[email] [drugs] [84.180.249.163] (inlettexas.info - Tucows - managednsservice.com - hotworldwide.net - superready.net - RegisterFly.com) Lindsay Drops Out of Upcoming Film
TomezNet
IP 84.180.249.163 p54b4f9a3.dip.t-dialin.net
(at dns04.btx.dtag.de / telekom.de / t-ipnet.de)
Spamvert:
inlettexas.info IP 216.40.47.17
(at dns1.tucows.com / redirect.managednsservice.com)
See OLD => SBL44852 / SBL45242
Tucows.com and RegisterFly.com are ignoring any SPAM complaints for
months!
Frame load / redirected to:
www.hotworldwide.net IP 124.42.8.149
(at ns1.superready.net / dns.sinnet.com.cn / asianetcom.com)
www.superready.net IP 72.51.37.200
(at NS2.SERVERBEACH.COM / peer1.net / ns1.geodns.net)
All domains (identical spam) divyatimes.info, kingsreport.info,
hffzxw.info, itcongress.info, thaipoon.info, marketableincome.info,
moneyask.info and hotworldwide.net, superready.net
=> Registrar: RegisterFly.com, Inc.
postmaster and ab...@RegisterFly.com are listed in rfc-ignorant.org
database
SEE Also More Tucows spam support sightings:
http://groups.google.com/groups/search?q=Tucows+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Chang Elisa <Sle...@ekmdesign.net>
X-Message-Info: txF49lGdW41Hi3j4Y/xJgRUgMpecpT/ayN6poA940pE=
Received: from tomts17-srv.bellnexxia.net ([209.226.175.71]) by bay0-
pamc1-f6.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 5 Feb 2007 00:24:25 -0800
Received: from [MUNGED]
by toip21.srvr.bell.ca with ESMTP; 05 Feb 2007 03:24:20 -0500
Received: (qmail 13633 invoked by uid 110); 5 Feb 2007 03:24:20 -0500
Delivered-To: [MUNGED]
Received: (qmail 13626 invoked from network); 5 Feb 2007 03:24:20
-0500
Received: from p54b4f9a3.dip.t-dialin.net (84.180.249.163)
by [MUNGED] with SMTP; 5 Feb 2007 03:24:20 -0500
Message-ID: <02dd01c748fe$080474dc$a3f9...@p54B4F9A3.dip.t-
dialin.net>
From: "Chang Elisa" <Sle...@ekmdesign.net>
To: [MUNGED]
Subject: Lindsay Drops Out of Upcoming Film
Date: Mon, 05 Feb 2007 08:21:31 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1441
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Return-Path: Sle...@ekmdesign.net
X-OriginalArrivalTime: 05 Feb 2007 08:24:25.0871 (UTC)
FILETIME=[0C02A9F0:01C748FF]
Hello,
Now you can order Authentic Viagra directly from Pfizer.
Here: http://inlettexas.info
All prices are tax/vat free and free same-day worldwide shipping also
included.
--
[MUNGED]
-- END OF SPAM --
SEE Also More RegisterFly.com spam support sightings:
http://groups.google.com/groups/search?q=RegisterFly.com+group%3A*abuse&start=0&scoring=d&
See:
IP 84.180.249.163 p54b4f9a3.dip.t-dialin.net
http://www.moensted.dk/spam/?addr=84.180.249.163
http://www.spamhaus.org/query/bl?ip=84.180.249.163
http://www.spamhaus.org/pbl/query/PBL043009
postmaster and abuse[]t-ipconnect.de are listed in rfc-ignorant.org
database
abuse[]telekom.de is listed in rfc-ignorant.org database
whois, postmaster and abuse[]dtag.de are listed in rfc-ignorant.org
database
inetnum: 84.136.0.0 - 84.191.255.255
netname: DTAG-DIAL20
descr: Deutsche Telekom AG
changed: ripe...@telekom.de
person: DTAG Global IP-Addressing
address: Deutsche Telekom AG
route: 84.128.0.0/10
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
changed: b...@nic.dtag.de
ASN: 3320
ASN Name: DTAG (Deutsche Telekom AG)
Country (per IP registrar): DE [Germany]
Country IP Range: 84.128.0.0 to 84.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3320
4 SBL/ROKSO listings for IPs under the responsibility of telekom.de
http://www.spamhaus.org/sbl/listings.lasso?isp=telekom.de
6 SBL/ROKSO listings for IPs under the responsibility of dtag.de
http://www.spamhaus.org/SBL/listings.lasso?isp=dtag.de
Spamvert URL:
http://inlettexas.info/
<html>
<framesetframespacing="0"rows="100%,*"cols="100%"frameborder="no"border="0">
<framename="XYZZY2"scrolling="auto"src="http://
www.hotworldwide.net"noresize>
<framename="XYZZY"scrolling="no"noresize>
<noframes>
<h1><ahref="http://www.hotworldwide.net">http://www.hotworldwide.net</
a></h1>
<p>Please<ahref="http://www.hotworldwide.net">clickhere</
a>toviewthenon-framedversion.</p>
</noframes>
</frameset>
</html>
See:
inlettexas.info IP 216.40.47.17
dns2.registerfly.com [64.97.159.10 (NO GLUE)] [CA]
dns1.registerfly.com [216.40.47.18 (NO GLUE)] [CA]
NS records at nameservers are:
ns1.mdnsservice.com [216.40.47.18]
ns3.mdnsservice.com [65.22.7.10]
ns2.mdnsservice.com [64.97.159.10]
SOA record [TTL=300] is:
Primary nameserver: ns1.mdnsservice.com
Hostmaster E-mail address: hostm...@mdnsservice.com
Serial #: 821501751
inlettexas.info has no MX records
http://www.moensted.dk/spam/?addr=216.40.47.17
Spam Received Recently See: http://www.sorbs.net/lookup.shtml?
216.40.47.17
216.40.47.17 PTR record: redirect.managednsservice.com
at dns1.tucows.com
So Much More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&
See OLD => SBL44852 / SBL45242
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Assignment
RNOCEmail: dnsa...@tucows.com
RTechEmail: dns...@tucows.com
route: 216.40.32.0/20
descr: Tucows International
origin: AS15348
mnt-by: MAINT-AS15348
changed: ddiac...@tucows.com
ASN: 19152
ASN Name: IBMCCH-TOR
Country (per IP registrar): CA [Canada]
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
1 SBL listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
Let see whois.afilias.info:
Domain ID: D16270498-LRMS
Domain Name: INLETTEXAS.INFO
Created On: 28-Jan-2007 14:27:23 UTC
Last Updated On: 28-Jan-2007 14:27:24 UTC
Expiration Date: 28-Jan-2008 14:27:23 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status: CLIENT TRANSFER PROHIBITED
Status: CLIENT UPDATE PROHIBITED
Status: TRANSFER PROHIBITED
Registrant ID: tuV20luu6pdCJkGO
Registrant Name: Peter Kurelja
Registrant Organization: Kurelja
Registrant Street1: PO Box 239
Registrant Street2:
Registrant Street3:
Registrant City: West Milton
Registrant State/Province: PA
Registrant Postal Code: 17844
Registrant Country: US
Registrant Phone: +1.5704126667
Registrant Phone Ext.:
Registrant FAX: +1.5704126667
Registrant FAX Ext.:
Registrant Email: heartwoodpjk[]dejazzd.com
Admin ID: tuV20luu6pdCJkGO
Admin Name:Peter Kurelja
Admin Organization:Kurelja
Admin Street1:PO Box 239
Admin Street2:
Admin Street3:
Admin City:West Milton
Admin State/Province:PA
Admin Postal Code:17844
Admin Country:US
Admin Phone:+1.5704126667
Admin Phone Ext.:
Admin FAX:+1.5704126667
Admin FAX Ext.:
Admin Email: heartw...@dejazzd.com
Billing ID:tuV20luu6pdCJkGO
Billing Name:Peter Kurelja
Billing Organization:Kurelja
Billing Street1:PO Box 239
Billing Street2:
Billing Street3:
Billing City:West Milton
Billing State/Province:PA
Billing Postal Code:17844
Billing Country:US
Billing Phone:+1.5704126667
Billing Phone Ext.:
Billing FAX:+1.5704126667
Billing FAX Ext.:
Billing Email: heartw...@dejazzd.com
Tech ID:tuV20luu6pdCJkGO
Tech Name:Peter Kurelja
Tech Organization:Kurelja
Tech Street1:PO Box 239
Tech Street2:
Tech Street3:
Tech City:West Milton
Tech State/Province:PA
Tech Postal Code:17844
Tech Country:US
Tech Phone:+1.5704126667
Tech Phone Ext.:
Tech FAX:+1.5704126667
Tech FAX Ext.:
Tech Email: heartw...@dejazzd.com
Name Server: DNS1.REGISTERFLY.COM
Name Server: DNS2.REGISTERFLY.COM
See More Registrant email: heartwoodpjk[]dejazzd.com sightings:
http://groups.google.com/groups/search?q=%22heart...@dejazzd.com%22+group%3A*abuse
See:
Title => Ed Pills - Don't let ED affect your sex life. Take control.
www.hotworldwide.net IP 124.42.8.149
ns1.superready.net [124.42.8.149] [TTL=172800] [CN]
ns2.superready.net [124.42.8.149] [TTL=172800] [CN]
SOA record [TTL=600] is:
Primary nameserver: ns1.superready.net
Hostmaster E-mail address: email.mail.com
Serial #: 617
1 MX record is:
0 hotworldwide.net [TTL=600] IP=124.42.8.149 [TTL=600] [CN]
www.hotworldwide.net has no MX records -> [hotworldwide.net has 1 MX
record hotworldwide.net (0)]
http://www.moensted.dk/spam/?addr=124.42.8.149
Blocked - see http://www.spambag.org/cgi-bin/spambag?mailfrom=sinnet
No PTR records exist for 124.42.8.149 at dns.sinnet.com.cn
abuse[]sinnet.com.cn is listed in rfc-ignorant.org database
abuse[]asianetcom.com is listed in rfc-ignorant.org database
More 124.42.8.149 sightings:
http://groups.google.com/groups/search?q=124.42.8.149+group%3A*abuse
inetnum: 124.42.0.0 - 124.42.127.255
netname: SINNET
descr: Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr: 2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr: Dong Cheng Dstrict,Beijing
nic-hdl: CH471-AP
e-mail: lic...@sinnet.com.cn
changed: ip...@cnnic.cn
person: Wang Huijun
nic-hdl: WH271-AP
e-mail: che...@sinnet.com.cn
person: Chen hao
nic-hdl: CH471-CN
e-mail: lic...@sinnet.com.cn
route: 124.42.0.0/17
descr: Asia Netcom (proxy-registered route object)
origin: AS23844
remarks: This route object is for a ANC customer route
notify: anc.i...@asianetcom.com
mnt-by: MAINT-AS10026
changed: anc.i...@asianetcom.com
route: 124.42.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: y...@chinaunicom.com.cn
ASN: 23844
ASN Name: BJ-GUANGHUAN-AP (Beijing Guanghuan Xinwang Digital)
Country (per IP registrar): CN [China]
Country IP Range: 124.42.0.0 to 124.42.127.255
http://www.cidr-report.org/cgi-bin/as-report?as=23844
3 SBL listings for IPs under the responsibility of sinnet.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=sinnet.com.cn
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
grattatrola, roberto rob...@recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
More hotworldwide.net sightings:
http://groups.google.com/groups?q=hotworldwide.net+group%3A*abuse
See:
ns1.superready.net IP 124.42.8.149
ns1.superready.net has no MX records -> superready.net has no MX
records
http://www.moensted.dk/spam/?addr=124.42.8.149
See:
www.superready.net IP 72.51.37.200
dns1.registerfly.com [216.40.47.18] [TTL=172800] [CA]
dns2.registerfly.com [64.97.159.10] [TTL=172800] [CA]
dns3.registerfly.com [65.22.7.10] [TTL=172800] [CA]
NS records at nameservers are:
ns1.mdnsservice.com [216.40.47.18]
ns3.mdnsservice.com [65.22.7.10]
ns2.mdnsservice.com [64.97.159.10]
SOA record [TTL=300] is:
Primary nameserver: ns1.mdnsservice.com
Hostmaster E-mail address: hostmaster.mdnsservice.com
Serial #: 819168045
http://www.moensted.dk/spam/?addr=72.51.37.200
More 72.51.37.200 sightings:
http://groups.google.com/groups/search?q=72.51.37.200+group%3A*abuse
No PTR records exist for 72.51.37.200
at NS2.SERVERBEACH.COM / ns1.geodns.net
Peer 1 Network Inc. PEER1-BLK-08 (NET-72-51-0-0-1)
72.51.0.0 - 72.51.63.255
ServerBeach PEER1-SERVERBEACH-06A (NET-72-51-32-0-1)
72.51.32.0 - 72.51.47.255
OrgName: Peer 1 Network Inc.
OrgID: PER1
NetRange: 72.51.0.0 - 72.51.63.255
CIDR: 72.51.0.0/18
NetName: PEER1-BLK-08
NetHandle: NET-72-51-0-0-1
Parent: NET-72-0-0-0-0
NetType: Direct Allocation
RNOCEmail: net-...@peer1.net
OrgName: ServerBeach
OrgID: SERVE-32
NetRange: 72.51.32.0 - 72.51.47.255
CIDR: 72.51.32.0/20
NetName: PEER1-SERVERBEACH-06A
NetHandle: NET-72-51-32-0-1
Parent: NET-72-51-0-0-1
NetType: Reallocated
RTechEmail: hostm...@serverbeach.com
OrgTechEmail: ipa...@serverbeach.com
whois and abuse[]serverbeach.com are listed in rfc-ignorant.org
database
route: 72.51.32.0/20
descr: Peer1 Route Object
origin: as13768
mnt-by: maint-as13768
changed: v...@peer1.net
ASN: 13768
ASN Name: PEER1
Country (per IP registrar): US [United States]
Country IP Range: 72.51.0.0 to 72.51.63.255
http://www.cidr-report.org/cgi-bin/as-report?as=13768
1 SBL/ROKSO listings for IPs under the responsibility of
serverbeach.com
http://www.spamhaus.org/sbl/listings.lasso?isp=serverbeach.com
1 SBL listings for IPs under the responsibility of peer1.net
http://www.spamhaus.org/sbl/listings.lasso?isp=peer1.net
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
grattatrola
via gramsci 44
alessandria, NA 15100
IT
Domain name: SUPERREADY.NET
Administrative Contact:
grattatrola, roberto roberto[]recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185
postmaster and abuse[]RegisterFly.com are listed in rfc-ignorant.org
database
See More Registrant email: roberto[]recordonilne.com sightings:
http://groups.google.com/groups/search?q=%22ro...@recordonilne.com%22+group%3A*abuse
More superready.net sightings:
http://groups.google.com/groups/search?q=superready.net+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/70a9754735340687
And:
http://groups.google.com/group/news.admin.net-abuse.email/msg/fcef8fe0eaf52022
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: