Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [drugs] (njquickdivorce.info - homemxman.com - dnsbenefit.com - mdnsservice.com - Tucows.com - REGISTERFLY.COM) You didnt answer

0 views
Skip to first unread message

TomezNet

unread,
Oct 18, 2006, 9:00:58 AM10/18/06
to
Received From:
IP 201.132.213.169 customer-hmo-213-169.megared.net.mx
(at MEGAMAIL.MEGARED.COM.MX /MEGACABLE.COM.MX)

Spamvert:
njquickdivorce.info IP 216.40.47.17
(SBL44852 - SBL45242) (at dns1.tucows.com /
redirect.managednsservice.com)

Redirected to:
http://homemxman.com/ms/?bb&

homemxman.com IP 211.161.3.50
(SBL47444 - ROK6138) (at gwbn.net.cn / c.in-addr.cn)

Web title:
Man XL Gain 3 inches
© 2002 - 2005 WW3 DISTRIBUTERS LLC

More WW3 DISTRIBUTERS LLC sightings:
http://groups.google.com/groups/search?q=%22WW3+DISTRIBUTERS+LLC%22+group%3A*abuse&start=0&scoring=d&

Tucows.com ignores any SPAM complaints for months!

Also More Tucows aka Fuckcows spam support sightings:
http://groups.google.com/groups/search?q=Tucows+group%3A*abuse&start=0&scoring=d&

More info below:
====================

X-SID-PRA: Minerva Story <No...@animacion.cl>
X-SID-Result: TempError
X-Message-Info: txF49lGdW41xCO2Corf8qbYSsjhe6anM+B1Z5ZP4w18=
Received: from tomts1-srv.bellnexxia.net ([209.226.175.113]) by
bay0-pamc1-f3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 17 Oct 2006 15:17:21 -0700
Received: from [MUNGED]
by toip3.bellnexxia.net with ESMTP; 17 Oct 2006 18:16:05 -0400
Received: (qmail 10029 invoked by uid 110); 17 Oct 2006 17:49:24 -0400
Delivered-To: [MUNGED]
Received: (qmail 10022 invoked from network); 17 Oct 2006 17:49:22
-0400
Received: from customer-hmo-213-169.megared.net.mx (201.132.213.169)
by [MUNGED] with SMTP; 17 Oct 2006 17:49:22 -0400
Return-Path: <No...@animacion.cl>
Received: from plato (201.132.213.169 [201.132.213.169])
by localhost (8.13.0/8.12.10) with SMTP id j5CLcYC5269029
for <[MUNGED]>; Tue, 17 Oct 2006 17:49:10 -0500
Received: (qmail 37952 invoked by uid 522); Tue, 17 Oct 2006 17:49:10
-0500
Mailing-List: contact cop...@lists.am-wi.com; run by ezmlm
List-ID: <cloister.aerodromio.com>
Precedence: bulk
List-Help: <mailto:No...@animacion.cl>
List-Unsubscribe: <mailto:No...@animacion.cl>
List-Post: <mailto:No...@animacion.cl>
List-Archive: http://valediction.abcsa.com.ar/announce/785
Delivered-To: mailing list No...@animacion.cl
Delivered-To: moderator for No...@animacion.cl
Received: (qmail 4951 invoked by uid 428); Tue, 17 Oct 2006 17:49:10
-0500
Received-SPF: pass (mudsling.albrightsflooring.com: local policy)
Mime-Version: 1.0 (Apple Message framework v621)
Message-Id:
<e942cf1034fba060...@cornbread.lincolntowncarsvc.com>
Content-Transfer-Encoding: 7bit
To: [MUNGED]
From: "Minerva Story" <No...@animacion.cl>
Subject: You didnt answer
Date: Tue, 17 Oct 2006 17:49:10 -0500
X-Mailer: Apple Mail (2.621)
X-Virus-Scanned: by amavisd-new at cheater.art-epidemic.ch
X-OriginalArrivalTime: 17 Oct 2006 22:17:21.0965 (UTC)
FILETIME=[043B2DD0:01C6F23A]

You've Seen Them On TV...
You've Read About Them In The Papers

Now you Can Order it From our online SHOP!

MX-MAN HAS HELPED OVER 1,000,000 MEN AROUND THE WORLD,GAIN
I'N'C'H'E'S...

Within the first 2 months 94% of subjects studied had reported
noticable gains of 2cm - 6cm.

100% Satisfaction Guarantee or we'll return your money back!

Clisk here http://njquickdivorce.info

One of her keys rattled in the lock - a new Kreig that would have
defeated even Tom Twyford himself, Paul thought - and then she was
striding down the hall again, the thud of her boot-heels mercifully
diminishing.
His eyes bulged madly from his livid face, and he seemed totally
unaware of who was holding him back from his darling.
She rushed across the room at him, thick legs pumping, knees flexing,
elbows chopping back and forth in the stale sickroom air like pistons.

-- END OF SPAM --

See Much More mdnsservice.com sightings:
http://groups.google.com/groups/search?q=mdnsservice.com+group%3A*abuse&start=0&scoring=d&

See:
IP 201.132.213.169 customer-hmo-213-169.megared.net.mx

http://www.moensted.dk/spam/?addr=201.132.213.169

More megared.net.mx sightings:
http://groups.google.com/groups/search?q=megared.net.mx+group%3A*abuse&start=0&scoring=d&

postmaster and abuse[]megared.net.mx are listed in rfc-ignorant.org
database

inetnum: 201.132/16
status: reallocated
owner: MegaCable SA de CV
ownerid: MX-MSCV17-LACNIC
responsible: NIC TECH

ASN: 13999
ASN Name: LACNIC-13999
Country IP Range: 201.128.0.0 to 201.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=13999

1 SBL listings for IPs under the responsibility of MEGACABLE.COM.MX
http://www.spamhaus.org/sbl/listings.lasso?isp=MEGACABLE.COM.MX

See:
njquickdivorce.info IP 216.40.47.17
dns3.registerfly.com [65.22.7.10 (NO GLUE; CNAME
encountered->ns3.mdnsservice.com)] [CA]
dns2.registerfly.com [64.97.159.10 (NO GLUE; CNAME
encountered->ns2.mdnsservice.com)] [CA]
dns1.registerfly.com [216.40.47.18 (NO GLUE; CNAME
encountered->ns1.mdnsservice.com)] [CA]

dns1.registerfly.com [216.40.47.18]
dns2.registerfly.com [64.97.159.10]
dns3.registerfly.com [65.22.7.10]

NS records at nameservers are:
ns3.mdnsservice.com [65.22.7.10]
ns2.mdnsservice.com [64.97.159.10]
ns1.mdnsservice.com [216.40.47.18]

Primary nameserver: ns1.mdnsservice.com
Hostmaster E-mail address: hostm...@mdnsservice.com

njquickdivorce.info has no MX records

http://www.moensted.dk/spam/?addr=216.40.47.17
http://www.spambag.org/cgi-bin/spambag?mailfrom=tucows
Spam Received See: http://www.sorbs.net/lookup.shtml?216.40.47.17
http://www.spamhaus.org/query/bl?ip=216.40.47.17

See Much More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44852
216.40.47.17/32 is listed on the Spamhaus Block List (SBL)

25-Jul-2006 22:51 GMT | SR04

giveawaysblog.info - redirect (come on Tucows!)
Summary report of 50th percentile resolved SpamCop spamvertised site
hosts -
8647 216.40.47.17
4104 216.40.47.18
pccwibs.info [216.40.47.17]
See: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42570

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45242
216.40.47.16/31 is listed on the Spamhaus Block List (SBL)

06-Aug-2006 09:49 GMT | SR02

haiweizhiye.info

OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1

route: 216.40.32.0/20
descr: IBM
origin: AS19152
mnt-by: MAINT-AS19152
ASN: 19152
ASN Name: IBMCCH-TOR
changed: dennis....@bellnexxia.com
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152

13 SBL/ROKSO listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com

Let see whois.afilias.info:

Domain ID:D15037202-LRMS
Domain Name: NJQUICKDIVORCE.INFO
Created On:16-Oct-2006 11:44:46 UTC
Last Updated On:16-Oct-2006 12:00:06 UTC
Expiration Date:16-Oct-2007 11:44:46 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:tuyx8n4E0gDoDp1x
Registrant Name: juan miselem
Registrant Organization:miselem
Registrant Street1:lomas no. 25-a col. la cima
Registrant Street2:
Registrant Street3:
Registrant City:san pedro garza garcia
Registrant State/Province:NA
Registrant Postal Code:66230
Registrant Country:MX
Registrant Phone: +528.83440080
Registrant Phone Ext.:
Registrant FAX: +528.83440080
Registrant FAX Ext.:
Registrant Email: juanmiselem[]ml1.net
Admin ID:tuyx8n4E0gDoDp1x
Admin Name:juan miselem
Admin Organization:miselem
Admin Street1:lomas no. 25-a col. la cima
Admin Street2:
Admin Street3:
Admin City:san pedro garza garcia
Admin State/Province:NA
Admin Postal Code:66230
Admin Country:MX
Admin Phone:+528.83440080
Admin Phone Ext.:
Admin FAX:+528.83440080
Admin FAX Ext.:
Admin Email: juanm...@ml1.net
Billing ID:tuyx8n4E0gDoDp1x
Billing Name:juan miselem
Billing Organization:miselem
Billing Street1:lomas no. 25-a col. la cima
Billing Street2:
Billing Street3:
Billing City:san pedro garza garcia
Billing State/Province:NA
Billing Postal Code:66230
Billing Country:MX
Billing Phone:+528.83440080
Billing Phone Ext.:
Billing FAX:+528.83440080
Billing FAX Ext.:
Billing Email: juanm...@ml1.net
Tech ID:tuyx8n4E0gDoDp1x
Tech Name:juan miselem
Tech Organization:miselem
Tech Street1:lomas no. 25-a col. la cima
Tech Street2:
Tech Street3:
Tech City:san pedro garza garcia
Tech State/Province:NA
Tech Postal Code:66230
Tech Country:MX
Tech Phone:+528.83440080
Tech Phone Ext.:
Tech FAX:+528.83440080
Tech FAX Ext.:
Tech Email: juanm...@ml1.net
Name Server:DNS1.REGISTERFLY.COM
Name Server:DNS2.REGISTERFLY.COM
Name Server:DNS3.REGISTERFLY.COM

See:
homemxman.com IP 211.161.3.50
ns1.dnsbenefit.com [211.161.3.50] [TTL=172800] [CN]
ns2.dnsbenefit.com [211.161.3.50] [TTL=172800] [CN]

[homemxman.com has 1 MX record homemxman.com.(0)]

http://www.moensted.dk/spam/?addr=211.161.3.50
http://abuse.net/sbl.phtml?IP=211.161.3.50
http://www.spamsources.fabel.dk/ip/211.161.3.50

inetnum: 211.161.3.0 - 211.161.3.127
netname: GWBN-BJ-BALIZHUANGBEILI
descr: FOR GWBN BEIJING BALIZHUANGBEILI RESIDENTIAL COMMUNITY
BROADBAND USERS' ACCESS
country: CN [China]
mnt-by: MAINT-CNNIC-AP
changed: lzh...@gwbn.net.cn
person: Jian Meng
nic-hdl: JM97-AP
e-mail: meng...@gwbn.net.cn
changed: ip...@cnnic.net.cn
changed: she...@cnnic.cn

route: 211.161.0.0/20
descr: citic network co.,ltd
bj-gw
origin: as18118
mnt-by: MAINT-AS17430
changed: m...@citicnet.com

route: 211.161.0.0/20
descr: China United Telecom
origin: AS4837
mnt-by: MAINT-AS4837
changed: jin...@bj.cnuninet.net
ASN: 18118
ASN Name: CITICNET-AP (CITIC Networks Management Co.,Ltd.)
Country IP Range: 211.160.0.0 to 211.167.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=18118

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL47444
211.161.3.0/24 is listed on the Spamhaus Block List (SBL/ROKSO)

14-Oct-2006 09:41 GMT | SR04

Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov
Dirty block: seems to be run by criminal Chinese spam agent

17 SBL/ROKSO listings for IPs under the responsibility of gwbn.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=gwbn.net.cn
Let see whois:
Registrar: REGISTERFLY.COM, INC.

Registrant:
grattatrola
via gramsci 44
alessandria, NA 15100
IT

Domain name: HOMEMXMAN.COM

Administrative Contact:
grattatrola, roberto roberto[]recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185

Technical Contact:
grattatrola, roberto rob...@recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185

Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 24-Sep-2006.
Record expires on 23-Sep-2007.
Record created on 23-Sep-2006.

Domain servers in listed order:
NS2.DNSBENEFIT.COM 211.161.3.50
NS1.DNSBENEFIT.COM 211.161.3.50

More roberto[]recordonilne.com sightings:
http://groups.google.com/groups/search?q=%22ro...@recordonilne.com%22+group%3A*abuse

See:
ns1.dnsbenefit.com IP 211.161.3.50

ns1.dnsbenefit.com has no MX records -> dnsbenefit.com has no MX
records

http://www.moensted.dk/spam/?addr=211.161.3.50
http://www.spamhaus.org/query/bl?ip=211.161.3.50

Let see whois.registerfly.com:
Registrar: REGISTERFLY.COM, INC.

Registrant:
grattatrola
via gramsci 44
alessandria, NA 15100
IT

Domain name: DNSBENEFIT.COM

Administrative Contact:
grattatrola, roberto roberto[]recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185

Technical Contact:
grattatrola, roberto rob...@recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185

Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 23-Sep-2006.
Record expires on 23-Sep-2007.
Record created on 23-Sep-2006.

Domain servers in listed order:
DNS1.REGISTERFLY.COM 216.40.47.15
DNS3.REGISTERFLY.COM 204.50.180.55
DNS2.REGISTERFLY.COM 216.40.47.16

Also More REGISTERFLY.COM spam support sightings:
http://groups.google.com/groups/search?q=REGISTERFLY.COM+group%3A*abuse&start=0&scoring=d&

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/6ba921abd86a688a

And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/873f84e9d0be0ff6

Cheers, Tomez


--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages