[email] [drugs - ED Med] (scalpeg.com - biacetylnf.com) No need to visit local drug store.
TomezNet
IP 124.61.238.39
(at powercomm.com / DACOM.CO.KR)
Spamvert:
scalpeg.com IP 60.2.57.83
(SBL45853) (at CNCGROUP-HE)
Web:
Copyright © ED Med Chest Online. All rights reserved.
More ED Med Chest Online / ED Med Choice Online Viagra sightings:
http://groups.google.com/groups/search?q=%22ED+Med%22+group%3A*abuse&start=0&scoring=d&
Supported by Visa and MasterCard
More info below:
====================
X-SID-PRA: Instinct C. Judaic <jple...@goettingen.creditreform.de>
X-SID-Result: TempError
X-Message-Info: txF49lGdW40mTvh+DpUJWEq/1LXbIkD8yQg/3toixqA=
Received: from tomts48-srv.bellnexxia.net ([209.226.175.192]) by
bay0-pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 24 Aug 2006 07:06:59 -0700
Received: from [MUNGED]
by toip4.bellnexxia.net with ESMTP; 24 Aug 2006 10:06:42 -0400
Received: (qmail 30422 invoked by uid 110); 24 Aug 2006 10:06:42 -0400
Delivered-To: [MUNGED]
Received: (qmail 30406 invoked from network); 24 Aug 2006 10:06:41
-0400
Received: from unknown (HELO -1226013328) (124.61.238.39)
by [MUNGED] with SMTP; 24 Aug 2006 10:06:41 -0400
Received: from goettingen.creditreform.de (-1226412792 [-1226437152])
by gorman-lavelle.com (Qmailv1) with ESMTP id 8B2A53013A
for <[MUNGED]>; Thu, 24 Aug 2006 10:04:50 -0700
Date: Thu, 24 Aug 2006 10:04:50 -0700
From: "Instinct C. Judaic" <jple...@goettingen.creditreform.de>
X-Mailer: The Bat! (v2.00.2) Personal
X-Priority: 3
Message-ID: <6444689452.2...@goettingen.creditreform.de>
To: [MUNGED]
Subject: No need to visit local drug store.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------FA665DE75BBC3E1"
X-GMX-Antivirus: 0 (no virus found)
Return-Path: jple...@goettingen.creditreform.de
X-OriginalArrivalTime: 24 Aug 2006 14:06:59.0288 (UTC)
FILETIME=[90A47580:01C6C786]
This is a multi-part message in MIME format.
------------FA665DE75BBC3E1
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
------------FA665DE75BBC3E1
Content-Type: text/html
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
</head>
<body>
<p align="center">
<table width="324" style="border: 1px; border-style: solid;
border-color:#000000; font-family: Verdana; font-weight: bold;
font-size:14px;" bgcolor="#EEEEEE" cellpadding="5" cellspacing="2">
<tr><td align=center bgcolor="#999999" style="border: 1px;
border-style: solid; border-color:#000000; color:#FFFFFF"><p>Sex became
stressful due to your inability to perform at the level??? Take Viagra
and feel the difference. </p></td></tr>
<tr><td><a href="http://[MUNGED].scalpeg.com/">visit our site</a></td>
</tr>
</table></p>
<p> </p>
<p><font color="#999999">He apparently did not believe in pajama
bottoms and it hurt me to see the goose bumps rising on those thin
shanks. Nothing elseand thats an order. I turned in the air and instead
of hitting him squarely I caromed off his shoulder and we both sprawled
onto the balcony. To a person of my abilities tracking down a
pseudo-legal stranger in a foreign city on a far planet presents no
problems. The cigars were still fresh in the pocket humidor where I had
put them six months ago. It was also a fine commentary on the honors
that went with the job. I sat behind his desk, all his personal papers
before meweighted down with a pistoland as fierce a scowl as I
couldraisesmeared across my face. A key grated in the lock and the
lights came on.</font></p>
</body>
</html>
------------FA665DE75BBC3E1--
-- END OF SPAM --
See:
IP 124.61.238.39
http://www.moensted.dk/spam/?addr=124.61.238.39
http://www.spamhaus.org/query/bl?ip=124.61.238.39
http://korea.services.net/blocked.phtml?addr=124.61.238.39
IPv4 Address : 124.61.224.0-124.61.239.255
Network Name : Xpeed-INFRA [Korea-KR]
Connect ISP Name : Xpeed
Organization ID : ORG779668
Org Name : POWERCOMM
Name : IP Administrator
Phone : +82-2-2086-5434
E-Mail : i...@powercomm.com
route: 124.56.0.0/13
descr: Proxy-Registered Route Object by DACOM(AS3786)
origin: AS17858
remarks: This route object is for a DACOM's customer route
remarks: which is being exported under this origin AS.
remarks:
remarks: This route object was automatically created to prevent
remarks: some DACOM peer from rejecting this route because
remarks: they may create their filter based on Route Registry DB.
notify: n...@bora.net
mnt-by: MAINT-AS3786
changed: yunc...@bora.net
ASN: 17858
ASN Name: KRNIC-ASBLOCK-AP (KRNIC)
Country IP Range: 124.48.0.0 to 124.63.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=17858
19 SBL/ROKSO listings for IPs under the responsibility of DACOM.CO.KR
http://www.spamhaus.org/sbl/listings.lasso?isp=DACOM.CO.KR
4 SBL/ROKSO listings for IPs under the responsibility of bora.net
http://www.spamhaus.org/sbl/listings.lasso?isp=bora.net
See:
scalpeg.com IP 60.2.57.83
dd.biacetylnf.com [211.156.126.244] [TTL=172800] [CN]
ff.biacetylnf.com [60.2.57.83] [TTL=172800] [CN]
http://www.moensted.dk/spam/?addr=60.2.57.83
http://www.spamhaus.org/query/bl?ip=60.2.57.83
More 60.2.57.83 sightings:
http://groups.google.com/groups/search?q=60.2.57.83+group%3A*abuse
inetnum: 60.0.0.0 - 60.10.255.255
netname: CNCGROUP-HE
descr: CNCGROUP Hebei Province Network
route: 60.0.0.0/13
descr: CNC Group HeBei Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country IP Range: 60.0.0.0 to 60.7.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45853
60.2.57.83/32 is listed on the Spamhaus Block List (SBL)
23-Aug-2006 01:11 GMT | SR02
pusscatgd.st - warez
"Copyright © OEM-SOFT-STORE. All rights reserved."
2 SBL/ROKSO listings for IPs under the responsibility of cncgroup-he
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-he
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : scalpeg.com (SCALPE4-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com
Registrant / Admin Contact :
PERSON
Federic TILVANO (TILVAN2-BMN-PE)
Jolewooker Park Str #42
54458 Belimeu
ETHIOPIA
phone : +44 020 81330788
fax :
e-mail : smiltehes[]yahoo.com
Billing Contact :
PERSON
Federic TILVANO (TILVAN2-BMN-PE)
Jolewooker Park Str #42
54458 Belimeu
ETHIOPIA
phone : +44 020 81330788
fax :
e-mail : smil...@yahoo.com
Technical Contact :
PERSON
Federic TILVANO (TILVAN2-BMN-PE)
Jolewooker Park Str #42
54458 Belimeu
ETHIOPIA
phone : +44 020 81330788
fax :
e-mail : smil...@yahoo.com
Domain servers :
ff.biacetylnf.com (FBC4-BMN-HST)
dd.biacetylnf.com (DBC12-BMN-HST)
Created on 05/07/2006 16:50:01
Updated on 07/27/2006 12:35:08
Expires on 05/07/2007 12:50:01
More scalpeg.com sightings:
http://groups.google.com/groups/search?q=scalpeg.com+group%3A*abuse
See:
dd.biacetylnf.com IP 211.156.126.244
http://www.spamhaus.org/query/bl?ip=211.156.126.244
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45875
211.156.126.244/32 is listed on the Spamhaus Block List (SBL)
23-Aug-2006 07:59 GMT | SR23
Spammer controlled nameserver - b.puzzlingdg.com
5 SBL listings for IPs under the responsibility of wantong.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=wantong.net.cn
More biacetylnf.com sightings:
http://groups.google.com/groups/search?q=biacetylnf.com+group%3A*abuse&start=0&scoring=d&
Read more (Leo Kuvayev/BadCow -"ED Med" => over 256 domains):
http://groups.google.com/group/news.admin.net-abuse.email/msg/b82dbc7147b24a15
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/7f8d6294f2825459
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: