[email] [spam] Your link to sandia.gov/sci_compute/elements.html

3 views
Skip to first unread message

ab...@biocenter.helsinki.fi

unread,
Oct 11, 2002, 2:53:11 AM10/11/02
to
Thanks "Chris", but I don't do any form of business with spammers.

SBL team: Please add the netblocks of Hosting-Network Inc., of Florida,
to the SBL. Detailed information included below.

The information the message below contains is targeted and correct,
which is extremely unusual for spam. However, the addresses for this
mailing were nonetheless gained by automatically analyzing web pages
and harvesting the mail addresses from them. It therefore qualifies
as spam, and the web site advertised in the message must be terminated.

In fact, the entire operation of the ISP of the spam-advertised site,
hosting-network.com, must be terminated by their upstream operator,
Level 3, since it is a spam support operation.

The site advertised in the message, htmlcodetutorial.com [64.127.170.228]
(reverse DNS name NODE-228.HOSTING-NETWORK.COM) is in the 64.127.128.0/18
network owned by HOSTING-NETWORK, INC., for which the contact is an e-mail
address for Travis Johnson (tra...@featureprice.com), tel. +1-941-633-7944.

The spam-advertised domain htmlcodetutorial.com was registered on October
1, 2002 (ten days from registration to spamming) to "Roel Zylstra", e-mail
dom...@accelocom.com (209.249.147.161, hosted by AboveNet), of 1200 Agate
St. #2, Redondo Beach, CA 90277, tel. +1-310-594-7541. Spamming violates
California Business and Professions Code Section 17538.4. The accelocom.com
domain is registered to itself, of the same contact information (Roel
Zylstra in Redondo Beach, CA). DNS to htmlcodetutorial.com is provided
by NS1.FASTNAMESERV.COM [66.186.207.1], NS2.FASTNAMESERV.COM [64.38.111.2].

The domain hosting-network.com, is registered by Bulkregister to
Hosting-Network, Inc. of Neuhoferstr. 1, Freistadt, A-4240 AUSTRIA,
tel. +43-664-5959-435. The number is an Austrian mobile phone that is
answered by the telco's standard non-personalized answering service
in German. Regardless of the fact that the business appears registered
to Austria, all of their networks are in the USA.

The domain featureprice.com is registered at Bulkregister to Hosting
Network, -, Ft. Myers, FL -, US. This domain registration information
is missing both a street address and a post code. It is invalid and
needs to be either corrected or terminated.

The 64.127.128.0/18 network, which houses the spam-advertised site, is
connected by Level 3 in Miami, FL.

The 66.186.192.0/19 network, which houses DNS1.HOSTING-NETWORK.COM,
is connected by Level 3 in Miami, FL.

The 64.38.96.0/19 network, which houses DNS2.HOSTING-NETWORK.COM, is
connected by Level 3 in Miami, FL.

"Travis Johnson" is no stranger to spamming, as indicated by archived
spam reports in Google Groups news.admin.net-abuse.sightings:

Spammer's "remove" (i.e. address verification service) on their
66.216.0.0/18 network:

<URL:http://groups.google.com/groups?selm=35.2c242dab.2aa1160e%40aol.com>

The 66.216.0.0/18 network is connected by Level 3.

Spammed from 66.216.0.0/18:

<URL:http://groups.google.com/groups?selm=20020829161757.C6194%40spin.it>

Hosting spam-advertised sites in 66.216.0.0/18:

<URL:http://groups.google.com/groups?selm=slrnalkqsr.c40.spamtrap%40bajan.cricalix.net>

--------forwarded message--------
Return-Path: <chr...@htmlcodetutorial.com>
Received: from htmlcodetutorial.com (lsanca1-ar16-4-47-005-209.lsanca1.elnk.dsl.genuity.net [4.47.5.209])
by taas.iki.fi (8.8.8/8.8.8) with SMTP id CAA15759
for <-atro,iki,removed->; Fri, 11 Oct 2002 02:45:15 +0300 (EEST)
Message-Id: <2002101023...@taas.iki.fi>
From: "Chris" <chr...@htmlcodetutorial.com>
To: <-atro,iki,removed->
Subject: Your link to sandia.gov/sci_compute/elements.html
Sender: "Chris" <chr...@htmlcodetutorial.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Date: Thu, 10 Oct 2002 16:42:10 -0700
Content-Transfer-Encoding: 8bit

I saw that your link to sandia.gov/sci_compute/elements.html on your web
page http://users.evitech.fi/~username/bookmarks.html was dead. I just
wanted to tell you about our HTML Code Tutorial, www.HTMLCodeTutorial.com
, which you may link to instead.

Feel free to email me if you have any questions.

Regards,
Chris
-----end of forwarded message-----

--
Abuse desk, Institute of Biotechnology, University of Helsinki
P.O. Box 56, FIN-00014 UNIVERSITY OF HELSINKI, FINLAND
Tel. +358-9-1911 (central exchange), http://www.biocenter.helsinki.fi/bi/

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:
<URL:http://www.killfile.org/~tskirvin/nana/>

Reply all
Reply to author
Forward
0 new messages