Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [drugs] [58.187.13.251] (kingsreport.info - Tucows - managednsservice.com - hotworldwide.net - superready.net - RegisterFly.com) I Need Professional Help

0 views
Skip to first unread message

TomezNet

unread,
Feb 5, 2007, 1:01:32 AM2/5/07
to
Received From:
IP 58.187.13.251 adsl-dynamic-pool-xxx.fpt.vn
(at dns2.fpt.vn)

Spamvert:
kingsreport.info IP 216.40.47.17
(at dns1.tucows.com / redirect.managednsservice.com)
See OLD => SBL44852 / SBL45242

Tucows.com ignores any SPAM complaints for months!

www.hotworldwide.net IP 124.42.8.149
(at ns1.superready.net / dns.sinnet.com.cn / asianetcom.com)

www.superready.net IP 72.51.37.200
(at NS2.SERVERBEACH.COM / peer1.net / ns1.geodns.net)

SEE Also More Tucows spam support sightings:
http://groups.google.com/groups/search?q=Tucows+group%3A*abuse&start=0&scoring=d&

More info below:
====================

X-SID-PRA: Imre Kiss <Vaste...@laperlelepaon.com>
X-Message-Info: txF49lGdW40A91IfsBNRIVcMypdqSYsj5UURTvNQotQ=
Received: from tomts41-srv.bellnexxia.net ([209.226.175.98]) by bay0-
pamc1-f11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sun, 4 Feb 2007 20:33:51 -0800
Received: from [MUNGED]
by toip20.srvr.bell.ca with ESMTP; 04 Feb 2007 23:33:45 -0500
Received: (qmail 3473 invoked by uid 110); 4 Feb 2007 23:33:45 -0500
Delivered-To: [MUNGED]
Received: (qmail 3467 invoked from network); 4 Feb 2007 23:33:44 -0500
Received: from adsl-dynamic-pool-xxx.fpt.vn (58.187.13.251)
by [MUNGED] with SMTP; 4 Feb 2007 23:33:44 -0500
Message-ID: <70b601c748dd$0c074274$fb0dbb3a@adsl-dynamic-pool-
xxx.fpt.vn>
From: "Imre Kiss" <Vaste...@laperlelepaon.com>
To: [MUNGED]
Subject: I Need Professional Help
Date: Mon, 05 Feb 2007 04:23:57 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1437
Return-Path: Vaste...@laperlelepaon.com
X-OriginalArrivalTime: 05 Feb 2007 04:33:51.0774 (UTC)
FILETIME=[D63EFBE0:01C748DE]

Hello,

Now you can order Authentic Viagra directly from Pfizer.

Here: http://kingsreport.info

All prices are tax/vat free and free same-day worldwide shipping also
included.

--
[MUNGED]

-- END OF SPAM --

SEE Also More RegisterFly.com spam support sightings:
http://groups.google.com/groups/search?q=RegisterFly.com+group%3A*abuse&start=0&scoring=d&

See:
IP 58.187.13.251 adsl-dynamic-pool-xxx.fpt.vn

http://www.moensted.dk/spam/?addr=58.187.13.251
http://www.spamhaus.org/query/bl?ip=58.187.13.251
http://www.spamhaus.org/pbl/query/PBL010308
http://spamcop.net/w3m?action=checkblock&ip=58.187.13.251

inetnum: 58.187.0.0 - 58.187.15.255
netname: FPT-NET
country: VN
descr: IP range for FPT Broadband Service
descr: 75 Tran Hung Dao, Hoan Kiem, Ha Noi
address: Hanoi capital, Vietnam

ASN: 18403
ASN Name: FPT-AS-AP (The Corporation for Financing & Promoting
Technology)
Country (per IP registrar): VN [Viet Nam]
Country IP Range: 58.186.0.0 to 58.187.255.255
City (per outside source): Hanoi, Ha Noi
http://www.cidr-report.org/cgi-bin/as-report?as=18403

More fpt.vn sightings:
http://groups.google.com/groups/search?q=fpt.vn+group%3A*abuse&start=0&scoring=d&

Spamvert URL:
http://kingsreport.info

<html>
<framesetframespacing="0"rows="100%,*"cols="100%"frameborder="no"border="0">
<framename="XYZZY2"scrolling="auto"src="http://
www.hotworldwide.net"noresize>
<framename="XYZZY"scrolling="no"noresize>
<noframes>
<h1><ahref="http://www.hotworldwide.net">http://www.hotworldwide.net</
a></h1>
<p>Please<ahref="http://www.hotworldwide.net">clickhere</
a>toviewthenon-framedversion.</p>
</noframes>
</frameset>
</html>

See:
kingsreport.info IP 216.40.47.17
dns2.registerfly.com. [64.97.159.10 (NO GLUE; CNAME encountered-
>ns2.mdnsservice.com.)] [CA]
dns1.registerfly.com. [216.40.47.18 (NO GLUE; CNAME encountered-
>ns1.mdnsservice.com.)] [CA]

NS records at nameservers are:
ns1.mdnsservice.com [216.40.47.18]
ns3.mdnsservice.com [65.22.7.10]
ns2.mdnsservice.com [64.97.159.10]

SOA record [TTL=300] is:
Primary nameserver: ns1.mdnsservice.com.
Hostmaster E-mail address: hostmaster.mdnsservice.com
Serial #: 821502368

kingsreport.info has no MX records

http://www.moensted.dk/spam/?addr=216.40.47.17
Spam Received Recently See: http://www.sorbs.net/lookup.shtml?
216.40.47.17

216.40.47.17 PTR record: redirect.managednsservice.com
at dns1.tucows.com

So Much More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&

See OLD => SBL44852 / SBL45242

OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Assignment
RNOCEmail: dnsa...@tucows.com
RTechEmail: dns...@tucows.com

route: 216.40.32.0/20
descr: Tucows International
origin: AS15348
mnt-by: MAINT-AS15348
changed: ddiac...@tucows.com
ASN: 19152
ASN Name: IBMCCH-TOR
Country (per IP registrar): CA [Canada]
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152

1 SBL listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com

Let see whois.afilias.info:
Domain ID: D16270518-LRMS
Domain Name: KINGSREPORT.INFO
Created On: 28-Jan-2007 14:29:40 UTC
Last Updated On: 28-Jan-2007 14:29:41 UTC
Expiration Date: 28-Jan-2008 14:29:40 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status: CLIENT TRANSFER PROHIBITED
Status: CLIENT UPDATE PROHIBITED
Status: TRANSFER PROHIBITED
Registrant ID: tuirm5Ut52YtksRG
Registrant Name: Peter Kurelja
Registrant Organization: Kurelja
Registrant Street1: PO Box 239
Registrant Street2:
Registrant Street3:
Registrant City: West Milton
Registrant State/Province: PA
Registrant Postal Code: 17844
Registrant Country: US
Registrant Phone: +1.5704126667
Registrant Phone Ext.:
Registrant FAX: +1.5704126667
Registrant FAX Ext.:
Registrant Email: heartwoodpjk[]dejazzd.com
Admin ID:tuirm5Ut52YtksRG
Admin Name:Peter Kurelja
Admin Organization:Kurelja
Admin Street1:PO Box 239
Admin Street2:
Admin Street3:
Admin City:West Milton
Admin State/Province:PA
Admin Postal Code:17844
Admin Country:US
Admin Phone:+1.5704126667
Admin Phone Ext.:
Admin FAX:+1.5704126667
Admin FAX Ext.:
Admin Email: heartw...@dejazzd.com
Billing ID:tuirm5Ut52YtksRG
Billing Name:Peter Kurelja
Billing Organization:Kurelja
Billing Street1:PO Box 239
Billing Street2:
Billing Street3:
Billing City:West Milton
Billing State/Province:PA
Billing Postal Code:17844
Billing Country:US
Billing Phone:+1.5704126667
Billing Phone Ext.:
Billing FAX:+1.5704126667
Billing FAX Ext.:
Billing Email: heartw...@dejazzd.com
Tech ID:tuirm5Ut52YtksRG
Tech Name:Peter Kurelja
Tech Organization:Kurelja
Tech Street1:PO Box 239
Tech Street2:
Tech Street3:
Tech City:West Milton
Tech State/Province:PA
Tech Postal Code:17844
Tech Country:US
Tech Phone:+1.5704126667
Tech Phone Ext.:
Tech FAX:+1.5704126667
Tech FAX Ext.:
Tech Email: heartw...@dejazzd.com
Name Server: DNS1.REGISTERFLY.COM
Name Server: DNS2.REGISTERFLY.COM

See More Registrant email: heartwoodpjk[]dejazzd.com sightings:
http://groups.google.com/groups/search?q=%22heart...@dejazzd.com%22+group%3A*abuse

See:
Title => Ed Pills - Don't let ED affect your sex life. Take control.

www.hotworldwide.net IP 124.42.8.149
ns1.superready.net [124.42.8.149] [TTL=172800] [CN]
ns2.superready.net [124.42.8.149] [TTL=172800] [CN]

SOA record [TTL=600] is:
Primary nameserver: ns1.superready.net
Hostmaster E-mail address: email.mail.com
Serial #: 617

1 MX record is:
0 hotworldwide.net [TTL=600] IP=124.42.8.149 [TTL=600] [CN]

www.hotworldwide.net has no MX records -> [hotworldwide.net has 1 MX
record hotworldwide.net (0)]

http://www.moensted.dk/spam/?addr=124.42.8.149
Blocked - see http://www.spambag.org/cgi-bin/spambag?mailfrom=sinnet

No PTR records exist for 124.42.8.149 at dns.sinnet.com.cn

abuse[]sinnet.com.cn is listed in rfc-ignorant.org database
abuse[]asianetcom.com is listed in rfc-ignorant.org database

More 124.42.8.149 sightings:
http://groups.google.com/groups/search?q=124.42.8.149+group%3A*abuse

inetnum: 124.42.0.0 - 124.42.127.255
netname: SINNET
descr: Beijing Guanghuan Xinwang Digital Technology co.Ltd
descr: 2A-2F,Tower A,East Gate Plaza,NO.9 Dong Zhong Street,
descr: Dong Cheng Dstrict,Beijing
nic-hdl: CH471-AP
e-mail: lic...@sinnet.com.cn
changed: ip...@cnnic.cn
person: Wang Huijun
nic-hdl: WH271-AP
e-mail: che...@sinnet.com.cn
person: Chen hao
nic-hdl: CH471-CN
e-mail: lic...@sinnet.com.cn

route: 124.42.0.0/17
descr: Asia Netcom (proxy-registered route object)
origin: AS23844
remarks: This route object is for a ANC customer route
notify: anc.i...@asianetcom.com
mnt-by: MAINT-AS10026
changed: anc.i...@asianetcom.com

route: 124.42.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: y...@chinaunicom.com.cn
ASN: 23844
ASN Name: BJ-GUANGHUAN-AP (Beijing Guanghuan Xinwang Digital)
Country (per IP registrar): CN [China]
Country IP Range: 124.42.0.0 to 124.42.127.255
http://www.cidr-report.org/cgi-bin/as-report?as=23844

3 SBL listings for IPs under the responsibility of sinnet.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=sinnet.com.cn

Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
grattatrola, roberto rob...@recordonilne.com
via gramsci 44
alessandria, NA 15100
IT

More hotworldwide.net sightings:
http://groups.google.com/groups?q=hotworldwide.net+group%3A*abuse

See:
ns1.superready.net IP 124.42.8.149

ns1.superready.net has no MX records -> superready.net has no MX
records

http://www.moensted.dk/spam/?addr=124.42.8.149

See:
www.superready.net IP 72.51.37.200
dns1.registerfly.com [216.40.47.18] [TTL=172800] [CA]
dns2.registerfly.com [64.97.159.10] [TTL=172800] [CA]
dns3.registerfly.com [65.22.7.10] [TTL=172800] [CA]

NS records at nameservers are:
ns1.mdnsservice.com [216.40.47.18]
ns3.mdnsservice.com [65.22.7.10]
ns2.mdnsservice.com [64.97.159.10]

SOA record [TTL=300] is:
Primary nameserver: ns1.mdnsservice.com
Hostmaster E-mail address: hostmaster.mdnsservice.com
Serial #: 819168045

http://www.moensted.dk/spam/?addr=72.51.37.200

More 72.51.37.200 sightings:
http://groups.google.com/groups/search?q=72.51.37.200+group%3A*abuse

No PTR records exist for 72.51.37.200
at NS2.SERVERBEACH.COM / ns1.geodns.net

Peer 1 Network Inc. PEER1-BLK-08 (NET-72-51-0-0-1)
72.51.0.0 - 72.51.63.255
ServerBeach PEER1-SERVERBEACH-06A (NET-72-51-32-0-1)
72.51.32.0 - 72.51.47.255

OrgName: Peer 1 Network Inc.
OrgID: PER1
NetRange: 72.51.0.0 - 72.51.63.255
CIDR: 72.51.0.0/18
NetName: PEER1-BLK-08
NetHandle: NET-72-51-0-0-1
Parent: NET-72-0-0-0-0
NetType: Direct Allocation
RNOCEmail: net-...@peer1.net

OrgName: ServerBeach
OrgID: SERVE-32
NetRange: 72.51.32.0 - 72.51.47.255
CIDR: 72.51.32.0/20
NetName: PEER1-SERVERBEACH-06A
NetHandle: NET-72-51-32-0-1
Parent: NET-72-51-0-0-1
NetType: Reallocated
RTechEmail: hostm...@serverbeach.com
OrgTechEmail: ipa...@serverbeach.com

whois and abuse[]serverbeach.com are listed in rfc-ignorant.org
database

route: 72.51.32.0/20
descr: Peer1 Route Object
origin: as13768
mnt-by: maint-as13768
changed: v...@peer1.net
ASN: 13768
ASN Name: PEER1
Country (per IP registrar): US [United States]
Country IP Range: 72.51.0.0 to 72.51.63.255
http://www.cidr-report.org/cgi-bin/as-report?as=13768

1 SBL/ROKSO listings for IPs under the responsibility of
serverbeach.com
http://www.spamhaus.org/sbl/listings.lasso?isp=serverbeach.com

1 SBL listings for IPs under the responsibility of peer1.net
http://www.spamhaus.org/sbl/listings.lasso?isp=peer1.net

Let see whois:
Registrar: REGISTERFLY.COM, INC.
Registrant:
grattatrola
via gramsci 44
alessandria, NA 15100
IT

Domain name: SUPERREADY.NET

Administrative Contact:
grattatrola, roberto roberto[]recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185

Technical Contact:
grattatrola, roberto rob...@recordonilne.com
via gramsci 44
alessandria, NA 15100
IT
+393.56815185 Fax: +393.56815185

Registrar of Record: REGISTERFLY.COM, INC.
Record last updated on 02-Feb-2007.
Record expires on 20-Jan-2008.
Record created on 20-Jan-2007.

Domain servers in listed order:
DNS3.REGISTERFLY.COM 204.50.180.55
DNS2.REGISTERFLY.COM 216.40.47.16
DNS1.REGISTERFLY.COM 216.40.47.15

postmaster and abuse[]RegisterFly.com are listed in rfc-ignorant.org
database

See More Registrant email: roberto[]recordonilne.com sightings:
http://groups.google.com/groups/search?q=%22ro...@recordonilne.com%22+group%3A*abuse

More superready.net sightings:
http://groups.google.com/groups/search?q=superready.net+group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/fb99f86d703e2763

And:
http://groups.google.com/group/news.admin.net-abuse.email/msg/fcef8fe0eaf52022

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages