ASPEWS

Hitting
contributor traps with Subjects like:

 Test & Keep a BlackBerry Phone
 RE:Jackpot Rewards -- Where real people win real prizes

 Was your child afflicted with Cerebral Palsy?

Also VoloMP spammers.

Web sites that aren't just goddady parked seem to be VoloMP "guy
with binoculars" unsub forms.

Domains (some whois cloaked) include:

skysummerblue.com
skywinterblue.com
srv1sgen1.com

bethdoraph.com
bethdron.com
bethgill.com
bethmedulo.com
bethmmed.com
bethmn.com
bethrentel.com
bethrmed.com
bethrnal.com
bethroco.com
bethtion.com
bethutti.com
bethvati.com
cherriac.com
cherriator.com
cherrice.com
cherrict.com
cherridd.com
cherride.com
cherrifa.com
cherriip.com
cherrira.com
cherrire.com
cherrirsed.com
cherrirt.com
cherriru.com
cherriry.com
cherritest.com
clydenbirth.com
clydentictive.com
clydeonides.com
clydereadru.com
clyderierdi.com
clyderintry.com
darthat.com
darthca.com
darthcral.com
darthdi.com
darthds.com
darthee.com
darthians.com
darthit.com
darthivat.com
darthlike.com
darthlt.com
darthmi.com
darthot.com
darthpr.com
darthps.com
darthre.com
darthrp.com
darthth.com
darthylae.com
dianean.com
dianeat.com
dianeep.com
dianeerke.com
dianeeyne.com
dianefe.com
dianegati.com
dianege.com
dianelora.com
dianemi.com
dianemmab.com
dianemous.com
dianeonju.com
dianewi.com
dianeyc.com
grandsupportteam.com
janiceffne.com
janicegg.com
janiceiers.com
janicein.com
janicelose.com
janicemershard.com
janicenguing.com
janicenidemo.com
janicenist.com
janicenitati.com
janicenoecuncu.com
janiceogenaner.com
janicerdableps.com
janicerevoil.com
janicert.com
janicetabismen.com
jazzndridorchy.com
jazznshingel.com
jazzntin.com
jazznyarchor.com
jazzom.com
jazzoplaters.com
jazzrationical.com
jazzrl.com
jazzst.com
jazztypens.com
jazzulki.com
jeansayed.com
jeansctan.com
jeansered.com
jeansfe.com
jeanshe.com
jeansil.com
jeanskyar.com
jeanslizi.com
jeansnd.com
jeansodom.com
jeansrh.com
jeansrshi.com
jeansrtle.com
jeanssu.com
jeanssych.com
jeansymol.com
loriaker.com
loriatom.com
lorieltz.com
loriercu.com
lorige.com
lorihi.com
loriitio.com
loriky.com
lorimetric.com
lorimp.com
lorirang.com
lorirate.com
lorirman.com
lorition.com
loritter.com
loriuate.com
rainanti.com
rainctness.com
rainemob.com
rainffes.com
raingstr.com
rainhite.com
rainiousne.com
rainlary.com
rainliga.com
rainlimint.com
rainmans.com
rainriga.com
raintive.com
raintm.com
shanacro.com
shanarob.com
shancomp.com
shanetiz.com
shaneweriz.com
shanhawk.com
shanists.com
shannastin.com
shannd.com
shanocam.com
shanoste.com
shanpini.com
shansmeman.com
shanticsrs.com
shanzoos.com
stanarbush.com
stanctom.com
staniatuness.com
stanih.com
yurisilvations.com
yuritiondarium.com
yuritoryalistu.com
yuriughtedupla.com
yuriungeries.com
yuriurialegl.com
yuriushingre.com
yurivekeriac.com
yuriynia.com

#1814 Subject: How to drop 21 lbs in 21 days.
Date: Wed, 6 May 2009 18:52:xx PST
From: Lose it <loseit@skyoceansummer.com>

#1815 Subject: Health warning for all those on acid reflux medications
Date: Sun, 3 May 2009 19:30:xx PST
From: Heartburn Remedy Warning <HeartburnRemedyWarning@stanctom.com>

#1816 Subject: still dating?
Date: Tue, 5 May 2009 07:39:xx PST
From: Still Dating <stilldating@oceanskysummer.com>

#1817 Subject: How to drop 21 lbs in 21 days.
Date: Wed, 6 May 2009 07:28:xx PST
From: Lose it <loseit@skyoceansummer.com>

#1818 Subject: PHILIP  -  Conquer hair loss  -
Date: Wed, 6 May 2009 01:07:xx PST
From: Amy Wilson <ajwilson@message1support1online.com>

#1819 Subject: Effortlessly lose 21 lbs in 21 days.
Date: Tue, 5 May 2009 07:42:xx PST
From: Lose it <loseit@summerblueocean.com>

Listed Networks:

• 216.200.122.0/24
• 65.60.40.128/28
• 65.60.40.192/27
• 65.60.48.32/28
• 65.60.48.176/28
• 65.60.48.192/27
• 65.60.48.224/28
• 65.60.52.32/28
• 65.60.52.240/28
• 65.60.53.56/29
• 65.60.53.72/29
• 65.60.54.232/29
• 65.60.54.240/29

[whois.arin.net]
Consumer PC, Inc. (CONSU-10)
Consumer PC, Inc. (AS33642) CONSUMERPC-INC 33642
Consumer PC, Inc. CONSUMERPC-INC (NET-204-11-96-0-1) 204.11.96.0 - 204.11.103.255
Consumer PC, Inc. CONSUMERPC-INC (NET-208-69-112-0-1) 208.69.112.0 - 208.69.119.255
Consumer PC, Inc. CONSUMERPC-INC (NET-67-58-96-0-1) 67.58.96.0 - 67.58.111.255

Number of mails recorded: 64381

#64351 Subject: Locate Breast Implant Surgeons in Your Local Area.
Date: Wed, 22 Apr 2009 13:13:xx -0600
From: Plastic Surgeon Matching Service <CSRN@adaptfinance.com>

#64352 Subject: Get a Rich Beautiful Lawn
Date: Wed, 22 Apr 2009 15:24:xx -0500
From: Grass Seed <PatchPerfect@aquapony.com>

#64353 Subject: Find Top, Board Certified Plastic Surgeons in your Local Area.
Date: Wed, 22 Apr 2009 13:13:xx -0600
From: Plastic Surgeon Matching Service <CSRN@sheepotter.com>

#64354 Subject: Get the Body You Want this Spring. Top, Board Certified Plastic Surgeons in your Local Area.
Date: Wed, 22 Apr 2009 13:13:xx -0600
From: Plastic Surgeon Matching Service <CSRN@toadspring.com>

#64355 Subject: Locate Breast Implant Surgeons in Your Local Area.
Date: Wed, 22 Apr 2009 13:06:xx -0600
From: Plastic Surgeon Matching Service <CSRN@zincpeach.com>

#64356 Subject: Locate Breast Implant Surgeons in Your Local Area.
Date: Wed, 22 Apr 2009 13:21:xx -0600
From: Plastic Surgeon Matching Service <CSRN@shrewlamp.com>

Spamming a contributor with Subjects like

 Drop up to 20 pounds in a day

Web sites are unsubscribe forms. 

Domains include:

shotupin.com
sixmonthsdriven.com
thehighestin.com

#301 Subject: Site en attente
Date: Wed, 18 Jun 2008 00:45:20 +0100
From: “Casafree.com” <info@Casafree.com>

#302 Subject: Site en attente
Date: Wed, 18 Jun 2008 00:45:08 +0100
From: “Casafree.com” <info@Casafree.com>

#303 Subject: Site en attente
Date: Wed, 18 Jun 2008 10:16:45 +0100
From: “Casafree.com” <info@Casafree.com>

Moxie Communications (NETBLK-NET-462FDF00-24)
6-295 Queen St. East
Suite 280
Brampton, ON L6V-1Y6
CA

OrgID : NAC-37984
Netname : NET-462FDF00-24
Netblock: 70.47.223.0/24
NetUse : Dedicated Racks of 85 machines - web-mail hosting

Coordinator:
Corbin, Sean noc@moxiehosting.com
Phone: 905-361-7672

#14619 Subject: Exclusive $19.99 Dish Network.com Deal! Ends Soon.
Date: Thu, 15 May 2008 12:16:xx -0400
From: Dish Network <xx@lookoffer.com>

#14620 Subject: Miracle Weight Loss as Seen on Oprah!
Date: Thu, 15 May 2008 13:40:xx -0400
From: Diet Experts <xx@naturalsave.com>

#14621 Subject: Side effects include: Increased libido, decreased cellulite, and …
Date: Thu, 15 May 2008 13:46:xx -0400
From: SlimStudy <xx@naturalinsure.com>

#14622 Subject: Secure your home in 2008 with the BEST security system
Date: Thu, 15 May 2008 13:54:xx -0400
From: Home Security <xx@mapexclusive.com>

#14623 Subject: Side effects include: Increased libido, decreased cellulite, and …
Date: Thu, 15 May 2008 14:00:xx -0400
From: SlimStudy <xx@minutesingle.com>

#14624 Subject: Secure your home in 2008 with the BEST security system
Date: Thu, 15 May 2008 14:08:xx -0400
From: Home Security <xx@mapexclusive.com>

#14625 Subject: Side effects include: Increased libido, decreased cellulite, and …
Date: Thu, 15 May 2008 14:10:xx -0400
From: SlimStudy <xx@naturalinsure.com>

#14626 Subject: Side effects include: Increased libido, decreased cellulite, and …
Date: Thu, 15 May 2008 14:10:xx -0400
From: SlimStudy <xx@naturalinsure.com>

#14627 Subject: Side effects include: Increased libido, decreased cellulite, and …
Date: Thu, 15 May 2008 14:28:xx -0400
From: SlimStudy <xx@minutepopular.com>

OrgName: Nobis Technology Group, LLC
OrgID: NTGL
Address: 201 West Olive Street
Address: Suite 2B
City: Bloomington
StateProv: IL
PostalCode: 61701
Country: US

ReferralServer: rwhois://rwhois.nobistech.net:4321

NetRange: 216.6.224.0 - 216.6.239.255
CIDR: 216.6.224.0/20
OriginAS: AS15003
NetName: NETBLOCK-NOBIS-TECHNOLOGY-GROUP-01
NetHandle: NET-216-6-224-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.NOBISTECH.NET
NameServer: NS2.NOBISTECH.NET
Comment: Nobis Technology Group, L.L.C.
Comment: http://www.nobistech.net
Comment: NOTICE: ADDRESSES IN THIS BLOCK ARE NON-PORTABLE
RegDate: 2007-10-09
Updated: 2007-10-09

RAbuseHandle: ABUSE1601-ARIN
RAbuseName: Abuse
RAbusePhone: +1-312-281-5101
RAbuseEmail: abuse@nobistech.net

RNOCHandle: NOC2466-ARIN
RNOCName: NOC
RNOCPhone: +1-312-281-5101
RNOCEmail: admin@nobistech.net

RTechHandle: TECH216-ARIN
RTechName: Tech
RTechPhone: +1-312-281-5101
RTechEmail: admin@nobistech.net

OrgAbuseHandle: ABUSE1601-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-312-281-5101
OrgAbuseEmail: abuse@nobistech.net

OrgNOCHandle: NOC2466-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-312-281-5101
OrgNOCEmail: admin@nobistech.net

OrgTechHandle: AIA12-ARIN
OrgTechName: ARIN IP Admin
OrgTechPhone: +1-312-281-5101
OrgTechEmail: arin@nobistech.net
When one tells the world one has a whois server, one should make sure it works.

$ whois -h rwhois.nobistech.net -p 4321 216.6.224.142
whois: connect(): Operation timed out
$ whois freshmouse.com
Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Domain Name: FRESHMOUSE.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
Status: clientTransferProhibited
Updated Date: 11-jan-2008
Creation Date: 11-jan-2008
Expiration Date: 11-jan-2009

>>> Last update of whois database: Sat, 26 Jan 2008 07:44:12 UTC <<<

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
=-=-=-=
Visit AboutUs.org for more information about freshmouse.com
<a href=”http://www.aboutus.org/freshmouse.com”>AboutUs: freshmouse.com</a>

Domain name: freshmouse.com

Registrant Contact:
Whois Privacy Protection Service, Inc.
Whois Agent (cndrsqmvvf@whoisprivacyprotect.com)
+1.4252740657
Fax: +1.4256960234
PMB 368, 14150 NE 20th St - F1
C/O freshmouse.com
Bellevue, WA 98007
US
32.224.6.216.in-addr.arpa domain name pointer freshmouse.com.
33.224.6.216.in-addr.arpa domain name pointer sourcemouse.com.
34.224.6.216.in-addr.arpa domain name pointer startmouse.com.
35.224.6.216.in-addr.arpa domain name pointer tipsmouse.com.
36.224.6.216.in-addr.arpa domain name pointer bumperthe.com.
61.224.6.216.in-addr.arpa domain name pointer phoneaqua.com.
62.224.6.216.in-addr.arpa domain name pointer phonebeige.com.
63.224.6.216.in-addr.arpa domain name pointer phonebronze.com.
64.224.6.216.in-addr.arpa domain name pointer phonebrown.com.
66.224.6.216.in-addr.arpa domain name pointer honorbench.com.
67.224.6.216.in-addr.arpa domain name pointer hopebench.com.
68.224.6.216.in-addr.arpa domain name pointer intentbench.com.
69.224.6.216.in-addr.arpa domain name pointer interestbench.com.
71.224.6.216.in-addr.arpa domain name pointer menuadorable.com.
72.224.6.216.in-addr.arpa domain name pointer menuamazing.com.
73.224.6.216.in-addr.arpa domain name pointer menuamused.com.
74.224.6.216.in-addr.arpa domain name pointer menucomfort.com.
75.224.6.216.in-addr.arpa domain name pointer menucourage.com.

#101 Subject: Experience 4 nights in beautiful Cancun
Date: Fri, 25 Jan 2008 15:29:39 -0600
From: Premier Resort <prem.ie.rres.ort@touristmedianetwork.info>

#102 Subject: New substance really works for wrinkles =?x-unknown?B?lg==?= guaranteed
Date: Sat, 26 Jan 2008 01:54:09 -0600
From: GabaMed <GabaMed@touringinternational.info>

#103 Subject: Get the 2008 Entertainment Savings Book today
Date: Fri, 25 Jan 2008 08:43:45 -0600
From: CouponBook <CBook@tourgroupsunited.info>

#104 Subject: Need a home security system, $0 equipment fees
Date: Sat, 26 Jan 2008 01:59:31 -0600
From: Be secure <B.Sec.ure@tourgroupunited.com>

#105 Subject: If it fits the plate, you will lose what you want, find out how
Date: Sat, 26 Jan 2008 02:03:03 -0600
From: Perfect Portions Weight Loss <PPor.tion.sWL@touringgroupsinternational.info>

#106 Subject: Home security systems with 24/7 monitoring service & free equipment
Date: Fri, 25 Jan 2008 10:17:15 -0600
From: Homeland Security <Homel.andSecurity@touristinfonet.info>

#107 Subject: Home security systems with 24/7 monitoring service & free equipment
Date: Fri, 25 Jan 2008 23:58:30 -0600
From: Safety <Safet.y@touristinfonetwork.info>

#108 Subject: Home security systems with 24  7 monitoring service and equipment
Date: Sat, 26 Jan 2008 01:59:30 -0600
From: Be secure <B.Sec.ure@seatripadventures.info>

#109 Subject: Enjoy a complimentary 4 night luxury Cancun vacation
Date: Fri, 25 Jan 2008 19:32:08 -0600
From: Cancun Exclusive <CExclu.siv.e@sailingadventuresorg.info>

#110 Subject: Get unbelievable the instant wrinkle reducer from Cheryl Tiegs
Date: Sat, 26 Jan 2008 01:00:54 -0600
From: looking unbelievable <L.U@sailingadventuresinc.info>

Registrant Contact:
Sierra Partners, LLC
Cole West (sierrapartners@gmail.com)
+1.8664321548
Fax: +1.
723 S. CASINO CENTER BLVD, 2nd Floor
Las Vegas, NV 89101
US

#12401 Subject: Jewelry at 95% Off - Online Jewelry Auctions
Date: Tue, 22 Jan 2008 20:57:36 -0800
From: Online Jewelry Auctions <OnlineJewelryAuctions@leathertickle.com>

#12402 Subject: Countrywide (R) Could Make Home Loans Easy
Date: Wed, 23 Jan 2008 15:48:37 -0500
From: Countrywide Home Loans Offer <CountrywideHomeLoansOffer@prosidepale.com>

#12403 Subject: Jewelry at 95% Off - Online Jewelry Auctions
Date: Tue, 22 Jan 2008 23:24:19 -0500
From: Online Jewelry Auctions <OnlineJewelryAuctions@proshowlab.com>

#12404 Subject: Diet Diet Sample Pack Giveaway - NO offer(s) to participate in
Date: Tue, 22 Jan 2008 20:38:11 -0500
From: Diet Sample Pack Giveaway <DietSamplePackGiveaway@popcicleside.com>

#12405 Subject: Countrywide (R) Could Make Home Loans Easy
Date: Wed, 23 Jan 2008 13:39:19 -0500
From: Countrywide Home Loans Offer <CountrywideHomeLoansOffer@manthraton.com>

#12406 Subject: Jewelry at 95% Off - Online Jewelry Auctions
Date: Tue, 22 Jan 2008 23:26:14 -0500
From: Online Jewelry Auctions <OnlineJewelryAuctions@pulleysteam.com>

#12407 Subject: FREE -2 WEEK Supply of Kitty Litter
Date: Wed, 23 Jan 2008 01:22:14 -0500
From: For Cat Owners Only <ForCatOwnersOnly@proshopdime.com>

#15632 Subject: Work 1 Hour a Day - Make $150,00 a Year
Date: Fri, 29 Aug 2008 19:36:17 -0400
From: Underground Cash Secrets <UndergroundCashSecrets@maptriptable.com>

#15633 Subject: Work 1 Hour a Day - Make $150,00 a Year
Date: Fri, 29 Aug 2008 19:38:08 -0400
From: Underground Cash Secrets <UndergroundCashSecrets@memberbatch.com>

#15634 Subject: Your $7,500 Credit Line is Approved - 0% interest for the first 12 months
Date: Fri, 29 Aug 2008 23:48:06 -0400
From: Your New Platinum Card <YourNewPlatinumCard@pinevalleyfloor.com>

#15635 Subject: Work 1 Hour a Day - Make $150,00 a Year
Date: Fri, 29 Aug 2008 19:00:22 -0400
From: Underground Cash Secrets <UndergroundCashSecrets@maptriptable.com>

#15636 Subject: Work 1 Hour a Day - Make $150,00 a Year
Date: Fri, 29 Aug 2008 20:00:07 -0400
From: Underground Cash Secrets <UndergroundCashSecrets@mathsidemill.com>

One is very sure this is a front organisation for an organised spam network.

domain: GARANT-INCOM.RU
type: CORPORATE
nserver: ns8.nic.ru.
nserver: ns4.nic.ru.
nserver: ns3.nic.ru.
state: REGISTERED, DELEGATED
org: Ltd “GarantIncom”
phone: +79268368876
fax-no: +79268368876
e-mail: support2@garant-incom.ru
registrar: RUCENTER-REG-RIPN
created: 2006.01.17
paid-till: 2009.01.17
source: TC-RIPN

inetnum: 81.22.112.0 - 81.22.112.255
netname: GARANT-INCOM-CORE
descr: network infrastructure
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.113.0 - 81.22.113.255
netname: GI-CUST-BABYLON
descr: LRE network
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.114.0 - 81.22.115.255
netname: GI-DIAL-UP
descr: dial-up service
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.114.0 - 81.22.115.255
netname: GI-DIAL-UP
descr: dial-up service
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.116.0 - 81.22.117.255
netname: GI-DATACENTER
descr: co-location service
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.116.0 - 81.22.117.255
netname: GI-DATACENTER
descr: co-location service
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.118.0 - 81.22.119.255
netname: GI-CUST-SERVICELINE
descr: ethernet network
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.118.0 - 81.22.119.255
netname: GI-CUST-SERVICELINE
descr: ethernet network
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.120.0 - 81.22.120.255
netname: GI-ADSL-MOSKVORECHE
descr: xDSL network
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.121.0 - 81.22.121.255
netname: GI-CUST-INTERWAVE
descr: VPDN network
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.122.0 - 81.22.123.255
netname: GI-CUST-SEVEREN
descr: dial-up service
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.122.0 - 81.22.123.255
netname: GI-CUST-SEVEREN
descr: dial-up service
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.124.0 - 81.22.125.127
netname: GI-CUST-PEARL
descr: wi-fi network
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.124.0 - 81.22.125.127
netname: GI-CUST-PEARL
descr: wi-fi network
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.126.0 - 81.22.126.255
netname: GI-CUST-CPHOST
descr: SSL application hosting
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
–
inetnum: 81.22.127.0 - 81.22.127.255
netname: GARANT-SSL-HOSTING
descr: SSL and Application hosting
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
role: GarantIncom NOC
address: NAHIMOVSKIY PROSPEKT, 51/21
address: INION, office 163
address: 117997, Moscow, Russia
phone: +79268368876
fax-no: +79268368876
e-mail: noc2@garant-incom.ru
admin-c: MA5082-RIPE
tech-c: MA5082-RIPE
nic-hdl: GI617-RIPE
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

% Information related to ‘81.22.120.0/21AS39272′route: 81.22.120.0/21
descr: ISP GarantIncom
descr: IPv4 Aggregate #2
origin: AS39272
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

Well over 20,000 messages in under 30 minutes indicates this is a major source of our spam.

#4442 Subject: Victoria’s Secret(R) Offer Confirmation
Date: Tue, 22 Jan 2008 09:32:04 -0500
From: Women’s Group <GiftInsider@xnjmpmddi.info>

#4443 Subject: Coke(R) Survey!
Date: Tue, 22 Jan 2008 10:51:17 -0500
From: “B. R. S” <ColaDept@pbvwpswmu.info>

#4444 Subject: The Power of Green Tea.
Date: Tue, 22 Jan 2008 13:57:30 -0500
From: Green Tea Extreme <ListName@qtkwhcush.info>

#4445 Subject: Your New 2008 Entertainment Book is waiting
Date: Tue, 22 Jan 2008 12:15:27 -0500
From: “Savings book.” <holidayBook@ofkzsqncht.info>

#4446 Subject: I wasn’t Fired … even though I failed!
Date: Tue, 22 Jan 2008 09:34:45 -0500
From: Bob Allen <Rob@wxbevticlhk.info>

#4447 Subject: Take the David Bach challenge and finish rich
Date: Tue, 22 Jan 2008 11:23:59 -0500
From: Finish rich <FinishRich@eloxrumi.info>

#4448 Subject: Nike(R) Survey
Date: Tue, 22 Jan 2008 11:38:22 -0500
From: Athletic Apparel Research Survey <Footwear@dtmzhrgibxv.info>

#2326 Subject: Flush up to 20lbs from your Colon
   Date: Mon, 21 Jan 2008 07:21:38 PST
   From: ColonCleanse <darla@Igz.firstbirdy.info>

#2327 Subject: Protection for Your Car. Save up to 60%
   Date: Mon, 21 Jan 2008 07:02:12 PST
   From: Warranty Options <mike@u.firsttoblast.info>

#2328 Subject: Flush up to 20lbs from your Colon
   Date: Mon, 21 Jan 2008 07:02:12 PST
   From: ColonCleanse <darla@dcUibPO.firstbirdy.info>

#2329 Subject: Flush up to 20lbs from your Colon
   Date: Mon, 21 Jan 2008 07:21:38 PST
   From: ColonCleanse <darla@gQL.firstbirdy.info>

#2330 Subject: Flush up to 20lbs from your Colon
   Date: Mon, 21 Jan 2008 07:21:38 PST
   From: ColonCleanse <darla@MN.firstbirdy.info>

#2331 Subject: Protection for Your Car. Save up to 60%
   Date: Mon, 21 Jan 2008 07:21:38 PST
   From: Warranty Options <mike@qSi.firsttoblast.info>

Domains include:

vis-a-vis-marketplace.com
breakdominate.com

Hitting  traps with Subjects like

 Flush Up To 20 lbs From Your Colon.

Whois cloaked.

Just the one domain: ezprofiteering.com. NSes in bisondelivery.net, if
that rings any bells.

20,000+ spams in the traps.

Hitting traps with Subjects like:

 Our Biggest Scholarship Giveaway Ever! You Could Win $30,000?

The Whois for the various domains shows them being reg'd to various groups;
many of the domains that aren't parked seem to share NSes on Yipes
208.116.190.96-97 or Suavemente 216.153.48.2-3 or 66.11.127.96:

ns1.deliveryloopcircuits.com.
ns1.expresspipelines.com.
ns1.facilmarketing.com.
ns1.mdnsservice.com.
ns1.pulsedemand.com.
ns2.deliveryloopcircuits.com.
ns2.expresspipelines.com.
ns2.facilmarketing.com.
ns2.interdiction.net.
ns2.mdnsservice.com.
ns2.pulsedemand.com.

Domains include:

acrossattributablecommission.com
acthelpnor.com
breakersoccupiedprotect.com
colorcontinuationrecommendations.com
connectiontommyquite.com
dealboardwhole.com
displayssciencelives.com
farmwhileboy.com
fendirect.com
festivitiessomeonesome.com
formelsethin.com
gersurface.com
happysummerfish.com
hardedgeplan.com
hardlookrange.com
hatewaitbus.com
havewrongthose.com
headagoright.com
headroomnote.com
hearintowish.com
heartwhereman.com
heattoolsteal.com
heavyhumantrack.com
helllinkprice.com
helpdropprove.com
helponcewild.com
hencehowknow.com
herjudgejoin.com
herlossdebt.com
insumgo.com
intakemovingcomputer.com
interdiction.net
knowpresentationlang.com
likeleonardhave.com
longhighname.com
malhike.com
ownsortsound.com
pluswhatlunch.com
postthursdaywill.com
predictsskipperleaks.com
runningcheckeddealer.com
startraisepiece.com
stolenfreezeconfirmed.com
taconger.com
theycompressionsincerely.com
tollpeculiarsturdy.com
 
Small selection:
 
#6315 Subject: Subscriber,  Find Your Soul Mate Today!
   Date: Mon, 21 Jan 2008 06:58:30 GMT
   From: eHarmonyDating <eHarmonyDating@gersurface.com>

#6316 Subject: Breaking Mortgage News - Fed Drops Rates to 4.5%
   Date: Mon, 21 Jan 2008 06:35:33 GMT
   From: Info On Rates <InfoOnRates@fendirect.com>

#6317 Subject: Send a Valentines Day ecard at no cost now!
   Date: Mon, 21 Jan 2008 06:53:58 GMT
   From: Valentine eCard <ValentineeCard@fendirect.com>

#6318 Subject: Watch TV on your PC in 2 minutes
   Date: Mon, 21 Jan 2008 07:01:02 GMT
   From: TVolution <TVolution@insumgo.com>

#6319 Subject: Watch TV on your PC in 2 minutes
   Date: Mon, 21 Jan 2008 07:01:02 GMT
   From: TVolution <TVolution@insumgo.com>

#6320 Subject: Create the kitchen you?ve always wanted
   Date: Mon, 21 Jan 2008 06:01:36 GMT
   From: Kitchen Remodeling <KitchenRemodeling@taconger.com>           

#6321 Subject: Play Diner Dash online - over $250,000 won daily
   Date: Mon, 21 Jan 2008 06:17:52 GMT
   From: WorldWinner UK <WorldWinnerUK@taconger.com>

#6322 Subject: Play Diner Dash online - over $250,000 won daily
   Date: Mon, 21 Jan 2008 06:13:20 GMT
   From: WorldWinner UK <WorldWinnerUK@fendirect.com>
Mark: #6539
Suavemente, INC. (SUAVE-1)
Suavemente, INC. (AS14572) SUAVEMENTE    14572
Suavemente, INC. SUAVEMENTE-SAN-DIEGO (NET-66-11-112-0-1) 66.11.112.0 - 66.11.127.255
Suavemente, INC. INTERDICTION-NETWORKS (NET-216-153-48-0-1) 216.153.48.0 - 216.153.63.255
Suavemente, INC. INTERDICTION-NETWORKS (NET-216-153-112-0-1) 216.153.112.0 - 216.153.127.255
Suavemente, INC. INTERDICTION-NETWORKS (NET-207-65-240-0-1) 207.65.240.0 - 207.65.247.255

#11106 Subject: 4 Days & 3 Nights Confirmation
Date: Fri, 29 Aug 2008 22:10:12 -0800
From: ParkRoyalCancun <Julieuz89@rentalvacationonline.com>

#11107 Subject: Celebrities Diet Secret Revealed!
Date: Sat, 30 Aug 2008 14:15:05 +1000
From: American Health Association <Nick@fixassess.info>

#11108 Subject: 4 Days & 3 Nights Confirmation
Date: Fri, 29 Aug 2008 22:00:52 -0800
From: ParkRoyalCancun <Julievm05@rentalsvacationworld.com>

#11109 Subject: Celebrities Diet Secret Revealed!
Date: Sat, 30 Aug 2008 11:53:57 +0400
From: American Diet institute <chris@fixassess.info>

#11110 Subject: 4 Days & 3 Nights Confirmation
Date: Fri, 29 Aug 2008 23:20:48 -0800
From: ParkRoyalCancun <Julieyz4182@superradiosurvey.com>

#11111 Subject: 4 Days & 3 Nights Confirmation
Date: Fri, 29 Aug 2008 21:50:34 -0800
From: ParkRoyalCancun <Juliety29362@rentalvacationonline.com>

Just listing Suavemente’s blocks entirely now.  They seem incabpable of anything else but spamming.  If anyone has an more netblocks known to belong to them and not listed here, please feel free to post them to news.admin.net-abuse.blocklisting with a subject of “[ASPEWS] Suavemente netblocks” and we’ll be happy to list the rest of their space.