• hostpapa.com / hostpapasupport.com

    From Post To Usenet@21:1/5 to All on Sun Feb 21 08:04:39 2021
    Has anyone heard of these clowns before I got a spam
    email coming from their network and they are hosting
    the spammer's website. Turns out to be some illegal
    IPTV service spamming my mailbox so I reported it to
    them. Spam was sent February 15 2021.


    HostPapa
    115 George St. Suite 511
    Oakville, Ontario
    Canada, L6J 0A2
    Toll Free #: 1-888-959-7272
    Phone #: 905-315-3455
    Website: https://www.hostpapa.com/
    Email #1: abuse -[at]- hostpapa.com,
    Email #2: abuse -[at]- hostpapasupport.com
    Email #3: dmca -[at]- hostpapa.com

    The spam came from IP 45.56.222.2 which belongs
    to hostpapa.com / hostpapasupport.com

    The spammer's website is at https://maxxiptv.net
    IP: 45.56.222.2


    https://www.ultratools.com/tools/asnInfoResult?domainName=45.56.222.2


    AS13768
    Country: CA
    Registration Date: 2002-06-10
    Registrar: arin
    Owner: COGECO-PEER1, CA

    https://www.cidr-report.org/cgi-bin/as-report?as=AS13768


    02/21/21 08:01:30 dig maxxiptv.net @ 8.8.8.8
    Dig maxxiptv.net@ns2.maxxi759.hostpapavps.net (45.56.222.20) ...
    Authoritative Answer
    Query for maxxiptv.net type=255 class=1
    maxxiptv.net TXT (Text Field)
    v=spf1 +a +mx +ip4:50.31.138.24 +ip4:198.38.94.85 ~all
    maxxiptv.net SOA (Zone of Authority)
    Primary NS: ns1.maxxi759.hostpapavps.net
    Responsible person: root@maxxi759.hostpapavps.net
    serial:2019112503
    refresh:3600s (60 minutes)
    retry:1800s (30 minutes)
    expire:1209600s (14 days)
    minimum-ttl:86400s (24 hours)
    maxxiptv.net NS (Nameserver) ns2.maxxi759.hostpapavps.net
    maxxiptv.net NS (Nameserver) ns1.maxxi759.hostpapavps.net
    maxxiptv.net A (Address) 45.56.222.2
    maxxiptv.net MX (Mail Exchanger) Priority: 0 mail.maxxiptv.net
    mail.maxxiptv.net A (Address) 45.56.222.2


    Now this IP is owned by Cogeco / peer1.net who got bought out by
    aptum.com back in 2019 by the looks of it.

    https://aptum.com/newsroom/cogeco-peer-1-acquistion-by-digital-colony-closes/

    I have never had such an issue getting a spammer shut
    down they refuse to remove the site from their network
    and continue to allow the illegal operation to continue.

    https://maxxiptv.net/faq/

    They even still list a bunch of UK channels they provide in their
    illegal service.

    https://maxxiptv.net/wp-content/uploads/2018/09/UK-Entertainment.pdf <https://maxxiptv.net/wp-content/uploads/2018/09/UK-Entertainment.pdf>

    And a list of USA channels that they provided https://maxxiptv.net/wp-content/uploads/2018/09/US-Entertainment.pdf

    https://maxxiptv.net/wp-content/uploads/2018/09/PerfectPlayerInstall.pdf

    https://www.google.ca/search?source=hp&ei=KHguYP-vMY-6tgW33bnIDA&iflsig=AINFCbYAAAAAYC6GOC4T4iq9iRNdcII6KemlXX90CezH&q=maxxiptv.net&oq=maxxiptv.net&gs_lcp=Cgdnd3Mtd2l6EANQj9wQWI_cEGDb4BBoAHAAeACAAWmIAWmSAQMwLjGYAQCgAQKgAQGqAQdnd3Mtd2l6&sclient=gws-wiz&
    ved=0ahUKEwj_4_KH0fPuAhUPna0KHbduDskQ4dUDCAk&uact=5

    There is absolutely no doubt that this individual is provided an illegal
    pirated IPTV service and is spamming.

    Wow these guys are just horrible providing bullet proof
    hosting for illegal operations like this. Anyone heard of these
    clowns before? You send them an abuse complaint about spam coming
    from their network they don't remove the spammer from their
    network and keep the site up.

    Now on some of the main pages the person running this put up notices
    saying that they are out of service but I know that is only a temporary
    front and in a month or two the same person will be back up and spamming
    again. I think that was done because I sent the spam complaint to a few anti-piracy groups as well.

    I have several tickets to open with hostpapa.com
    Ticket Numbers: 5412644, 5412645, 5412646, 5409378

    I have contacted aptum.com as well with no response from them yet.


    There is part of the headers if you really want to see the full
    headers I can put them on a paste bin some where.


    ARC-Authentication-Results: i=1; mx.google.com;
    dkim=pass header.i=@maxxiptv.net header.s=default header.b=XwYethx8;
    spf=pass (google.com: domain of support@maxxiptv.net designates 45.56.222.2 as permitted sender) smtp.mailfrom=support@maxxiptv.net
    Received: from maxxi759.hostpapavps.net (maxxi759.hostpapavps.net. [45.56.222.2])
    by mx.google.com with ESMTPS id n17si16306584jap.43.2021.02.15.07.36.06
    for <REMOVED>
    (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
    Mon, 15 Feb 2021 07:36:06 -0800 (PST)
    Received-SPF: pass (google.com: domain of support@maxxiptv.net
    designates 45.56.222.2 as permitted sender) client-ip=45.56.222.2; Authentication-Results: mx.google.com;
    dkim=pass header.i=@maxxiptv.net header.s=default header.b=XwYethx8;
    spf=pass (google.com: domain of support@maxxiptv.net designates 45.56.222.2 as permitted sender) smtp.mailfrom=support@maxxiptv.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
    d=maxxiptv.net; s=default; h=Content-Transfer-Encoding:Content-Type:
    MIME-Version:Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:Content-ID:
    Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
    :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
    List-Subscribe:List-Post:List-Owner:List-Archive;

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Kohlbach@21:1/5 to Post To Usenet on Sun Feb 21 15:05:19 2021
    On Sun, 21 Feb 2021 08:04:39 -0700, Post To Usenet wrote:

    Now this IP is owned by Cogeco / peer1.net who got bought out by
    aptum.com back in 2019 by the looks of it.

    Sounds about right. Since about a year aptum shows up on my radar,
    hosting spammers. And since then no response to any complaint came, nor
    has any of the spammers been booted.

    [...]

    Were there URLs advertised in the spam? I see that often the subject is different to the payload. Like a "you won $$$ in casino..." ends up in a
    fake dating page.
    --
    Andreas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Post To Usenet@21:1/5 to Andreas Kohlbach on Mon Feb 22 07:15:15 2021
    On 2021-02-21 1:05 p.m., Andreas Kohlbach wrote:
    On Sun, 21 Feb 2021 08:04:39 -0700, Post To Usenet wrote:

    Now this IP is owned by Cogeco / peer1.net who got bought out by
    aptum.com back in 2019 by the looks of it.

    Sounds about right. Since about a year aptum shows up on my radar,
    hosting spammers. And since then no response to any complaint came, nor
    has any of the spammers been booted.

    [...]

    Were there URLs advertised in the spam? I see that often the subject is different to the payload. Like a "you won $$$ in casino..." ends up in a
    fake dating page.



    Yes the URLs were advertised in the spam.

    and that isn't good news about aptum.com I had not heard
    of them up to now but they are on my radar now.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)