[email] [drugs - HealthSuite] (218.156.183.13) Premier
TomezNet
IP 218.156.183.13
(at rev1.kornet.net)
Spamvert:
thelamra.com IP 211.144.69.243
(SBL39667 / SBL42192 - ROK4932)
(at dns2.cableplus.com.cn / a.in-addr.cn / scn.com.cn)
Redirected to:
http://anadorvisi.com/
anadorvisi.com IP 211.144.69.243
(SBL39667 / SBL42192 - ROK4932)
(at dns2.cableplus.com.cn / a.in-addr.cn / scn.com.cn)
More Premier Pharfmacy aka HealthSuite aka Medic Suite LTD. sightings
http://groups.google.com/groups?q=%22HealthSuite%22+group%3A*abuse&start=0&scoring=d&
According to website:
SQUARETRADE - Licensed Pharmacy Program Member
Pharmacy License BCL65
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.173; Thu, 01 Jun 2006
08:19:45 -0700
X-YahooFilteredBulk: 218.156.183.13
X-Originating-IP: [218.156.183.13]
Return-Path: <do...@govdatabase.net>
Authentication-Results: mta138.mail.mud.yahoo.com
from=govdatabase.net; domainkeys=neutral (no sig)
Received: from 207.228...... (EHLO xxx.web-hosting.com)
(207.228.......) by mta138.mail.mud.yahoo.com with SMTP; Thu, 01 Jun
2006 08:19:44 -0700
Received: from 145447280 ([218.156.183.13]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k51FJVb09203 for <xx..xx@xx..xx.com>; Thu,
1 Jun 2006 11:19:32 -0400 (EDT)
Received: from govdatabase.net (144880480 [140919248]) by
grgsportswear.com (Qmailv1) with ESMTP id 7897FDA948 for
<xx..xx@xx..xx.com>; Thu, 01 Jun 2006 10:50:06 -0400
Date: Thu, 01 Jun 2006 10:50:06 -0400
From: "Artfulness C. Tumbrel" <do...@govdatabase.net> Book
X-Mailer: The Bat! (v2.00.4) Personal
X-Priority: 3
Message-ID: <4558540890.2...@govdatabase.net>
To: "Webmaster" <xx..xx@xx..xx.com>
Subject: Premier
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------FE0594045A8426F"
X-Virus-Scanned: Symantec AntiVirus Scan Engine
Content-Length: 868
<html>
<xbody>
Man's Health<br>
Anti-Depressants<br>
Antibiotics<br>
Cholesterol<br>
Diabetes<br>
Diuretic<br>
Pain Relief<br>
Sexual Health<br>
Sleep Aids<br>
Weight Loss
<p>and more on <a target="_blank"
href="http://thelamra.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW" >Premier
Pharfmacy</a></p>
<br>
<br>
<br>
<br>
<br>
<br>
ghfgdrtpu RldRWVRCRlZGdVJaVllBVFEdW0dW
</xbody>
</html>
-- END OF SPAM --
More Premier Pharfmacy sightings
http://groups.google.com/groups/search?q=%22Premier+Pharfmacy%22+group%3A*abuse&start=0&scoring=d&
See:
IP 218.156.183.13
http://www.moensted.dk/spam/?addr=218.156.183.13
http://cbl.abuseat.org/lookup.cgi?ip=218.156.183.13
http://www.spamhaus.org/query/bl?ip=218.156.183.13
http://spamcop.net/w3m?action=checkblock&ip=218.156.183.13
IPv4 Address : 218.156.183.0-218.156.183.127
Network Name : KORNET-INFRA000001
Connect ISP Name : KORNET
Organization ID : ORG1600
Org Name : Korea Telecom
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country: KR [Korea-KR]
Country IP Range: 218.144.0.0 to 218.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
Blocked due to spam, see http://korea.services.net/blocked.phtml
30 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
See:
thelamra.com IP 211.144.69.243
ns0.sinacessi.com A IN 164506 211.144.68.59 => SBL42231 / ROK3552
ns0.sinacessi.com A IN 164506 211.156.120.9
ns0.thoumaybe.com A IN 164504 222.208.183.164 => SBL42699
ns0.thoumaybe.com A IN 164504 211.144.69.243 => SBL39667 / SBL42192
Primary DNS server: ns0.thoumaybe.com
Responsible Name: n...@sinacessi.com
thelamra.com has no MX records
http://www.moensted.dk/spam/?addr=211.144.69.243
[1] dns2you/zhousvr/name2you, see http://spews.org/html/S2319.html
http://www.spamhaus.org/query/bl?ip=211.144.69.243
211.144.69.243 PTR record: reserve.cableplus.com.cn
More 211.144.69.243 sightings:
http://groups.google.com/groups/search?q=211.144.69.243+group%3A*abuse&start=0&scoring=d&
inetnum: 211.144.69.1 - 211.144.69.255
netname: CHANGNING1POPNET
descr: Cable OnLine Network CHANGNING1POPNet
descr: Internet Service Provider shnet.edu.cn
descr: Shanghai China
country: CN
route: 211.144.64.0/19
descr: Asia Netcom (proxy-registered route object)
origin: AS9812
route: 211.144.64.0/20
descr: CHINA NETCOM
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
http://www.cidr-report.org/cgi-bin/as-report?as=9929
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39667
211.144.69.0/24 is listed on the Spamhaus Block List (SBL)
22-May-2006 00:00 GMT | SR02
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42192
211.144.69.243/32 is listed on the Spamhaus Block List (SBL/ROKSO)
22-May-2006 03:27 GMT | SR09
Leo Kuvayev / BadCow
Numerous pill domains.
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
5 SBL/ROKSO listings for IPs under the responsibility of asianetcom.net
http://www.spamhaus.org/sbl/listings.lasso?isp=asianetcom.net
16 SBL/ROKSO listings for IPs under the responsibility of scn.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=scn.com.cn
Let see whois:
DOMAIN
Domain Name : thelamra.com (THELAM2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com
Registrant / Admin Contact :
PERSON
Danny GRAJEDA (GRAJED2-BMN-PE)
25 Whitetail Run Rd.
10918 Chester
UNITED STATES NY
phone : 8452247821
fax :
e-mail : orishisto[]yahoo.com
Billing Contact :
PERSON
Danny GRAJEDA (GRAJED2-BMN-PE)
25 Whitetail Run Rd.
10918 Chester
UNITED STATES NY
phone : 8452247821
fax :
e-mail : oris...@yahoo.com
Technical Contact :
PERSON
Danny GRAJEDA (GRAJED2-BMN-PE)
25 Whitetail Run Rd.
10918 Chester
UNITED STATES NY
phone : 8452247821
fax :
e-mail : oris...@yahoo.com
Domain servers :
ns0.thoumaybe.com (NTC125-BMN-HST)
ns0.sinacessi.com (NSC205-BMN-HST)
Created on 05/29/2006 13:01:05
Updated on 05/31/2006 10:55:05
Expires on 05/29/2007 09:01:05
See:
anadorvisi.com IP 211.144.69.243
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : anadorvisi.com (ANADOR2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Registrant / Admin Contact :
PERSON
Danny GRAJEDA (GRAJED2-BMN-PE)
25 Whitetail Run Rd.
10918 Chester
UNITED STATES NY
phone : 8452247821
fax :
e-mail : orishisto[]yahoo.com
Billing Contact :
PERSON
Danny GRAJEDA (GRAJED2-BMN-PE)
25 Whitetail Run Rd.
10918 Chester
UNITED STATES NY
phone : 8452247821
fax :
e-mail : oris...@yahoo.com
Technical Contact :
PERSON
Danny GRAJEDA (GRAJED2-BMN-PE)
25 Whitetail Run Rd.
10918 Chester
UNITED STATES NY
phone : 8452247821
fax :
e-mail : oris...@yahoo.com
Domain servers :
ns0.thoumaybe.com (NTC125-BMN-HST)
ns0.sinacessi.com (NSC205-BMN-HST)
Created on 05/29/2006 12:59:05
Updated on 05/31/2006 10:54:41
Expires on 05/29/2007 08:59:05
See:
ns0.sinacessi.com IP 211.144.68.59
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : sinacessi.com
Registrant:
Name : Craig McLaughlin
Email : meabitto[]yahoo.com
Address : 5400 Ramsey St. PO Box 12281
Zipcode : 28311
Nation : US
Tel : 7816405553
Fax :
Administrative Contact:
Name : Craig McLaughlin
Email : meab...@yahoo.com
Address : 5400 Ramsey St. PO Box 12281
Zipcode : 28311
Nation : US
Tel : 7816405553
Fax :
Technical Contact:
Name : Craig McLaughlin
Email : meab...@yahoo.com
Address : 5400 Ramsey St. PO Box 12281
Zipcode : 28311
Nation : US
Tel : 7816405553
Fax :
Name Servers:
Dates & Status:
Created Date 2006-05-28 12:38:39 EDT
Updated Date 2006-05-28 12:38:39 EDT
Valid Date 2007-05-28 12:38:39 EDT
Status ACTIVE
More sinacessi.com sightings:
http://groups.google.com/groups/search?q=sinacessi.com+group%3A*abuse
See:
ns0.thoumaybe.com IP 222.208.183.164
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : thoumaybe.com
Registrant:
Name : william M. sumner
Email : coolasits[]yahoo.com
Address : 979 Oberlin Drive
Zipcode : 43221
Nation : US
Tel : 6144518446
Fax :
Administrative Contact:
Name : william M. sumner
Email : cool...@yahoo.com
Address : 979 Oberlin Drive
Zipcode : 43221
Nation : US
Tel : 6144518446
Fax :
Technical Contact:
Name : william M. sumner
Email : cool...@yahoo.com
Address : 979 Oberlin Drive
Zipcode : 43221
Nation : US
Tel : 6144518446
Fax :
Name Servers:
Dates & Status:
Created Date 2006-05-28 12:32:13 EDT
Updated Date 2006-05-28 12:32:13 EDT
Valid Date 2007-05-28 12:32:13 EDT
Status ACTIVE
More thoumaybe.com sightings:
http://groups.google.com/groups/search?q=thoumaybe.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/9d0643962437826a
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: