[email] [meds - PharmacyExpress.com] (wantaroo.com) Re: 4 news 8719
TomezNet
IP 218.24.209.231
(at ns.lnpta.net.cn / lntelecom.com / CNCGROUP-LN)
Spamvert:
www.wantaroo.com IP 59.188.12.74
(SBL37430) (at FECOM-HK / newworldtel.com)
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.176; Sun, 05 Feb 2006
22:19:05 -0800
X-Originating-IP: [218.24.209.231]
Return-Path: <luci...@vcv.net>
Authentication-Results: mta188.mail.dcn.yahoo.com from=vcv.net;
domainkeys=neutral (no sig)
Received: from 207.228..... (EHLO xxx.web-hosting.com) by
mta188.mail.dcn.yahoo.com with SMTP; Sun, 05 Feb 2006 22:19:04 -0800
Received: from nlp-dhe.com ([218.24.209.231]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k165gis02982 for <xx..xx@xx..xx.com>; Mon,
6 Feb 2006 00:42:45 -0500 (EST)
Message-ID: <000001c62ae0$1707b5e0$36f4a8c0@towncouncillor>
Reply-to: "Lucile Debow" <luci...@vcv.net>
From: "Lucile Debow" <luci...@vcv.net>
To: "Jera Billy" <xx..xx@xx..xx.com>
Subject: Re: 4 news 8719
Date: Mon, 6 Feb 2006 00:42:17 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C62AB6.2E31ADE0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Content-Length: 735
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<xmeta http-equiv=Content-Type content="text/html; charset=us-ascii">
<xmeta content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<xbody bgColor=#ffffff>
<DIV>Hi,</DIV>
<DIV> </DIV>
<DIV><A target="_blank" href="http://www.wantaroo.com"
>http://www.wantaroo.com</A></DIV>
<DIV> </DIV>
<DIV>V<DIV style="
float:
right"> y </DIV>I<DIV style="
float:
right"> e </DIV>A<DIV style="
float:
right"> t </DIV>G<DIV style="
float:
right"> x </DIV>R<DIV style="
float:
right"> j </DIV>A<DIV style="
float:
right"> v </DIV> <DIV style="
float:
right"> e </DIV>$<DIV style="
float:
right"> p </DIV>3<DIV style="
float:
right"> n </DIV>,<DIV style="
float:
right"> i </DIV>3<DIV style="
float:
right"> t </DIV>3<DIV style="
float:
right"> u </DIV></DIV>
<DIV>C<DIV style="
float:
right"> b </DIV>I<DIV style="
float:
right"> n </DIV>A<DIV style="
float:
right"> q </DIV>L<DIV style="
float:
right"> j </DIV>I<DIV style="
float:
right"> g </DIV>S<DIV style="
float:
right"> z </DIV> <DIV style="
float:
right"> y </DIV>$<DIV style="
float:
right"> k </DIV>3<DIV style="
float:
right"> a </DIV>,<DIV style="
float:
right"> s </DIV>7<DIV style="
float:
right"> y </DIV>5<DIV style="
float:
right"> r </DIV></DIV>
<DIV>V<DIV style="
float:
right"> t </DIV>A<DIV style="
float:
right"> v </DIV>L<DIV style="
float:
right"> l </DIV>I<DIV style="
float:
right"> g </DIV>U<DIV style="
float:
right"> d </DIV>M<DIV style="
float:
right"> u </DIV> <DIV style="
float:
right"> v </DIV>$<DIV style="
float:
right"> a </DIV>1<DIV style="
float:
right"> o </DIV>,<DIV style="
float:
right"> e </DIV>2<DIV style="
float:
right"> o </DIV>1<DIV style="
float:
right"> g </DIV></DIV>
</xbody></HTML>
-- END OF SPAM --
See Forged - false site "certificates"
Logos and support by Visa, CIPA (Licence #91959), BBB (Participant
through 12/30/2005),
Verisign Secure Site (Validity Period: 13-OCT-04 - 13-OCT-05)
(Technical Consultants and Experts Group Inc aka TCE Group)
PharmacyChecker - CEO/President: Jack Poppins
My Canadian Pharmacy Corp.
1592 Wilson Avenue,
Toronto, ON M3L 1A6
See:
IP 218.24.209.231
http://www.moensted.dk/spam/?addr=218.24.209.231
http://cbl.abuseat.org/lookup.cgi?ip=218.24.209.231
http://www.spamhaus.org/query/bl?ip=218.24.209.231
inetnum: 218.24.0.0 - 218.25.255.255
netname: CNCGROUP-LN
country: CN
address: DATA Communication Bureau of Liaoning Province,China
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
http://www.cidr-report.org/cgi-bin/as-report?as=4837
2 SBL listings for IPs under the responsibility of CNCGROUP-LN
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-LN
See:
www.wantaroo.com IP 59.188.12.74
ns0.simpleloo.com [221.11.133.48]
ns0.albeiti.com [58.20.176.46]
www.wantaroo.com has no MX records -> wantaroo.com has no MX records
http://www.moensted.dk/spam/?addr=59.188.12.74
http://www.abuse.net/sbl.phtml?IP=59.188.12.74
More 59.188.12.74 spam sightings:
http://groups.google.com/groups?q=59.188.12.74+group%3A*abuse
inetnum: 59.188.12.64 - 59.188.12.127
netname: FECOM-HK
country: HK
descr: F.E.Company
descr: Servers and Internet
descr: Access Facilities
descr: Hong Kong
mnt-by: MAINT-HK-NEWWORLDTEL
ASN: 17444
ASN Name: NWT-AS-AP (AS number for New World Telephone Ltd.)
http://www.cidr-report.org/cgi-bin/as-report?as=17444
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL37430
59.188.12.0/24 is listed on the Spamhaus Block List (SBL)
06-Feb-2006 22:29 GMT | SR20
healthsuite/pharmacy express website/nameserver
IP address 59.188.12.74 on newworldtel.com/"F.E.Company"
30 SBL/ROKSO listings for IPs under the responsibility of
newworldtel.com
http://www.spamhaus.org/sbl/listings.lasso?isp=newworldtel.com
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : wantaroo.com (WANTAR2-BMN-DOM)
Registrar : BookMyName.com
Registrant / Admin Contact :
PERSON
Brett BRENNER (BRENNE4-BMN-PE)
P.O. Box 33902
20033 Washington
UNITED STATES DC
phone : 2025189459
fax :
e-mail : founagrea[]yahoo.com
Billing Contact :
PERSON
Brett BRENNER (BRENNE4-BMN-PE)
P.O. Box 33902
20033 Washington
UNITED STATES DC
phone : 2025189459
fax :
e-mail : foun...@yahoo.com
Technical Contact :
PERSON
Brett BRENNER (BRENNE4-BMN-PE)
P.O. Box 33902
20033 Washington
UNITED STATES DC
phone : 2025189459
fax :
e-mail : foun...@yahoo.com
Domain servers :
ns0.simpleloo.com (NSC167-BMN-HST)
ns0.albeiti.com (NAC193-BMN-HST)
Created on 02/02/2006 17:22:21
Updated on 02/04/2006 11:32:46
Expires on 02/02/2007 12:22:21
More wantaroo.com spam sightings:
http://groups.google.com/groups?q=wantaroo.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/34e86edf4658d9b6
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: