ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Nikhil Kumar Pragji / Dark-Mailer

Evidence Menu:

Nikhil Kumar Pragji / Dark-Mailer Index


Country: Australia
State: Queensland
Through the Dark-Mailer Windows based proxy-botnet based spamware, this spammer is responsible for and behind a large portion of the world's illegally sent spam.


Nikhil Kumar Pragji / Dark-Mailer SBL Listings History
Current SBL Listings
Archived SBL Listings

Other Info


SBL22417

Domain Name: DARK-MAILER.NET
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: DNS1.7HOST.COM [64.70.253.142]
Name Server: DNS2.7HOST.COM [66.194.37.189]
Status: REGISTRAR-LOCK
Updated Date: 26-dec-2004
Creation Date: 23-feb-2004
Expiration Date: 23-feb-2007

[66.194.37.189]

DNS1.7HOST.COM

NS3.AZURE-WEB.COM
NS1.TRIAMIGO.COM
NS1.DNSPOINTER03.COM
DNS9.MALAYSIANCYBERLINE.COM
NS9.MALAYSIANCYBERLINE.COM


domain: dark-mailer.net
status: lock
organization: Dark Mailer
owner: William Chan
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: dns1.7host.com
nserver: dns2.7host.com
registrar: JORE-1
created: 2004-02-23 06:38:12 UTC JORE-1
modified: 2004-12-26 05:20:11 UTC JORE-1
expires: 2007-02-23 01:37:54 UTC
source: joker.com



--- DNS lookup for "dark-mailer.net", please wait...
--- contacting nameserver: dns1.7host.com [64.70.253.142]

dark-mailer.net A 66.194.37.237
dark-mailer.net NS dns1.7host.com
dark-mailer.net NS dns2.7host.com
dark-mailer.net SOA
origin = dns1.7host.com
mail addr = 7host@7host.com
serial = 6
refresh = 86400 ()
retry = 3600 (1 hour)
expire = 604800 (7 days)
minimum ttl = 86400 ()
dark-mailer.net MX 10 mail.dark-mailer.net
dns1.7host.com A 64.70.253.142
dns2.7host.com A 66.194.37.189
mail.dark-mailer.net A 66.194.37.224

--- DNS Lookup completed

_________

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.WWW32.COM.LAMEDELEGATION.COM
Name Server: NS1.WWW30.COM
Name Server: NS1.SECUREDNS.BIZ
Status: REGISTRAR-LOCK
Updated Date: 26-dec-2004
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007


domain: dark-mailer.com
status: lock
organization: Dark Mailer
owner: William Chan
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.www32.com
nserver: ns1.www30.com
nserver: ns1.securedns.biz
registrar: JORE-1
created: 2004-01-17 09:27:09 UTC JORE-1
modified: 2004-12-26 05:20:14 UTC JORE-1
expires: 2007-01-17 04:26:51 UTC
source: joker.com

____________

Related/same-as -

Domain Name: BLACKBOXHOSTING.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: NS1.WWW30.COM
Name Server: NS2.WWW30.COM
Status: REGISTRAR-LOCK
Updated Date: 22-oct-2004
Creation Date: 19-jul-2002
Expiration Date: 19-jul-2005

Registrant:
Mailer, Infinity (JUAZBUTTCD)
Level One
Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK

Domain Name: BLACKBOXHOSTING.COM

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One
Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK
+44 6 8892 9843 fax: 123 123 1234

Technical Contact:
Network Solutions, LLC. (HOST-ORG) customerservice@networksolutions.com
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620

Record expires on 19-Jul-2005.
Record created on 19-Jul-2002.
Database last updated on 31-Dec-2004 21:06:39 EST.

Domain servers in listed order:

NS1.WWW30.COM 222.223.129.243
NS2.WWW30.COM 222.223.129.243

____________

Domain Name: BLACKBOXHOSTING.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: NS1.WWW30.COM
Name Server: NS2.WWW30.COM
Status: REGISTRAR-LOCK
Updated Date: 22-oct-2004
Creation Date: 19-jul-2002
Expiration Date: 19-jul-2005

Registrant:
Mailer, Infinity (JUAZBUTTCD)
Level One

Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK

Domain Name: BLACKBOXHOSTING.COM

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One
Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB
UK
+44 6 8892 9843 fax: 123 123 1234

Technical Contact:
Network Solutions, LLC. (HOST-ORG) customerservice@networksolutions.com
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620

Record expires on 19-Jul-2005.
Record created on 19-Jul-2002.
Database last updated on 31-Dec-2004 21:12:18 EST.

Domain servers in listed order:

NS1.WWW30.COM 222.223.129.243
NS2.WWW30.COM 222.223.129.243


--- DNS Zone Transfer for "blackboxhosting.com", please wait...
--- contacting nameserver: ns1.www30.com [222.223.129.243]

blackboxhosting.com SOA
origin = y-8ee716wn57cj1
mail addr = hostmaster
serial = 5
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 ()
minimum ttl = 3600 (1 hour)
blackboxhosting.com A 219.148.2.197
blackboxhosting.com NS y-8ee716wn57cj1
blackboxhosting.com MX 10 blackboxhosting.com

--- DNS Lookup completed


--- DNS Zone Transfer for "blackboxhosting.com", please wait...
--- contacting nameserver: ns2.www30.com [219.148.2.197]
--- DNS lookup for "blackboxhosting.com", please wait...

blackboxhosting.com SOA
origin = y-8ee716wn57cj1
mail addr = hostmaster
serial = 5
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 ()
minimum ttl = 3600 (1 hour)
blackboxhosting.com A 219.148.2.197
blackboxhosting.com NS y-8ee716wn57cj1
blackboxhosting.com MX 10 blackboxhosting.com

--- DNS Lookup completed


________________

Related to / same as -

domain: dark-mailer.com
status: lock
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.www32.com
nserver: ns1.www30.com
nserver: ns1.securedns.biz
created: 2004-01-17 09:27:09 UTC
modified: 2004-12-26 05:20:14 UTC
expires: 2007-01-17 04:26:51 UTC
source: joker.com live whois service


--- DNS lookup for "dark-mailer.com", please wait...
--- contacting nameserver: ns1.securedns.biz [219.148.2.197]

dark-mailer.com A 219.148.2.197
dark-mailer.com NS idc-vjh7lsgys2z.www30.com
dark-mailer.com SOA
origin = idc-vjh7lsgys2z.www30.com
mail addr = hostmaster@www30.com
serial = 8
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 ()
minimum ttl = 3600 (1 hour)
dark-mailer.com MX 10 dark-mailer.com
dark-mailer.com A 219.148.2.197

--- DNS Lookup completed

older -
domain: dark-mailer.net
status: lock
organization: Dark Mailer
owner: William Chan
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: dns1.7host.com
nserver: dns2.7host.com
registrar: JORE-1
created: 2004-02-23 06:38:12 UTC JORE-1
modified: 2004-12-26 05:20:11 UTC JORE-1
expires: 2007-02-23 01:37:54 UTC
source: joker.com



--- DNS lookup for "dark-mailer.net", please wait...
--- contacting nameserver: dns1.7host.com [64.70.253.142]

dark-mailer.net A 66.194.37.237
dark-mailer.net NS dns1.7host.com
dark-mailer.net NS dns2.7host.com
dark-mailer.net SOA
origin = dns1.7host.com
mail addr = 7host@7host.com
serial = 6
refresh = 86400 ()
retry = 3600 (1 hour)
expire = 604800 (7 days)
minimum ttl = 86400 ()
dark-mailer.net MX 10 mail.dark-mailer.net
dns1.7host.com A 64.70.253.142
dns2.7host.com A 66.194.37.189
mail.dark-mailer.net A 66.194.37.224

--- DNS Lookup completed

_________

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.WWW32.COM.LAMEDELEGATION.COM
Name Server: NS1.WWW30.COM
Name Server: NS1.SECUREDNS.BIZ
Status: REGISTRAR-LOCK
Updated Date: 26-dec-2004
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007


domain: dark-mailer.com
status: lock
organization: Dark Mailer
owner: William Chan
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.www32.com
nserver: ns1.www30.com
nserver: ns1.securedns.biz
registrar: JORE-1
created: 2004-01-17 09:27:09 UTC JORE-1
modified: 2004-12-26 05:20:14 UTC JORE-1
expires: 2007-01-17 04:26:51 UTC
source: joker.com

--- DNS Zone Transfer for "blackboxhosting.com", please wait...
--- contacting nameserver: ns1.www30.com [222.223.129.243]

DNS Server Response 1: Format Error.

--- DNS Zone transfer completed

--- DNS lookup for "blackboxhosting.com", please wait...

Non-authoritative answer:
blackboxhosting.com MX 10 blackboxhosting.com
blackboxhosting.com SOA
origin = y-8ee716wn57cj1
mail addr = hostmaster
serial = 5
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 ()
minimum ttl = 3600 (1 hour)
blackboxhosting.com A 219.148.2.197
blackboxhosting.com NS y-8ee716wn57cj1

Authoritative answers can be found from:
blackboxhosting.com NS y-8ee716wn57cj1
blackboxhosting.com A 219.148.2.197

--- DNS Lookup completed



Domain Name: DARK-MAILER.NET
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: DNS1.7HOST.COM [64.70.253.142]
Name Server: DNS2.7HOST.COM [66.194.37.189]
Status: REGISTRAR-LOCK
Updated Date: 26-dec-2004
Creation Date: 23-feb-2004
Expiration Date: 23-feb-2007

[66.194.37.189]

DNS1.7HOST.COM

NS3.AZURE-WEB.COM
NS1.TRIAMIGO.COM
NS1.DNSPOINTER03.COM
DNS9.MALAYSIANCYBERLINE.COM
NS9.MALAYSIANCYBERLINE.COM

mailserver1.2288.org [219.148.2.197]

____________

SBL29251

NS2.MYRXBIZ.COM
NS1.MYRXBIZ.COM
NS1.DISCOUNTRXTODAYSUPPORT.COM
DNS1.DISCOUNTRXTODAYSUPPORT.COM
DNS2.DISCOUNTRXTODAYSUPPORT.COM
NS1.DISCOUNTRXSHOPSUPPORT.COM
NS2.DISCOUNTRXSHOPSUPPORT.COM
NS1.DARK-MAILER.COM
NS2.DARK-MAILER.COM

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 18-jul-2005
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 207.218.158.47
nserver: ns2.dark-mailer.com 207.218.158.47
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2005-07-18 19:29:37 UTC
expires: 2007-01-17 04:26:51 UTC
source: joker.com live whois service

_____

Domain Name: MYRXBIZ.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.MYRXBIZ.COM
Name Server: NS2.MYRXBIZ.COM
Status: REGISTRAR-LOCK
Updated Date: 13-apr-2005
Creation Date: 03-apr-2005
Expiration Date: 03-apr-2006

domain: myrxbiz.com
owner: Jacob Sandals
email: lnternet@fastmail.fm
address: Kent Ave
city: East Mall & Goombay Dr
state: Freeport
postal-code: GR F 42629
country: BS
phone: +242-352-6682
admin-c: lnternet@fastmail.fm#0
tech-c: lnternet@fastmail.fm#0
billing-c: lnternet@fastmail.fm#0
nserver: ns1.myrxbiz.com 207.218.158.47
nserver: ns2.myrxbiz.com 207.218.158.47
status: lock
created: 2005-04-03 17:59:28 UTC
modified: 2005-04-13 14:24:19 UTC
expires: 2006-04-03 13:59:27 UTC
source: joker.com live whois service

____


Domain Name: DISCOUNTRXTODAYSUPPORT.COM
Registrar: YESNIC CO. LTD.
Whois Server: whois.yesnic.com
Referral URL: http://www.yesnic.com
Name Server: DNS1.DISCOUNTRXTODAYSUPPORT.COM
Name Server: DNS2.DISCOUNTRXTODAYSUPPORT.COM
Status: ACTIVE
Updated Date: 13-apr-2005
Creation Date: 08-apr-2005
Expiration Date: 08-apr-2006

-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : discountrxtodaysupport.com

::Registrant::
Name : David Harris
Email : discountrxtoday@gmail.com
Address : PO Box 123 Port Vila
Zipcode : n/a
Nation : VU
Tel : (425) 940-8290
Fax :

::Administrative Contact::
Name : David Harris
Email : discountrxtoday@gmail.com
Address : PO Box 123 Port Vila
Zipcode : n/a
Nation : VU
Tel : (425) 940-8290
Fax :

::Technical Contact::
Name : David Harris
Email : discountrxtoday@gmail.com
Address : PO Box 123 Port Vila
Zipcode : n/a
Nation : VU
Tel : (425) 940-8290
Fax :

::Name Servers::
dns1.discountrxtodaysupport.com
dns2.discountrxtodaysupport.com

::Dates & Status::
Created Date 2005-04-08 00:28:02 EDT
Updated Date 2005-04-08 00:28:02 EDT
Valid Date 2006-04-08 00:28:02 EDT
Status ACTIVE

_____


Domain Name: DISCOUNTRXSHOPSUPPORT.COM
Registrar: TUCOWS INC.
Whois Server: whois.opensrs.net
Referral URL: http://domainhelp.tucows.com
Name Server: NS1.DISCOUNTRXSHOPSUPPORT.COM
Name Server: NS2.DISCOUNTRXSHOPSUPPORT.COM
Status: ACTIVE
Updated Date: 16-apr-2005
Creation Date: 15-apr-2005
Expiration Date: 15-apr-2006

Registrant:
Harris
PO Box 123 Port Vila
Port Vila, VU n/a
US

Domain name: DISCOUNTRXSHOPSUPPORT.COM

Administrative Contact:
Harris, David discountrxtoday@gmail.com
PO Box 123 Port Vila
Port Vila, VU n/a
US
+1.4259408290
Technical Contact:
Harris, David discountrxtoday@gmail.com
PO Box 123 Port Vila
Port Vila, VU n/a
US
+1.4259408290


Registrar of Record: TUCOWS, INC.
Record last updated on 16-Apr-2005.
Record expires on 15-Apr-2006.
Record created on 15-Apr-2005.

Domain servers in listed order:
NS1.DISCOUNTRXSHOPSUPPORT.COM 207.218.158.47
NS2.DISCOUNTRXSHOPSUPPORT.COM 207.218.158.47


Domain status: ACTIVE

_____

%rwhois V-1.5:003fff:00 rwhois.gblx.net (by Network Solutions, Inc. V-1.5.7.3)
network:Class-Name:network
network:ID:5659.207.218.156.0/22
network:Auth-Area:net.207.218.128.0-18
network:Network-Name:1843.1843.OPTY
network:IP-Network:207.218.156.0/22
network:Organization;I:1843.OPTY
network:Tech-Contact;I:2118.1843.OPTY
network:Admin-Contact;I:2118.1843.OPTY
network:Created:20030722
network:Updated:20030722
network:Updated-By:ipadmin@gblx.net


%rwhois V-1.5:003fff:00 rwhois.gblx.net (by Network Solutions, Inc. V-1.5.7.3)
organization:Class-Name:organization
organization:ID:1843.OPTY
organization:Auth-Area:gblx.net
organization:Org-Name:Optynex
organization:Street-Address:World Trade Center, Suite 806
organization:City:Marbella
organization:State:Panama
organization:Postal-Code:UNKNOWN
organization:Country-Code:PA
organization:Phone:011 507 674 0166
organization:Created:20020924
organization:Updated:20040217
organization:Updated-By:ipadmin@gblx.net


____________
SBL11820

(May 15th, 2004)
uadgh.speciaIdelivery.com. 1D IN A 219.153.5.60
speciaIdelivery.com. 3D IN NS ns1.speciaIdelivery.com.
speciaIdelivery.com. 3D IN NS ns2.speciaIdelivery.com.
ns1.speciaIdelivery.com. 3D IN A 219.153.5.61
ns2.speciaIdelivery.com. 3D IN A 219.153.5.62


2004-04-17

www.live-porncinema.com A 219.153.5.203
live-porncinema.com NS ns1.live-porncinema.com
live-porncinema.com NS ns2.live-porncinema.com
ns1.live-porncinema.com A 219.153.5.203
ns2.live-porncinema.com A 219.153.5.203

Registrar: DOTSTER
Domain Name: LIVE-PORNCINEMA.COM
Created on: 14-MAR-04
Expires on: 14-MAR-05
Last Updated on: 14-MAR-04
Administrative, Technical Contact:
Lee, Michael leetrading333@hotmail.com
101 Kowlook Rd
Hong Kong, Hong Kong 14843
HK
+852.001167232
Domain servers in listed order:
NS1.CASINO-101.COM
NS2.CASINO-101.COM

ns1.casino-101.com A 219.153.5.203
ns2.casino-101.com A 219.153.5.203

2004-04-08

matchboard.1greatsoft.biz CNAME 1greatsoft.biz
1greatsoft.biz A 219.153.5.227
1greatsoft.biz NS NS1.WHYTHEDNS.NET
1greatsoft.biz NS NS0.WHYTHEDNS.NET
NS1.WHYTHEDNS.NET A 217.69.122.2
NS0.WHYTHEDNS.NET A 217.69.122.19

2004-02-23

www.stealthost.com 600 IN A 219.153.5.24

Jan 16
Received: from relay.Verizon.Net ([219.153.5.30]) by hijacked.proxy.honeypot

(hmm...didn't Verizon sue Ralsky? Wonder if that's revenge?)

(also see SBL11832 and SBL12522 for more trouble in this /24)

(Jan 11th, 2004)
www.kimsolutions.com. 30M IN A 219.153.5.8


ns2.www30.com [219.153.5.1]
verybestmeds.com [219.153.5.8]
ns2.www30.com [219.153.5.10]
ns2.www30.com [219.153.5.12]

domain: verybestmeds.com
status: production
organization: Internet Pharmacies
owner: Donald Buster
email: xxxbuster123@yahoo.com
title: owner
address: 6702 SW 38 Street
city: Miami
state: Florida
postal-code: 33155
country: US
admin-c: xxxbuster123@yahoo.com#0
tech-c: xxxbuster123@yahoo.com#0
billing-c: xxxbuster123@yahoo.com#0
nserver: ns1.www30.com
nserver: ns2.www30.com
registrar: JORE-1
created: 2003-11-06 05:34:19 UTC JORE-1
expires: 2004-11-06 00:34:00 UTC
source: joker.com

____________

jobie2004@hehe.com is the contact for some of the spammiest
domains on the internet: just one address for supplies of bulletproof hosting, email lists, bulk mailing software, etc
even though the postal addresses claimed are all around the
planet (Queensland Australia/Lincolnshire UK/Hong Kong).

BULK-EMAIL-LISTS.COM, PROXYBENCH.COM, INFINITYMAILER.COM,
OPENRELAYCHECK.COM, BLACKBOXHOSTING.COM, DARK-MAILER.COM,
HUGECRUSH.COM


Domain Name: PROXYBENCH.COM

Registrant: Willson, John (CTICXBLSTD)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact, Technical Contact:
Willson, John (COYWHSKMJI) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843

Domain Name: HUGECRUSH.COM

Registrant: Crush, Huge (HUGECRUSH-DOM)
5 Cameron Road, Tsimshatsui, Kowloon HK HK

Administrative Contact, Technical Contact:
Crush, Huge (HC9561) jobie2004@hehe.com
5 Cameron Road, Tsimshatsui, Kowloon HK HK
(852) 2545-7487 fax: 123 123 1234


Domain Name: INFINITYMAILER.COM

Registrant: Mailer, Infinity (INFINITYMAILER-DOM)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843 fax: 123 123 1234


Domain Name: OPENRELAYCHECK.COM

Registrant: Mailer, Infinity (SCWWCOLPID)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843 fax: 123 123 1234



Domain Name: BLACKBOXHOSTING.COM

Registrant: Mailer, Infinity (JUAZBUTTCD)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843 fax: 123 123 1234

Domain Name: BULK-EMAIL-LISTS.COM

Registrant: Willson, John (LHMYOGXXWD)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact, Technical Contact:
Willson, John (COYWHSKMJI) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843

[whois.joker.com]
domain: dark-mailer.com
status: production
organization: Dark Mailer
owner: William Chan
email: jobie2004@hehe.com
address: PO Box 323
city: Mt Ommaney
state: QLD
postal-code: 4074
country: AU
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.www32.com
nserver: ns1.www30.com
nserver: ns1.securedns.biz
registrar: JORE-1
created: 2004-01-17 08:27:09 UTC JORE-1
modified: 2004-01-17 09:35:59 UTC JORE-1
expires: 2005-01-17 03:26:51 UTC
source: joker.com


UUNET Technologies, Inc. UUNET65 (NET-65-192-0-0-1)
65.192.0.0 - 65.223.255.255
National Financial Publications, Inc. UU-65-198-177-D4 (NET-65-198-177-0-1)
65.198.177.0 - 65.198.177.255

CustName: National Financial Publications, Inc.
Address: 100 Executive Drive
Address: 1st Floor/Telco Closet
City: Slidell
StateProv: LA
PostalCode: 70460
Country: US
RegDate: 2003-12-29
Updated: 2003-12-29

NetRange: 65.198.177.0 - 65.198.177.255
CIDR: 65.198.177.0/24
NetName: UU-65-198-177-D4
NetHandle: NET-65-198-177-0-1
Parent: NET-65-192-0-0-1
NetType: Reassigned
Comment: Addresses within this block are non-portable.
RegDate: 2003-12-29
Updated: 2003-12-29

TechHandle: OA12-ARIN
TechName: UUnet Technologies, Inc., Technologies
TechPhone: +1-800-900-0241
TechEmail: help4u@mci.com

OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@mci.com

OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@mci.com

OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@mci.com




Dec 10 2004:

DNS domains for the Rolex spammer's landing page are reg'd by a rodrun.com address.

--- reading URL www.rodrun.com
--- contacting host www.rodrun.com [65.198.177.200] on port 80

HTTP/1.1 302 Object Moved
Location: http://www.myownemail.com
Server: Microsoft-IIS/4.0
Content-Type: text/html
Connection: close
Content-Length: 141

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="http://www.myownemail.com">here</a>
--- connection closed



domain: 65DNS11.COM
owner-address: Michael Oehlers
owner-address: 22 Mousa Ben
owner-address: 4321
owner-address: Cario
owner-address: Egypt
owner-phone: +02.0123178899
owner-e-mail: gruco99@rodrun.com
admin-c: MO393-GANDI
tech-c: MO393-GANDI
bill-c: MO393-GANDI
nserver: ns1.65dns11.com 219.153.0.35
nserver: ns2.65dns11.com 61.186.252.166
nserver: ns3.65dns11.com 61.183.60.3
nserver: ns4.65dns11.com 218.7.120.70
reg_created: 2004-11-01 20:21:49
expires: 2005-11-01 20:21:49
created: 2004-11-02 02:21:50
changed: 2004-12-09 16:20:10

person: Michael Oehlers
nic-hdl: MO393-GANDI
address: 22 Mousa Ben
address: 4321
address: Cario
address: Egypt
phone: +02.0123178899
e-mail: gruco99@rodrun.com
lastupdated: 2004-10-24 16:30:24


domain: DNS4432.COM
owner-address: Michael Oehlers
owner-address: 22 Mousa Ben
owner-address: 4321
owner-address: Cario
owner-address: Egypt
owner-phone: +02.0123178899
owner-e-mail: gruco99@rodrun.com <--- note rodrun.com
admin-c: MO393-GANDI
tech-c: MO393-GANDI
bill-c: MO393-GANDI
nserver: ns1.dns4432.com 219.153.0.35
nserver: ns2.dns4432.com 61.186.252.166
nserver: ns3.dns4432.com 61.183.60.3
nserver: ns4.dns4432.com 218.7.120.70
reg_created: 2004-11-01 20:21:53
expires: 2005-11-01 20:21:53
created: 2004-11-02 02:21:54
changed: 2004-12-09 16:18:53

person: Michael Oehlers
nic-hdl: MO393-GANDI
address: 22 Mousa Ben
address: 4321
address: Cario
address: Egypt
phone: +02.0123178899
e-mail: gruco99@rodrun.com
lastupdated: 2004-10-24 16:30:24


Well, well, if it isn't this old spammer:

Registrant:
NFP Inc.
100 Executive Drive
Slidell, LA 70460
US

Registrar: DOTSTER
Domain Name: RODRUN.COM
Created on: 02-AUG-97
Expires on: 01-AUG-05
Last Updated on: 04-JUN-04

Administrative, Technical Contact:
Terrebonne, Chris abuse@myownemail.com
NFP Inc.
100 Executive Drive
Slidell, LA 70460
US
985-726-0928
985-649-7837

Domain servers in listed order:
NS1.CONRADPROMOTIONS.COM
NS2.CONRADPROMOTIONS.COM



ns2.conradpromotions.com A 65.198.177.5
ns1.conradpromotions.com A 65.198.177.4



Other SBL encounters with Conradpromotions:

69.90.2.0/24 SBL12488
conradpromotions.com - harvest & listwash

208.158.96.0/25 SBL9832
deal-maker.com / conradpromotions.com (not spammers - just free email - don't list)

208.223.204.0/24 SBL9831
deal-maker.com / conradpromotions.com (not spammers - just free email)

207.51.255.192/27 SBL9688
conradpromotions.com (Quantum Computer Services)

208.133.128.64/26 SBL9687
conradpromotions.com (Quantum Computer Services)

208.158.96.96/27 SBL9686
conradpromotions.com (Quantum Computer Services)


_____________________________



The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK7286/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy