The following IP addresses are sending spam for Labas Group (aka Nermeka, Toltrade, Geldaude, etc.), a spam operation that has years of SBL listings behind it.
SENDING IPs:
81.28.104.223 mta223.marketing.labas-grupe.com
81.28.104.224 mta224.marketing.labas-grupe.com
81.28.104.225 mta225.marketing.labas-grupe.com
81.28.104.226 mta226.marketing.labas-grupe.com
81.28.104.227 mta227.marketing.labas-grupe.com
81.28.104.228 mta228.marketing.labas-grupe.com
…
81.28.104.252 mta252.marketing.labas-grupe.com
81.28.104.253 mta253.marketing.labas-grupe.com
81.28.104.254 mta254.marketing.labas-grupe.com
SPAM SAMPLE:
Received: from mta##.marketing.labas-grupe.com (mta###.marketing.labas-grupe.com [81.28.104.##])
Date: Sat, 03 Apr 2021 12:##:## +0300
From: «Viktorija | BauHireLabas» <Germany@marketing.labas-grupe.com>
Reply-To: «Viktorija | BauHireLabas» <info@bauhirelabas.com>
Subject: Angebot an Hintemann — Fliesen Verlegung und Handel GmbH
<snip>
Renovieren und Innenausbau – günstig zur Topqualität!
+49 30 40361190 Viktorija
<snip>
[ Erfahren Sie mehr ]
[[ http://bauhirelabas.com/ ]]
<snip>
info@bauhirelabas.com | +49 30 40361190 Viktorija
© Copyright 2021. All rights reserved JSC Reklamos Septynetas.
[ unsubscribe ]
[[ http://www.unsubscribefromlist.net/ ]]
<snip>
DNS RESOLUTION FOR DOMAINS:
$ host labas-grupe.com
labas-grupe.com has address 35.204.59.57
labas-grupe.com mail is handled by 10 mx10.mailspamprotection.com.
labas-grupe.com mail is handled by 20 mx20.mailspamprotection.com.
labas-grupe.com mail is handled by 30 mx30.mailspamprotection.com.
$ host bauhirelabas.com
bauhirelabas.com has address 184.168.131.241
bauhirelabas.com mail is handled by 0 bauhirelabas-com.mail.protection.outlook.
WHOIS:
% Information related to ‘81.28.104.0 — 81.28.107.255’
% Abuse contact for ‘81.28.104.0 — 81.28.107.255’ is ‘leonard@imingo.net’
inetnum: 81.28.104.0 — 81.28.107.255
netname: VPS-Hosting
country: FR
admin-c: LB4157-RIPE
tech-c: LB4157-RIPE
status: ASSIGNED PA
mnt-by: IMINGOADM-MNT
mnt-by: IMINGO-MNT
created: 2017-01-19T15:24:48Z
last-modified: 2017-01-19T15:24:48Z
source: RIPE
person: Leonard BIRRITTERI
address: IMINGO SERVICES
address: 14 rue du Nord
address: 57050 Le Ban Saint Martin
address: FRANCE
phone: +33 3 87185203
nic-hdl: LB4157-RIPE
mnt-by: IMINGO-MNT
created: 2006-01-09T22:33:13Z
last-modified: 2006-01-09T22:51:01Z
source: RIPE # Filtered
% Information related to ‘81.28.96.0/20AS41770’
route: 81.28.96.0/20
descr: IMINGO
origin: AS41770
remarks: ************************************************
remarks: * For any abuse reports, please send only to *
remarks: * abuse@imingo.net *
remarks: ************************************************
mnt-by: IMINGO-MNT
created: 2006-11-02T22:18:52Z
last-modified: 2006-11-02T22:18:52Z
source: RIPE
Domain Name: LABAS-GRUPE.COM
Registry Domain ID: 2593424356_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2021-02-23T16:42:52
Creation Date: 2021-02-23T16:38:47
Registrar Registration Expiration Date: 2022-02-23T16:38:47
Registrar: TUCOWS, INC.
Registrar IANA ID: 69
Reseller: SiteGround Spain S.L.
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Registry Registrant ID:
Registrant Name: Contact Privacy Inc. Customer 0160947276
Registrant Organization: Contact Privacy Inc. Customer 0160947276
Registrant Street: 96 Mowat Ave
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M6K 3M1
Registrant Country: CA
Registrant Phone: +1.4165385457
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: labas-grupe.com@contactprivacy.com
Registry Admin ID:
Admin Name: Contact Privacy Inc. Customer 0160947276
Admin Organization: Contact Privacy Inc. Customer 0160947276
Admin Street: 96 Mowat Ave
Admin City: Toronto
Admin State/Province: ON
Admin Postal Code: M6K 3M1
Admin Country: CA
Admin Phone: +1.4165385457
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: labas-grupe.com@contactprivacy.com
Registry Tech ID:
Tech Name: Contact Privacy Inc. Customer 0160947276
Tech Organization: Contact Privacy Inc. Customer 0160947276
Tech Street: 96 Mowat Ave
Tech City: Toronto
Tech State/Province: ON
Tech Postal Code: M6K 3M1
Tech Country: CA
Tech Phone: +1.4165385457
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: labas-grupe.com@contactprivacy.com
Name Server: ns1.gnld9.siteground.eu
Name Server: ns2.gnld9.siteground.eu
DNSSEC: unsigned
Domain Name: bauhirelabas.com
Registry Domain ID: 2592688088_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2021-02-20T04:20:11Z
Creation Date: 2021-02-20T06:20:08Z
Registrar Registration Expiration Date: 2022-02-20T06:20:08Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.4806242505
Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited
Domain Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited
Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited
Registry Registrant ID: Not Available From Registry
Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com
Registrant Street: 14455 N. Hayden Road
Registrant City: Scottsdale
Registrant State/Province: Arizona
Registrant Postal Code: 85260
Registrant Country: US
Registrant Phone: +1.4806242599
Registrant Phone Ext:
Registrant Fax: +1.4806242598
Registrant Fax Ext:
Registrant Email: bauhirelabas.com@domainsbyproxy.com
Registry Tech ID: Not Available From Registry
Tech Name: Registration Private
Tech Organization: Domains By Proxy, LLC
Tech Street: DomainsByProxy.com
Tech Street: 14455 N. Hayden Road
Tech City: Scottsdale
Tech State/Province: Arizona
Tech Postal Code: 85260
Tech Country: US
Tech Phone: +1.4806242599
Tech Phone Ext:
Tech Fax: +1.4806242598
Tech Fax Ext:
Tech Email: bauhirelabas.com@domainsbyproxy.com
Registry Admin ID: Not Available From Registry
Admin Name: Registration Private
Admin Organization: Domains By Proxy, LLC
Admin Street: DomainsByProxy.com
Admin Street: 14455 N. Hayden Road
Admin City: Scottsdale
Admin State/Province: Arizona
Admin Postal Code: 85260
Admin Country: US
Admin Phone: +1.4806242599
Admin Phone Ext:
Admin Fax: +1.4806242598
Admin Fax Ext:
Admin Email: bauhirelabas.com@domainsbyproxy.com
Name Server: NS57.DOMAINCONTROL.COM
Name Server: NS58.DOMAINCONTROL.COM
DNSSEC: unsigned