ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Nikhil Kumar Pragji / Dark-Mailer

Evidence Menu:

Nikhil Kumar Pragji / Dark-Mailer Index


Country: Australia
State: Queensland
Through the Dark-Mailer Windows based proxy-botnet based spamware, this spammer is responsible for and behind a large portion of the world's illegally sent spam.


Nikhil Kumar Pragji / Dark-Mailer SBL Listings History
Current SBL Listings
Archived SBL Listings

Main Info


One of the kingpins of the illegal spamming underworld. With his "Dark Mailer" spamware and endless amounts of "bulletproof" spam hosting in China and around the globe, he's one of the cogs that allow other spammers and spam gangs to operate.

All this out of Australia, a nation that has made almost everything Nikhil Kumar Pragji does illegal under law.

____________

> Customers profile:

> email: jobiehost@hotmail.com
> Contact Name: Nikhil Lee

> Rock Community Care Inc
> P.O. Box 3922
> SOUTH BRISBANE MC QLD 4101

> payment type: wire transfer
____________

SBL29879

Listed 2005-08-06, removed 2005-10-25, re-listed 2005-11-25. Very bad idea.

2005-12-28 -
--- DNS lookup for "dark-mailer.com", please wait...
--- contacting nameserver: 219.148.2.227 [219.148.2.227]

dark-mailer.com A 61.233.40.185
dark-mailer.com NS idc-vjh7lsgys2z.www30.com
dark-mailer.com SOA
origin = idc-vjh7lsgys2z.www30.com
mail addr = hostmaster@www30.com
serial = 18
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 ()
minimum ttl = 3600 (1 hour)
dark-mailer.com MX 10 dark-mailer.com
dark-mailer.com A 61.233.40.185

--- DNS Lookup completed


dark-mailer.com [219.148.2.227]
infinitymailer.com [219.148.2.227]
bulk-email-lists.com [219.148.2.227]
darkmailer.com [219.148.2.227]
proxybench.com [219.148.2.227]
www30.com [219.148.2.227]
blackboxhosting.com [219.148.2.227]

mmailer.net [66.150.234.54]
www.openrelaycheck.com [208.254.3.160]

domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 219.148.2.227
nserver: ns2.dark-mailer.com 219.148.2.227
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2005-10-03 15:33:11 UTC
expires: 2007-01-17 04:26:51 UTC
source: joker.com live whois service

____________

SBL19836

2004-12-10
The usual scum spammer crowd... Soloway, Goyetsche, etc. SBL21805 shows bulkmails.org, often seen with Camargo of Brazil and Vaglia of Argentina.


2004-09-30
222.223.129.165 smokecigss.com
222.223.129.243 blackboxhosting.com
222.223.129.243 bulk-email-lists.com
222.223.129.243 dark-mailer.com
222.223.129.243 mmailer.net
222.223.129.243 proxybench.com
222.223.129.243 www.blackboxhosting.com
222.223.129.243 www.infinitymailer.com
222.223.129.243 www.openrelaycheck.com
222.223.129.243 www.proxybench.com
222.223.129.244 www30.com

Domain : www.blackboxhosting.com
Some (may not be all) previous SBL listings this domain was in :
SBL10034 SBL10184 SBL10189 SBL10539 SBL10762 SBL11122 SBL11143 SBL11675 SBL11820 SBL11857 SBL11876 SBL11910
SBL12165 SBL12467 SBL13457 SBL14120 SBL15569 SBL17921 SBL19282

IP : 222.223.129.243
RDNS : 222.223.129.243 - None


Google : http://www.google.com/groups?q=www.blackboxhosting.com+group:*.sightings&hl=en&lr=&ie=UTF-8&scoring=d&filter=0

Name Servers :

server2003.www30.com.


WHOIS :

Query: www.blackboxhosting.com
Registry: whois.networksolutions.com


Registrant:
Mailer, Infinity (JUAZBUTTCD)
Level One
Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK

Domain Name: BLACKBOXHOSTING.COM

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One
Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK
+44 6 8892 9843 fax: 123 123 1234

Technical Contact:
Network Solutions, LLC. (HOST-ORG) customerservice@networksolutions.com
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620

Record expires on 19-Jul-2005.
Record created on 19-Jul-2002.
Database last updated on 29-Sep-2004 22:46:42 EDT.

Domain servers in listed order:

NS1.WWW30.COM 222.223.129.130
NS2.WWW30.COM 222.223.129.131

____________

SBL17921

2004-08-30
darkmailer.com A 219.148.127.132

--- contacting nameserver: dns1.7host.com [64.70.253.142]
--- Unable to locate authoritative nameserver

Non-authoritative answer:
darkmailer.com NS dns1.7host.com
darkmailer.com NS ns1.securedns.biz
darkmailer.com NS ns1.www30.com
darkmailer.com NS ns1.www32.com.lamedelegation.com
dns1.7host.com A 64.70.253.142
ns1.www30.com A 219.148.127.130
ns1.www32.com.lamedelegation.com A 219.148.126.131


2004-07-28
SBL18302 130.94.132.246/32 is a proxy used by this outfit to spam for bluenet585.com A 219.148.127.131



2004-07-13
219.148.127.130 blackboxhosting.com
219.148.127.130 bulk-email-lists.com
219.148.127.130 dark-mailer.com
219.148.127.130 mmailer.net
219.148.127.130 proxybench.com
219.148.127.130 www30.com
219.148.127.130 www.infinitymailer.com
219.148.127.130 www.openrelaycheck.com
219.148.127.130 www.proxybench.com

Domain : blackboxhosting.com
Some (may not be all) previous SBL listings this domain was in :
SBL10034 SBL10762 SBL11122 SBL12165 SBL14120 SBL15569

IP : 219.148.127.130
RDNS : 219.148.127.130 - None


Google :
http://www.google.com/groups?q=blackboxhosting.com+group:*.sightings&hl=en&lr=&ie=UTF-8&scoring=d&filter=0

Name Servers :

server2003.www30.com.


WHOIS :

Query: blackboxhosting.com
Registry: whois.networksolutions.com
Results:

Registrant:
Mailer, Infinity (JUAZBUTTCD)
Level One
Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK

Domain Name: BLACKBOXHOSTING.COM

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One
Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK
+44 6 8892 9843 fax: 123 123 1234

Technical Contact:
Network Solutions, LLC. (HOST-ORG) customerservice@networksolutions.com
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620

Record expires on 19-Jul-2005.
Record created on 19-Jul-2002.
Database last updated on 13-Jul-2004 00:11:45 EDT.

Domain servers in listed order:

NS1.WWW30.COM 219.148.127.130
NS1.WWW32.COM 219.148.126.131



____________

SBL13982

www.blackboxhosting.com CNAME blackboxhosting.com
blackboxhosting.com A 219.153.1.205

www30.com A 219.153.1.209
www30.com A 219.153.1.208
www30.com A 219.153.1.207
www30.com A 219.153.1.206
www30.com A 219.153.1.205

top paid hit on Google when searching...
http://groups.google.com/groups?q=www.bullet-proof-host.com+OR+5imail+OR+bentium.com&scoring=d&num=100&filter=0

------------------------------------------------------------

219.153.1.214/32 Live chinanet-cq
SBL13893 www.killersoft.biz

219.153.1.202/32 Live chinanet-cq
SBL13670 Alexey Panov - ckync.com
Prescription Drugs - jinhai.info (Ralsky / Panov)

219.153.1.138/32 Live chinanet-cq
SBL13367 Alan Ralsky
Home Loan spam - kobstrrr.com - ns0.dnsget.com

219.153.1.223/32 Live chinanet-cq
SBL13155 tin.address44.com

219.153.1.171/32 Live chinanet-cq
SBL12996 medsplacerx.com / northcentral.biz

219.153.1.172/32 Live chinanet-cq
SBL12194 medsquickusa.biz / medscheaprx.com / northcentral.biz

219.153.1.134/32 Live chinanet-cq
SBL12107 Alan Ralsky
ns0.nicnew.com

219.153.1.155/32 Live chinanet-cq
SBL11662 www.paylesscanadiandrugs.com

219.153.1.141/32 live chinanet-cq
SBL10859 Drew Auman / thebulkclub.com
bulkersclub.com / massmailsoftware.com / NSCH.4AMDNS.COM

219.153.1.140/30 live chinanet-cq
SBL10840 Drew Auman / thebulkclub.com
thebulkclub.com

219.153.1.0/24 live chinanet-cq
SBL10189 Alan Ralsky
infowebdd4.com onlinebiz21.com


____________

SBL11910

(Nov 23rd, 2003)
n9.kelleychase.com. 10M IN A 81.180.98.182
kelleychase.com. 10M IN NS ns2.kelleychase.com.
kelleychase.com. 10M IN NS ns1.kelleychase.com.
ns2.kelleychase.com. 10M IN A 81.180.98.181
ns1.kelleychase.com. 19h37m2s IN A 81.180.98.181

n8.netpaltrow.com. 10M IN A 81.180.98.182
netpaltrow.com. 10M IN NS ns1.netpaltrow.com.
netpaltrow.com. 10M IN NS ns2.netpaltrow.com.
ns1.netpaltrow.com. 1d4h1m42s IN A 81.180.98.181
ns2.netpaltrow.com. 10M IN A 81.180.98.181


Domain : www.blackboxhosting.com
Some (may not be all) previous SBL listings this domain was in :
SBL10184 SBL10539 SBL11143 SBL11675 SBL11857
IP : 81.180.98.226
RDNS : 81.180.98.226 - None

81.180.98.51 www.thehardcorehunters.com
81.180.98.178 www.imageshere.biz
81.180.98.226 best-savings-online.com
81.180.98.226 www.blackboxhosting.com
81.180.98.226 www.quick-home-loan-search.biz

ns1.asedia.biz. 5M IN A 81.180.98.254

dreridith.biz. 5M IN A 81.180.98.254
dreridith.biz. 5M IN NS ns1.dreridith.biz.
dreridith.biz. 5M IN NS ns2.dreridith.biz.
dreridith.biz. 5M IN NS ns3.dreridith.biz.
ns1.dreridith.biz. 5M IN A 81.180.98.254
ns2.dreridith.biz. 5M IN A 211.97.45.61
ns3.dreridith.biz. 5M IN A 61.143.182.2


FTP/SMTP banners:

81.180.98.1
220 ProFTPD 1.2.4 Server (ProFTPD Default Installation) [DS291]

81.180.98.2
220 ProFTPD 1.2.4 Server (ProFTPD Default Installation) [DS291]

81.180.98.3
220 ProFTPD 1.2.4 Server (ProFTPD Default Installation) [DS291]

81.180.98.4
220 ProFTPD 1.2.4 Server (ProFTPD Default Installation) [DS291]

81.180.98.13
220 ds294.myefuture.net FTP server ready. Authorized users only. Your IP has been logged.

81.180.98.14
220 ds294.myefuture.net FTP server ready. Authorized users only. Your IP has been logged.

81.180.98.15
220 ds294.myefuture.net FTP server ready. Authorized users only. Your IP has been logged.

81.180.98.16
220 ds294.myefuture.net FTP server ready. Authorized users only. Your IP has been logged.

81.180.98.37
220 ProFTPD 1.2.8 Server (Welcome) [test]

81.180.98.38
220 ProFTPD 1.2.8 Server (Welcome) [test]

81.180.98.39
220 ProFTPD 1.2.8 Server (Welcome) [test]

81.180.98.40
220 ProFTPD 1.2.8 Server (Welcome) [test]

81.180.98.68
220 masterwebserve.biz FTP server (Version wu-2.6.2-11.73.1) ready.

81.180.98.69
220 masterwebserve.biz FTP server (Version wu-2.6.2-11.73.1) ready.

81.180.98.70
220 masterwebserve.biz FTP server (Version wu-2.6.2-11.73.1) ready.

81.180.98.71
220 masterwebserve.biz FTP server (Version wu-2.6.2-11.73.1) ready.

81.180.98.101
220 81.180.98.103 FTP server (Version wu-2.6.2-5) ready.

81.180.98.102
220 81.180.98.103 FTP server (Version wu-2.6.2-5) ready.

81.180.98.103
220 81.180.98.103 FTP server (Version wu-2.6.2-5) ready.

81.180.98.104
220 81.180.98.103 FTP server (Version wu-2.6.2-5) ready.

81.180.98.129
220 LSS FTP Server ready.

81.180.98.163
220 ProFTPD 1.2.7 Server (ProFTPD Default Installation) [bt06-2]

81.180.98.178
220 ProFTPD 1.2.7 Server (ProFTPD Default Installation) [supermicro01]

81.180.98.226
220 BulletProof FTP Server ready ...

81.180.98.227
220 BulletProof FTP Server ready ...

81.180.98.228
220 BulletProof FTP Server ready ...

81.180.98.229
220 BulletProof FTP Server ready ...

81.180.98.230
220 BulletProof FTP Server ready ...

81.180.98.231
220 BulletProof FTP Server ready ...

81.180.98.232
220 BulletProof FTP Server ready ...

81.180.98.233
220 BulletProof FTP Server ready ...

81.180.98.234
220 BulletProof FTP Server ready ...

81.180.98.235
220 BulletProof FTP Server ready ...

81.180.98.248
220 ProFTPD 1.2.8 Server (ProFTPD Default Installation) [foobar04.foobar.com]

---

81.180.98.3 <title>GENERIC VIAGRA</title>
81.180.98.13 Apache/1.3.27 Server at ds294.myefuture.net Port 80 <--- Webfinity
81.180.98.14 Apache/1.3.27 Server at ds294.myefuture.net Port 80 <--- Webfinity
81.180.98.15 Apache/1.3.27 Server at ds294.myefuture.net Port 80 <--- Webfinity
81.180.98.16 Apache/1.3.27 Server at ds294.myefuture.net Port 80 <--- Webfinity
81.180.98.37 Apache/1.3.27 Server at z.wtcracks.com Port 80
81.180.98.38 Apache/1.3.27 Server at z.wtcracks.com Port 80
81.180.98.39 Apache/1.3.27 Server at z.wtcracks.com Port 80
81.180.98.40 Apache/1.3.27 Server at z.wtcracks.com Port 80
81.180.98.64 <title>Get Sexy Girls</title>
81.180.98.65 <title>Get Sexy Girls</title>
81.180.98.66 <title>Get Sexy Girls</title>
81.180.98.67 <title>Get Sexy Girls</title>
81.180.98.68 Apache/1.3.28 Server at masterwebserve.biz Port 80
81.180.98.69 Apache/1.3.28 Server at masterwebserve.biz Port 80
81.180.98.71 Apache/1.3.28 Server at masterwebserve.biz Port 80
81.180.98.101 Apache/1.3.29 Server at besthosts.biz Port 80
81.180.98.102 Apache/1.3.29 Server at besthosts.biz Port 80
81.180.98.104 Apache/1.3.29 Server at besthosts.biz Port 80
81.180.98.163 <TITLE>ezmeds.biz - Medications Prescribed Online and Shipped Overnight to Your Door</TITLE>
81.180.98.179 Apache/1.3.27 Server at quick-quotes.biz Port 80
81.180.98.226 <TITLE>Getting the Best Home Loan is easy!</TITLE>
[...]
81.180.98.235 <TITLE>Getting the Best Home Loan is easy!</TITLE>
81.180.98.248 Apache/1.3.28 Server at freejoinnow.biz Port 80

---

Google : http://www.google.com/groups?q=www.blackboxhosting.com+group:*.sightings&hl=en&lr=&ie=UTF-8&scoring=d&filter=0

Name Servers :

www32.www32.com.



WHOIS :

[127.0.0.1]
Query: www.blackboxhosting.com
Registry: whois.networksolutions.com
Results:


Registrant:
Mailer, Infinity (JUAZBUTTCD)
PO Box 323
Ommaney, QLD 4074
AU

Domain Name: BLACKBOXHOSTING.COM

Administrative Contact:
Mailer, Infinity (IM3216) jobie@hehe.com
PO Box 323
Ommaney, QLD 4074
AU
+61 7 3245 3297 fax: 123 123 1234
Technical Contact:
Network Solutions, Inc. (HOST-ORG) customerservice@networksolutions.com
21355 Ridgetop Circle
Dulles, VA 20166
US
1-888-642-9675 fax: 571-434-4620

Record expires on 19-Jul-2004.
Record created on 19-Jul-2002.
Database last updated on 6-Nov-2003 23:39:38 EST.

Domain servers in listed order:

NS1.WWW30.COM 219.153.5.8
NS1.WWW32.COM 81.180.98.226
______________________


Nov 11:

www.1cialagenius.biz A 81.180.98.189
1cialagenius.biz NS a.1800medstoday.biz.1cialagenius.biz
1cialagenius.biz NS b.1800medstoday.biz.1cialagenius.biz
1cialagenius.biz NS a.1800medsxpress.biz.1cialagenius.biz
1cialagenius.biz NS b.1800medsxpress.biz.1cialagenius.biz
a.1800medstoday.biz.1cialagenius.biz A 81.180.98.189
b.1800medstoday.biz.1cialagenius.biz A 81.180.98.189
a.1800medsxpress.biz.1cialagenius.biz A 81.180.98.189
b.1800medsxpress.biz.1cialagenius.biz A 81.180.98.189

Nov 12:

floresysol.com A 81.180.98.18

Authoritative answers can be found from:
floresysol.com NS ns1.mydomain.com (dotster.com)
floresysol.com NS ns2.mydomain.com
floresysol.com NS ns3.mydomain.com
floresysol.com NS ns4.mydomain.com
ns1.mydomain.com A 64.94.117.195
ns2.mydomain.com A 216.52.121.228
ns3.mydomain.com A 66.150.161.130
ns4.mydomain.com A 63.251.83.74




Nov 14:

www.1cialagenius.biz A 81.180.98.189
1cialagenius.biz NS a.1800medstoday.biz.1cialagenius.biz
1cialagenius.biz NS b.1800medstoday.biz.1cialagenius.biz
1cialagenius.biz NS a.1800medsxpress.biz.1cialagenius.biz
1cialagenius.biz NS b.1800medsxpress.biz.1cialagenius.biz
a.1800medstoday.biz.1cialagenius.biz A 81.180.98.189
b.1800medstoday.biz.1cialagenius.biz A 81.180.98.189
a.1800medsxpress.biz.1cialagenius.biz A 81.180.98.189
b.1800medsxpress.biz.1cialagenius.biz A 81.180.98.189


____________

SBL11857

blackboxhosting.com. 6m22s IN A 80.96.156.240
blackboxhosting.com. 1d23h6m21s IN NS ns1.www32.com.
blackboxhosting.com. 1d23h6m21s IN NS ns1.www30.com.
ns1.www32.com. 1d21h31m16s IN A 80.96.156.240 <--- auth
ns1.www30.com. 1d23h31m23s IN A 61.232.226.17 <--- RIP

____________

SBL10539

Update Oct 7, 2003 - SR11
best-great-savings.com = 202.103.69.170
NS3.WWW32.COM = 202.103.69.170
----------------------

(September 22nd, 2003)
now also hosting the Specialham.com bulk club

specialham.com. 1H IN A 202.103.69.170
specialham.com. 2D IN NS ns1.www30.com.
specialham.com. 2D IN NS ns2.www30.com.
ns1.www30.com. 2D IN A 202.103.69.170
ns2.www30.com. 2D IN A 202.103.69.170


blackboxhosting.com. 1H IN A 202.103.69.170
blackboxhosting.com. 2D IN NS ns1.www30.com.
blackboxhosting.com. 2D IN NS ns2.www30.com.
ns1.www30.com. 2D IN A 202.103.69.170
ns2.www30.com. 2D IN A 202.103.69.170

____________

SBL10314

blackboxhosting.com. 1S IN A 218.5.74.251
blackboxhosting.com. 2D IN NS ns3.www32.com.
blackboxhosting.com. 2D IN NS ns2.idns.bz.
ns3.www32.com. 2D IN A 218.5.74.251

____________

SBL41376

[221.4.247.58]
dark-mailer.com
darkmailer.com
blackboxhosting.com

Was -

[221.4.247.56]
NS1.DARK-MAILER.COM
NS2.DARK-MAILER.COM
NS1.BLACKBOXHOSTING.COM
NS2.BLACKBOXHOSTING.COM

___________

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 14-apr-2006
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 221.4.247.56
nserver: ns2.dark-mailer.com 221.4.247.56
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2006-02-13 14:49:23 UTC
expires: 2007-01-17 04:26:51 UTC

contact-hdl: jobie2004@hehe.com#0
person: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
country: GB
phone: +44 5518 7784

source: joker.com live whois service

____________

Domain Name: BLACKBOXHOSTING.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: NS1.BLACKBOXHOSTING.COM
Name Server: NS2.BLACKBOXHOSTING.COM
Status: REGISTRAR-LOCK
Updated Date: 14-apr-2006
Creation Date: 19-jul-2002
Expiration Date: 19-jul-2007



Registrant:
Mailer, Infinity
Level One
Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK

Domain Name: BLACKBOXHOSTING.COM

Administrative Contact:
Mailer, Infinity jobie2006@hotmail.com
Level One
Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK
+44 6 8892 9843 fax: 123 123 1234

Technical Contact:
Network Solutions, LLC. customerservice@networksolutions.com
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620

Record expires on 19-Jul-2007.
Record created on 19-Jul-2002.
Database last updated on 4-May-2006 19:33:42 EDT.

Domain servers in listed order:

NS1.BLACKBOXHOSTING.COM 221.4.247.56
NS2.BLACKBOXHOSTING.COM 221.4.247.56



____________

SBL42833
SBL42144

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 13-may-2006
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 211.156.126.243
nserver: ns2.dark-mailer.com 211.156.126.243
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2006-02-13 14:49:23 UTC
expires: 2007-01-17 04:26:51 UTC

contact-hdl: jobie2004@hehe.com#0
person: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
country: GB
phone: +44 5518 7784

source: joker.com live whois service


____________

Domain Name: DARKMAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 13-feb-2006
Creation Date: 23-sep-2003
Expiration Date: 23-sep-2007

domain: darkmailer.com
owner: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 211.156.126.243
nserver: ns2.dark-mailer.com 211.156.126.243
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2006-02-13 14:50:16 UTC
expires: 2007-09-23 18:03:54 UTC

contact-hdl: darkmailer2003@yahoo.com#0
person: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
country: RU
phone: +79037638812

source: joker.com live whois service

____________

SBL43473

NS1.DARK-MAILER.COM [211.156.123.3]
NS2.DARK-MAILER.COM [211.156.123.3]

Was : 211.156.126.243/32 (wantong.net.cn)
Status Removed
211.156.126.243/32 has been removed from the SBL

____________

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 13-may-2006
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 211.156.126.243
nserver: ns2.dark-mailer.com 211.156.126.243
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2006-02-13 14:49:23 UTC
expires: 2007-01-17 04:26:51 UTC

contact-hdl: jobie2004@hehe.com#0
person: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
country: GB
phone: +44 5518 7784

source: joker.com live whois service


____________

Domain Name: DARKMAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 13-feb-2006
Creation Date: 23-sep-2003
Expiration Date: 23-sep-2007

domain: darkmailer.com
owner: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 211.156.126.243
nserver: ns2.dark-mailer.com 211.156.126.243
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2006-02-13 14:50:16 UTC
expires: 2007-09-23 18:03:54 UTC

contact-hdl: darkmailer2003@yahoo.com#0
person: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
country: RU
phone: +79037638812

source: joker.com live whois service


____________

SBL45612

--- Found authoritative nameserver: ns1.dark-mailer.com
--- contacting nameserver: ns1.dark-mailer.com [211.156.254.119]

darkmailer.com SOA
origin = www-s8uo0oef296
mail addr = hostmaster
serial = 12
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 ()
minimum ttl = 3600 (1 hour)
darkmailer.com A 211.156.254.119
darkmailer.com NS www-s8uo0oef296

--- DNS Lookup completed

Domain Name: DARKMAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 13-feb-2006
Creation Date: 23-sep-2003
Expiration Date: 23-sep-2007


domain: darkmailer.com
owner: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 211.156.254.119
nserver: ns2.dark-mailer.com 211.156.254.119
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2006-02-13 14:50:16 UTC
expires: 2007-09-23 18:03:54 UTC

contact-hdl: darkmailer2003@yahoo.com#0
person: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812

source: joker.com live whois service

____________

SBL46593

"Off shore" is fine, spammer hosting is not.

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 29-aug-2006
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
origin-c: JOCO-634271
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 200.115.174.174
nserver: ns2.dark-mailer.com 200.115.174.174
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2006-02-13 14:49:23 UTC
expires: 2007-01-17 04:26:51 UTC

contact-hdl: jobie2004@hehe.com#0
person: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784

source: joker.com live whois service

_________

Domain Name: DARKMAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 13-feb-2006
Creation Date: 23-sep-2003
Expiration Date: 23-sep-2007

domain: darkmailer.com
origin-c: JOCO-595552
owner: Egor Aganezov
organization: NA

email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 200.115.174.174
nserver: ns2.dark-mailer.com 200.115.174.174
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2006-02-13 14:50:16 UTC
expires: 2007-09-23 18:03:54 UTC

contact-hdl: darkmailer2003@yahoo.com#0
person: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812

source: joker.com live whois service

____________

inetnum: 200.115.174/24
status: reallocated
owner: Cyber Cast International, S.A.
ownerid: PA-CCIS-LACNIC
responsible: Jorge Moreno
address: Addison House Plaza Suite 20, 507, 264-0852
address: 6-3783 - Panama - PA
country: PA
phone: +507 264-0852 []
owner-c: CCS2
tech-c: CCS2
inetrev: 200.115.174/24
nserver: NS1.CYBERCASTCO.COM
nsstat: 20060910 AA
nslastaa: 20060910
nserver: NS2.CYBERCASTCO.COM [lame - not published]
nsstat: 20060910 UDN
nslastaa: 20050830
created: 20050420
changed: 20050420
inetnum-up: 200.115.160/20

nic-hdl: CCS2
person: Cyber Cast International, S.A.
e-mail: info@CCIPANAMA.COM
address: Addison House Plaza Suite 20, 507, 264-0852
address: 6-3783 - panama - pa
country: PA
phone: +507 264-0852 []
created: 20050405
changed: 20050422

______________

Domain Name: CYBERCASTCO.COM
Registrar: REGISTER.COM, INC.
Whois Server: whois.register.com
Referral URL: http://www.register.com
Name Server: NS1.CYBERCASTCO.COM
Name Server: NS2.CYBERCASTCO.COM
Status: REGISTRAR-LOCK
Updated Date: 28-sep-2005
Creation Date: 19-apr-2002
Expiration Date: 19-apr-2007

Registrant:
Jorge Moreno
Jorge Moreno
urb. santa clara. calle f . casa a 34
panama, pa 0
PA
Email: jemlpdi@hotmail.com

Registrar Name....: REGISTER.COM, INC.
Registrar Whois...: whois.register.com
Registrar Homepage: www.register.com

Domain Name: cybercastco.com

Created on..............: Fri, Apr 19, 2002
Expires on..............: Thu, Apr 19, 2007
Record last updated on..: Fri, Feb 24, 2006

Administrative Contact:
Cyber Cast Intl
Jorge Moreno
Adisson House Plaza, Suite 20
panama, pa 0
PA
Phone: (507) 264-0852
Email: jemlpdi@hotmail.com

Technical Contact:
Cyber Cast Intl
Jorge Moreno
Adisson House Plaza, Suite 20
panama, pa 0
PA
Phone: (507) 264-0852
Email: jemlpdi@hotmail.com

DNS Servers:

ns1.cybercastco.com
ns2.cybercastco.com
_____________

Domain Name: CCIPANAMA.COM
Registrar: WILD WEST DOMAINS, INC.
Whois Server: whois.wildwestdomains.com
Referral URL: http://www.wildwestdomains.com
Name Server: NS1.CYBERCASTCO.COM
Name Server: NS2.CYBERCASTCO.COM
Status: REGISTRAR-LOCK
Updated Date: 15-jul-2006
Creation Date: 13-feb-2004
Expiration Date: 13-feb-2007


Registrant:
Cyber Cast Intl
Obarrio Plaza Nelson
Panama 6-3783
Panama

Registered through: Cheap-DomainRegistration.com
Domain Name: CCIPANAMA.COM
Created on: 13-Feb-04
Expires on: 13-Feb-07
Last Updated on: 21-Jan-06

Administrative Contact:
Moreno, Jorge info@offshore-web-hosts.com
Cyber Cast Intl
Obarrio Plaza Nelson
Panama 6-3783
Panama
5072640852 Fax --

Technical Contact:
Moreno, Jorge info@offshore-web-hosts.com
Cyber Cast Intl
Obarrio Plaza Nelson
Panama 6-3783
Panama
5072640852 Fax --

Domain servers in listed order:
NS1.CYBERCASTCO.COM
NS2.CYBERCASTCO.COM

_____________

@NS1.CYBERCASTCO.COM
best123invest.biz wi p 2006-May-05
besttool.biz wi p 2006-Apr-06
cybermediainc.biz wi p 2006-Apr-02
e-gold123.biz wi p 2006-Apr-19
genesisclub.biz wi p 2006-Apr-13
genxcigs.biz wi p 2006-Apr-02
globaltradinggroup.biz wi p 2006-Jul-17 2006-Apr-02
hostvegan.biz wi p 2006-Jul-17 2006-Apr-30
max-bet.biz wi p 2006-Jul-17 2006-May-09
necsa.biz wi p 2006-Jul-17 2006-May-05
offshore-company-formation.biz wi p 2006-Jul-17 2006-Apr-02
panama-hosting.biz wi p 2006-Jul-17 2006-Apr-02
satsales.biz wi p 2006-Aug-23 2006-Apr-02 NS2.CYBERCASTCO.COM +2
selftech.biz wi p 2006-Aug-06 2006-Apr-02 NS2.CYBERCASTCO.COM +2
ultrastar.biz wi p 2006-Jul-17 2006-Apr-02
telegrp.com wi p
global-fiber-optics.com wi p
gemworks.com wi p 2006-Jun-10 NS.HILINK.COM.AU
mcgallen.com wi p
ultimate-sounds.com wi p
whizteens.com wi p
naturdieta.com wi p
woodmann.com wi p
jeuxenligne.com wi p
seamuspenn.com wi p
seamusphan.com wi p 2006-Jun-10 NS.HILINK.COM.AU
e-bookmaker.com wi p
wonderup.com wi p
knowledgeventure.com wi p
marriageofminds.com wi p
making-ideas-work.com wi p
daniellevallee.com wi p
omaltd.com wi p
zauctionoffshore.com wi p
panamaride.com wi p
canadaoffshore.com wi p 2006-Aug-24
espiderwebdesigngroup.com wi p
homebizautomated.com wi p
pharmaeurope.com wi p 2006-Jul-26 NS2.GOSTOVANJE
georgetowntrust.com wi p
united-pharmacy.com wi p 2006-Jul-26 NS2.GOSTOVANJE
thisbodythislife.com wi p
doctorfengshui.com wi p
sublevel9.com wi p
arrendadoraeconomica.com wi p
thewinterpalace.com wi p
cybercastco.com wi p
sowthenreap.com wi p
ezdirectv.com wi p
keynotepresenter.com wi p
globodist.com wi p
neweconomydebate.com wi p 2006-Jun-10 NS.HILINK.COM.AU
neweconomydebates.com wi p 2006-Jun-10 NS.HILINK.COM.AU
cajanacional.com wi p 2006-Jul-05 NS3.DNSMADEEASY
offshore-web-hosts.com wi p
dotzen.com wi p
zenbook.com wi p
visionarybook.com wi p
bargaindss.com wi p
lesjeuxenligne.com wi p
icaroproducciones.com wi p
bookpublicrelations.com wi p
casino-fr.com wi p 2006-Jun-20 NS.OXITO
jeudecasino.com wi p
gemstars-r-nicers.com wi p
techpharmalabs.com wi p
games-online-casino.com wi p
homebizmenu.com wi p
monsieur-casino.com wi p
get-free-electronics.com wi p
durallantas.com wi p
mister-casino.com wi p
herr-casino.com wi p
signore-casino.com wi p
senor-casino.com wi p
heer-casino.com wi p
herre-casino.com wi p
senhor-casino.com wi p
trust-rx.com wi p
askseamus.com wi p
mister-poker.com wi p
johncanhelpyou.com wi p
asiafitnesscoach.com wi p
globalmobilebizautomated.com wi p
gemstarsarenicers.com wi p
globalmobilebiz.com wi p
siteswitcher.com wi p
texas-hold.com wi p
texashold.com wi p 2006-Jul-12 NS2.HEBERGEMENT-GRATUIT
pokersource.com wi p
jeux-casino-gratuit.com wi p
asiansexmovie4x.com wi p
panamarealestateholdings.com wi p
antivirustechniques.com wi p
bluegordon.com wi p
havensclub.com wi p
drseamusphan.com wi p
jeux-casino-virtuel.com wi p
adminmailer.com wi p
steroidcorner.com wi p 2006-Jul-26 NS2.GOSTOVANJE
justmints.com wi p
tcepanama.com wi p 2006-Aug-08 YNS2.YAHOO
llr-enterprises.com wi p
streetzen.com wi p
mygroundfloormlm.com wi p
johncanhelpme.com wi p
myforbiddenleads.com wi p
athensoffshoregroup.com wi p
clubbilling.com wi p
sencash.com wi p
auspiciousvoice.com wi p
ngawangtashi.com wi p
porthpies.com wi p
thorus-int.com wi p
ccipanama.com wi p
cybercastintl.com wi p
imagesbyphone.com wi p
thenuclear-fr.com wi p
casino-del-rio.com wi p 2006-Jul-12 NS2.HEBERGEMENT-GRATUIT
adventureis.com wi p
netjanus.com wi p
ondsolutions.com wi p
mypageproducer.com wi p
roulette-fr.com wi p
videopoker-fr.com wi p
blackjack-fr.com wi p
slots-fr.com wi p
sludgeretort.com wi p
abmmgmt.com wi p
worldwideholidayhomes.com wi p
asiaprofessionalspeaker.com wi p
singaporeprofessionalspeaker.com wi p
dnp-resource.com wi p
monaco-gold.com wi p
dowdecoded.com wi p 2006-Jul-20 NS.EARTHTECINC
casinobyweb.com wi p
pokerbyweb.com wi p
casinofuehrer.com wi p
gratischips.com wi p
castlepath.com wi p
castlepathgroup.com wi p
intelli-timer.com wi p
new-citizenship.com wi p
padigits.com wi p
magikmoneycasino.com wi p
sportspublicists.com wi p
sportspublicrelations.com wi p
steroid-planet.com wi p
lansdowneprocessing.com wi p
instantbankroll.com wi p
valeho.com wi p
softwareregistrationsite.com wi p
articpoker.com wi p
flowerblacklist.com wi p
classicgamecasino.com wi p
pridaspublicidad.com wi p
baseballboardgame.com wi p
foreign-service.com wi p
valeiopoker.com wi p
first40years.com wi p
firstfortyyears.com wi p
ourprivatemembers.com wi p
window1984.com wi p
lmentos.com wi p
freewsop.com wi p
containerconsultant.com wi p 2006-Jun-29 NS.KOABY
studentnoteexchange.com wi p 2006-Jun-21 0.0.0.0 +2
piedpiperprinciple.com wi p
bookmakerbyweb.com wi p
kingswoodmanagement.com wi p
bonus-code.com wi p
guidadeicasino.com wi p
iustopia.com wi p
xxlsell.com wi p
testmedical.com wi p
navigatornorden.com wi p
worldcomservices.com wi p
moneybyweb.com wi p
loveableroguespoker.com wi p
winasiantips.com wi p
cyberwetten.com wi p
europetracker.com wi p
asiavoicetalents.com wi p
singaporevoiceovers.com wi p
curriculumdeveloper.com wi p
zest111.com wi p
swarmtheminutemen.com wi p
matrixservicescorp.com wi p
globaltradewindnetwork.com wi p
blogmonk.com wi p
peacefulknights.com wi p
myvegasaction.com wi p
offshore-company-services.com wi p
musclearmy.com wi p
computercapturedevice.com wi p
inj-x.com wi p
warmforless.com wi p 2006-Sep-08 PARK9.SECURESERVER.NET
trademygold.com wi p
daniellesgoodlifecenter.com wi p
leadwaysec.com wi p
facilitae.com wi p
carlworboys.com wi p 2006-Sep-03 NS2.SECURESERVER.NET
iron-forum.com wi p
jorgemorelos.com wi p
whatmenandwomenwant.com wi p
kswindustries.com wi p
intgoldcasino.com wi p
fxinvestmentgold.com wi p
panamaexpertos.com wi p 2006-Jun-29 NS2.ZONEEDIT
misterblackjack.com wi p
netellerreviews.com wi p 2006-Jul-30
xthorp.com wi p
crguides.com wi p
milhousecapital.com wi p
jamaica-travel-now.com wi p
panama-travel-info.com wi p
bahamas-travel-info.com wi p
argentina-travel-info.com wi p
france-travel-now.com wi p
hawaii-travel-now.com wi p
italy-travel-now.com wi p
spain-travel-now.com wi p
cuba-travel-info.com wi p
aruba-travel-now.com wi p
thailand-travel-now.com wi p
india-travel-now.com wi p
hairlossgenerics.com wi p 2006-Jul-15 NS.RACKSPACE
compasscash360.com wi p 2006-Jul-05 PARK20.SECURESERVER.NET
barelylegalshop.com wi p
marsolutionspma.com wi p
paradiseofpanama.com wi p
asctrust.com wi p
antiagingeurope.com wi p
bienesraices2001.com wi p
internet-marketing-2005.com wi p
cabanaselparador.com wi p
mail-panama.com wi p 2006-Jun-24 NS3.ZONEEDIT
thinkandpay.com wi p
cashclubnet.com wi p
v-cashcard.com wi p
comorosfs.com wi p
sierra247.com wi p
uoisys.com wi p
lasikflap.com wi p
automovileseuropeosint.com wi p
onyxaquisitions.com wi p
ecosdelagroonline.com wi p
linuxsupportedprinters.com wi p
stoxx24.com wi p
sentinel-assoc.com wi p
onyxacquisitions.com wi p
starpanamasolution.com wi p
mail-rx.com wi p
everprivatebrowser.com wi p
mtdpanama.com wi p
informazionievolutiontravel.com wi p
ocsav.com wi p
iac-ci.com wi p
wise3d.com wi p
negroarts.com wi p
uspnm.com wi p
debitcardexchange.com wi p
start-your-casino-sucks.com wi p 2006-Jan-15
gameonsales.com wi p 2006-Aug-18 2006-Jan-20 NS2.FORESIGHTDNS
cadunsec.com wi p 2006-Aug-18 2006-Jan-20 NS2.FORESIGHTDNS
venus-cupid.com wi p
forex-syndicate.com wi p 2006-Jan-28
western-trust.com wi p
westernadministration.com wi p 2006-Feb-01
benedictconsultancy.com wi p 2006-Feb-01
corp888.com wi p 2006-Aug-08 DNS5.NAME-SERVICES
toeguor.com wi p 2006-Feb-04
fxtraplans.com wi p 2006-Feb-10
nappy-head.com wi p 2006-Feb-10
hyip4today.com wi p 2006-Feb-12
gmukonline.com wi p 2006-Feb-16
project-gothik.com wi p 2006-Feb-16
voipunity.com wi p 2006-Feb-17
supplemix.com wi p
fundacionapae.com wi p
globalmobilebizmenu.com wi p 2006-May-28
titanichyip.com wi p 2006-Feb-23
marketfocusedpublications.com wi p 2006-Jul-07 2006-Mar-06 NS9.WORLDNIC +2
vlpglobal.com wi p 2006-Jun-27 2006-Mar-06
medicalprocessingservices.com wi p 2006-Jun-27
extrempower.com wi p 2006-Jun-27
e-webinvest.com wi p 2006-Jun-27 2006-Mar-09 2006-Apr-05
goglobalfunds.com wi p 2006-Jun-27 2006-Mar-09
flexi-trading.com wi p 2006-Jun-27 2006-Mar-11
panamaoffshorehosting.com wi p 2006-Jun-27
curzon-property.com wi p 2006-Aug-18 2006-Mar-20 NS2.FORESIGHTDNS +2
kisfund.com wi p 2006-Jun-27 2006-Mar-20
powernicen.com wi p 2006-Jun-27 2006-Mar-23
ipapadres.com wi p 2006-Jun-27 2006-Mar-26
bayislands411.com wi p 2006-Aug-08 2006-Mar-30 NS98.WORLDNIC +2
offshoreopps.com wi p 2006-Jun-27
checlatin.com wi p 2006-Jun-27 2006-Mar-31
tavistocksecurities.com wi p 2006-Aug-18 2006-Mar-31 NS2.FORESIGHTDNS +2
multi-bang.com wi p 2006-Jun-27 2006-Apr-05
hondurasadventures.com wi p 2006-Aug-08 NS70.WORLDNIC +2
bayislandsmagazine.com wi p 2006-Aug-08 2006-Apr-05 NS66.WORLDNIC +2
roatanentertainment.com wi p 2006-Aug-08 2006-Apr-05 NS68.WORLDNIC +2
privatetradegroup.com wi p 2006-Jun-27 2006-Apr-05
demimondeonline.com wi p 2006-Jun-27 2006-Apr-12
kandlesticks.com wi p 2006-Jun-27 2006-Mar-09
solutiongold.com wi p 2006-Jun-27
ksticks-mb.com wi p 2006-Jun-27 2006-Apr-22
stocknest.com wi p 2006-Jun-27
bestwebconsulting.com wi p 2006-Jun-27
auto12daily.com wi p 2006-Jun-27 2006-May-28
smokesxpress.com wi p 2006-Jun-27
vitaminerals4u.com wi p 2006-Jun-27
e-goldpoint.com wi p 2006-Jun-27
911inter.com wi p
hostvegan.com wi p 2006-Jun-27
vegan123.com wi p 2006-Jun-27
vegansurf.com wi p 2006-Jun-27
gf-corporation.com wi p 2006-Jun-27 +2
sinalair1147.com wi p 2006-Jun-27
silverline-enterprise.com wi p 2006-Jun-27
gold-silverco.com wi p 2006-Jul-22 PARK22.SECURESERVER.NET +2
xtimevideo.com wi p 2006-Jun-27
jupiteradvisory.com wi p 2006-Aug-18 NS2.FORESIGHTDNS +2
aog-chemicals.com wi p 2006-Jun-27
drmarkholmes.com wi p 2006-Jun-27
grancaymaninvestment.com wi p 2006-Jun-27
ixgaming.com wi p 2006-Jun-27
projectgothik.com wi p 2006-Jun-27
bestvirtualcard.com wi p 2006-Jun-27
onlinecasino-bonuscode.com wi p 2006-Jun-27
onlinepoker-bonuscode.com wi p 2006-Jun-27
medical-inc.com wi p 2006-Jun-27
grupo-intermex-sa.com wi p 2006-Jun-27
hawkins-cm.com wi p 2006-Jul-07 NS2.DYNADOT +2
sky-ip.com wi p 2006-Jun-27
vitavisions.com wi p 2006-Jun-27
freier-verlag.com wi p 2006-Jun-27 +2
onlinecasinooracle.com wi p 2006-Jul-05 PARK30.SECURESERVER.NET +3
activate-vistatravelcard.com wi p 2006-Jun-27 +3
golden-crusade.com wi p 2006-Jun-27 +2
randogold.com wi p 2006-Jun-27 +2
paraguayexpertos.com wi p 2006-Jun-27 +3
telltimes.com wi p 2006-Jun-27 +2
uruguayexpertos.com wi p 2006-Jun-27 +3
argentinaexpertos.com wi p 2006-Jun-27 +3
money-flexx.com wi p 2006-Jun-27 +2
flexxcard.com wi p 2006-Jun-27 +2
wealth-moves.com wi p 2006-Jul-13 DNS.HOSTONY.ORG +3
panamalifebirds.com wi p 2006-Jun-27 +2
new-investbuilder.com wi p 2006-Jun-27 +2
intrecal.com wi p 2006-Jun-27 +2
investmentcore.com wi p 2006-Jun-29 2006-Feb-24 NS4.EVERYDNS.NET +2
fce-club.com wi p 2006-Jun-27
worldwidecgroup.com wi p 2006-Jun-28
leaftowers.com wi p 2006-Jun-30
nicsamail.com wi p 2006-Jun-30
serverpp.com wi p 2006-Jul-01
incotrust.com wi p 2006-Jul-07 2006-Aug-28 REMOTE2.EASYDNS +2
panamafruit.com wi p 2006-Jul-02 +2
globalforexclub.com wi p 2006-Jul-04
cafesther.com wi p 2006-Jul-04
properties-ph.com wi p 2006-Jul-05
i12invest.com wi p 2006-Jul-07
hondurassmartbusiness.com wi p 2006-Aug-08 NS6.WORLDNIC +2
inv4life.com wi p 2006-Jul-13
tbic-invest.com wi p 2006-Jul-19
businessintjaco.com wi p 2006-Jul-22 PARK28.SECURESERVER.NET +2
trogvar.com wi p 2006-Aug-01 REMOTE2.EASYDNS +2
esec-pay.com wi p 2006-Jul-26 NS2.GOSTOVANJE +2
diamond-softclub.com wi p 2006-Jul-26
zetawin.com wi p 2006-Jul-26
diceasa.com wi p 2006-Jul-27
greenmachineinvestpro.com wi p 2006-Jul-29
invest-in-energy.com wi p 2006-Aug-01
humangrowlab.com wi p 2006-Aug-08
melissa-tobler.com wi p 2006-Aug-08
worldwideinvestmentcorp.com wi p 2006-Aug-08
secure-purchase-protection.com wi p 2006-Aug-08
investbefree.com wi p 2006-Aug-18
biomehr.com wi p 2006-Aug-18
pillsquare.com wi p 2006-Aug-31 PARK12.SECURESERVER.NET +2
thecfia.com wi p 2006-Aug-19
artepicnic.com wi p 2006-Aug-23 NS2.NETFIRMS +2
destinationpty.com wi p 2006-Aug-27
pay1secure.com wi p 2006-Sep-09 NS2.ALWAYSONDNS.NET +3
bionexusworld.com wi p 2006-Aug-29
bionexusmalaysia.com wi p 2006-Aug-29
bionexusbrazil.com wi p 2006-Aug-30
firstclassinvestor.com wi p 2006-Aug-31
order-domestic.com wi p 2006-Sep-07 NS4.SECURESERVER.NET +4
best-hyip-invest.com wi p 2006-Aug-31
topgradeessays.com wi p 2006-Sep-02
aquatera-env.com wi p 2006-Sep-03
aquaterra-inc.com wi p 2006-Sep-05
midcoverway.com wi p 2006-Sep-05
chloebancroft.com wi p 2006-Sep-08
hyvum.com wi p 2006-Sep-09 NS2.MCFERRIN-ASSOCIATES +2
ammotrade.com wi p 2006-Sep-09
million-deal.com wi p 2006-Sep-09
bionexusbrazil.org wi p 2006-Aug-29
bionexusmalaysia.org wi p 2006-Aug-29
bionexusworld.org wi p 2006-Aug-29
casino-en-ligne.org wi p
ceamfa.org wi p
clubgalleria.org wi p 2006-Aug-07 PARK4.SECURESERVER.NET +2
direktshop.org wi p
easy-finance.org wi p
estrategiaempresarial.org wi p
freedom-club.org wi p 2006-Jun-27
ghpi.org wi p 2006-Jul-08 DNS.HOSTONY.ORG +2
hostvegan.org wi p 2006-May-10
institutocolombopana.org wi p 2006-Apr-06
nobojo.org wi p 2006-Aug-07
panamalaw.org wi p 2006-Jul-01 2006-Feb-10 NS2.EZYDOMAIN.COM +2
tashifoundation.org wi p 2006-Jun-09 NS.HILINK.COM.AU
theprivategroup.org wi p 2006-Jul-30
911backstage.info wi p
911domains.info wi p
911hosting.info wi p
911inter.info wi p
alleanza.info wi p 2006-Aug-22 NS18.LANDHOST.NET +2
blakemore.info wi p 2006-Sep-03 2006-Jan-16 NS2.SECURESERVER.NET
bluesandrz.info wi p 2006-Aug-07
cjs-grupo-financiero-sa.info wi p 2006-Jan-16
dagelijks.info wi p 2006-Jan-16
euhome.info wi p 2006-Jan-16
gold-silverco.info wi p 2006-Jul-22 2006-May-04 PARK22.SECURESERVER.NET
host911.info wi p 2006-Jan-16
hostvegan.info wi p 2006-Apr-30
immigration-club.info wi p 2006-Jan-16
invest-offshore.info wi p 2006-Feb-15
kots.info wi p 2006-Jan-16
melissaleatte.info wi p 2006-Apr-04
microwire.info wi p 2006-Jun-09 2006-Jan-16 NS.HILINK.COM.AU
offshoreopps.info wi p 2006-Apr-28
paramount-lvms.info wi p 2006-Jan-17
pocservin.info wi p 2006-Apr-22
riskfreeprofits.info wi p 2006-Apr-30
stevechandler.info wi p 2006-Sep-03 2006-Jan-16 NS2.SECURESERVER.NET
uzmanies.info wi p 2006-Jul-26
veganfastfood.info wi p 2006-Apr-30
veganhost.info wi p 2006-Apr-30
veganhosting.info wi p 2006-Apr-30
vegansurf.info wi p 2006-Apr-30
mx2.net wi p 2006-Jun-10 NS.SANCTUM.COM.AU
mcgallen.net wi p 2006-Jun-09 NS.SANCTUM.COM.AU
seamuspenn.net wi p 2006-Jun-09 NS.HILINK.COM.AU
openpath.net wi p 2006-Jun-10 NS.SANCTUM.COM.AU
expertspeaker.net wi p 2006-Jun-10 NS.SANCTUM.COM.AU
knowledgecookie.net wi p 2006-Jun-09 NS.SANCTUM.COM.AU
knowledgelabs.net wi p 2006-Jun-09 NS.SANCTUM.COM.AU
casinoonline.net wi p
ymmss.net wi p
dss4less.net wi p
aapanama.net wi p
woodmann.net wi p
worldliteracy.net wi p
sky-ip.net wi p
pay-sol.net wi p
it4us.net wi p
baseballboardgame.net wi p
partnercircle.net wi p 2006-Jul-30
containerconsultant.net wi p 2006-Jun-29 NS.KOABY.COM
dollardazzler.net wi p 2005-Sep-21
dollardazzlers.net wi p
capitalexsucks.net wi p
alliancefg.net wi p
mp3rocket.net wi p
ecosdelagro.net wi p
croftbros.net wi p
granjasanjudastadeo.net wi p 2006-Feb-19
perfectinvestment.net wi p 2006-Mar-28
perfectinveestment.net wi p 2006-Apr-05
easy2pay.net wi p
demimondeonline.net wi p 2006-Apr-13
sbpool.net wi p 2006-Apr-14
911inter.net wi p
hostvegan.net wi p
gold-silverco.net wi p 2006-Jul-22 PARK22.SECURESERVER
graysonforcongress.net wi p
fxadmin.net wi p 2006-Jul-25 NS3.DNSMADEEASY.COM +2
panamalaw.net wi p 2006-Jul-01 2006-Feb-07 NS2.EZYDOMAIN.COM +2
wwcgroup.net wi p 2006-Jul-04
sovereignforex.net wi p 2006-Jul-20
getrealtrading.net wi p 2006-Jul-20
invest-in-energy.net wi p 2006-Aug-01
yasuriyamileth.net wi p 2006-Aug-24
ebmdesign.net wi p 2006-Sep-08

_______________

Nameserver hosts within 200.115.174.0/24

Since
Created Hostname Since
Changed IP
4 mons 19 days ns2.bunny-love.com wi 4 mons 19 days 200.115.174.167
4 mons 27 days ns2.onlineherz24.com wi 4 mons 27 days 200.115.174.167
4 mons 27 days ns2.onlineherz.com wi 4 mons 27 days 200.115.174.167
4 mons 29 days ns2.nodir-ltd.com wi 4 mons 29 days 200.115.174.167
4 mons 29 days ns2.flirtjoy.com wi 4 mons 29 days 200.115.174.167
4 mons 29 days ns2.luckalot.com wi 4 mons 29 days 200.115.174.167
4 mons 29 days ns2.chatliebe.com wi 4 mons 29 days 200.115.174.167
7 mons 26 days ns1.sysbusiness.info wi 7 mons 26 days 200.115.174.14
7 mons 26 days ns2.sysbusiness.info wi 7 mons 26 days 200.115.174.14
11 mons 19 days ns2.niprot.com wi 11 mons 19 days 200.115.174.109
11 mons 19 days ns1.niprot.com wi 11 mons 19 days 200.115.174.109
1 year 1 mon 6 days ns1.xbay.com wi 1 year 1 mon 6 days 200.115.174.86
1 year 1 mon 6 days ns2.xbay.com wi 1 year 1 mon 6 days 200.115.174.88

____________

SBL46706

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 29-aug-2006
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
origin-c: JOCO-634271
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 200.115.174.174
nserver: ns2.dark-mailer.com 200.115.174.174
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2006-02-13 14:49:23 UTC
expires: 2007-01-17 04:26:51 UTC

contact-hdl: jobie2004@hehe.com#0
person: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784

source: joker.com live whois service

_________

Domain Name: DARKMAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 13-feb-2006
Creation Date: 23-sep-2003
Expiration Date: 23-sep-2007

domain: darkmailer.com
origin-c: JOCO-595552
owner: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 200.115.174.174
nserver: ns2.dark-mailer.com 200.115.174.174
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2006-02-13 14:50:16 UTC
expires: 2007-09-23 18:03:54 UTC

contact-hdl: darkmailer2003@yahoo.com#0
person: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812

source: joker.com live whois service

____________


___________

SBL50308

http://dark-mailer.com/index.htm

[64.56.65.20]
NS1.DARK-MAILER.COM
NS2.DARK-MAILER.COM
___________

SBL39959

Proxy/botnet hijack mailer (spamware), kicked off of many networks.



--- reading URL dark-mailer.com
--- contacting host dark-mailer.com [58.20.191.36] on port 80

HTTP/1.1 200 OK
Content-Length: 14
Content-Type: text/html
Content-Location: http://dark-mailer.com/index.htm
Last-Modified: Wed, 30 Nov 2005 x GMT
Accept-Ranges: bytes
ETag: "1ccb9298c1f5c51:2f7"
Server: Microsoft-IIS/6.0
Date: Thu, 06 Apr 2006 22:59:23 GMT
Connection: close

coming soon...
--- connection closed



--- reading URL darkmailer.com
--- contacting host darkmailer.com [58.20.191.36] on port 80

HTTP/1.1 200 OK
Content-Length: 14
Content-Type: text/html
Content-Location: http://darkmailer.com/index.htm
Last-Modified: Wed, 30 Nov 2005 x GMT
Accept-Ranges: bytes
ETag: "1ccb9298c1f5c51:2f7"
Server: Microsoft-IIS/6.0
Date: Thu, 06 Apr 2006 23:00:52 GMT
Connection: close

coming soon...
--- connection closed



$ dig @ns1.dark-mailer.com darkmailer.com ns

; <<>> DiG 9.2.4 <<>> @ns1.dark-mailer.com darkmailer.com ns
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13850
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;darkmailer.com. IN NS

;; ANSWER SECTION:
darkmailer.com. 3600 IN NS www-yc06eh4msm8.

;; Query time: 353 msec
;; SERVER: 58.20.191.36#53(ns1.dark-mailer.com)
;; WHEN: Thu Apr 6 2006
;; MSG SIZE rcvd: 61


$ dig @ns2.dark-mailer.com darkmailer.com ns

; <<>> DiG 9.2.4 <<>> @ns2.dark-mailer.com darkmailer.com ns
;; global options: printcmd
;; Got ////////////

______________________________________



The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: http://www.spamhaus.org/rokso/evidence/ROK7284/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2014 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy