ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
EmailBlastUSA

Evidence Menu:

EmailBlastUSA Index


Country: United States
State: AZ
Spammer that spams to sell its own lists and direct spam services from VPS servers at various inexpensive providers. Formerly extremely high volume spammer that switched to snowshoe spamming after Verizon Wireless and other carriers put an end to unlimited bandwidth plans. Formerly made extensive use of fses free anonymous domains, but has switched to paid-for domains because of widespread blocking of free domains. Hosts behind Cloudflare, and makes use of other free services where possible to hide its identity Has used many business and personal names in spams.


EmailBlastUSA SBL Listings History
Current SBL Listings
Archived SBL Listings

November 2016: Send Direct (emailsenddirect.com)


Sending from the domain emailsenddirect.com, using cheap VPS services and attempting to tag emails with an MTA serial number in the HELO of spams.

SPAM HEADERS:

Received: from mta######.emailsenddirect.com (unknown [8.168.108.197])
by <x> (Postfix) with ESMTP id <x>
for <x>; Wed, 2 Nov 2016 07:##:## +0000 (UTC)
DKIM-Signature: <x>
DomainKey-Signature: <x>
To: <x>
Subject: 9 Million Business Contacts for $149 - Final Day!
X-PHP-Originating-Script: 1001:class.phpmailer.php
Date: Wed, 2 Nov 2016 00:##:## -0700
From: Data Source <noreply@emailsenddirect.com>
Reply-to: Data Source <noreply@emailsenddirect.com>
X-Priority: 3
Sender: <user-<x.@emailsenddirect.com>
X-Mailer: emailsenddirect.com
X-Complaints-To: abusereport@emailsenddirect.com
List-Unsubscribe: <http://www.emailsenddirect.com/u.php?<x>>
X-MessageID: <x>
X-Report-Abuse: <http://www.emailsenddirect.com/report_abuse.php?<x>>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"

<snip>


WOHIS:

Domain Name: emailsenddirect.com
Registry Domain ID: 1922499017_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.moniker.com
Registrar URL: http://www.moniker.com
Updated Date: 2016-05-03T20:51:27.0Z
Creation Date: 2015-04-22T19:17:04.0Z
Registrar Registration Expiration Date: 2017-04-22T19:17:04.0Z
Registrar: Moniker Online Services LLC
Registrar IANA ID: 228
Registrar Abuse Contact Email: abuse@moniker.com
Registrar Abuse Contact Phone: +1.9546071294
Domain Status: ok https://icann.org/epp#ok
Registry Registrant ID: Not Available From Registry
Registrant Name: Send Direct
Registrant Organization:
Registrant Street: 380 Alhambra Circle
Registrant City: Coral Gables
Registrant State/Province: FL
Registrant Postal Code: 33134
Registrant Country: US
Registrant Phone: +1.7863030023
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: joe@rios.com
Registry Admin ID: Not Available From Registry
Admin Name: Send Direct
Admin Organization:
Admin Street: 380 Alhambra Circle
Admin City: Coral Gables
Admin State/Province: FL
Admin Postal Code: 33134
Admin Country: US
Admin Phone: +1.7863030023
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: joe@rios.com
Registry Tech ID: Not Available From Registry
Tech Name: Send Direct
Tech Organization:
Tech Street: 380 Alhambra Circle
Tech City: Coral Gables
Tech Postal Code: 33134
Tech State/Province: FL
Tech Country: US
Tech Phone: +1.7863030023
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: joe@rios.com
Registry Billing ID: Not Available From Registry
Billing Name: Send Direct
Billing Organization:
Billing Street: 380 Alhambra Circle
Billing City: Coral Gables
Billing State/Province: FL
Billing Postal Code: 33134
Billing Country: US
Billing Phone: +1.7863030023
Billing Phone Ext:
Billing Fax:
Billing Fax Ext:
Billing Email: joe@rios.com
Name Server: theo.ns.cloudflare.com
Name Server: zoe.ns.cloudflare.com
DNSSEC: unsigned


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK11851/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy