ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Matias F. Bernardi / TuVPS

Evidence Menu:

Matias F. Bernardi / TuVPS Index


Country: Argentina
State: Cordoba
Spams through throwaway accounts at ISPs that provide cheap VPS hosting services. Advertises many types of dubious merchandise -- bulk email lists, organ enlargement products, pornography, fake pharmaceuticals, and e-books on making money fast among them -- that is more commonly spammed through botnets.


Matias F. Bernardi / TuVPS SBL Listings History
Current SBL Listings
Archived SBL Listings

Spam Evidence


This record contains samples of spam emails that the TuVPS spam operation has sent over the past two years.

TuVPS has been spamming for several of the same businesses over that entire period, despite having claimed to have removed their spamming "customers". For example, they have been spamming for an ebooks seller that has been "terminated" several times. The same is true of their "organ enlargement" customer.

* SBL190332 / tuvps.net (Spam Subject: Coleccion 1.000 Libros BEST SELLER)
* SBL200891 / snowshoe spam range (Spam Subject: Dominio gratis)
* SBL214442 / List Sellers (intermark2.info) (Spam From: USA Database Online)
* SBL217733 / spam source & support network TUVPS.NET (eventosygiras.info)
* SBL226369 / autos.intermailing.com.ar (Spam Subject: Email Markting...)
* [No SBL] / Spam Subject: Solicite catalogo....
* SBL231570 / marketingcompleto.com (Spam Subject: Disfruta nuestros vinos...)
* SBL245004 / Organ Enlargement Spam Redirector
* SBL250247 / porn spam source... (Multiple Spam From/Subjects)
* SBL264943 / enviossending.info (Spam Subject: Nuevos Libros Digitales...)
* SBL265606 / enviossending.net (Repeat SBL!) (Spam Subject: Logre Erecciones Fuertes...)
* SBL265705 / enviossending.com (Repeat SBL!) (Spam Subject: Su Pagina Web es Responsive...)
* SBL266016 / sendemailfast.xyz (EnviosSending) (Spam Subject: Sufre de Disfuncion Erectil?)
* SBL266021 / sendemailfast2.xyz (EnviosSending) (Spam Subject: Mercado Secreto - Curso online...)

=====

Received: from smtp6.promomailmarket.com (host127.201-253-100.telecom.net.ar [201.253.100.127])
Date: Tue, 09 Jul 2013 01:##:## -0400
From: "Los Mejores 1000 Libros" <info2@smtp6.promomailmarket.com>
Reply-To: aca-no-responder@promomailmarket.com
Subject: Coleccion De Mil Libros

URI: http://promomailmarket.com/panel/link.php?<x>

----------

Received: from gestionatuweb.com (gestionatuweb.com [179.63.236.53])
Date: Sat, 12 Oct 2013 16:##:## -0300
From: "GestionaTuWeb" <info@gestionatuweb.com>
Reply-To: info@gestionatuweb.com
Subject: Dominio gratis

URI: http://panel.gestionatuweb.com/link.php?<x>

----------

Received: from intermark2.info (unknown [179.63.238.5])
Date: Thu, 27 Feb 2014 18:##:## -0300
From: "USA Database Online" <mail@server2hosting.com>
Reply-To: noreply@server2hosting.com
Subject: Gain customers just in one click

URI: http://panel.intermark2.info/link.php?<x>

----------

Received: from 1.dedijuancarlos.com (unknown [179.63.236.2])
Date: Sun, 02 Mar 2014 19:##:## +0000
From: Luz Casal en Concierto <newsletter@eventosygiras.info>
Reply-To: luzencontierto@gmail.com
Subject: Concierto de Luz Casal en Sevilla

URI: "http://eventosygiras.info/envios2/lt.php<x>

----------

Received: from vps74581.ovh.net (153.ip-37-187-49.eu [37.187.49.153])
Date: Mon, 23 Jun 2014 23:##:## +0000
From: Vendedores Online <marketingcompleto2014@gmail.com>
Subject: Email Markting vende tus productos de forma facil!

Image URI: http://200.123.145.105/~rodrigo/admin/temp/newsletters/3/estadisticas.jpg
URI: http://autos.intermailing.com.ar/lt.php<x>

----------

Received: from mtax1.nubenic.com (HELO mtax1.nubenic.com) (37.187.214.54)
Date: Fri, 08 Aug 2014 11:##:## +0000
From: Productos Electricos BACHETTI <bachetti.electricidad@gmail.com>
Subject: Re: Solicite catalogo y cotizacion

URI: http://marketingcompleto.com/acceso/lt.php<x>
Redirects to => http://www.monitorclaves.com.ar/Clipping/CasaBACHETTI/Consultas.html<x>

----------

Received: from mtax1.nubenic.com (mtax1.nubenic.com [37.187.214.54])
Date: Thu, 14 Aug 2014 07:##:## +0000
From: Bodega Don Cristobal <info@doncristobal.com.ar>
Subject: Disfruta nuestros vinos Reserva desde $63 + Regalo Gourmet!

Image URI: http://www.doncristobal.com.ar/newsletter/2014/news1/images/<x>
URI: http://marketingcompleto.com/acceso/box.php<x>

----------

Received: from vps131424.ovh.net (7.ip-92-222-20.eu [92.222.20.7])
Date: Fri, 16 Jan 2015 04:##:## +0000
From: "Agrandalo" <envios@siemprelistos21.com>
Reply-To: agrandalo@masgranded.com
Subject: Agranda Tu Pene De Forma Natura

URI: http://sitio4.sabermas.biz/link.php<x>
Redirects to => http://179.63.238.186/~imagenes/grande/pene.html <= Compromised server
IFRAME Redirects to => http://<x>.hop.clickbank.net/?<x>
Redirects to => http://www.dechicoagigante.com?<x>

----------

Received: from whm.hosting-revendedor.com.ar (tuvps.net [200.123.145.105])
Date: Tue, 17 Mar 2015 05:##:## -0300
From: "Carolyn Hawkins" <carolyn_hawkins@estudiodolera.com>
Reply-To:"Carolyn Hawkins" <carolyn_hawkins@estudiodolera.com>
Subject: FW: Hi

<div>
A daily updated list showing a variety of cartoon 3d porn picture and movie galleries -
<a href="http://ancientegyptiankings.net/wp-includes/SimplePie/Cache/file.php?<x>">
click here</a>
</div>

----------

Received: from libros2.enviossending.info (unknown [5.189.151.69])
Date: Sat, 08 Aug 2015 03:##:## +0000
From: "Libros en Linea...<x>" <<x>promos@libros2.enviossending.info>
Reply-To: envios@variossm.me
Subject: Nuevos Libros Digitales. Lee desde tus dispositivos.......<x>

Image URI: http://d26lpennugtm8s.cloudfront.net/stores/<x>
URI: http://libros.sellingbest2.com/link.php?<x>

----------

Received: from promo2.enviossending.net (ip-204-229-238-178.static.contabo.net [178.238.229.204])
Date: Mon, 10 Aug 2015 03:##:## +0000
From: "Disfuncion No Mas...<x>" <<x>envios@promo2.enviossending.net>
Reply-To: sad@dfsf.com
Subject: Logre Erecciones Fuertes y Duraderas ......<x>

URI: http://p4.sellingbest2.com/link.php?<x>

----------
Received: from envios1.enviossending.com ([5.189.139.42])
Date: Mon, 10 Aug 2015 17:##:## -0300
From: "Estudio H...<x>" <envios@envios1.enviossending.com>
Reply-To: envioestudiohangar@outlook.com
Subject: Su Pagina Web es Responsive ?......<x>

URI: http://clientes.nubenicpaneles.com/link.php?<x>

----------

Received: from promo1.sendemailfast.xyz (vmi47466.contabo.host [5.189.159.217])
Date: Mon, 17 Aug 2015 16:##:## +0000
From: "Disfuncion No Mas...<x>" <<x>envios@promo1.sendemailfast.xyz>
Reply-To: disfuncion@nomas.com
Subject: Aumenta Tus Erecciones para siempre ......<x>

URI: http://p1.promocionesenvios.com/link.php?<x>

----------

Received: from libros2.sendemailfast2.xyz (unknown [5.189.161.40])
Date: Mon, 17 Aug 2015 16:##:## +0000
From: "Mer...<x>" <<x>envios@libros2.sendemailfast2.xyz>
Reply-To: soft@llott.com
Subject: Mercado Secreto - Curso online......<x>

URI: http://libros.promocionesenvios.com/link.php?<x>

=====


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK11308/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy