHINANET-FJ
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-FJ
See:
www.djsscool.net IP 216.40.47.17
dns1.registerfly.com [216.40.47.15]
dns2.registerfly.com [216.40.47.16]
dns3.registerfly.com [204.50.180.55
NS records at your nameservers are:
ns2.mdnsservice.com [64.97.159.10]
ns3.mdnsservice.com [65.22.7.10]
ns1.mdnsservice.com [216.40.47.18]
www.djsscool.net has no MX records -> djsscool.net has no MX records
http://www.moensted.dk/spam/?addr=216.40.47.17
http://www.spamhaus.org/query/bl?ip=216.40.47.17
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
route: 216.40.32.0/20
descr: IBM
origin: AS19152
mnt-by: MAINT-AS19152
changed: dennis....@bellnexxia.com
ASN: 19152
ASN Name: IBMCCH-TOR
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44852
216.40.47.17/32 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 22:51 GMT | SR04
giveawaysblog.info - redirect (come on Tucows!)
See: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42570
10 SBL/ROKSO listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
Let see whois:
Registration Service Provided By: RegisterFly.com
Visit: http://www.RegisterFly.com
Domain name: djsscool.net
Registrant Contact:
insectsplanet
ben vanoel (admin[]insectsplanet.com)
meeuwiskamp 30
Utrecht, NA 3755jn
NL
+1.31532011283
Fax:+1.31532011283
Technical Contact:
insectsplanet
ben vanoel (ad...@insectsplanet.com)
meeuwiskamp 30
Utrecht, NA 3755jn
NL
+1.31532011283
Fax:+1.31532011283
Admin Contact:
insectsplanet
ben vanoel (ad...@insectsplanet.com)
meeuwiskamp 30
Utrecht, NA 3755jn
NL
+1.31532011283
Fax:+1.31532011283
DNS servers:
dns2.registerfly.com
dns1.registerfly.com
dns3.registerfly.com
Status: LOCKED
Created: 2006-07-30 18:34:49
Expires: 2007-07-30 18:34:49
More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&
See frame source:
http://www.djsscool.net/
<html>
<frameset framespacing="0" rows="100%,*" cols="100%"
frameborder="no" border="0">
<frame name="XYZZY2" scrolling="auto" src="http://www.wh0is.biz"
noresize>
<frame name="XYZZY" scrolling="no" noresize>
<noframes>
<h1><a
href="http://www.wh0is.biz">http://www.wh0is.biz</a></h1>
<p>Please <a href="http://www.wh0is.biz">click here</a> to view
the non-framed version.</p>
</noframes>
</frameset>
</html>
See:
futilely.net IP 221.206.84.92
ns1.edgily.net [221.206.84.92]
ns2.edgily.net [221.206.84.92]
[futilely.net has 1 MX record futilely.net (0)]
http://www.moensted.dk/spam/?addr=221.206.84.92
http://www.spamhaus.org/query/bl?ip=221.206.84.92
More futilely.net sightings:
http://groups.google.com/groups/search?q=futilely.net+group%3A*abuse
inetnum: 221.206.0.0 - 221.206.255.255
netname: CNCGROUP-HL
route: 221.206.0.0/16
descr: CNC Group CHINA169 Heilongjiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country IP Range: 221.200.0.0 to 221.207.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42570
221.206.84.92/32 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 22:26 GMT | SR15
getspurm.com ; trilbies.net ; etc
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44804
221.206.0.0/16 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 08:01 GMT | SR02
CNCGROUP-HL province network (escalated listing)
98 SBL?ROKSO listings for IPs under the responsibility of cncgroup-hl
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hl
Let see whois:
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
domain: futilely.net
origin-c: JOCO-962735
owner: Vladimir Mironov
email: whois[]rattlings.com
address: P.O. Box 16
city: Moscow
state: --
postal-code: 117525
country: RU
phone: +7 095 2349449
admin-c: wh...@rattlings.com#0
tech-c: wh...@rattlings.com#0
billing-c: wh...@rattlings.com#0
nserver: ns1.edgily.net 221.206.84.92
nserver: ns2.edgily.net 221.206.84.92
status: lock
created: 2006-04-02 22:33:51 UTC
modified: 2006-05-24 19:39:48 UTC
expires: 2007-04-02 18:33:50 UTC
contact-hdl: wh...@rattlings.com#0
person: Vladimir Mironov
email: wh...@rattlings.com
address: P.O. Box 16
city: Moscow
state: --
postal-code: 117525
country: RU
phone: +7 095 2349449
source: joker.com live whois service
query-time: 0.062338
db-updated: 2006-07-28 10:02:23
More Vladimir Mironov sightings:
http://groups.google.com/groups/search?q=%22Vladimir+Mironov%22+group%3A*abuse&start=0&scoring=d&
See:
ns1.edgily.net IP 221.206.84.92
Let see whois:
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
domain: edgily.net
origin-c: JOCO-962735
owner: Vladimir Mironov
email: whois[]rattlings.com
address: P.O. Box 16
city: Moscow
state: --
postal-code: 117525
country: RU
phone: +7 095 2349449
admin-c: wh...@rattlings.com#0
tech-c: wh...@rattlings.com#0
billing-c: wh...@rattlings.com#0
nserver: ns1.edgily.net 221.206.84.92
nserver: ns2.edgily.net 221.206.84.92
status: lock
created: 2006-05-09 20:58:07 UTC
modified: 2006-05-16 09:11:52 UTC
expires: 2007-05-09 16:58:05 UTC
contact-hdl: wh...@rattlings.com#0
person: Vladimir Mironov
email: wh...@rattlings.com
address: P.O. Box 16
city: Moscow
state: --
postal-code: 117525
country: RU
phone: +7 095 2349449
source: joker.com live whois service
query-time: 0.036833
db-updated: 2006-07-31 09:05:32
More 221.206.84.92 sightings:
http://groups.google.com/groups/search?q=221.206.84.92+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/329d06e7b7c17192
More SPUR-M sightings:
http://groups.google.com/group/news.admin.net-abuse.email/search?q=SPUR-M&start=0&scoring=d&
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: