Mondonline

Dating, Spammer No Comments
Various reports, seems like it might be a forum software bug as there just seems a lot of forum mails to spamtraps.
#113 Subject: Welcome to GWThetaTau.org Forums
   Date: Thu, 12 Jun 2008 15:04:xx -0700
   From: xx@gmail.com

#114 Subject: RerndieMere! We miss you!
   Date: Thu, 12 Jun 2008 19:36:xx -0700
   From: Forums <xx@copia.lunarservers.com>

#115 Subject: celluliteforum! We miss you!
   Date: Thu, 12 Jun 2008 21:04:xx -0700
   From: Forums <xx@copia.lunarservers.com>

#116 Subject: Welcome to GWThetaTau.org Forums
   Date: Fri, 13 Jun 2008 23:31:xx -0700
   From: xx@gmail.com

#117 Subject: Welcome to Vox Populi Forums Forums
   Date: Mon, 16 Jun 2008 04:21:xx -0700
   From: xx@voxpopunited.com

#118 Subject: Welcome to Vox Populi Forums Forums
   Date: Mon, 16 Jun 2008 10:26:xx -0700
   From: xx@voxpopunited.com

#119 Subject: Welcome to Vox Populi Forums Forums
   Date: Tue, 17 Jun 2008 19:24:xx -0700
   From: xx@voxpopunited.com

#120 Subject: =?x-unknown?B?Qm9sZXTtbg==?= Cultural Alianza Francesa de Lima
   Date: Tue, 17 Jun 2008 11:12:xx -0700
   From: Departamento Cultural AFL <xx@alianzafrancesalima.edu.pe>

Watching Networks:

  • 74.50.4.82/29
  • 74.50.2.176/30

GARANT-INCOM

Weight Loss, Degree/University, Gadget/Device, Healthcare, Dating, Great Deals, Employment, Property, Survey, Rewards, Drug Spam, Spam Support, Illegal Software, Life Insurance Spam, Mortgage/Debt, Get Rich Quick, Affiliate Spam, Sex/Porn, Spammer No Comments

One is very sure this is a front organisation for an organised spam network.

domain: GARANT-INCOM.RU
type: CORPORATE
nserver: ns8.nic.ru.
nserver: ns4.nic.ru.
nserver: ns3.nic.ru.
state: REGISTERED, DELEGATED
org: Ltd “GarantIncom”
phone: +79268368876
fax-no: +79268368876
e-mail: support2@garant-incom.ru
registrar: RUCENTER-REG-RIPN
created: 2006.01.17
paid-till: 2009.01.17
source: TC-RIPN

inetnum: 81.22.112.0 - 81.22.112.255
netname: GARANT-INCOM-CORE
descr: network infrastructure
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.113.0 - 81.22.113.255
netname: GI-CUST-BABYLON
descr: LRE network
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.114.0 - 81.22.115.255
netname: GI-DIAL-UP
descr: dial-up service
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.114.0 - 81.22.115.255
netname: GI-DIAL-UP
descr: dial-up service
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.116.0 - 81.22.117.255
netname: GI-DATACENTER
descr: co-location service
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.116.0 - 81.22.117.255
netname: GI-DATACENTER
descr: co-location service
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.118.0 - 81.22.119.255
netname: GI-CUST-SERVICELINE
descr: ethernet network
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.118.0 - 81.22.119.255
netname: GI-CUST-SERVICELINE
descr: ethernet network
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.120.0 - 81.22.120.255
netname: GI-ADSL-MOSKVORECHE
descr: xDSL network
country: ru
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.121.0 - 81.22.121.255
netname: GI-CUST-INTERWAVE
descr: VPDN network
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.122.0 - 81.22.123.255
netname: GI-CUST-SEVEREN
descr: dial-up service
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.122.0 - 81.22.123.255
netname: GI-CUST-SEVEREN
descr: dial-up service
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.124.0 - 81.22.125.127
netname: GI-CUST-PEARL
descr: wi-fi network
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.124.0 - 81.22.125.127
netname: GI-CUST-PEARL
descr: wi-fi network
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.126.0 - 81.22.126.255
netname: GI-CUST-CPHOST
descr: SSL application hosting
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC

inetnum: 81.22.127.0 - 81.22.127.255
netname: GARANT-SSL-HOSTING
descr: SSL and Application hosting
country: RU
admin-c: GI617-RIPE
tech-c: GI617-RIPE
status: ASSIGNED PA
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

role: GarantIncom NOC
role: GarantIncom NOC
address: NAHIMOVSKIY PROSPEKT, 51/21
address: INION, office 163
address: 117997, Moscow, Russia
phone: +79268368876
fax-no: +79268368876
e-mail: noc2@garant-incom.ru
admin-c: MA5082-RIPE
tech-c: MA5082-RIPE
nic-hdl: GI617-RIPE
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

% Information related to ‘81.22.120.0/21AS39272′route: 81.22.120.0/21
descr: ISP GarantIncom
descr: IPv4 Aggregate #2
origin: AS39272
mnt-by: MNT-GARANT-INCOM
source: RIPE # Filtered

Well over 20,000 messages in under 30 minutes indicates this is a major source of our spam.

#4442 Subject: Victoria’s Secret(R) Offer Confirmation
Date: Tue, 22 Jan 2008 09:32:04 -0500
From: Women’s Group <GiftInsider@xnjmpmddi.info>

#4443 Subject: Coke(R) Survey!
Date: Tue, 22 Jan 2008 10:51:17 -0500
From: “B. R. S” <ColaDept@pbvwpswmu.info>

#4444 Subject: The Power of Green Tea.
Date: Tue, 22 Jan 2008 13:57:30 -0500
From: Green Tea Extreme <ListName@qtkwhcush.info>

#4445 Subject: Your New 2008 Entertainment Book is waiting
Date: Tue, 22 Jan 2008 12:15:27 -0500
From: “Savings book.” <holidayBook@ofkzsqncht.info>

#4446 Subject: I wasn’t Fired … even though I failed!
Date: Tue, 22 Jan 2008 09:34:45 -0500
From: Bob Allen <Rob@wxbevticlhk.info>

#4447 Subject: Take the David Bach challenge and finish rich
Date: Tue, 22 Jan 2008 11:23:59 -0500
From: Finish rich <FinishRich@eloxrumi.info>

#4448 Subject: Nike(R) Survey
Date: Tue, 22 Jan 2008 11:38:22 -0500
From: Athletic Apparel Research Survey <Footwear@dtmzhrgibxv.info>

Xsessive

Dating, Rewards, Mortgage/Debt, Spammer, Opt-Out No Comments

Domains include:

alwayssavingspioneer.com
alwayssavingspioneeronline.com
alwayssavingspioneersonline.com
alwayssavingspioneerstoday.com
alwayssavingspioneersweb.com
alwayssavingspioneertoday.com
alwayssavingspioneerweb.com
establishedpioneersweb.com
establishedsavingpioneer.com
establishedsavingspioneer.com
establishedsavingspioneeronline.com
establishedsavingspioneertoday.com
establishedsavingspioneerweb.com
fisherimprove.com
forcefrontier.com
freshfrontier.com
frontfrontier.com
frontier123.com
frontierabc.com
frontieradvice.com
frontieraffiliate.com
frontierbest.com
frontiercounsel.com
frontierdiscover.com
frontierdot.com
frontiereasy.com

#33 Subject: Walk Away from your debt
Date: Fri, 18 Jan 2008 02:07:13 +0000 (UTC)
From: Richard B <richard@frontierabc.com>

#34 Subject: Wanna mingle?
Date: Fri, 18 Jan 2008 13:55:17 +0000 (UTC)
From: Julie <julie@frontiercounsel.com>

#35 Subject: Product Tester Needed - Extra Cash for x
Date: Sat, 19 Jan 2008 20:49:09 +0000 (UTC)
From: Code #56729 <registration@forcefrontier.com>

Unknown spammer on BTN American

Employment, Great Deals, Dating, Survey, Sex/Porn, Rewards, Spammer No Comments
Hitting contributor traps with Subjects like:

 Security starts at home, and we have a great deal...

Whois cloaked. Standard template-y "Anne Smith from Dayton" Web sites.

Domains include:

learnconnection.com
makeboth.com
messageright.net
outdoorauthor.com
outdoordesigner.net
outdoorinventor.com
outdoorwright.com
passengerreport.com
passengersreport.com
philanthropiece.net
siliconedecor.com
solidamount.com
substantialcoverage.com
surveyingaerial.com
uniquewater.net
wagonfoundation.com

#1345 Subject: Do you have a Valentine this year?
Date: 18 Jan 2008 11:45:40 GMT
From: Singles Network <SinglesNet@surveyingaerial.com>

#1390 Subject: Security starts at home, and we have a great deal…
Date: 16 Jan 2008 18:39:45 GMT
From: Security System Source <SecuritySystemSource@substantialcoverage.com>

#1464 Subject: 45 Complimentary Tickets - UK’s Best Property Course
Date: 17 Jan 2008 17:42:39 GMT
From: Clash-Club <Clash-Club@siliconedecor.com>

#3738 Subject: Attn: Stay at Home Workers
Date: 20 Jan 2008 18:30:51 GMT
From: Rebate Processor Position <RebateProcessor@passengersreport.com>

#3739 Subject: Be Our Guest In Vegas For 2 Nights.
Date: 20 Jan 2008 19:07:43 GMT
From: Summer Bay Resorts <SummerBay@outdoorinventor.com>

Suavemente

Weight Loss, Degree/University, Healthcare, Dating, Great Deals, Employment, Gadget/Device, Survey, Drug Spam, Spam Support, Life Insurance Spam, Mortgage/Debt, Rewards, Get Rich Quick, Opt-Out No Comments

 

Hitting traps with Subjects like:

 Our Biggest Scholarship Giveaway Ever! You Could Win $30,000?

The Whois for the various domains shows them being reg'd to various groups;
many of the domains that aren't parked seem to share NSes on Yipes
208.116.190.96-97 or Suavemente 216.153.48.2-3 or 66.11.127.96:

ns1.deliveryloopcircuits.com.
ns1.expresspipelines.com.
ns1.facilmarketing.com.
ns1.mdnsservice.com.
ns1.pulsedemand.com.
ns2.deliveryloopcircuits.com.
ns2.expresspipelines.com.
ns2.facilmarketing.com.
ns2.interdiction.net.
ns2.mdnsservice.com.
ns2.pulsedemand.com.

Domains include:

acrossattributablecommission.com
acthelpnor.com
breakersoccupiedprotect.com
colorcontinuationrecommendations.com
connectiontommyquite.com
dealboardwhole.com
displayssciencelives.com
farmwhileboy.com
fendirect.com
festivitiessomeonesome.com
formelsethin.com
gersurface.com
happysummerfish.com
hardedgeplan.com
hardlookrange.com
hatewaitbus.com
havewrongthose.com
headagoright.com
headroomnote.com
hearintowish.com
heartwhereman.com
heattoolsteal.com
heavyhumantrack.com
helllinkprice.com
helpdropprove.com
helponcewild.com
hencehowknow.com
herjudgejoin.com
herlossdebt.com
insumgo.com
intakemovingcomputer.com
interdiction.net
knowpresentationlang.com
likeleonardhave.com
longhighname.com
malhike.com
ownsortsound.com
pluswhatlunch.com
postthursdaywill.com
predictsskipperleaks.com
runningcheckeddealer.com
startraisepiece.com
stolenfreezeconfirmed.com
taconger.com
theycompressionsincerely.com
tollpeculiarsturdy.com

 

Small selection:

 

#6315 Subject: Subscriber, Find Your Soul Mate Today! Date: Mon, 21 Jan 2008 06:58:30 GMT From: eHarmonyDating <eHarmonyDating@gersurface.com> #6316 Subject: Breaking Mortgage News - Fed Drops Rates to 4.5% Date: Mon, 21 Jan 2008 06:35:33 GMT From: Info On Rates <InfoOnRates@fendirect.com> #6317 Subject: Send a Valentines Day ecard at no cost now! Date: Mon, 21 Jan 2008 06:53:58 GMT From: Valentine eCard <ValentineeCard@fendirect.com> #6318 Subject: Watch TV on your PC in 2 minutes Date: Mon, 21 Jan 2008 07:01:02 GMT From: TVolution <TVolution@insumgo.com> #6319 Subject: Watch TV on your PC in 2 minutes Date: Mon, 21 Jan 2008 07:01:02 GMT From: TVolution <TVolution@insumgo.com> #6320 Subject: Create the kitchen you?ve always wanted Date: Mon, 21 Jan 2008 06:01:36 GMT From: Kitchen Remodeling <KitchenRemodeling@taconger.com> #6321 Subject: Play Diner Dash online - over $250,000 won daily Date: Mon, 21 Jan 2008 06:17:52 GMT From: WorldWinner UK <WorldWinnerUK@taconger.com> #6322 Subject: Play Diner Dash online - over $250,000 won daily Date: Mon, 21 Jan 2008 06:13:20 GMT From: WorldWinner UK <WorldWinnerUK@fendirect.com>

Mark: #6539

Suavemente, INC. (SUAVE-1) Suavemente, INC. (AS14572) SUAVEMENTE 14572 Suavemente, INC. SUAVEMENTE-SAN-DIEGO (NET-66-11-112-0-1) 66.11.112.0 - 66.11.127.255 Suavemente, INC. INTERDICTION-NETWORKS (NET-216-153-48-0-1) 216.153.48.0 - 216.153.63.255 Suavemente, INC. INTERDICTION-NETWORKS (NET-216-153-112-0-1) 216.153.112.0 - 216.153.127.255 Suavemente, INC. INTERDICTION-NETWORKS (NET-207-65-240-0-1) 207.65.240.0 - 207.65.247.255

#11106 Subject: 4 Days & 3 Nights Confirmation
Date: Fri, 29 Aug 2008 22:10:12 -0800
From: ParkRoyalCancun <Julieuz89@rentalvacationonline.com>

#11107 Subject: Celebrities Diet Secret Revealed!
Date: Sat, 30 Aug 2008 14:15:05 +1000
From: American Health Association <Nick@fixassess.info>

#11108 Subject: 4 Days & 3 Nights Confirmation
Date: Fri, 29 Aug 2008 22:00:52 -0800
From: ParkRoyalCancun <Julievm05@rentalsvacationworld.com>

#11109 Subject: Celebrities Diet Secret Revealed!
Date: Sat, 30 Aug 2008 11:53:57 +0400
From: American Diet institute <chris@fixassess.info>

#11110 Subject: 4 Days & 3 Nights Confirmation
Date: Fri, 29 Aug 2008 23:20:48 -0800
From: ParkRoyalCancun <Julieyz4182@superradiosurvey.com>

#11111 Subject: 4 Days & 3 Nights Confirmation
Date: Fri, 29 Aug 2008 21:50:34 -0800
From: ParkRoyalCancun <Juliety29362@rentalvacationonline.com>

Just listing Suavemente’s blocks entirely now.  They seem incabpable of anything else but spamming.  If anyone has an more netblocks known to belong to them and not listed here, please feel free to post them to news.admin.net-abuse.blocklisting with a subject of “[ASPEWS] Suavemente netblocks” and we’ll be happy to list the rest of their space.

Next Star Interactive

Rewards, Survey, Dating, Great Deals, Get Rich Quick, Affiliate Spam, Spammer, Drug Spam, Mortgage/Debt, Opt-Out No Comments
Hitting contributor traps with Subjects like:

 Structured Settlement Payments into Cash Now
 Attention Men: Get Your Hair Back in 4 Weeks - Find Out How!

Registrant:
 NextStarInteractive.com
 9625 Mission Gorge Rd.
 Suite B2-313
 Santee, CA 92071
 US
 619-330-1826

Domains include:

gobletart.com
inkburger.com
markallow.com
prompfun.com
sleepyarm.com
splashblade.com
tackjump.com
tapebend.com
upbart.com

18000+ spams indicates one should not even bother sorting the evidence.

Unknown on above.net

General Insurance, Weight Loss, Dating, Rewards, Get Rich Quick, Opt-Out, Spammer, Mortgage/Debt, Uncategorized No Comments

OrgName: Abovenet Communications, Inc
OrgID: ABVE
Address: 360 Hamilton Ave
City: White Plains
StateProv: NY
PostalCode: 10601
Country: US

ReferralServer: rwhois://rwhois.above.net:4321

NetRange: 209.249.0.0 - 209.249.255.255
CIDR: 209.249.0.0/16
NetName: ABOVENET-4
NetHandle: NET-209-249-0-0-1
Parent: NET-209-0-0-0-0
NetType: Direct Allocation
NameServer: NS.ABOVE.NET
NameServer: NS3.ABOVE.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 1998-06-15
Updated: 2001-04-27

RTechHandle: NOC41-ORG-ARIN
RTechName: AboveNet NOC
RTechPhone: +1-408-350-6451
RTechEmail: noc@above.net

OrgAbuseHandle: ABOVE-ARIN
OrgAbuseName: AboveNet Abuse
OrgAbusePhone: +1-888-636-2778
OrgAbuseEmail: abuse@above.net

OrgNOCHandle: NOC41-ORG-ARIN
OrgNOCName: AboveNet NOC
OrgNOCPhone: +1-408-350-6451
OrgNOCEmail: noc@above.net

OrgTechHandle: ABOVE1-ARIN
OrgTechName: AboveNet Engineering
OrgTechPhone: +1-888-636-2778
OrgTechEmail: arin@above.net

# ARIN WHOIS database, last updated 2008-01-12 19:10
# Enter ? for additional hints on searching ARIN’s WHOIS database.

$ whois -h rwhois.above.net -p 4321 209.249.35.220
whois: connect(): Connection refused

$ whois -h rwhois.above.net -p 4321 209.249.35.45
whois: connect(): Connection refused

As the rwhois server is not answering one has to take a potshot on the networks to list.

#4 Subject: Get the warranty protection you need today
Date: Mon, 14 Jan 2008 08:03:01 -0800
From: warrantydepartment <warrantydepartment@etfra.schiffmanciter.com>

#5 Subject: Choose a laptop and tell us what you think
Date: Tue, 15 Jan 2008 04:00:47 -0800
From: ChristmasList <ChristmasList@gfzre.barkentinehebraizes.com>

#6 Subject: Your favorite movies  Your favorite stars
Date: Tue, 15 Jan 2008 11:01:05 -0800
From: DVDCollection <DVDCollection@wckjx.ethinamatelamellary.com>

#7 Subject: Raise Your Credit Score Quickly and Legally
Date: Tue, 15 Jan 2008 19:00:31 -0800
From: CreditHelp <CreditHelp@ubpmo.catnipsunforcing.com>

#8 Subject: Why wait for payday
Date: Tue, 15 Jan 2008 12:07:31 -0800
From: QuickCashLender <QuickCashLender@jzork.sequiturricht.com>

#9 Subject: Dont spend the Holidays alone  meet Singles in Your Area
Date: Tue, 15 Jan 2008 20:00:32 -0800
From: SinglesNet <SinglesNet@artff.frenzicpropensities.com>

#10 Subject: Please let us treat you to a new laptop
Date: Wed, 16 Jan 2008 04:00:03 -0800
From: LaptopProgram <LaptopProgram@miryd.meddlementbrolga.com>

#11 Subject: Youve heard it on Oprah
Date: Wed, 16 Jan 2008 20:00:32 -0800
From: PowerTea <PowerTea@lycpc.horripilatingritter.com>

#12 Subject: Protect your vehicle
Date: Wed, 16 Jan 2008 12:00:01 -0800
From: warrantydepartment <warrantydepartment@wfepa.colossaldedicatedly.com>

ISTOR-* (iStore Networks)

Degree/University, Weight Loss, Dating, Employment, Survey, Rewards, Spammer, Drug Spam, Life Insurance Spam, Mortgage/Debt, Opt-Out No Comments

ISTOR NETWORKS (ISTOR-1)
ISTOR NETWORKS ISTOR-NE10-66-32 (NET-12-170-66-32-1) 12.170.66.32 - 12.170.66.47
OrgName:    ISTOR NETWORKS
OrgID:      ISTOR-1
Address:    7585 IRVINE CENTER DR
City:       IRV
StateProv:  CA
PostalCode: 92618
Country:    US
Comment:
RegDate:    2006-11-04
Updated:    2006-11-04

AdminHandle: DMU51-ARIN
AdminName:   MURILLO, DAVID
AdminPhone:  +1-949-753-8999
AdminEmail:  dmurillo@istor.com

TechHandle: DMU51-ARIN
TechName:   MURILLO, DAVID
TechPhone:  +1-949-753-8999
TechEmail:  dmurillo@istor.com

Resources Used By Organization:
ISTOR NETWORKS ISTOR-NE10-66-32 (NET-12-170-66-32-1) 12.170.66.32 - 12.170.66.47

# ARIN WHOIS database, last updated 2008-01-13 19:10
# Enter ? for additional hints on searching ARIN’s WHOIS database.

OrgName:    istoresearches
OrgID:      ISTOR-2
Address:    4607 Lakeview Canyon Road #262
City:       Westlake Village
StateProv:  CA
PostalCode: 91361
Country:    US
Comment:
RegDate:    2007-08-28
Updated:    2007-08-28

AdminHandle: SUPPO487-ARIN
AdminName:   SUPPORT
AdminPhone:  +1-818-574-5974
AdminEmail:  postmaster@istoresearches.com

TechHandle: SUPPO487-ARIN
TechName:   SUPPORT
TechPhone:  +1-818-574-5974
TechEmail:  postmaster@istoresearches.com

Resources Used By Organization:
istoresearches ISTORESEARCHESCOM (NET-69-56-5-8-1) 69.56.5.8 - 69.56.5.15

# ARIN WHOIS database, last updated 2008-01-13 19:10
# Enter ? for additional hints on searching ARIN’s WHOIS database.

OrgName:    istoreservices
OrgID:      ISTOR-3
Address:    4607 Lakeview Canyon Road #262
City:       Westlake Village
StateProv:  CA
PostalCode: 91361
Country:    US
Comment:
RegDate:    2007-08-28
Updated:    2007-08-28

AdminHandle: SUPPO488-ARIN
AdminName:   SUPPORT
AdminPhone:  +1-818-574-5974
AdminEmail:  postmaster@istoreservices.com

TechHandle: SUPPO488-ARIN
TechName:   SUPPORT
TechPhone:  +1-818-574-5974
TechEmail:  postmaster@istoreservices.com

Resources Used By Organization:
istoreservices ISTORESERVICESCOM (NET-69-56-5-16-1) 69.56.5.16 - 69.56.5.23

# ARIN WHOIS database, last updated 2008-01-13 19:10
# Enter ? for additional hints on searching ARIN’s WHOIS database.

OrgName:    istoreshopper
OrgID:      ISTOR-4
Address:    4607 Lakeview Canyon Road #262
City:       Westlake Village
StateProv:  CA
PostalCode: 91361
Country:    US
Comment:
RegDate:    2007-08-28
Updated:    2007-08-28

AdminHandle: SUPPO489-ARIN
AdminName:   SUPPORT
AdminPhone:  +1-818-574-5974
AdminEmail:  postmaster@istoreshopper.com

TechHandle: SUPPO489-ARIN
TechName:   SUPPORT
TechPhone:  +1-818-574-5974
TechEmail:  postmaster@istoreshopper.com

Resources Used By Organization:
istoreshopper ISTORESHOPPERCOM (NET-69-56-5-24-1) 69.56.5.24 - 69.56.5.31

# ARIN WHOIS database, last updated 2008-01-13 19:10
# Enter ? for additional hints on searching ARIN’s WHOIS database.
OrgName:    istorespecials
OrgID:      ISTOR-5
Address:    4607 Lakeview Canyon Road #262
City:       Westlake Village
StateProv:  CA
PostalCode: 91361
Country:    US
Comment:
RegDate:    2007-08-28
Updated:    2007-08-28

AdminHandle: SUPPO490-ARIN
AdminName:   SUPPORT
AdminPhone:  +1-818-574-5974
AdminEmail:  postmaster@istorespecials.com

TechHandle: SUPPO490-ARIN
TechName:   SUPPORT
TechPhone:  +1-818-574-5974
TechEmail:  postmaster@istorespecials.com

Resources Used By Organization:
istorespecials ISTORESPECIALSCOM (NET-69-56-5-32-1) 69.56.5.32 - 69.56.5.39

# ARIN WHOIS database, last updated 2008-01-13 19:10
# Enter ? for additional hints on searching ARIN’s WHOIS database.

Forumhoster / Staminus

Weight Loss, Dating, Property, Rewards, Get Rich Quick, Illegal Software, Drug Spam, Spammer No Comments
First time around:
OrgName:    Staminus Communications
OrgID:      STAMIN-2
Address:    502 S. Harbor Blvd. Fullerton, CA 92832
City:       Fullerton
StateProv:  CA
PostalCode: 92832
Country:    US

ReferralServer: rwhois://rwhois.staminus.net:4321

NetRange:   72.8.128.0 - 72.8.159.255
CIDR:       72.8.128.0/19
NetName:    STAMINUS-COMMUNICATIONS
NetHandle:  NET-72-8-128-0-1
Parent:     NET-72-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.STAMINUS.NET
NameServer: NS2.STAMINUS.NET
NameServer: NS3.STAMINUS.NET
NameServer: NS4.STAMINUS.NET
NameServer: NS5.STAMINUS.NET
NameServer: NS6.STAMINUS.NET
Comment:
RegDate:    2006-09-14
Updated:    2006-09-14

RAbuseHandle: MAHVI-ARIN
RAbuseName:   Mahvi, Mehdi
RAbusePhone:  +1-949-551-3385
RAbuseEmail:  mmahvi@staminus.net

RNOCHandle: MAHVI-ARIN
RNOCName:   Mahvi, Mehdi
RNOCPhone:  +1-949-551-3385
RNOCEmail:  mmahvi@staminus.net

RTechHandle: MAHVI-ARIN
RTechName:   Mahvi, Mehdi
RTechPhone:  +1-949-551-3385
RTechEmail:  mmahvi@staminus.net

OrgTechHandle: MAHVI-ARIN
OrgTechName:   Mahvi, Mehdi
OrgTechPhone:  +1-949-551-3385
OrgTechEmail:  mmahvi@staminus.net

# ARIN WHOIS database, last updated 2008-01-11 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
network:IP-Network:72.8.131.48/28
network:IP-Network-Block:72.8.131.48 - 72.8.131.63
network:Organization;I:forumhoster
network:Tech-Contact;I:abuse@staminus.net, melindagutierrez@yours.com
network:Admin-Contact;I:NA
Now one sees:
$ whois -h rwhois.staminus.net -p 4321 72.8.131.161
%rwhois V-1.5:003eff:00 rwhois.staminus.net (by Network Solutions, Inc. V-1.5.9)
%error 230 No Objects Found
$ whois -h rwhois.staminus.net -p 4321 72.8.131.160
%rwhois V-1.5:003eff:00 rwhois.staminus.net (by Network Solutions, Inc. V-1.5.9)
%error 230 No Objects Found
$ whois -h rwhois.staminus.net -p 4321 72.8.131.128
%rwhois V-1.5:003eff:00 rwhois.staminus.net (by Network Solutions, Inc. V-1.5.9)
%error 230 No Objects Found
$ whois -h rwhois.staminus.net -p 4321 72.8.131.48
%rwhois V-1.5:003eff:00 rwhois.staminus.net (by Network Solutions, Inc. V-1.5.9)
%error 230 No Objects Found
Leaves no option but to escalate.

134.131.8.72.in-addr.arpa domain name pointer .
135.131.8.72.in-addr.arpa domain name pointer .
136.131.8.72.in-addr.arpa domain name pointer .
137.131.8.72.in-addr.arpa domain name pointer .
138.131.8.72.in-addr.arpa domain name pointer .
139.131.8.72.in-addr.arpa domain name pointer .
140.131.8.72.in-addr.arpa domain name pointer .
141.131.8.72.in-addr.arpa domain name pointer .
142.131.8.72.in-addr.arpa domain name pointer .
143.131.8.72.in-addr.arpa domain name pointer .
144.131.8.72.in-addr.arpa domain name pointer .
145.131.8.72.in-addr.arpa domain name pointer .
146.131.8.72.in-addr.arpa domain name pointer .
147.131.8.72.in-addr.arpa domain name pointer .
148.131.8.72.in-addr.arpa domain name pointer .
149.131.8.72.in-addr.arpa domain name pointer .
150.131.8.72.in-addr.arpa domain name pointer .
151.131.8.72.in-addr.arpa domain name pointer .
152.131.8.72.in-addr.arpa domain name pointer .
153.131.8.72.in-addr.arpa domain name pointer .
154.131.8.72.in-addr.arpa domain name pointer .
155.131.8.72.in-addr.arpa domain name pointer .
156.131.8.72.in-addr.arpa domain name pointer .
157.131.8.72.in-addr.arpa domain name pointer .
158.131.8.72.in-addr.arpa domain name pointer .
159.131.8.72.in-addr.arpa domain name pointer .
160.131.8.72.in-addr.arpa domain name pointer .
161.131.8.72.in-addr.arpa domain name pointer pwhplsu.emailov371.com.
162.131.8.72.in-addr.arpa domain name pointer oqfze.emailov372.com.
163.131.8.72.in-addr.arpa domain name pointer nwqu.emailov373.com.
164.131.8.72.in-addr.arpa domain name pointer opxksj.emailov374.com.
165.131.8.72.in-addr.arpa domain name pointer jyzcy.emailov375.com.
166.131.8.72.in-addr.arpa domain name pointer ygdkz.emailov376.com.
167.131.8.72.in-addr.arpa domain name pointer aoo.emailov377.com.
168.131.8.72.in-addr.arpa domain name pointer ntvbpm.emailov378.com.
169.131.8.72.in-addr.arpa domain name pointer vbk.emailov379.com.
170.131.8.72.in-addr.arpa domain name pointer lcbz.emailov380.com.
171.131.8.72.in-addr.arpa domain name pointer zypyn.emailov381.com.
172.131.8.72.in-addr.arpa domain name pointer frzep.emailov382.com.
173.131.8.72.in-addr.arpa domain name pointer sef.emailov383.com.
174.131.8.72.in-addr.arpa domain name pointer xbhnnc.emailov384.com.
175.131.8.72.in-addr.arpa domain name pointer rpcxj.emailov574.com.
176.131.8.72.in-addr.arpa domain name pointer mzbdnt.emailov575.com.
177.131.8.72.in-addr.arpa domain name pointer wjfeczf.emailov576.com.
178.131.8.72.in-addr.arpa domain name pointer ixis.emailov577.com.
179.131.8.72.in-addr.arpa domain name pointer xvmtgdi.emailov578.com.
180.131.8.72.in-addr.arpa domain name pointer brrort.emailov579.com.
181.131.8.72.in-addr.arpa domain name pointer ensb.emailov580.com.
182.131.8.72.in-addr.arpa domain name pointer yfz.emailov581.com.
183.131.8.72.in-addr.arpa domain name pointer kpg.emailov582.com.
184.131.8.72.in-addr.arpa domain name pointer yzkvux.emailov583.com.
185.131.8.72.in-addr.arpa domain name pointer abxjc.emailov584.com.
186.131.8.72.in-addr.arpa domain name pointer brguj.emailov585.com.
187.131.8.72.in-addr.arpa domain name pointer hcnea.emailov586.com.
188.131.8.72.in-addr.arpa domain name pointer dzdt.emailov587.com.
189.131.8.72.in-addr.arpa domain name pointer lrfwna.emailov588.com.
190.131.8.72.in-addr.arpa domain name pointer cbuz.emailov589.com.
191.131.8.72.in-addr.arpa domain name pointer .
192.131.8.72.in-addr.arpa domain name pointer .
193.131.8.72.in-addr.arpa domain name pointer .
194.131.8.72.in-addr.arpa domain name pointer .
195.131.8.72.in-addr.arpa domain name pointer .
196.131.8.72.in-addr.arpa domain name pointer .
197.131.8.72.in-addr.arpa domain name pointer .
198.131.8.72.in-addr.arpa domain name pointer .
199.131.8.72.in-addr.arpa domain name pointer .
200.131.8.72.in-addr.arpa domain name pointer .
201.131.8.72.in-addr.arpa domain name pointer .
202.131.8.72.in-addr.arpa domain name pointer .
203.131.8.72.in-addr.arpa domain name pointer .
204.131.8.72.in-addr.arpa domain name pointer .
205.131.8.72.in-addr.arpa domain name pointer .
206.131.8.72.in-addr.arpa domain name pointer .
207.131.8.72.in-addr.arpa domain name pointer .
208.131.8.72.in-addr.arpa domain name pointer .
209.131.8.72.in-addr.arpa domain name pointer .
210.131.8.72.in-addr.arpa domain name pointer .
211.131.8.72.in-addr.arpa domain name pointer .
212.131.8.72.in-addr.arpa domain name pointer .
213.131.8.72.in-addr.arpa domain name pointer .
214.131.8.72.in-addr.arpa domain name pointer .
215.131.8.72.in-addr.arpa domain name pointer .
216.131.8.72.in-addr.arpa domain name pointer .
217.131.8.72.in-addr.arpa domain name pointer .
218.131.8.72.in-addr.arpa domain name pointer .
219.131.8.72.in-addr.arpa domain name pointer .
220.131.8.72.in-addr.arpa domain name pointer .
221.131.8.72.in-addr.arpa domain name pointer .
222.131.8.72.in-addr.arpa domain name pointer .
223.131.8.72.in-addr.arpa domain name pointer .
224.131.8.72.in-addr.arpa domain name pointer .
225.131.8.72.in-addr.arpa domain name pointer .
226.131.8.72.in-addr.arpa domain name pointer .
227.131.8.72.in-addr.arpa domain name pointer .
228.131.8.72.in-addr.arpa domain name pointer .
229.131.8.72.in-addr.arpa domain name pointer .
230.131.8.72.in-addr.arpa domain name pointer .
231.131.8.72.in-addr.arpa domain name pointer .
232.131.8.72.in-addr.arpa domain name pointer .
233.131.8.72.in-addr.arpa domain name pointer .
234.131.8.72.in-addr.arpa domain name pointer .
235.131.8.72.in-addr.arpa domain name pointer .
236.131.8.72.in-addr.arpa domain name pointer .
237.131.8.72.in-addr.arpa domain name pointer .
238.131.8.72.in-addr.arpa domain name pointer .
239.131.8.72.in-addr.arpa domain name pointer .
240.131.8.72.in-addr.arpa domain name pointer .
241.131.8.72.in-addr.arpa domain name pointer .
242.131.8.72.in-addr.arpa domain name pointer .
243.131.8.72.in-addr.arpa domain name pointer .
244.131.8.72.in-addr.arpa domain name pointer .
245.131.8.72.in-addr.arpa domain name pointer .
246.131.8.72.in-addr.arpa domain name pointer .
247.131.8.72.in-addr.arpa domain name pointer .
248.131.8.72.in-addr.arpa domain name pointer .
249.131.8.72.in-addr.arpa domain name pointer .
250.131.8.72.in-addr.arpa domain name pointer .
251.131.8.72.in-addr.arpa domain name pointer .
252.131.8.72.in-addr.arpa domain name pointer .
253.131.8.72.in-addr.arpa domain name pointer .
254.131.8.72.in-addr.arpa domain name pointer .
255.131.8.72.in-addr.arpa domain name pointer .
#1 Subject: Not using your timeshare? Let us buy, rent or sell it for you!
   Date: Mon, 7 Jan 2008 13:09:35 -0500, Mon, 7 Jan 2008 13:09:35 -0500 (EST)
   From: SellTimeshare <SellTimeshare@enable-your-net.com>

#2 Subject: 100% Earth Friendly Kitty Litter
   Date: Wed, 9 Jan 2008 09:52:24 -0500, Wed, 9 Jan 2008 09:52:23 -0500 (EST)
   From: Perfect Litter <PetEcology@acceleration-sites.com>

#3 Subject: Profit with Google
   Date: Fri, 4 Jan 2008 13:59:30 -0500, Fri, 4 Jan 2008 13:59:29 -0500 (EST)
   From: Google University <Google@solution-on-mail.com>

#4 Subject: Do you play the slots?
   Date: Thu, 3 Jan 2008 11:13:19 -0500, Thu, 3 Jan 2008 11:13:19 -0500 (EST)
   From: Slot Machines <SlotMachines@rent-my-money.com>

#5 Subject: Clean Dirt Faster and Easier with the Swivel Sweeper
   Date: Tue, 8 Jan 2008 08:33:38 -0500, Tue, 8 Jan 2008 08:33:37 -0500 (EST)
   From: Household Goods <HouseholdGoods@search-your-site.com>

#6 Subject: Second attempt: Kmart gift card worth* $250.00 inside
   Date: Mon, 31 Dec 2007 13:09:54 -0500, Mon, 31 Dec 2007 13:09:54 -0500 (EST)
   From: StoreSurvey <StoreSurvey@buy-my-trade.com>

#7 Subject: Profit with Google
   Date: Fri, 4 Jan 2008 12:18:49 -0500, Fri, 4 Jan 2008 12:18:49 -0500 (EST)
   From: Google University <Google@solution-on-mail.com>

#8 Subject: Restore your hair with Bosley
   Date: Tue, 1 Jan 2008 12:42:05 -0500, Tue, 1 Jan 2008 12:42:05 -0500 (EST)
   From: Hair Restoration <HairRestoration@who-is-email.com>

#9 Subject: Instructions to Copy DVD Movies Legally
   Date: Mon, 31 Dec 2007 17:30:32 -0500, Mon, 31 Dec 2007 17:30:32 -0500 (EST)
   From: Legal DVD Copying Program Instructions <DVD@buy-my-trade.com>

#10 Subject: Restore your hair with Bosley
   Date: Tue, 1 Jan 2008 13:47:23 -0500, Tue, 1 Jan 2008 13:47:23 -0500 (EST)
   From: Hair Restoration <HairRestoration@who-is-email.com>

#11 Subject: Restore your hair with Bosley
   Date: Tue, 1 Jan 2008 12:41:02 -0500, Tue, 1 Jan 2008 12:41:02 -0500 (EST)
   From: Hair Restoration <HairRestoration@who-is-email.com>

#12 Subject: Get a fast tax refund free.
   Date: Tue, 8 Jan 2008 16:00:52 -0500, Tue, 8 Jan 2008 16:00:44 -0500 (EST)
   From: TaxACT <TaxACT@search-your-site.com>

#13 Subject: No Kidding -- There are 6 cashiers with up to $1,500 for you
   Date: Fri, 4 Jan 2008 16:33:48 -0500, Fri, 4 Jan 2008 16:33:48 -0500 (EST)
   From: Extra Payday <ExtraPayday@solution-on-mail.com>

#14 Subject: No Kidding -- There are 6 cashiers with up to $1,500 for you
   Date: Fri, 4 Jan 2008 15:06:30 -0500, Fri, 4 Jan 2008 15:06:30 -0500 (EST)
   From: Extra Payday <ExtraPayday@solution-on-mail.com>

#15 Subject: ADULT DATING network with thousands of SINGLES
   Date: Thu, 3 Jan 2008 16:04:28 -0500, Thu, 3 Jan 2008 16:04:28 -0500 (EST)
   From: DatingAdultPersonals <DatingAdultPersonals@rent-my-money.com>

#16 Subject: Meet Single Christians This Fall
   Date: Wed, 9 Jan 2008 13:28:46 -0500, Wed, 9 Jan 2008 13:28:46 -0500 (EST)
   From: Dating Romance <DatingRomance@acceleration-sites.com>

#17 Subject: $500 Target Holiday Shopping Gift Card
   Date: Tue, 1 Jan 2008 08:32:39 -0500, Tue, 1 Jan 2008 08:32:39 -0500 (EST)
   From: Department Store Surveys <DepartmentStoreSurveys@who-is-email.com>

#18 Subject: Lose up to 20 pounds, try our FREE TRIAL
   Date: Tue, 8 Jan 2008 10:15:27 -0500, Tue, 8 Jan 2008 10:15:27 -0500 (EST)
   From: US Business <USBusiness@search-your-site.com>

#19 Subject: $500 Target Holiday Shopping Gift Card
   Date: Tue, 1 Jan 2008 09:11:09 -0500, Tue, 1 Jan 2008 09:11:09 -0500 (EST)
   From: Department Store Surveys <DepartmentStoreSurveys@who-is-email.com>

#20 Subject: Legal World Wide Internet TV Now available
   Date: Fri, 4 Jan 2008 10:20:34 -0500, Fri, 4 Jan 2008 10:20:33 -0500 (EST)
   From: Instructions to watch Internet TV <PCTV@solution-on-mail.com>

#21 Subject: ADULT DATING network with thousands of SINGLES
   Date: Thu, 3 Jan 2008 15:43:54 -0500, Thu, 3 Jan 2008 15:43:54 -0500 (EST)
   From: DatingAdultPersonals <DatingAdultPersonals@rent-my-money.com>

#22 Subject: Clean Dirt Faster and Easier with the Swivel Sweeper
   Date: Tue, 8 Jan 2008 08:15:04 -0500, Tue, 8 Jan 2008 08:15:04 -0500 (EST)
   From: Household Goods <HouseholdGoods@search-your-site.com>

#23 Subject: ADULT DATING network with thousands of SINGLES
   Date: Thu, 3 Jan 2008 16:46:50 -0500, Thu, 3 Jan 2008 16:46:50 -0500 (EST)
   From: DatingAdultPersonals <DatingAdultPersonals@rent-my-money.com>

#24 Subject: Second attempt: Kmart gift card worth* $250.00 inside
   Date: Mon, 31 Dec 2007 12:14:10 -0500, Mon, 31 Dec 2007 12:14:10 -0500 (EST)
   From: StoreSurvey <StoreSurvey@buy-my-trade.com>

#25 Subject: Cash in with Google
   Date: Wed, 9 Jan 2008 15:17:30 -0500, Wed, 9 Jan 2008 15:17:30 -0500 (EST)
   From: GoogleBusiness <GoogleBusiness@acceleration-sites.com>

#26 Subject: Discover the weight loss secret from Brazil!
   Date: Mon, 31 Dec 2007 09:27:30 -0500, Mon, 31 Dec 2007 09:27:30 -0500 (EST)
   From: Cordiaburn <Cordiaburn@buy-my-trade.com>

#27 Subject: Exclusive: New revolutionary technology reduces the appearance of cellulite
   Date: Wed, 9 Jan 2008 07:47:51 -0500, Wed, 9 Jan 2008 07:47:51 -0500 (EST)
   From: Body Shape <BodyShape@acceleration-sites.com>

#28 Subject: Get a fast tax refund free.
   Date: Tue, 8 Jan 2008 16:03:55 -0500, Tue, 8 Jan 2008 16:03:55 -0500 (EST)
   From: TaxACT <TaxACT@search-your-site.com>

#29 Subject: Discover the weight loss secret from Brazil!
   Date: Mon, 31 Dec 2007 09:52:43 -0500, Mon, 31 Dec 2007 09:52:43 -0500 (EST)
   From: Cordiaburn <Cordiaburn@buy-my-trade.com>

#30 Subject: Discover the weight loss secret from Brazil!
   Date: Mon, 31 Dec 2007 09:35:23 -0500, Mon, 31 Dec 2007 09:35:23 -0500 (EST)
   From: Cordiaburn <Cordiaburn@buy-my-trade.com>

#31 Subject: Do you play the slots?
   Date: Thu, 3 Jan 2008 10:56:55 -0500, Thu, 3 Jan 2008 10:56:54 -0500 (EST)
   From: Slot Machines <SlotMachines@rent-my-money.com>

#55534 Subject: Concerned about your finances?
Date: Fri, 29 Aug 2008 15:09:17 -0800
From: Federal Grant Advisors <grants@silverfine.com>

#55535 Subject: YouCouldGetAn OVERNIGHT AdvanceOf Up to 15OO Bucks
Date: Fri, 29 Aug 2008 11:56:01 -0500
From: CashAdvance <CashAdvance@northreadingtech.com>

#55536 Subject: Deborah Fairfield, YouCouldGetAn OVERNIGHT AdvanceOf Up to 15OO Bucks
Date: Fri, 29 Aug 2008 11:11:14 -0500
From: CashAdvance <CashAdvance@lessertiacorporate.com>

#55537 Subject: Miosotiz Gonzalez, YOUR Payday Loan is READY
Date: Fri, 29 Aug 2008 11:57:07 -0500
From: ForCASHTryHotCashLoans <ForCASHTryHotCashLoans@tealfederation.com>

#55538 Subject: Concerned about your finances?
Date: Sat, 30 Aug 2008 00:15:10 -0800
From: FGA <coidx@tablesharbor.com>

#55539 Subject: Ruth Anderson, YOUR Payday Loan is READY
Date: Fri, 29 Aug 2008 11:11:07 -0500
From: ForCASHTryHotCashLoans <ForCASHTryHotCashLoans@northreadingtech.com>

#55540 Subject: Concerned about your finances?
Date: Sat, 30 Aug 2008 00:18:39 -0800
From: Federal Grant Advisors <xqmkbx@buzzexpect.com>

#55541 Subject: Federal Funds Are Available To You
Date: Sat, 30 Aug 2008 00:26:37 -0800
From: FGA <xlgsl@spankind.com>

#55542 Subject: Concerned about your finances? The Federal Government can help
Date: Fri, 29 Aug 2008 22:52:16 -0800
From: FGA <ywsokx@azuretrip.com>