[email] [drugs -ED Med] (baahlingfk.com - biacetylnf.com) Want to cure yourself?
TomezNet
IP 59.36.89.214
(at dns.guangzhou.gd.cn / CHINANET-GD)
Spamvert:
baahlingfk.com IP 220.113.9.75
(SBL45165 / SBL44839, SBL43773 - ROK4932)
(at gwbn.net.cn)
Web:
Copyright © ED Med Choice Online
More ED Med Chest Online / ED Med Choice Online Viagra sightings:
http://groups.google.com/groups/search?q=%22ED+Med%22+group%3A*abuse&start=0&scoring=d&
Supported by Visa and MasterCard
More info below:
====================
X-SID-PRA: Ghats L. Footballers <jo...@godlessbeauty.de>
X-SID-Result: TempError
X-Message-Info: txF49lGdW420KJGNJQ6Csp+84bz+KdfxfXJZYS8NZ1M=
Received: from tomts41-srv.bellnexxia.net ([209.226.175.98]) by
bay0-pamc1-f10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sun, 20 Aug 2006 15:26:51 -0700
Received: from [MUNGED]
by toip6.bellnexxia.net with ESMTP; 20 Aug 2006 18:26:43 -0400
Received: (qmail 1520 invoked by uid 110); 20 Aug 2006 18:26:42 -0400
Delivered-To: [MUNGED]
Received: (qmail 32338 invoked from network); 20 Aug 2006 18:26:10
-0400
Received: from unknown (HELO -1213825040) (@59.36.89.214)
by [MUNGED] with SMTP; 20 Aug 2006 18:26:10 -0400
Received: from godlessbeauty.de (-1211647464 [-1213207096])
by gorvcamping.com (Qmailv1) with ESMTP id AA309DDC65
for <[MUNGED]>; Sun, 20 Aug 2006 18:24:28 -0700
Date: Sun, 20 Aug 2006 18:24:28 -0700
From: "Ghats L. Footballers" <jo...@godlessbeauty.de>
X-Mailer: The Bat! (v2.00.0) Personal
X-Priority: 3
Message-ID: <8902110314.2...@godlessbeauty.de>
To: [MUNGED]
Subject: Want to cure yourself?
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------C0030881EB80962"
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.10; AVE:
6.20.0.1; VDF: 6.20.0.46; host: gorvcamping.com)
Return-Path: jo...@godlessbeauty.de
X-OriginalArrivalTime: 20 Aug 2006 22:26:51.0739 (UTC)
FILETIME=[BBE24AB0:01C6C4A7]
This is a multi-part message in MIME format.
------------C0030881EB80962
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
------------C0030881EB80962
Content-Type: text/html
Content-Transfer-Encoding: 7bit
<html><head>
<meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
</head><body>
<p align="center">
<table width="458" style="border: 1px; border-style: solid;
border-color:#000000; font-family: Verdana; font-weight: bold;
font-size:15px;" bgcolor="#FFFFFF" cellpadding="5" cellspacing="2">
<tr><td align=center bgcolor="#999999" style="border: 1px;
border-style: solid; border-color:#000000; color:#FFFF00"><p>Having
real difficulty getting an erection??? Take Viagra.... Get rock hard
erection within 30 mins after taking the pill.</p></td></tr>
<tr><td><a href="http://47anacsfruahn44x944f9mmm.baahlingfk.com/">go to
the site</a></td>
</tr>
</table></p>
<p> </p>
<p><font color="#999999">Ill leave within the hour. Give up my life of
crime and pay my debt to society and such. Step one and still in the
clear. Step one and still in the clear. I had broken a bone when I
hityet he had never made a sound. There wasnt a soul in sight so I
closed the vault and staggered over to the nearest door. First I had to
be sure that I knew him well. Angelina, how I would love to get that
tender white throat between my hands and squeeze until your eyeballs
popped.</font></p>
</body>
</html>
------------C0030881EB80962--
-- END OF SPAM --
See:
IP 59.36.89.214
http://www.moensted.dk/spam/?addr=59.36.89.214
http://spamcop.net/w3m?action=checkblock&ip=59.36.89.214
inetnum: 59.32.0.0 - 59.42.255.255
netname: CHINANET-GD
route: 59.32.0.0/13
descr: China Telecom Guangdong province
origin: AS4134
mnt-by: MAINT-AS4134
changed: wan...@cndata.com
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 59.32.0.0 to 59.63.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
More CHINANET-GD sightings:
http://groups.google.com/groups/search?q=CHINANET-GD+group%3A*abuse&start=0&scoring=d&
See:
47anacsfruahn44x944f9mmm.baahlingfk.com IP 220.113.9.75
dd.biacetylnf.com A IN 3600 222.170.114.148
ff.biacetylnf.com A IN 3600 220.113.9.75
47anacsfruahn44x944f9mmm.baahlingfk.com has no MX records ->
baahlingfk.com has no MX records
http://www.moensted.dk/spam/?addr=220.113.9.75
http://www.spamhaus.org/query/bl?ip=220.113.9.75
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43773
spammer controlled nameserver - fa.facundgj.com / snakeah.mn
220.113.9.75/32 is listed on the Spamhaus Block List (SBL/ROKSO)
18-Aug-2006 00:35 GMT | SR23
Leo Kuvayev / BadCow
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44839
220.113.8.0/23 is listed on the Spamhaus Block List (SBL/ROKSO)
25-Jul-2006 18:17 GMT | SR04
Leo Kuvayev / BadCow
Dirty block
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45165
220.113.0.0/19 is listed on the Spamhaus Block List (SBL)
03-Aug-2006 00:22 GMT | SR04
Refusal or inability to remove criminal spammers.
11 SBL/ROKSO listings for IPs under the responsibility of gwbn.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=gwbn.net.cn
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : baahlingfk.com (BAAHLI2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com
Registrant / Admin Contact :
PERSON
Michael LANBERG (LANBER2-BMN-PE)
Jaison Park Ave #67
85456 Huego
VIRGIN ISLANDS, BRITISH
phone : +44 020 81330788
fax :
e-mail : lostorkil[]yahoo.com
Billing Contact :
PERSON
Michael LANBERG (LANBER2-BMN-PE)
Jaison Park Ave #67
85456 Huego
VIRGIN ISLANDS, BRITISH
phone : +44 020 81330788
fax :
e-mail : lost...@yahoo.com
Technical Contact :
PERSON
Michael LANBERG (LANBER2-BMN-PE)
Jaison Park Ave #67
85456 Huego
VIRGIN ISLANDS, BRITISH
phone : +44 020 81330788
fax :
e-mail : lost...@yahoo.com
Domain servers :
ff.biacetylnf.com (FBC4-BMN-HST)
dd.biacetylnf.com (DBC12-BMN-HST)
Created on 05/07/2006 16:43:26
Updated on 07/27/2006 12:32:06
Expires on 05/07/2007 12:43:26
More baahlingfk.com sightings:
http://groups.google.com/groups?q=baahlingfk.com+group%3A*abuse
See also More Registrant lostorkil[]yahoo.com sightings:
http://groups.google.com/groups/search?q=%22los...@yahoo.com%22+group%3A*abuse
See:
dd.biacetylnf.com IP 222.170.114.148
dd.biacetylnf.com has no MX records -> biacetylnf.com has no MX records
http://www.moensted.dk/spam/?addr=222.170.114.148
http://www.spamhaus.org/query/bl?ip=222.170.114.148
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45164
222.170.114.0/24 is listed on the Spamhaus Block List (SBL)
03-Aug-2006 10:52 GMT | SR04
Dirty block - crawling with spammers for months
2 SBL/ROKSO listings for IPs under the responsibility of chinanet-hl
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-hl
More biacetylnf.com sightings:
http://groups.google.com/groups?q=biacetylnf.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/7226dfb540ce5a82
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/a4b7dde54ff831f2
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: