Whythe-Internet - rogue spamhaus, hosting illegal pirated software and viagra spammers, ignoring complaints, bad WHOIS data. whythe-internet.com, whythedns.net, unsx.net, [217.69.120.0 - 217.69.120.255], [217.69.122.0 - 217.69.123.255]: Access denied! === My 1st complaint === From: Admin Reply-To: abuse-Feb@2004.dolphinwave.org Organization: Private person Subject: [email] Spam (pirated software: cdatlow.com) [Fwd: lluec Top Quality Software. Lowest Possible Price. otbig] Date: Fri, 6 Feb 2004 07:14:40 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1728612 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, piracy@microsoft.com, postmaster@unsx.com, abuse@mci.com, postmaster@whythe-internet.com, noc@unsx.com, anti-spam@chinanet.cn.net, ctsummary@special.abuse.net, postmaster@dns4free.org X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200402060714.40759@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Spammer: cs666928-195.satx.rr.com [66.69.28.195] Spamvertised web page: http://cdatlow.com/offers/ Remove link: http://cdatlow.com/re/clean.php cdatlow.com [217.69.122.100] =========== Registrant: Popov, Alexander (VVNRWSAOSD) Gagarina 15 Mahachkala, DA 321238 RU Domain Name: CDATLOW.COM Administrative Contact, Technical Contact: Popov, Alexander (VEUSOGLWOI) cdatlow@fromru.com Gagarina 15 Mahachkala, DA 321238 RU +79028772152 Record expires on 18-Jul-2004. Record created on 18-Jul-2003. Database last updated on 6-Feb-2004 00:13:12 EST. Domain servers in listed order: NS1.DNS4FREE.ORG 202.108.254.204 NS3.DNS4FREE.ORG 202.108.254.206 WINET IP block [217.69.122.0 - 217.69.122.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: dns4free.org. ---------- Forwarded Message ---------- Received: from cs666928-195.satx.rr.com (cs666928-195.satx.rr.com [66.69.28.195]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id i15NbeMn005623 for <###>; Fri, 6 Feb 2004 01:37:45 +0200 Received: from unknown (HELO localhost) (127.0.0.1) by localhost.hivrhu.com with SMTP; Wed, 4 Feb 2004 18:30:20 -0800 Received: from 39.232.5.93 (39.232.5.93[39.232.5.93]) by cs666928-195.satx.rr.com (IMP) with HTTP for <###>; Wed, 4 Feb 2004 18:30:20 -0800 Message-ID: <3499521075948220@cs666928-195.satx.rr.com> From: "Isold" To: "Clifford" <###> Subject: lluec Top Quality Software. Lowest Possible Price. otbig Date: Wed, 4 Feb 2004 18:30:20 -0800 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.2 X-Originating-IP: 39.232.5.93 X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.23.0.3; VDF 6.23.0.58 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: CHECK OUR PRICES ON SOFTWARE

CHECK OUR PRICES ON SOFTWARE

Windows XP Professional - $50.00 Buy Now

Office XP Professional - $60.00 Buy Now

Adobe Photoshop 7.0 - $60.00 Buy Now

more software titles available

click here to see all the software titles available

 

 

 

 

 

We honor all remove request. To be permanently removed from our mailing list Click here

 

 

------------------------------------------------------- === My 2nd complaint === From: Admin Reply-To: abuse-Feb@2004.dolphinwave.org Organization: Private person Subject: [email] Persistent pirate spammers (cheapsoft.info/cdatlow.com)! [Fwd: sshs.. get low cost software cds or download!] Date: Tue, 17 Feb 2004 00:04:55 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1729124 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, piracy@microsoft.com, anti-spam@chinanet.cn.net, ctsummary@special.abuse.net, postmaster@dns4free.org, postmaster@unsx.com, abuse@mci.com, postmaster@whythe-internet.com, noc@unsx.com, admin@whythe-internet.com, born@whythe-internet.com, abuse@t-online.de, abuse@t-dialin.net X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200402170004.55607@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Whythe-Internet STILL provides this abuser with hosting, despite on previous complaints, like this one, sent 10 days ago and archived on Google: http://groups.google.com/groups?selm=200402060714.40759%402003.dolphinwave.org Spammer: p508F6714.dip.t-dialin.net [80.143.103.20] Spamvertised web page: cheapsoft.info Remove link: http://lcahmikleiket.cheapsoft.info/unsub.html Previously spamvertised web page: cdatlow.com www.cheapsoft.info [217.69.122.27] ================== Domain ID:D5647299-LRMS Domain Name:CHEAPSOFT.INFO Created On:28-Jan-2004 16:07:51 UTC Last Updated On:28-Jan-2004 16:15:44 UTC Expiration Date:28-Jan-2005 16:07:51 UTC Sponsoring Registrar:R191-LRMS Status:ACTIVE Status:OK Registrant ID:C4242636-LRMS Registrant Name:Inez D Vinek Registrant Organization:Inez D Vinek Registrant Street1:164 Grantham Court Registrant City:Colchester Registrant Postal Code:CO1 2RU Registrant Country:GB Registrant Phone:+1.1234567890 Registrant FAX:+1.1234567890 Registrant Email:wtd@mail.ru Admin ID:C4242635-LRMS Admin Name:Inez D Vinek Admin Street1:164 Grantham Court Admin City:Colchester Admin Postal Code:CO1 2RU Admin Country:GB Admin Phone:+1.1234567890 Admin Email:wtd@mail.ru Billing ID:C1249598-LRMS Billing Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois Billing Organization:GANDI sarl Billing Street1:see also whois.gandi.net Billing City:Paris Billing Postal Code:F-75003 Billing Country:FR Billing Email:support@gandi.net Tech ID:C4242635-LRMS Tech Name:Inez D Vinek Tech Street1:164 Grantham Court Tech City:Colchester Tech Postal Code:CO1 2RU Tech Country:GB Tech Phone:+1.1234567890 Tech Email:wtd@mail.ru Name Server:NS0.WHYTHEDNS.NET Name Server:NS1.WHYTHEDNS.NET WINET IP block [217.69.122.0 - 217.69.122.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: whythedns.net cdatlow.com [217.69.122.105] (was on [217.69.122.100] 10 days ago) =========== Registrant: Popov, Alexander (VVNRWSAOSD) Gagarina 15 Mahachkala, DA 321238 RU Domain Name: CDATLOW.COM Administrative Contact, Technical Contact: Popov, Alexander (VEUSOGLWOI) cdatlow@fromru.com Gagarina 15 Mahachkala, DA 321238 RU +79028772152 Record expires on 18-Jul-2004. Record created on 18-Jul-2003. Database last updated on 16-Feb-2004 17:00:45 EST. Domain servers in listed order: NS1.DNS4FREE.ORG 202.108.254.204 NS3.DNS4FREE.ORG 202.108.254.206 WINET IP block [217.69.122.0 - 217.69.122.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: dns4free.org. ---------- Forwarded Message ---------- Received: from p508F6714.dip.t-dialin.net (p508F6714.dip.t-dialin.net [80.143.103.20]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id i1GL7Uh1005533 for <###>; Mon, 16 Feb 2004 23:07:35 +0200 Received: from unknown (HELO localhost) (127.0.0.1) by localhost.leuf.com with SMTP; Mon, 16 Feb 2004 13:47:00 -0800 Received: from 63.82.242.127 (63.82.242.127[63.82.242.127]) by p508F6714.dip.t-dialin.net (IMP) with HTTP for <###>; Mon, 16 Feb 2004 13:47:00 -0800 Message-ID: <6053701076968020@p508F6714.dip.t-dialin.net> From: "Jennifer" To: "Madge" <###> Subject: sshs.. get low cost software cds or download! Date: Mon, 16 Feb 2004 13:47:00 -0800 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.2 X-Originating-IP: 63.82.242.127 X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.23.0.4; VDF 6.23.0.68 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:

http://etagaiimixu.cheapsoft.info/< /P>

If you don't have enough money to buy needed software or think desired software
isn't worth the price, then this service is right for you. We make software to
be near you. Order any software you need for a low price.

Some popular products from our price list:
All programs you can download or order on cd-rom by airmail.

50$ Adobe Creative Suite (5 cds)
30$ Adobe PhotoShop CS 8.0 (1 cd)
55$ 3D Studio Max 6.0 (3 cds)
20$ Adobe Premiere Pro 7.0 (1 cd)
35$ Alias Wavefront Maya 5.0 Unlimited
35$ AutoCAD 2004
35$ Autodesk Architectural Desktop 2004
16$ Cakewalk Sonar 3 Producer Edition (3 cds)
25$ Canopus ProCoder 1.5 (1 cd)
25$ Corel Draw 11 Graphic Suite
25$ Dragon Naturally Speaking Preferred 7.0
20$ Macromedia Dreamweaver MX 2004 v7.0
25$ Macromedia Fireworks MX 2004 v7.0
25$ Macromedia Flash MX 2004 v7.0 Professional
50$ Macromedia Studio MX 2004 (1 cd)
20$ Microsoft Money 2004 Deluxe (1 cd)
55$ Microsoft Office 2003 System Professional (5 cds)
25$ Microsoft Office 2003 Multilingual User Interface Pack (2 cds)
35$ Microsoft Project 2002 Pro
20$ Microsoft Publisher XP 2002
25$ Microsoft Visio for Enterprise Architects 2003
45$ Microsoft Windows XP Corporate Edition with SP1
35$ Microsoft Windows XP Professional
20$ Norton Antivirus 2004 Pro v10.0.0.109
16$ Norton SystemWorks Pro 2004 (1 cd)
25$ OmniPage 14 Office (1 cd)
25$ Pinnacle Impression DVD Pro 2.2 (1 cd)
45$ PTC Pro Engineer Wildfire Datecode 2003370 (3 cds)
16$ PowerQuest Drive Image 7.01 Multilanguage (1 cd)
20$ Ulead DVD Workshop 1.2
99$ Microsoft Visual Studio .NET 2003 Enterprise Architect (8 cds)
20$ Winfax PRO 10.02

and, more, more. more!! Total today is 1421 products.

price list - http://rhoonttl.cheapsoft.info/p/< BR>search     - http://rbolenju.cheapsoft.info/e/< /P>

Mac users. We have some software for you too!!! Check it:
http://oaltcrnub.cheapsoft.in fo/p/m/

Adobe Creative Suite (2 cds) for Mac
Adobe Acrobat 6.0 Pro for Mac
Adobe Illustrator 10 for Mac
Adobe InDesign 2 for Mac
Macromedia Flash MX 2004 v7.0 Professional for Mac
Macromedia Studio MX 2004 for Mac (1 cd)
Microsoft Office v.X for Mac
QuarkXpress 6 Multilanguage for Mac
and more!!!

----
To unsubscribe, please go to
http://wsguxoosloios.c heapsoft.info/unsub.html

------------------------------------------------------- ======= ONE OF THE PREVIOUS SPAMS WAS ======= Received: from cs666928-195.satx.rr.com (cs666928-195.satx.rr.com [66.69.28.195]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id i15NbeMn005623 for <###>; Fri, 6 Feb 2004 01:37:45 +0200 Received: from unknown (HELO localhost) (127.0.0.1) by localhost.hivrhu.com with SMTP; Wed, 4 Feb 2004 18:30:20 -0800 Received: from 39.232.5.93 (39.232.5.93[39.232.5.93]) by cs666928-195.satx.rr.com (IMP) with HTTP for <###>; Wed, 4 Feb 2004 18:30:20 -0800 Message-ID: <3499521075948220@cs666928-195.satx.rr.com> From: "Isold" To: "Clifford" <###> Subject: lluec Top Quality Software. Lowest Possible Price. otbig Date: Wed, 4 Feb 2004 18:30:20 -0800 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.2 X-Originating-IP: 39.232.5.93 X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.23.0.3; VDF 6.23.0.58 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: CHECK OUR PRICES ON SOFTWARE

CHECK OUR PRICES ON SOFTWARE

Windows XP Professional - $50.00 Buy Now

Office XP Professional - $60.00 Buy Now

Adobe Photoshop 7.0 - $60.00 Buy Now

more software titles available

click here to see all the software titles available

 

 

 

 

 

We honor all remove request. To be permanently removed from our mailing list Click here

 

 

------------------------------------------------------- === My 3rd complaint === From: Admin Reply-To: abuse-Feb@2004.dolphinwave.org Organization: Private person Subject: [email] [BLOCK] Whythe-Internet spamhaus! [Fwd: nidoulh New Generic Viarga. Absulutely NEW! ty] Date: Wed, 18 Feb 2004 15:16:46 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1729221 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, noc@Whythe-Internet.com, admin@teletube.net, noc@unsx.net, admin@whythe-internet.com, admin@unsx.net, born@whythe-internet.com, postmaster@unsx.com, abuse@mci.com, postmaster@whythe-internet.com, postmaster@tmns.net.au, abuse@telstra.net X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200402181516.46327@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: And yet another spammer, hosted by the Whythe-Internet spamhaus, who ignores all complaints, and all the reported spammers are still connected there! Spammer: dapp-p-144-139-93-158.prem.tmns.net.au [144.139.93.158] Spamvertised web page: http://www.enercomsolutions.com Previously spamvertised web pages (illegal pirated software): http://cheapsoft.info http://cdatlow.com All were complained to Whythe-Internet, all are still there. Complaints were archived on Google: http://groups.google.com/groups?selm=200402060714.40759%402003.dolphinwave.org http://groups.google.com/groups?selm=200402170004.55607%402004.dolphinwave.org www.enercomsolutions.com [217.69.123.139] ======================== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: enercomsolutions.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.enercomsolutions.com Creation date: 28 Nov 2003 11:47:44 Expiration date: 28 Nov 2004 11:47:44 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.enercomsolutions.com <== SPAMMERS. cheapsoft.info [217.69.122.27] ============== Domain ID:D5647299-LRMS Domain Name:CHEAPSOFT.INFO Created On:28-Jan-2004 16:07:51 UTC Last Updated On:28-Jan-2004 16:15:44 UTC Expiration Date:28-Jan-2005 16:07:51 UTC Sponsoring Registrar:R191-LRMS Status:ACTIVE Status:OK Registrant ID:C4242636-LRMS Registrant Name:Inez D Vinek Registrant Organization:Inez D Vinek Registrant Street1:164 Grantham Court Registrant City:Colchester Registrant Postal Code:CO1 2RU Registrant Country:GB Registrant Phone:+1.1234567890 Registrant FAX:+1.1234567890 Registrant Email:wtd@mail.ru Admin ID:C4242635-LRMS Admin Name:Inez D Vinek Admin Street1:164 Grantham Court Admin City:Colchester Admin Postal Code:CO1 2RU Admin Country:GB Admin Phone:+1.1234567890 Admin Email:wtd@mail.ru Billing ID:C1249598-LRMS Billing Name:CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois Billing Organization:GANDI sarl Billing Street1:see also whois.gandi.net Billing City:Paris Billing Postal Code:F-75003 Billing Country:FR Billing Email:support@gandi.net Tech ID:C4242635-LRMS Tech Name:Inez D Vinek Tech Street1:164 Grantham Court Tech City:Colchester Tech Postal Code:CO1 2RU Tech Country:GB Tech Phone:+1.1234567890 Tech Email:wtd@mail.ru Name Server:NS0.WHYTHEDNS.NET Name Server:NS1.WHYTHEDNS.NET Whythe-Internet IP block [217.69.122.0 - 217.69.122.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: whythedns.net [217.69.122.2, 217.69.122.19]. cdatlow.com [217.69.122.105] =========== Registrant: Popov, Alexander (VVNRWSAOSD) Gagarina 15 Mahachkala, DA 321238 RU Domain Name: CDATLOW.COM Administrative Contact, Technical Contact: Popov, Alexander (VEUSOGLWOI) cdatlow@fromru.com Gagarina 15 Mahachkala, DA 321238 RU +79028772152 Record expires on 18-Jul-2004. Record created on 18-Jul-2003. Database last updated on 18-Feb-2004 08:14:37 EST. Domain servers in listed order: NS1.DNS4FREE.ORG 202.108.254.204 NS3.DNS4FREE.ORG 202.108.254.206 Whythe-Internet IP block [217.69.122.0 - 217.69.122.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: dns4free.org ---------- Forwarded Message ---------- Received: from dapp-p-144-139-93-158.prem.tmns.net.au (dapp-p-144-139-93-158.prem.tmns.net.au [144.139.93.158]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id i1I5Bih1012434 for <######>; Wed, 18 Feb 2004 07:11:58 +0200 Received: from unknown (HELO localhost) (127.0.0.1) by localhost.cuaddl.com with SMTP; Wed, 18 Feb 2004 01:06:37 +0000 Received: from 83.214.157.214 (83.214.157.214[83.214.157.214]) by dapp-p-144-139-93-158.prem.tmns.net.au (IMP) with HTTP for <###>; Message-ID: <9944211077066397@dapp-p-144-139-93-158.prem.tmns.net.au> From: "Montagu" To: "Liza" <###> Subject: nidoulh New Generic Viarga. Absulutely NEW! ty Date: Wed, 18 Feb 2004 01:06:37 +0000 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.2 X-Originating-IP: 83.214.157.214 X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.4; VDF 6.24.0.8 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:
Formulated to:Features:
  • Increase Sex Drive
  • Improved sildenafil citrate formula
  • Boost Sexual Performance
  • Works in less than 15 minutes
  • Fuller & Harder Erections
  • Best price on the internet
  • Increase Stamina & Endurance
  •  
  • Quicker Recharges
  •  

    Rea d More!
    ------------------------------------------------------- === Advice to block === Path: uni-berlin.de!217.22.114.18!not-for-mail From: Dolphin Newsgroups: news.admin.net-abuse.email Subject: [BLOCK] Whythe-Internet spamhaus Date: 18 Feb 2004 14:19:25 GMT Organization: Private person Lines: 93 Sender: Alexander Sheremet Message-ID: NNTP-Posting-Host: 217.22.114.18 X-Trace: news.uni-berlin.de 1077113965 46645328 I 217.22.114.18 ([104765]) X-SPEWS: I am not X-ROT-13: fcnzgenc@dolphinwave.org X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 User-Agent: slrn/0.9.7.4 (Linux) Xref: uni-berlin.de news.admin.net-abuse.email:2168830 Whythe-Internet obviously becomes the server of choice for pirated CDs and viagra spammers. They are in Russia, their upstream is UUNET, and they ignore all complaints (all the complained spammers, including the illegal pirated software sellers, are still connected there). Interesting that while their IP ranges are in Russia (and so is the claimed Admin address for IPs), the WHOIS for whythe-internet.com, whythedns.net, is in USA. The phone call to +1.7032054070 has returned "The phone number is not in service". Nobody has picked up the phone at +7 095 907 14 17. Outblaze mailserver reports albertgas@europe.com to be deactivated: rcpt to: albertgas@europe.com 550 : Account Deactivated Advice to block: whythe-internet.com, whythedns.net, unsx.net, 217.69.120.0/24, 217.69.122.0/23. Spamvertised web pages (all complained, all still up): http://cheapsoft.info [217.69.122.27] http://cdatlow.com [217.69.122.105] http://www.enercomsolutions.com [217.69.123.139] Complaints were archived on NANAS: http://groups.google.com/groups?selm=200402060714.40759%402003.dolphinwave.org http://groups.google.com/groups?selm=200402170004.55607%402004.dolphinwave.org http://groups.google.com/groups?selm=200402181516.46327%402004.dolphinwave.org IP WHOIS: <...> route: 217.69.122.0/23 descr: Whythe-Internet network origin: AS29371 notify: noc@unsx.net mnt-by: DSC-MNT changed: admin@teletube.net 20030828 source: RIPE person: John Deere address: Moskow, Russia, Tverskaia str 12 221 phone: +7 095 907 14 17 e-mail: admin@whythe-internet.com nic-hdl: JD1061-RIPE mnt-by: DSC-MNT changed: admin@unsx.net 20030728 source: RIPE person: Jassika Born address: Moskow, Russia, Tverskaia str 12 221 phone: +7 095 907 14 17 e-mail: born@whythe-internet.com nic-hdl: JB2425-RIPE mnt-by: DSC-MNT changed: admin@unsx.net 20030728 source: RIPE Domain WHOIS: [whois.directi.com] Registration Service Provided By: NAME15.COM Contact: dg@ssl4all.com Website: http://name15.com Domain Name: WHYTHE-INTERNET.COM Registrant: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Creation Date: 07-Aug-2003 Expiration Date: 07-Aug-2004 Domain servers in listed order: ns0.whythe-internet.com ns1.whythe-internet.com <...> Dolphin. -- URL: http://www.DolphinWave.org Mail: on the web page (no spam) ICQ: 6615461 === WHOIS DATA === $ jwhois unsx.net [Querying whois.internic.net] [Redirected to whois.directi.com] [Querying whois.directi.com] [whois.directi.com] Registration Service Provided By: NAME15.COM Contact: dg@ssl4all.com Website: http://name15.com Domain Name: UNSX.NET Registrant: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Creation Date: 07-Aug-2003 Expiration Date: 07-Aug-2004 Domain servers in listed order: ns0.unsx.net ns1.unsx.net Administrative Contact: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Technical Contact: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Billing Contact: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Status:ACTIVE $ jwhois whythe-internet.com [Querying whois.internic.net] [Redirected to whois.directi.com] [Querying whois.directi.com] [whois.directi.com] Registration Service Provided By: NAME15.COM Contact: dg@ssl4all.com Website: http://name15.com Domain Name: WHYTHE-INTERNET.COM Registrant: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Creation Date: 07-Aug-2003 Expiration Date: 07-Aug-2004 Domain servers in listed order: ns0.whythe-internet.com ns1.whythe-internet.com Administrative Contact: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Technical Contact: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Billing Contact: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Status:ACTIVE $ jwhois whythedns.net [Querying whois.internic.net] [Redirected to whois.directi.com] [Querying whois.directi.com] [whois.directi.com] Registration Service Provided By: NAME15.COM Contact: dg@ssl4all.com Website: http://name15.com Domain Name: WHYTHEDNS.NET Registrant: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Creation Date: 29-Aug-2003 Expiration Date: 29-Aug-2004 Domain servers in listed order: ns0.whythedns.net ns1.whythedns.net Administrative Contact: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Technical Contact: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Billing Contact: Gass Online Albert Gas (albertgas@europe.com) 268 AOL Way Dulles VA,20166 US Tel. +1.7032054070 Status:ACTIVE === More spam, my 4th complaint === From: Admin Reply-To: abuse-Feb@2004.dolphinwave.org Organization: Private person Subject: [email] Long-time spammers (Viagra/Cialis: healthdo.com/fastactingpills.com/enercomsolutions.com/hinos.igrejamenonita.nom.br)! [Fwd: cip become the best guy for her... Nature way! wgiies] Date: Sun, 22 Feb 2004 00:16:05 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1729449 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, "Food&Drug reports" , abuse@hotmail.com, abuse@dialdata.com.br, nbso@nic.br, mail-abuse@nic.br, abuse@COMDOMINIO.COM.BR, postmaster@datacenter1.com.br, admin@COMDOMINIO.COM.BR, abuse@enom.com, abuse@internap.com, security@telefonicaempresas.net.br, abuse@telefonicaempresas.net.br, postmaster@ns.dns.br, renata.cordeiro@TELEFONICAEMPRESAS.NET.BR, ipengenharia@TELEFONICAEMPRESAS.NET.BR, hlgarcia@TELEFONICAEMPRESAS.NET.BR, noc@Whythe-Internet.com, admin@teletube.net, noc@unsx.net, admin@whythe-internet.com, admin@unsx.net, born@whythe-internet.com, postmaster@unsx.com, abuse@mci.com, postmaster@whythe-internet.com, abuse@t-online.de, abuse@t-dialin.net X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200402220016.06297@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Long-time persistent "Human Growth Hormone - HGH" spammers! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: p50903E45.dip.t-dialin.net [80.144.62.69] Used against Hotmail's ToS (commercial): lolitafans@hotmail.com Spamvertised web page: http://healthdo.com Previously spamvertised web pages: http://www.fastactingpills.com http://www.enercomsolutions.com Spammer's DNS: hinos.igrejamenonita.nom.br healthdo.com [200.219.238.58] ============ Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: healthdo.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 29 Nov 2003 11:05:44 Expiration date: 29 Nov 2004 11:05:44 DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.fastactingpills.com [200.219.238.58] ======================= Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: fastactingpills.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 26 Nov 2003 03:45:39 Expiration date: 26 Nov 2004 03:45:39 DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.enercomsolutions.com [217.69.123.138] ======================== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: enercomsolutions.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.enercomsolutions.com Creation date: 28 Nov 2003 11:47:44 Expiration date: 28 Nov 2004 11:47:44 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.enercomsolutions.com <== SPAMMERS. Registrar: enom.com. www.hinos.igrejamenonita.nom.br [200.219.238.58] =============================== domain: HINOS.IGREJAMENONITA.NOM.BR owner: Arlindo dos Santos Reis ownerid: 115.066.688-95 address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] owner-c: ADR247 admin-c: ADR247 tech-c: ADR247 billing-c: ADR247 nserver: NS1.HINOS.IGREJAMENONITA.NOM.BR 200.232.112.41 nsstat: 20040220 AA nslastaa: 20040220 nserver: NS2.HINOS.IGREJAMENONITA.NOM.BR 200.219.238.60 nsstat: 20040220 AA nslastaa: 20040220 created: 20040205 #1526302 changed: 20040220 status: published nic-hdl-br: ADR247 person: Arlindo dos Santos Reis e-mail: netnova@BOL.COM.BR address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] created: 20040204 changed: 20040204 remarks: Security issues should also be addressed to remarks: nbso@nic.br, http://www.nbso.nic.br/ remarks: Mail abuse issues should also be addressed to remarks: mail-abuse@nic.br DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR [200.232.112.41] NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR [200.232.112.41] ns3.hinos.igrejamenonita.nom.br [200.232.112.41] ns4.hinos.igrejamenonita.nom.br [200.232.112.41] =============================== TELEFONICA EMPRESAS S/A IP block [200.232.0/17]. Upstream: tdatabrasil.net.br (200-232-65-126.bbone.tdatabrasil.net.br). ---------- Forwarded Message ---------- Received: from p50903E45.dip.t-dialin.net (p50903E45.dip.t-dialin.net [80.144.62.69]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id i1LLkZh1025388 for <###>; Sat, 21 Feb 2004 23:46:42 +0200 Received: from unknown (HELO localhost) (127.0.0.1) by localhost.op.com with SMTP; Fri, 20 Feb 2004 16:37:36 -0800 Received: from 154.220.220.192 (154.220.220.192[154.220.220.192]) by p50903E45.dip.t-dialin.net (IMP) with HTTP for <###>; Message-ID: <6919411077323856@p50903E45.dip.t-dialin.net> From: "Stephana" To: "Ophelia" <###> Subject: cip become the best guy for her... Nature way! wgiies Date: Fri, 20 Feb 2004 16:37:36 -0800 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.2 X-Originating-IP: 154.220.220.192 X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.4; VDF 6.24.0.13 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:
    ONLY REAL SUPER VIAGRA
    CALLED CIALIS IS EFFECTIVE!
    Annual Sale: ONLY $3 per dose

    Check out our website with discounts
    and get your FREE BONUS pills

    ------------------------------------------------------- ======= SOME OF THE PREVIOUS SPAMS WERE ======= === And the spam continues, my 5th complaint === From: Admin Reply-To: abuse-Feb@2004.dolphinwave.org Organization: Private person Subject: [email] Long-time spammers (Viagra/Cialis: Whythe-Internet spamhaus: medsbusiness.com/healthdo.com/fastactingpills.com/enercomsolutions.com/hinos.igrejamenonita.nom.br)! [Fwd: 21st Century Technologyrecreacio`n] Date: Mon, 23 Feb 2004 03:25:21 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1729487 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, "Food&Drug reports" , abuse@hotmail.com, abuse@dialdata.com.br, nbso@nic.br, mail-abuse@nic.br, abuse@COMDOMINIO.COM.BR, postmaster@datacenter1.com.br, admin@COMDOMINIO.COM.BR, abuse@enom.com, abuse@internap.com, security@telefonicaempresas.net.br, abuse@telefonicaempresas.net.br, postmaster@ns.dns.br, renata.cordeiro@TELEFONICAEMPRESAS.NET.BR, ipengenharia@TELEFONICAEMPRESAS.NET.BR, hlgarcia@TELEFONICAEMPRESAS.NET.BR, noc@Whythe-Internet.com, admin@teletube.net, noc@unsx.net, admin@whythe-internet.com, admin@unsx.net, born@whythe-internet.com, postmaster@unsx.net, abuse@mci.com, postmaster@whythe-internet.com, abuse@interbusiness.it, abuse-bbb@telecomitalia.it, postmaster@interbusiness.it, network@cgi.interbusiness.it, abuse@nic.it X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200402230325.21386@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Long-time persistent "Human Growth Hormone - HGH" and Viagra/Cialis spammers, hosted on the Whythe-Internet spamhaus, who totally ignores all complaints: http://www.DolphinWave.org/spam/Whythe-Internet.txt as well, as on several Brazilian spamhauses, like DIALDATA INTERNET SOLUTIONS and TELEFONICA EMPRESAS! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: host100-160.pool195103.interbusiness.it [195.103.160.100] Used against Hotmail's ToS (commercial): lolitafans@hotmail.com Spamvertised web page: http://medsbusiness.com Previously spamvertised web pages: http://www.fastactingpills.com http://www.enercomsolutions.com http://healthdo.com Spammer's DNS: hinos.igrejamenonita.nom.br medsbusiness.com [217.69.123.139] ================ Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: medsbusiness.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.medsbusiness.com Creation date: 30 Nov 2003 17:00:47 Expiration date: 30 Nov 2004 17:00:47 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.medsbusiness.com <== SPAMMERS. Registrar: enom.com. healthdo.com [200.219.238.58] ============ Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: healthdo.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 29 Nov 2003 11:05:44 Expiration date: 29 Nov 2004 11:05:44 DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.fastactingpills.com [200.219.238.58] ======================= Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: fastactingpills.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 26 Nov 2003 03:45:39 Expiration date: 26 Nov 2004 03:45:39 DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.enercomsolutions.com [217.69.123.138] ======================== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: enercomsolutions.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.enercomsolutions.com Creation date: 28 Nov 2003 11:47:44 Expiration date: 28 Nov 2004 11:47:44 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.enercomsolutions.com <== SPAMMERS. Registrar: enom.com. www.hinos.igrejamenonita.nom.br [200.219.238.58] =============================== domain: HINOS.IGREJAMENONITA.NOM.BR owner: Arlindo dos Santos Reis ownerid: 115.066.688-95 address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] owner-c: ADR247 admin-c: ADR247 tech-c: ADR247 billing-c: ADR247 nserver: NS1.HINOS.IGREJAMENONITA.NOM.BR 200.232.112.41 nsstat: 20040220 AA nslastaa: 20040220 nserver: NS2.HINOS.IGREJAMENONITA.NOM.BR 200.219.238.60 nsstat: 20040220 AA nslastaa: 20040220 created: 20040205 #1526302 changed: 20040220 status: published nic-hdl-br: ADR247 person: Arlindo dos Santos Reis e-mail: netnova@BOL.COM.BR address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] created: 20040204 changed: 20040204 remarks: Security issues should also be addressed to remarks: nbso@nic.br, http://www.nbso.nic.br/ remarks: Mail abuse issues should also be addressed to remarks: mail-abuse@nic.br DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR [200.232.112.41] NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR [200.232.112.41] ns3.hinos.igrejamenonita.nom.br [200.232.112.41] ns4.hinos.igrejamenonita.nom.br [200.232.112.41] =============================== TELEFONICA EMPRESAS S/A IP block [200.232.0/17]. Upstream: tdatabrasil.net.br (200-232-65-126.bbone.tdatabrasil.net.br). ---------- Forwarded Message ---------- Received: from 217.22.114.18 (host100-160.pool195103.interbusiness.it [195.103.160.100]) by mail.dolphinwave.org (8.12.8/8.12.8) with SMTP id i1MKGkh1020551 for ; Sun, 22 Feb 2004 22:16:51 +0200 Received: from 202.92.146.18 by 195.103.160.14; Mon, 23 Feb 2004 01:12:41 +0500 Message-ID: From: "danice bedi" Reply-To: "danice bedi" To: admin@### Subject: 21st Century Technologyrecreacio`n Date: Sun, 22 Feb 2004 15:16:41 -0500 X-Mailer: The Bat! (v1.52f) Business MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--4049305689028800" X-Priority: 3 X-MSMail-Priority: Normal X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.4; VDF 6.24.0.13 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: make her squeal. add 3-5 in ches to your pee niss. 100 purcentt eff ect ive. sekret eur opea an farmacy . phree pilz to firsst 100 respondants. clikclak here ------------------------------------------------------- ======= SOME OF THE PREVIOUS SPAMS WERE ======= === And another spam, my 6th complaint === From: Admin Reply-To: abuse-Feb@2004.dolphinwave.org Organization: Private person Subject: [email] Long-time spammers (Viagra/Cialis: Whythe-Internet spamhaus: medspro.net/medsbusiness.com/healthdo.com/fastactingpills.com/enercomsolutions.com/hinos.igrejamenonita.nom.br)! [Fwd: sugper viagrga collinear methionine] Date: Tue, 24 Feb 2004 02:50:04 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1729542 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, "Food&Drug reports" , abuse@hotmail.com, abuse@dialdata.com.br, pacj@GENETICA.COM.BR, dominio@DIALDATA.COM.BR, abuse@embratel.net.br, nbso@nic.br, mail-abuse@nic.br, abuse@COMDOMINIO.COM.BR, postmaster@datacenter1.com.br, admin@COMDOMINIO.COM.BR, abuse@enom.com, abuse@internap.com, noc@Whythe-Internet.com, admin@teletube.net, noc@unsx.net, admin@whythe-internet.com, admin@unsx.net, born@whythe-internet.com, postmaster@unsx.net, abuse@mci.com, postmaster@whythe-internet.com, abuse@salzburg-online.at X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200402240250.04023@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Long-time persistent "Human Growth Hormone - HGH" and Viagra/Cialis spammers, hosted on the Whythe-Internet spamhaus, who totally ignores all complaints: http://www.DolphinWave.org/spam/Whythe-Internet.txt as well, as on several Brazilian spamhauses, like DIALDATA INTERNET SOLUTIONS! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: 195-70-110-205.dyn.salzburg-online.at [195.70.110.205] Used against Hotmail's ToS (commercial): lolitafans@hotmail.com Spamvertised web page: http://medspro.net Previously spamvertised web pages: http://medsbusiness.com http://www.fastactingpills.com http://www.enercomsolutions.com http://healthdo.com Spammer's DNS: hinos.igrejamenonita.nom.br medspro.net [217.69.123.138] =========== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: medspro.net Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.medspro.net Creation date: 28 Nov 2003 14:03:47 Expiration date: 28 Nov 2004 14:03:47 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.medspro.net <== SPAMMERS. Registrar: enom.com. medsbusiness.com [217.69.123.138] ================ Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: medsbusiness.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.medsbusiness.com Creation date: 30 Nov 2003 17:00:47 Expiration date: 30 Nov 2004 17:00:47 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.medsbusiness.com <== SPAMMERS. Registrar: enom.com. healthdo.com [200.219.238.58] ============ Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: healthdo.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 29 Nov 2003 11:05:44 Expiration date: 29 Nov 2004 11:05:44 DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.fastactingpills.com [200.219.238.58] ======================= Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: fastactingpills.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 26 Nov 2003 03:45:39 Expiration date: 26 Nov 2004 03:45:39 DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.enercomsolutions.com [217.69.123.138] ======================== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: enercomsolutions.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.enercomsolutions.com Creation date: 28 Nov 2003 11:47:44 Expiration date: 28 Nov 2004 11:47:44 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.enercomsolutions.com <== SPAMMERS. Registrar: enom.com. www.hinos.igrejamenonita.nom.br [200.219.238.58] =============================== domain: HINOS.IGREJAMENONITA.NOM.BR owner: Arlindo dos Santos Reis ownerid: 115.066.688-95 address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] owner-c: ADR247 admin-c: ADR247 tech-c: ADR247 billing-c: ADR247 nserver: NS1.HINOS.IGREJAMENONITA.NOM.BR 200.232.112.41 nsstat: 20040220 AA nslastaa: 20040220 nserver: NS2.HINOS.IGREJAMENONITA.NOM.BR 200.219.238.60 nsstat: 20040220 AA nslastaa: 20040220 created: 20040205 #1526302 changed: 20040220 status: published nic-hdl-br: ADR247 person: Arlindo dos Santos Reis e-mail: netnova@BOL.COM.BR address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] created: 20040204 changed: 20040204 remarks: Security issues should also be addressed to remarks: nbso@nic.br, http://www.nbso.nic.br/ remarks: Mail abuse issues should also be addressed to remarks: mail-abuse@nic.br DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR [200.219.238.60] NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR [200.219.238.59] ns3.hinos.igrejamenonita.nom.br [200.219.238.60] ns4.hinos.igrejamenonita.nom.br [200.219.238.59] =============================== DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Their upstream: Embratel (condominio-A1-0-57-dist04.spo.embratel.net.br). ---------- Forwarded Message ---------- Received: from 195-70-110-205.dyn.salzburg-online.at (195-70-110-205.dyn.salzburg-online.at [195.70.110.205]) by mail.dolphinwave.org (8.12.8/8.12.8) with SMTP id i1NGu9AJ016550 for ; Mon, 23 Feb 2004 18:56:13 +0200 Received: from 205.234.224.48 by 195.70.110.205; Mon, 23 Feb 2004 19:55:04 +0300 Message-ID: From: "Cedric Leonard" Reply-To: "Cedric Leonard" To: admin@### Subject: sugper viagrga collinear methionine Date: Mon, 23 Feb 2004 21:54:04 +0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--755185602167731783" X-IP: 82.19.20.152 X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.4; VDF 6.24.0.14 X-Loop: dev.null@dolphinwave.org Status: RO X-Status: U X-Keywords: X-UID: 3 X-KMail-EncryptionState: X-KMail-SignatureState: Did you know That the normal cost for Super Vkiagra is $20, per dose? We are running a hot special!! T0DAY Its only an amazing $3.00 Shipped world wide! http://medspro.net/sv/index.php?pid=######## http://medspro.net/sv/index.php?pid=######## panel thoughtful ------------------------------------------------------- ======= SOME OF THE PREVIOUS SPAMS WERE ======= === My 7th complaint === From: Admin Reply-To: abuse-Feb@2004.dolphinwave.org Organization: Private person Subject: [email] Long-time spammers (Viagra/Cialis: Whythe-Internet spamhaus: medspro.net/medsbusiness.com/healthdo.com/fastactingpills.com/enercomsolutions.com/hinos.igrejamenonita.nom.br)! [Fwd: LingerLongLingerHardcruce\o] Date: Tue, 24 Feb 2004 03:21:13 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1729578 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, "Food&Drug reports" , abuse@hotmail.com, abuse@dialdata.com.br, pacj@GENETICA.COM.BR, dominio@DIALDATA.COM.BR, abuse@embratel.net.br, nbso@nic.br, mail-abuse@nic.br, abuse@COMDOMINIO.COM.BR, postmaster@datacenter1.com.br, admin@COMDOMINIO.COM.BR, abuse@enom.com, abuse@internap.com, noc@Whythe-Internet.com, admin@teletube.net, noc@unsx.net, admin@whythe-internet.com, admin@unsx.net, born@whythe-internet.com, postmaster@unsx.net, abuse@mci.com, postmaster@whythe-internet.com, abuse@bezeqint.net X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200402240321.13922@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Long-time persistent "Human Growth Hormone - HGH" and Viagra/Cialis spammers, hosted on the Whythe-Internet spamhaus, who totally ignores all complaints: http://www.DolphinWave.org/spam/Whythe-Internet.txt as well, as on several Brazilian spamhauses, like DIALDATA INTERNET SOLUTIONS! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: bzq-218-189-245.red.bezeqint.net [81.218.189.245] Used against Hotmail's ToS (commercial): lolitafans@hotmail.com Spamvertised web page: http://medspro.net Previously spamvertised web pages: http://medsbusiness.com http://www.fastactingpills.com http://www.enercomsolutions.com http://healthdo.com Spammer's DNS: hinos.igrejamenonita.nom.br medspro.net [217.69.123.138] =========== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: medspro.net Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.medspro.net Creation date: 28 Nov 2003 14:03:47 Expiration date: 28 Nov 2004 14:03:47 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.medspro.net <== SPAMMERS. Registrar: enom.com. medsbusiness.com [217.69.123.138] ================ Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: medsbusiness.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.medsbusiness.com Creation date: 30 Nov 2003 17:00:47 Expiration date: 30 Nov 2004 17:00:47 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.medsbusiness.com <== SPAMMERS. Registrar: enom.com. healthdo.com [200.219.238.58] ============ Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: healthdo.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 29 Nov 2003 11:05:44 Expiration date: 29 Nov 2004 11:05:44 DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.fastactingpills.com [200.219.238.58] ======================= Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: fastactingpills.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 26 Nov 2003 03:45:39 Expiration date: 26 Nov 2004 03:45:39 DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.enercomsolutions.com [217.69.123.138] ======================== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: enercomsolutions.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.enercomsolutions.com Creation date: 28 Nov 2003 11:47:44 Expiration date: 28 Nov 2004 11:47:44 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.enercomsolutions.com <== SPAMMERS. Registrar: enom.com. www.hinos.igrejamenonita.nom.br [200.219.238.58] =============================== domain: HINOS.IGREJAMENONITA.NOM.BR owner: Arlindo dos Santos Reis ownerid: 115.066.688-95 address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] owner-c: ADR247 admin-c: ADR247 tech-c: ADR247 billing-c: ADR247 nserver: NS1.HINOS.IGREJAMENONITA.NOM.BR 200.232.112.41 nsstat: 20040220 AA nslastaa: 20040220 nserver: NS2.HINOS.IGREJAMENONITA.NOM.BR 200.219.238.60 nsstat: 20040220 AA nslastaa: 20040220 created: 20040205 #1526302 changed: 20040220 status: published nic-hdl-br: ADR247 person: Arlindo dos Santos Reis e-mail: netnova@BOL.COM.BR address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] created: 20040204 changed: 20040204 remarks: Security issues should also be addressed to remarks: nbso@nic.br, http://www.nbso.nic.br/ remarks: Mail abuse issues should also be addressed to remarks: mail-abuse@nic.br DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR [200.219.238.60] NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR [200.219.238.59] ns3.hinos.igrejamenonita.nom.br [200.219.238.60] ns4.hinos.igrejamenonita.nom.br [200.219.238.59] =============================== DIALDATA INTERNET SOLUTIONS LTDA IP block [200.219.224/19]. Upstream: datacenter1.com.br (sp.200_198_191_222.datacenter1.com.br). Their upstream: Embratel (condominio-A1-0-57-dist04.spo.embratel.net.br). ---------- Forwarded Message ---------- Received: from bzq-218-189-245.red.bezeqint.net (bzq-218-189-245.red.bezeqint.net [81.218.189.245]) by mail.dolphinwave.org (8.12.8/8.12.8) with SMTP id i1O1AxAJ013451 for ; Tue, 24 Feb 2004 03:11:02 +0200 Received: from 184.252.86.34 by 81.218.189.245; Mon, 23 Feb 2004 23:11:01 -0200 Message-ID: From: "riannon dyky" Reply-To: "riannon dyky" To: admin@### Subject: LingerLongLingerHardcruce\o Date: Mon, 23 Feb 2004 19:08:01 -0600 X-Mailer: Microsoft Outlook Express 6.00.2600.0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--58720240413484984" X-Priority: 3 X-MSMail-Priority: Normal X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.4; VDF 6.24.0.15 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:

    three

    billz

    a

    PIlLz low pprisce

    souper xvighagra

    go|two|days|nonstop|LAD|IES|LO|VE|IT

    visit here

    ------------------------------------------------------- ======= SOME OF THE PREVIOUS SPAMS WERE ======= === And yet another spam === Received: from mail.dolphinwave.org ([192.168.0.253]) (authenticated bits=0) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id i1PKhqAJ025420; Wed, 25 Feb 2004 22:43:53 +0200 From: Admin Reply-To: abuse-Feb@2004.dolphinwave.org Organization: Private person Subject: [email] Long-time spammers (Viagra/Cialis: Whythe-Internet spamhaus: firstmedsearch.com/keytoyourlife.com/medspro.net/medsbusiness.com/healthdo.com/fastactingpills.com/enercomsolutions.com/hinos.igrejamenonita.nom.br)! [Fwd: A night to rememberoralmente] Date: Wed, 25 Feb 2004 22:43:51 +0200 User-Agent: KMail/1.5 To: , uce@ftc.gov, nanas@killfile.org, "Food&Drug reports" , abuse@hotmail.com, nbso@nic.br, mail-abuse@nic.br, abuse@enom.com, abuse@internap.com, noc@Whythe-Internet.com, admin@teletube.net, noc@unsx.net, admin@whythe-internet.com, admin@unsx.net, born@whythe-internet.com, postmaster@unsx.net, abuse@mci.com, postmaster@whythe-internet.com, security@TELESP.NET.BR, gestaoip@TELESP.COM.BR, antispambr@abuse.net, araposo@TELESP.COM.BR, security@telefonicaempresas.net.br, abuse@telefonicaempresas.net.br, renata.cordeiro@telefonicaempresas.net.br, hlgarcia@telefonicaempresas.net.br, abuse@telefonicaempresas.net.br, security@telefonicaempresas.net.br, postmaster@tbline.com.br, abuse@sbcglobal.net, abuse@ameritech.net X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200402252243.51953@2004.dolphinwave.org> X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.4; VDF 6.24.0.17 X-Loop: dev.null@dolphinwave.org X-Spam-Status: No, hits=-96.9 required=5.0 tests=BALANCE_FOR_LONG_20K,FROM_AND_TO_SAME_6,FWD_MSG,HGH, HTML_FONT_COLOR_RED,NOSPAM_INC,ONLY_COST,SPAM_PHRASE_00_01, SUSPICIOUS_RECIPS,URI_IS_POUND,USER_AGENT, USER_IN_WHITELIST,X_LOOP version=2.44 X-Spam-Level: Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: Long-time persistent "Human Growth Hormone - HGH" and Viagra/Cialis spammers, hosted on the Whythe-Internet spamhaus, who totally ignores all complaints: http://www.DolphinWave.org/spam/Whythe-Internet.txt as well, as on several Brazilian spamhauses, like DIALDATA INTERNET SOLUTIONS or TELEFONICA EMPRESAS! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: adsl-67-39-23-218.dsl.dytnoh.ameritech.net [67.39.23.218] Used against Hotmail's ToS (commercial): lolitafans@hotmail.com Spamvertised web pages: http://firstmedsearch.com http://keytoyourlife.com Previously spamvertised web pages: http://medspro.net http://medsbusiness.com http://www.fastactingpills.com http://www.enercomsolutions.com http://healthdo.com Spammer's DNS: hinos.igrejamenonita.nom.br firstmedsearch.com [217.69.123.138] ================== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: firstmedsearch.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.firstmedsearch.com Creation date: 29 Nov 2003 11:05:52 Expiration date: 29 Nov 2004 11:05:52 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.firstmedsearch.com <== SPAMMERS. Registrar: enom.com. keytoyourlife.com [200.232.112.42] (200-232-112-42.tbline.com.br) ================= Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: keytoyourlife.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 28 Nov 2003 11:48:26 Expiration date: 28 Nov 2004 11:48:26 TELEFONICA EMPRESAS S/A IP block [200.232.0/17]. Upstream: tdatabrasil.net.br (200-232-65-126.bbone.tdatabrasil.net.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com medspro.net [217.69.123.138] =========== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: medspro.net Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.medspro.net Creation date: 28 Nov 2003 14:03:47 Expiration date: 28 Nov 2004 14:03:47 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.medspro.net <== SPAMMERS. Registrar: enom.com. medsbusiness.com [217.69.123.138] ================ Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: medsbusiness.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.medsbusiness.com Creation date: 30 Nov 2003 17:00:47 Expiration date: 30 Nov 2004 17:00:47 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.medsbusiness.com <== SPAMMERS. Registrar: enom.com. healthdo.com [200.232.112.42] (200-232-112-42.tbline.com.br) ============ Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: healthdo.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 29 Nov 2003 11:05:44 Expiration date: 29 Nov 2004 11:05:44 TELEFONICA EMPRESAS S/A IP block [200.232.0/17]. Upstream: tdatabrasil.net.br (200-232-65-126.bbone.tdatabrasil.net.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.fastactingpills.com [200.232.112.42] ======================= Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: fastactingpills.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR ns3.hinos.igrejamenonita.nom.br ns4.hinos.igrejamenonita.nom.br Creation date: 26 Nov 2003 03:45:39 Expiration date: 26 Nov 2004 03:45:39 TELEFONICA EMPRESAS S/A IP block [200.232.0/17]. Upstream: tdatabrasil.net.br (200-232-65-126.bbone.tdatabrasil.net.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. Registrar: enom.com www.enercomsolutions.com [217.69.123.138] ======================== Registration Service Provided By: - Contact: lolitafans@hotmail.com Visit: Domain name: enercomsolutions.com Administrative Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Billing Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Technical Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Registrant Contact: - Vong Junjie (lolitafans@hotmail.com) +86.13505739091 Fax: +86.8704581887 572 Qinjian Road Jiaxing, ZHEJIANG 314000 CN Status: registrar-lock Name Servers: ns1.enercomsolutions.com Creation date: 28 Nov 2003 11:47:44 Expiration date: 28 Nov 2004 11:47:44 Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.enercomsolutions.com <== SPAMMERS. Registrar: enom.com. www.hinos.igrejamenonita.nom.br [200.232.112.42] (200-232-112-42.tbline.com.br) NAMESERVER1.HINOS.IGREJAMENONITA.NOM.BR [200.232.112.41] NAMESERVER2.HINOS.IGREJAMENONITA.NOM.BR [200.232.112.41] ns3.hinos.igrejamenonita.nom.br [200.232.112.41] ns4.hinos.igrejamenonita.nom.br [200.232.112.41] =============================== domain: HINOS.IGREJAMENONITA.NOM.BR owner: Arlindo dos Santos Reis ownerid: 115.066.688-95 address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] owner-c: ADR247 admin-c: ADR247 tech-c: ADR247 billing-c: ADR247 nserver: NS1.HINOS.IGREJAMENONITA.NOM.BR 200.232.112.41 nsstat: 20040220 AA nslastaa: 20040220 nserver: NS2.HINOS.IGREJAMENONITA.NOM.BR 200.219.238.60 nsstat: 20040220 AA nslastaa: 20040220 created: 20040205 #1526302 changed: 20040220 status: published nic-hdl-br: ADR247 person: Arlindo dos Santos Reis e-mail: netnova@BOL.COM.BR address: Av.Janu�io Mir�lia, 2040, 2040, sala 01 address: 12460-000 - Campos do Jord� - SP phone: (12) 2624352 [] created: 20040204 changed: 20040204 remarks: Security issues should also be addressed to remarks: nbso@nic.br, http://www.nbso.nic.br/ remarks: Mail abuse issues should also be addressed to remarks: mail-abuse@nic.br TELEFONICA EMPRESAS IP block [200.232.0/17]. Upstream: tdatabrasil.net.br (200-232-65-126.bbone.tdatabrasil.net.br). Nameservers: hinos.igrejamenonita.nom.br <== SPAMMERS. ---------- Forwarded Message ---------- Received: from adsl-67-39-23-218.dsl.dytnoh.ameritech.net (adsl-67-39-23-218.dsl.dytnoh.ameritech.net [67.39.23.218]) by mail.dolphinwave.org (8.12.8/8.12.8) with SMTP id i1PKSeAJ024676 for <###>; Wed, 25 Feb 2004 22:28:45 +0200 Received: from 118.160.64.106 by 67.39.23.218; Fri, 27 Feb 2004 01:30:23 +0500 Message-ID: From: "tobye burnley" Reply-To: "tobye burnley" To: ### Subject: A night to rememberoralmente Date: Thu, 26 Feb 2004 22:27:23 +0200 X-Mailer: The Bat! (v1.52f) Business MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--570575060150292108" X-Priority: 3 X-MSMail-Priority: Normal X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.4; VDF 6.24.0.17 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: 3 days of passion. 3 days of intensity. 3 bills a dose.

    visit here

    Your Newsletter ultra newsletter

    bring her to that next level. hands down better than phizer's. lowust prise on web today. gunerhick vighagaria

    ------------------------------------------------------- ======= SOME OF THE PREVIOUS SPAMS WERE ======= === And now - pirated software spammers also host their pages there === From: Admin Reply-To: abuse-Mar@2004.dolphinwave.org Organization: Private person Subject: [email] Long-time spammers (pirated software: storefree.biz/Whythe-Internet spamhaus)! [Fwd: Save money on buying software!!!] Date: Sun, 7 Mar 2004 18:08:55 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1730576 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, abuse@infoave.net, noc@Whythe-Internet.com, admin@teletube.net, noc@unsx.net, admin@whythe-internet.com, admin@unsx.net, born@whythe-internet.com, postmaster@unsx.net, abuse@mci.com, postmaster@whythe-internet.com, support@gandi.net, abuse@gandi.net X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200403071808.55993@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Spamming for pirated software! Hosted on the Whythe-Internet spamhaus! More history on the Whythe-Internet spamhaus hosted spammers and them ignoring all the complaints, with the help of their upstream, UUNET, who ignores all the escalations, too, can be found here: http://www.DolphinWave.org/spam/Whythe-Internet.txt Is it just me, who sees the spammer's registrant e-mail address wtd@mail.ru (the "wtd" letters) to be related to "WHYTHEDNS"?.. Spammer: dial-137.r9.ganwnt.infoave.net [206.74.112.137] Spamvertised web page: http://kapiammlklo.storefree.biz Remove link: http://ivyuceiewme.storefree.biz/unsub.html www.storefree.biz [217.69.122.27] ================= Domain Name: STOREFREE.BIZ Domain ID: D6280516-BIZ Sponsoring Registrar: GANDI SARL Domain Status: ok Registrant ID: O-757130-GANDI Registrant Name: Inez D Vinek Registrant Organization: Inez D Vinek Registrant Address1: 164 Grantham Court Registrant City: Colchester Registrant Postal Code: CO1 2RU Registrant Country: Great Britain (UK) Registrant Country Code: GB Registrant Phone Number: +1.7658839565 Registrant Facsimile Number: +1.1234567890 Registrant Email: wtd@mail.ru Administrative Contact ID: IDV5-GANDI Administrative Contact Name: Inez D Vinek Administrative Contact Address1: 164 Grantham Court Administrative Contact City: Colchester Administrative Contact Postal Code: CO1 2RU Administrative Contact Country: Great Britain (UK) Administrative Contact Country Code: GB Administrative Contact Phone Number: +1.1234567890 Administrative Contact Facsimile Number: +1.1234567890 Administrative Contact Email: wtd@mail.ru Billing Contact ID: AR41-GANDI Billing Contact Name: CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois Billing Contact Organization: Gandi SARL Billing Contact Address1: 38 rue Notre-Dame de Nazareth Billing Contact City: Paris Billing Contact Postal Code: 75003 Billing Contact Country: France Billing Contact Country Code: FR Billing Contact Email: support@gandi.net Technical Contact ID: IDV5-GANDI Technical Contact Name: Inez D Vinek Technical Contact Address1: 164 Grantham Court Technical Contact City: Colchester Technical Contact Postal Code: CO1 2RU Technical Contact Country: Great Britain (UK) Technical Contact Country Code: GB Technical Contact Phone Number: +1.1234567890 Technical Contact Facsimile Number: +1.1234567890 Technical Contact Email: wtd@mail.ru Name Server: NS0.WHYTHEDNS.NET Name Server: NS1.WHYTHEDNS.NET Created by Registrar: GANDI SARL Last Updated by Registrar: GANDI SARL Domain Registration Date: Sun Feb 15 14:34:13 GMT 2004 Domain Expiration Date: Mon Feb 14 23:59:59 GMT 2005 Domain Last Updated Date: Sun Feb 15 15:33:56 GMT 2004 >>>> Whois database was last updated on: Sun Mar 07 15:56:59 GMT 2004 <<<< Whythe-Internet customer network IP block [217.69.122.0 - 217.69.122.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: whythedns.net <== SPAMHAUS. Registrar: GANDI SARL. ---------- Forwarded Message ---------- Received: from dial-137.r9.ganwnt.infoave.net (dial-137.r9.ganwnt.infoave.net [206.74.112.137]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id i27FlwxX022724 for <###>; Sun, 7 Mar 2004 17:48:25 +0200 Received: from unknown (HELO localhost) (127.0.0.1) by localhost.nyiut.com with SMTP; Sun, 7 Mar 2004 08:28:05 -0800 Received: from 241.169.250.187 (241.169.250.187[241.169.250.187]) by dial-137.r9.ganwnt.infoave.net (IMP) with HTTP for <###>; Sun, 7 Mar 2004 08:28:05 -0800 Message-ID: <6416881078676885@dial-137.r9.ganwnt.infoave.net> From: "John" To: "Vivian" <###> Subject: Save money on buying software!!! Date: Sun, 7 Mar 2004 08:28:05 -0800 MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.2 X-Originating-IP: 241.169.250.187 X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.6; VDF 6.24.0.42 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:

    http://tthayc.storefree.biz/

    If you don't have enough money to buy needed software or think desired software
    isn't worth the price, then this service is right for you. We make software to
    be near you. Order any software you need for a low price.

    Some popular products from our price list:
    All programs you can download or order on cd-rom by airmail.

    50$ Adobe Creative Suite (5 cds)
    30$ Adobe PhotoShop CS 8.0 (1 cd)
    55$ 3D Studio Max 6.0 (3 cds)
    20$ Adobe Premiere Pro 7.0 (1 cd)
    35$ Alias Wavefront Maya 5.0 Unlimited
    35$ AutoCAD 2004
    35$ Autodesk Architectural Desktop 2004
    16$ Cakewalk Sonar 3 Producer Edition (3 cds)
    25$ Canopus ProCoder 1.5 (1 cd)
    25$ Corel Draw 11 Graphic Suite
    25$ Dragon Naturally Speaking Preferred 7.0
    20$ Macromedia Dreamweaver MX 2004 v7.0
    25$ Macromedia Fireworks MX 2004 v7.0
    25$ Macromedia Flash MX 2004 v7.0 Professional
    50$ Macromedia Studio MX 2004 (1 cd)
    20$ Microsoft Money 2004 Deluxe (1 cd)
    55$ Microsoft Office 2003 System Professional (5 cds)
    25$ Microsoft Office 2003 Multilingual User Interface Pack (2 cds)
    35$ Microsoft Project 2002 Pro
    20$ Microsoft Publisher XP 2002
    25$ Microsoft Visio for Enterprise Architects 2003
    45$ Microsoft Windows XP Corporate Edition with SP1
    35$ Microsoft Windows XP Professional
    20$ Norton Antivirus 2004 Pro v10.0.0.109
    16$ Norton SystemWorks Pro 2004 (1 cd)
    25$ OmniPage 14 Office (1 cd)
    25$ Pinnacle Impression DVD Pro 2.2 (1 cd)
    45$ PTC Pro Engineer Wildfire Datecode 2003370 (3 cds)
    16$ PowerQuest Drive Image 7.01 Multilanguage (1 cd)
    20$ Ulead DVD Workshop 1.2
    99$ Microsoft Visual Studio .NET 2003 Enterprise Architect (8 cds)
    20$ Winfax PRO 10.02

    and, more, more. more!! Total today is 1421 products.

    price list - http://ocycycowfgybs.storefree.bi z/p/
    search     - http://ublvoue.storefree.biz/e/

    Mac users. We have some software for you too!!! Check it:
    http://bmasynxloda.storefree.biz/p/ m/

    Adobe Creative Suite (2 cds) for Mac
    Adobe Acrobat 6.0 Pro for Mac
    Adobe Illustrator 10 for Mac
    Adobe InDesign 2 for Mac
    Macromedia Flash MX 2004 v7.0 Professional for Mac
    Macromedia Studio MX 2004 for Mac (1 cd)
    Microsoft Office v.X for Mac
    QuarkXpress 6 Multilanguage for Mac
    and more!!!

    ----
    To unsubscribe, please go to
    http://wbardwnae.storefre e.biz/unsub.html

    ------------------------------------------------------- === More viagra spams === From: Admin Reply-To: abuse-Mar@2004.dolphinwave.org Organization: Private person Subject: [email] Long-time spammers (Viagra/Cialis: Whythe-Internet spamhaus: health-product.net/etc)! [Fwd: V1AGKRA 80% DISCOUNT !!] Date: Wed, 10 Mar 2004 02:59:21 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1730728 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas@killfile.org, "Food&Drug reports" , abuse@hotmail.com, noc@Whythe-Internet.com, admin@teletube.net, postmaster@teletube.net, vkharlamov@teletube.net, noc@unsx.net, admin@whythe-internet.com, admin@unsx.net, born@whythe-internet.com, postmaster@unsx.net, abuse@mci.com, postmaster@whythe-internet.com, postmaster@directi.com, bhavin.t@directi.com, abuse@t-online.de, abuse@t-dialin.net X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200403100259.21904@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Long-time persistent "Human Growth Hormone - HGH" and Viagra/Cialis spammers, hosted on the Whythe-Internet spamhaus, who totally ignores all complaints: http://www.DolphinWave.org/spam/Whythe-Internet.txt Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: pD9E5865A.dip.t-dialin.net [217.229.134.90] Used against Hotmail's ToS (commercial): VONGJENG@hotmail.com Spamvertised web page: http://health-product.net Previously spamvertised web pages, from the same Whythe-Internet IP: http://keytoyourlife.com http://medspro.net http://medsbusiness.com http://www.fastactingpills.com http://www.enercomsolutions.com http://healthdo.com http://firstmedsearch.com http://www.weniez.info health-product.net [217.69.123.138] ================== Registration Service Provided By: NAME15.COM Contact: dg@ssl4all.com Website: http://name15.com Domain Name: HEALTH-PRODUCT.NET Registrant: VONG JENG LLC Vong Junjie (VONGJENG@hotmail.com) 572 Qinjian RoadJiaxing ZHEJIANG ,314000 CN Tel. +86.13505739091 Creation Date: 06-Mar-2004 Expiration Date: 06-Mar-2005 Domain servers in listed order: ns1.health-product.net ns2.health-product.net Administrative Contact: VONG JENG LLC Vong Junjie (VONGJENG@hotmail.com) 572 Qinjian RoadJiaxing ZHEJIANG ,314000 CN Tel. +86.13505739091 Technical Contact: VONG JENG LLC Vong Junjie (VONGJENG@hotmail.com) 572 Qinjian RoadJiaxing ZHEJIANG ,314000 CN Tel. +86.13505739091 Billing Contact: VONG JENG LLC Vong Junjie (VONGJENG@hotmail.com) 572 Qinjian RoadJiaxing ZHEJIANG ,314000 CN Tel. +86.13505739091 Status:ACTIVE Whythe-Internet IP block [217.69.123.0 - 217.69.123.255]. Upstream: UUNET (desstor-gw.customer.ALTER.NET). Nameservers: ns1.health-product.net <== SPAMMERS. Registrar: directi.com. ---------- Forwarded Message ---------- Received: from pd9e5865a.dip.t-dialin.net (pD9E5865A.dip.t-dialin.net [217.229.134.90]) by mail.dolphinwave.org (8.12.8/8.12.8) with SMTP id i29NHprS020525 for ; Wed, 10 Mar 2004 01:17:55 +0200 Received: from [43.17.149.38] by pd9e5865a.dip.t-dialin.net; Mon, 17 Jan 2005 03:09:15 +0400 Message-ID: From: "Ginger" Reply-To: "Ginger" To: Subject: V1AGKRA 80% DISCOUNT !! Date: Mon, 17 Jan 05 03:09:15 GMT X-Mailer: Microsoft Outlook Express 6.00.2462.0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="EC31..A8AA.B.CF" X-Priority: 3 X-MSMail-Priority: Normal X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.6; VDF 6.24.0.46 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState:

    Did you know That the normal cost for Super Vkiagra is $20, per dose?

    We are running a hot special!! T0DAY Its only an amazing $3.00
    Shipped world wide!

    DISC0UNT 0RDER

    http://health-product.net/sv/index.php?pid=########

     

     

     

     

    REMOVE

    ------------------------------------------------------- ======= SOME OF THE PREVIOUS SPAMS WERE ======= === More of their spammers === Path: uni-berlin.de!fu-berlin.de!newsfeed.berkeley.edu!ucberkeley!sn-xit-02 !sn-xit-01!sn-post-02!sn-post-01!supernews.com!corp.supernews.com!not-for-mail From: fhh Newsgroups: news.admin.net-abuse.email Subject: whythedns.net (was Re: [email] We Sell Windows Xp Pro For 50 Bucks rebate stodgy) Date: Wed, 21 Apr 2004 02:52:11 +0200 Organization: none Message-ID: <108bhe058e82qf6@corp.supernews.com> References: <200404200133.i3K1Xhv3015759@NanasPost> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7Bit X-Complaints-To: abuse@supernews.com Lines: 45 Xref: uni-berlin.de news.admin.net-abuse.email:2190445 spamless@Nil.nil wrote: > SPAM: We Sell Windows Xp Pro For 50 Bucks rebate stodgy > NAMESERVERS listed in the root servers for 1greatsoft.biz: > ---------------------------------------------------------- > 1greatsoft.biz NS NS1.WHYTHEDNS.NET > 1greatsoft.biz NS NS0.WHYTHEDNS.NET > NS1.WHYTHEDNS.NET A 217.69.122.2 > NS0.WHYTHEDNS.NET A 217.69.122.19 > NOTE the nameservers. This is the "whythe-internet" spamhaus, > most recently connected to ALTER.NET/UU.NET, but apparently > they had to move. They have a different upstream now. I get these spams messages as well. However, the DNS servers of my ISP do not resolve the domains NS[0,1].WHYTHEDNS.NET and therefore the spamvertized sites are not resolved either. This is because the domain WHYTHEDNS.NET is suspended (see whois.directi.com) . Indeed the tld root server a.gtld-servers.net appears not to know about WHYTHEDNS.NET . Yet it gives IP addresses in the answer section for ns[0,1].whythedns.net . Why is that? Shouldn't these IP addresses be removed? My ISP appears to be strict about properly configured domains (so ns[0,1].whythedns.net are not resolved by the DNS servers I use) . But other ISP's are less strict and do resolve the spamvertized domains. I explicitly checked this using another account of mine (it seems the fact I got answers has nothing to do with entries still in cache). So the spammers still benefit from their spamming. Has directi.com forgotten something, when suspending the domain WHYTHEDNS.NET, as this domain is still resolved by DNS servers of certain ISP's? -- feike