[email] [drugs - MyCanadianPharmacy] (friendstb.com - dartnet.info - wizardup.info - lofhick.info - molefancy.info) Huge on-line pharmacy
TomezNet
IP 211.198.96.10
(at kornet.net)
Spamvert:
friendstb.com IP 200.213.167.71
(SBL44910 - SBL43389 - ROK3095) (at embratel.net.br)
Yambo Pharmacy image hosting:
http://194.145.201.202:8080/p/images/
IP 194.145.201.202 ts4-202.twistspace.com
(SBL45225 - ROK3095) (at compukos.nl)
More Yambo MyCanadianPharmacy aka MyCanadian Pharmacy sightings:
http://groups.google.com/groups/search?q=%22MyCanadianPharmacy%22+group%3A*abuse&start=0&scoring=d&
Plenty of Forged certificates and logos.
More info below:
====================
X-SID-PRA: Prot J. Frequently <Heer...@greenleafloans.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43vgbPr6SR9QmWX9SFgUu2XOeKrtifAX+I=
Received: from tomts42-srv.bellnexxia.net ([209.226.175.99]) by
bay0-pamc1-f11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 15 Aug 2006 00:07:02 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip7.bellnexxia.net with ESMTP; 15 Aug 2006 03:07:00 -0400
Received: (qmail 5877 invoked by uid 110); 15 Aug 2006 03:06:59 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 5865 invoked from network); 15 Aug 2006 03:06:58 -0400
Received: from unknown (HELO -1209709336) (211.198.96.10)
by xx..xx..xx.net with SMTP; 15 Aug 2006 03:06:58 -0400
Received: from greenleafloans.com (-1209028136 [-1208641768])
by grandadvent.org (Qmailv1) with ESMTP id C13FAEF8A6
for <xx..xx@xx..xx.com>; Tue, 15 Aug 2006 03:05:27 -0700
Date: Tue, 15 Aug 2006 03:05:27 -0700
From: "Prot J. Frequently" <Heer...@greenleafloans.com>
X-Mailer: The Bat! (v2.00.1) Personal
X-Priority: 3
Message-ID: <9429766087.2...@greenleafloans.com>
To: xx..xx@xx..xx.com
Subject: Huge on-line pharmacy
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-AntiVirus: Checked by Dr.Web (http://www.drweb.net)
Return-Path: Heer...@greenleafloans.com
X-OriginalArrivalTime: 15 Aug 2006 07:07:02.0755 (UTC)
FILETIME=[689EE330:01C6C039]
The most interesting and powerful medicines for you!
Glucosamine - $35.99 - used in case of the alleviation of the symptoms
of arthritis.
Quick-detox - $35.99 - Rid your body of all traces of toxins in as
little as two hours with this highly effective detoxification formula.
Glucophage - $0.83 - a medicine used to treat type 2 diabetes mellitus.
Phentermine - $2.98 - a drug used in the short-term management of
obesity. It comes in tablets or capsules of various colors depending on
the strength of the medication; 15, 30 and 37.5 milligram pills
available.
Altace - $1.14 - Effective in people aged 55 and over, ALTACE may help
in reducing the risk of heart attack, stroke or cardiovascular death.
and more!
our site http://friendstb.com/
dfglirsjiel QkZGUFxeclJaXFxTQRlNXhxQW1g=
-- END OF SPAM --
See:
IP 211.198.96.10
http://www.moensted.dk/spam/?addr=211.198.96.10
http://cbl.abuseat.org/lookup.cgi?ip=211.198.96.10
http://www.spamhaus.org/query/bl?ip=211.198.96.10
http://spamcop.net/w3m?action=checkblock&ip=211.198.96.10
More 211.198.96.10 sightings:
http://groups.google.com/groups/search?q=211.198.96.10+group%3A*abuse
IPv4 Address : 211.198.96.0-211.198.96.255
Network Name : KORNET-INFRA000001
Connect ISP Name : KORNET
Organization ID : ORG1600
Org Name : Korea Telecom
route: 211.192.0.0/13
descr: KORnet Powered BY Korea Telecom
origin: AS4766
mnt-by: MAINT-AS4766
changed: chinn...@kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 211.192.0.0 to 211.255.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
21 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
See:
friendstb.com IP 200.213.167.71
ns1.friendstb.com A IN 600 200.213.167.71
ns2.friendstb.com A IN 600 200.213.167.71
ns3.friendstb.com A IN 600 109.51.200.45
ns1.dartnet.info [194.29.49.1 (NO GLUE)] [GR]
ns1.wizardup.info [212.52.166.78 (NO GLUE)] [HU]
ns2.lofhick.info [209.102.132.41 (NO GLUE)] [US]
ns2.molefancy.info [212.52.166.78 (NO GLUE)] [HU]
[friendstb.com has 1 MX record mail.friendstb.com (10)]
http://www.moensted.dk/spam/?addr=200.213.167.71
http://www.spamhaus.org/query/bl?ip=200.213.167.71
inetnum: 200.213.167/24
aut-num: AS4230
abuse-c: GSE6
owner: TVC Oeste Paulista Limitada
ownerid: 061.500.088/0001-03
nic-hdl-br: TOL56
person: TVC OESTE PAULISTA LIMITADA
e-mail: domi...@flash.tv.br
route: 200.213.0.0/16
descr: EMBRATEL BRAZIL
origin: AS4230
ASN: 4230
ASN Name: LACNIC-4230
Country IP Range: 200.128.0.0 to 200.255.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4230
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43389
200.213.167.0/24 is listed on the Spamhaus Block List (SBL/ROKSO)
27-Jul-2006 09:28 GMT | SR04
Yambo Financials
Yambo Financials sites
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44910
200.213.167.71/32 is listed on the Spamhaus Block List (SBL/ROKSO)
12-Aug-2006 10:10 GMT | SR08
Yambo Financials
modalux.info etc
10 SBL/ROKSO listings for IPs under the responsibility of
embratel.net.br
http://www.spamhaus.org/sbl/listings.lasso?isp=embratel.net.br
Let see whois.namesbeyond.com:
Registrar: NAMESBEYOND.COM DBA GOODLUCKDOMAIN.COM
Registrant:
Gennady Agre
Acad. G. Bonchev Str., Bl. 29A
Sofia, Sofia 1113
Bulgaria
Phone:+359.2707586
Domain Name: friendstb.com
Created on.............: 2006-07-24 19:19:54
Expires on.............: 2007-07-24 19:19:54
Record last updated on..: 2006-07-26 07:25:24
Administrative Contact:
Gennady Agre
Acad. G. Bonchev Str., Bl. 29A
Sofia, Sofia 1113
Bulgaria
Phone: +359.2707586
Email: mal8top[]yahoo.com
Technical Contact:
Gennady Agre
Acad. G. Bonchev Str., Bl. 29A
Sofia, Sofia 1113
Bulgaria
Phone: +359.2707586
Email: mal...@yahoo.com
Billing Contact:
Gennady Agre
Acad. G. Bonchev Str., Bl. 29A
Sofia, Sofia 1113
Bulgaria
Phone: +359.2707586
Email: mal...@yahoo.com
Domain servers in listed order:
ns1.wizardup.info 218.210.121.172
ns2.molefancy.info 203.124.130.200
ns1.dartnet.info 209.102.132.41
ns2.lofhick.info 196.1.57.194
See:
IP 194.145.201.202
194.145.201.202 PTR record: ts4-202.twistspace.com
at ns2.twistspace.com
http://www.moensted.dk/spam/?addr=194.145.201.202
http://www.spamhaus.org/query/bl?ip=194.145.201.202
More 194.145.201.202 sightings:
http://groups.google.com/groups/search?q=194.145.201.202+group%3A*abuse
inetnum: 194.145.200.0 - 194.145.201.255
netname: COMPUKOS
descr: Compukos
country: NL [The Netherlands]
org: ORG-COM2-RIPE
e-mail: n...@compukos.nl
person: Larry Kos
address: Einsteinstraat 67
3316 GG Dordrecht
NL
phone: +31 7 86 52 12 45
fax-no: +31 7 86 52 12 01
e-mail: la...@compukos.nl
nic-hdl: LK731-RIPE
mnt-by: COMPUKOS-MNT
changed: sylvain...@lambdanet.fr
ASN: 29028
ASN Name: COMPUKOS-AS (Compukos)
Country IP Range: 194.145.200.0 to 194.145.201.255
http://www.cidr-report.org/cgi-bin/as-report?as=29028
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45225
194.145.201.202/32 is listed on the Spamhaus Block List (SBL ROKSO)
05-Aug-2006 19:54 GMT | SR23
Yambo Financials
Image spam hosting / compromised host
1 SBL/ROKSO listings for IPs under the responsibility of compukos.nl
http://www.spamhaus.org/sbl/listings.lasso?isp=compukos.nl
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/22b06036b87abbaa
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: