[email] [drugs - HealthSuite] (mamadeake.com - worladeps.com - toresinato.com - rapiexansi.com) Premier
TomezNet
IP 221.227.32.19
(at CHINANET-JS)
Spamvert:
mamadeake.com IP 61.188.39.88
(ROK4932 - SBL41944) (at CHINANET-SC)
Redireced to:
http://worladeps.com/
worladeps.com IP 61.188.39.88 => ROK4932 - SBL41944
ns0.toresinato.com [202.103.178.125] => SBL41284
ns0.rapiexansi.com [222.60.14.242] => SBL41303, SBL41304, SBL41402
More HealthSuite AKA Medic Suite LTD sightings:
http://groups.google.com/groups/search?q=HealthSuite+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.176; Fri, 12 May 2006
04:15:48 -0700
X-YahooFilteredBulk: 221.227.32.19
X-Originating-IP: [221.227.32.19]
Return-Path: <rpo...@ghalla-bhansali.com>
Authentication-Results: mta285.mail.scd.yahoo.com
from=ghalla-bhansali.com; domainkeys=neutral (no sig)
Received: from 207.228.2..... (EHLO xxx.web-hosting.com)
(207.228.2....) by mta285.mail.scd.yahoo.com with SMTP; Fri, 12 May
2006 04:15:48 -0700
Received: from 144035208 ([221.227.32.19]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k4CBEq525107 for <xx..xx@xx..xx.com>; Fri,
12 May 2006 07:14:53 -0400 (EDT)
Received: from ghalla-bhansali.com (150626440 [143533976]) by
gotechnomedia.com (Qmailv1) with ESMTP id 326A53A876 for
<xx..xx@xx..xx.com>; Fri, 12 May 2006 06:14:15 -0400
Date: Fri, 12 May 2006 06:14:15 -0400
From:"Promenading P. Safety" <rpo...@ghalla-bhansali.com>
X-Mailer: The Bat! (v2.00.8) Personal
X-Priority: 3
Message-ID: <3579446981.2...@ghalla-bhansali.com>
To: xx..xx@xx..xx.com
Subject: Premier
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------CC8A92B062FAD26"
X-GMX-Antivirus: 0 (no virus found)
Content-Length: 868
<html>
<xbody>
Man's Health<br>
Anti-Depressants<br>
Antibiotics<br>
Cholesterol<br>
Diabetes<br>
Diuretic<br>
Pain Relief<br>
Sexual Health<br>
Sleep Aids<br>
Weight Loss
<p>and more on <a target="_blank"
href="http://mamadeake.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
>Premier Pharnmacy</a></p>
<br>
<br>
<br>
<br>
<br>
<br>
asdffgjd RldRWVRCRlZGdVJaVllBVFEdW0dW
</xbody>
</html>
-- END OF SPAM --
mamadeake.com => See Identical spam as regarding transoran.com (also
Registered through: GoDaddy.com)
See:
IP 221.227.32.19
http://www.moensted.dk/spam/?addr=221.227.32.19
http://cbl.abuseat.org/lookup.cgi?ip=221.227.32.19
http://www.spamhaus.org/query/bl?ip=221.227.32.19
inetnum: 221.224.0.0 - 221.231.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
route: 221.224.0.0/14
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: i...@jsinfo.net 20030630
source: APNIC
http://www.cidr-report.org/cgi-bin/as-report?as=23650
route: 221.224.0.0/13
descr: CHINANET jiangsu province network
origin: AS4134
mnt-by: MAINT-CHINANET-JS
changed: i...@jsinfo.ne
2 SBL/ROKSO listings for IPs under the responsibility of CHINANET-JS
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-JS
See Spamvert:
mamadeake.com IP 61.188.39.88
ns0.toresinato.com [202.103.178.125] => SBL41284
ns0.rapiexansi.com [222.60.14.242] => SBL41303, SBL41304, SBL41402
Primary DNS server: ns0.toresinato.com
Responsible Name: n...@rapiexansi.com
mamadeake.com has no MX records
http://www.moensted.dk/spam/?addr=61.188.39.88
http://www.spamhaus.org/query/bl?ip=61.188.39.88
More 61.188.39.88 sightings:
http://groups.google.com/groups/search?q=61.188.39.88+group%3A*abuse&start=0&scoring=d&
inetnum: 61.188.0.0 - 61.188.255.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
route: 61.188.0.0/16
descr: China Telecom Sichuan province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@ns.chinanet.cn.net
http://www.cidr-report.org/cgi-bin/as-report?as=4134
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41944
61.188.39.88/32 is listed on the Spamhaus Block List (SBL/ROKSO)
14-May-2006 12:52 GMT | SR22
Leo Kuvayev / BadCow
Spammer webhosting - monibulations.com (Pharmacy Express)
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
3 SBL/ROKSO listings for IPs under the responsibility of CHINANET-SC
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-SC
Let see whois:
Registrar: GO DADDY SOFTWARE, INC.
Registrant:
Fred Edmond
2020 Westbury Dr
Midland, Michigan 48642
United States
Registered through: GoDaddy.com (http://www.godaddy.com)
Domain Name: MAMADEAKE.COM
Created on: 10-May-06
Expires on: 10-May-07
Last Updated on: 11-May-06
Administrative Contact:
Edmond, Fred missontte[]yahoo.com
2020 Westbury Dr
Midland, Michigan 48642
United States
(989) 652-6121
Technical Contact:
Edmond, Fred miss...@yahoo.com
2020 Westbury Dr
Midland, Michigan 48642
United States
(989) 652-6121
Domain servers in listed order:
NS0.TORESINATO.COM
NS0.RAPIEXANSI.COM
More mamadeake.com sightings:
http://groups.google.com/groups/search?q=mamadeake.com+group%3A*abuse
Also see more toresinato.com sightings:
http://groups.google.com/groups/search?q=toresinato.com+group%3A*abuse&start=0&scoring=d&
See:
worladeps.com IP 61.188.39.88
ns0.toresinato.com [202.103.178.125] => SBL41284
ns0.rapiexansi.com [222.60.14.242] => SBL41303, SBL41304, SBL41402
worladeps.com has no MX records
http://www.moensted.dk/spam/?addr=61.188.39.88
http://www.spamhaus.org/query/bl?ip=61.188.39.88
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : worladeps.com (WORLAD2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com
Registrant / Admin Contact :
PERSON
Elizabeth DAVIS (DAVIS14-BMN-PE)
11131 Ascot Circle
22407 Fredericksburg
UNITED STATES VA
phone : 5407861987
fax :
e-mail : possilefor[]yahoo.com
Billing Contact :
PERSON
Elizabeth DAVIS (DAVIS14-BMN-PE)
11131 Ascot Circle
22407 Fredericksburg
UNITED STATES VA
phone : 5407861987
fax :
e-mail : possi...@yahoo.com
Technical Contact :
PERSON
Elizabeth DAVIS (DAVIS14-BMN-PE)
11131 Ascot Circle
22407 Fredericksburg
UNITED STATES VA
phone : 5407861987
fax :
e-mail : possi...@yahoo.com
Domain servers :
ns0.toresinato.com (NTC121-BMN-HST)
ns0.rapiexansi.com (NRC71-BMN-HST)
Created on 05/11/2006 18:48:39
Updated on 05/12/2006 12:28:23
Expires on 05/11/2007 14:48:38
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/4e44af9f3c120da3
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: