ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Michael Lindsay

Evidence Menu:

Michael Lindsay Index


Country: United States
State: California
Lindsay's iMedia Networks is a full-fledged spam-hosting operation serving bulletproof hosting at high premiums to well known ROKSO-listed spammers. His customers spam via botnet zombies with spam payloads hosted offshore, tunneled back to his servers. He and the gang have been hijacking (stealing) IP address space from companies for years to spam from. Illegal in the USA.


Michael Lindsay SBL Listings History
Current SBL Listings
Archived SBL Listings

PARTNER IN SPAM: Sarju Kumar Gurung


A Linux-admin-type from Nepal who seems to help run the tech side of Lindsay's operation: BESTBULKREGISTER/RED PILLAR, CoopLabs, Saving Hosting, etc.
_____________________________________

http://sarjugurung.net/contact.html

320 Franciscan Ct.,Apt 16
Fremont, CA 94539, USA

Cell:510 825 7256

Email and Networks

Office:
sarju@cooplabs.com

Gmail:
sarjugurung264@gmail.com

MSN:
sarjugurung_64@hotmail.com

Yahoo:
sarjugurung@yahoo.com

_____________

http://sarjugurung.net/about.html

I am a graduate student in Master of Science in Computer Science in
Northwestern Polytechnic University.

I worked as a System Administration and Networking Intern in National Real Estate Investment Club, Pleasanton, CA from June 2007- August 2007.

I worked as a System Administration and Networking Intern in InterWorld Network International Inc., Fremont, CA from October 2007- November 2008.

I am from Kathmandu, Nepal, a small and beautiful country in the South East Asia.

I love to play guitar, surf Internet and try new things.

_______________________________

Domain Name: SARJUGURUNG.NET
Registrar: TUCOWS INC.
Whois Server: whois.tucows.com
Referral URL: http://domainhelp.opensrs.net
Name Server: NS1.MDNSSERVICE.COM
Name Server: NS2.MDNSSERVICE.COM
Name Server: NS3.MDNSSERVICE.COM
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 07-oct-2008
Creation Date: 07-oct-2008
Expiration Date: 07-oct-2009


Registrant:
Sarju Gurung
320 Franciscan Ct.,Apt 16
Fremont, CA 94539
US

Domain name: SARJUGURUNG.NET


Administrative Contact:
Gurung, Sarju sarjugurung264@gmail.com
320 Franciscan Ct.,Apt 16
Fremont, CA 94539
US
+1.5108257256
Technical Contact:
Admin, Domain DomainSupport@homestead-inc.com
3425 EDISON WAY
MENLO PARK, CA 94025
US
+1.8007972958 Fax: +1.6503647329



Registration Service Provider:
Homestead Technologies, Inc, hostmaster@homesteadsupport.com
800-797-2958
650-364-7329 (fax)
http://www.homestead.com



Registrar of Record: TUCOWS, INC.
Record last updated on 07-Oct-2008.
Record expires on 07-Oct-2009.
Record created on 07-Oct-2008.

Registrar Domain Name Help Center:
http://domainhelp.tucows.com

Domain servers in listed order:
NS1.MDNSSERVICE.COM
NS2.MDNSSERVICE.COM
NS3.MDNSSERVICE.COM


Domain status: clientTransferProhibited
clientUpdateProhibited

_______________________________

Domain Name: BESTBULKREGISTER.COM
Registrar: RED PILLAR, INC.
Whois Server: whois.bestbulkregister.com
Referral URL: http://www.bestbulkregister.com
Name Server: NS1.BESTBULKREGISTER.COM
Name Server: NS2.BESTBULKREGISTER.COM
Status: ok
Updated Date: 08-dec-2008
Creation Date: 22-dec-2006
Expiration Date: 22-dec-2009

Registration Service Provided By: BEST BULK REGISTER
Contact: +1.8008717432
Website: http://www.bestbulkregister.com

Domain Name: BESTBULKREGISTER.COM

Registrant:
Best Bulk Register, Inc.
Administrator (admin@bestbulkregister.com)
PO Box 2848
Sunnyvale
California,94087
US
Tel. +800.8717432

Creation Date: 22-Dec-2006
Expiration Date: 22-Dec-2009

Domain servers in listed order:
ns1.bestbulkregister.com
ns2.bestbulkregister.com


Administrative Contact:
Best Bulk Register, Inc.
Administrator (admin@bestbulkregister.com)
PO Box 2848
Sunnyvale
California,94087
US
Tel. +800.8717432

Technical Contact:
Best Bulk Register, Inc.
Administrator (admin@bestbulkregister.com)
PO Box 2848
Sunnyvale
California,94087
US
Tel. +800.8717432

Billing Contact:
Best Bulk Register, Inc.
Administrator (admin@bestbulkregister.com)
PO Box 2848
Sunnyvale
California,94087
US
Tel. +800.8717432

Status:ACTIVE

__________________________________________

[208.70.169.42] ns1.bestbulkregister.com

Cooplabs, Inc. COOPL-1 (NET-208-70-168-0-1)
208.70.168.0 - 208.70.175.255
Best Bulk Register BBR-208-70-169-40 (NET-208-70-169-40-1)
208.70.169.40 - 208.70.169.47

[216.243.251.254] ns2.bestbulkregister.com

__________________________________________

OrgName: Matrix Consulting Group
OrgID: MCG-53
Address: 108 West 13th Street
City: Wilmington
StateProv: DE
PostalCode: 19801
Country: US

NetRange: 216.243.240.0 - 216.243.255.255
CIDR: 216.243.240.0/20
NetName: MATRIXNETWORK
NetHandle: NET-216-243-240-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Assignment
NameServer: DNS1.MATRIX-CG.NET
NameServer: DNS2.MATRIX-CG.NET
Comment:
RegDate: 2003-04-10
Updated: 2006-10-06

OrgAbuseHandle: ABUSE280-ARIN
OrgAbuseName: MCG Abuse Staff
OrgAbusePhone: +1-302-476-2747
OrgAbuseEmail: abuse@matrix-cg.net

OrgTechHandle: TSS3-ARIN
OrgTechName: MCG Support Staff
OrgTechPhone: +1-302-476-2747
OrgTechEmail: support@matrix-cg.net


__________________________________________

Cooplabs: Probably now run by Lindsay's spam operation.


http://cidr-report.org/cgi-bin/as-report?as=as32575

Prefix AS Path Aggregation Suggestion
208.70.168.0/21 4777 2497 6939 32575
199.9.24.0/21 4777 2497 6939 32575
200.108.176.0/20 4777 2497 6939 32575 <<<<<<<< cybercrime
204.152.224.0/21 4777 2516 6939 32575
208.93.96.0/21 4777 2497 6939 32575
74.82.9.0/24 4777 2516 6939 32575

Also: 66.160.174.0/24 (via HE.net)
__________________________________

OrgName: Cooplabs, Inc.
OrgID: COOPL
Address: P.O. Box 612555
City: San Jose
StateProv: CA
PostalCode: 95161
Country: US

ASNumber: 32575
ASName: COOPLABS
ASHandle: AS32575
Comment:
RegDate: 2004-06-04
Updated: 2006-04-08

RAbuseHandle: ABUSE1157-ARIN
RAbuseName: Abuse
RAbusePhone: +1-408-705-1248
RAbuseEmail: abuse@cooplabs.com

RNOCHandle: NOC2085-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-408-705-1248
RNOCEmail: noc@cooplabs.com

RTechHandle: ADMIN779-ARIN
RTechName: Administrative
RTechPhone: +1-408-705-1248
RTechEmail: hostmaster@cooplabs.com

OrgAbuseHandle: ABUSE1157-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-408-705-1248
OrgAbuseEmail: abuse@cooplabs.com

OrgNOCHandle: NOC2085-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-408-705-1248
OrgNOCEmail: noc@cooplabs.com

OrgTechHandle: ADMIN779-ARIN
OrgTechName: Administrative
OrgTechPhone: +1-408-705-1248
OrgTechEmail: hostmaster@cooplabs.com
_______________________________________


OrgName: Cooplabs, Inc.
OrgID: COOPL
Address: P.O. Box 612555
City: San Jose
StateProv: CA
PostalCode: 95161
Country: US

NetRange: 208.70.168.0 - 208.70.175.255
CIDR: 208.70.168.0/21
NetName: COOPL-1
NetHandle: NET-208-70-168-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.COOPLABS.NET
NameServer: NS2.COOPLABS.NET
Comment: http://www.cooplabs.net
Comment: Standard NOC hours are M-F 10am to 6pm PST
RegDate: 2006-09-25
Updated: 2006-09-25

RAbuseHandle: ABUSE1157-ARIN
RAbuseName: Abuse
RAbusePhone: +1-408-705-1248
RAbuseEmail: abuse@cooplabs.com

RNOCHandle: NOC2085-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-408-705-1248
RNOCEmail: noc@cooplabs.com

RTechHandle: ADMIN779-ARIN
RTechName: Administrative
RTechPhone: +1-408-705-1248
RTechEmail: hostmaster@cooplabs.com

OrgAbuseHandle: ABUSE1157-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-408-705-1248
OrgAbuseEmail: abuse@cooplabs.com

OrgNOCHandle: NOC2085-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-408-705-1248
OrgNOCEmail: noc@cooplabs.com

OrgTechHandle: ADMIN779-ARIN
OrgTechName: Administrative
OrgTechPhone: +1-408-705-1248
OrgTechEmail: hostmaster@cooplabs.com

________________________________________

OrgName: Cooplabs, Inc.
OrgID: COOPL
Address: P.O. Box 612555
City: San Jose
StateProv: CA
PostalCode: 95161
Country: US

NetRange: 204.152.224.0 - 204.152.231.255
CIDR: 204.152.224.0/21
OriginAS: AS32575
NetName: COOPL-4
NetHandle: NET-204-152-224-0-1
Parent: NET-204-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.COOPLABS.NET
NameServer: NS2.COOPLABS.NET
Comment: Standard NOC hours are M-F 10am to 6pm PST
RegDate: 2009-02-18
Updated: 2009-02-18

RAbuseHandle: ABUSE1157-ARIN
RAbuseName: Abuse
RAbusePhone: +1-408-705-1248
RAbuseEmail: abuse@cooplabs.com

RNOCHandle: NOC2085-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-408-705-1248
RNOCEmail: noc@cooplabs.com

RTechHandle: ADMIN779-ARIN
RTechName: Administrative
RTechPhone: +1-408-705-1248
RTechEmail: hostmaster@cooplabs.com

OrgAbuseHandle: ABUSE1157-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-408-705-1248
OrgAbuseEmail: abuse@cooplabs.com

OrgNOCHandle: NOC2085-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-408-705-1248
OrgNOCEmail: noc@cooplabs.com

OrgTechHandle: ADMIN779-ARIN
OrgTechName: Administrative
OrgTechPhone: +1-408-705-1248
OrgTechEmail: hostmaster@cooplabs.com

______________________________________

OrgName: Cooplabs, Inc.
OrgID: COOPL
Address: P.O. Box 612555
City: San Jose
StateProv: CA
PostalCode: 95161
Country: US

NetRange: 199.9.24.0 - 199.9.31.255
CIDR: 199.9.24.0/21
OriginAS: AS32575
NetName: COOPL-3
NetHandle: NET-199-9-24-0-1
Parent: NET-199-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.COOPLABS.NET
NameServer: NS2.COOPLABS.NET
Comment: Standard NOC hours are M-F 10am to 6pm PST
RegDate: 2008-10-15
Updated: 2008-10-15

RAbuseHandle: ABUSE1157-ARIN
RAbuseName: Abuse
RAbusePhone: +1-408-705-1248
RAbuseEmail: abuse@cooplabs.com

RNOCHandle: NOC2085-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-408-705-1248
RNOCEmail: noc@cooplabs.com

RTechHandle: ADMIN779-ARIN
RTechName: Administrative
RTechPhone: +1-408-705-1248
RTechEmail: hostmaster@cooplabs.com

OrgAbuseHandle: ABUSE1157-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-408-705-1248
OrgAbuseEmail: abuse@cooplabs.com

OrgNOCHandle: NOC2085-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-408-705-1248
OrgNOCEmail: noc@cooplabs.com

OrgTechHandle: ADMIN779-ARIN
OrgTechName: Administrative
OrgTechPhone: +1-408-705-1248
OrgTechEmail: hostmaster@cooplabs.com

____________________________________________

Hurricane Electric, Inc. HURRICANE-7 (NET-66-160-128-0-1)
66.160.128.0 - 66.160.207.255
Saving Hosting HURRICANE-DC0292-0016 (NET-66-160-174-0-1)
66.160.174.0 - 66.160.174.255

CustName: Saving Hosting
Address: 4320 Stevens Creek Blvd.
Address: Ste. 209
City: San Jose
StateProv: CA
PostalCode: 95129
Country: US
RegDate: 2008-06-12
Updated: 2008-06-12

NetRange: 66.160.174.0 - 66.160.174.255
CIDR: 66.160.174.0/24
NetName: HURRICANE-DC0292-0016
NetHandle: NET-66-160-174-0-1
Parent: NET-66-160-128-0-1
NetType: Reassigned
Comment:
RegDate: 2008-06-12
Updated: 2008-06-12

RAbuseHandle: ABUSE1036-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-510-580-4100
RAbuseEmail: abuse@he.net

RNOCHandle: ZH17-ARIN
RNOCName: Hurricane Electric
RNOCPhone: +1-510-580-4100
RNOCEmail: hostmaster@he.net

RTechHandle: ZH17-ARIN
RTechName: Hurricane Electric
RTechPhone: +1-510-580-4100
RTechEmail: hostmaster@he.net

OrgAbuseHandle: ABUSE1036-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-510-580-4100
OrgAbuseEmail: abuse@he.net

OrgTechHandle: ZH17-ARIN
OrgTechName: Hurricane Electric
OrgTechPhone: +1-510-580-4100
OrgTechEmail: hostmaster@he.net

___________________________________

inetnum: 200.108.176/20
status: allocated
owner: EEM Services
ownerid: BZ-EESE1-LACNIC
responsible: GoldToe International Inc.
address: Edificio Plaza Obarrio, Oficina #204, 0, 0
address: 0 - Marbella, Panama -
country: BZ
phone: +00 507 615-9755 []
owner-c: PDL
tech-c: PDL
abuse-c: PDL
created: 20040514
changed: 20040514

nic-hdl: PDL
person: GoldToe International Inc.
e-mail: goldtoeinc2005@YAHOO.COM
address: Edificio Plaza Obarrio, Oficina #204, 0, 0
address: 00000 - Marbella -
country: PA
phone: +00 507 615-9755 []
created: 20030512
changed: 20051019


___________________________________________________________

--- Found authoritative nameserver: ns1.cooplabs.net
--- contacting nameserver: ns1.cooplabs.net [208.70.169.51]

cooplabs.com SOA
origin = ns1.unixserver4.com
mail addr = support@unixserver4.com
serial = 2009010900
refresh = 14400 (4 hours)
retry = 7200 (2 hours)
expire = 3600000 (41 days 16 hours)
minimum ttl = 86400 ()
cooplabs.com NS ns2.unixserver4.com
cooplabs.com NS ns1.unixserver4.com
cooplabs.com A 199.9.24.66
cooplabs.com A 199.9.24.66
ns1.unixserver4.com A 208.70.169.51
ns2.unixserver4.com A 208.70.169.22
cooplabs.com MX 0 cooplabs.com

--- DNS Lookup completed


Domain Name: COOPLABS.NET
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.COOPLABS.NET
Name Server: NS2.COOPLABS.NET
Name Server: NS3.COOPLABS.NET
Status: clientTransferProhibited
Updated Date: 27-dec-2008
Creation Date: 26-jun-2003
Expiration Date: 26-jun-2009

Registration Service Provided By: Saving Hosting (Cooplabs, Inc.)
Contact: sales@savinghosting.com
Visit: http://www.savinghosting.com

Domain name: cooplabs.net

Administrative Contact:
Saving Hosting (Cooplabs, Inc.)
Sarju Kumar (sales@savinghosting.com)
+1.8668871307
Fax:
P.O. Box 610565
San Jose, CA 95161-0565
US

Technical Contact:
Saving Hosting (Cooplabs, Inc.)
Sarju Kumar (sales@savinghosting.com)
+1.8668871307
Fax:
P.O. Box 610565
San Jose, CA 95161-0565
US

Registrant Contact:
Saving Hosting (Cooplabs, Inc.)
Sarju Kumar ()

Fax:
P.O. Box 610565
San Jose, CA 95161-0565
US

Status: Locked

Name Servers:
ns1.cooplabs.net
ns2.cooplabs.net
ns3.cooplabs.net

Creation date: 26 Jun 2003 23:27:26
Expiration date: 26 Jun 2009 23:27:00

_______________________

http://www.google.com/search?q=866-887-1307

Saving Hosting
102 Bloor Street West -807
Toronto, ON
M5S 1M8
Canada
Phone: (866) 887-1307

or

Saving Hosting
P.O. Box 610565
San Jose, California 95161
USA
Tel: (866) 887-1307

____

"Saving Hosting is owned by CCC Web Solutions Provider Inc., incorporated in Ontario, Canada. Saving Hosting provides high quality, cost effective internet services to personal clients as well as small and medium business clients throughout the world. We not only provide quality web hosting, but also domain registration, as well as web designing and web marketing. Saving Hosting clients benefit from the most advanced, feature rich web based control panels in the industry and our first class technical support. Our primary goal is to provide excellent service and support to anyone in need of internet services related to their websites at affordable, competitive ( www.savinghosting.com )"

_______________________

Domain Name: UNIXSERVER4.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.UNIXSERVER4.COM
Name Server: NS2.UNIXSERVER4.COM
Status: ok
Updated Date: 03-may-2008
Creation Date: 30-may-2004
Expiration Date: 30-may-2009


Registration Service Provided By: Saving Hosting (Cooplabs, Inc.)
Contact: sales@savinghosting.com
Visit: http://www.savinghosting.com

Domain name: unixserver4.com

Administrative Contact:
Saving Hosting (Cooplabs, Inc.)
Sarju Kumar (sales@savinghosting.com)
+1.8668871307
Fax:
P.O. Box 610565
San Jose, CA 95161-0565
US

Technical Contact:
Saving Hosting (Cooplabs, Inc.)
Sarju Kumar (sales@savinghosting.com)
+1.8668871307
Fax:
P.O. Box 610565
San Jose, CA 95161-0565
US

Registrant Contact:
Saving Hosting (Cooplabs, Inc.)
Sarju Kumar ()

Fax:
P.O. Box 610565
San Jose, CA 95161-0565
US

Status: Active

Name Servers:
ns1.unixserver4.com
ns2.unixserver4.com

Creation date: 30 May 2004 17:05:55
Expiration date: 30 May 2009 17:05:00
___________________________________________________________

208.70.174.0/24
Live cooplabs.com SR14
2009-02-23 00:47:01
SBL72896 Snowshoe configuration

204.152.224.0/21
Live cooplabs.com SR14
2009-03-03 22:42:25
SBL73340 Snowshoe spam sources

196.1.176.0/20
Live cooplabs.com SR14
2009-03-03 15:39:40
SBL73088 zombies
Snowshoe spam sources

199.9.31.0/24
Live cooplabs.com SR14
2009-02-23 00:06:57
SBL72894 Snowshoe configuration

67.208.73.128/25
Live cooplabs.com SR14
2009-02-13 22:50:01
SBL72541 Snowshoe configuration, high spam volumes

67.208.73.64/27
Live cooplabs.com SR14
2009-02-13 22:17:34
SBL72538 Snowshoe configuration, high spam volumes

67.208.73.0/27
Live cooplabs.com SR14
2009-02-13 21:59:44
SBL72535 Snowshoe configuration, high spam volumes

199.9.25.0/24
Removed cooplabs.com SR14
2009-02-08 21:01:46
SBL71491 PRODEALWEB.COM Snowshoe configuration, ready to spam

199.9.24.0/24
Removed cooplabs.com SR14
2009-02-08 21:02:36
SBL71490 Snowshoe spam sources

199.9.26.128/28
Removed cooplabs.com SR14
2009-01-21 00:41:24
SBL71470 Snowshoe spamming

199.9.25.128/25
Removed cooplabs.com SR04
2009-02-10 19:37:01
SBL70297 PRODEALWEB.COM spamming non-COI addresses

199.9.29.0/24
Removed cooplabs.com SR04
2008-12-09 22:20:21
SBL69944 Craigslist Secret spam

208.70.172.0/24
Removed cooplabs.com SR12
2007-10-01 20:45:00
SBL59111 "Mountain Marketing" - lentruks.com / Hydra Media

______________________________________________________


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK8678/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2016 The Spamhaus Project Ltd. All rights reserved.
Legal  |  Privacy