Web Hosting Talk : Web Hosting Main Forums : Domain Names : whois help!

[saj]

Hi guys

Can anyone tell me who these nameservers belong to please

PARK23.SECURESERVER.NET
PARK24.SECURESERVER.NET

I tried looking up cant seem to find the ISP or anything that its related too.....been getting email bombards from a domain residing on those nameserver thinking of contacting them..ive no idea who it resolves too

anyone know?

thank you
sajid

[ub3r]

Pretty sure those belong to godaddy.

[avythe]

Definitely godaddy

[Disgruntled]

Those definitely belong to Godaddy. You should send a complaint to abuse@godaddy.com
I think those servers are used to redirect, so the spammer probably has a site hosted and registered somewhere else that it's redirected to. Redirects can be set to either show or hide the URL to which it has been redirected. Sometimes you can catch a glimpse of the redirect URL in the task bar at the bottom of the browser. In Windows you can hit the Print Screen button and maybe catch a picture of it to the clipboard if you're fast enough. If you have tried that before and it goes too quickly, clearing out the cache and cookies might help to make the redirect a little bit slower.

[ub3r]

Could you provide us with the email headers?

[saj]

Thanks all

this is the header i assume its godaddy then??


Return-path: <im@aminshabazz.net>
Envelope-to: myemailddy
Delivery-date: Fri, 13 Oct 2006 18:27:46 +0000
Received: from [68.178.232.10] (port=48236 helo=smtpout15-02.prod.mesa1.secureserver.net)
by host.mpadc.com with smtp (Exim 4.52)
id 1GYRl3-0003aP-U4
for myemailddy; Fri, 13 Oct 2006 18:27:46 +0000
Received: (qmail 32298 invoked from network); 13 Oct 2006 18:27:45 -0000
Received: from unknown (HELO gem-wbe12.prod.mesa1.secureserver.net) (64.202.189.55)
by smtpout15-02.prod.mesa1.secureserver.net with SMTP; 13 Oct 2006 18:27:45 -0000
Received: (qmail 6852 invoked by uid 99); 13 Oct 2006 18:27:45 -0000
Date: Fri, 13 Oct 2006 11:27:45 -0700
From: im@aminshabazz.net
Subject: Whois Record for Mpadc.com
To: myemailddy
Message-ID: <20061013112745.87623ba755bd0b9af59cd7011b5bee84.e5fe15a2b6.wbe@mobilemail.secureserver.net>
MIME-Version: 1.0
Content-Type: TEXT/plain; CHARSET=US-ASCII
X-Originating-IP: 67.190.234.254
X-ClamAntiVirus-Scanner: This mail is clean

[Lubeca]

FWIW, the originating IP address (67.190.234.254) belongs to Comcast which is one of the major ISPs in the USA.

The other two IP addresses, as others have rightly said, belong to GoDaddy.

If this is spam you want to complain to both Godaddy and Comcast.

[Devilboy3007]

They both belong to GoDaddy Software

[Devilboy3007]

The person is sending the e-mail throgh his ISP called Comcast which is based here in the US as a major Internet Provider and is e-mailing it through his GoDaddy Domains and Servers

[CaroNet-Hesham]

Contact Comcast and Google Abuse department. They're the ones who can stop this

[stub]

Complain to Comcast and GoDaddy. Godaddy will take swift action to stop this spam.

[Stan Marsh]

Originally Posted by CaroNet-Hesham

Contact Comcast and Google Abuse department. They're the ones who can stop this

What Google has to do with this?

[Disgruntled]

Checking 68.178.232.10 at http://www.arin.net/whois/ I find it registered to Godaddy.

67.190.234.254 gives me a result of Comcast. I suspect a Comcast connection was probably used to access the Godaddy account.