Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [drugs - ED Med] (strialhi.st - cashablega.com) Simple way to enhance your sexual life.

0 views
Skip to first unread message

TomezNet

unread,
Aug 25, 2006, 12:00:06 AM8/25/06
to
Received From:
IP 208.38.112.30 208-38-112-30.static.izoom.net
(at NS2.IZOOM.NET)

Spamvert:
strialhi.st IP 60.2.57.83
(SBL45853) (at CNCGROUP-HE)

ga.cashablega.com IP 211.156.126.244
(SBL45875) (at wantong.net.cn)

Web:
Copyright © ED Med Chest Online. All rights reserved.

More ED Med Chest Online / ED Med Choice Online Viagra sightings:
http://groups.google.com/groups/search?q=%22ED+Med%22+group%3A*abuse&start=0&scoring=d&

Supported by Visa and MasterCard

More info below:
====================

X-SID-PRA: Diamond F. Dogma <to...@gmi.org>
X-SID-Result: TempError
X-Message-Info: txF49lGdW41CoJjR4n1X4Rm42ROAVK+/PBQXVEtrbpo=
Received: from tomts21-srv.bellnexxia.net ([209.226.175.183]) by
bay0-pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 24 Aug 2006 12:22:55 -0700
Received: from [MUNGED]
by toip1.bellnexxia.net with ESMTP; 24 Aug 2006 15:22:49 -0400
Received: (qmail 5314 invoked by uid 110); 24 Aug 2006 15:22:48 -0400
Delivered-To: [MUNGED]
Received: (qmail 5307 invoked from network); 24 Aug 2006 15:22:47 -0400
Received: from 208-38-112-30.static.izoom.net (HELO 148586432)
(208.38.112.30)
by [MUNGED] with SMTP; 24 Aug 2006 15:22:47 -0400
Received: from gmi.org (148588976 [148528312])
by 208-38-112-30.static.izoom.net (Qmailv1) with ESMTP id
924BFDD1DE
for <[MUNGED]>; Thu, 24 Aug 2006 15:20:56 -0700
Date: Thu, 24 Aug 2006 15:20:56 -0700
From: "Diamond F. Dogma" <to...@gmi.org>
X-Mailer: The Bat! (v2.00.8) Personal
X-Priority: 3
Message-ID: <7594453793.2...@gmi.org>
To: [MUNGED]
Subject: Simple way to enhance your sexual life.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------902C4890C9334A4"
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.10; AVE:
6.20.0.1; VDF: 6.20.0.46; host: 208-38-112-30.static.izoom.net)
Return-Path: to...@gmi.org
X-OriginalArrivalTime: 24 Aug 2006 19:22:55.0708 (UTC)
FILETIME=[B38C99C0:01C6C7B2]

This is a multi-part message in MIME format.

------------902C4890C9334A4
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

------------902C4890C9334A4
Content-Type: text/html
Content-Transfer-Encoding: 7bit

<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
</head>
<body>
<p align="center">
<table width="594" style="border: 1px; border-style: solid;
border-color:#000000; font-family: Verdana; font-weight: bold;
font-size:16px;" bgcolor="#FFFF00" cellpadding="5" cellspacing="2">
<tr><td align=center bgcolor="#0000FF" style="border: 1px;
border-style: solid; border-color:#000000; color:#FFFFFF"><p>Worried
about the loss of erection? You'll get a hard and lasting erection and
plenty of orgasms for your lady.</p></td></tr>
<tr><td><a href="http://[MUNGED].strialhi.st /">visit us</a></td>
</tr>
</table></p>
<p>&nbsp;</p>
<p><font color="#999999">There was one idea drifting in and out of my
head, but it bordered on madness. The cloud of plaster dust settled and
all I could see of him was one hand, slightly crumpled. Like finding
Angelina, for instance. The League fleet is already closing in on the
renegades and you will be informed of the capture. For the first time
in a lifetime of verbal pyrotechnics I found the flow shut off. It was
an awful waste in some ways yet it had to be done. Angelina would be
able to recruit allot those she needed. The drawers slid shut and its
metal hide was as smooth as ever.</font></p>
</body>
</html>

------------902C4890C9334A4--


And see more (Leo Kuvayev/BadCow -"ED Med" => over 256 domains):
http://groups.google.com/group/news.admin.net-abuse.email/msg/b82dbc7147b24a15

-- END OF SPAM --

See:
IP 208.38.112.30 208-38-112-30.static.izoom.net

http://www.moensted.dk/spam/?addr=208.38.112.30
http://cbl.abuseat.org/lookup.cgi?ip=208.38.112.30
http://www.spamhaus.org/query/bl?ip=208.38.112.30

OrgName: Sherburne Tele-Systems, Inc.
OrgID: SCRT
NetRange: 208.38.64.0 - 208.38.127.255
CIDR: 208.38.64.0/18
NetName: STC-NET1
NetHandle: NET-208-38-64-0-1

iZoom is a product of NorthStar Access and Connections, Etc.

ASN: 21747
ASN Name: SHERBTEL-NET
http://www.cidr-report.org/cgi-bin/as-report?as=21747

See:
strialhi.st IP 60.2.57.83
ca.cashablega.com [60.2.57.83] [TTL=86400] [CN]
ga.cashablega.com [211.156.126.244] [TTL=86400] [CN]

http://www.moensted.dk/spam/?addr=60.2.57.83
http://abuse.net/sbl.phtml?IP=60.2.57.83

More 60.2.57.83 sightings:
http://groups.google.com/groups/search?q=60.2.57.83+group%3A*abuse

inetnum: 60.0.0.0 - 60.10.255.255
netname: CNCGROUP-HE
descr: CNCGROUP Hebei Province Network

route: 60.0.0.0/13
descr: CNC Group HeBei Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country IP Range: 60.0.0.0 to 60.7.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45853
60.2.57.83/32 is listed on the Spamhaus Block List (SBL)

23-Aug-2006 01:11 GMT | SR02

pusscatgd.st - warez
"Copyright © OEM-SOFT-STORE. All rights reserved."

This time from Web:
Copyright © ED Med Chest Online. All rights reserved.

2 SBL/ROKSO listings for IPs under the responsibility of cncgroup-he
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-he

Let see whois.nic.st:

Registration Service Provided By: ST Registry
Contact: regi...@nic.st

Domain name: strialhi.st

Administrative Contact:
Company Name: Ian Legg
Contact: Ian Legg
Address: 4,Petersham Road

State:
City: Poole
Country: UK

Status: Active

Name Servers:
ga.cashablega.com
ca.cashablega.com
Using 0 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more
likely that you will trigger our rate limiting system).

Whois Server Version 1.1

Domain Name: strialhi.st
Registrar: ST Registry
Whois at: whois.nic.st
Name Server: ga.cashablega.com
Name Server: ca.cashablega.com
Updated Date: 22-Aug-2006
Creation Date: 22-Aug-2006

See:
ga.cashablega.com IP 211.156.126.244

http://www.spamhaus.org/query/bl?ip=211.156.126.244
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45875
211.156.126.244/32 is listed on the Spamhaus Block List (SBL)

23-Aug-2006 07:59 GMT | SR23

Spammer controlled nameserver - b.puzzlingdg.com

5 SBL listings for IPs under the responsibility of wantong.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=wantong.net.cn

Let see whois:
Registrar: TUCOWS INC.

Registrant:
Private
620 Isham St
NY, NY 10034
US

Domain name: CASHABLEGA.COM

Administrative Contact:
Somteh, Mattew Mattew_Somteh[]yahoo.com
620 Isham St
NY, NY 10034
US
+1.2122295799
Technical Contact:
Somteh, Mattew Mattew...@yahoo.com
620 Isham St
NY, NY 10034
US
+1.2122295799

Registration Service Provider:
myOstrich Internet Services, dom...@myostrich.net
http://www.myostrich.net
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.

Registrar of Record: TUCOWS, INC.
Record last updated on 15-Aug-2006.
Record expires on 15-Aug-2007.
Record created on 15-Aug-2006.
Domain servers in listed order:
CA.CASHABLEGA.COM 60.2.57.83
GA.CASHABLEGA.COM 211.156.126.244

Domain status: ACTIVE

More 211.156.126.244 sightings:
http://groups.google.com/groups/search?q=211.156.126.244++group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/4406be3fca8cf274

And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/a4b7dde54ff831f2

Cheers, Tomez


--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages