[email] [drugs] [71.92.200.124] (myCanadian.net - renedrop.com - uiltonthe.net - ferrywend.com - hebeticbob.com) Canadian RX
TomezNet
IP 71.92.200.124 71-92-200-124.dhcp.gldl.ca.charter.com
(at ns2.ca.charter.com / ns1.charter.com / chartercom.com)
Spamvert:
www.myCanadian.net IP 200.62.226.85
(SBL51012) (at telmex.com.pe / NS4.ATTLA.COM.PE / ns3.firstcom.com.pe)
More info below:
====================
X-SID-PRA: Bernetta <seh...@malaysiaairlineseurope.com>
X-Message-Info: txF49lGdW43KnzHR2bXR9hu9DHob2N6VqR84ka0DChc=
Received: from tomts49-srv.bellnexxia.net ([209.226.175.193]) by bay0-
pamc1-f3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 7 Mar 2007 19:05:43 -0800
Received: from [MUNGED]
by toip16.srvr.bell.ca with ESMTP; 07 Mar 2007 22:05:29 -0500
Received: (qmail 10008 invoked by uid 110); 7 Mar 2007 22:05:29 -0500
Delivered-To: [MUNGED]
Received: (qmail 9989 invoked from network); 7 Mar 2007 22:05:28 -0500
Received: from 71-92-200-124.dhcp.gldl.ca.charter.com (HELO
mail.bigdeal.com) (apo...@71.92.200.124)
by [MUNGED] with SMTP; 7 Mar 2007 22:05:28 -0500
Received: from [192.168.4.17] (port=34452 helo=ws2.domain)
by mail.bigdeal.com with asmtp
id J85Gz013639268
for [MUNGED]; Thu, 08 Mar 2007 03:08:43 +0000
Date: Thu, 08 Mar 2007 03:08:43 +0000
From: "Bernetta" <seh...@malaysiaairlineseurope.com>
X-Priority: 3 (Normal)
Message-Id: <HsKILy.20070228033951@user1>
To: <[MUNGED]>
Subject: Canadian RX
X-Mailer: ThinData EMS v30
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Return-Path: seh...@malaysiaairlineseurope.com
X-OriginalArrivalTime: 08 Mar 2007 03:05:43.0595 (UTC)
FILETIME=[A90D27B0:01C7612E]
Good morning!
Please check our online RX shop and find out:
- low prices, great assortment
- fast shipping and delivery
- friednly customer support
- only Confidential purchase
- all products are verified by VISA!
Check it out: http://www.myCanadian.net
Thank you,
myCanadian pharmacy
-- END OF SPAM --
See:
IP 71.92.200.124 71-92-200-124.dhcp.gldl.ca.charter.com
http://www.moensted.dk/spam/?addr=71.92.200.124
Charter Communications NETBLK-CHARTER-NET (NET-71-80-0-0-1)
71.80.0.0 - 71.95.255.255
Charter Communications MNT-CA-71-92-192 (NET-71-92-192-0-1)
71.92.192.0 - 71.92.223.255
OrgName: Charter Communications
OrgID: CC04
NetRange: 71.92.192.0 - 71.92.223.255
CIDR: 71.92.192.0/19
NetName: MNT-CA-71-92-192
NetHandle: NET-71-92-192-0-1
Parent: NET-71-80-0-0-1
NetType: Reallocated
Prefix: 71.92.192.0/19
Prefix Name: LA KMA, Charter Communications (WD) CHTR CA Public
AS: 22291
AS Name: CHTR WD Charter Communications, Western Division (AS22291)
ASN: 22291
ASN Name: CHARTER-LA
Country (per IP registrar): US [United States]
Country IP Range: 71.64.0.0 to 71.127.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=22291
8 SBL/ROKSO listings for IPs under the responsibility of charter.com
http://www.spamhaus.org/sbl/listings.lasso?isp=charter.com
See:
www.myCanadian.net IP 200.62.226.85
ns1.renedrop.com [85.136.20.235] [TTL=172800] [ES]
ns1.uiltonthe.net [85.136.20.235] [TTL=172800] [ES]
ns2.ferrywend.com [63.223.11.14] [TTL=172800] [US]
ns2.hebeticbob.com [64.94.117.200] [TTL=172800] [US]
www.myCanadian.net has no MX records -> [myCanadian.net has 1 MX
record mail.myCanadian.net (10)]
http://www.moensted.dk/spam/?addr=200.62.226.85
http://www.spamhaus.org/query/bl?ip=200.62.226.85
More 200.62.226.85 sightings:
http://groups.google.com/groups/search?q=200.62.226.85+group%3A*abuse&start=0&scoring=d&
inetnum: 200.62.226.80/29
status: reallocated
owner: EJERCITO PERUANO - CGE
ownerid: PE-EPCG-LACNIC
Aliases on the same IP:
buzzian.hk
ns1.buzzian.hk
ns2.buzzian.hk
www.galroe.com
galroe.com
ns1.galroe.com
ns2.galroe.com
Prefix: 200.62.224.0/21
ASN: 12252
ASN Name: LACNIC-12252
AS Name: TELMEX PERU Autonomous System Object Telmex Peru Core
Internet
Country (per IP registrar): PE [Peru]
Country IP Range: 200.62.128.0 to 200.62.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=12252
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL51012
200.62.226.85/32 is listed on the Spamhaus Block List (SBL/ROKSO)
07-Mar-2007 08:03 GMT | SR20
Yambo Financials.
Yambo botnet webservers/nameservers (compromised systems)
3 SBL/ROKSO listings for IPs under the responsibility of telmex.com.pe
http://www.spamhaus.org/sbl/listings.lasso?isp=telmex.com.pe
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... mycanadian.net
Creation Date........ 2006-12-30 06:11:15
Registration Date.... 2006-12-30 06:11:15
Expiry Date.......... 2007-12-30 06:11:15
Organisation Name.... liu fei
Organisation Address. jiang xi nan chang
Organisation Address.
Organisation Address. nan chang
Organisation Address. 321000
Organisation Address. JX
Organisation Address. CN
Admin Name........... liu fei
Admin Address........ jiang xi nan chang
Admin Address........
Admin Address........ nan chang
Admin Address........ 321000
Admin Address........ JX
Admin Address........ CN
Admin Email.......... admin[]MYCANADIAN.net
Admin Phone.......... +86.7913210022
Admin Fax............ +86.7913210022
Tech Name............ liu fei
Tech Address......... jiang xi nan chang
Tech Address.........
Tech Address......... nan chang
Tech Address......... 321000
Tech Address......... JX
Tech Address......... CN
Tech Email........... ad...@MYCANADIAN.net
Tech Phone........... +86.7913210022
Tech Fax............. +86.7913210022
Bill Name............ liu fei
Bill Address......... jiang xi nan chang
Bill Address.........
Bill Address......... nan chang
Bill Address......... 321000
Bill Address......... JX
Bill Address......... CN
Bill Email........... ad...@MYCANADIAN.net
Bill Phone........... +86.7913210022
Bill Fax............. +86.7913210022
Name Server.......... ns2.ferrywend.com
Name Server.......... ns1.renedrop.com
Name Server.......... ns1.uiltonthe.net
Name Server.......... ns2.hebeticbob.com
More myCanadian.net sightings:
http://groups.google.com/groups/search?q=myCanadian.net+group%3A*abuse
See:
ns1.renedrop.com IP 85.136.20.235 => SBL49493
ns1.renedrop.com has no MX records -> [renedrop.com has 1 MX record
mail.renedrop.com (10)]
85.136.20.235 PTR record: 235-20-136-85.user.auna.net
at dns01.ono.com
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... renedrop.com
Creation Date........ 2006-12-03 17:11:19
Registration Date.... 2006-12-03 17:11:19
Expiry Date.......... 2007-12-03 17:11:19
Organisation Name.... liu ming
Organisation Address. guang zhou
Organisation Address.
Organisation Address. guang zhou
Organisation Address. 321000
Organisation Address. GD
Organisation Address. CN
Admin Name........... liu ming
Admin Address........ guang zhou
Admin Address........
Admin Address........ guang zhou
Admin Address........ 321000
Admin Address........ GD
Admin Address........ CN
Admin Email.......... admin[]peckdore.com
Admin Phone.......... +86.203210002
Admin Fax............ +86.203210001
Tech Name............ liu ming
Tech Address......... guang zhou
Tech Address.........
Tech Address......... guang zhou
Tech Address......... 321000
Tech Address......... GD
Tech Address......... CN
Tech Email........... ad...@peckdore.com
Tech Phone........... +86.203210002
Tech Fax............. +86.203210001
Bill Name............ liu ming
Bill Address......... guang zhou
Bill Address.........
Bill Address......... guang zhou
Bill Address......... 321000
Bill Address......... GD
Bill Address......... CN
Bill Email........... ad...@peckdore.com
Bill Phone........... +86.203210002
Bill Fax............. +86.203210001
Name Server.......... ns2.renedrop.com
Name Server.......... ns1.renedrop.com
More renedrop.com sightings:
http://groups.google.com/groups/search?q=renedrop.com+group%3A*abuse&start=0&scoring=d&
See:
ns1.uiltonthe.net IP 85.136.20.235 => SBL49493
ns1.uiltonthe.net has no MX records -> [uiltonthe.net has 1 MX record
mail.uiltonthe.net (10)]
85.136.20.235 PTR record: 235-20-136-85.user.auna.net
at dns01.ono.com
Let see whois:
Registrar: MONIKER ONLINE SERVICES, INC.
Domain Name: UILTONTHE.NET
Registrant [537543]:
Roy Prejean
6404 78 Pl NE
Marysville
WA
98270
US
Administrative Contact [537543]:
Roy Prejean pxm6go[]yahoo.com
6404 78 Pl NE
Marysville
WA
98270
US
Phone: +1.3606597092
Billing Contact [537543]:
Roy Prejean pxm...@yahoo.com
6404 78 Pl NE
Marysville
WA
98270
US
Phone: +1.3606597092
Technical Contact [537543]:
Roy Prejean pxm...@yahoo.com
6404 78 Pl NE
Marysville
WA
98270
US
Phone: +1.3606597092
Domain servers in listed order:
NS1.UILTONTHE.NET 63.223.11.14
NS2.UILTONTHE.NET 210.34.0.101
Record created on: 2006-12-09 15:52:16.0
Database last updated on: 2007-02-16 11:28:13.22
Domain Expires on: 2007-12-09 15:52:17.0
More uiltonthe.net sightings:
http://groups.google.com/groups/search?q=uiltonthe.net+group%3A*abuse&start=0&scoring=d&
See:
ns2.ferrywend.com IP 63.223.11.14 => SBL49084
ns2.ferrywend.com has no MX records -> [ferrywend.com has 1 MX record
mail.ferrywend.com (10)]
No PTR records exist for 63.223.11.14
at ns2.wvfiber.net / ns.cais.com / btnaccess.com / pccwglobal.com
Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name:ferrywend.com
Registrant:
liu fei
nanchang
321000
Administrative Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
admin[]ferrywend.com
Technical Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
ad...@ferrywend.com
Billing Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
ad...@ferrywend.com
Registration Date: 2006-11-20
Update Date: 2006-12-26
Expiration Date: 2007-11-20
Primary DNS: ns1.ferrywend.com 85.136.20.235
Secondary DNS: ns2.ferrywend.com 63.223.11.14
More ferrywend.com sightings:
http://groups.google.com/groups/search?q=ferrywend.com+group%3A*abuse&start=0&scoring=d&
See:
ns2.hebeticbob.com IP 64.94.117.200
http://www.dnsbl.info/quickcheck.asp?IP=64.94.117.200
DNS Servers: NS1.FRAUDSHUTDOWN.COM NS2.FRAUDSHUTDOWN.COM
Let see whois.dotregistrar.com:
Registrar: DSTR ACQUISITION VII, LLC
Registrant:
Pilzek Vichesku (HEBETICBOB-COM-DOM)
Cal. Giulesti, No. 1-6
Bucuresti, Sector 6 73403
Romania
+040.0214021043
+040.0214021043
pilzek_...@yahoo.com
Domain Name: HEBETICBOB.COM => down
Administrative Contact:
Pilzek Vichesku pilzek_vichesku[]yahoo.com
Cal. Giulesti, No. 1-6
Bucuresti, Sector 6 73403
Romania
+040.0214021043
Fax- +040.0214021043
Technical Contact, Zone Contact:
Pilzek Vichesku pilzek_...@yahoo.com
Cal. Giulesti, No. 1-6
Bucuresti, Sector 6 73403
Romania
+040.0214021043
Fax- +040.0214021043
Record last updated on 05-Feb-2007.
Record expires on 25-Dec-2007.
Record created on 25-Dec-2006.
Domain servers in listed order:
Name Server: ns1.hebeticbob.com
Name Server: ns2.hebeticbob.com
More hebeticbob.com sightings:
http://groups.google.com/groups/search?q=hebeticbob.com+group%3A*abuse&start=0&scoring=d&
And SEE peckdore.com from Registration Data:
peckdore.com IP 211.139.199.72 (OLD IP 211.139.47.250)
[peckdore.com has 1 MX record mail.peckdore.com (10)]
http://www.moensted.dk/spam/?addr=211.139.199.72
See also whois peckdore.com from Registrant record:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... PECKDORE.COM
Creation Date........ 2006-12-03 17:11:10
Registration Date.... 2006-12-03 17:11:10
Expiry Date.......... 2007-12-03 17:11:10
Organisation Name.... liu ming
Organisation Address. guang zhou
Organisation Address.
Organisation Address. guang zhou
Organisation Address. 321000
Organisation Address. GD
Organisation Address. CN
Admin Name........... liu ming
Admin Address........ guang zhou
Admin Address........
Admin Address........ guang zhou
Admin Address........ 321000
Admin Address........ GD
Admin Address........ CN
Admin Email.......... admin[]peckdore.com
Admin Phone.......... +86.203210002
Admin Fax............ +86.203210001
Tech Name............ liu ming
Tech Address......... guang zhou
Tech Address.........
Tech Address......... guang zhou
Tech Address......... 321000
Tech Address......... GD
Tech Address......... CN
Tech Email........... ad...@peckdore.com
Tech Phone........... +86.203210002
Tech Fax............. +86.203210001
Bill Name............ liu ming
Bill Address......... guang zhou
Bill Address.........
Bill Address......... guang zhou
Bill Address......... 321000
Bill Address......... GD
Bill Address......... CN
Bill Email........... ad...@peckdore.com
Bill Phone........... +86.203210002
Bill Fax............. +86.203210001
Name Server.......... ns2.peckdore.com
Name Server.......... ns1.peckdore.com
More peckdore.com sightings:
http://groups.google.com/groups/search?q=peckdore.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/2a03a9bc39e4ef45
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/7329868a2514c954
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: