Spamvert:
ovf.genral.net IP 202.177.28.15
(at orange.kdd.net.hk)
ovf.genral.net IP 220.232.137.181
(SBL42539) (at pacific.net.hk)
Home page title:
Welcome To Discounted Pharma
Looks like a new morph of Toronto Pharmacy
More "Discounted Pharma" sightings:
http://groups.google.com/groups/search?q=%22Discounted+Pharma%22+group%3A*abuse
Received at an address harvested from domain registration.
More info below:
====================
X-Message-Status: n:0
X-SID-PRA: Jayne Lord <Alejan...@04.gssn.telekom400.dbp.de>
X-SID-Result: TempError
X-Message-Info: txF49lGdW40QMqGHwLuTEbu79Gsmvs6tSMkf4oTC9fk=
Received: from tomts49-srv.bellnexxia.net ([209.226.175.193]) by
bay0-pamc1-f12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830);
Wed, 31 May 2006 09:58:55 -0700
Received: from xx..x..xx.net ([207.58.....])
by toip3.bellnexxia.net with ESMTP; 31 May 2006 12:58:47 -0400
Received: (qmail 27136 invoked by uid 110); 31 May 2006 16:58:46 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 26593 invoked from network); 31 May 2006 16:58:46
-0000
Received: from p5089084a.dip0.t-ipconnect.de (80.137.8.74)
by xx..x..xx.net with SMTP; 31 May 2006 16:58:44 -0000
Received: from berlandexp.ca
by smtp3.berlandexp.ca(0.08.8/9.15.7) id 84332cw95921GL22313tqz with
SMTP; Wed, 31 May 2006 10:56:44 -0600
X-Orcpt: 80.137.8.74
Message-ID:
<200600652.6185RBM6935JHO...@minorco.lu>
Date: Wed, 31 May 2006 19:52:44 +0300
From: "Jayne Lord" <Alejan...@04.gssn.telekom400.dbp.de>
To: xx..xx@xx..xx.com
Subject: on the soccer field was wasted in
MIME-Version: 1.0
Content-Type: text/plain;
Return-Path: Alejan...@04.gssn.telekom400.dbp.de
X-OriginalArrivalTime: 31 May 2006 16:58:55.0478 (UTC)
FILETIME=[80756160:01C684D3]
Beautifull and elegant watches
Rolex - Oyster Perpetual Cosmoguraph Daytona
Frank Muller - Sunset - White Gold With Diamond - Red/black
Tag Heuer - Monaco - Stainless Steel - Blue Dial With Blue
Cartier - Pasha Series With Diamond Rim - 18kt Gold/red
You can save up to 77%
I like the one for Pulse,The idea behind "The Da Vinci Code,for the
prettiest girl on campus,literary dissections,of New Yorkers grows as
the situation
-- END OF SPAM --
See also more "Toronto Pharmacy" sightings:
http://groups.google.com/groups/search?q=%22Toronto+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
See forged site certificates and logos:
- Accredited IMPAC Pharmacy
- BBBOnLine Reliability
- Verisign Secure Site - Soltrus Secure Site
- Verified by VISA
- Top rated by PharmacyChecker
You can not preview certificates.
See:
IP 80.137.8.74 p5089084a.dip0.t-ipconnect.de
http://www.moensted.dk/spam/?addr=80.137.8.74
inetnum: 80.128.0.0 - 80.146.159.255
netname: DTAG-DIAL16
descr: Deutsche Telekom AG
country: DE
route: 80.128.0.0/11
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
changed: b...@nic.dtag.de
source: RIPE
changed: r...@TE142.T-COM
ASN: 3320
ASN Name: DTAG (Deutsche Telekom AG)
http://www.cidr-report.org/cgi-bin/as-report?as=3320
3 SBL/ROKSO listings for IPs under the responsibility of telekom.de
http://www.spamhaus.org/SBL/listings.lasso?isp=telekom.de
See:
ovf.genral.net IP 202.177.28.15 and IP 220.232.137.181
main1.genral.net A IN 38400 202.177.28.15
main2.genral.net A IN 38400 202.177.28.15
dom1.genral.net IP 220.232.137.181
dom2.genral.net IP 220.232.137.181
ovf.genral.net has no MX records -> genral.net has no MX records
http://www.moensted.dk/spam/?addr=220.232.137.181
http://www.spamhaus.org/query/bl?ip=220.232.137.181
inetnum: 220.232.128.0 - 220.232.255.255
netname: PI-HK
descr: Pacific Internet (Hong Kong) Ltd
country: HK
ASN: 2706
ASN Name: HKSUPER-HK-AP (Pacific Supernet Limited)
http://www.cidr-report.org/cgi-bin/as-report?as=
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL42539
220.232.137.181/32 is listed on the Spamhaus Block List (SBL)
27-May-2006 21:03 GMT | SR15
n243home.com ; n2mbps.com / bestproofonline.com ; etc
2 SBL listings for IPs under the responsibility of pacific.net.hk
http://www.spamhaus.org/SBL/listings.lasso?isp=pacific.net.hk
MOVED TO: IP 202.177.28.15
http://www.moensted.dk/spam/?addr=202.177.28.15
202.177.28.15 PTR record: 202-177-28-15.kdd.net.hk
inetnum: 202.177.0.0 - 202.177.31.255
netname: KDD-HK
descr: KDDI HONG KONG LIMITED
descr: ISP in Hong Kong
descr: KDDI is an international telecommunication company in
Japan
country: HK
ASN: 7479
ASN Name: KDDHK-AS-AP (KDD HONG KONG LIMITED)
http://www.cidr-report.org/cgi-bin/as-report?as=7479
3 SBL/ROKSO listings for IPs under the responsibility of kddi.com.hk
http://www.spamhaus.org/SBL/listings.lasso?isp=kddi.com.hk
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : genral.net
Registrant:
Name : angelina frank
Email : myforge[]hotmail.com
Address : 121 scofield
Zipcode : 96790
Nation : US
Tel : 9822867217
Fax :
Administrative Contact:
Name : angelina frank
Email : myf...@hotmail.com
Address : 121 scofield
Zipcode : 96790
Nation : US
Tel : 9822867217
Fax :
Technical Contact:
Name : angelina frank
Email : myf...@hotmail.com
Address : 121 scofield
Zipcode : 96790
Nation : US
Tel : 9822867217
Fax :
Name Servers:
dom1.genral.net 220.232.137.181
dom2.genral.net 220.232.137.181
main1.genral.net 202.177.28.15
main2.genral.net 202.177.28.15
Dates & Status:
Created Date 2006-05-29 13:51:06 EDT
Updated Date 2006-05-29 13:51:06 EDT
Valid Date 2007-05-29 13:51:06 EDT
Status ACTIVE
More 220.232.137.181 sightings:
http://groups.google.com/groups/search?q=220.232.137.181+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/3cfde6aab47d1cea
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: