Spamvert:
massengale-olson.com IP 216.40.47.17
(SBL44852) (at tucows.com)
Frames Redirected to:
www.riedesigns.com IP 64.74.96.243 and 216.52.184.240
(at eNom.com / internap.com)
AND:
http://hotmoresizeonline4u.com/ms/index.php
hotmoresizeonline4u.com IP 221.203.189.114
(SBL43171) (at cncgroup-ln)
Title page => More-Size Gain 3 inches
© 2002 - 2005 WW3 DISTRIBUTERS LLC
More WW3 DISTRIBUTERS LLC sightings:
http://groups.google.com/groups/search?q=%22WW3+DISTRIBUTERS+LLC%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Deena Goldberg <sqkn...@colorado.aaa.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43trpqTnsZTj8HeDmW14ZbXYT5SF9DBHB8=
Received: from tomts34-srv.bellnexxia.net ([209.226.175.108]) by
bay0-pamc1-f4.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 1 Aug 2006 14:02:56 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip2.bellnexxia.net with ESMTP; 01 Aug 2006 17:02:25 -0400
Received: (qmail 5882 invoked by uid 110); 1 Aug 2006 17:02:24 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 5875 invoked from network); 1 Aug 2006 17:02:23 -0400
Received: from 0x5358685a.odnxx5.adsl-dhcp.tele.dk (83.88.104.90)
by xx..xx..xx.net with SMTP; 1 Aug 2006 17:02:23 -0400
Received: from nancy.webhost6.alterusa.com
id CFB68874DE; Tue, 01 Aug 2006 20:54:32 -0100
Received: by cusp.webhost1.starnetusa.net (Postfix, from userid 694)
id CFB63644DE; Tue, 01 Aug 2006 14:59:32 -0700
Date: Tue, 01 Aug 2006 20:54:32 -0100
Message-Id: <259211300902...@anonym.starnetusa.net>
From: "Deena Goldberg" <sqkn...@colorado.aaa.com>
To: xx..xx@xx..xx.com
Subject: .
Return-Path: sqkn...@colorado.aaa.com
X-OriginalArrivalTime: 01 Aug 2006 21:02:56.0852 (UTC)
FILETIME=[DD024140:01C6B5AD]
Sensationall revoolution in medicine!
E''nlarge your p''enis up to 10 cm or up to 4 inches!
Its h'erbal solution what hasnt side effect, but has 100% guaranted
results!
Dont lose your chance and but know wihtout doubts, you will be
impressed with results!
Clisk here: http://massengale-olson.com
curse infeasible extirpator drunk margaret ancestor mucosa along)
arbitrator beguile pelican jubilant propulsion forgetfulness goldberg
suspense
-- END OF SPAM --
See the same spammer with full support of Tucows R:
sierrasailing.com - anytablets.com - hotspurmonline4u.com
See:
IP 83.88.104.90 0x5358685a.odnxx5.adsl-dhcp.tele.dk
http://www.moensted.dk/spam/?addr=83.88.104.90
http://spamcop.net/w3m?action=checkblock&ip=83.88.104.90
inetnum: 83.88.64.0 - 83.88.127.255
netname: TDC-TELEDANMARK-BREDBAANDSADSL-NET
descr: TDC BB-ADSL users
country: DK [Denmark]
route: 83.88.0.0/13
descr: TDC
origin: AS3292
notify: not...@ip.tele.dk
mnt-by: AS3292-MNT
changed: st...@ip.tele.dk
ASN: 3292
ASN Name: TDC (TDC Data Networks)
Country IP Range: 83.88.0.0 to 83.95.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3292
4 SBL/ROKSO listings for IPs under the responsibility of tele.dk
http://www.spamhaus.org/sbl/listings.lasso?isp=tele.dk
See:
massengale-olson.com IP 216.40.47.17
dns1.registerfly.com [216.40.47.15]
dns2.registerfly.com [216.40.47.16]
NS records at your nameservers are:
ns2.mdnsservice.com [64.97.159.10]
ns3.mdnsservice.com [65.22.7.10]
ns1.mdnsservice.com [216.40.47.18]
massengale-olson.com has no MX records
http://www.moensted.dk/spam/?addr=216.40.47.17
http://www.spamhaus.org/query/bl?ip=216.40.47.17
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
route: 216.40.32.0/20
descr: IBM
origin: AS19152
mnt-by: MAINT-AS19152
ASN: 19152
ASN Name: IBMCCH-TOR
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44852
216.40.47.17/32 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 22:51 GMT | SR04
giveawaysblog.info - redirect (come on Tucows!)
See: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42570
10 SBL/ROKSO listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
More tucows.com sightings (over 7,350 listings):
http://groups.google.com/groups/search?q=tucows+group%3A*abuse&start=0&scoring=d&
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
aguilar
bahia de la paz 678 fracc. el mirador
tijuana, NA 22230
MX
Domain name: MASSENGALE-OLSON.COM
Administrative Contact:
aguilar, luis aguilar[]duven.net
bahia de la paz 678 fracc. el mirador
tijuana, NA 22230
MX
+525.50044306 Fax: +525.50044306
Technical Contact:
aguilar, luis agu...@duven.net
bahia de la paz 678 fracc. el mirador
tijuana, NA 22230
MX
+525.50044306 Fax: +525.50044306
Registration Service Provider:
RegisterFly.com, inc., sup...@registerfly.com
+1.9737362545
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 31-Jul-2006.
Record expires on 31-Jul-2007.
Record created on 31-Jul-2006.
Domain servers in listed order:
DNS2.REGISTERFLY.COM 216.40.47.16
DNS1.REGISTERFLY.COM 216.40.47.15
Domain status: REGISTRAR-LOCK
See frames source:
<html>
<frameset framespacing="0" rows="100%,*" cols="100%"
frameborder="no" border="0">
<frame name="XYZZY2" scrolling="auto"
src="http://www.riedesigns.com" noresize>
<frame name="XYZZY" scrolling="no" noresize>
<noframes>
<h1><a
href="http://www.riedesigns.com">http://www.riedesigns.com</a></h1>
<p>Please <a href="http://www.riedesigns.com">click here</a> to
view the non-framed version.</p>
</noframes>
</frameset>
</html>
See:
www.riedesigns.com IP 64.74.96.243 and 216.52.184.240
dns1.name-services.com A IN 3600 69.25.142.1
dns2.name-services.com A IN 3600 216.52.184.230
dns3.name-services.com A IN 3600 63.251.92.193
dns4.name-services.com A IN 3600 64.74.96.242
dns5.name-services.com A IN 3600 70.42.37.1
www.riedesigns.com has no MX records -> riedesigns.com has no MX
records
http://www.moensted.dk/spam/?addr=216.52.184.240
More 216.52.184.240 sightings:
http://groups.google.com/groups/search?q=216.52.184.240+group%3A*abuse&start=0&scoring=d&
No PTR records exist for 216.52.184.240 at ns2.dal.pnap.net
Internap Network Services PNAP-8-98 (NET-216-52-0-0-1)
216.52.0.0 - 216.52.255.255
eNom PNAP-DAL-ENOM-RM-01 (NET-216-52-184-224-1)
216.52.184.224 - 216.52.184.255
CustName: eNom
NetRange: 216.52.184.224 - 216.52.184.255
CIDR: 216.52.184.224/27
NetName: PNAP-DAL-ENOM-RM-01
NetHandle: NET-216-52-184-224-1
route: 216.52.176.0/20
descr: PNAP-DAL
origin: AS12179
mnt-by: INAP-MAINT-RADB
changed: pe...@internap.com
ASN: 12179
ASN Name: INTERNAP-2BLK
Country IP Range: 216.52.0.0 to 216.53.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=12179
32 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com
See IP 64.74.96.243
http://www.moensted.dk/spam/?addr=64.74.96.243
[2] customerblast/jhthosting/sex-rx/cjlinc, see
http://spews.org/html/S2452.html
No PTR records exist for 64.74.96.243
at ns1.chg.pnap.net / ns1.pnap.net / internap.com / eNom / Internap
Internap Network Services PNAP-SEA-BLOCK4 (NET-64-74-0-0-1)
64.74.0.0 - 64.74.255.255
eNom PNAP-CHG-ENOM-RM-01 (NET-64-74-96-224-1)
64.74.96.224 - 64.74.96.255
CustName: eNom
NetRange: 64.74.96.224 - 64.74.96.255
CIDR: 64.74.96.224/27
NetName: PNAP-CHG-ENOM-RM-01
NetHandle: NET-64-74-96-224-1
route: 64.74.96.0/20
descr: PNAP-CHG
origin: AS19024
mnt-by: INAP-MAINT-RADB
changed: so...@internap.com
ASN: 19024
ASN Name: INTERNAP-BLK5
Country IP Range: 64.74.0.0 to 64.75.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=19024
3 SBL listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com
More 64.74.96.243 sightings:
http://groups.google.com/groups/search?q=64.74.96.243+group%3A*abuse&start=0&scoring=d&
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: Registerfly.com
Contact: sup...@registerfly.com
Visit: http://www.registerfly.com
Domain name: riedesigns.com
Registrant Contact:
RegisterFly.com - Ref# 19824695
Whois Protection Service - ProtectFly.com
(nmhea94...@protectfly.com)
+1.8458183604
Fax: +1.8456984014
P.O. Box 969
Margaretville, NY 12455
US
Administrative Contact:
RegisterFly.com - Ref# 19824695
Whois Protection Service - ProtectFly.com
(g7z8msnphetw2x[]protectfly.com)
+1.8458183604
Fax: +1.8456984014
P.O. Box 969
Margaretville, NY 12455
US
Technical Contact:
RegisterFly.com - Ref# 19824695
Whois Protection Service - ProtectFly.com
(wv6brym...@protectfly.com)
+1.8458183604
Fax: +1.8456984014
P.O. Box 969
Margaretville, NY 12455
US
Status: Locked
Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com
Creation date: 18 Jun 2005 16:49:30
Expiration date: 18 Jun 2007 16:49:30
See:
hotmoresizeonline4u.com IP 221.203.189.114
ns1.wehostitfree4now.com A IN 126968 221.203.189.114
ns2.wehostitfree4now.com A IN 126968 221.203.189.114
[hotmoresizeonline4u.com has 1 MX record hotmoresizeonline4u.com (0)]
More 221.203.189.114 sightings:
http://groups.google.com/groups/search?q=221.203.189.114+group%3A*abuse
http://www.moensted.dk/spam/?addr=221.203.189.114
http://www.spamhaus.org/query/bl?ip=221.203.189.114
inetnum: 221.200.0.0 - 221.203.255.255
netname: CNCGROUP-LN
descr: CNCGROUP Liaoning Province Network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
route: 221.200.0.0/14
descr: CNC Group LiaoNing Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country IP Range: 221.200.0.0 to 221.207.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43171
221.203.189.96/27 is listed on the Spamhaus Block List (SBL)
10-Jun-2006 05:57 GMT | SR20
Hoodia, penis patch, pheromones, etc. spam site
11 SBL/ROKSO listings for IPs under the responsibility of cncgroup-ln
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-ln
Let see whois:
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/
Domain name: hotmoresizeonline4u.com
Registrant Contact:
WhoisGuard
WhoisGuard Protected
(4942a71b8cc9415ca860...@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd
8939 S. Sepulveda Blvd
Westchester, CA 90045
US
Administrative Contact:
WhoisGuard
WhoisGuard Protected
(4942a71b8cc9415ca860...@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd
8939 S. Sepulveda Blvd
Westchester, CA 90045
US
Technical Contact:
WhoisGuard
WhoisGuard Protected
(4942a71b8cc9415ca860...@whoisguard.com)
+1.6613102107
Fax: +1.6613102107
8939 S. Sepulveda Blvd
8939 S. Sepulveda Blvd
Westchester, CA 90045
US
Status: Locked
Name Servers:
ns1.wehostitfree4now.com
ns2.wehostitfree4now.com
Creation date: 21 Jul 2006 09:37:49
Expiration date: 21 Jul 2007 09:37:49
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/047cf017c940a751
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/67d873cc22518cd9
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: