[email] [drugs] (fuchestbed.info - tucows.com - sportcron.com - mobilseans.com) don't miss
TomezNet
IP 217.165.1.146 dxb-as400.alshamil.net.ae
(at ns1.emirates.net.ae)
Spamvert:
fuchestbed.info IP 216.40.47.17
(SBL44852 - SBL45242) (at dns2.tucows.com /
redirect.managednsservice.com)
Frames Redirected to:
http://sportcron.com/ms/index.php
sportcron.com IP 125.208.7.120
(SBL45301) (now at ns1.euncn.com / primetelecom.cn)
www.mobilseans.com IP 125.208.7.120 and 69.25.142.3
www.mobilseans.com IP 69.25.142.3
(at Internap / eNom)
More WW3 DISTRIBUTERS LLC sightings:
http://groups.google.com/groups/search?q=%22WW3+DISTRIBUTERS+LLC%22+group%3A*abuse&start=0&scoring=d&
Title page => Man XL Gain 3 inches
© 2002 - 2005 WW3 DISTRIBUTERS LLC
More info below:
====================
X-SID-PRA: Kerry Lozano <kmzdsu...@cgrdc.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW40dTp7KSYS1bJvSSPRrArHpDUW/v/uFWxY=
Received: from tomts11-srv.bellnexxia.net ([209.226.175.55]) by
bay0-pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 10 Aug 2006 14:23:45 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip1.bellnexxia.net with ESMTP; 10 Aug 2006 17:23:15 -0400
Received: (qmail 3737 invoked by uid 110); 10 Aug 2006 17:23:15 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 3725 invoked from network); 10 Aug 2006 17:23:14 -0400
Received: from dxb-as400.alshamil.net.ae (217.165.1.146)
by xx..xx..xx.net with SMTP; 10 Aug 2006 17:23:14 -0400
Received: from ease.striker.ottawa.on.ca ([240.184.116.72]
helo=mail.nitros0.org)
by nevins.striker.ottawa.on.ca with esmtp (erickson 3.35 #1
(official))
id 534nlc-0061MM-00
for <kmzdsu...@cgrdc.com>; Thu, 10 Aug 2006 15:19:20 -0700
Message-Id: <E0A4nm6-...@mail.nitros8.org>
X-Sender: kmzdsu...@cgrdc.com
Date: Thu, 10 Aug 2006 21:20:20 -0100
From: "Kerry Lozano" <kmzdsu...@cgrdc.com>
To: xx..xx@xx..xx.com
Subject: don't miss
Return-Path: kmzdsu...@cgrdc.com
X-OriginalArrivalTime: 10 Aug 2006 21:23:45.0473 (UTC)
FILETIME=[42F67310:01C6BCC3]
Sensationall revoolution in medicine!
E''nlarge your p''enis up to 10 cm or up to 4 inches!
Its h'erbal solution what hasnt side effect, but has 100% guaranted
results!
Dont lose your chance and but know wihtout doubts, you will be
impressed with results!
Clisk here: http://fuchestbed.info
putnam advertisement lorinda organic ethereal aires impelled surrogate
thyratron thesaurus amplitude foster-child this'll shenanigan collide
skillful
-- END OF SPAM --
See:
IP 217.165.1.146 dxb-as400.alshamil.net.ae
http://www.moensted.dk/spam/?addr=217.165.1.146
inetnum: 217.165.0.0 - 217.165.47.255
netname: ETISALATADSL-EMIRNET
descr: Emirates Telecommunications Corporation
descr: P O Box 1150, Dubai, UAE
country: AE [United Arab Emirates]
route: 217.165.0.0/19
descr: ETISALAT route
origin: AS5384
notify: n...@emix.net.ae
mnt-by: MAINT-AS8966
changed: ne...@emix.net.ae
route: 217.165.0.0/18
descr: Emirates Telecommunications Corporation
descr: P.O. Box 1150, Dubai, UAE
origin: AS5384
route: 217.165.0.0/20
descr: EIM Via EMIX
origin: AS5384
mnt-by: ETISALAT-MAINT-MCI
changed: n...@emix.net.ae
ASN: 5384
ASN Name: EMIRATES-INTERNET (Emirates Internet)
Country IP Range: 217.164.0.0 to 217.165.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=5384
18 SBL listings for IPs under the responsibility of emirates.net.ae
http://www.spamhaus.org/sbl/listings.lasso?isp=emirates.net.ae
See:
fuchestbed.info IP 216.40.47.17
dns2.registerfly.com. [64.97.159.10 (NO GLUE; CNAME
encountered->ns2.mdnsservice.com.)] [CA]
dns1.registerfly.com. [216.40.47.18 (NO GLUE; CNAME
encountered->ns1.mdnsservice.com.)] [CA]
[from e9.info.afilias-nst.info]
fuchestbed.info has no MX records
216.40.47.17 PTR record: redirect.managednsservice.com
at dns2.tucows.com
ns3.mdnsservice.com [65.22.7.10]
ns1.mdnsservice.com [64.97.159.10]
ns2.mdnsservice.com [216.40.47.18]
More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&
http://www.moensted.dk/spam/?addr=216.40.47.17
http://www.spamhaus.org/query/bl?ip=216.40.47.17
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44852
216.40.47.17/32 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 22:51 GMT | SR04
giveawaysblog.info - redirect (come on Tucows!)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45242
216.40.47.16/31 is listed on the Spamhaus Block List (SBL)
06-Aug-2006 09:49 GMT | SR02
11 SBL/ROKSO listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
route: 216.40.32.0/20
descr: IBM
origin: AS19152
mnt-by: MAINT-AS19152
ASN: 19152
ASN Name: IBMCCH-TOR
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
Let see whois.afilias.info:
Domain ID:D14326129-LRMS
Domain Name: FUCHESTBED.INFO
Created On:08-Aug-2006 01:29:53 UTC
Last Updated On:08-Aug-2006 01:29:54 UTC
Expiration Date:08-Aug-2007 01:29:53 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:tu9bz4MeKcAo13lk
Registrant Name:guy leader
Registrant Organization:leader
Registrant Street1:rmb 1100 toolamba
Registrant Street2:
Registrant Street3:
Registrant City:toolamba
Registrant State/Province:NA
Registrant Postal Code:3614
Registrant Country:AU
Registrant Phone:+1.61428291267
Registrant Phone Ext.:
Registrant FAX:+1.61428291267
Registrant FAX Ext.:
Registrant Email: leader[]hostpique.com
Admin ID:tu9bz4MeKcAo13lk
Admin Name:guy leader
Admin Organization:leader
Admin Street1:rmb 1100 toolamba
Admin Street2:
Admin Street3:
Admin City:toolamba
Admin State/Province:NA
Admin Postal Code:3614
Admin Country:AU
Admin Phone:+1.61428291267
Admin Phone Ext.:
Admin FAX:+1.61428291267
Admin FAX Ext.:
Admin Email: lea...@hostpique.com
Billing ID:tu9bz4MeKcAo13lk
Billing Name:guy leader
Billing Organization:leader
Billing Street1:rmb 1100 toolamba
Billing Street2:
Billing Street3:
Billing City:toolamba
Billing State/Province:NA
Billing Postal Code:3614
Billing Country:AU
Billing Phone:+1.61428291267
Billing Phone Ext.:
Billing FAX:+1.61428291267
Billing FAX Ext.:
Billing Email: lea...@hostpique.com
Tech ID:tu9bz4MeKcAo13lk
Tech Name:guy leader
Tech Organization:leader
Tech Street1:rmb 1100 toolamba
Tech Street2:
Tech Street3:
Tech City:toolamba
Tech State/Province:NA
Tech Postal Code:3614
Tech Country:AU
Tech Phone:+1.61428291267
Tech Phone Ext.:
Tech FAX:+1.61428291267
Tech FAX Ext.:
Tech Email: lea...@hostpique.com
Name Server: DNS1.REGISTERFLY.COM
Name Server: DNS2.REGISTERFLY.COM
See frames source:
<html>
<frameset framespacing="0" rows="100%,*" cols="100%"
frameborder="no" border="0">
<frame name="XYZZY2" scrolling="auto"
src="http://www.mobilseans.com" noresize>
<frame name="XYZZY" scrolling="no" noresize>
<noframes>
<h1><a
href="http://www.mobilseans.com">http://www.mobilseans.com</a></h1>
<p>Please <a href="http://www.mobilseans.com">click here</a> to
view the non-framed version.</p>
</noframes>
</frameset>
</html>
See:
www.mobilseans.com IP 125.208.7.120 and 69.25.142.3
dns1.name-services.com A IN 3600 69.25.142.1
dns2.name-services.com A IN 3600 216.52.184.230
dns3.name-services.com A IN 3600 63.251.92.193
dns4.name-services.com A IN 3600 64.74.96.242
dns5.name-services.com A IN 3600 70.42.37.1
www.mobilseans.com has no MX records -> mobilseans.com has no MX
records
http://www.moensted.dk/spam/?addr=64.74.96.243
No PTR records exist for 64.74.96.243 at ns2.chg.pnap.net /
Internap Network Services PNAP-SEA-BLOCK4 (NET-64-74-0-0-1)
64.74.0.0 - 64.74.255.255
eNom PNAP-CHG-ENOM-RM-01 (NET-64-74-96-224-1)
64.74.96.224 - 64.74.96.255
CustName: eNom
NetRange: 64.74.96.224 - 64.74.96.255
CIDR: 64.74.96.224/27
NetName: PNAP-CHG-ENOM-RM-01
NetHandle: NET-64-74-96-224-1
route: 64.74.96.0/20
descr: PNAP-CHG
origin: AS19024
mnt-by: INAP-MAINT-RADB
changed: so...@internap.com
ASN: 19024
ASN Name: INTERNAP-BLK5
Country IP Range: 64.74.0.0 to 64.75.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=19024
34 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com
4 SBL listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: Registerfly.com
Contact: sup...@registerfly.com
Visit: http://www.registerfly.com
Domain name: mobilseans.com
Registrant Contact:
RegisterFly.com - Ref# 19824659
Whois Protection Service - ProtectFly.com
(u367gf1...@protectfly.com)
+1.8458183604
Fax: +1.8456984014
P.O. Box 969
Margaretville, NY 12455
US
Administrative Contact:
RegisterFly.com - Ref# 19824659
Whois Protection Service - ProtectFly.com
(fhxmvka...@protectfly.com)
+1.8458183604
Fax: +1.8456984014
P.O. Box 969
Margaretville, NY 12455
US
Technical Contact:
RegisterFly.com - Ref# 19824659
Whois Protection Service - ProtectFly.com
(smu017m...@protectfly.com)
+1.8458183604
Fax: +1.8456984014
P.O. Box 969
Margaretville, NY 12455
US
Status: Locked
Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com
Creation date: 18 Jun 2005 16:49:18
Expiration date: 18 Jun 2007 16:49:18
See:
sportcron.com IP 125.208.7.120
ns1.francophonievn.com [125.208.7.120] [TTL=172800] [CN]
ns2.francophonievn.com [125.208.7.120] [TTL=172800] [CN]
[sportcron.com has 1 MX record sportcron.com.(0)]
http://www.moensted.dk/spam/?addr=125.208.7.120
http://www.spamhaus.org/query/bl?ip=125.208.7.120
More 125.208.7.120 sightings:
http://groups.google.com/groups/search?q=125.208.7.120+group%3A*abuse
inetnum: 125.208.0.0 - 125.208.31.255
netname: PRIMETELECOM
descr: Beijing Primezone Technologies Inc.
descr: 44 Fu Cheng Road,Beijing,P.R.China
country: CN [China]
ASN: 24416
ASN Name: CNNIC-PRIMETELECOM-AP (Beijing Primezone Technologies Inc.)
Country IP Range: 125.208.0.0 to 125.208.63.255
http://www.cidr-report.org/cgi-bin/as-report?as=24416
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45301
125.208.7.120/32 is listed on the Spamhaus Block List (SBL)
08-Aug-2006 19:07 GMT | SR22
Spam webhosting - literatinorthwest.com
3 SBL listings for IPs under the responsibility of primetelecom.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=primetelecom.cn
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
dory
rue de la hausche 18
rossart, - 6880
BE
Domain name: SPORTCRON.COM
Administrative Contact:
Gerd Mueller, - Mue...@legalaxis.org
Haldenpfad 7
Halle, NA 86456
DE
493452307003 Fax: 493452307003
Technical Contact:
dory, michael mich...@pacificrimemail.com
rue de la hausche 18
rossart, - 6880
BE
+1.3227062109 Fax: +1.3227062109
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 05-Aug-2006.
Record expires on 22-Mar-2007.
Record created on 22-Mar-2006.
Domain servers in listed order:
DNS1.REGISTERFLY.COM 216.40.47.15
DNS2.REGISTERFLY.COM 216.40.47.16
DNS3.REGISTERFLY.COM 204.50.180.55
Domain status: REGISTRAR-LOCK
More Mueller[]legalaxis.org sightings:
http://groups.google.com/groups/search?q=%22Mu...@legalaxis.org%22+group%3A*abuse
More sightings:
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/3357e7ac07741cdf
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/6983ba9a430f0de7
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: