[email] [drugs - Trusted Meds] (angelicblues.info - shopzebras.com - niceshops.net - tucows.com) Order Delivery
TomezNet
IP 124.173.85.30
(at gzidc.com / NGNNET)
Spamvert:
www.angelicblues.info IP 216.40.47.17
(SBL44852 - SBL45242) (at dns2.tucows.com /
redirect.managednsservice.com)
Frames Redirected to:
http://www.niceshops.net
And:
http://shopzebras.com/spurm/index.php
HOMEPAGE on SPUR-M by Trusted Meds Inc.
shopzebras.com IP 125.208.7.120 (Old IP 221.206.84.110)
(SBL45301) (now at ns1.euncn.com / primetelecom.cn)
www.niceshops.net IP 216.52.184.240 (Old IP 63.251.92.195)
(still at ns1.dal.pnap.net / internap.com / eNom.com)
Tucows ignores any spam complains!
Much More Tucows sightings:
http://groups.google.com/groups/search?q=Tucows+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: XCQLK...@blr.de
X-SID-Result: TempError
X-Message-Info: txF49lGdW41xBpIxIAUpnFObPmSNr9DQ2Cbz8af6sl8=
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by
bay0-pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 9 Aug 2006 23:16:12 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip4.bellnexxia.net with ESMTP; 10 Aug 2006 02:16:10 -0400
Message-Id: <578r3m$o1u...@toip4.bellnexxia.net>
Received: (qmail 11887 invoked by uid 110); 10 Aug 2006 02:16:08 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 11879 invoked from network); 10 Aug 2006 02:16:06
-0400
Received: from unknown (HELO 207.58.1....) (124.173.85.30)
by xx..xx..xx.net with SMTP; 10 Aug 2006 02:16:06 -0400
Received: from skyhookajax (iconajax [192.6.153.70
Date: Thu, 10 Aug 2006 02:18:31 -0400
From: XCQLK...@blr.de
Bcc:
Return-Path: XCQLK...@blr.de
X-OriginalArrivalTime: 10 Aug 2006 06:16:12.0676 (UTC)
FILETIME=[7A910440:01C6BC44]
])
by hazy.ajax.noc.ntua.gr (3.12.9p1/6.12.9) with ESMTP id
hATLaiBS144908;
Thu, 10 Aug 2006 11:14:09 +0400
Date: Thu, 10 Aug 2006 08:08:09 +0100
In-Reply-To: <2323112814...@auditory.doit.wisc.edu>
Message-ID: <2623112923...@angiosperm.noc.ntua.gr>
References: <2143022417...@larvae.doit.wisc.edu>
From: "Jeffery Hinson" <XCQLK...@blr.de>
To: xx..xx@xx..xx.com
Subject: Order Delivery
Icrease Your S''exual Desire and S''perm volume by 500%
L'onger o''rgasms - The longest most intense o''rgasms of your life
Multiple o''rgasms - Cum again and again
S'PUR-M is The Newest and The Safest Way
100% N''atural and No Side Effects - in contrast to well-known brands.
Experience three times longer o''rgasms
World Wide shipping within 24 hours
Clisk here http://www.angelicblues.info
hip whisk mire minnie november ooze notary baptistery
dementia sugar calculus cuprous reprise angeles mattock battlefront
-- END OF SPAM --
See:
IP 124.173.85.30
http://www.moensted.dk/spam/?addr=124.173.85.30
More gzidc.com sightings:
http://groups.google.com/groups/search?q=gzidc.com+group%3A*abuse&start=0&scoring=d&
inetnum: 124.172.0.0 - 124.173.255.255
netname: NGNNET
descr: World Crossing Telecom(GuangZhou) Ltd.
descr: 17/FL,International Bank Center,
descr: 191# DongFengXi Rd. Guangzhou, Guangdong
country: CN [China]
inetnum: 124.173.64.0 - 124.173.127.255
netname: nanchangcsx
descr: nanchang csx ltd.
country: CN
route: 124.173.0.0/16
descr: FoShan ShiShiCheng KeJi
origin: AS4134
remarks: this is registered by ruan zhidan
notify: r...@gddc.com.cn
mnt-by: MAINT-AS4813
changed: r...@gddc.com.cn
Country IP Range: 124.172.0.0 to 124.173.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
7 SBL/ROKSO listings for IPs under the responsibility of gzidc.com
http://www.spamhaus.org/sbl/listings.lasso?isp=gzidc.com
See:
www.angelicblues.info IP 216.40.47.17
dns2.registerfly.com [216.40.47.16 (NO GLUE)] [CA]
dns1.registerfly.com [216.40.47.15 (NO GLUE)] [CA]
B9.INFO.AFILIAS-NST.ORG [204.74.113.33]
216.40.47.17 PTR record: redirect.managednsservice.com
at dns2.tucows.com
ns3.mdnsservice.com [65.22.7.10]
ns1.mdnsservice.com [64.97.159.10]
ns2.mdnsservice.com [216.40.47.18]
www.angelicblues.info has no MX records -> angelicblues.info has no MX
records
http://www.moensted.dk/spam/?addr=216.40.47.17
http://www.spamhaus.org/query/bl?ip=216.40.47.17
216.40.47.17 PTR record: redirect.managednsservice.com
More 216.40.47.17 sightings:
http://groups.google.com/groups/search?q=216.40.47.17+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44852
216.40.47.17/32 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 22:51 GMT | SR04
giveawaysblog.info - redirect (come on Tucows!)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45242
216.40.47.16/31 is listed on the Spamhaus Block List (SBL)
06-Aug-2006 09:49 GMT | SR02
11 SBL/ROKSO listings for IPs under the responsibility of tucows.com
http://www.spamhaus.org/sbl/listings.lasso?isp=tucows.com
OrgName: Tucows International
OrgID: TUCOWS
NetRange: 216.40.32.0 - 216.40.47.255
CIDR: 216.40.32.0/20
NetName: TUCOWS-BLK1
NetHandle: NET-216-40-32-0-1
route: 216.40.32.0/20
descr: IBM
origin: AS19152
mnt-by: MAINT-AS19152
ASN: 19152
ASN Name: IBMCCH-TOR
Country IP Range: 216.40.32.0 to 216.40.47.255
http://www.cidr-report.org/cgi-bin/as-report?as=19152
Let see whois.afilias.info:
Domain ID:D14326276-LRMS
Domain Name: ANGELICBLUES.INFO
Created On:08-Aug-2006 01:41:52 UTC
Last Updated On:08-Aug-2006 01:41:54 UTC
Expiration Date:08-Aug-2007 01:41:52 UTC
Sponsoring Registrar: RegisterFly.com, Inc. (R318-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID: tuCcVQDC6ksOxwyf
Registrant Name:patrice pennetier
Registrant Organization:pennetier
Registrant Street1:rue notre dame, 21
Registrant Street2:
Registrant Street3:
Registrant City:tubize
Registrant State/Province:NA
Registrant Postal Code:1480
Registrant Country:BE
Registrant Phone:+1.3292313108
Registrant Phone Ext.:
Registrant FAX:+1.3292313108
Registrant FAX Ext.:
Registrant Email: pennetier[]the-quickest.com
Admin ID:tuCcVQDC6ksOxwyf
Admin Name:patrice pennetier
Admin Organization:pennetier
Admin Street1:rue notre dame, 21
Admin Street2:
Admin Street3:
Admin City:tubize
Admin State/Province:NA
Admin Postal Code:1480
Admin Country:BE
Admin Phone:+1.3292313108
Admin Phone Ext.:
Admin FAX:+1.3292313108
Admin FAX Ext.:
Admin Email: penn...@the-quickest.com
Billing ID:tuCcVQDC6ksOxwyf
Billing Name:patrice pennetier
Billing Organization:pennetier
Billing Street1:rue notre dame, 21
Billing Street2:
Billing Street3:
Billing City:tubize
Billing State/Province:NA
Billing Postal Code:1480
Billing Country:BE
Billing Phone:+1.3292313108
Billing Phone Ext.:
Billing FAX:+1.3292313108
Billing FAX Ext.:
Billing Email: penn...@the-quickest.com
Tech ID:tuCcVQDC6ksOxwyf
Tech Name:patrice pennetier
Tech Organization:pennetier
Tech Street1:rue notre dame, 21
Tech Street2:
Tech Street3:
Tech City:tubize
Tech State/Province:NA
Tech Postal Code:1480
Tech Country:BE
Tech Phone:+1.3292313108
Tech Phone Ext.:
Tech FAX:+1.3292313108
Tech FAX Ext.:
Tech Email: penn...@the-quickest.com
Name Server: DNS1.REGISTERFLY.COM
Name Server: DNS2.REGISTERFLY.COM
See frames source:
<html>
<frameset framespacing="0" rows="100%,*" cols="100%"
frameborder="no" border="0">
<frame name="XYZZY2" scrolling="auto"
src="http://www.niceshops.net" noresize>
<frame name="XYZZY" scrolling="no" noresize>
<noframes>
<h1><a
href="http://www.niceshops.net">http://www.niceshops.net</a></h1>
<p>Please <a href="http://www.niceshops.net">click here</a> to
view the non-framed version.</p>
</noframes>
</frameset>
</html>
See:
www.niceshops.net IP 216.52.184.240 (Old IP 63.251.92.195)
dns1.name-services.com A IN 3600 69.25.142.1
dns2.name-services.com A IN 3600 216.52.184.230
dns3.name-services.com A IN 3600 63.251.92.193
dns4.name-services.com A IN 3600 64.74.96.242
dns5.name-services.com A IN 3600 70.42.37.1
www.niceshops.net has no MX records -> niceshops.net has no MX records
http://www.moensted.dk/spam/?addr=216.52.184.240
No PTR records exist for 216.52.184.240
at ns1.dal.pnap.net / ns1.pnap.net
Internap Network Services PNAP-8-98 (NET-216-52-0-0-1)
216.52.0.0 - 216.52.255.255
eNom PNAP-DAL-ENOM-RM-01 (NET-216-52-184-224-1)
216.52.184.224 - 216.52.184.255
CustName: eNom.com
NetRange: 216.52.184.224 - 216.52.184.255
CIDR: 216.52.184.224/27
NetName: PNAP-DAL-ENOM-RM-01
NetHandle: NET-216-52-184-224-1
route: 216.52.176.0/20
descr: PNAP-DAL
origin: AS12179
mnt-by: INAP-MAINT-RADB
changed: pe...@internap.com
ASN: 12179
ASN Name: INTERNAP-2BLK
Country IP Range: 216.52.0.0 to 216.53.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=12179
More 216.52.184.240 sightings:
http://groups.google.com/groups/search?q=216.52.184.240+group%3A*abuse&start=0&scoring=d&
32 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com
4 SBL listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com
See:
shopzebras.com IP 125.208.7.120 (Old IP 221.206.84.110)
ns1.skvodka.com [125.208.7.120] [CN] (Old IP 221.206.84.110)
ns2.skvodka.com [125.208.7.120] [CN] (Old IP 221.206.84.110)
[shopzebras.com has 1 MX record shopzebras.com (0)]
http://www.moensted.dk/spam/?addr=125.208.7.120
http://www.spamhaus.org/query/bl?ip=125.208.7.120
More 125.208.7.120 sightings:
http://groups.google.com/groups/search?q=125.208.7.120+group%3A*abuse
inetnum: 125.208.0.0 - 125.208.31.255
netname: PRIMETELECOM
descr: Beijing Primezone Technologies Inc.
descr: 44 Fu Cheng Road,Beijing,P.R.China
country: CN [China]
ASN: 24416
ASN Name: CNNIC-PRIMETELECOM-AP (Beijing Primezone Technologies Inc.)
Country IP Range: 125.208.0.0 to 125.208.63.255
http://www.cidr-report.org/cgi-bin/as-report?as=24416
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45301
125.208.7.120/32 is listed on the Spamhaus Block List (SBL)
08-Aug-2006 19:07 GMT | SR22
Spam webhosting - literatinorthwest.com
3 SBL listings for IPs under the responsibility of primetelecom.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=primetelecom.cn
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/70f498748f7fc998
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: