1emarketing/hostony/7cash/saveonwebhost/alwayswebhosting - spammers and Usenet harvesters! 1emarketing.com, hostony.com, 7cash.com, 7cash.us, saveonwebhost.com, alwayswebhosting.com, [66.220.25.0 - 66.220.25.255], [192.220.171.0 - 192.220.171.255], [203.177.80.0 - 203.177.80.255], [207.44.144.0 - 207.44.144.255], [209.51.138.24 - 209.51.138.31], [216.127.88.3]: Access denied! === My 1st complaint === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Spam (Usenet harvest, spam services: 1emarketing.com/7cash.us)! [Fwd: $email Join me in a moneymaking no brainer with 31000 emails provided by 7cash.us and bulk softwre by 1emarketing.com] Date: Thu, 10 Apr 2003 00:23:31 +0300 User-Agent: KMail/1.4.3 X-KMail-Link-Message: 1339680 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, abuse@rr.com, abuse@dv2.net, hostmaster@dv2.net, abuse@globe.com.ph, postmaster@globe.com.ph, aldrinpy@globenet.com.ph, apyalung@globetel.com.ph, abuse@verio.net, postmaster@verio.net, support@NameCheap.com, beverly@proactive-web.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200304100023.31778@2003.dolphinwave.org> Status: RO X-Status: S Spam on my e-mail address, used for the news.admin.net-abuse.email Usenet posts in this year only (usenet-Apr+nanae@2003... - tagged), and harvested from there! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: dhcp16620096.indy.rr.com [24.166.20.96] Mail from: bulletproof@7cash.us Remove box: unsusbcribe@7cash.us Spamvertised web pages: http://www.1emarketing.com http://www.7cash.us www.1emarketing.com [209.51.138.26] (ns1.hostony.com) =================== Contact: support@NameCheap.com Domain name: 1emarketing.com Registrant Info: THEONE SA catherine thoms (catherine_thoms@yahoo.com) +888608499552 FAX: +888608499552 105 london drive #1 Hong Kong, HO H4320 HK Administrative Info: THEONE SA catherine thoms (catherine2002@softhome.net) +888608499552 FAX: +888608499552 105 london drive #1 Hong Kong, HO H4320 HK Billing Info: THEONE SA catherine thoms (catherine2002@softhome.net) +888608499552 FAX: +888608499552 105 london drive #1 Hong Kong, HO H4320 HK Technical Info: THEONE SA catherine thoms (catherine_thoms@yahoo.com) +888608499552 FAX: +888608499552 105 london drive #1 Hong Kong, HO H4320 HK Status: ACTIVE Note: To help prevent fraudulent or erroneous transfers, we encourage registrants to place their domains on "lock" status with their current registrar. Name servers: ns1.hostony.com ns2.hostony.com Creation date: Dec 09 2002 00:00:00 Expiration date: Dec 09 2003 00:00:00 eBizServers-422 IP block [209.51.138.24/29] which is in the Net Depot IP range [209.51.128.0 - 209.51.159.255]. Upstream: Net Depot (atl-core-b.dv2.net). Nameservers: hostony.com <== SPAMMERS. ns2.hostony.com [192.220.171.248] =============== JPI Network IP block [192.220.171.0 - 192.220.171.255] which is in the Verio IP range [192.220.128.0 - 192.220.255.255]. Upstream: Verio (d1-0-3-0-22.a12.sttlwa01.us.ce.verio.net). www.7cash.us [203.177.80.254] (BPNS1.SAVEONWEBHOST.COM) ============ Domain Name: 7CASH.US Domain ID: D3898963-US Sponsoring Registrar: ENOM, INC. Domain Status: ok Registrant ID: E6005BFACDBFAE30 Registrant Name: cathy thoms Registrant Organization: starter1 Registrant Address1: 1 rue des fleurs Registrant City: vincennes Registrant Postal Code: 94300 Registrant Country: France Registrant Country Code: FR Registrant Email: cathyrose@softhome.net Registrant Application Purpose: P1 Registrant Nexus Category: C12 Administrative Contact ID: B7C82FE703FD3FC8 Administrative Contact Name: cathy thoms Administrative Contact Organization: starter1 Administrative Contact Address1: 1 rue des fleurs Administrative Contact City: vincennes Administrative Contact Postal Code: 94300 Administrative Contact Country: France Administrative Contact Country Code: FR Administrative Contact Email: cathyrose@softhome.net Billing Contact ID: 66A737C1055B1A00 Billing Contact Name: cathy thoms Billing Contact Organization: starter1 Billing Contact Address1: 1 rue des fleurs Billing Contact City: vincennes Billing Contact Postal Code: 94300 Billing Contact Country: France Billing Contact Country Code: FR Billing Contact Email: cathyrose@softhome.net Technical Contact ID: 1F17D0CF201CD96F Technical Contact Name: cathy thoms Technical Contact Organization: starter1 Technical Contact Address1: 1 rue des fleurs Technical Contact City: vincennes Technical Contact Postal Code: 94300 Technical Contact Country: France Technical Contact Country Code: FR Technical Contact Email: cathyrose@softhome.net Name Server: BPNS1.SAVEONWEBHOST.COM Name Server: BPNS2.SAVEONWEBHOST.COM Name Server: BPNS3.SAVEONWEBHOST.COM Created by Registrar: ENOM, INC. Last Updated by Registrar: ENOM, INC. Domain Registration Date: Mon Mar 17 13:02:36 GMT 2003 Domain Expiration Date: Tue Mar 16 23:59:59 GMT 2004 Domain Last Updated Date: Wed Apr 02 19:26:58 GMT 2003 >>>> Whois database was last updated on: Wed Apr 09 21:14:06 GMT 2003 <<<< Globe Telecom, Philippines IP block [203.177.80.0 - 203.177.80.255]. Upstream: Globe Telecom (manda-cisco-7513.globenet.com.ph). Nameservers: SAVEONWEBHOST.COM <== SPAMMERS. BPNS2.SAVEONWEBHOST.COM [203.177.80.253] ======================= Registration Service Provided By: Proactive Productions Contact: beverly@proactive-web.com Domain name: SAVEONWEBHOST.COM Name servers: NS3.DOMAIN34.COM ns5.domain34.com ns6.domain34.com BPNS1.SAVEONWEBHOST.COM NS1.DOMAIN34.NET NS1.DOMAIN34.COM BPNS3.SAVEONWEBHOST.COM BPNS2.SAVEONWEBHOST.COM Created: Oct 30 2001 19:06:12 Expires: Oct 30 2003 19:06:12 Registrant Contact: SavetheHost Co. Ning Achacoso (postmaster@saveonwebhost.com) +1.+63.3748963 FAX: +1.632374095 12 Windville Mendale Ave., Pasig, 1600 PH Administrative Contact: SavetheHost Co. Jason YUU (admin@saveonwebhost.com) +1.+63.3748963 FAX: +1.6323734095 12 Windville Mendale Ave., Pasig, 1600 PH Billing Contact: SavetheHost Co. Ning Achacoso (postmaster@saveonwebhost.com) +1.+63.3748963 FAX: +1.632374095 12 Windville Mendale Ave., Pasig, 1600 PH Technical Contact: SavetheHOst Co. Ling Chee (ling@saveonwebhost.com) +1.+63.3748963 FAX: +1.6323734095 12 Windville Mendale Ave., Pasig, 1600 PH Globe Telecom, Philippines IP block [203.177.80.0 - 203.177.80.255]. Upstream: Globe Telecom (manda-cisco-7513.globenet.com.ph). Nameservers: SAVEONWEBHOST.COM <== SPAMMERS. ---------- Forwarded Message ---------- Received: from bigboss.WorldNetSys.com (dhcp16620096.indy.rr.com [24.166.20.96]) by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id h39JjaV08910 for ; Wed, 9 Apr 2003 23:26:08 +0300 Received: from 7cash.us ([200.72.53.214]) by bigboss.WorldNetSys.com with Microsoft SMTPSVC(5.0.2195.5329); Wed, 9 Apr 2003 15:25:05 -0500 From: bulletproof@7cash.us To: usenet-Apr+nanae@2003.### Subject: $email Join me in a moneymaking no brainer with 31000 emails provided by 7cash.us and bulk softwre by 1emarketing.com X-Priority: 3 Content-Type: text/html Message-ID: X-OriginalArrivalTime: 09 Apr 2003 20:25:07.0074 (UTC) FILETIME=[1C481E20:01C2FED6] Date: 9 Apr 2003 15:25:07 -0500 Status: R X-Status: N Mail1

 

Dear $name, I have just joined this great deal and your name was provided by the owners of the system as an opt in email address so you know you really want to see hwt is on offer!

Get involved with me and I will provide you with 31,000 leads a day to mail to just like this mail.

If you want to see how good the bulkmailing software is thenread these testimoinalis

Breaking news !

The biggest Automatic Profit Generator ?
Bulk Mail and Leads Provided to you - ALL opt IN no risk!!






Try it now !!!


NOTE: This email was sent to you using bulkemail software because your email is part of a targeted 7CASH list. If you do not wish to receive further mailings, please click below and enter your email at the bottom of the page. You may then rest-assured that you will never receive another email from us again. UNSUBSCRIBE ME PLEASE<
------------------------------------------------------- === My 2nd complaint === Content-Type: text/plain;   charset="iso-8859-1" From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Repeating spams (Usenet harvest, spam services: 1emarketing.com/7cash.us)! [Fwd: 7CASH.US - You will be a millionaire in no time!] Date: Thu, 10 Apr 2003 00:29:04 +0300 User-Agent: KMail/1.4.3 X-KMail-Link-Message: 1339681 X-KMail-Link-Type: forward To: ,  uce@ftc.gov,  nanas-sub@cybernothing.org,  abuse@cv.net,  abuse@dv2.net,  hostmaster@dv2.net,  abuse@globe.com.ph,  postmaster@globe.com.ph,  aldrinpy@globenet.com.ph,  apyalung@globetel.com.ph,  abuse@verio.net,  postmaster@verio.net,  support@NameCheap.com,  beverly@proactive-web.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133  FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200304100029.04721@2003.dolphinwave.org> Status: RO X-Status: S This is the second, the same spam from these abusers, sent to my e-mail address, used for the news.admin.net-abuse.email Usenet posts in this year only (usenet-Apr+nanae@2003... - tagged), and harvested from there! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: ool-18bf737d.dyn.optonline.net [24.191.115.125] Mail from: unsusbcribe@7cash.us Spamvertised web pages: http://www.1emarketing.com http://www.7cash.us www.1emarketing.com [209.51.138.26]  (ns1.hostony.com) =================== Contact: support@NameCheap.com Domain name: 1emarketing.com Registrant Info:    THEONE SA    catherine thoms   (catherine_thoms@yahoo.com)    +888608499552    FAX: +888608499552    105 london drive    #1    Hong Kong, HO H4320    HK Administrative Info:    THEONE SA    catherine thoms   (catherine2002@softhome.net)    +888608499552    FAX: +888608499552    105 london drive    #1    Hong Kong, HO H4320    HK Billing Info:    THEONE SA    catherine thoms   (catherine2002@softhome.net)    +888608499552    FAX: +888608499552    105 london drive    #1    Hong Kong, HO H4320    HK Technical Info:    THEONE SA    catherine thoms   (catherine_thoms@yahoo.com)    +888608499552    FAX: +888608499552    105 london drive    #1    Hong Kong, HO H4320    HK Status: ACTIVE   Note: To help prevent fraudulent or erroneous         transfers, we encourage registrants to place their domains on "lock"         status with their current registrar. Name servers:     ns1.hostony.com     ns2.hostony.com Creation date: Dec 09 2002 00:00:00 Expiration date: Dec 09 2003 00:00:00 eBizServers-422 IP block [209.51.138.24/29]  which is in the Net Depot IP range [209.51.128.0 - 209.51.159.255]. Upstream: Net Depot (atl-core-b.dv2.net). Nameservers: hostony.com  <== SPAMMERS. ns2.hostony.com [192.220.171.248] =============== JPI Network IP block [192.220.171.0 - 192.220.171.255]  which is in the Verio IP range [192.220.128.0 - 192.220.255.255]. Upstream: Verio (d1-0-3-0-22.a12.sttlwa01.us.ce.verio.net). www.7cash.us [203.177.80.254] (BPNS1.SAVEONWEBHOST.COM) ============ Domain Name:                                 7CASH.US Domain ID:                                   D3898963-US Sponsoring Registrar:                        ENOM, INC. Domain Status:                               ok Registrant ID:                               E6005BFACDBFAE30 Registrant Name:                             cathy thoms Registrant Organization:                     starter1 Registrant Address1:                         1 rue des fleurs Registrant City:                             vincennes Registrant Postal Code:                      94300 Registrant Country:                          France Registrant Country Code:                     FR Registrant Email:                            cathyrose@softhome.net Registrant Application Purpose:              P1 Registrant Nexus Category:                   C12 Administrative Contact ID:                   B7C82FE703FD3FC8 Administrative Contact Name:                 cathy thoms Administrative Contact Organization:         starter1 Administrative Contact Address1:             1 rue des fleurs Administrative Contact City:                 vincennes Administrative Contact Postal Code:          94300 Administrative Contact Country:              France Administrative Contact Country Code:         FR Administrative Contact Email:                cathyrose@softhome.net Billing Contact ID:                          66A737C1055B1A00 Billing Contact Name:                        cathy thoms Billing Contact Organization:                starter1 Billing Contact Address1:                    1 rue des fleurs Billing Contact City:                        vincennes Billing Contact Postal Code:                 94300 Billing Contact Country:                     France Billing Contact Country Code:                FR Billing Contact Email:                       cathyrose@softhome.net Technical Contact ID:                        1F17D0CF201CD96F Technical Contact Name:                      cathy thoms Technical Contact Organization:              starter1 Technical Contact Address1:                  1 rue des fleurs Technical Contact City:                      vincennes Technical Contact Postal Code:               94300 Technical Contact Country:                   France Technical Contact Country Code:              FR Technical Contact Email:                     cathyrose@softhome.net Name Server:                                 BPNS1.SAVEONWEBHOST.COM Name Server:                                 BPNS2.SAVEONWEBHOST.COM Name Server:                                 BPNS3.SAVEONWEBHOST.COM Created by Registrar:                        ENOM, INC. Last Updated by Registrar:                   ENOM, INC. Domain Registration Date:                    Mon Mar 17 13:02:36 GMT 2003 Domain Expiration Date:                      Tue Mar 16 23:59:59 GMT 2004 Domain Last Updated Date:                    Wed Apr 02 19:26:58 GMT 2003 >>>> Whois database was last updated on: Wed Apr 09 21:14:06 GMT 2003 <<<< Globe Telecom, Philippines IP block [203.177.80.0 - 203.177.80.255]. Upstream: Globe Telecom (manda-cisco-7513.globenet.com.ph). Nameservers: SAVEONWEBHOST.COM  <== SPAMMERS. BPNS2.SAVEONWEBHOST.COM [203.177.80.253] ======================= Registration Service Provided By: Proactive Productions Contact: beverly@proactive-web.com Domain name: SAVEONWEBHOST.COM Name servers:     NS3.DOMAIN34.COM     ns5.domain34.com     ns6.domain34.com     BPNS1.SAVEONWEBHOST.COM     NS1.DOMAIN34.NET     NS1.DOMAIN34.COM     BPNS3.SAVEONWEBHOST.COM     BPNS2.SAVEONWEBHOST.COM Created: Oct 30 2001 19:06:12 Expires: Oct 30 2003 19:06:12 Registrant Contact:    SavetheHost Co.    Ning Achacoso   (postmaster@saveonwebhost.com)    +1.+63.3748963    FAX: +1.632374095    12 Windville Mendale Ave.,    Pasig,  1600    PH Administrative Contact:    SavetheHost Co.    Jason YUU   (admin@saveonwebhost.com)    +1.+63.3748963    FAX: +1.6323734095    12 Windville Mendale Ave.,    Pasig,  1600    PH Billing Contact:    SavetheHost Co.    Ning Achacoso   (postmaster@saveonwebhost.com)    +1.+63.3748963    FAX: +1.632374095    12 Windville Mendale Ave.,    Pasig,  1600    PH Technical Contact:    SavetheHOst Co.    Ling Chee   (ling@saveonwebhost.com)    +1.+63.3748963    FAX: +1.6323734095    12 Windville Mendale Ave.,    Pasig,  1600    PH Globe Telecom, Philippines IP block [203.177.80.0 - 203.177.80.255]. Upstream: Globe Telecom (manda-cisco-7513.globenet.com.ph). Nameservers: SAVEONWEBHOST.COM  <== SPAMMERS. ----------  Forwarded Message  ---------- Received: from xtreme2 (ool-18bf737d.dyn.optonline.net [24.191.115.125])         by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id h39Kl9V09920         for ; Wed, 9 Apr 2003 23:47:43 +0300 Date: Wed, 9 Apr 2003 23:47:43 +0300 Message-Id: <200304092047.h39Kl9V09920@mail.dolphinwave.org> Received: from [65.167.92.46] by xtreme2   (ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.1.9)); Wed, 9 Apr 2003 15:33:18 -0700 From: unsubscribe@7cash.com To: usenet-Apr+nanae@2003.### Subject: 7CASH.US - You will be a millionaire in no time! X-Priority: 3 Content-Type: text/html Status: R X-Status: N Mail1      

 

 
               
               
Breaking news   !

The   biggest Automatic Profit Generator ?
Bulk Mail and Leads Provided  to you - ALL opt IN no risk!!


 



  Try   it now !!!

 
 


NOTE:   This email was sent to you using bulkemail software because your   email is part of a targeted 7CASH list. If you do not wish to receive   further mailings, please click below and enter your email at the bottom of  the   page. You may then rest-assured that you will never receive another email  from   us again. UNSUBSCRIBE ME   PLEASE<
 
    Message-ID: Date: Wed, 9 Apr 2003 15:33:18 -0700 ------------------------------------------------------- ======= PREVIOUS SPAM WAS ======= === Other spamming attempts (GMT+0300) ======= Apr 9 14:52:11 orca sendmail[2099]: h39BpvV02099: ... User unknown Apr 9 14:52:11 orca sendmail[2099]: h39BpvV02099: from=, size=3419, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=[208.12.13.137] -- Apr 9 16:06:08 orca sendmail[2622]: h39D5sV02622: ... User unknown Apr 9 16:06:08 orca sendmail[2622]: h39D5sV02622: from=, size=2724, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=urlnet.de [217.160.110.130] -- Apr 9 23:47:43 orca sendmail[9925]: h39KlRV09925: ... User unknown Apr 9 23:47:43 orca sendmail[9922]: h39KlEV09922: ... User unknown Apr 9 23:47:43 orca sendmail[9925]: h39KlRV09925: from=, size=0, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=ool-18bf737d.dyn.optonline.net [24.191.115.125] -- Apr 10 00:27:56 orca sendmail[11774]: h39LQVV11774: ... User unknown Apr 10 00:27:58 orca sendmail[11774]: h39LQVV11774: from=, size=3301, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=[200.41.42.10] === More data, hostony.com WHOIS === $ whois hostony.com [whois.crsnic.net] Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. Domain Name: HOSTONY.COM Registrar: GANDI Whois Server: whois.gandi.net Referral URL: http://www.gandi.net Name Server: NS7.GANDI.NET Name Server: CUSTOM2.GANDI.NET Status: ACTIVE Updated Date: 09-feb-2003 Creation Date: 07-mar-2002 Expiration Date: 07-mar-2004 >>> Last update of whois database: Wed, 9 Apr 2003 06:02:38 EDT <<< <...> [whois.gandi.net] % GANDI Registrar whois database for .COM, .NET, .ORG. <...> % Date: 2003/04/09 23:31:33 domain: HOSTONY.COM owner-address: Serge Ryabchuck owner-address: V.Porika 31/5 owner-address: 21021 owner-address: Vinnitsa owner-address: Ukraine admin-c: SR438-GANDI tech-c: SR438-GANDI bill-c: SR438-GANDI nserver: ns7.gandi.net 80.67.173.197 nserver: custom2.gandi.net 80.67.173.18 reg_created: 2002-03-07 03:33:33 expires: 2004-03-07 03:33:33 created: 2002-03-07 09:33:35 changed: 2003-02-09 15:59:55 person: Serge Ryabchuck nic-hdl: SR438-GANDI address: V.Porika 31/5 address: 21021 address: Vinnitsa address: Ukraine phone: +38 0505384589 fax: +38 0505384589 e-mail: z555@z555.com === More data, 7cash.com === $ whois 7cash.com [whois.crsnic.net] Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. Domain Name: 7CASH.COM Registrar: ENOM, INC. Whois Server: whois.enom.com Referral URL: http://www.enom.com Name Server: DNS2.ALWAYSWEBHOSTING.COM Name Server: DNS1.ALWAYSWEBHOSTING.COM Status: ACTIVE Updated Date: 01-apr-2003 Creation Date: 10-mar-2003 Expiration Date: 10-mar-2004 >>> Last update of whois database: Wed, 9 Apr 2003 06:02:38 EDT <<< <...> [whois.enom.com] Registration Service Provided By: NameCheap.com Contact: support@NameCheap.com Domain name: 7cash.com Nameservers: dns1.alwayswebhosting.com dns2.alwayswebhosting.com Creation date: 03/10/03 00:00:00 Expiration date: 03/10/04 00:00:00 Registrant Contact: n/a wana traore (wanatrou@netscape.net) n/a FAX: n/a n/a n/a kigali, BA 9005 AF Administrative Contact: n/a wana traore (wanatrou@netscape.net) n/a FAX: n/a n/a n/a kigali, BA 9005 AF Billing Contact: n/a wana traore (wanatrou@netscape.net) n/a FAX: n/a n/a n/a kigali, BA 9005 AF Technical Contact: n/a wana traore (wanatrou@netscape.net) n/a FAX: n/a n/a n/a kigali, BA 9005 AF $ dig -t NS 7cash.com ; <<>> DiG 9.2.1 <<>> -t NS 7cash.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39363 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 2 ;; QUESTION SECTION: ;7cash.com. IN NS ;; ANSWER SECTION: 7cash.com. 12640 IN NS dns1.alwayswebhosting.com. 7cash.com. 12640 IN NS dns2.alwayswebhosting.com. 7cash.com. 12640 IN NS dns3.alwayswebhosting.com. ;; ADDITIONAL SECTION: dns1.alwayswebhosting.com. 171021 IN A 66.220.25.136 dns2.alwayswebhosting.com. 171021 IN A 66.220.25.140 ;; Query time: 6 msec ;; SERVER: 192.168.0.77#53(192.168.0.77) ;; WHEN: Thu Apr 10 00:56:14 2003 ;; MSG SIZE rcvd: 133 $ host 7cash.com 7cash.com has address 66.220.25.148 $ jwhois 66.220.25.148 [Querying whois.arin.net] [whois.arin.net] OrgName: Hurricane Electric OrgID: HURC Address: 3433 Rockett Drive City: Fremont StateProv: CA PostalCode: 94538 Country: US NetRange: 66.220.0.0 - 66.220.31.255 CIDR: 66.220.0.0/19 NetName: HURRICANE-3 NetHandle: NET-66-220-0-0-1 Parent: NET-66-0-0-0-0 NetType: Direct Allocation NameServer: NS1.HE.NET NameServer: NS2.HE.NET NameServer: NS3.HE.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 2002-01-17 Updated: 2002-04-17 TechHandle: ZH17-ARIN TechName: Hurricane Electric TechPhone: +1-510-580-4100 TechEmail: hostmaster@he.net === More data, alwayswebhosting.com === $ whois alwayswebhosting.com [whois.crsnic.net] Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. Domain Name: ALWAYSWEBHOSTING.COM Registrar: GO DADDY SOFTWARE, INC. Whois Server: whois.godaddy.com Referral URL: http://registrar.godaddy.com Name Server: NS2.MYDYNDNS.ORG Name Server: NS1.MYDYNDNS.ORG Name Server: NS3.MYDYNDNS.ORG Name Server: NS4.MYDYNDNS.ORG Name Server: NS5.MYDYNDNS.ORG Status: REGISTRAR-LOCK Updated Date: 30-mar-2003 Creation Date: 19-dec-2001 Expiration Date: 19-dec-2011 >>> Last update of whois database: Wed, 9 Apr 2003 06:02:38 EDT <<< <...> [whois.godaddy.com] <...> Registrant: Ronnie Moore 1836 Beaumont Drive Dallas, Texas 90210 United States Registered through: Go Daddy Software (http://www.godaddy.com) Domain Name: ALWAYSWEBHOSTING.COM Created on: 19-Dec-01 Expires on: 19-Dec-11 Last Updated on: 28-Jan-03 Administrative Contact: M., R. junk-mail@alwayswebhosting.com 97298 Beaumont Drive Dallas, Washington 16297 United States (214) 555-1234 Fax -- Technical Contact: M., R. junk-mail@alwayswebhosting.com 97298 Beaumont Drive Dallas, Washington 16297 United States (214) 555-1234 Fax -- Domain servers in listed order: NS1.MYDYNDNS.ORG NS2.MYDYNDNS.ORG NS3.MYDYNDNS.ORG NS4.MYDYNDNS.ORG NS5.MYDYNDNS.ORG $ dig -t NS alwayswebhosting.com ; <<>> DiG 9.2.1 <<>> -t NS alwayswebhosting.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36192 ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;alwayswebhosting.com. IN NS ;; ANSWER SECTION: alwayswebhosting.com. 172800 IN NS ns3.mydyndns.org. alwayswebhosting.com. 172800 IN NS ns4.mydyndns.org. alwayswebhosting.com. 172800 IN NS ns5.mydyndns.org. alwayswebhosting.com. 172800 IN NS ns1.mydyndns.org. alwayswebhosting.com. 172800 IN NS ns2.mydyndns.org. ;; Query time: 2367 msec ;; SERVER: 192.168.0.77#53(192.168.0.77) ;; WHEN: Thu Apr 10 00:59:54 2003 ;; MSG SIZE rcvd: 140 $ host alwayswebhosting.com alwayswebhosting.com has address 216.127.88.3 $ host 216.127.88.3 3.88.127.216.in-addr.arpa domain name pointer server15.alwayswebhosting.com. $ jwhois 216.127.88.3 [Querying whois.arin.net] [whois.arin.net] OrgName: Everyones Internet, Inc. OrgID: EVRY Address: 2600 Southwest Frwy., Suite 500 City: Houston StateProv: TX PostalCode: 77098 Country: US NetRange: 216.127.64.0 - 216.127.95.255 CIDR: 216.127.64.0/19 NetName: EVRY-BLK-10 NetHandle: NET-216-127-64-0-1 Parent: NET-216-0-0-0-0 NetType: Direct Allocation NameServer: NS1.EV1.NET NameServer: NS2.EV1.NET Comment: RegDate: Updated: 2002-05-08 TechHandle: RW172-ARIN TechName: Williams, Randy TechPhone: +1-713-400-5400 TechEmail: admin@ev1.net OrgTechHandle: RW172-ARIN OrgTechName: Williams, Randy OrgTechPhone: +1-713-400-5400 OrgTechEmail: admin@ev1.net === And the same spammer, my 3rd complaint === Content-Type: text/plain;   charset="iso-8859-1" From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Long-time spammers, spam services (7cash.com/7cash.us/alwayswebhosting.com)! [Fwd: Get 31,000 Safe Mailer Credits + Email addresses EVERY month !!!] Date: Fri, 11 Apr 2003 23:34:18 +0300 User-Agent: KMail/1.4.3 X-KMail-Link-Message: 1362141 X-KMail-Link-Type: forward To: ,  uce@ftc.gov,  nanas-sub@cybernothing.org,  abuse@telemar.net.br,  postmaster@veloxzone.com.br,  salvador@TELEMAR-BA.COM.BR,  mail-abuse@nic.br,  mlugon@TELEMAR.COM.BR,  packet@soback.kornet.net,  ip@ns.kornet.net,  abuse@kornet.net,  postmaster@kornet.net,  support@kornet.net,  "Yahoo-Mail Abuse" ,  admin@ev1.net,  abuse@ev1.net,  abuse@ic2net.net,  postmaster@ic2net.net,  abuse@rackshack.net,  support@NameCheap.com,  abuse@globe.com.ph,  postmaster@globe.com.ph,  aldrinpy@globenet.com.ph,  apyalung@globetel.com.ph,  beverly@proactive-web.com,  abuse@godaddy.com,  abuse@dyndns.org,  hostmaster@he.net,  abuse@he.net X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133  FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200304112334.18723@2003.dolphinwave.org> Status: RO X-Status: S This is already the THIRD, the same spam from these abusers, sent to my e-mail address, used for the news.admin.net-abuse.email Usenet posts in this year only (usenet-Apr+nanae@2003... - tagged), and harvested from there! Since being blocked on my main mailservers, the spammer has spammed me through my secondary MX! The spammer's history is archived here: http://www.DolphinWave.org/spam/1emarketing_hostony_7cash_saveonwebhost_alwayswebhosting.txt Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! Spammer: MG133139.user.veloxzone.com.br [200.149.133.139] Telemar Norte Leste IP block [200.149.128/17]. Abused open relay: [211.219.113.106] KORNET-INFRA-GURO IP block [211.219.105.0-211.219.114.255]. Mail from: jeremy_pratt60@yahoo.com Spamvertised web page: http://www.7cash.com www.7cash.com [207.44.144.76] ============= Registration Service Provided By: NameCheap.com Contact: support@NameCheap.com Domain name: 7cash.com Nameservers:     dns3.worldwebhosters.com     dns4.worldwebhosters.com Creation date: 03/10/03 00:00:00 Expiration date: 03/10/04 00:00:00 Registrant Contact:    n/a    wana traore   (wanatrou@netscape.net)    n/a    FAX: n/a    n/a    n/a    kigali, BA 9005    AF Administrative Contact:    n/a    wana traore   (wanatrou@netscape.net)    n/a    FAX: n/a    n/a    n/a    kigali, BA 9005    AF Billing Contact:    n/a    wana traore   (wanatrou@netscape.net)    n/a    FAX: n/a    n/a    n/a    kigali, BA 9005    AF Technical Contact:    n/a    wana traore   (wanatrou@netscape.net)    n/a    FAX: n/a    n/a    n/a    kigali, BA 9005    AF Everyones Internet IP block [207.44.128.0 - 207.44.255.255]. Upstream: Integrated Communications Concepts  (ev1.net-icc-gateway-64.200.162.2.ic2net.net). Nameservers: rackshack.net. 7cash.us [203.177.80.254]  (BPNS1.SAVEONWEBHOST.COM) ======== Domain Name:                                 7CASH.US Domain ID:                                   D3898963-US Sponsoring Registrar:                        ENOM, INC. Domain Status:                               ok Registrant ID:                               E6005BFACDBFAE30 Registrant Name:                             cathy thoms Registrant Organization:                     starter1 Registrant Address1:                         1 rue des fleurs Registrant City:                             vincennes Registrant Postal Code:                      94300 Registrant Country:                          France Registrant Country Code:                     FR Registrant Email:                            cathyrose@softhome.net Registrant Application Purpose:              P1 Registrant Nexus Category:                   C12 Administrative Contact ID:                   B7C82FE703FD3FC8 Administrative Contact Name:                 cathy thoms Administrative Contact Organization:         starter1 Administrative Contact Address1:             1 rue des fleurs Administrative Contact City:                 vincennes Administrative Contact Postal Code:          94300 Administrative Contact Country:              France Administrative Contact Country Code:         FR Administrative Contact Email:                cathyrose@softhome.net Billing Contact ID:                          66A737C1055B1A00 Billing Contact Name:                        cathy thoms Billing Contact Organization:                starter1 Billing Contact Address1:                    1 rue des fleurs Billing Contact City:                        vincennes Billing Contact Postal Code:                 94300 Billing Contact Country:                     France Billing Contact Country Code:                FR Billing Contact Email:                       cathyrose@softhome.net Technical Contact ID:                        1F17D0CF201CD96F Technical Contact Name:                      cathy thoms Technical Contact Organization:              starter1 Technical Contact Address1:                  1 rue des fleurs Technical Contact City:                      vincennes Technical Contact Postal Code:               94300 Technical Contact Country:                   France Technical Contact Country Code:              FR Technical Contact Email:                     cathyrose@softhome.net Name Server:                                 BPNS1.SAVEONWEBHOST.COM Name Server:                                 BPNS2.SAVEONWEBHOST.COM Name Server:                                 BPNS3.SAVEONWEBHOST.COM Created by Registrar:                        ENOM, INC. Last Updated by Registrar:                   ENOM, INC. Domain Registration Date:                    Mon Mar 17 13:02:36 GMT 2003 Domain Expiration Date:                      Tue Mar 16 23:59:59 GMT 2004 Domain Last Updated Date:                    Wed Apr 02 19:26:58 GMT 2003 >>>> Whois database was last updated on: Wed Apr 09 21:14:06 GMT 2003 <<<< Globe Telecom, Philippines IP block [203.177.80.0 - 203.177.80.255]. Upstream: Globe Telecom (manda-cisco-7513.globenet.com.ph). Nameservers: SAVEONWEBHOST.COM  <== SPAMMERS. BPNS2.SAVEONWEBHOST.COM [203.177.80.253] ======================= Registration Service Provided By: Proactive Productions Contact: beverly@proactive-web.com Domain name: SAVEONWEBHOST.COM Name servers:     NS3.DOMAIN34.COM     ns5.domain34.com     ns6.domain34.com     BPNS1.SAVEONWEBHOST.COM     NS1.DOMAIN34.NET     NS1.DOMAIN34.COM     BPNS3.SAVEONWEBHOST.COM     BPNS2.SAVEONWEBHOST.COM Created: Oct 30 2001 19:06:12 Expires: Oct 30 2003 19:06:12 Registrant Contact:    SavetheHost Co.    Ning Achacoso   (postmaster@saveonwebhost.com)    +1.+63.3748963    FAX: +1.632374095    12 Windville Mendale Ave.,    Pasig,  1600    PH Administrative Contact:    SavetheHost Co.    Jason YUU   (admin@saveonwebhost.com)    +1.+63.3748963    FAX: +1.6323734095    12 Windville Mendale Ave.,    Pasig,  1600    PH Billing Contact:    SavetheHost Co.    Ning Achacoso   (postmaster@saveonwebhost.com)    +1.+63.3748963    FAX: +1.632374095    12 Windville Mendale Ave.,    Pasig,  1600    PH Technical Contact:    SavetheHOst Co.    Ling Chee   (ling@saveonwebhost.com)    +1.+63.3748963    FAX: +1.6323734095    12 Windville Mendale Ave.,    Pasig,  1600    PH Globe Telecom, Philippines IP block [203.177.80.0 - 203.177.80.255]. Upstream: Globe Telecom (manda-cisco-7513.globenet.com.ph). Nameservers: SAVEONWEBHOST.COM  <== SPAMMERS. Another spammer's domain, used as nameserver for 7cash.com yesterday: dns1.alwayswebhosting.com, dns2.alwayswebhosting.com. Note the changed WHOIS Registration data since yesterday (the older one is below). dns1.alwayswebhosting.com [66.220.25.136] ========================= Registrant:    AlwaysWebHosting Com    AlwaysWebHosting.com    6616 Crator Drive    McKinney, Texas 75070    United States    Registered through: Go Daddy Software (http://www.godaddy.com)    Domain Name: ALWAYSWEBHOSTING.COM       Created on: 19-Dec-01       Expires on: 19-Dec-11       Last Updated on: 28-Jan-03    Administrative Contact:       Com, AlwaysWebHosting  abuse@alwayswebhosting.com       AlwaysWebHosting.com       6616 Crator Drive       McKinney, Texas 75070       United States       972-886-2221      Fax --    Technical Contact:       Com, AlwaysWebHosting  abuse@alwayswebhosting.com       AlwaysWebHosting.com       6616 Crator Drive       McKinney, Texas 75070       United States       972-886-2221      Fax --    Domain servers in listed order:       NS5.MYDYNDNS.ORG WHOIS data from yesterday: ========================== Registrant:    Ronnie Moore    1836 Beaumont Drive    Dallas, Texas 90210    United States    Registered through: Go Daddy Software (http://www.godaddy.com)    Domain Name: ALWAYSWEBHOSTING.COM       Created on: 19-Dec-01       Expires on: 19-Dec-11       Last Updated on: 28-Jan-03    Administrative Contact:       M., R.  junk-mail@alwayswebhosting.com       97298 Beaumont Drive       Dallas, Washington 16297       United States       (214) 555-1234       Fax --    Technical Contact:       M., R.  junk-mail@alwayswebhosting.com       97298 Beaumont Drive       Dallas, Washington 16297       United States       (214) 555-1234       Fax --    Domain servers in listed order:       NS1.MYDYNDNS.ORG       NS2.MYDYNDNS.ORG       NS3.MYDYNDNS.ORG       NS4.MYDYNDNS.ORG       NS5.MYDYNDNS.ORG Hurricane Electric IP block [66.220.0.0 - 66.220.31.255]. Upstream: Hurricane Electric (gige-g5-0.gsr12008.fmt.he.net). Nameservers: mydyndns.org. server15.alwayswebhosting.com [216.127.88.3] ============================= Everyones Internet IP block [216.127.64.0 - 216.127.95.255]. Upstream: Integrated Communications Concepts  (ev1.net-icc-gateway-64.200.162.2.ic2net.net). ----------  Forwarded Message  ---------- Received: from =MY-SECONDARY-MX= (=MY-SECONDARY-MX=)         by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id h3BJskV21523;         Fri, 11 Apr 2003 22:54:50 +0300 Received: from hsci.co.kr ([211.219.113.106])         by =MY-SECONDARY-MX= (8.12.9/8.12.9) with ESMTP id h3BJs826017787;         Fri, 11 Apr 2003 21:54:19 +0200 (CEST)         (envelope-from jeremy_pratt60@yahoo.com) Message-Id: <200304111954.h3BJs826017787@=MY-SECONDARY-MX=> X-Spam-Header: 550.Mail.rejected.as.your.domain.does.not.have.a.working.postmaster.address.-.see.http://www.rfc-ignorant.org/,550.Mail.rejected.as.your.domain.does.not.have.a.working.postmaster.address.-.see.http://www.rfc-ignorant.org/,550.Mail.rejected.as.your.domain.does.not.have.a.working.postmaster.address.-.see.http://www.rfc-ignorant.org/ X-Authentication-Warning: =MY-SECONDARY-MX=: Host [211.219.113.106] claimed to be hsci.co.kr Received: from smtp0100.mail.yahoo.com [200.149.133.139] by hsci.co.kr [192.192.1.23]         with SMTP (MDaemon.v3.5.0.R);         Sat, 12 Apr 2003 03:58:41 +0900 Date: Fri, 11 Apr 2003 18:58:57 GMT From: jeremy_pratt60@yahoo.com X-Priority: 3 To: usenet-Apr+nanae@2003.### Subject: Get 31,000 Safe Mailer Credits + Email addresses EVERY month !!! Mime-Version: 1.0 Content-Type: text/html;   charset=us-ascii Content-Transfer-Encoding: 7bit X-MDRemoteIP: 200.149.133.139 X-Return-Path: jeremy_pratt60@yahoo.com Status: R X-Status: N Mail_p2u

 
       

                                                 
 Dear Net Marketer
           

We are proud to inform you that there is a very new,  much better way to send BULK mail.
            

Its name? 7CASH

We are sure that you have already had enough of the INVADOR  technical problems because of which every day you loose clients and money!  
           
 
           
We garantee you that  within 7CASH  system there are no such difficulties, for our company has already taken  into account ALL KNOWN SPAM FILTERS preventing  them!

The possibility of loosing clients  because of the site being down is now practically inexistent!
           
 
           
7             CASH has created a             BULLETPROOF backup system so that, if there is  any problem at all, it should be able to take over the functions of your  main site!
           
 
           
YES, this is true: you will have 2  websites within the 7CASH             system!

In the same time, we know             the problems you have with the Invader software.
           
 
           
That is why, 7CASH             company uses a software belonging to the             new generation, named Safe Bulk             Mailer.
           
 
           
It hides your ISP, and it has proved to be             infinitely more trustworthy than the old Invader software. You  can now send 100,000 mails per             hour without anyone tracing it back to             you.

It is because we know the             problems you encountered when using the old  INVADOR system that we now offer you the possibility to join 7CASH  company, thus having from the beginning the  quality of 3 months active member!

Moreover,  you will have the right to use as much credits and e-mail addresses as you  need in order to find at least one new member!  
           
 
           
Yes - You can send AS  MUCH invitations as you want !  5,000,000 - NO             PROBLEM !
           

With 7CASH you             won't have any problems with the payment system!
           
 
           
Our Company,  beside offering you a complementary system, it gives you the opportunity to  pay the administrator the contribution of your consultants for several  months.
           
 
           
From now on, you can go on holidays  without being stressed: you won't lose your membership just because you  don't have a computer near you.
           

That is why, we advice you not  to lose anymore time.
           
Best regards
Jeremy    Pratt

------------------------------------------------------- ======= PREVIOUS SPAMS WERE ======= === And yet another, the 4th spam, from the same abusers! === Content-Type: text/plain;   charset="iso-8859-1" From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Long-time spammers, spam services (7cash.com/7cash.us/saveonwebhost.com)![Fwd: They gave me 300,000 extra ISP Safe Mailing credits !] Date: Mon, 14 Apr 2003 21:08:02 +0300 User-Agent: KMail/1.4.3 X-KMail-Link-Message: 1398115 X-KMail-Link-Type: forward To: ,  uce@ftc.gov,  nanas-sub@cybernothing.org,  "Yahoo-Mail Abuse" ,  hostmaster@ns.chinanet.cn.net,  anti-spam@ns.chinanet.cn.net,  ipadm@gddc.com.cn,  abuse@gddc.com.cn,  postmaster@gddc.com.cn,  sara@uaenic.ae,  mpameapc@emirates.net.ae,  postmaster@aaa.co.ae,  beverly@proactive-web.com,  abuse@globe.com.ph,  postmaster@globe.com.ph,  aldrinpy@globenet.com.ph,  apyalung@globetel.com.ph X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133  FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200304142108.02129@2003.dolphinwave.org> Status: RO X-Status: S This is already the FOURTH, the same spam from these abusers, sent to my the same e-mail address, used for the news.admin.net-abuse.email Usenet posts in this year only (usenet-Apr+nanae@2003... - tagged), and harvested from there! The spammer's history is archived here: http://www.DolphinWave.org/spam/1emarketing_hostony_7cash_saveonwebhost_alwayswebhosting.txt Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Refusing to deal with your abusers will lead your whole IP range to be blocked from accessing of my mailservers ever again, and this info will be shared with other admins and public blocklists! ATTENTION: Globe Telecom, Philippines! Despite on my numerous complaints on your customer spamming my e-mail boxes, you STILL provide the connectivity to this persistent abuser! If the abuser's 7cash.us / saveonwebhost.com accounts will not be terminated by you during the next 3 days, your whole [203.177.0.0 - 203.177.255.255] IP range will be blocked from accessing of my mailservers ever again, and I will encourage other admins to do the same with your irresponsible network! Spammer: [218.18.57.167] CHINANET-GD IP block [218.13.0.0 - 218.18.255.255]. Abused open relay: AAASERVER.AAA.CO.AE [195.229.230.26] AAA-EMIRNET IP block [195.229.230.24 - 195.229.230.31]. Mail from: mc_abe1@yahoo.com Spamvertised web page: http://www.7cash.us Previously spamvertised web page: http://www.7cash.com (killed). www.7cash.us [203.177.80.254] (BPNS1.SAVEONWEBHOST.COM) ============ Domain Name:                                 7CASH.US Domain ID:                                   D3898963-US Sponsoring Registrar:                        ENOM, INC. Domain Status:                               ok Registrant ID:                               E6005BFACDBFAE30 Registrant Name:                             cathy thoms Registrant Organization:                     starter1 Registrant Address1:                         1 rue des fleurs Registrant City:                             vincennes Registrant Postal Code:                      94300 Registrant Country:                          France Registrant Country Code:                     FR Registrant Email:                            cathyrose@softhome.net Registrant Application Purpose:              P1 Registrant Nexus Category:                   C12 Administrative Contact ID:                   B7C82FE703FD3FC8 Administrative Contact Name:                 cathy thoms Administrative Contact Organization:         starter1 Administrative Contact Address1:             1 rue des fleurs Administrative Contact City:                 vincennes Administrative Contact Postal Code:          94300 Administrative Contact Country:              France Administrative Contact Country Code:         FR Administrative Contact Email:                cathyrose@softhome.net Billing Contact ID:                          66A737C1055B1A00 Billing Contact Name:                        cathy thoms Billing Contact Organization:                starter1 Billing Contact Address1:                    1 rue des fleurs Billing Contact City:                        vincennes Billing Contact Postal Code:                 94300 Billing Contact Country:                     France Billing Contact Country Code:                FR Billing Contact Email:                       cathyrose@softhome.net Technical Contact ID:                        1F17D0CF201CD96F Technical Contact Name:                      cathy thoms Technical Contact Organization:              starter1 Technical Contact Address1:                  1 rue des fleurs Technical Contact City:                      vincennes Technical Contact Postal Code:               94300 Technical Contact Country:                   France Technical Contact Country Code:              FR Technical Contact Email:                     cathyrose@softhome.net Name Server:                                 BPNS1.SAVEONWEBHOST.COM Name Server:                                 BPNS2.SAVEONWEBHOST.COM Name Server:                                 BPNS3.SAVEONWEBHOST.COM Created by Registrar:                        ENOM, INC. Last Updated by Registrar:                   ENOM, INC. Domain Registration Date:                    Mon Mar 17 13:02:36 GMT 2003 Domain Expiration Date:                      Tue Mar 16 23:59:59 GMT 2004 Domain Last Updated Date:                    Wed Apr 02 19:26:58 GMT 2003 Globe Telecom, Philippines IP block [203.177.80.0 - 203.177.80.255]. Upstream: Globe Telecom (manda-cisco-7513.globenet.com.ph). Nameservers: SAVEONWEBHOST.COM  <== SPAMMERS. BPNS2.SAVEONWEBHOST.COM [203.177.80.253] ======================= Registration Service Provided By: Proactive Productions Contact: beverly@proactive-web.com Domain name: SAVEONWEBHOST.COM Name servers:     NS3.DOMAIN34.COM     ns5.domain34.com     ns6.domain34.com     BPNS1.SAVEONWEBHOST.COM     NS1.DOMAIN34.NET     NS1.DOMAIN34.COM     BPNS3.SAVEONWEBHOST.COM     BPNS2.SAVEONWEBHOST.COM Created: Oct 30 2001 19:06:12 Expires: Oct 30 2003 19:06:12 Registrant Contact:    SavetheHost Co.    Ning Achacoso   (postmaster@saveonwebhost.com)    +1.+63.3748963    FAX: +1.632374095    12 Windville Mendale Ave.,    Pasig,  1600    PH Administrative Contact:    SavetheHost Co.    Jason YUU   (admin@saveonwebhost.com)    +1.+63.3748963    FAX: +1.6323734095    12 Windville Mendale Ave.,    Pasig,  1600    PH Billing Contact:    SavetheHost Co.    Ning Achacoso   (postmaster@saveonwebhost.com)    +1.+63.3748963    FAX: +1.632374095    12 Windville Mendale Ave.,    Pasig,  1600    PH Technical Contact:    SavetheHOst Co.    Ling Chee   (ling@saveonwebhost.com)    +1.+63.3748963    FAX: +1.6323734095    12 Windville Mendale Ave.,    Pasig,  1600    PH Globe Telecom, Philippines IP block [203.177.80.0 - 203.177.80.255]. Upstream: Globe Telecom (manda-cisco-7513.globenet.com.ph). Nameservers: SAVEONWEBHOST.COM  <== SPAMMERS, domain34.com ----------  Forwarded Message  ---------- Received: from AAASERVER.AAA.CO.AE ([195.229.230.26])         by mail.dolphinwave.org (8.11.6/8.11.6) with ESMTP id h3E6OQV02215;         Mon, 14 Apr 2003 09:24:30 +0300 Received: from smtp0562.mail.yahoo.com ([218.18.57.167]) by AAASERVER.AAA.CO.AE with Microsoft SMTPSVC(5.0.2195.5329);          Mon, 14 Apr 2003 10:16:50 +0400 Date: Mon, 14 Apr 2003 06:24:20 GMT From: mc_abe1@yahoo.com X-Priority: 3 To: usenet-Apr+nanae@2003.### Subject: They gave me 300,000 extra ISP Safe Mailing credits ! Mime-Version: 1.0 Content-Type: text/plain;   charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: X-OriginalArrivalTime: 14 Apr 2003 06:16:56.0578 (UTC) FILETIME=[733F6E20:01C3024D] Status: R X-Status: N Hi there! My name is Brian McCabe and I joined 7Cash 5 days ago under Jeremy Pratt and I'm so excited about it! Actually, I wasn't in the beginning as my leads seamed to have no response.. . But then I asked for more  (did you know it's for free till 1st new memeber found?) and more... 300,000  in all!!! And you know what? They're coming!!!! Yes, within 24h I got 2  active and 1 inactive! The mailer is really effective, the site is up and  working,  with back up's (I've been told so) and unlimited free leads and credits..  They are real and serious, trust me! See for yourself: http://www.7cash.us/pages/index.php?id=153 Good luck to everyone!  Brian McCabe ----------------------------------------------------------------------------- --- Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more ------------------------------------------------------- ======= PREVIOUS SPAMS WERE =======