ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
MailTrain

Evidence Menu:

MailTrain Index


Country: United States
State: Massachusetts
Spammer and hijacked proxy seller from Amherst Massachusetts, who pretends to be Chinese and hosts 'bullet-proof' servers on hijacked Chinese PCs.


MailTrain SBL Listings History
Current SBL Listings
Archived SBL Listings

shrhost.com / windns.biz


[grs.hichina.com]
Domain Name ..................... shrhost.com
Name Server ..................... ns1.windns.biz
ns2.windns.biz
Registrant ID ................... hc558541108-cn
Registrant Name ................. dayi wang
Registrant Organization ......... dayi wang
Registrant Address .............. No.175 YangZi road
Registrant City ................. LianYunGang
Registrant Province/State ....... jiangsu
Registrant Postal Code .......... 423299
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.06522343454 -
Registrant Fax .................. +86.06522343454 -
Registrant Email ................ duyupu@126.com
Administrative ID ............... hc758541108-cn
Administrative Name .............
Administrative Organization .....
Administrative Address .......... chongqing
Administrative City ............. chongqing
Administrative Province/State ... chongqing
Administrative Postal Code ...... 400000
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.02368193484 -
Administrative Fax .............. +86.02368193484 -
Administrative Email ............ fengmingyu@163.com
Billing ID ...................... hc345291355-cn
Billing Name ....................
Billing Organization ............
Billing Address ................. chongqing
Billing City .................... chongqing
Billing Province/State .......... chongqing
Billing Postal Code ............. 400000
Billing Country Code ............ CN
Billing Phone Number ............ +86.02368193484 -
Billing Fax ..................... +86.02368193484 -
Billing Email ................... fengmingyu@163.com
Technical ID .................... hc458541108-cn
Technical Name ..................
Technical Organization ..........
Technical Address ............... chongqing
Technical City .................. chongqing
Technical Province/State ........ chongqing
Technical Postal Code ........... 400000
Technical Country Code .......... CN
Technical Phone Number .......... +86.02368193484 -
Technical Fax ................... +86.02368193484 -
Technical Email ................. fengmingyu@163.com
Expiration Date ................. 2006-04-13 06:11:09




[whois.neulevel.biz]
Domain Name: WINDNS.BIZ
Domain ID: D11456796-BIZ
Sponsoring Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Domain Status: ok
Registrant ID: NAMERICK164040A9
Registrant Name: NameCheap.com NameCheap.com
Registrant Organization: NameCheap.com
Registrant Address1: 8939 S. Sepulveda Blvd.
Registrant City: Westchester
Registrant State/Province: CA
Registrant Postal Code: 90045
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.6613102107
Registrant Email: support@NameCheap.com
Administrative Contact ID: NAMERICK164040A9
Administrative Contact Name: NameCheap.com NameCheap.com
Administrative Contact Organization: NameCheap.com
Administrative Contact Address1: 8939 S. Sepulveda Blvd.
Administrative Contact City: Westchester
Administrative Contact State/Province: CA
Administrative Contact Postal Code: 90045
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.6613102107
Administrative Contact Email: support@NameCheap.com
Billing Contact ID: NAMERICK164040A9
Billing Contact Name: NameCheap.com NameCheap.com
Billing Contact Organization: NameCheap.com
Billing Contact Address1: 8939 S. Sepulveda Blvd.
Billing Contact City: Westchester
Billing Contact State/Province: CA
Billing Contact Postal Code: 90045
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.6613102107
Billing Contact Email: support@NameCheap.com
Technical Contact ID: NAMERICK164040A9
Technical Contact Name: NameCheap.com NameCheap.com
Technical Contact Organization: NameCheap.com
Technical Contact Address1: 8939 S. Sepulveda Blvd.
Technical Contact City: Westchester
Technical Contact State/Province: CA
Technical Contact Postal Code: 90045
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.6613102107
Technical Contact Email: support@NameCheap.com
Name Server: DNS5.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS1.NAME-SERVICES.COM
Created by Registrar: ENOM, INC.
Last Updated by Registrar: ENOM, INC.
Domain Registration Date: Fri Nov 11 11:05:30 GMT 2005
Domain Expiration Date: Fri Nov 10 23:59:59 GMT 2006
Domain Last Updated Date: Wed Nov 16 22:35:31 GMT 2005



$ dig @ns1.windns.biz shrhost.com ns

; <<>> DiG 9.2.4 <<>> @ns1.windns.biz shrhost.com ns
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24806
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;shrhost.com. IN NS

;; ANSWER SECTION:
shrhost.com. 3600 IN NS 222.174.34.157.

;; Query time: 579 msec
;; SERVER: 222.174.34.157#53(ns1.windns.biz)
;; WHEN: Thu Mar 232006
;; MSG SIZE rcvd: 57



$ dig @ns2.windns.biz shrhost.com ns

; <<>> DiG 9.2.4 <<>> @ns2.windns.biz shrhost.com ns
;; global options: printcmd
;; connection timed out; no servers could be reached





--- reading URL http://www.shrhost.com/BulletProof.htm
--- contacting host www.shrhost.com [222.174.34.157] on port 80

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
X-Powered-By: ASP.NET
Connection: close
Date: Thu, 23 Mar 2006 x GMT
Content-Type: text/html
Accept-Ranges: bytes
Last-Modified: Wed, 07 Sep 2005 21:06:12 GMT
ETag: "a605dfaefb3c51:17a1"
Content-Length: 37641

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<!-- saved from url=(0023) --><HTML><HEAD><TITLE>Powerful, Reliable, Affordable Web Hosting</TITLE>
<META content="text/html; charset=windows-1252" http-equiv=Content-Type>
<META
content="Fast, Quality NT Hosting at very reasonable rates. NT Hosting on IIS 5.0. Our services include, ASP (active server pages), IMail, .NET Hosting, web site statistics, MS SQL server, MS Access, virtual NT Hosting at the best prices, no hidden fees, free set-up, We are NT Hosting specialist. Starting at $2.00/mo. NT Hosting at it's best."
name=Description>
<META
content="nt, hosting, web, website, host, nt hosting, web hosting, microsoft, windows, hosts,limited bandwidth, service providers, domain, name, .com, Access, .NET Hosting,ODBC, ODBC drivers, frontpage, front page, NT HOSTING, active server, pages, asp, ms access, database, credit, card, server, servers, NT, HOSTING, isp, live, statistics,php webhosting,php,mysql,python,php hosting"
name=keywords>
<META content=15 name=revisit-after>
<META name=Organization-Country-Code value="US">
<META name=City value="Rochester">
<META name=Country value="United States">
<META content=Global name=distribution>
<META content="Safe For Kids" name=rating>
<META content=index,follow name=robots>
<META content=All name=ROBOTS>
<META
content="Copyright 2001 by bup88, Inc. - All Rights Reserved. bup88 is a Registered Trademark of bup88, Inc."
name=copyright>
<META content=info@bup88.com name=reply-to>
<META content="bup88 offers powerful PHP hosting." name=description>

[rendered text]

:: Overseas Bullet Proof Hosting--Linux/FreeBSD/Windows Hosting::

If you want to promote your web site via commercial email, bullet proof web hosting is a must! As you may already know, many web hosting companies have Terms of Service (TOS) or Acceptable Use Policies (AUP) against the delivery of emails advertising or promoting your web site. If your web site host receives complaints or discovers that your web site has been advertised in email broadcasts, they may disconnect your account and shut down your web site, even if you are using real opt-in email lists (Some subscribers may forget they have opted in).

We deal with the complaints for you. You can now have the peace of mind knowing that your web site is secure during your email marketing campaigns. This means you can send bulk email with your website address in it, and your website will not get shut down!

Another reason we do this is that we put your website in our overseas servers where the local law will protect your web sites should not be shut down by any reason. No illegal content is accepted in our servers.

If you want bulletproof dedicated web server or email server, please contact us!


http://www.shrhost.com/contact.htm

Yahoo messenger: shrhostbiz@yahoo.com
MSN messenger: bup88biz@hotmail.com
AOL instant messenger: BphstNet
ICQ: 50177227
E-mail: buprhost@gmail.com





The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: http://www.spamhaus.org/rokso/evidence/ROK6422/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2014 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy