5/30/2018:
Google just indicated that they have «taken action» against this group, but we have spam from the past day from this group. Is Google actually unaware that emarketeers4.asia is the same entity as emarketeerz6.com, even though the April spam sample shows that they are the same?
Received: from mail-pg0-f70.google.com (mail-pg0-f70.google.com [74.125.83.70])
X-BeenThere: new22@emarketeers4.asia
Received: from EUR04-VI1-obe.outbound.protection.outlook.com
(mail-vi1eur04hn0203.outbound.protection.outlook.com. [104.47.14.203])
Date: Wed, 30 May 2018 06:##:## +0000
From: The Business Marketeers <mktg.emarketing9@outlook.com>
Subject: 20% off on email Marketing services!
Mailing-list: list new22@emarketeers4.asia; contact
new22+owners@emarketeers4.asia
List-ID: <new22.emarketeers4.asia>
<snip>
You received this message because you are subscribed to the Google Groups
«group05» group.
To unsubscribe from this group and stop receiving emails from it, send an email to
group05+unsubscribe@emarketeers4.asia.
—
You received this message because you are subscribed to the Google Groups «new22»
group.
To unsubscribe from this group and stop receiving emails from it, send an email to
+new22+unsubscribe@emarketeers4.asia.
<snip>
4/06/2018:
Google Groups hosts a set of spam groups all associated with the domain emarketeerz6.com, and also hosts the A Record and website of this domain. These groups spam purchased and appended lists with various advertisements.
Microsoft hosts the sending email address for spam sent to at least some of these groups, including the group in the spam sample.
Google: Please shut down all groups belonging to this entity, and place the domain on Registrar-Hold status.
Microsoft: Please shut down the sender email address for this email, and any other resources owned by or registered by the same entity.
Received: from mail-pl0-f69.google.com (mail-pl0-f69.google.com [209.85.160.69])
X-BeenThere: new29@emarketeerz6.com
Received: from EUR01-HE1-obe.outbound.protection.outlook.com
(mail-oln040092065034.outbound.protection.outlook.com. [40.92.65.34])
Date: Fri, 6 Apr 2018 09:##:## +0000
From: The Business Marketeers <mktg.emark6@outlook.com>
To: «<x>@emarketeers4.asia» <<x>@emarketeers4.asia>
Subject: Hajj & Umrah Packages for Rajab.
List-ID: <new29.emarketeerz6.com>
<snip>
Flyer International Travel Agency Pvt Ltd.
We are announcing cheapest Umrah packages in all over Pakistan.
We have Economy, Economy plus, Standard and 3 Star packages
Kindly open the attachments for complete detailed packages.
<snip>
[ Umrah & Hajj Services]
Address: 308 3rd Floor Madina City Mall Abdullah Haroon Road Saddar karachi.
Telephone No: 0092-21-35653649,0092-21-35653653-54
Fax No: 0092-21-35636354 Cell: 0092-321-2422485 ,0092-0323-2422485 ,0092-0322-2422485
E-mail: flyer_int@yahoo.com, website: www.flyer.com.pk
<snip>
$ host emarketeerz6.com
emarketeerz6.com has address 216.239.36.21
emarketeerz6.com has address 216.239.38.21
emarketeerz6.com has address 216.239.32.21
emarketeerz6.com has address 216.239.34.21
emarketeerz6.com mail is handled by 10 aspmx3.googlemail.com.
emarketeerz6.com mail is handled by 10 aspmx2.googlemail.com.
emarketeerz6.com mail is handled by 5 alt1.aspmx.l.google.com.
emarketeerz6.com mail is handled by 5 alt2.aspmx.l.google.com.
emarketeerz6.com mail is handled by 1 aspmx.l.google.com.
Domain Name: EMARKETEERZ6.COM
Registry Domain ID: 2015919448_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2018-04-01T14:44:13.00Z
Creation Date: 2016-03-26T06:39:00.00Z
Registrar Registration Expiration Date: 2019-03-26T06:39:56.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: WHOIS AGENT
Registrant Organization: WHOIS PRIVACY PROTECTION SERVICE, INC.
Registrant Street: PO BOX 639
Registrant Street: C/O EMARKETEERZ6.COM
Registrant City: KIRKLAND
Registrant State/Province: WA
Registrant Postal Code: 98083
Registrant Country: US
Registrant Phone: +1.4252740657
Registrant Phone Ext:
Registrant Fax: +1.4259744730
Registrant Fax Ext:
Registrant Email: BCQFKVVC@WHOISPRIVACYPROTECT.COM
Registry Admin ID:
Admin Name: WHOIS AGENT
Admin Organization: WHOIS PRIVACY PROTECTION SERVICE, INC.
Admin Street: PO BOX 639
Admin Street: C/O EMARKETEERZ6.COM
Admin City: KIRKLAND
Admin State/Province: WA
Admin Postal Code: 98083
Admin Country: US
Admin Phone: +1.4252740657
Admin Phone Ext:
Admin Fax: +1.4259744730
Admin Fax Ext:
Admin Email: BCQFKVVC@WHOISPRIVACYPROTECT.COM
Registry Tech ID:
Tech Name: WHOIS AGENT
Tech Organization: WHOIS PRIVACY PROTECTION SERVICE, INC.
Tech Street: PO BOX 639
Tech Street: C/O EMARKETEERZ6.COM
Tech City: KIRKLAND
Tech State/Province: WA
Tech Postal Code: 98083
Tech Country: US
Tech Phone: +1.4252740657
Tech Phone Ext:
Tech Fax: +1.4259744730
Tech Fax Ext:
Tech Email: BCQFKVVC@WHOISPRIVACYPROTECT.COM
Name Server: DNS1.NAME-SERVICES.COM
Name Server: DNS2.NAME-SERVICES.COM
Name Server: DNS3.NAME-SERVICES.COM
Name Server: DNS4.NAME-SERVICES.COM
Name Server: DNS5.NAME-SERVICES.COM
DNSSEC: unSigned
Registrar Abuse Contact Email: abuse@enom.com
Registrar Abuse Contact Phone: +1.4259744689