[email] [drugs - Legal RX] (sayfunding.com - 213.56.102.203 - sonsale.com - dartnet.info - wizardup.info - lofhick.info - molefancy.info) On-line generic store
TomezNet
IP 85.183.213.89
(at hansenet.com / ns1.hansenet.de)
Spamvert:
sayfunding.com IP 61.163.118.80
(SBL46004 - ROK3095) (at cncgroup-ha / ns.halyptt.net.cn)
NEW Yambo Pharmacy image hosting:
http://213.56.102.203:8080/legalrx/images/
IP 213.56.102.203
(at ns0.oleane.net / ns3.nic.fr)
sonsale.com NEW IP 61.163.118.80 (OLD IP 220.130.39.67)
More Legal RX Medications sightings:
http://groups.google.com/groups?q=%22Legal+RX+Medications%22+group%3A*abuse&start=0&scoring=d&
Copyright 1994-2006 © International Legal RX medications All right
reserved.
See forged site certificates and logos:
* BBBOnLine Reliability Participation Confirmed
* Verisign Secure Site
Intenational Legal RX Medications is a Soltrus Secure Site
* Best international Pharma site
More info below:
====================
X-SID-PRA: Gargantuan K. Pigsty <Neu...@ginsbergs.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43ZBbj9mdwwi5CtOxK3NDe6vIMfSU26CF0=
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by
bay0-pamc1-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 25 Aug 2006 03:41:04 -0700
Received: from [MUNGED]
by toip6.bellnexxia.net with ESMTP; 25 Aug 2006 06:40:59 -0400
Received: (qmail 9314 invoked by uid 110); 25 Aug 2006 06:40:58 -0400
Delivered-To: [MUNGED]
Received: (qmail 9285 invoked from network); 25 Aug 2006 06:40:56 -0400
Received: from unknown (HELO 147460784) (oye...@85.183.213.89)
by [MUNGED] with SMTP; 25 Aug 2006 06:40:56 -0400
Received: from ginsbergs.com (147615000 [147834800])
by golftrainingstuff.com (Qmailv1) with ESMTP id A66F04E243
for <[MUNGED]>; Fri, 25 Aug 2006 06:39:03 -0700
Date: Fri, 25 Aug 2006 06:39:03 -0700
From: "Gargantuan K. Pigsty" <Neu...@ginsbergs.com>
X-Mailer: The Bat! (v2.00.8) Personal
X-Priority: 3
Message-ID: <0106911793.2...@ginsbergs.com>
To: [MUNGED]
Subject: On-line generic store
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.10; AVE:
6.20.0.1; VDF: 6.20.0.46; host: golftrainingstuff.com)
Return-Path: Neu...@ginsbergs.com
X-OriginalArrivalTime: 25 Aug 2006 10:41:05.0233 (UTC)
FILETIME=[F7770410:01C6C832]
The most interesting and powerful medicines for you!
Flomax - $1.2 - used to treat the symptoms of an enlarged prostate - a
condition technically known as benign prostatic hyperplasia or BPH.
Altace - $1.14 - Effective in people aged 55 and over, ALTACE may help
in reducing the risk of heart attack, stroke or cardiovascular death.
Suregasm - $35.99 - Achieve stronger and more powerful orgasms with
this all-natural female sexual stimulant.
Augmetin - $4.8 - FDA-approved antibiotic for both acute bacterial
sinusitis (ABS) and community-acquired pneumonia (CAP).
Cloalis Soft Tabs - $5.78 - Just like regular Clualis but specially
formulated, these pills are soft and dissolvable under the tongue. The
effect of this is more direct absorption into the bloodstream, rather
than through the stomach. Result - a powerful, lasting effect of up
to 36 hours.
and more!
our site http://sayfunding.com/
[MUNGED]
-- END OF SPAM --
See:
IP 85.183.213.89
http://www.moensted.dk/spam/?addr=85.183.213.89
http://cbl.abuseat.org/lookup.cgi?ip=85.183.213.89
http://www.spamhaus.org/query/bl?ip=85.183.213.89
abuse[]hansenet.com is listed in rfc-ignorant.org database
inetnum: 85.183.208.0 - 85.183.215.255
netname: HANSENET-ADSL
descr: HanseNet Telekommunikation GmbH
descr: ADSL Pool Customers
country: DE [Germany]
route: 85.176.0.0/13
descr: HANSENET
origin: AS13184
mnt-by: HANSENET-MNT
changed: hostm...@hansenet.com
ASN: 13184
ASN Name: HANSENET (HanseNet Telekommunikation GmbH
Country IP Range: 85.176.0.0 to 85.183.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=13184
5 SBL/ROKSO listings for IPs under the responsibility of hansenet.de
http://www.spamhaus.org/sbl/listings.lasso?isp=hansenet.de
See:
sayfunding.com IP 61.163.118.80
ns1.dartnet.info [201.6.155.6 (NO GLUE)] [BR]
ns1.wizardup.info [NO GLUE; No A record]
ns2.lofhick.info [194.29.49.1 (NO GLUE)] [GR]
ns2.molefancy.info [161.246.61.208 (NO GLUE)] [TH]
[sayfunding.com has 1 MX record mail.sayfunding.com (10)]
http://www.moensted.dk/spam/?addr=61.163.118.80
http://www.spamhaus.org/query/bl?ip=61.163.118.80
61.163.118.80 PTR record: hn.ly.kd.adsl at ns.halyptt.net.cn
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL46004
61.163.118.80/32 is listed on the Spamhaus Block List (SBL/ROKSO)
28-Aug-2006 02:13 GMT | SR23
Yambo Financials
Spam webhosting / nameserver / compromised host
1 SBL listings for IPs under the responsibility of cncgroup-ha
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-ha
LET SEE WHOIS.4domains.com:
Registrar: BLUEBERRY HILL COMM., INC. DBA 4DOMAINS.COM
= Registrar ======================= 4DOMAINS.COM =
==================================================
Domain Name........... SAYFUNDING.COM
Security Status....... LOCKED
Registered............ Jul-18-2006
Expires............... Jul-18-2007
For passwords, transfer inquires, and general info:
Accredited Service Provider:
DomainsAtCost.com
Email............... 110971735...@nowhoisspam.com
Web................. http://www.domainsatcost.com
==================================================
= Registrant Details ================== CID: 26762
==================================================
Abdel Hatem Email: 11097173...@nowhoisspam.com
Abdel Hatem
198 Park Ave
Yonkers, NY 10703
US
Phone: +1.9149691624
==================================================
= Admin Contact ======================= CID: 26762
==================================================
Abdel Hatem Email: 11097173...@nowhoisspam.com
Abdel Hatem
198 Park Ave
Yonkers, NY 10703
US
Phone: +1.9149691624
==================================================
= Technical Contact =================== CID: 26762
==================================================
Abdel Hatem Email: 11097173...@nowhoisspam.com
Abdel Hatem
198 Park Ave
Yonkers, NY 10703
US
Phone: +1.9149691624
==================================================
= Name Servers ===================================
==================================================
ns1.dartnet.info
ns1.wizardup.info
ns2.lofhick.info
ns2.molefancy.info
See NEW Yambo Pharmacy image hosting:
http://213.56.102.203:8080/legalrx/images/
IP 213.56.102.203
No PTR records exist for 213.56.102.203
at ns0.oleane.net / ns3.nic.fr
More 213.56.102.203 sightings:
http://groups.google.com/groups/search?q=213.56.102.203+group%3A*abuse
abuse[]oleane.net is listed in rfc-ignorant.org database
inetnum: 213.56.102.200 - 213.56.102.207
netname: FR-CHAMBRE-D-AGRICULTURE-DEP-DU-CANTAL
descr: CHAMBRE D AGRICULTURE DEP DU CANTAL
descr: 26 Rue Du 139eme Regiment D'infanterie
descr: Bp 239
descr: 15002 Aurillac Cedex
country: FR [France]
role: OLEANE Hostmaster
address: France Telecom Transpac
route: 213.56.0.0/16
descr: OLEANE-990802
origin: AS3215
holes: 213.56.191.0/24
mnt-by: OLEANE-NOC
mnt-by: FT-BRX
changed: hostm...@oleane.net
ASN Name: AS3215 (France Telecom Transpac)
Country IP Range: 213.56.0.0 to 213.56.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3215
See bookmark function script:
window.external.AddFavorite("http://sonsale.com/legalrx/index.php?pid=1359",a+'
Pharmacy - best source for cheap meds!!!
sonsale.com NEW IP 61.163.118.80 (OLD IP 220.130.39.67)
More sonsale.com sightings:
http://groups.google.com/groups/search?q=sonsale.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/5c941131698166b6
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/9721a04968faeb73
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: