ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Nikhil Kumar Pragji / Dark-Mailer

Evidence Menu:

Nikhil Kumar Pragji / Dark-Mailer Index


Country: Australia
State: Queensland
Through the Dark-Mailer Windows based proxy-botnet based spamware, this spammer is responsible for and behind a large portion of the world's illegally sent spam.


Nikhil Kumar Pragji / Dark-Mailer SBL Listings History
Current SBL Listings
Archived SBL Listings

More Info


SBL39959

Proxy/botnet hijack mailer (spamware), kicked off of many networks.



--- reading URL dark-mailer.com
--- contacting host dark-mailer.com [58.20.191.36] on port 80

HTTP/1.1 200 OK
Content-Length: 14
Content-Type: text/html
Content-Location: http://dark-mailer.com/index.htm
Last-Modified: Wed, 30 Nov 2005 x GMT
Accept-Ranges: bytes
ETag: "1ccb9298c1f5c51:2f7"
Server: Microsoft-IIS/6.0
Date: Thu, 06 Apr 2006 22:59:23 GMT
Connection: close

coming soon...
--- connection closed



--- reading URL darkmailer.com
--- contacting host darkmailer.com [58.20.191.36] on port 80

HTTP/1.1 200 OK
Content-Length: 14
Content-Type: text/html
Content-Location: http://darkmailer.com/index.htm
Last-Modified: Wed, 30 Nov 2005 x GMT
Accept-Ranges: bytes
ETag: "1ccb9298c1f5c51:2f7"
Server: Microsoft-IIS/6.0
Date: Thu, 06 Apr 2006 23:00:52 GMT
Connection: close

coming soon...
--- connection closed



$ dig @ns1.dark-mailer.com darkmailer.com ns

; <<>> DiG 9.2.4 <<>> @ns1.dark-mailer.com darkmailer.com ns
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13850
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;darkmailer.com. IN NS

;; ANSWER SECTION:
darkmailer.com. 3600 IN NS www-yc06eh4msm8.

;; Query time: 353 msec
;; SERVER: 58.20.191.36#53(ns1.dark-mailer.com)
;; WHEN: Thu Apr 6 2006
;; MSG SIZE rcvd: 61


$ dig @ns2.dark-mailer.com darkmailer.com ns

; <<>> DiG 9.2.4 <<>> @ns2.dark-mailer.com darkmailer.com ns
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61817
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;darkmailer.com. IN NS

;; ANSWER SECTION:
darkmailer.com. 3600 IN NS www-yc06eh4msm8.

;; Query time: 228 msec
;; SERVER: 58.20.191.36#53(ns2.dark-mailer.com)
;; WHEN: Thu Apr 6 2006
;; MSG SIZE rcvd: 61




___________

SBL39165

Proxy-hijack spamware.

reactivated: 2006-04-02

removed, 2006-03-31


URL: http://darkmailer.com

Server IP address is 220.170.88.195

HTTP/1.1 200 OK
Date: Sat, 18 Mar 2006 x GMT
Accept-Ranges: bytes
ETag: "1c3357fac9f5c51:304"
Server: Microsoft-IIS/6.0
Content-Length: 14
Content-Location: http://darkmailer.com/index.htm
Content-Type: text/html
Last-Modified: Wed, 30 Nov 2005 16:20:28 GMT

coming soon...



URL: http://dark-mailer.com

Server IP address is 220.170.88.195

HTTP/1.1 200 OK
Date: Sat, 18 Mar 2006 x GMT
Accept-Ranges: bytes
ETag: "1c3357fac9f5c51:304"
Server: Microsoft-IIS/6.0
Content-Length: 14
Content-Location: http://dark-mailer.com/index.htm
Content-Type: text/html
Last-Modified: Wed, 30 Nov 2005 16:20:28 GMT

coming soon...

___________

SBL39086

darkmailer.com
dark-mailer.com

[whois.joker.com]
domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 58.20.176.26
nserver: ns2.dark-mailer.com 58.20.176.26
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2006-02-13 14:49:23 UTC
expires: 2007-01-17 04:26:51 UTC
source: joker.com live whois service
query-time: 0.027406


[whois.joker.com]
domain: darkmailer.com
owner: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 58.20.176.26
nserver: ns2.dark-mailer.com 58.20.176.26
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2006-02-13 14:50:16 UTC
expires: 2007-09-23 18:03:54 UTC
source: joker.com live whois service
query-time: 0.048304
db-updated: 2006-03-16 09:31:54



URL: http://dark-mailer.com/index.html

Server IP address is 58.20.176.26 SBL37575

HTTP/1.1 200 OK
Date: Thu, 16 Mar 2006 x GMT
Accept-Ranges: bytes
ETag: "1c3357fac9f5c51:3d6"
Server: Microsoft-IIS/6.0
Content-Length: 14
Content-Type: text/html
Last-Modified: Wed, 30 Nov 2005 16:20:28 GMT

coming soon...




___________

SBL38134

Domain Name: DARKMAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 03-oct-2005
Creation Date: 23-sep-2003
Expiration Date: 23-sep-2007

domain: darkmailer.com
owner: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 58.20.164.253
nserver: ns2.dark-mailer.com 58.20.164.253
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2005-10-03 16:31:46 UTC
expires: 2007-09-23 18:03:54 UTC
source: joker.com live whois service

__________

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 04-jan-2006
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 58.20.164.253
nserver: ns2.dark-mailer.com 58.20.164.253
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2005-10-03 15:33:11 UTC
expires: 2007-01-17 04:26:51 UTC
source: joker.com live whois service

___________

SBL37093

spammers on all IP > 58.20.164.128

Probably controlled by a Chinese spammer agent.

Listing re-activated because spammers still operating from it:

--
logolyx.com 3600 IN A 58.20.164.246
ns1.logolyx.com 3600 IN A 58.20.164.246
ns2.logolyx.com 3600 IN A 58.20.164.246

logomarz.com. 3600 IN A 58.20.164.246
logomarz.com. 3600 IN NS dns1.logomarz.com.
logomarz.com. 3600 IN NS dns2.logomarz.com.

dns1.getlizted.com A 58.20.164.246
dns2.getlizted.com A 58.20.164.246
ns1.logogodz.com A 58.20.164.246
ns2.logogodz.com A 58.20.164.246

----------


58.20.164.128/25
Removed
2006-01-19 23:38:56
SBL36963 vetigated.com

58.20.164.251/32
Removed
2006-01-19 02:44:56
SBL36501 emailsnotletters.com, shieldwithgreen.com, etc etc

_____________

Domain Name: DARKMAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 03-oct-2005
Creation Date: 23-sep-2003
Expiration Date: 23-sep-2007

domain: darkmailer.com
owner: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 58.20.164.253

nserver: ns2.dark-mailer.com 58.20.164.253
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2005-10-03 16:31:46 UTC
expires: 2007-09-23 18:03:54 UTC
source: joker.com live whois service

__________

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 04-jan-2006
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 58.20.164.253
nserver: ns2.dark-mailer.com 58.20.164.253
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2005-10-03 15:33:11 UTC
expires: 2007-01-17 04:26:51 UTC
source: joker.com live whois service

___________

SBL36353

[80.93.191.238]
NS2.UNIGOHERE.COM
NS1.INFAMOUS-CASH.COM
NS2.INFAMOUS-CASH.COM
NS3.NSCOMUR.COM
NS2.GNASHED.NET

See also: SBL31946, SBL31745

ns2.tfl-dns.info [219.148.2.19]
NS2.INFAMOUSCASH.COM
NS1.INFAMOUSCASH.COM
NS2.CHARSTND.COM
NS3.NSCOMUR.COM
NS2.NSCOMUR.COM
NS1.GNASHED.NET

______

Domain Name: TOTALFUCKINGLOSERS.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.TFL-DNS.INFO
Name Server: NS2.TFL-DNS.INFO
Status: REGISTRAR-LOCK
Updated Date: 13-may-2005
Creation Date: 27-jun-2003
Expiration Date: 27-jun-2006

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: totalfuckinglosers.com

Registrant Contact:
TFL
NA NA (NA)
+55.39035510005
Fax: 39035510005
1771 Hawkins Rd
Rio De Janeiro, SP 22263-001
BR

Administrative Contact:
NA
Michael Lofrano (bckdafukup@hotmail.com)
+55.39035510005
Fax: 39035510005
1771 Hawkins Rd
Rio De Janeiro, SP 22263-001
BR

Technical Contact:
NA
Michael Lofrano (bckdafukup@hotmail.com)
+55.39035510005
Fax: 39035510005
1771 Hawkins Rd
Rio De Janeiro, SP 22263-001
BR

Status: Locked

Name Servers:
NS1.TFL-DNS.INFO
NS2.TFL-DNS.INFO

Creation date: 27 Jun 2003 15:06:24
Expiration date: 27 Jun 2006 15:06:24

___________

Domain ID:D5911584-LRMS
Domain Name:TFL-DNS.INFO
Created On:06-May-2004 06:33:27 UTC
Last Updated On:12-May-2005 22:16:29 UTC
Expiration Date:06-May-2006 06:33:27 UTC
Sponsoring Registrar:eNom, Inc. (R126-LRMS)
Status:OK
Registrant ID:C4669594-LRMS
Registrant Name:Michael Lofrano
Registrant Organization:TFL
Registrant Street1:1771 Hawkins Rd
Registrant Street2:
Registrant Street3:
Registrant City:Rio De Janeiro
Registrant State/Province:SP
Registrant Postal Code:22263-001
Registrant Country:BR
Registrant Phone:+55.39035510005
Registrant Phone Ext.:
Registrant FAX:+55.39035510005
Registrant FAX Ext.:
Registrant Email:bckdafukup@hotmail.com
Admin ID:C4669594-LRMS
Admin Name:Michael Lofrano
Admin Organization:TFL
Admin Street1:1771 Hawkins Rd
Admin Street2:
Admin Street3:
Admin City:Rio De Janeiro
Admin State/Province:SP
Admin Postal Code:22263-001
Admin Country:BR
Admin Phone:+55.39035510005
Admin Phone Ext.:
Admin FAX:+55.39035510005
Admin FAX Ext.:
Admin Email:bckdafukup@hotmail.com
Billing ID:C4669594-LRMS
Billing Name:Michael Lofrano
Billing Organization:TFL
Billing Street1:1771 Hawkins Rd
Billing Street2:
Billing Street3:
Billing City:Rio De Janeiro
Billing State/Province:SP
Billing Postal Code:22263-001
Billing Country:BR
Billing Phone:+55.39035510005
Billing Phone Ext.:
Billing FAX:+55.39035510005
Billing FAX Ext.:
Billing Email:bckdafukup@hotmail.com
Tech ID:C4669594-LRMS
Tech Name:Michael Lofrano
Tech Organization:TFL
Tech Street1:1771 Hawkins Rd
Tech Street2:
Tech Street3:
Tech City:Rio De Janeiro
Tech State/Province:SP
Tech Postal Code:22263-001
Tech Country:BR
Tech Phone:+55.39035510005
Tech Phone Ext.:
Tech FAX:+55.39035510005
Tech FAX Ext.:
Tech Email:bckdafukup@hotmail.com
Name Server:NS2.TFL-DNS.INFO
Name Server:NS1.TFL-DNS.INFO
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:


______


Domain Name: INFAMOUS-CASH.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS4.INFAMOUS-CASH.COM
Name Server: NS5.INFAMOUS-CASH.COM
Status: ACTIVE
Updated Date: 17-sep-2005
Creation Date: 10-sep-2005
Expiration Date: 10-sep-2006

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: infamous-cash.com

Registrant Contact:
Hee Chong Ventures Ltd
Hee Chong Sim (heechongsim@yahoo.com.sg)
+65.62539
Fax: +65.62539224
No. 22 Upper Bukit Timah View
Singapore, -- 588152
SG

Administrative Contact:
Hee Chong Ventures Ltd
Hee Chong Sim (heechongsim@yahoo.com.sg)
+65.62539
Fax: +65.62539224
No. 22 Upper Bukit Timah View
Singapore, -- 588152
SG

Technical Contact:
Hee Chong Ventures Ltd
Hee Chong Sim (heechongsim@yahoo.com.sg)
+65.62539
Fax: +65.62539224
No. 22 Upper Bukit Timah View
Singapore, -- 588152
SG

Status: Active

Name Servers:
ns4.infamous-cash.com
ns5.infamous-cash.com

Creation date: 10 Sep 2005 04:26:58
Expiration date: 10 Sep 2006 04:26:58

_______

Domain Name: UNIGOHERE.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.UNIGOHERE.COM
Name Server: NS2.UNIGOHERE.COM
Status: ACTIVE
Updated Date: 08-sep-2005
Creation Date: 10-feb-2005
Expiration Date: 10-feb-2006

Registration Service Provided By: Cyberage Technologies
Contact: abhi_orangepie@rediffmail.com

Domain name: unigohere.com

Registrant Contact:
Joan
Joan Gardens (joangardens@hotmail.com)
+263.11111111111
Fax: +263.111111111
Alexa Way
Serpa, 25989
ZW

Administrative Contact:
Cyberage Technologies
Abhijeet Khanna (abhi_orangepie@rediffmail.com)
+91.2224025454
Fax: +91.N/A
Ghatkopar
Mumbai, 400086
IN

Technical Contact:
Cyberage Technologies
Abhijeet Khanna (abhi_orangepie@rediffmail.com)
+91.2224025454
Fax: +91.N/A
Ghatkopar
Mumbai, 400086
IN

Status: Active

Name Servers:
ns1.unigohere.com
ns2.unigohere.com

Creation date: 10 Feb 2005 14:48:47
Expiration date: 10 Feb 2006 14:48:47

_______

very bad network historically:

219.148.2.195/32
Removed chinanet-he
2005-07-19 03:12:56
SBL28114 specialham.com / spamtraffic.com

219.148.2.197/32
Removed chinanet-he
2005-07-22 10:11:42
SBL22420 Tim Goyetche / Bulkers.net / Bulkbarn.com
blackboxhosting.com / dark-mailer : Criminal spamware vendor


--
x.branhelp7forvicsjun.com. IN A 219.148.2.19
branhelp7forvicsjun.com. IN NS ns2.myhosdns3instant.com.
branhelp7forvicsjun.com. IN NS ns3.myhosdns3instant.com.
branhelp7forvicsjun.com. IN NS ns4.myhosdns3instant.com.
branhelp7forvicsjun.com. IN NS ns1.myhosdns3instant.com.
ns1.myhosdns3instant.com. IN A 219.148.2.19
ns2.myhosdns3instant.com. IN A 219.148.3.162

ns2.napped.biz 219.148.2.19
ns2.charstnd.com 219.148.2.19
ns1.oystercommerce.com 219.148.2.19
second.plattmather.com 219.148.2.19
ns0.stockmegastock.biz 219.148.2.19
ns2.stockmegastock.biz 219.148.2.19
ns1.dartsoasis.com 219.148.2.19
ns1.hertontero.biz 219.148.2.19
moon.trackoforder.com 219.148.2.19
ns1.raperconnn.biz 219.148.2.19
fl.barrysobbb.biz 219.148.2.19
bu.abalonezzz.info 219.148.2.19
ns0.bubblebegnk.com 219.148.2.19
ns0.cohunehcnhk.com 219.148.2.19


--
URL: http://mangiest.net/cs/?bonsay

Server IP address is 219.148.2.19 SBL23659

HTTP/1.0 200 OK
Connection: close
Pragma: no-cache
Server: Apache
Content-Length: 271
Content-Type: text/html
Set-Cookie: PHPSESSID=e70933deeaeefe01cb1466b58fe56de7; path=/
X-Powered-By: PHP/4.4.0

<script>
gg = String.fromCharCode(95+6,42+13,53-5,64-7,53-2,40+11,104-4,95+6,93+8,84+13,90+11,105-4,103-1,100+1,37+11,47+2,90+9,85+13,35+14,38+14,59-5,56-2,108-10,41+12,70-14,93+9,88+13,68-15,46+8,107-7,95+6,58-3); window.location.replace('./index.php?k='+gg);
</script>

"AIP LIVE INC  2004"






wtch4znow62bymai1.com A 219.148.2.19
002.wtch4znow62bymai1.com A 219.148.2.19
www.erifa.com A 219.148.2.19
ns1.simplketime.com A 219.148.2.19
ns1.holkjwre.com A 219.148.2.19
ns0.cohunehcnhk.com A 219.148.2.19
ns0.bubblebegnk.com A 219.148.2.19
ns1.eternityman.com A 219.148.2.19
037.branhelp7forvicsjun.com A 219.148.2.19
bra1nhelpforvicsjun.com A 219.148.2.19
002.bra1nhelpforvicsjun.com A 219.148.2.19
037.br6anhelpforvicsjun.com A 219.148.2.19
ns3.nscomur.com A 219.148.2.19
lensings.com A 219.148.2.19
ns1.myhosdns3instant.com A 219.148.2.19
ns2.myhosdns3instant.com A 219.148.2.19
ns1.dnsforlease4567now.com A 219.148.2.19
ns2.dnsforlease4567now.com A 219.148.2.19
castle.buy-oemsoft.info A 219.148.2.19
drag.buy-oemsoft.info A 219.148.2.19
crimson.buy-oemsoft.info A 219.148.2.19
ns1.gnashed.net A 219.148.2.19
fl.barrysobbb.biz A 219.148.2.19
drank.winsoftsale.biz A 219.148.2.19
spicy.winsoftsale.biz A 219.148.2.19
ns1.raperconnn.biz A 219.148.2.19
blade.get-xp-now.biz A 219.148.2.19





>Return-Path: <ektachrome@norikomail.com>
>Received: from static-68-236-175-147.ny325.east.verizon.net ([68.236.175.147])
> by x with SMTP id 1edWJX3WL3Nl3480
> Sat, 10 Sep 2005 x
>Received: from (cameraman@localhost)
> by caduceus.jf.intel.com (8.11.6/8.11.1/d: outer.mc,v 1.50)
> with ESMTP id h096ols82222
> for <ektachrome@norikomail.com>; Sat, 10 Sep 2005 06:14:52 +0100
>Message-Id: <E1771fF-000582-06@chotfix.sa>
>Date: Fri, 09 Sep 2005 22:12:52 -0700
>From: "Anita Hodge" <ektachrome@norikomail.com>
>To: x
>Subject: More Potent and Effective
>X-Mailer: Mocosoft Mail service
>
>Generic Cialis Soft Tabs is the new impotence treatment
>drug that everyone is talking about.
>
>It has benefits over Viagra and other ED treatment
>solutions.
>
> - Can mix with alcohol with no side effects
>
> - Will not make you dizzy or blur your vision
>
> - Works in 15 min compared to 75 min for Viagra
>
> - Lasts 36 hours compared to 2 hours for Viagra
>
>View it Here: http://mangiest.net/cs/?bonsay
>
>
>
>
>
>
>
>
>
>To Stop: http://mangiest.net/rm.php?bonsay




--
Domain Name: OYSTERCOMMERCE.COM
Registrant:
Oyster Commerce, Ltd
63 Grange Road
Sale, Cheshire M33 6RZ
GB
44 870 224 8800
[...]
Record last updated 12-29-2004 11:43:31 AM
Record expires on 10-09-2006
Record created on 10-09-2003

Domain servers in listed order:
NS1.OYSTERCOMMERCE.COM 219.148.2.19
NS2.OYSTERCOMMERCE.COM 221.11.133.62


--
[whois.neulevel.biz]
Domain Name: STOCKMEGASTOCK.BIZ
Domain ID: D9725791-BIZ
Sponsoring Registrar: INTERCOSMOS MEDIA GROUP, INC. D.B.A. DIRECTNIC.COM
Sponsoring Registrar IANA ID: 291
Domain Status: ok
Registrant ID: IMG-679113
Registrant Name: Viacheslav Belyh
Registrant Organization: Private person
Registrant Address1: Proletarskiy Prospekt 15/6 8
Registrant City: Moscow
Registrant State/Province: MSK
Registrant Postal Code: 115552
Registrant Country: Russian Federation
Registrant Country Code: RU
Registrant Phone Number: +7.9116479211
Registrant Email: viacheslavbelyh@yahoo.com
[...]
Name Server: NS0.STOCKMEGASTOCK.BIZ
Name Server: NS1.STOCKMEGASTOCK.BIZ
Name Server: NS2.STOCKMEGASTOCK.BIZ
Created by Registrar: INTERCOSMOS MEDIA GROUP, INC. D.B.A. DIRECTNIC.COM
Last Updated by Registrar: INTERCOSMOS MEDIA GROUP, INC. D.B.A. DIRECTNIC.COM
Domain Registration Date: Sat May 14 15:34:13 GMT 2005
Domain Expiration Date: Sat May 13 23:59:59 GMT 2006
Domain Last Updated Date: Thu May 26 00:09:27 GMT 2005

_______________

--- performing WHOIS on "219.148.2.19", please wait...

NS2.INFAMOUSCASH.COM
NS1.INFAMOUSCASH.COM
NS1.DNSPORKPIE.COM
NS1.INFAMOUS-CASH.COM
NS2.INFAMOUS-CASH.COM
NS1.TIMEPEOPLES.COM
NS1.OYSTERCOMMERCE.COM
NS2.CHARSTND.COM
NS1.TIGERHO.COM
NS1.ETERNITYMAN.COM
NS1.SIMPLKETIME.COM
NS3.NSCOMUR.COM
NS1.GNASHED.NET
NS1.HOLKJWRE.COM
_______

Domain Name: INFAMOUSCASH.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: A.NS.JOKER.COM
Name Server: B.NS.JOKER.COM
Name Server: C.NS.JOKER.COM
Status: REGISTRAR-LOCK
Updated Date: 10-sep-2005
Creation Date: 08-sep-2005
Expiration Date: 08-sep-2006

domain: infamouscash.com
owner: Alessandro Alteri
organization: Alteri Ventures Inc
email: ncshtech@hotmail.com
address: Via C. Pavese, 44
city: Montale
state: --
postal-code: 51037
country: IT
phone: +390573959443
admin-c: ncshtech@hotmail.com#0
tech-c: ncshtech@hotmail.com#0
billing-c: ncshtech@hotmail.com#0
nserver: a.ns.joker.com 194.176.0.2
nserver: b.ns.joker.com 194.245.101.19
nserver: c.ns.joker.com 194.245.50.1
status: lock
created: 2005-09-08 10:44:20 UTC
modified: 2005-09-08 10:50:46 UTC
expires: 2006-09-08 06:44:19 UTC
source: joker.com live whois service

______

Domain Name: DNSPORKPIE.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: A.NS.JOKER.COM
Name Server: B.NS.JOKER.COM
Name Server: C.NS.JOKER.COM
Status: REGISTRAR-LOCK
Updated Date: 10-sep-2005
Creation Date: 10-sep-2005
Expiration Date: 10-sep-2006

domain: dnsporkpie.com
owner: Hee Chong
email: heechongsim@yahoo.com.sg
address: Blk 332 Tampines St 23
city: Singapore
state: N/A
postal-code: 520352
country: SG
phone: 6598281342
admin-c: heechongsim@yahoo.com.sg#0
tech-c: heechongsim@yahoo.com.sg#0
billing-c: domainz@web2mail.com#0
reseller: Registered through Your-Domains-Here.com
reseller: Your first offshore domain registar
reseller: Belize,Belize City,99 Albert Street
reseller: Forward abuses to abuse@your-domains-here.com
nserver: a.ns.joker.com 194.176.0.2
nserver: b.ns.joker.com 194.245.101.19
nserver: c.ns.joker.com 194.245.50.1
status: lock
created: 2005-09-10 05:33:35 UTC
modified: 2005-09-10 05:33:35 UTC
expires: 2006-09-10 01:33:34 UTC
source: joker.com live whois service

_______

Domain Name: GNASHED.NET
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.GNASHED.NET
Name Server: NS2.GNASHED.NET
Status: REGISTRAR-LOCK
Updated Date: 09-sep-2005
Creation Date: 20-aug-2005
Expiration Date: 20-aug-2006

domain: gnashed.net
owner: Ericka Jones
email: dcorbins@yahoo.com
address: 3708 W. Calimyrna
city: Fresno
state: CA
postal-code: 93711
country: US
phone: +1 9284411897
admin-c: dcorbins@yahoo.com#2
tech-c: dcorbins@yahoo.com#2
billing-c: domainz@web2mail.com#0
reseller: Registered through Your-Domains-Here.com
reseller: Your first offshore domain registar
reseller: Belize,Belize City,99 Albert Street
reseller: Forward abuses to abuse@your-domains-here.com
nserver: ns1.gnashed.net 219.148.2.19
nserver: ns2.gnashed.net 80.93.191.238
status: lock
created: 2005-08-20 20:45:07 UTC
modified: 2005-08-31 22:52:56 UTC
expires: 2006-08-20 16:45:06 UTC
source: joker.com live whois service

_______

Domain Name: HOLKJWRE.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.HOLKJWRE.COM
Name Server: NS2.HOLKJWRE.COM
Status: REGISTRAR-HOLD
Updated Date: 12-sep-2005
Creation Date: 21-jul-2005
Expiration Date: 21-jul-2006

domain: holkjwre.com
owner: Armen Petrosyan
email: armenpetrosyanp@yahoo.com
address: Konkovo 19-7
city: Moscow
state: --
postal-code: 127492
country: RU
phone: +70951849923
admin-c: armenpetrosyanp@yahoo.com#0
tech-c: armenpetrosyanp@yahoo.com#0
billing-c: armenpetrosyanp@yahoo.com#0
nserver: ns1.holkjwre.com 219.148.2.19
nserver: ns2.holkjwre.com 80.93.191.238
status: hold,invalid-address
created: 2005-07-21 17:15:04 UTC
modified: 2005-09-06 06:41:39 UTC
expires: 2006-07-21 13:15:03 UTC
source: joker.com live whois service

________

Domain Name: NSCOMUR.COM
Registrar: YESNIC CO. LTD.
Whois Server: whois.yesnic.com
Referral URL: http://www.yesnic.com
Name Server: NS2.NSCOMUR.COM
Name Server: NS3.NSCOMUR.COM
Status: ACTIVE
Updated Date: 24-aug-2005
Creation Date: 24-aug-2005
Expiration Date: 24-aug-2006


-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : nscomur.com

::Registrant::
Name : Stuart Taylor
Email : eltonia.concepts@gmx.net
Address : Rm129,No39,Alley204,DingxiRd,Shanghai
Zipcode : 885623
Nation : CN
Tel : 8621-6184-8538
Fax :

::Administrative Contact::
Name : Stuart Taylor
Email : eltonia.concepts@gmx.net
Address : Rm129,No39,Alley204,DingxiRd,Shanghai
Zipcode : 885623
Nation : CN
Tel : 8621-6184-8538
Fax :

::Technical Contact::
Name : Stuart Taylor
Email : eltonia.concepts@gmx.net
Address : Rm129,No39,Alley204,DingxiRd,Shanghai
Zipcode : 885623
Nation : CN
Tel : 8621-6184-8538
Fax :

::Name Servers::
ns2.nscomur.com
ns3.nscomur.com

::Dates & Status::
Created Date 2005-08-24 14:11:24 EDT
Updated Date 2005-08-24 14:11:24 EDT
Valid Date 2006-08-24 14:11:24 EDT
Status ACTIVE

_________



Domain Name: CHARSTND.COM
Registrar: GANDI
Whois Server: whois.gandi.net
Referral URL: http://www.gandi.net
Name Server: NS1.CHARSTND.COM
Name Server: NS2.CHARSTND.COM
Status: REGISTRAR-HOLD
Updated Date: 11-dec-2004
Creation Date: 19-oct-2004
Expiration Date: 19-oct-2005

domain: CHARSTND.COM
owner-address: Laura Ha.
owner-address: 117 Grand Concourse
owner-address: 10451
owner-address: Bronx
owner-address: New York
owner-address: United States of America
owner-phone: +1.6464302816
owner-fax: +1.6464302816
owner-e-mail: 026c5b3612e2c66018371a08644bb163-875483@owner.gandi.net
admin-c: LH370-GANDI
tech-c: AR41-GANDI
bill-c: LH370-GANDI
nserver: ns1.charstnd.com 219.148.2.18
nserver: ns2.charstnd.com 219.148.2.19
reg_created: 2004-10-19 21:18:02
expires: 2005-10-19 21:18:02
created: 2004-10-20 03:18:00
changed: 2004-12-11 22:15:02

person: Laura Hauther
nic-hdl: LH370-GANDI
address: 117 Grand Concourse
address: 10451
address: Bronx
address: New York
address: United States of America
phone: +1.6464302816
fax: +1.6464302816
e-mail: 5ce5d0245949b0336bb1f342bac11d55-lh370@contact.gandi.net
lastupdated: 2004-10-20 03:15:56

person: GANDI Auto Register 4.1
nic-hdl: AR41-GANDI
address: GANDI
address: 38 rue Notre-Dame de Nazareth
address: F-75003
address: Paris
address: France
phone: N/A
e-mail: support@gandi.net

________


Domain Name: OYSTERCOMMERCE.COM
Registrar: INTERCOSMOS MEDIA GROUP, INC. D/B/A DIRECTNIC.COM
Whois Server: whois.directnic.com
Referral URL: http://www.directnic.com
Name Server: NS1.OYSTERCOMMERCE.COM
Name Server: NS2.OYSTERCOMMERCE.COM
Status: ACTIVE
Updated Date: 29-dec-2004
Creation Date: 09-oct-2003
Expiration Date: 09-oct-2006

Registrant:
Oyster Commerce, Ltd
63 Grange Road
Sale, Cheshire M33 6RZ
GB
44 870 224 8800


Domain Name: OYSTERCOMMERCE.COM

Administrative Contact:
Marco, Michelle domains@oystercommerce.com
63 Grange Road
Sale, Cheshire M33 6RZ
GB
44 870 224 8800


Technical Contact:
Marco, Michelle domains@oystercommerce.com
63 Grange Road
Sale, Cheshire M33 6RZ
GB
44 870 224 8800


Record last updated 12-29-2004 11:43:31 AM
Record expires on 10-09-2006
Record created on 10-09-2003

Domain servers in listed order:
NS1.OYSTERCOMMERCE.COM 219.148.2.19
NS2.OYSTERCOMMERCE.COM 221.11.133.62

___________

SBL35658

[58.20.160.76]
NS2.REGISTRY-HOLD.COM
NS1.REGISTRY-HOLD.COM
NS1.DARK-MAILER.COM
NS2.DARK-MAILER.COM

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 30-nov-2005
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 58.20.160.76
nserver: ns2.dark-mailer.com 58.20.160.76
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2005-10-03 15:33:11 UTC
expires: 2007-01-17 04:26:51 UTC
source: joker.com live whois service

_________


Domain Name: DARKMAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 03-oct-2005
Creation Date: 23-sep-2003
Expiration Date: 23-sep-2007

domain: darkmailer.com
owner: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 58.20.160.76
nserver: ns2.dark-mailer.com 58.20.160.76
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2005-10-03 16:31:46 UTC
expires: 2007-09-23 18:03:54 UTC
source: joker.com live whois service

_________

Domain Name: REGISTRY-HOLD.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.REGISTRY-HOLD.COM
Name Server: NS2.REGISTRY-HOLD.COM
Status: REGISTRAR-LOCK
Updated Date: 02-nov-2005
Creation Date: 11-sep-2005
Expiration Date: 11-sep-2006

domain: registry-hold.com
owner: Waldeck Edersee
email: haans2006@hotmail.com
address: Klippenberg 3
address: Waldeck-West
city: Paderborn
state: Edersee
postal-code: 34513
country: DE
phone: ++49 5623/6254
fax: ++49 5623/6254
admin-c: haans2006@hotmail.com#0
tech-c: haans2006@hotmail.com#0
billing-c: haans2006@hotmail.com#0
nserver: ns1.registry-hold.com 58.20.160.76
nserver: ns2.registry-hold.com 58.20.160.76
status: lock
created: 2005-09-11 18:34:03 UTC
modified: 2005-11-02 15:43:51 UTC
expires: 2006-09-11 14:34:02 UTC
source: joker.com live whois service

___________

SBL34587
Spamware specializing in illegal Proxy & zombie-PC hijacking


--
dark-mailer.com. IN A 202.103.56.87
dark-mailer.com. IN NS ns2.dark-mailer.com.
dark-mailer.com. IN NS ns1.dark-mailer.com.
ns1.dark-mailer.com. IN A 202.103.56.87
ns2.dark-mailer.com. IN A 202.103.56.87



--
[whois.joker.com]
domain: dark-mailer.com
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 202.103.56.87
nserver: ns2.dark-mailer.com 202.103.56.87
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2005-10-03 15:33:11 UTC
expires: 2007-01-17 04:26:51 UTC
source: joker.com live whois service
query-time: 0.016103
db-updated: 2005-11-11 06:16:34
____________

2004-04-26

Also on this address:

61.186.254.179/32 query 2004-04-27
SBL15987 Tim Goyetche / Bulkers.net / Bulkbarn.com
dark-mailer.com





Domain Name: MINISTRATION.BIZ
Domain ID: D6212857-BIZ
Sponsoring Registrar: GANDI SARL
Domain Status: ok
Registrant ID: O-819289-GANDI
Registrant Name: Syed Hyder
Registrant Organization: Syed Hyder
Registrant Address1: H.NO=3-13-4187, Siddhartha Colony
Registrant City: Nalgonda, AP
Registrant Postal Code: 508001
Registrant Country: India
Registrant Country Code: IN
Registrant Phone Number: +91.0868223144
Registrant Facsimile Number: +91.9440779440
Registrant Email: ministrationbiz@yahoo.co.in
Administrative Contact ID: SH650-GANDI
Administrative Contact Name: Syed Hyder
Administrative Contact Address1: H.NO=3-13-4187, Siddhartha Colony
Administrative Contact City: Nalgonda, AP
Administrative Contact Postal Code: 508001
Administrative Contact Country: India
Administrative Contact Country Code: IN
Administrative Contact Phone Number: +91.0868223144
Administrative Contact Facsimile Number: +91.9440779440
Administrative Contact Email: ministrationbiz@yahoo.co.in
Billing Contact ID: AR41-GANDI
Billing Contact Name: CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois
Billing Contact Organization: Gandi SARL
Billing Contact Address1: 38 rue Notre-Dame de Nazareth
Billing Contact City: Paris
Billing Contact Postal Code: 75003
Billing Contact Country: France
Billing Contact Country Code: FR
Billing Contact Email: support@gandi.net
Technical Contact ID: SH650-GANDI
Technical Contact Name: Syed Hyder
Technical Contact Address1: H.NO=3-13-4187, Siddhartha Colony
Technical Contact City: Nalgonda, AP
Technical Contact Postal Code: 508001
Technical Contact Country: India
Technical Contact Country Code: IN
Technical Contact Phone Number: +91.0868223144
Technical Contact Facsimile Number: +91.9440779440
Technical Contact Email: ministrationbiz@yahoo.co.in
Name Server: NS1.WWW30.COM
Name Server: NS2.WWW30.COM
Created by Registrar: GANDI SARL
Last Updated by Registrar: GANDI SARL
Domain Registration Date: Thu Feb 05 02:54:03 GMT 2004
Domain Expiration Date: Fri Feb 04 23:59:59 GMT 2005
Domain Last Updated Date: Fri Apr 23 08:44:12 GMT 2004





Feb 2005

[whois.joker.com]
Results:
domain: dark-mailer.com
status: lock
organization: Dark Mailer
owner: William Chan
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.www32.com
nserver: ns1.www30.com
nserver: ns1.securedns.biz
registrar: JORE-1
created: 2004-01-17 09:27:09 UTC JORE-1
modified: 2004-12-26 05:20:14 UTC JORE-1
expires: 2007-01-17 04:26:51 UTC
source: joker.com




Registrant:
NFP Inc.
100 Executive Drive
Slidell, LA 70460
US

Registrar: DOTSTER
Domain Name: HEHE.COM
Created on: 06-NOV-96
Expires on: 05-NOV-05
Last Updated on: 06-OCT-04

Administrative, Technical Contact:
Terrebonne, Chris abuse@myownemail.com
NFP Inc.
100 Executive Drive
Slidell, LA 70460
US
985-726-0928
985-649-7837

Domain servers in listed order:
NS1.CONRADPROMOTIONS.COM
NS2.CONRADPROMOTIONS.COM
____________

SBL15987

Chris Smith is already on this IP.



was at SBL15450 218.106.116.150/32 (nuke)



--- reading URL 61.186.254.179
--- contacting host [61.186.254.179] on port 80

HTTP/1.1 302 Object moved
Connection: close
Date: Tue, 27 Apr 2004 __:__:__ GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Location: http://186.254.179
Content-Length: 139
Content-Type: text/html
Set-Cookie: ASPSESSIONIDCCADQART=DFDJNNEDPHAIIJJCKFFDKBMH; path=/
Cache-control: private

<head><title>Object moved</title></head>
<body><h1>Object Moved</h1>This object may be found <a HREF="http://186.254.179">here</a>.</body>

--- connection closed


--- reading URL dark-mailer.com
--- contacting host dark-mailer.com [61.186.254.179] on port 80

HTTP/1.1 200 OK
Connection: close
Date: Tue, 27 Apr 2004 __:__:__ GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Content-Length: 4493
Content-Type: text/html
Set-Cookie: ASPSESSIONIDCCADQART=GFDJNNEDKMOKIEOFNLIAHCJH; path=/
Cache-control: private


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<title>Dark Mailer - bulk email marketing software</title>

<META NAME="keywords" CONTENT="Bulk,email,software,marketing,mass,mailing,mailer,emailer,lists,services">
<META NAME="description" CONTENT="Dark Mailer is an anonymous bulk email software for marketing. Mass mailing mailer emailer lists services">

____________

SBL18229

jobie2004@hehe.com is the contact for some of the spammiest
domains on the internet: just one address for supplies of bulletproof hosting, email lists, bulk mailing software, etc
even though the postal addresses claimed are all around the
planet (Queensland Australia/Lincolnshire UK/Hong Kong).

BULK-EMAIL-LISTS.COM, PROXYBENCH.COM, INFINITYMAILER.COM,
OPENRELAYCHECK.COM, BLACKBOXHOSTING.COM, DARK-MAILER.COM,
HUGECRUSH.COM


Domain Name: PROXYBENCH.COM

Registrant: Willson, John (CTICXBLSTD)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact, Technical Contact:
Willson, John (COYWHSKMJI) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843

Domain Name: HUGECRUSH.COM

Registrant: Crush, Huge (HUGECRUSH-DOM)
5 Cameron Road, Tsimshatsui, Kowloon HK HK

Administrative Contact, Technical Contact:
Crush, Huge (HC9561) jobie2004@hehe.com
5 Cameron Road, Tsimshatsui, Kowloon HK HK
(852) 2545-7487 fax: 123 123 1234


Domain Name: INFINITYMAILER.COM

Registrant: Mailer, Infinity (INFINITYMAILER-DOM)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843 fax: 123 123 1234


Domain Name: OPENRELAYCHECK.COM

Registrant: Mailer, Infinity (SCWWCOLPID)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843 fax: 123 123 1234



Domain Name: BLACKBOXHOSTING.COM

Registrant: Mailer, Infinity (JUAZBUTTCD)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact:
Mailer, Infinity (IM3216) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843 fax: 123 123 1234

Domain Name: BULK-EMAIL-LISTS.COM

Registrant: Willson, John (LHMYOGXXWD)
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK

Administrative Contact, Technical Contact:
Willson, John (COYWHSKMJI) jobie2004@hehe.com
Level One, Barracloughs Lane
Barton-upon-Humber, North Lincs DN18 5BB UK
+44 6 8892 9843

[whois.joker.com]
domain: dark-mailer.com
status: production
organization: Dark Mailer
owner: William Chan
email: jobie2004@hehe.com
address: PO Box 323
city: Mt Ommaney
state: QLD
postal-code: 4074
country: AU
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.www32.com
nserver: ns1.www30.com
nserver: ns1.securedns.biz
registrar: JORE-1
created: 2004-01-17 08:27:09 UTC JORE-1
modified: 2004-01-17 09:35:59 UTC JORE-1
expires: 2005-01-17 03:26:51 UTC
source: joker.com


UUNET Technologies, Inc. UUNET65 (NET-65-192-0-0-1)
65.192.0.0 - 65.223.255.255
National Financial Publications, Inc. UU-65-198-177-D4 (NET-65-198-177-0-1)
65.198.177.0 - 65.198.177.255

OrgName: UUNET Technologies, Inc.
OrgID: UU
Address: 22001 Loudoun County Parkway
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US

NetRange: 65.192.0.0 - 65.223.255.255
CIDR: 65.192.0.0/11
NetName: UUNET65
NetHandle: NET-65-192-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
NameServer: AUTH03.NS.UU.NET
NameServer: AUTH00.NS.UU.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-10-27
Updated: 2002-02-13

TechHandle: OA12-ARIN
TechName: UUnet Technologies, Inc., Technologies
TechPhone: +1-800-900-0241
TechEmail: help4u@mci.com

OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@mci.com

OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@mci.com

OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@mci.com

CustName: National Financial Publications, Inc.
Address: 100 Executive Drive
Address: 1st Floor/Telco Closet
City: Slidell
StateProv: LA
PostalCode: 70460
Country: US
RegDate: 2003-12-29
Updated: 2003-12-29

NetRange: 65.198.177.0 - 65.198.177.255
CIDR: 65.198.177.0/24
NetName: UU-65-198-177-D4
NetHandle: NET-65-198-177-0-1
Parent: NET-65-192-0-0-1
NetType: Reassigned
Comment: Addresses within this block are non-portable.
RegDate: 2003-12-29
Updated: 2003-12-29

TechHandle: OA12-ARIN
TechName: UUnet Technologies, Inc., Technologies
TechPhone: +1-800-900-0241
TechEmail: help4u@mci.com

OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@mci.com

OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@mci.com

OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@mci.com




Dec 10 2004:

DNS domains for the Rolex spammer's landing page are reg'd by a rodrun.com address.

--- reading URL www.rodrun.com
--- contacting host www.rodrun.com [65.198.177.200] on port 80

HTTP/1.1 302 Object Moved
Location: http://www.myownemail.com
Server: Microsoft-IIS/4.0
Content-Type: text/html
Connection: close
Content-Length: 141

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="http://www.myownemail.com">here</a>
--- connection closed



domain: 65DNS11.COM
owner-address: Michael Oehlers
owner-address: 22 Mousa Ben
owner-address: 4321
owner-address: Cario
owner-address: Egypt
owner-phone: +02.0123178899
owner-e-mail: gruco99@rodrun.com
admin-c: MO393-GANDI
tech-c: MO393-GANDI
bill-c: MO393-GANDI
nserver: ns1.65dns11.com 219.153.0.35
nserver: ns2.65dns11.com 61.186.252.166
nserver: ns3.65dns11.com 61.183.60.3
nserver: ns4.65dns11.com 218.7.120.70
reg_created: 2004-11-01 20:21:49
expires: 2005-11-01 20:21:49
created: 2004-11-02 02:21:50
changed: 2004-12-09 16:20:10

person: Michael Oehlers
nic-hdl: MO393-GANDI
address: 22 Mousa Ben
address: 4321
address: Cario
address: Egypt
phone: +02.0123178899
e-mail: gruco99@rodrun.com
lastupdated: 2004-10-24 16:30:24


domain: DNS4432.COM
owner-address: Michael Oehlers
owner-address: 22 Mousa Ben
owner-address: 4321
owner-address: Cario
owner-address: Egypt
owner-phone: +02.0123178899
owner-e-mail: gruco99@rodrun.com <--- note rodrun.com
admin-c: MO393-GANDI
tech-c: MO393-GANDI
bill-c: MO393-GANDI
nserver: ns1.dns4432.com 219.153.0.35
nserver: ns2.dns4432.com 61.186.252.166
nserver: ns3.dns4432.com 61.183.60.3
nserver: ns4.dns4432.com 218.7.120.70
reg_created: 2004-11-01 20:21:53
expires: 2005-11-01 20:21:53
created: 2004-11-02 02:21:54
changed: 2004-12-09 16:18:53

person: Michael Oehlers
nic-hdl: MO393-GANDI
address: 22 Mousa Ben
address: 4321
address: Cario
address: Egypt
phone: +02.0123178899
e-mail: gruco99@rodrun.com
lastupdated: 2004-10-24 16:30:24


Well, well, if it isn't this old spammer:

Registrant:
NFP Inc.
100 Executive Drive
Slidell, LA 70460
US

Registrar: DOTSTER
Domain Name: RODRUN.COM
Created on: 02-AUG-97
Expires on: 01-AUG-05
Last Updated on: 04-JUN-04

Administrative, Technical Contact:
Terrebonne, Chris abuse@myownemail.com
NFP Inc.
100 Executive Drive
Slidell, LA 70460
US
985-726-0928
985-649-7837

Domain servers in listed order:
NS1.CONRADPROMOTIONS.COM
NS2.CONRADPROMOTIONS.COM



ns2.conradpromotions.com A 65.198.177.5
ns1.conradpromotions.com A 65.198.177.4



Other SBL encounters with Conradpromotions:

69.90.2.0/24 SBL12488
conradpromotions.com - harvest & listwash

208.158.96.0/25 SBL9832
deal-maker.com / conradpromotions.com (not spammers - just free email - don't list)

208.223.204.0/24 SBL9831
deal-maker.com / conradpromotions.com (not spammers - just free email)

207.51.255.192/27 SBL9688
conradpromotions.com (Quantum Computer Services)

208.133.128.64/26 SBL9687
conradpromotions.com (Quantum Computer Services)

208.158.96.96/27 SBL9686
conradpromotions.com (Quantum Computer Services)


____________

SBL19281

darkmailer.com A 216.247.230.3
darkmailer.com NS a.ns.interland.net
darkmailer.com NS b.ns.interland.net
darkmailer.com NS c.ns.interland.net



[whois.joker.com]
Results:
domain: darkmailer.com
status: production
organization: NA
owner: Egor Aganezov
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: dns1.securedns.biz
nserver: dns2.securedns.biz
nserver: dns3.securedns.biz
registrar: JORE-1
created: 2003-09-23 22:04:08 UTC JORE-1
modified: 2004-09-06 09:35:12 UTC JORE-1
expires: 2005-09-23 18:03:54 UTC
source: joker.com




--- reading URL 216.247.230.3
--- contacting host [216.247.230.3] on port 80

HTTP/1.1 302 Object moved
Connection: close
Date: Wed, 08 Sep 2004 __:__:__ GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Location: http://search.msn.com/results.aspx?srch=105&FORM=AS5&q=dark-mailer.com
Content-Length: 199
Content-Type: text/html
Set-Cookie: ASPSESSIONIDAQSRRRCR=GNCKDGICMNKFEMABEBLKKFBB; path=/
Cache-control: private

<head><title>Object moved</title></head>
<body><h1>Object Moved</h1>This object may be found <a HREF="http://search.msn.com/results.aspx?srch=105&amp;FORM=AS5&amp;q=dark-mailer.com">here</a>.</body>

____________

SBL19282

--- Found authoritative nameserver: ns1.securedns.biz
--- contacting nameserver: ns1.securedns.biz [222.223.129.130]

dark-mailer.com NS idc-vjh7lsgys2z.www30.com






--- DNS lookup for "idc-vjh7lsgys2z.www30.com", please wait...
--- Unable to locate authoritative nameserver

DNS Server Response 2: Server Failure.
____________

SBL22416

Domain Name: DARK-MAILER.NET
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: DNS1.7HOST.COM
Name Server: DNS2.7HOST.COM
Status: REGISTRAR-LOCK
Updated Date: 26-dec-2004
Creation Date: 23-feb-2004
Expiration Date: 23-feb-2007


domain: dark-mailer.net
status: lock
organization: Dark Mailer
owner: William Chan
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: dns1.7host.com
nserver: dns2.7host.com
registrar: JORE-1
created: 2004-02-23 06:38:12 UTC JORE-1
modified: 2004-12-26 05:20:11 UTC JORE-1
expires: 2007-02-23 01:37:54 UTC
source: joker.com



--- DNS lookup for "dark-mailer.net", please wait...
--- contacting nameserver: dns1.7host.com [64.70.253.142]

dark-mailer.net A 66.194.37.237
dark-mailer.net NS dns1.7host.com
dark-mailer.net NS dns2.7host.com
dark-mailer.net SOA
origin = dns1.7host.com
mail addr = 7host@7host.com
serial = 6
refresh = 86400 ()
retry = 3600 (1 hour)
expire = 604800 (7 days)
minimum ttl = 86400 ()
dark-mailer.net MX 10 mail.dark-mailer.net
dns1.7host.com A 64.70.253.142
dns2.7host.com A 66.194.37.189
mail.dark-mailer.net A 66.194.37.224

--- DNS Lookup completed

_________

OrgName: Electronic Communications Unlimited, Inc.
OrgID: ECU-5
Address: P.O. Box 682096
City: Orlando
StateProv: FL
PostalCode: 32868-2096
Country: US

NetRange: 66.194.36.0 - 66.194.39.255
CIDR: 66.194.36.0/22
NetName: TWTC-ECU-1
NetHandle: NET-66-194-36-0-1
Parent: NET-66-192-0-0-1
NetType: Reassigned
Comment:
RegDate: 2003-08-21
Updated: 2003-08-21

OrgTechHandle: DOMAI43-ARIN
OrgTechName: Domain Administrations
OrgTechPhone: +1-407-445-6352
OrgTechEmail: dnsadmin@ecui.com

____________

Related:


Domain Name: OLINOC.COM
Registrar: ESTDOMAINS, INC.
Whois Server: whois.estdomains.com
Referral URL: http://www.estdomains.com
Name Server: NS1.OLINOC.COM
Name Server: NS2.OLINOC.COM
Status: ok
Updated Date: 29-nov-2007
Creation Date: 30-sep-2007
Expiration Date: 30-sep-2008


Registration Service Provider: LovingDomains.com - E-Gold Domain Registration
Website: http://www.lovingdomains.com
Accept Pecunix, e-Bullion, E-Gold, PayPal, MoneyBookers, WebMoney, Epassporte, Liberty Reserve, Fethard Finance and Capital Collect

Domain Name: OLINOC.COM

Registrant:
Oli Networks
LinZhang (linzhang@chinamail.com)
11 Bei San Huan Dong
Shanghai
Shanghai,201315
CN
Tel. +86.58058888

Creation Date: 30-Sep-2007
Expiration Date: 30-Sep-2008

Domain servers in listed order:
ns2.olinoc.com
ns1.olinoc.com


Administrative Contact:
Oli Networks
LinZhang (linzhang@chinamail.com)
11 Bei San Huan Dong
Shanghai
Shanghai,201315
CN
Tel. +86.58058888

Technical Contact:
Oli Networks
LinZhang (linzhang@chinamail.com)
11 Bei San Huan Dong
Shanghai
Shanghai,201315
CN
Tel. +86.58058888

Billing Contact:
Oli Networks
LinZhang (linzhang@chinamail.com)
11 Bei San Huan Dong
Shanghai
Shanghai,201315
CN
Tel. +86.58058888

Status:ACTIVE

________________________________

Domain Name: DARK-MAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 29-aug-2006
Creation Date: 17-jan-2004
Expiration Date: 17-jan-2007

domain: dark-mailer.com
origin-c: JOCO-634271
owner: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784
admin-c: jobie2004@hehe.com#0
tech-c: jobie2004@hehe.com#0
billing-c: jobie2004@hehe.com#0
nserver: ns1.dark-mailer.com 200.115.174.174
nserver: ns2.dark-mailer.com 200.115.174.174
status: lock
created: 2004-01-17 09:27:09 UTC
modified: 2006-02-13 14:49:23 UTC
expires: 2007-01-17 04:26:51 UTC

contact-hdl: jobie2004@hehe.com#0
person: William Chan
organization: Dark Mailer
email: jobie2004@hehe.com
address: Level One
address: Barracloughs Lane
city: Barton-upon-Humber
state: N.Lincs
postal-code: DN18 5BB
country: GB
phone: +44 5518 7784

source: joker.com live whois service

_________

Domain Name: DARKMAILER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: NS1.DARK-MAILER.COM
Name Server: NS2.DARK-MAILER.COM
Status: REGISTRAR-LOCK
Updated Date: 13-feb-2006
Creation Date: 23-sep-2003
Expiration Date: 23-sep-2007

domain: darkmailer.com
origin-c: JOCO-595552
owner: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812
admin-c: darkmailer2003@yahoo.com#0
tech-c: darkmailer2003@yahoo.com#0
billing-c: darkmailer2003@yahoo.com#0
nserver: ns1.dark-mailer.com 200.115.174.174
nserver: ns2.dark-mailer.com 200.115.174.174
status: lock
created: 2003-09-23 22:04:08 UTC
modified: 2006-02-13 14:50:16 UTC
expires: 2007-09-23 18:03:54 UTC

contact-hdl: darkmailer2003@yahoo.com#0
person: Egor Aganezov
organization: NA
email: darkmailer2003@yahoo.com
address: Sadovanya 232, 339
city: Moscow
postal-code: 127563
country: RU
phone: +79037638812

source: joker.com live whois service

____________

Domain Name: ZIANGNOC.NET
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS1.ZIANGNOC.NET
Name Server: NS2.ZIANGNOC.NET
Status: clientTransferProhibited
Updated Date: 02-dec-2008
Creation Date: 12-nov-2008
Expiration Date: 12-nov-2009


Registration Service Provider: LovingDomains.com - Cheap Domain Name Registration
Website: http://www.lovingdomains.com
Accept Pecunix, e-Bullion, E-Gold, PayPal, MoneyBookers, WebMoney, Epassporte, Liberty Reserve, Fethard Finance and Capital Collect

Domain Name: ZIANGNOC.NET

Registrant:
Oli Networks
LinZhang (linzhang@chinamail.com)
11 Bei San Huan Dong
Shanghai
Shanghai,201315
CN
Tel. +86.58058888

Creation Date: 12-Nov-2008
Expiration Date: 12-Nov-2009

Domain servers in listed order:
ns2.ziangnoc.net
ns1.ziangnoc.net


Administrative Contact:
Oli Networks
LinZhang (linzhang@chinamail.com)
11 Bei San Huan Dong
Shanghai
Shanghai,201315
CN
Tel. +86.58058888

Technical Contact:
Oli Networks
LinZhang (linzhang@chinamail.com)
11 Bei San Huan Dong
Shanghai
Shanghai,201315
CN
Tel. +86.58058888

Billing Contact:
Oli Networks
LinZhang (linzhang@chinamail.com)
11 Bei San Huan Dong
Shanghai
Shanghai,201315
CN
Tel. +86.58058888

Status:ACTIVE
_____________________________________


Domain Name: DARKCHECKER.COM
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
Whois Server: whois.joker.com
Referral URL: http://www.joker.com
Name Server: A.NS.JOKER.COM
Name Server: B.NS.JOKER.COM
Name Server: C.NS.JOKER.COM
Status: clientTransferProhibited
Updated Date: 31-aug-2008
Creation Date: 31-aug-2008
Expiration Date: 31-aug-2010

domain: darkchecker.com
owner: Lev Gromov
email: darkchecker06@yahoo.com
address: Maroseika 3-12
city: Moscow
postal-code: 1272734
country: RU
phone: +749.54837726
admin-c: CCOM-485100 darkchecker06@yahoo.com
tech-c: CCOM-485100 darkchecker06@yahoo.com
billing-c: CCOM-485100 darkchecker06@yahoo.com
nserver: a.ns.joker.com 66.252.21.107
nserver: b.ns.joker.com 66.197.237.21
nserver: c.ns.joker.com 66.252.21.106
status: lock
created: 2008-08-31 19:35:26 UTC
modified: 2008-08-31 19:50:08 UTC
expires: 2010-08-31 19:35:26 UTC

contact-hdl: CCOM-485100
person: Lev Gromov
email: darkchecker06@yahoo.com
address: Maroseika 3-12
city: Moscow
postal-code: 1272734
country: RU
phone: +749.54837726
___________________________



The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK7287/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy