Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [drugs - ED Pills] [66.18.209.77] (direttaspettacoli.com / uisxksdcinaltd.com / dnsburger.com / name-services.com / genuine-pharmacy.com / eNom.com) Get now your pack of Genuine Cialis!

0 views
Skip to first unread message

TomezNet

unread,
May 25, 2007, 1:51:39 PM5/25/07
to
Received From:
IP 66.18.209.77 dsl-lndm-66-18-209-77-edm.nucleus.com

Spamvert:
www.direttaspettacoli.com IP 63.251.92.195
direttaspettacoli.com IP 216.52.184.240
direttaspettacoli.com IP 69.25.142.3
direttaspettacoli.com IP 64.74.96.243
(at name-services.com / eNom.com / internap.com)

Redirected to:
http://www.genuine-pharmacy.com/

AND Redirected Again at eNom to:
https://www.genuine-pharmacy.com/

www.genuine-pharmacy.com new IP 63.251.92.195
genuine-pharmacy.com new IP 216.52.184.240
(now at name-services.com / eNom.com / internap.com)

(OLD IP 124.42.127.50)
(SBL54680) (was at sinnet.com.cn)

Redirected Again at eNom to:
http://205.uisxksdcinaltd.com/

205.uisxksdcinaltd.com IP 221.11.71.125
(SBL52714) (at cncgroup-sn)

Title:
Ed Pills - Don't let ED affect your sex life. Take control.

Much More Ed Pills sightings:
http://groups.google.com/groups/search?q=%22Ed+Pills%22+group%3A*abuse&start=0&scoring=d&

Much More info below:
====================

Return-Path: <sa...@direttaspettacoli.com>
Delivered-To: [MUNGED]
Received: (qmail 11458 invoked from network); 25 May 2007 04:08:56
-0400
Received: from dsl-lndm-66-18-209-77-edm.nucleus.com (66.18.209.77)
by [MUNGED] with SMTP; 25 May 2007 04:08:56 -0400
Message-ID: <7e4201c79ea3$007fc800$4dd11242@dsl-lndm-66-18-209-77-
edm.nucleus.com>
From: "Sales Department" <sa...@direttaspettacoli.com>
To: [MUNGED]
Subject: Get now your pack of Genuine Cialis!
Date: Fri, 25 May 2007 08:08:20 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1441
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Spam-Prev-Subject: Get now your pack of Genuine Cialis!

Now you can order Authentic Viagra directly from Pfizer

Here: http://www.direttaspettacoli.com/

All prices are tax/vat free and same-day free worldwide shipping also
included.

--
[MUNGED]

-- END OF SPAM --

See more eNom long connection to ED Pills with redirection, hosting
and domain registration services:
http://groups.google.com/groups/search?q=216.40.47.17+eNom+group%3A*abuse&qt_s=Search

See:
IP 66.18.209.77 dsl-lndm-66-18-209-77-edm.nucleus.com

http://www.moensted.dk/spam/?addr=66.18.209.77
Bad host, no cookie - see http://njabl.org/lookup?66.18.209.77

OrgName: Nucleus Inc.
OrgID: NUCLE-1
NetRange: 66.18.192.0 - 66.18.255.255
CIDR: 66.18.192.0/18
NetName: NUCLEUS
NetHandle: NET-66-18-192-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation

Prefix: 66.18.192.0/18
Prefix Name: Nucleus Information Service Inc
AS: 26546
AS Name: Nucleus Nucleus Information Service Inc
http://www.cidr-report.org/cgi-bin/as-report?as=26546

More nucleus.com sightings:
http://groups.google.com/groups/search?q=nucleus.com+group%3A*abuse&start=0&scoring=d&

Spamver URL:
http://www.direttaspettacoli.com/

See sorce code:
<head><title>Object moved</title></head><body><h1>Object Moved</
h1>This object may be found <a HREF="http://www.genuine-
pharmacy.com">here</a>.</body>

Redirected to:
http://www.genuine-pharmacy.com/

AND Redirected again at eNom to:
https://www.genuine-pharmacy.com/

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://www.genuine-
pharmacy.com/">here</a>.</p>
</body></html>

The same as was for redavisandsoninc.com on the same eNom IP.

See:
direttaspettacoli.com IP 216.52.184.240
www.direttaspettacoli.com IP 63.251.92.195
direttaspettacoli.com IP 69.25.142.3
direttaspettacoli.com IP 64.74.96.243
dns1.name-services.com [69.25.142.1] [TTL=172800] [US]
dns2.name-services.com [216.52.184.230] [TTL=172800] [US]
dns3.name-services.com [63.251.92.193] [TTL=172800] [US]
dns4.name-services.com [64.74.96.242] [TTL=172800] [US]
dns5.name-services.com [70.42.37.1] [TTL=172800] [US]

SOA record [TTL=1800] is:
Primary nameserver: dns1.name-services.com
Hostmaster E-mail address: in...@name-services.com
Serial #: 2002050701

1 MX record are:
10 mail.direttaspettacoli.com. [TTL=1800] IP=64.92.172.210 [TTL=1800]
[US]

64.92.172.210 = 210.172.92.64.static.reverse.layeredtech.com

mail.direttaspettacoli.com appears to be an open relay: 250 ok

postmaster and abuse[]layeredtech.com are listed in rfc-ignorant.org
database

IP: 64.92.172.210
Reverse: 210.0-24.172.92.64.in-addr.arpa
211.172.92.64.static.reverse.layeredtech.com
Prefix: 64.92.160.0/20
Prefix Name: error
AS: 3561
AS Name: SAVVIS SAVVIS Communications
http://www.cidr-report.org/cgi-bin/as-report?as=3561

See:
direttaspettacoli.com IP 216.52.184.240

http://www.moensted.dk/spam/?addr=216.52.184.240
http://www.apews.org/?page=test&C=82&E=162808&ip=216.52.184.240
Blocked - see http://www.spambag.org/cgi-bin/spambag?mailfrom=enom
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?216.52.184.240

Much More 216.52.184.240 sightings:
http://groups.google.com/groups/search?q=216.52.184.240+group%3A*abuse&start=0&scoring=d&

Internap Network Services PNAP-8-98 (NET-216-52-0-0-1)
216.52.0.0 - 216.52.255.255
eNom PNAP-DAL-ENOM-RM-01 (NET-216-52-184-224-1)
216.52.184.224 - 216.52.184.255

OrgName: Internap Network Services
OrgID: PNAP
NetRange: 216.52.0.0 - 216.52.255.255
CIDR: 216.52.0.0/16
NetName: PNAP-8-98
NetHandle: NET-216-52-0-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.PNAP.NET
NameServer: NS2.PNAP.NET

CustName: eNom
NetRange: 216.52.184.224 - 216.52.184.255
CIDR: 216.52.184.224/27
NetName: PNAP-DAL-ENOM-RM-01
NetHandle: NET-216-52-184-224-1
Parent: NET-216-52-0-0-1
NetType: Reassigned

route: 216.52.176.0/20
descr: PNAP-DAL
origin: AS12179
mnt-by: INAP-MAINT-RADB
changed: pe...@internap.com
Prefix: 216.52.176.0/20
Prefix Name: PNAP DAL PNAP DAL
AS: 12179
AS Name: INTERNAP-2BLK Internap Network Services
http://www.cidr-report.org/cgi-bin/as-report?as=12179

17 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com

5 SBL/ROKSO listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com

See:
www.direttaspettacoli.com IP 63.251.92.195

www.direttaspettacoli.com has no MX records -> [direttaspettacoli.com
has 1 MX record mail.direttaspettacoli.com (10)]

http://www.sorbs.net/lookup.shtml?63.251.92.195

Much More 63.251.92.195 sightings:
http://groups.google.com/groups/search?q=63.251.92.195+group%3A*abuse&start=0&scoring=d&

Internap Network Services NETBLK-PNAP-11-99 (NET-63-251-0-0-1)
63.251.0.0 - 63.251.255.255
eNom INAP-WDC002-ENOM-1942 (NET-63-251-92-192-1)
63.251.92.192 - 63.251.92.255

CustName: eNom
Address: 2002 156th Ave NE
NetRange: 63.251.92.192 - 63.251.92.255
CIDR: 63.251.92.192/26
NetName: INAP-WDC002-ENOM-1942
NetHandle: NET-63-251-92-192-1
Parent: NET-63-251-0-0-1
NetType: Reassigned

route: 63.251.80.0/20
descr: PNAP-WDC
descr: InterNAP
origin: AS10913
mnt-by: INAP-MAINT-MCI
changed: jo...@internap.com
Prefix: 63.251.80.0/20
Prefix Name: PNAP WDC InterNAP PNAP WDC InterNAP
AS: 10913
AS Name: INTERNAP-BLK Internap Network Services
http://www.cidr-report.org/cgi-bin/as-report?as=10913

See:
direttaspettacoli.com IP 69.25.142.3

http://www.moensted.dk/spam/?addr=69.25.142.3
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?69.25.142.3

Internap Network Services PNAP-12-2002 (NET-69-25-0-0-1)
69.25.0.0 - 69.25.255.255
eNom INAP-SEF-ENOM-1761 (NET-69-25-142-0-1)
69.25.142.0 - 69.25.142.63

Much More 69.25.142.3 sightings:
http://groups.google.com/groups?q=69.25.142.3+group%3A*abuse&start=0&scoring=d&

See:
direttaspettacoli.com IP 64.74.96.243

http://www.moensted.dk/spam/?addr=64.74.96.243
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?64.74.96.243

Internap Network Services PNAP-SEA-BLOCK4 (NET-64-74-0-0-1)
64.74.0.0 - 64.74.255.255
eNom PNAP-CHG-ENOM-RM-01 (NET-64-74-96-224-1)
64.74.96.224 - 64.74.96.255

Much More 64.74.96.243 sightings:
http://groups.google.com/groups/search?q=64.74.96.243+group%3A*abuse&start=0&scoring=d&

Let see whois:
Registration Service Provided By: eNom, Inc.
Contact: in...@eNom.com

Domain name: direttaspettacoli.com

Administrative Contact:
excellior dmg
tino schwieger (tino.schwieger[]gmail.com)
+49.4158796170
Fax: -
rheinstr. 4
grenzach, ADEN-W|RTTEMBERG 79685
DE

Technical Contact:
excellior dmg
tino schwieger (tino.sc...@gmail.com)
+49.4158796170
Fax: -
rheinstr. 4
grenzach, ADEN-W|RTTEMBERG 79685
DE

Registrant Contact:
excellior dmg
tino schwieger (tino.sc...@gmail.com)
+49.4158796170
Fax: -
rheinstr. 4
grenzach, ADEN-W|RTTEMBERG 79685
DE

Status: Locked

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 22 May 2007 21:41:15
Expiration date: 22 May 2008 21:41:15

Redirected to:
https://www.genuine-pharmacy.com/

And Redirected Again at eNom to:
http://205.uisxksdcinaltd.com/

205.uisxksdcinaltd.com IP 221.11.71.125


See:
www.genuine-pharmacy.com IP

(OLD IP 124.42.127.50)
(SBL54680) (was at sinnet.com.cn)

dns1.name-services.com [69.25.142.1] [TTL=172800] [US]
dns2.name-services.com [216.52.184.230] [TTL=172800] [US]
dns3.name-services.com [63.251.92.193] [TTL=172800] [US]
dns4.name-services.com [64.74.96.242] [TTL=172800] [US]
dns5.name-services.com [70.42.37.1] [TTL=172800] [US]

SOA record [TTL=1800] is:
Primary nameserver: dns1.name-services.com
Hostmaster E-mail address: in...@name-services.com
Serial #: 2002050701

1 MX record is:
10 mail.genuine-pharmacy.com [TTL=1800] IP=124.42.8.150 [TTL=1800]
[CN]

www.genuine-pharmacy.com has no MX records -> [genuine-pharmacy.com
has 1 MX record mail.genuine-pharmacy.com (10)]

http://www.moensted.dk/spam/?addr=

SEE
mail.genuine-pharmacy.com MX record IP 124.42.8.150

http://www.moensted.dk/spam/?addr=124.42.8.150
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?124.42.8.150

inetnum: 124.42.0.0 - 124.42.127.255
netname: SINNET
descr: Beijing Guanghuan Xinwang Digital Technology co.Ltd
person: Chen hao
nic-hdl: CH471-AP
e-mail: lic...@sinnet.com.cn
person: Wang Huijun
nic-hdl: WH271-AP
e-mail: che...@sinnet.com.cn

abuse[]sinnet.com.cn is listed in rfc-ignorant.org database

Prefix: 124.42.0.0/19
Prefix Name: error
AS: 23844
AS Name: BJ GUANGHUAN AP Beijing Guanghuan Xinwang Digital Technology
Co , LTD
http://www.cidr-report.org/cgi-bin/as-report?as=23844

route: 124.42.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: y...@chinaunicom.com.cn
http://www.cidr-report.org/cgi-bin/as-report?as=4134

SEE OLD Listing for IP 124.42.127.50
http://www.spamhaus.org/query/bl?ip=124.42.127.50
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54680
124.42.127.50/32 is listed on the Spamhaus Block List (SBL)

21-May-2007 13:49 GMT | SR22

Spam webhosting - genuine-pharmacy.com

1 SBL listings for IPs under the responsibility of sinnet.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=sinnet.com.cn

Let see whois:
Domain name: genuine-pharmacy.com

Administrative Contact:
trustedmedicals
Daffis Maxime (admin[]wiccanwell.org)
+33.870447578
Fax: -
54 Bd Frederic Arnaud
Midi-Pyrinies, SAINT-GIRONS 09200
FR

Technical Contact:
trustedmedicals
Daffis Maxime (ad...@wiccanwell.org)
+33.870447578
Fax: -
54 Bd Frederic Arnaud
Midi-Pyrinies, SAINT-GIRONS 09200
FR

Registrant Contact:
trustedmedicals
Daffis Maxime (ad...@wiccanwell.org)
+33.870447578
Fax: -
54 Bd Frederic Arnaud
Midi-Pyrinies, SAINT-GIRONS 09200
FR

Status: Locked

Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com

Creation date: 03 May 2007 15:20:01
Expiration date: 03 May 2008 15:20:01

More genuine-pharmacy.com sightings:
http://groups.google.com/groups/search?q=genuine-pharmacy.com+group%3A*abuse&qt_s=Search

See from registrant email record whois wiccanwell.org:
Domain ID:D106838779-LROR
Domain Name: WICCANWELL.ORG
Created On:07-Jul-2005 14:36:19 UTC
Last Updated On:11-May-2007 09:26:22 UTC
Expiration Date:07-Jul-2007 14:36:19 UTC
Sponsoring Registrar:Go Daddy Software, Inc. (R91-LROR)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Registrant ID:GODA-012767367
Registrant Name:Registration Private
Registrant Organization:Domains by Proxy, Inc.
Registrant Street1:DomainsByProxy.com
Registrant Street2:15111 N. Hayden Rd., Ste 160, PMB 353
Registrant Street3:
Registrant City:Scottsdale
Registrant State/Province:Arizona
Registrant Postal Code:85260
Registrant Country:US
Registrant Phone:+1.4806242599
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: WICCANW...@domainsbyproxy.com
Admin ID:GODA-212767367
Admin Name:Registration Private
Admin Organization:Domains by Proxy, Inc.
Admin Street1:DomainsByProxy.com
Admin Street2:15111 N. Hayden Rd., Ste 160, PMB 353
Admin Street3:
Admin City:Scottsdale
Admin State/Province:Arizona
Admin Postal Code:85260
Admin Country:US
Admin Phone:+1.4806242599
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: WICCANW...@domainsbyproxy.com
Tech ID:GODA-112767367
Tech Name:Registration Private
Tech Organization:Domains by Proxy, Inc.
Tech Street1:DomainsByProxy.com
Tech Street2:15111 N. Hayden Rd., Ste 160, PMB 353
Tech Street3:
Tech City:Scottsdale
Tech State/Province:Arizona
Tech Postal Code:85260
Tech Country:US
Tech Phone:+1.4806242599
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: WICCANW...@domainsbyproxy.com
Name Server: NS6.SECUREDC.COM
Name Server: NS5.SECUREDC.COM

wiccanwell.org IP 75.126.45.171
=> NO Active website / Login to Control Panel
16 Aliases on this IP

[wiccanwell.org has 1 MX record mail9.securedc.com (10)]

Prefix: 75.126.0.0/16
Prefix Name: SoftLayer Technologies Inc dal01 netblock5 PNAP DAL
softlayer
AS: 36351
AS Name: SOFTLAYER SoftLayer Technologies Inc
http://www.cidr-report.org/cgi-bin/as-report?as=36351

75.126.45.171 = securedc.com at softlayer.com

And More securedc.com sightings:
http://groups.google.com/groups/search?q=securedc.com+group%3A*abuse&start=0&scoring=d&

See:
205.uisxksdcinaltd.com IP 221.11.71.125

Resolved 205.uisxksdcinaltd.com to uisxksdcinaltd.com to 221.11.71.125

www.uisxksdcinaltd.com CNAME uisxksdcinaltd.com [TTL=60]

ns1.dnsburger.com [221.11.71.125] [TTL=172800] [CN]
ns2.dnsburger.com [221.7.193.185] [TTL=172800] [CN]

NS records at your nameservers are:
ns1.uisxksdcinaltd.com [221.11.71.125] [TTL=172800]
ns2.uisxksdcinaltd.com [221.11.71.125] [TTL=172800]

SOA record [TTL=86400] is:
Primary nameserver: ns1.uisxksdcinaltd.com
Hostmaster E-mail address: webm...@uisxksdcinaltd.com
Serial #: 1180109728

205.uisxksdcinaltd.com has no MX records -> uisxksdcinaltd.com has no
MX records

http://www.moensted.dk/spam/?addr=221.11.71.125
http://www.spamhaus.org/query/bl?ip=221.11.71.125

9 hosts sharing uisxksdcinaltd.com ip
abcofgoat.com
asimilatecat.com
bathtubhrewardzz.com
keleqdtnslot.com
keletnqdsinch.com
newtwooeztnoodle.com
superhjdiapera.com
tmuckinmationdad.com
tozfdqoots.com

inetnum: 221.11.0.0 - 221.11.127.255
netname: CNCGROUP-SN
descr: CNC Group Shannxi province network
descr: China Network Communications Group Corporation

route: 221.11.0.0/17
descr: CNC Group Shanxi1 Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
http://www.cidr-report.org/cgi-bin/as-report?as=4837

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL52714
221.11.70.0/23 is listed on the Spamhaus Block List (SBL)

24-Mar-2007 01:25 GMT | SR04

Dirty block - Months of spammer hosting (escalation)

3 SBL/ROKSO listings for IPs under the responsibility of cncgroup-sn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-sn

Let see whois:
Domain Name: uisxksdcinaltd.com
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET

Registrant Contact
Name: kevin benson
Address: 1098 Queen St
halifax, ns b3h2r9
CA
Email Address: kevinbenson007[]coldmail.ca
Phone Number: (902)412-1798

Administrative Contact
Name: kevin benson
Address: 1098 Queen St
halifax, ns b3h2r9
CA
Email Address: kevinbe...@coldmail.ca
Phone Number: (902)412-1798

Technical Contact
Name: kevin benson
Address: 1098 Queen St
halifax, ns b3h2r9
CA
Email Address: kevinbe...@coldmail.ca
Phone Number: (902)412-1798

Record Created on........ 2007-05-22 00:09:51.994
Expire on................ 2008-05-21 23:15:03.000

Domain servers in listed order:
ns1.dnsburger.com
ns2.dnsburger.com

See:
ns2.dnsburger.com IP 221.7.193.185

ns2.dnsburger.com has no MX records -> dnsburger.com has no MX records

http://www.moensted.dk/spam/?addr=221.7.193.185
http://www.spamhaus.org/query/bl?ip=221.7.193.185
http://www.spamhaus.org/pbl/query/PBL111818

More 221.7.193.185 sightings:
http://groups.google.com/groups/search?q=221.7.193.185+group%3A*abuse&qt_s=Search

inetnum: 221.7.193.184 - 221.7.193.191
netname: gxjxtech-com
country: CN
descr: guangxigxjxtech-com
admin-c: LH602-AP
tech-c: LH602-AP
status: ASSIGNED NON-PORTABLE
changed: nn...@gxcc.com.cn 20060427
mnt-by: MAINT-CNCGROUP-GX
source: APNIC
route: 221.7.128.0/17
descr: CNC Group CHINA169 Guangxi Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: ab...@cnc-noc.net => ???

bogusmx, whois, postmaster and abuse[]cnc-noc.net are listed in rfc-
ignorant.org database
abuse[]gxcc.com.cn is listed in rfc-ignorant.org database

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54820
221.7.193.185/32 is listed on the Spamhaus Block List (SBL/ROKSO)

21-May-2007 14:31 GMT | SR22

Alex Blood / Alexander Mosh / AlekseyB / Alex Polyakov.
Spam webhosting - millickentistiredd.com

7 SBL/ROKSO listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gx

Let see whois:
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com

abuse[]NameCheap.com is listed in rfc-ignorant.org database

Domain name: dnsburger.com

Registrant Contact:
northern Inc.
kevin benson (kevster[]coldmail.ca)
+1.9024121798
Fax: +1.5555555555
1098 Queen St
halifax, NS B3H 2R9
CA

Administrative Contact:
northern Inc.
kevin benson (kev...@coldmail.ca)
+1.9024121798
Fax: +1.5555555555
1098 Queen St
halifax, NS B3H 2R9
CA

Technical Contact:
northern Inc.
kevin benson (kev...@coldmail.ca)
+1.9024121798
Fax: +1.5555555555
1098 Queen St
halifax, NS B3H 2R9
CA

Status: Locked

Name Servers:
ns1.dnsburger.com
ns2.dnsburger.com

Creation date: 22 May 2007 02:12:49
Expiration date: 22 May 2008 02:12:49

See also more coldmail.ca spam support sightings:
http://groups.google.com/groups/search?q=coldmail.ca+group%3A*abuse&start=0&scoring=d&

abuse[]coldmail.ca is listed in rfc-ignorant.org database

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8505f191c71e5b31

See also thread:
http://groups.google.com/group/news.admin.net-abuse.email/browse_thread/thread/ee3433c401b6b7c1/28ee636c8dedff9a#28ee636c8dedff9a

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages