ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
MailTrain

Evidence Menu:

MailTrain Index


Country: United States
State: Massachusetts
Spammer and hijacked proxy seller from Amherst Massachusetts, who pretends to be Chinese and hosts 'bullet-proof' servers on hijacked Chinese PCs.


MailTrain SBL Listings History
Current SBL Listings
Archived SBL Listings

buphost.com c. Oct 2004


[whois.melbourneit.com]
Results:

Domain Name.......... buphost.com
Creation Date........ 2003-05-01
Registration Date.... 2003-12-21
Expiry Date.......... 2005-05-01
Organisation Name.... Zhangliang
Organisation Address. beijing
Organisation Address.
Organisation Address. Beijing
Organisation Address. 100070
Organisation Address. Beijing
Organisation Address. CHINA

Admin Name........... Zhang liang
Admin Address........ beijing
Admin Address........
Admin Address........ Beijing
Admin Address........ 100070
Admin Address........ Beijing
Admin Address........ CHINA
Admin Email.......... fumanyuan@hotmail.com
Admin Phone.......... +86.13701136593
Admin Fax............ +86.1063310036

Tech Name............ liu peihe
Tech Address......... beijing
Tech Address.........
Tech Address......... beijing
Tech Address......... 100070
Tech Address......... Beijing
Tech Address......... CHINA
Tech Email........... fumanyuan@hotmail.com
Tech Phone........... +86.13701136593
Tech Fax............. +86.1063310036
Name Server.......... ns1.medst.biz
Name Server.......... ns2.medst.biz



[whois.neulevel.biz]
Results:
Domain Name: MEDST.BIZ
Domain ID: D7706792-BIZ
Sponsoring Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Domain Status: ok
Registrant ID: E7444F177703CE84
Registrant Name: haiyun liu
Registrant Organization: buphost
Registrant Address1: 128 huaihai road
Registrant City: huaibei
Registrant State/Province: AN
Registrant Postal Code: 235000
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +91.129422444
Registrant Email: buphost1@hotmail.com
Administrative Contact ID: C186DF7BD6BA00A4
Administrative Contact Name: haiyun liu
Administrative Contact Organization: buphost
Administrative Contact Address1: 128 huaihai road
Administrative Contact City: huaibei
Administrative Contact State/Province: AN
Administrative Contact Postal Code: 235000
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +91.129422444
Administrative Contact Email: buphost1@hotmail.com
Billing Contact ID: F12FB2E007DE6CFA
Billing Contact Name: haiyun liu
Billing Contact Organization: buphost
Billing Contact Address1: 128 huaihai road
Billing Contact City: huaibei
Billing Contact State/Province: AN
Billing Contact Postal Code: 235000
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +91.129422444
Billing Contact Email: buphost1@hotmail.com
Technical Contact ID: AD199B10B835B8E1
Technical Contact Name: haiyun liu
Technical Contact Organization: buphost
Technical Contact Address1: 128 huaihai road
Technical Contact City: huaibei
Technical Contact State/Province: AN
Technical Contact Postal Code: 235000
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +91.129422444
Technical Contact Email: buphost1@hotmail.com
Name Server: DNS5.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS1.NAME-SERVICES.COM
Created by Registrar: ENOM, INC.
Last Updated by Registrar: ENOM, INC.
Domain Registration Date: Wed Sep 08 05:51:26 GMT 2004
Domain Expiration Date: Wed Sep 07 23:59:59 GMT 2005
Domain Last Updated Date: Wed Sep 08 05:51:31 GMT 2004




buphost.com NS ns1.medst.biz
buphost.com NS ns2.medst.biz
ns1.medst.biz A 61.240.131.193
ns2.medst.biz A 210.77.145.131

buphost.com MX 0 mail.buphost.com
buphost.com MX 10 mail.buphost.com
mail.buphost.com A 210.77.145.131
mail.buphost.com A 210.77.145.131




--- reading URL 210.77.145.131
--- contacting host [210.77.145.131] on port 80

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Connection: close
Content-Location: http://210.77.145.131/index.html
Date: Tue, 26 Oct 2004 __:__:__ GMT
Content-Type: text/html
Accept-Ranges: bytes
Last-Modified: Wed, 07 Aug 2002 16:50:41 GMT
ETag: "80464c90323ec21:1928"
Content-Length: 15

<html>
</html>
--- connection closed



--- reading URL 210.77.145.131:25
--- contacting host [210.77.145.131] on port 25
220 win2k-001 (IMail 8.01 10223-1) NT-ESMTP Server X1


220 buphost.com (IMail 8.00 EVAL 42206-7) NT-ESMTP Server X1
(61.240.131.193)



The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: http://www.spamhaus.org/rokso/evidence/ROK4248/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2014 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy