[email] [drugs] [85.255.52.11] (hffzxw.info - Tucows - managednsservice.com - hotworldwide.net) Irvin, Thurman Thomas among six into Hall of Fame
TomezNet
IP 85.255.52.11 85-255-52-11.kis.user.lt
(at ns1.kis.lt / telecom.lt)
Spamvert:
hffzxw.info IP 216.40.47.17
(at dns1.tucows.com / redirect.managednsservice.com)
See OLD => SBL44852 / SBL45242
www.hotworldwide.net IP 124.42.8.149
(at ns1.superready.net / dns.sinnet.com.cn / asianetcom.com)
Tucows.com ignores any SPAM complaints for months!
SEE Also More Tucows aka Fuckcows spam support sightings:
http://groups.google.com/groups/search?q=Tucows+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Holcomb Alan <Nic...@banque-immo.com>
X-Message-Info: txF49lGdW409vTeG6rdktkCc1vcjgWmn4JZWB/lcZsY=
Received: from tomts30-srv.bellnexxia.net ([209.226.175.104]) by bay0-
pamc1-f6.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sun, 4 Feb 2007 16:33:46 -0800
Received: from [MUNGED]
by toip19.srvr.bell.ca with ESMTP; 04 Feb 2007 19:33:41 -0500
Received: (qmail 20326 invoked by uid 110); 4 Feb 2007 19:33:39 -0500
Delivered-To: [MUNGED]
Received: (qmail 20322 invoked from network); 4 Feb 2007 19:33:39
-0500
Received: from 85-255-52-11.kis.user.lt (HELO pc.kis.lt)
(85.255.52.11)
by [MUNGED] with SMTP; 4 Feb 2007 19:33:39 -0500
Message-ID: <680001c748bc$0edfc8a6$0b34...@pc.kis.lt>
From: "Holcomb Alan" <Nic...@banque-immo.com>
To: "Shashkova Svetlana" <[MUNGED]>
Subject: Irvin, Thurman Thomas among six into Hall of Fame
Date: Mon, 05 Feb 2007 00:27:00 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1441
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Return-Path: Nic...@banque-immo.com
X-OriginalArrivalTime: 05 Feb 2007 00:33:46.0897 (UTC)
FILETIME=[4C453010:01C748BD]
Hello,
Now you can order Original Viagra directly from Pfizer.
Here: http://hffzxw.info
All prices are tax/vat free and free same-day worldwide shipping also
included.
--
[MUNGED]
-- END OF SPAM --
See:
IP 85.255.52.11 85-255-52-11.kis.user.lt
http://www.moensted.dk/spam/?addr=85.255.52.11
http://spamcop.net/w3m?action=checkblock&ip=85.255.52.11
http://www.dnsbl.net.au/lookup/?85.255.52.11
More kis.lt sightings:
http://groups.google.com/groups/search?q=kis.lt+group%3A*abuse&start=0&scoring=d&
abuse[]takas.lt is listed in rfc-ignorant.org database
inetnum: 85.255.48.0 - 85.255.63.255
netname: KIS-NET
descr: JSC "Kauno Interneto Sistemos"
person: Andrius Dzenkauskas
address: UAB "Kauno interneto sistemos"
address: Radvilenu pl. 8, Kaunas
phone: +370 37 331415
nic-hdl: AD1072-RIPE
mnt-by: TELECOMLT-MNT
e-mail: and...@kis.lt
changed: hostm...@takas.lt
e-mail: sysa...@kis.lt
mnt-by: AS8764-MNT
changed: ip-...@lir.telecom.lt
route: 85.255.48.0/20
descr: KIS
origin: AS25190
mnt-by: AS8764-MNT
changed: ip-...@lir.telecom.lt
ASN: 25190
ASN Name: KIS-AS (Kauno interneto sistemos ASN)
Country (per IP registrar): LT [Lithuania]
Country IP Range: 85.255.48.0 to 85.255.63.255
Country fraud profile: High
http://www.cidr-report.org/cgi-bin/as-report?as=25190
Spamvert URL:
http://hffzxw.info
<html>
<framesetframespacing="0"rows="100%,*"cols="100%"frameborder="no"border="0">
<framename="XYZZY2"scrolling="auto"src="http://
www.hotworldwide.net"noresize>
<framename="XYZZY"scrolling="no"noresize>
<noframes>
<h1><ahref="http://www.hotworldwide.net">http://www.hotworldwide.net</
a></h1>
<p>Please<ahref="http://www.hotworldwide.net">clickhere</
a>toviewthenon-framedversion.</p>
</noframes>
</frameset>
</html>
See:
hffzxw.info IP 216.40.47.17
dns2.registerfly.com [64.97.159.10 (NO GLUE)] [CA]
dns1.registerfly.com [216.40.47.18 (NO GLUE)] [CA]
NS records at your nameservers are:
ns1.mdnsservice.com [216.40.47.18]
ns3.mdnsservice.com [65.22.7.10]
ns2.mdnsservice.com [64.97.159.10]
SOA record [TTL=300] is:
Primary nameserver: ns1.mdnsservice.com
Hostmaster E-mail address: hostm...@mdnsservice.com
Serial #: 821501521
hffzxw.info has no MX records
http://www.moensted.dk/spam/?addr=216.40.47.17
Spam Received Recently See: http://www.sorbs.net/lookup.shtml?
216.40.47.17
216.40.47.17 PTR record: redirect.managednsservice.com
at dns1.tucows.com
So Much More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&
See OLD => SBL44852 / SBL45242
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Assignment
RNOCEmail: dnsa...@tucows.com
RTechEmail: dns...@tucows.com
route: 216.40.32.0/20
descr: Tucows International
origin: AS15348
mnt-by: MAINT-AS15348
changed: ddiac...@tucows.com
ASN: 19152
ASN Name: IBMCCH-TOR
Country (per IP registrar): CA [Canada]
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
1 SBL listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
Let see whois.afilias.info:
Domain ID: D16270468-LRMS
Domain Name: HFFZXW.INFO
Created On:28-Jan-2007 14:25:11 UTC
Last Updated On: 28-Jan-2007 14:25:12 UTC
Expiration Date: 28-Jan-2008 14:25:11 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID: tuvmHiik9sFugZUn
Registrant Name: Peter Kurelja
Registrant Organization: Kurelja
Registrant Street1: PO Box 239
Registrant Street2:
Registrant Street3:
Registrant City: West Milton
Registrant State/Province: PA
Registrant Postal Code: 17844
Registrant Country: US
Registrant Phone: +1.5704126667
Registrant Phone Ext.:
Registrant FAX:+1.5704126667
Registrant FAX Ext.:
Registrant Email: heartwoodpjk[]dejazzd.com
Admin ID:tuvmHiik9sFugZUn
Admin Name:Peter Kurelja
Admin Organization:Kurelja
Admin Street1:PO Box 239
Admin Street2:
Admin Street3:
Admin City:West Milton
Admin State/Province:PA
Admin Postal Code:17844
Admin Country:US
Admin Phone:+1.5704126667
Admin Phone Ext.:
Admin FAX:+1.5704126667
Admin FAX Ext.:
Admin Email: heartw...@dejazzd.com
Billing ID:tuvmHiik9sFugZUn
Billing Name:Peter Kurelja
Billing Organization:Kurelja
Billing Street1:PO Box 239
Billing Street2:
Billing Street3:
Billing City:West Milton
Billing State/Province:PA
Billing Postal Code:17844
Billing Country:US
Billing Phone:+1.5704126667
Billing Phone Ext.:
Billing FAX:+1.5704126667
Billing FAX Ext.:
Billing Email: heartw...@dejazzd.com
Tech ID:tuvmHiik9sFugZUn
Tech Name:Peter Kurelja
Tech Organization:Kurelja
Tech Street1:PO Box 239
Tech Street2:
Tech Street3:
Tech City:West Milton
Tech State/Province:PA
Tech Postal Code:17844
Tech Country:US
Tech Phone:+1.5704126667
Tech Phone Ext.:
Tech FAX:+1.5704126667
Tech FAX Ext.:
Tech Email: heartw...@dejazzd.com
Name Server: DNS1.REGISTERFLY.COM
Name Server: DNS2.REGISTERFLY.COM
See:
www.hotworldwide.net IP 124.42.8.149
ns1.superready.net [124.42.8.149] [TTL=172800] [CN]
ns2.superready.net [124.42.8.149] [TTL=172800] [CN]
SOA record [TTL=600] is:
Primary nameserver: ns1.superready.net
Hostmaster E-mail address: email.mail.com
Serial #: 617
1 MX record is:
0 hotworldwide.net [TTL=600] IP=124.42.8.149 [TTL=600] [CN]
www.hotworldwide.net has no MX records -> [hotworldwide.net has 1 MX
record hotworldwide.net (0)]
http://www.moensted.dk/spam/?addr=124.42.8.149
Blocked - see http://www.spambag.org/cgi-bin/spambag?mailfrom=sinnet
No PTR records exist for 124.42.8.149 at dns.sinnet.com.cn
abuse[]sinnet.com.cn is listed in rfc-ignorant.org database
abuse[]asianetcom.com is listed in rfc-ignorant.org database
inetnum: 124.42.0.0 - 124.42.127.255
netname: SINNET
descr: Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr: 2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr: Dong Cheng Dstrict,Beijing
nic-hdl: CH471-AP
e-mail: lic...@sinnet.com.cn
changed: ip...@cnnic.cn
person: Wang Huijun
nic-hdl: WH271-AP
e-mail: che...@sinnet.com.cn
person: Chen hao
nic-hdl: CH471-CN
e-mail: lic...@sinnet.com.cn
route: 124.42.0.0/17
descr: Asia Netcom (proxy-registered route object)
origin: AS23844
remarks: This route object is for a ANC customer route
notify: anc.i...@asianetcom.com
mnt-by: MAINT-AS10026
changed: anc.i...@asianetcom.com
route: 124.42.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: y...@chinaunicom.com.cn
ASN: 23844
ASN Name: BJ-GUANGHUAN-AP (Beijing Guanghuan Xinwang Digital)
Country (per IP registrar): CN [China]
Country IP Range: 124.42.0.0 to 124.42.127.255
http://www.cidr-report.org/cgi-bin/as-report?as=23844
3 SBL listings for IPs under the responsibility of sinnet.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=sinnet.com.cn
Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
grattatrola
via gramsci 44
alessandria, NA 15100
IT
Domain name: HOTWORLDWIDE.NET
Administrative Contact:
grattatrola, roberto roberto[]recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185
Technical Contact:
grattatrola, roberto rob...@recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185
Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 30-Jan-2007.
Record expires on 20-Jan-2008.
Record created on 20-Jan-2007.
Domain servers in listed order:
NS1.SUPERREADY.NET 124.42.8.149
NS2.SUPERREADY.NET 124.42.8.149
See More Registrant email: roberto[]recordonilne.com sightings:
http://groups.google.com/groups/search?q=%22ro...@recordonilne.com%22+group%3A*abuse
More hotworldwide.net sightings:
http://groups.google.com/groups?q=hotworldwide.net+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/15c409f5f0de89f8
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: