[email] [drugs - Discount Pharmacy] (seeitmorethanseo.org - dfgfak.org) Whatcha up to
TomezNet
IP 60.163.48.101 101.48.163.60.broad.jx.zj.dynamic.cndata.com
(at dns-noc.zjhzptt.net.cn / CHINANET-ZJ)
Spamvert:
kxkoy.seeitmorethanseo.org IP 81.155.87.59
(at ns21.bt.net / btcentralplus.com)
www.dfgfak.org IP 211.95.79.125
(at cnuninet.net)
See Much More Discount Pharmacy sightings:
http://groups.google.com/groups/search?q=%22Discount+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
Plenty of forged site certificates and logos served from the same
domain.
See below.
More info below:
====================
X-SID-PRA: Emmett <rep.tim.com...@blackburnmail.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW42ObQXa49ifbq53jurDYDv4k1efIbml7DE=
Received: from tomts21-srv.bellnexxia.net ([209.226.175.183]) by
bay0-pamc1-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 19 Jun 2006 01:11:21 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip1.bellnexxia.net with ESMTP; 19 Jun 2006 04:11:18 -0400
Received: (qmail 608 invoked by uid 110); 19 Jun 2006 08:11:13 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 32512 invoked from network); 19 Jun 2006 08:11:13
-0000
Received: from 101.48.163.60.broad.jx.zj.dynamic.cndata.com (HELO
blackburnmail.com) (60.163.48.101)
by xx..xx..xx.net with SMTP; 19 Jun 2006 08:11:12 -0000
Message-ID: <70A29F87...@blackburnmail.com>
Date: Mon, 19 Jun 2006 17:10:40 +0800
Reply-To: "Emmett" <rep.tim.com...@blackburnmail.com>
From: "Emmett" <rep.tim.com...@blackburnmail.com>
User-Agent: Internet Mail Service (5.5.2650.21)
X-Accept-Language: en-us
MIME-Version: 1.0
To: xx..xx@xx..xx.com
Cc:
Subject: Whatcha up to
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: rep.tim.com...@blackburnmail.com
X-OriginalArrivalTime: 19 Jun 2006 08:11:22.0101 (UTC)
FILETIME=[F36C9A50:01C69377]
Not happy of being overweight, or not being able to fit into your
clothes.
I am so i took the initiative to read up on it at
http://kxkoy.seeitmorethanseo.org/wk/. the attended Samuel bank
film Bodman retracted as I well the by
-- END OF SPAM --
See frames:
<HTML>
<HEAD>
<meta name="language" content="en-us">
<title>Welcome</title>
</HEAD>
<FRAMESET
rows=100%,*><FRAME src="http://www.dfgfak.org/"
scrolling=yes>
</FRAMESET>
</HTML>
Forged site certificates and logos located at dfgfak.org:
* Verisign Secure Site
Discount Pharmacy is a Soltrus Secure Site
Name: Discount Pharmacy www.dfgfak.org
Status: Valid
Validity Period: 13-SEP-05 - 13-SEP-06
Server ID Information:
Country = US
State = UT
Locality = Layton
Organization = Technical Consultants Inc
Organizational Unit = TCE Group
Organizational Unit = Terms of use at Verisign (c) 04
Organizational Unit = Authenticated by Verisign
Organizational Unit = VeriSign Trust Network
Common Name = Discount Pharmacy
* Best international Pharma site
Best international Pharma:
Discount Pharmacy
Fontana, CA 92337
Cheshire 12/2
* BBBOnLine Reliability
Participation Confirmed For Discount Pharmacy
Participant through 12/30/2006
Only Logos:
* UPS (United parcel Service)
* United States Postal Service
See:
IP 60.163.48.101 101.48.163.60.broad.jx.zj.dynamic.cndata.com
http://www.moensted.dk/spam/?addr=60.163.48.101
http://cbl.abuseat.org/lookup.cgi?ip=60.163.48.101
http://www.spamhaus.org/query/bl?ip=60.163.48.101
http://www.uceprotect.net/en/rblcheck.php?ipr=60.163.48.0
See More Pharmacy sightings from cndata.com:
http://groups.google.com/groups/search?q=cndata.com+Pharmacy+group%3A*abuse&start=0&scoring=d&
inetnum: 60.163.0.0 - 60.163.127.255
netname: CHINANET-ZJ-JX
country: CN
descr: CHINANET-ZJ Jiaxing node network
descr: Zhejiang Telecom
route: 60.162.0.0/15
descr: China Telecom Zhejiang province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 60.160.0.0 to 60.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
See:
kxkoy.seeitmorethanseo.org IP 81.155.87.59
ns1.dns.com.cn A IN 3600 218.244.47.5
ns2.dns.com.cn A IN 3600 218.244.47.6
kxkoy.seeitmorethanseo.org has no MX records -> seeitmorethanseo.org
has no MX records
http://www.moensted.dk/spam/?addr=81.155.87.59
81.155.87.59 PTR record: host81-155-87-59.range81-155.btcentralplus.com
at ns21.bt.net
inetnum: 81.154.0.0 - 81.157.255.255
netname: BT-CENTRAL-PLUS
descr: IP pools
country: GB
route: 81.128.0.0/11
descr: BT Public Internet Service
origin: AS2856
mnt-by: BTNET-MNT
changed: sup...@bt.net
ASN Name: BT-UK-AS (BTnet UK Regional network)
http://www.cidr-report.org/cgi-bin/as-report?as=2856
11 SBL listings for IPs under the responsibility of bt.com
http://www.spamhaus.org/sbl/listings.lasso?isp=bt.com
1 SBL listings for IPs under the responsibility of btcentralplus.com
http://www.spamhaus.org/sbl/listings.lasso?isp=btcentralplus.com
Let see whois.publicinterestregistry.net:
Domain ID:D124780305-LROR
Domain Name: SEEITMORETHANSEO.ORG
Created On:19-Jun-2006 07:43:10 UTC
Last Updated On:19-Jun-2006 10:11:08 UTC
Expiration Date:19-Jun-2007 07:43:10 UTC
Sponsoring Registrar:Beijing Innovative Linkage Technology Ltd.
(R1292-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:CTM4S6PWJAICUK7
Registrant Name:Chuyi ZHU
Registrant Organization:Chuyi ZHU
Registrant Street1:379 West Yingze Boulevard
Registrant Street2:
Registrant Street3:
Registrant City:Taiyuan
Registrant State/Province:SX
Registrant Postal Code:030024
Registrant Country:CN
Registrant Phone:+86.3516010332
Registrant Phone Ext.:
Registrant FAX:+86.3516010332
Registrant FAX Ext.:
Registrant Email: vince_stebbins[]hotmail.com
Admin ID:CTAGWNMTMQ4DH73
Admin Name:Chuyi ZHU
Admin Organization:Chuyi ZHU
Admin Street1:379 West Yingze Boulevard
Admin Street2:
Admin Street3:
Admin City:Taiyuan
Admin State/Province:SX
Admin Postal Code:030024
Admin Country:CN
Admin Phone:+86.3516010332
Admin Phone Ext.:
Admin FAX:+86.3516010332
Admin FAX Ext.:
Admin Email: vince_s...@hotmail.com
Tech ID:CTVAS6S8H0K4STW
Tech Name:he wenjie
Tech Organization:shenzhen zhongbaohong industrial comany
Tech Street1:706,huanandianli building,shennanzhong rd
Tech Street2:
Tech Street3:
Tech City:shenzhen
Tech State/Province:SZ
Tech Postal Code:518031
Tech Country:CN
Tech Phone:+86.75561280100
Tech Phone Ext.:
Tech FAX:+86.75561280100
Tech FAX Ext.:
Tech Email:spee...@126.com
Name Server:NS1.DNS.COM.CN
Name Server:NS2.DNS.COM.CN
Much More vince_stebbins[]hotmail.com sightings:
http://groups.google.com/groups/search?q=%22vince_...@hotmail.com%22+group%3A*abuse
See:
www.dfgfak.org IP 211.95.79.125
ns1.dns.com.cn A IN 3600 218.244.47.5
ns2.dns.com.cn A IN 3600 218.244.47.6
www.dfgfak.org has no MX records -> dfgfak.org has no MX records
http://www.moensted.dk/spam/?addr=211.95.79.125
inetnum: 211.90.0.0 - 211.97.255.255
netname: UNICOM
descr: China United Telecommunications Corporation
descr: No.133,Taiyun Building,Xidan North Street
descr: Xicheng District,Beijing,China
country: CN
route: 211.95.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: jin...@bj.cnuninet.net
ASN Name: UNICOM (CHINA UNICOM)
Country IP Range: 211.80.0.0 to 211.95.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9800
More dfgfak.org sightings:
http://groups.google.com/groups/search?q=dfgfak.org+group%3A*abuse
Let see whois.publicinterestregistry.net:
Domain ID:D116717914-LROR
Domain Name: DFGFAK.ORG
Created On:16-Feb-2006 11:57:12 UTC
Last Updated On:18-Jun-2006 17:22:19 UTC
Expiration Date:16-Feb-2007 11:57:12 UTC
Sponsoring Registrar:Beijing Innovative Linkage Technology Ltd.
(R1292-LROR)
Status:OK
Registrant ID:CTA4DM5DSX68QXN
Registrant Name:Lixing JIANG
Registrant Organization:Lixing JIANG
Registrant Street1:272 Mingyang Road
Registrant Street2:
Registrant Street3:
Registrant City:Tsingtao
Registrant State/Province:SH
Registrant Postal Code:266565
Registrant Country:CN
Registrant Phone:+86.5326086148
Registrant Phone Ext.:
Registrant FAX:+86.5326086148
Registrant FAX Ext.:
Registrant Email: antwan_leclair[]hotmail.com
Admin ID:CT0IQ98CQMB2TKS
Admin Name:Lixing JIANG
Admin Organization:Lixing JIANG
Admin Street1:272 Mingyang Road
Admin Street2:
Admin Street3:
Admin City:Tsingtao
Admin State/Province:SH
Admin Postal Code:266565
Admin Country:CN
Admin Phone:+86.5326086148
Admin Phone Ext.:
Admin FAX:+86.5326086148
Admin FAX Ext.:
Admin Email: antwan_...@hotmail.com
Tech ID:CTFVOJB1B3Q2RYT
Tech Name:he wenjie
Tech Organization:shenzhen zhongbaohong industrial comany
Tech Street1:706,huanandianli building,shennanzhong rd
Tech Street2:
Tech Street3:
Tech City:shenzhen
Tech State/Province:SZ
Tech Postal Code:518031
Tech Country:CN
Tech Phone:+86.75561280100
Tech Phone Ext.:
Tech FAX:+86.75561280100
Tech FAX Ext.:
Tech Email: sup...@speed123.com
Name Server:NS1.DNS.COM.CN
Name Server:NS2.DNS.COM.CN
See also more Tech Email support[]speed123.com in sightings:
http://groups.google.com/groups/search?q=%22support%40speed123.com%22+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/7e501158a4ddcc6f
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
TomezNet
From:
IP 60.163.48.101 101.48.163.60.broad.jx.zj.dynamic.cndata.com
(at dns-noc.zjhzptt.net.cn / CHINANET-ZJ)
Spamvert:
kxkoy.seeitmorethanseo.org IP 81.155.87.59
(at ns21.bt.net / btcentralplus.com)
www.dfgfak.org IP 211.95.79.125
(at cnuninet.net)
See Much More Discount Pharmacy sightings:
http://groups.google.com/groups/search?q=%22Discount+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
Plenty of forged site certificates and logos served on dfgfak.org.
* Verisign Secure Site
* Best international Pharma site
* BBBOnLine Reliability
Only Logos:
* UPS (United parcel Service)
* United States Postal Service
More info below:
====================
X-SID-PRA: Emmett <rep.tim.com...@blackburnmail.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43apq0CeFo+W+dn4+R2gdNo4FL7BA9aRiA=
Received: from tomts19-srv.bellnexxia.net ([209.226.175.73]) by
bay0-pamc1-f3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 19 Jun 2006 01:11:23 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip5.bellnexxia.net with ESMTP; 19 Jun 2006 04:11:18 -0400
Received: (qmail 577 invoked by uid 110); 19 Jun 2006 08:11:14 -0000
Delivered-To: xx..xx@xx..xx..xx.com
Received: (qmail 32512 invoked from network); 19 Jun 2006 08:11:14
-0000
Received: from 101.48.163.60.broad.jx.zj.dynamic.cndata.com (HELO
blackburnmail.com) (60.163.48.101)
by xx..xx..xx.com with SMTP; 19 Jun 2006 08:11:13 -0000
Message-ID: <70A29F87...@blackburnmail.com>
Date: Mon, 19 Jun 2006 17:10:41 +0800
Reply-To: "Emmett" <rep.tim.com...@blackburnmail.com>
From: "Emmett" <rep.tim.com...@blackburnmail.com>
User-Agent: Internet Mail Service (5.5.2650.21)
X-Accept-Language: en-us
MIME-Version: 1.0
To: xx..xx@xx..xx..xx.com
Cc:
Subject: Whatcha up to
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: rep.tim.com...@blackburnmail.com
X-OriginalArrivalTime: 19 Jun 2006 08:11:22.0063 (UTC)
FILETIME=[F366CDF0:01C69377]
Not happy of being overweight, or not being able to fit into your
clothes.
I am so i took the initiative to read up on it at
http://kxkoy.seeitmorethanseo.org/wk/. the attended Samuel bank
film Bodman retracted as I well the by
-- END OF SPAM --
See frames:
<HTML>
<HEAD>
<meta name="language" content="en-us">
<title>Welcome</title>
</HEAD>
<FRAMESET
rows=100%,*><FRAME src="http://www.dfgfak.org/"
scrolling=yes>
</FRAMESET>
</HTML>
See More vince_stebbins[]hotmail.com sightings:
http://groups.google.com/groups/search?q=%22vince_...@hotmail.com%22+group%3A*abuse
See:
IP 60.163.48.101 101.48.163.60.broad.jx.zj.dynamic.cndata.com
http://www.moensted.dk/spam/?addr=60.163.48.101
http://cbl.abuseat.org/lookup.cgi?ip=60.163.48.101
http://www.spamhaus.org/query/bl?ip=60.163.48.101
See More Pharmacy sightings from cndata.com:
http://groups.google.com/groups/search?q=cndata.com+Pharmacy+group%3A*abuse&start=0&scoring=d&
inetnum: 60.163.0.0 - 60.163.127.255
netname: CHINANET-ZJ-JX
country: CN
descr: CHINANET-ZJ Jiaxing node network
descr: Zhejiang Telecom
http://www.cidr-report.org/cgi-bin/as-report?as=4134
See:
kxkoy.seeitmorethanseo.org IP 81.155.87.59
ns1.dns.com.cn A IN 3600 218.244.47.5
ns2.dns.com.cn A IN 3600 218.244.47.6
81.155.87.59 PTR record: host81-155-87-59.range81-155.btcentralplus.com
at ns21.bt.net
inetnum: 81.154.0.0 - 81.157.255.255
netname: BT-CENTRAL-PLUS
descr: IP pools
country: GB
ASN Name: BT-UK-AS (BTnet UK Regional network)
http://www.cidr-report.org/cgi-bin/as-report?as=2856
11 SBL listings for IPs under the responsibility of bt.com
http://www.spamhaus.org/sbl/listings.lasso?isp=bt.com
1 SBL listings for IPs under the responsibility of btcentralplus.com
http://www.spamhaus.org/sbl/listings.lasso?isp=btcentralplus.com
See:
www.dfgfak.org IP 211.95.79.125
ns1.dns.com.cn A IN 3600 218.244.47.5
ns2.dns.com.cn A IN 3600 218.244.47.6
inetnum: 211.90.0.0 - 211.97.255.255
netname: UNICOM
descr: China United Telecommunications Corporation
descr: No.133,Taiyun Building,Xidan North Street
descr: Xicheng District,Beijing,China
country: CN
Country IP Range: 211.80.0.0 to 211.95.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9800
See more details at:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/55e524e969fe5993