Spamvert:
fokerfiancelin.com IP 61.233.42.4
(ROK4932 - SBL41070) (at crc.net.cn)
More HealthSuite AKA Medic Suite LTD sightings:
http://groups.google.com/groups/search?q=HealthSuite+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.174; Tue, 25 Apr 2006
00:35:11 -0700
X-YahooFilteredBulk: 211.204.93.220
X-Originating-IP: [211.204.93.220]
Return-Path: <sei...@golfleversant.com>
Authentication-Results: mta167.mail.mud.yahoo.com
from=golfleversant.com; domainkeys=neutral (no sig)
Received: from 207.228.2.... (EHLO xxx.web-hosting.com)
(207.228.2......) by mta167.mail.mud.yahoo.com with SMTP; Tue, 25 Apr
2006 00:35:11 -0700
Received: from 140671312 ([211.204.93.220]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k3P7Z8U29932 for <xx..xx@xx..xx.com>; Tue,
25 Apr 2006 03:35:09 -0400 (EDT)
Received: from golfleversant.com (143635656 [142511416]) by
green-glasercpa.com (Qmailv1) with ESMTP id 98D8C21629 for
<xx..xx@xx..xx.com>; Tue, 25 Apr 2006 16:49:33 -0400
Date: Tue, 25 Apr 2006 16:49:33 -0400
From:"God V. Contentedly" <sei...@golfleversant.com>
X-Mailer: The Bat! (v2.00.3) Personal
X-Priority: 3
Message-ID: <9177999320.2...@golfleversant.com>
To:"Webmaster" <xx..xx@xx..xx.com>
Subject: The Ultimate Online Pharmaceuticals
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------367620798EF3A21"
X-Kaspersky-Antivirus: passed
Content-Length: 651
<html>
<xbody>
<b>Vliaagra - $3.3 <br>
Levitxra - $3.3<br>
Cialois - $3.7<br>
Imitrhex - $16.4<br>
Fmlomax - $2.2<br>
Ultrtam - $0.78<br>
Vioexx - $4.75 <br>
Amoblem - $2.2<br>
VaIiaum - $0.97<br>
Xannax - $1.09<br>
Sowma - $3 <br>
Merimdia - $2.2</b><br>
<br>
<br>
<a target="_blank"
href="http://fokerfiancelin.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
><strong>visit our website</strong></a><br>
<br>
<br>
Best regards,<br>
Online Pharmaceuticals
<br>
<br>
ghfgdrtpu RldRWVRCRlZGdVJaVllBVFEdW0dW
<br>
<br>
<br>
Think much, speak little and write less.
<br>
A barking dog never bites.
<br>
After clouds a clear sun.
</xbody>
</html>
-- END OF SPAM --
See:
IP 211.204.93.220
http://www.moensted.dk/spam/?addr=211.204.93.220
http://cbl.abuseat.org/lookup.cgi?ip=211.204.93.220
http://www.spamhaus.org/query/bl?ip=211.204.93.220
IPv4 Address : 211.204.93.0-211.204.93.255
Network Name : HANANET-INFRA
Connect ISP Name : HANANET
Organization ID : ORG3930
Org Name : Hanaro Telecom Inc.
ASN: 9318
ASN Name: HANARO-AS (HANARO Telecom)
http://www.cidr-report.org/cgi-bin/as-report?as=9318
3 SBL/ROKSO listings for IPs under the responsibility of hanaro.com
http://www.spamhaus.org/sbl/listings.lasso?isp=hanaro.com
Spamvert
fokerfiancelin.com IP 61.233.42.4
ns0.timopoted.com [222.60.80.180]
ns0.wingela.com [125.208.3.42]
fokerfiancelin.com has no MX records
http://www.moensted.dk/spam/?addr=61.233.42.4
http://www.spamhaus.org/query/bl?ip=61.233.42.4
More 61.233.42.4 sightings:
http://groups.google.com/groups/search?q=61.233.42.4+group%3A*abuse&start=0&scoring=d&
inetnum: 61.232.0.0 - 61.237.255.255
netname: CRTC
country: CN
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
route: 61.233.0.0/18
descr: China Netcom
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
http://www.cidr-report.org/cgi-bin/as-report?as=9929
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41070
61.233.42.4/32 is listed on the Spamhaus Block List (SBL)
28-Apr-2006 19:09 GMT | SR22
Leo Kuvayev / BadCow
Spammer webhosting - atravelan.com (HealthSuite)
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
17 SBL/ROKSO listings for IPs under the responsibility of crc.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=crc.net.cn
Let see whois:
Registrar: HICHINA WEB SOLUTIONS (HONG KONG) LIMITED
Domain Name ..................... fokerfiancelin.com
Name Server ..................... ns0.timopoted.com
ns0.wingela.com
Registrant ID ................... hc195560455-cn
Registrant Name ................. mingqiang zhang
Registrant Organization ......... zhang mingqiang
Registrant Address .............. Jun gong 1219
Registrant City ................. shang hai
Registrant Province/State ....... shang hai
Registrant Postal Code .......... 200093
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.02176886639 -
Registrant Fax .................. +86.02176886676 -
Registrant Email ................ dimdimdim8888[]yahoo.com.cn
Administrative ID ............... hc195560455-cn
Administrative Name ............. mingqiang zhang
Administrative Organization ..... zhang mingqiang
Administrative Address .......... Jun gong 1219
Administrative City ............. shang hai
Administrative Province/State ... shang hai
Administrative Postal Code ...... 200093
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.02176886639 -
Administrative Fax .............. +86.02176886676 -
Administrative Email ............ dimdim...@yahoo.com.cn
Billing ID ...................... hichina001-cn
Billing Name .................... hichina
Billing Organization ............ HiChina Web Solutions Limited
Billing Address ................. 3/F., HiChina Mansion
No.27 Gulouwai Avenue
Dongcheng District
Billing City .................... Beijing
Billing Province/State .......... Beijing
Billing Postal Code ............. 100011
Billing Country Code ............ CN
Billing Phone Number ............ +86.01064242299 -
Billing Fax ..................... +86.01064258796 -
Billing Email ................... doma...@hichina.com
Technical ID .................... hichina001-cn
Technical Name .................. hichina
Technical Organization .......... HiChina Web Solutions Limited
Technical Address ............... 3/F., HiChina Mansion
No.27 Gulouwai Avenue
Dongcheng District
Technical City .................. Beijing
Technical Province/State ........ Beijing
Technical Postal Code ........... 100011
Technical Country Code .......... CN
Technical Phone Number .......... +86.01064242299 -
Technical Fax ................... +86.01064258796 -
Technical Email ................. doma...@hichina.com
Expiration Date ................. 2007-04-19 11:50:07
More fokerfiancelin.com sightings:
http://groups.google.com/groups/search?q=fokerfiancelin.com+group%3A*abus
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8ee024213a59ff9d
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: