SBL

  • The SBL lists only IP addresses (not domains, email addresses, names or anything else).
  • The owners of the domain hired ROKSO spammer “Mihail Fortis” (probably under another name) to spam for them.
  • If you are unable to send email to someone due to this SBL listing, please contact your Internet Service Provider and show them this page – your Service Provider needs to contact the Spamhaus SBL team to resolve the issue (if you are not the Internet Service Provider, please do not contact us.)

12/19/2016:
This IP address hosts the A record for the domain likvidaator.com, a repeat customer of longtime Estonian spammer spammer Marko Krist. Likvidaator.com has several previous SBL listings and is well awre of what they are doing tand that it is not acceptable.

Received: from arikiri.eu (unknown [109.230.199.101])
Date: Mon, 19 Dec 2016 11:##:## +0200
From: Likvidaator
Subject: Firma likvideerimine ja alternatiivid

www.likvidaator.com

Likvidaator – ettevõtete likvideerimine
english по-русски

Lugupeetud NAUTIC ABI OÜ omanik!

Kui Teie ettevõttel ei lähe enam hästi, on oma valdkonna tippspetsialistide abi ühe telefonikõne või meili kaugusel.

$ host likvidaator.com
likvidaator.com has address 151.101.1.195
likvidaator.com mail is handled by 1 aspmx.l.google.com.
likvidaator.com mail is handled by 10 alt3.aspmx.l.google.com.
likvidaator.com mail is handled by 10 alt4.aspmx.l.google.com.
likvidaator.com mail is handled by 5 alt1.aspmx.l.google.com.
likvidaator.com mail is handled by 5 alt2.aspmx.l.google.com.

10/04/2016 [SBL304171]: Still spamming.

Received: from ariteade.eu (ariteade.eu [173.254.238.100])
Date: Wed, 5 Oct 2016 02:##:## +0300
From: Likvidaator
Reply-To: info@likvidaator.com
Subject: Firma likvideerimine ja alternatiivid

www.likvidaator.com

Lugupeetud NAUTIC ABI OÜ omanik!

Kui Teie ettevõttel ei lähe enam hästi, on oma valdkonna tippspetsialistide abi ühe telefonikõne või meili kaugusel.

URI: http://likvidaator.com/

$ host likvidaator.com
likvidaator.com has address 188.166.68.88
likvidaator.com mail is handled by 20 30303639.in2.mandrillapp.com.
likvidaator.com mail is handled by 10 30303639.in1.mandrillapp.com.

7/27/2016:
Spamming through the same ROKSO spammer for a second time.

Emailing spamtraps. The spammed company Likvidaator is a previous Fortis customer.

Received: from emarkkinointi.eu (unknown [109.230.199.14])
Date: Wed, 27 Jul 2016 20:##:## +0300
From: Likvidaator
Subject: Likvideerimine või Panama pakett?

URI: http://likvidaator.com/

$ host likvidaator.com
likvidaator.com has address 188.166.68.88
likvidaator.com mail is handled by 10 30303639.in1.mandrillapp.com.
likvidaator.com mail is handled by 20 30303639.in2.mandrillapp.com.

7/07/2016:
This IP address hosts the A record and website for the domain likvidaator.com. The owners of this domain hired ROKSO spammer “Mihail Fortis” (probably under another name) to spam for them.

You are responsible for the actions of those whom you hire to advertise for you!

Received: from reklaamserver.eu (reklaamserver.eu [158.69.195.229])
Date: Thu, 7 Jul 2016 16:##:## +0300
From: Likvidaator
Reply-To: info@likvidaator.com
Subject: Likvideerimine või Panama pakett?

URI: http://likvidaator.com/
Email: likvidaator@yahoo.com
Skype: likvidaator

$ host likvidaator.com
likvidaator.com has address 188.166.68.88
likvidaator.com mail is handled by 10 30303639.in1.mandrillapp.com.
likvidaator.com mail is handled by 20 30303639.in2.mandrillapp.com.

inetnum: 188.166.0.0 – 188.166.127.255
netname: EU-DIGITALOCEAN-NL1
descr: Digital Ocean, Inc.
country: NL
org: ORG-DOI2-RIPE
admin-c: PT7353-RIPE
tech-c: PT7353-RIPE
status: ASSIGNED PA
mnt-by: digitalocean
mnt-lower: digitalocean
mnt-routes: digitalocean
mnt-domains: digitalocean
created: 2015-06-03T01:18:40Z
last-modified: 2015-11-20T14:46:27Z
source: RIPE # Filtered

organisation: ORG-DOI2-RIPE
org-name: Digital Ocean, Inc.
org-type: LIR
address: 101 Ave of the Americas
10th Floor
address: New York
address: 10013
address: UNITED STATES
phone: +1 888 890 6714
mnt-ref: digitalocean
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
abuse-mailbox: abuse@digitalocean.com
abuse-c: AD10778-RIPE
created: 2012-11-29T14:59:01Z
last-modified: 2015-11-19T16:11:55Z
source: RIPE # Filtered

person: Network Operations
address: 101 Ave of the Americas, 10th Floor, New York, NY 10013
phone: +13478756044
nic-hdl: PT7353-RIPE
mnt-by: digitalocean
created: 2015-03-11T16:37:07Z
last-modified: 2015-11-19T15:57:21Z
source: RIPE # Filtered
org: ORG-DOI2-RIPE

Domain Name: LIKVIDAATOR.COM
Registry Domain ID: 682775487_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2015-11-25T15:12:01.00Z
Creation Date: 2006-11-24T11:29:52.00Z
Registrar Registration Expiration Date: 2017-11-24T11:29:52.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Domain Status: ok https://www.icann.org/epp#ok
Registry Registrant ID:
Registrant Name: TANEL KALDOJA
Registrant Organization: VIRTUAAL.COM LLC
Registrant Street: PALDISKI MNT 14
Registrant City: TALLINN
Registrant State/Province: EE
Registrant Postal Code: 10149
Registrant Country: EE
Registrant Phone: +372.5049620
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: SUPPORT@VIRTUAAL.COM
Registry Admin ID:
Admin Name: TANEL KALDOJA
Admin Organization: VIRTUAAL.COM LLC
Admin Street: PALDISKI MNT 14
Admin City: TALLINN
Admin State/Province: EE
Admin Postal Code: 10149
Admin Country: EE
Admin Phone: +372.5049620
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: SUPPORT@VIRTUAAL.COM
Registry Tech ID:
Tech Name: TANEL KALDOJA
Tech Organization: VIRTUAAL.COM LLC
Tech Street: PALDISKI MNT 14
Tech City: TALLINN
Tech State/Province: EE
Tech Postal Code: 10149
Tech Country: EE
Tech Phone: +372.5049620
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: SUPPORT@VIRTUAAL.COM
Name Server: NS1.DIGITALOCEAN.COM
Name Server: NS2.DIGITALOCEAN.COM
Name Server: NS3.DIGITALOCEAN.COM
DNSSEC: unSigned

@rmd1023: @angularjs One of the IPs in DNS for angular.io is on @spamhaus blocklist:

Date: Mon, 19 Dec 2016 11:##:## +0200

Date: Wed, 5 Oct 2016 02:##:## +0300

Date: Wed, 27 Jul 2016 20:##:## +0300

Date: Thu, 7 Jul 2016 16:##:## +0300

phone: +1 888 890 6714

SBL

You might also like More from author

Comments are closed, but trackbacks and pingbacks are open.