Redswitches.com & 1and1.com – unresponsive to SEO spammer complaints

Guest

RE: Redswitches.com & 1and1.com – unresponsive to SEO spammer

Post by Guest » Fri Dec 11, 2015 5:48 am

WoT SC: apphdl.com
[red]apphdl.com[/red]/wp-content/wilbur.php => [red]trustedtabsmart.ru[/red]

User avatar
A440
Posts: 2326
Joined: Sat Nov 20, 2010 1:56 am

RE: Redswitches.com & 1and1.com – unresponsive to SEO spammer

Post by A440 » Sat Dec 12, 2015 3:58 pm

This one is from [red]oneandone.net[/red]:
Delivered-To: xxx @ gmail.com
Received: by 10.55.77.197 with SMTP id a188csp638170qkb;
Sat, 12 Dec 2015 05:05:02 -0800 (PST)
X-Received: by 10.140.42.108 with SMTP id b99mr29684873qga.67.1449925502396;
Sat, 12 Dec 2015 05:05:02 -0800 (PST)
Return-Path: <darius-tutippag @ aaronnoble.co.uk>
Received: from s17325663.onlinehome-server.info (s17325663.onlinehome-server.info. [217.160.5.94])
by mx.google.com with SMTP id r9si25068465qki.38.2015.12.12.05.05.01
for <xxx @ gmail.com>;
Sat, 12 Dec 2015 05:05:02 -0800 (PST)
Received-SPF: neutral (google.com: 217.160.5.94 is neither permitted nor denied by best guess record for domain of darius-tutippag @
aaronnoble.co.uk) client-ip=217.160.5.94;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 217.160.5.94 is neither permitted nor denied by best guess record for domain of darius-tutippag @ aaronnoble.co.uk) smtp.mailfrom=darius-tutippag @ aaronnoble.co.uk
Content-Type: text/html; charset=UTF-8
X-Priority: 1
MIME-Version: 1.0
To: "xxx @ gmail.com" <xxx @ gmail.com>
Subject: Caution Deferred emails coyotes
Content-Transfer-Encoding: 7bit
Tooling-Shacks: 5DD2747985B15AEA
Message-ID: <3fef82a641147d2 @ aaronnoble.co.uk>
From: Auto GoogleSupport <darius-tutippag @ aaronnoble.co.uk>
Date: Sat, 12 Dec 2015 14:00:17 +0000
<<etcetera>>
This links to [red]crismascort.com[/red] - a known malware site.

User avatar
A440
Posts: 2326
Joined: Sat Nov 20, 2010 1:56 am

RE: Redswitches.com & 1and1.com – unresponsive to SEO spammer

Post by A440 » Tue Dec 15, 2015 4:28 am

Finally, another from [red]redswitches.com[/red]:
Return-Path: yaosjien @ mail.com
Received: from 211.48.62.163 (211.48.62.163) at KTMAIL with ESMTP Hanmir by ktmail8;Mon, 14 Dec 2015 23:51:27 +0900
Received: from [103.41.176.17] ([103.41.176.17])
by relay3.kornet.net ([211.48.62.163])
with ESMTP id 2015121423:51:24:479554.307.493
for <xxx @ kornet.net>;
Mon, 14 Dec 2015 23:51:24 +0900 (KST)
Date: Mon, 14 Dec 2015 13:45:03 +0100
Subject: can we talk today?
From: "Jimmy Allison" <yaosjien @ mail.com>
To: xxx @ kornet.net
X-MsgID: 1450104687115021.0.ktmail8
Message-ID: <1450104687115021.0.ktmail8@ktmail8>
Y-Message-ID: <115c50813fd5393c19f00272f0513ad9@bikiniatoll.com>
X-RECEIVED-IP: 211.48.62.163
Reply-To: ansellop @ aliyun.com
MIME-Version: 1.0
X-Mailer-LID: 3
X-Mailer-RecptId: 4465598
X-Mailer-SID: 1092
X-Mailer-Sent-By: 1
X-TERRACE-SPAMMARK: NO (SR:3.71) (by Terrace)
Content-Transfer-Encoding: 8bit
Content-type: text/plain; format=flowed; charset="UTF-8"
Which always points back to Chinese web portals which don't give a f***.

User avatar
nova7
Posts: 266
Joined: Fri Apr 06, 2012 11:32 pm

RE: Redswitches.com & 1and1.com – unresponsive to SEO spammer

Post by nova7 » Tue Dec 15, 2015 4:55 pm

<quote user="a440">
103.41.176.17
[/quote]

"Very High" spam reputation for a month: Cisco blocklist

Another redSwitches spamming IP is rated Medium for a month.

The Redswitches network is run further along the IP-spam-chain by Leaseweb / leaseweb.com

User avatar
A440
Posts: 2326
Joined: Sat Nov 20, 2010 1:56 am

RE: Redswitches.com & 1and1.com – unresponsive to SEO spammer

Post by A440 » Tue Dec 22, 2015 3:57 pm

I'm not surprised about this being a part of [red]leaseweb.com[/red].
Leaseweb.com should be deep red.

Guest

RE: Redswitches.com & 1and1.com – unresponsive to SEO spammer

Post by Guest » Tue Dec 22, 2015 4:43 pm

Well,I tried to help, but I noticed that I rated it red and now looks greener than before :/
We need more red ink!

User avatar
A440
Posts: 2326
Joined: Sat Nov 20, 2010 1:56 am

RE: Redswitches.com & 1and1.com – unresponsive to SEO spammer

Post by A440 » Mon Dec 28, 2015 3:15 am

Yet more in the ongoing stream of spam from [red]oneandone.net[/red]:
Delivered-To: xxx(at)gmail.com
Received: by 10.55.77.197 with SMTP id a188csp5534201qkb;
Sun, 27 Dec 2015 01:48:24 -0800 (PST)
X-Received: by 10.13.205.199 with SMTP id p190mr42176804ywd.116.1451209704060;
Sun, 27 Dec 2015 01:48:24 -0800 (PST)
Return-Path: <dannettetashiaty (at) aclama.com>
Received: from s17109700.onlinehome-server.info (s17109700.onlinehome-server.info. [87.106.54.82])
by mx.google.com with SMTP id w5si38936604ywa.146.2015.12.27.01.48.23
for <xxx(at)gmail.com>;
Sun, 27 Dec 2015 01:48:24 -0800 (PST)
Received-SPF: fail (google.com: domain of dannettetashiaty@aclama.com does not designate 87.106.54.82 as permitted sender) client-ip=87.106.54.82;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of dannettetashiaty@aclama.com does not designate 87.106.54.82 as permitted sender) smtp.mailfrom=dannettetashiaty@aclama.com
Content-Type: text/html; charset=UTF-8
X-Priority: 1
Message-ID: <19eb58d144be4.33a29b3 (at) aclama.com>
Date: Sun, 27 Dec 2015 10:48:23 +0000
From: Gmail Notify <dannettetashiaty(at)aclama.com>
Content-Transfer-Encoding: 7bit
Nightcap-Conveniences: counterman
Subject: You have deferred e-mails consequentialities
Animatedly-Payer: 726
MIME-Version: 1.0
To: "xxx(at)gmail.com" <xxx(at)gmail.com>
Manufacture-Massey: f82c1f282
87.106.54.82

inetnum: 87.106.48.0 - 87.106.63.255
netname: SCHLUND-CUSTOMERS
descr: 1&1 Internet AG
country: DE
admin-c: IPAD-RIPE
tech-c: IPOP-RIPE
remarks: INFRA-AW
remarks: in case of abuse or spam, please mailto: abuse@oneandone.net
status: ASSIGNED PA
mnt-by: AS8560-MNT
created: 2006-07-03T08:24:51Z
last-modified: 2009-05-28T17:47:36Z
source: RIPE # Filtered

role: IP Administration
address: 1&1 Internet AG
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: LTO3-RIPE
admin-c: ZIG-RIPE
admin-c: MI-RIPE
admin-c: MINK-RIPE
admin-c: VR-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPAD-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
created: 2009-05-20T17:24:09Z
last-modified: 2015-05-06T12:02:53Z
source: RIPE # Filtered

role: IP Operations
address: 1&1 Internet AG
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: LTO3-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPOP-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
created: 2009-05-28T16:25:04Z
last-modified: 2015-05-06T12:02:53Z
source: RIPE # Filtered

% Information related to '87.106.0.0/16AS8560'

route: 87.106.0.0/16
descr: SCHLUND-PA-5
origin: AS8560
mnt-by: AS8560-MNT
created: 2005-08-11T12:37:13Z
last-modified: 2009-05-14T16:44:59Z
source: RIPE # Filtered

User avatar
A440
Posts: 2326
Joined: Sat Nov 20, 2010 1:56 am

RE: Redswitches.com & 1and1.com – unresponsive to SEO spammer

Post by A440 » Mon Dec 28, 2015 3:27 am

. . . and this one, again from oneandone.net[/red]:
Delivered-To: xxx(at)gmail.com
Received: by 10.55.77.197 with SMTP id a188csp5531355qkb;
Sun, 27 Dec 2015 01:36:58 -0800 (PST)
X-Received: by 10.25.206.137 with SMTP id e131mr2407745lfg.67.1451209018017;
Sun, 27 Dec 2015 01:36:58 -0800 (PST)
Return-Path: <coronize(at)globalurl.net>
Received: from s17874465.onlinehome-server.info (s17874465.onlinehome-server.info. [213.165.81.117])
by mx.google.com with SMTP id 78si34159696lfw.8.2015.12.27.01.36.57
for <xxx(at)gmail.com>;
Sun, 27 Dec 2015 01:36:58 -0800 (PST)
Received-SPF: neutral (google.com: 213.165.81.117 is neither permitted nor denied by best guess record for domain of coronize(at)globalurl.net) client-ip=213.165.81.117;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 213.165.81.117 is neither permitted nor denied by best guess record for domain of coronize@globalurl.net) smtp.mailfrom=coronize(at)globalurl.net
Cake-Cabbage-Smothering: cca5a68a6668f
Message-ID: <cb192d1dd7e2ec9dcea96dc84c4ede3cc3fd(at)globalurl.net>
Bitterest-Pacemaker: send
Content-Type: text/html; charset=UTF-8
To: "xxx(at)gmail.com" <xxx(at)gmail.com>
Coerce-Skirmishes-Halting: 66A575228CE3FCD
Honoraries-Profitability-Lummox: bergen
Content-Transfer-Encoding: 7bit
Date: Sun, 27 Dec 2015 09:36:57 +0000
MIME-Version: 1.0
Subject: New voicemail - 9:36AM
From: WhatsAppService <coronize(at)globalurl.net>
213.165.81.117

inetnum: 213.165.80.0 - 213.165.95.255
netname: SCHLUND-CUSTOMERS
descr: 1&1 Internet AG
country: DE
admin-c: IPAD-RIPE
tech-c: IPOP-RIPE
remarks: INFRA-AW
remarks: in case of abuse or spam, please mailto: abuse@oneandone.net
status: ASSIGNED PA
mnt-by: AS8560-MNT
created: 2008-03-07T01:46:51Z
last-modified: 2009-05-28T17:47:40Z
source: RIPE # Filtered

role: IP Administration
address: 1&1 Internet AG
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: LTO3-RIPE
admin-c: ZIG-RIPE
admin-c: MI-RIPE
admin-c: MINK-RIPE
admin-c: VR-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPAD-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
created: 2009-05-20T17:24:09Z
last-modified: 2015-05-06T12:02:53Z
source: RIPE # Filtered

role: IP Operations
address: 1&1 Internet AG
admin-c: RME9-RIPE
admin-c: JR2342-RIPE
admin-c: LTO3-RIPE
tech-c: RME9-RIPE
tech-c: JR2342-RIPE
tech-c: LTO3-RIPE
nic-hdl: IPOP-RIPE
abuse-mailbox: abuse@oneandone.net
mnt-by: AS8560-MNT
created: 2009-05-28T16:25:04Z
last-modified: 2015-05-06T12:02:53Z
source: RIPE # Filtered

% Information related to '213.165.64.0/19AS8560'

route: 213.165.64.0/19
descr: SCHLUND-GMX-213-165-64-0
origin: AS8560
mnt-by: AS8560-MNT
created: 2003-05-20T16:03:59Z
last-modified: 2009-05-14T16:44:59Z
source: RIPE # Filtered

User avatar
A440
Posts: 2326
Joined: Sat Nov 20, 2010 1:56 am

RE: Redswitches.com & 1and1.com – unresponsive to SEO spammer

Post by A440 » Wed Jan 06, 2016 2:45 am

More . . .
Delivered-To: xxx(at)gmail.com
Received: by 10.55.77.197 with SMTP id a188csp10412781qkb;
Tue, 5 Jan 2016 15:36:11 -0800 (PST)
X-Received: by 10.112.84.44 with SMTP id v12mr33756141lby.46.1452036971636;
Tue, 05 Jan 2016 15:36:11 -0800 (PST)
Return-Path: <constituency(at)mail2freedom.com>
Received: from u16192200.onlinehome-server.com (u16192200.onlinehome-server.com. [108.175.8.30])
by mx.google.com with SMTP id i67si55273137lfd.89.2016.01.05.15.36.10
for <xxx(at)gmail.com>;
Tue, 05 Jan 2016 15:36:11 -0800 (PST)
Received-SPF: neutral (google.com: 108.175.8.30 is neither permitted nor denied by best guess record for domain of constituency(at)mail2freedom.com) client-ip=108.175.8.30;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 108.175.8.30 is neither permitted nor denied by best guess record for domain of constituency@mail2freedom.com) smtp.mailfrom=constituency@mail2freedom.com
Foal-Forbid-Estimate: D494AE3ABB16
Content-Type: text/html; charset=UTF-8
X-Priority: 1
To: "xxx(at)gmail.com" <xxx(at)gmail.com>
Message-ID: <4caed5da2a53f6.ac28e(at)u16192200.onlinehome-server.com>
Subject: Missed notifications snore
Date: Tue, 5 Jan 2016 18:36:11 +0000
Content-Transfer-Encoding: 7bit
From: Skype <constituency(at)mail2freedom.com>
Hones-Stratifies: 63
Foible-Oscillatory: texases
MIME-Version: 1.0
Savoy-Representatively-Plain: 1515
Pegboard-Beguiling: specializing
which is:

NetRange: 108.175.0.0 - 108.175.15.255
CIDR: 108.175.0.0/20
NetName: 1AND1-NETWORK
NetHandle: NET-108-175-0-0-1
Parent: NET108 (NET-108-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS8560
Organization: 1&1 Internet Inc. (11INT)
RegDate: 2012-02-08
Updated: 2012-02-08
Comment: For abuse issues, please use only abuse@1and1.com
Ref: http://whois.arin.net/rest/net/NET-108-175-0-0-1


OrgName: 1&1 Internet Inc.
OrgId: 11INT
Address: 701 Lee Rd
Address: Suite 300
City: Chesterbrook
StateProv: PA
PostalCode: 19087
Country: US
RegDate: 2006-09-05
Updated: 2013-04-23
Comment: http://www.1and1.com
Comment: For abuse issues, please use only abuse@1and1.com
Ref: http://whois.arin.net/rest/org/11INT


OrgAbuseHandle: 1AD-ARIN
OrgAbuseName: 1and1 Abuse Department
OrgAbusePhone: +1-877-206-4253
OrgAbuseEmail: abuse@1and1.com
OrgAbuseRef: http://whois.arin.net/rest/poc/1AD-ARIN

OrgTechHandle: 1NO-ARIN
OrgTechName: 1and1 ARIN Role
OrgTechPhone: +1-610-560-1617
OrgTechEmail: arin-role@oneandone.net
OrgTechRef: http://whois.arin.net/rest/poc/1NO-ARIN

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest