[email] [drugs - PharmacyExpress.com] (slaporegusal.com - rapiexansi.com - anothegisa.com) Re: test AMBBtEaN
TomezNet
IP 84.76.177.194
(at Ya.com)
Spamvert:
www.slaporegusal.com IP 211.144.69.243
(SBL39667) (at cableplus.com.cn)
PharmacyExpress.com (aka ComfortRX aka VIP Pharmacy) more sightings:
http://groups.google.com/groups/search?q=PharmacyExpress.com+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Pekko Rieth <pek...@lyn.net>
X-SID-Result: TempError
X-Message-Info: 5nqZTeGJnBFg8n49FZhPM4iCJOZiTRqWyJz743IN9aw=
Received: from tomts1-srv.bellnexxia.net ([209.226.175.113]) by
bay0-pamc1-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830);
Thu, 18 May 2006 10:41:31 -0700
Received: from xx..xx..xx.net ([207.58.1......])
by toip4.bellnexxia.net with ESMTP; 18 May 2006 13:41:23 -0400
Received: (qmail 29985 invoked by uid 110); 18 May 2006 17:41:20 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 29344 invoked from network); 18 May 2006 17:41:20
-0000
Received: from unknown (HELO lyn.net) (84.76.177.194)
by xx..xx..xx.net with SMTP; 18 May 2006 17:41:19 -0000
Message-ID: <000001c67aa1$b6f37650$c435a8c0@gbx64>
Reply-To: "Pekko Rieth" <pek...@lyn.net>
From: "Pekko Rieth" <pek...@lyn.net>
To: xx..xx@xx..xx.com
Subject: Re: test AMBBtEaN
Date: Thu, 18 May 2006 10:37:20 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C67A67.0A949E50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Return-Path: pek...@lyn.net
X-OriginalArrivalTime: 18 May 2006 17:41:31.0866 (UTC)
FILETIME=[4CD07BA0:01C67AA2]
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C67A67.0A949E50
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi,
=20
V A L / U M
P R O Z ^ C
M E R / D / A
V / A G R A
L E V / T R A
A M B / E N
C / A L / S
X ^ N A X
S O M ^
=20
http://www.slaporegusal.com
=20
=20
=20
=20
=20
and then another sprang afire and fell; and still no arrow hindered=20
Smaug or hurt him more than a fly from the marshes. Already men were=20
jumping into the water on every side. Women and children were being=20
huddled into laden boats in the market-pool. Weapons were flung
down.=20
There was mourning and weeping, where but a little time ago the old=20
songs of mirth to come had been sung about the dwarves. Now men
cursed=20
------=_NextPart_000_0001_01C67A67.0A949E50
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>Hi,</DIV><DIV> </DIV>
<DIV>V A L / U M<BR>
P R O Z ^ C<BR>
M E R / D / A<BR>
V / A G R A<BR>
L E V / T R A<BR>
A M B / E N<BR>
C / A L / S<BR>
X ^ N A X<BR>
S O M ^</DIV><DIV> </DIV>
<DIV><A =
href=3D"http://www.slaporegusal.com">http://www.slaporegusal.com</A></DIV=
><DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>and then another sprang afire and
fell; =
and still no arrow hindered <BR>Smaug or hurt him more than a fly from
=
the marshes. Already men were <BR>jumping into the water on every side.
=
Women and children were being <BR>huddled into laden boats in the =
market-pool. Weapons were flung down. <BR>There was mourning and =
weeping, where but a little time ago the old <BR>songs of mirth to come
=
had been sung about the dwarves. Now men cursed =
<BR></FONT></DIV></BODY></HTML>
------=_NextPart_000_0001_01C67A67.0A949E50--
-- END OF SPAM --
See forged site certificates
See:
IP 84.76.177.194
http://www.moensted.dk/spam/?addr=84.76.177.194
http://cbl.abuseat.org/lookup.cgi?ip=84.76.177.194
http://www.spamhaus.org/query/bl?ip=84.76.177.194
http://www.spamcop.net/bl.shtml?84.76.177.194
inetnum: 84.76.0.0 - 84.77.255.255
netname: YACOMNET
descr: Ya.com Internet Factory
country: es
route: 84.76.128.0/17
descr: YIF Autonomous System Network
descr: Ya.com Internet Factory
origin: AS20838
notify: ri...@lists.ya.com
http://www.cidr-report.org/cgi-bin/as-report?as=20838
5 SBL listings for IPs under the responsibility of ya.com
http://www.spamhaus.org/sbl/listings.lasso?isp=ya.com
See Spamvert:
www.slaporegusal.com IP 211.144.69.243
ns0.rapiexansi.com A IN 16534 2222.60.14.242
ns0.anothegisa.com A IN 16534 202.103.178.125
www.slaporegusal.com has no MX records -> slaporegusal.com has no MX
records
http://www.moensted.dk/spam/?addr=211.144.69.243
http://www.spamhaus.org/query/bl?ip=211.144.69.243
[1] dns2you/zhousvr/name2you, see http://spews.org/html/S2319 .html
inetnum: 211.144.69.1 - 211.144.69.255
netname: CHANGNING1POPNET
descr: Cable OnLine Network CHANGNING1POPNet
descr: Internet Service Provider
descr: Shanghai China
country: CN
route: 211.144.64.0/19
descr: Asia Netcom (proxy-registered route object)
origin: AS9812
changed: ip-...@asianetcom.net
http://www.cidr-report.org/cgi-bin/as-report?as=9812
5 SBL/ROKSO listings for IPs under the responsibility of asianetcom.net
http://www.spamhaus.org/sbl/listings.lasso?isp=asianetcom.net
route: 211.144.64.0/20
descr: CHINA NETCOM
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
http://www.cidr-report.org/cgi-bin/as-report?as=9929
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39667
211.144.69.0/24 is listed on the Spamhaus Block List (SBL)
31-Mar-2006 21:29 GMT | SR02
7 SBL/ROKSO listings for IPs under the responsibility of
cableplus.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=cableplus.com.cn
Let see whois:
Registrar: BULKREGISTER, LLC.
DNS Servers:
NS2.BULKREGISTER.COM [216.152.252.48]
NS.BULKREGISTER.COM [216.152.252.47]
no
77 Liskivska str. 2/71
Kiev, Kiev 01001
UA
Domain Name: SLAPOREGUSAL.COM
Administrative Contact:
Evtuh Oleg ukrboys[]hotmail.com
no
77 Liskivska str. 2/71
Kiev, Kiev 01001
UA
Phone: +380 63 4667701
Fax:
Technical Contact:
Evtuh Oleg ukr...@hotmail.com
no
77 Liskivska str. 2/71
Kiev, Kiev 01001
UA
Phone: +380 63 4667701
Fax:
Billing Contact:
Evtuh Oleg ukr...@hotmail.com
no
77 Liskivska str. 2/71
Kiev, Kiev 01001
UA
Phone: +380 63 4667701
Fax:
Record updated on 2006-05-17 16:40:39
Record created on 2006-05-17
Record expires on 2007-05-17
Database last updated on 2006-05-18 13:44:31 EST
Domain servers in listed order:
NS0.ANOTHEGISA.COM 202.103.178.125
NS0.SIGUMEBERSI.COM 219.153.19.40
TransferGuard LOCK Status => ENABLED
More slaporegusal.com sightings:
http://groups.google.com/groups/search?q=slaporegusal.com+group%3A*abuse
See:
ns0.rapiexansi.com IP 2222.60.14.242
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : rapiexansi.com
Registrant:
Name : Kathleen Gibson
Email : buabicoul[]yahoo.com
Address : 2707 Piedmont St
Zipcode : 70062
Nation : US
Tel : 504-343-1620
Fax :
Administrative Contact:
Name : Kathleen Gibson
Email : buab...@yahoo.com
Address : 2707 Piedmont St
Zipcode : 70062
Nation : US
Tel : 504-343-1620
Fax :
Technical Contact:
Name : Kathleen Gibson
Email : buab...@yahoo.com
Address : 2707 Piedmont St
Zipcode : 70062
Nation : US
Tel : 504-343-1620
Fax :
Name Servers:
Dates & Status:
Created Date 2006-04-30 11:20:56 EDT
Updated Date 2006-04-30 11:20:56 EDT
Valid Date 2007-04-30 11:20:56 EDT
Status REGISTRAR-HOLD
More rapiexansi.com sightings:
http://groups.google.com/groups/search?q=rapiexansi.com+group%3A*abuse&start=0&scoring=d&
See:
ns0.anothegisa.com IP 202.103.178.125
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : anothegisa.com
Registrant:
Name : carol wagner
Email : idel...@yahoo.com
Address : 17829 green willow drive
Zipcode : 33647
Nation : US
Tel : 8139914667
Fax :
Administrative Contact:
Name : carol wagner
Email : idel...@yahoo.com
Address : 17829 green willow drive
Zipcode : 33647
Nation : US
Tel : 8139914667
Fax :
Technical Contact:
Name : carol wagner
Email : idel...@yahoo.com
Address : 17829 green willow drive
Zipcode : 33647
Nation : US
Tel : 8139914667
Fax :
Name Servers:
Dates & Status:
Created Date 2006-05-13 11:31:07 EDT
Updated Date 2006-05-13 11:31:07 EDT
Valid Date 2007-05-13 11:31:07 EDT
Status ACTIVE
More slaporegusal.com sightings:
http://groups.google.com/groups/search?q=slaporegusal.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/e40c54e08a4181c7
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/4129db8f8466856e
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: