4/05/2021:
This domain ha moved from Digital Ocean to Google hosting. It has not cleared up issues with Spamhaus, and is actively involved in advertising its services through hailstorm snowshoe spam. We are listing thie hosting IP to protect users from spam and document the issue for Google.
$ host 212medya.com
212medya.com has address 34.107.28.143
212medya.com mail is handled by 1 aspmx.l.google.com.
212medya.com mail is handled by 5 alt1.aspmx.l.google.com.
212medya.com mail is handled by 5 alt2.aspmx.l.google.com.
212medya.com mail is handled by 10 alt3.aspmx.l.google.com.
212medya.com mail is handled by 10 alt4.aspmx.l.google.com.
3/12/2021 [SBL518723]:
This domain has moved to Digital Ocean after its previous host (Hetzner) terminated services to it. The owners of the domain either do not understand or will not accept that spamming through a third IP address or different domain to advertise their services is still spam. We are listing this IP address and continue to list this domain the DBL to protect Spamhaus users from their spam.
3/10/2021 [SBL518602 ]:
This IP address hosts the A record and website of 212 Medya, a digital marketing company based in Turkey. This company is sending spam advertising SEO and website development services from a separate IP address on Digital Ocean.
Received: from mail.budolu.com (mail.budolu.com [159.65.126.254])
Date: Wed, 10 Mar 2021 09:##:## +0000
From: 212 MEDYA <info@mail.budolu.com>
Reply-To: 212 MEDYA <destek@212medya.com>
Subject: Google aramalarında önde çıkın
<snip>
Siz Müşteriyi Değil, Müşteri Sizi Bulsun
Bırakın Ürünlerinizi Google Satsın
<snip>
[
REKLAM PAKETLERİNİ İNCELE ]
<snip>
URI: https://bulten.budolu.com/campaigns/<x>
$ host 212medya.com
212medya.com has address 195.201.98.46
212medya.com mail is handled by 1 aspmx.l.google.com.
212medya.com mail is handled by 5 alt1.aspmx.l.google.com.
212medya.com mail is handled by 5 alt2.aspmx.l.google.com.
212medya.com mail is handled by 10 alt3.aspmx.l.google.com.
212medya.com mail is handled by 10 alt4.aspmx.l.google.com.
% Information related to ‘195.201.96.0 — 195.201.103.255’
% Abuse contact for ‘195.201.96.0 — 195.201.103.255’ is ‘abuse@hetzner.com’
inetnum: 195.201.96.0 — 195.201.103.255
netname: HETZNER-nbg1-dc3
descr: Hetzner Online GmbH
descr: Datacenter nbg1-dc3
country: DE
admin-c: HOAC1-RIPE
tech-c: HOAC1-RIPE
status: ASSIGNED PA
remarks: INFRA-AW
mnt-by: HOS-GUN
mnt-lower: HOS-GUN
mnt-routes: HOS-GUN
created: 2018-03-15T14:53:39Z
last-modified: 2018-03-15T14:53:39Z
source: RIPE
role: Hetzner Online GmbH — Contact Role
address: Hetzner Online GmbH
address: Industriestrasse 25
address: D-91710 Gunzenhausen
address: Germany
phone: +49 9831 505-0
fax-no: +49 9831 505-3
abuse-mailbox: abuse@hetzner.com
remarks: *************************************************
remarks: * For spam/abuse/security issues please contact *
remarks: * abuse@hetzner.com, or fill out the form at *
remarks: * abuse.hetzner.com, thank you. *
remarks: *************************************************
remarks:
remarks: *************************************************
remarks: * Any questions on Peering please send to *
remarks: * peering@hetzner.com *
remarks: *************************************************
org: ORG-HOA1-RIPE
admin-c: MH375-RIPE
tech-c: GM834-RIPE
tech-c: SK2374-RIPE
tech-c: TF2013-RIPE
tech-c: MF1400-RIPE
tech-c: SK8441-RIPE
nic-hdl: HOAC1-RIPE
mnt-by: HOS-GUN
created: 2004-08-12T09:40:20Z
last-modified: 2020-09-25T12:21:56Z
source: RIPE # Filtered
% Information related to ‘195.201.0.0/16AS24940’
route: 195.201.0.0/16
org: ORG-HOA1-RIPE
descr: HETZNER-DC
origin: AS24940
mnt-by: HOS-GUN
created: 2017-12-14T08:50:16Z
last-modified: 2017-12-14T08:50:16Z
source: RIPE
organisation: ORG-HOA1-RIPE
org-name: Hetzner Online GmbH
country: DE
org-type: LIR
address: Industriestrasse 25
address: D-91710
address: Gunzenhausen
address: GERMANY
phone: +49 9831 5050
fax-no: +49 9831 5053
admin-c: TF2013-RIPE
admin-c: MF1400-RIPE
admin-c: GM834-RIPE
admin-c: HOAC1-RIPE
admin-c: MH375-RIPE
admin-c: SK2374-RIPE
admin-c: SK8441-RIPE
abuse-c: HOAC1-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: HOS-GUN
mnt-by: RIPE-NCC-HM-MNT
mnt-by: HOS-GUN
created: 2004-04-17T11:07:58Z
last-modified: 2020-12-16T13:13:06Z
source: RIPE # Filtered
Domain Name: 212MEDYA.COM
Registry Domain ID: 1606275653_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.aerotek.com.tr
Registrar URL:
Updated Date: 2020-07-13T06:50:20Z
Creation Date: 2010-07-13T12:49:10Z
Registrar Registration Expiration Date: 2021-07-13T12:49:10Z
Registrar: Aerotek Bilisim Sanayi ve Ticaret AS
Registrar IANA ID: 1534
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: Domain Admin
Registrant Organization: Privacy Protect, LLC (PrivacyProtect.org)
Registrant Street: 10 Corporate Drive
Registrant City: Burlington
Registrant State/Province: MA
Registrant Postal Code: 01803
Registrant Country: US
Registrant Phone: +1.8022274003
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: contact@privacyprotect.org
Registry Admin ID: Not Available From Registry
Admin Name: Domain Admin
Admin Organization: Privacy Protect, LLC (PrivacyProtect.org)
Admin Street: 10 Corporate Drive
Admin City: Burlington
Admin State/Province: MA
Admin Postal Code: 01803
Admin Country: US
Admin Phone: +1.8022274003
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: contact@privacyprotect.org
Registry Tech ID: Not Available From Registry
Tech Name: Domain Admin
Tech Organization: Privacy Protect, LLC (PrivacyProtect.org)
Tech Street: 10 Corporate Drive
Tech City: Burlington
Tech State/Province: MA
Tech Postal Code: 01803
Tech Country: US
Tech Phone: +1.8022274003
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: contact@privacyprotect.org
Name Server: merlin.ns.cloudflare.com
Name Server: tani.ns.cloudflare.com
DNSSEC: Unsigned