[email] [drugs - MyCanadianPharmacy] (joyfulhours.com - dartnet.info - wizardup.info - lofhick.info - molefancy.info) International Legal RX
TomezNet
IP 213.39.132.73 c132073.adsl.hansenet.de
(at ns1.hansenet.de)
open proxy -- 1069261207 (Wed Nov 19 18:00:07 2003)
http://njabl.org/cgi-bin/lookup.cgi?query=213.39.132.73
abuse[]hansenet.com is listed in rfc-ignorant.org database
Spamvert:
joyfulhours.com IP 61.77.61.207
(at rev2.kornet.net)
open proxy -- 1124876085 (Wed Aug 24 11:34:45 2005)
Yambo Pharmacy image hosting:
http://194.145.201.202:8080/p/images/
IP 194.145.201.202 => ts4-202.twistspace.com
(SBL45225 - ROK3095) (at compukos.nl)
More Yambo MyCanadianPharmacy aka MyCanadian Pharmacy sightings:
http://groups.google.com/groups/search?q=%22MyCanadianPharmacy%22+group%3A*abuse&start=0&scoring=d&
Plenty of Forged certificates and logos.
More info below:
====================
X-SID-PRA: Grooved O. Bird <d...@globaloyster.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW429bz6920xIMh0x//RfXxhj1aWLn4hDcrM=
Received: from tomts26-srv.bellnexxia.net ([209.226.175.189]) by
bay0-pamc1-f11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 21 Aug 2006 23:43:46 -0700
Received: from [MUNGED]
by toip5.bellnexxia.net with ESMTP; 22 Aug 2006 02:43:38 -0400
Received: (qmail 5518 invoked by uid 110); 22 Aug 2006 02:43:36 -0400
Delivered-To: [MUNGED]
Received: (qmail 5492 invoked from network); 22 Aug 2006 02:43:35 -0400
Received: from c132073.adsl.hansenet.de (HELO 143707752)
(213.39.132.73)
by [MUNGED] with SMTP; 22 Aug 2006 02:43:35 -0400
Received: from globaloyster.com (144006656 [143317696])
by c132073.adsl.hansenet.de (Qmailv1) with ESMTP id F1833F3471
for <[MUNGED]>; Tue, 22 Aug 2006 02:41:49 -0700
Date: Tue, 22 Aug 2006 02:41:49 -0700
From: "Grooved O. Bird" <d...@globaloyster.com>
X-Mailer: The Bat! (v2.00.5) Personal
X-Priority: 3
Message-ID: <0032950699.2...@globaloyster.com>
To: [MUNGED]
Subject: International Legal RX
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------F126AF67D77FA45"
X-Virus-Scanned: by amavisd-milter at c132073.adsl.hansenet.de
Return-Path: d...@globaloyster.com
X-OriginalArrivalTime: 22 Aug 2006 06:43:47.0138 (UTC)
FILETIME=[51A8E220:01C6C5B6]
This is a multi-part message in MIME format.
------------F126AF67D77FA45
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Welcome to International RX!
- Best quality drugs
- Special Internet prices
- Fast and discreet worldwide shipping
- Friendly customer support
Men's Health
Anti-Depressants
Pain Relief
General health
Weight loss
Anti-biotics
Anti-herpes
Women's health
Anti-diabetic
Blood Pressure/Cholesterol
Anti-Allergic/Asthma
Anti-Acidity
View Full Products List
http://
------------F126AF67D77FA45
Content-Type: text/html
Content-Transfer-Encoding: 7bit
<html>
<body>
<font color="#333333"><strong>Welcome to International RX!</strong><br>
- Best quality drugs <br>
- Special Internet prices <br>
- Fast and discreet worldwide shipping <br>
- Friendly customer support
<p>Men's Health <br>
Anti-Depressants <br>
Pain Relief <br>
General health <br>
Weight loss <br>
Anti-biotics <br>
Anti-herpes <br>
Women's health <br>
Anti-diabetic <br>
Blood Pressure/Cholesterol <br>
Anti-Allergic/Asthma <br>
Anti-Acidity </p>
</font>
<p><font color="#333333"><a href="http://joyfulhours.com/">View Full
Products List</a></font></p>
</body>
</html>
------------F126AF67D77FA45--
-- END OF SPAM --
Plenty of Forged certificates and logos.
* PharmacyChecker
CEO/President: Jack Poppins
My Canadian Pharmacy Corp.
1592 Wilson Avenue,
Toronto, ON M3L 1A6
* BBBOnLine Reliability
* Secure Site Seal / Pharmacy is a Soltrus Secure Site
* Verified by Visa
* CIPA Membership (The Canadian International Pharmacy Association)
See:
IP 213.39.132.73 c132073.adsl.hansenet.de
http://www.moensted.dk/spam/?addr=213.39.132.73
http://dsbl.org/listing?213.39.132.73
Open Proxy - http://www.ahbl.org/tools/lookup.php?ip=213.39.132.73
inetnum: 213.39.128.0 - 213.39.166.255
netname: HANSENET
descr: HanseNet Telekommunikation GmbH
descr: ADSL Pool
country: DE [Germany]
route: 213.39.128.0/17
descr: HANSENET
origin: AS13184
mnt-by: HANSENET-MNT
changed: hostm...@hansenet.com
changed: ma...@hansenet.com
ASN: 13184
ASN Name: HANSENET (HanseNet Telekommunikation GmbH)
Country IP Range: 213.39.128.0 to 213.39.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=13184
5 SBL/ROKSO listings for IPs under the responsibility of hansenet.de
http://www.spamhaus.org/sbl/listings.lasso?isp=hansenet.de
See:
joyfulhours.com IP 61.77.61.207
ns1.dartnet.info [201.6.155.6 (NO GLUE)] [BR]
ns1.wizardup.info [212.52.166.78 (NO GLUE)] [HU]
ns2.lofhick.info [209.102.132.41 (NO GLUE)] [US]
ns2.molefancy.info [201.231.50.189 (NO GLUE)] [AR]
NS records at nameservers are:
ns1.joyfulhours.com [61.77.61.207] [TTL=600]
ns2.joyfulhours.com [61.77.61.207] [TTL=600]
ns3.joyfulhours.com [109.51.200.45] [TTL=600]
[joyfulhours.com has 1 MX record mail.joyfulhours.com (10)]
http://www.moensted.dk/spam/?addr=61.77.61.207
http://www.spamhaus.org/query/bl?ip=61.77.61.207
http://dsbl.org/listing?61.77.61.207
Open Proxy - http://www.ahbl.org/tools/lookup.php?ip=61.77.61.207
SOCKS Proxy See: http://www.sorbs.net/lookup.shtml?61.77.61.207
http://korea.services.net/blocked.phtml?addr=61.77.61.207
IPv4 Address : 61.77.61.0-61.77.61.255
Network Name : KORNET-INFRA000001
Connect ISP Name : KORNET
Org Name : Korea Telecom
Address : Jungja-dong, Bundang-gu, Sungnam-ci
Zip Code : 463-711
E-Mail : i...@krnic.kornet.net
route: 61.72.0.0/13
descr: KORnet Powered BY Korea Telecom
origin: AS4766
mnt-by: MAINT-AS4766
changed: chinny7...@kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 61.72.0.0 to 61.79.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
Let see whois:
Registrar: THE REGISTRY AT INFO AVENUE D/B/A IA REGISTRY
Registration Service Provided By: SPIRITDOMAINS/IAREGISTRY
Contact: +1.8779322339
Website: http://www.spiritdomains.com
Domain Name: JOYFULHOURS.COM
Registrant:
Valentina Smatracalieva
Valentina Smatracalieva (matraouy[]yahoo.com)
2628 Ridgewater Cir
Henderson
Nevada,89074
US
Tel. +702.2426677
Creation Date: 18-Jul-2006
Expiration Date: 18-Jul-2007
Domain servers in listed order:
ns2.molefancy.info
ns2.lofhick.info
ns1.wizardup.info
ns1.dartnet.info
Administrative Contact:
Valentina Smatracalieva
Valentina Smatracalieva (matr...@yahoo.com)
2628 Ridgewater Cir
Henderson
Nevada,89074
US
Tel. +702.2426677
Technical Contact:
Valentina Smatracalieva
Valentina Smatracalieva (matr...@yahoo.com)
2628 Ridgewater Cir
Henderson
Nevada,89074
US
Tel. +702.2426677
Billing Contact:
Valentina Smatracalieva
Valentina Smatracalieva (matr...@yahoo.com)
2628 Ridgewater Cir
Henderson
Nevada,89074
US
Tel. +702.2426677
Status:ACTIVE
See:
ns1.dartnet.info IP 201.6.155.6
201.6.155.6 PTR record: c9069b06.static.spo.virtua.com.br
at dns1.virtua.com.BR
More dartnet.info sightings:
http://groups.google.com/groups/search?q=dartnet.info+group%3A*abuse&start=0&scoring=d&
See:
ns1.wizardup.info IP 212.52.166.78 => SBL39594
212.52.166.78 PTR record: bongeszde.hu
at dns1.hu
More wizardup.info sightings:
http://groups.google.com/groups/search?q=wizardup.info+group%3A*abuse&start=0&scoring=d&
See:
ns2.lofhick.info IP 209.102.132.41 => SBL44181 / Yambo Financials
209.102.132.41 PTR record: 209-102-132-41.adsl.gulftel.net
at dns1.madisonriver.net
More lofhick.info sightings:
http://groups.google.com/groups/search?q=lofhick.info+group%3A*abuse&start=0&scoring=d&
See:
ns2.molefancy.info IP 201.231.50.189
No PTR records exist for 211.230.186.96 at rev2.kornet.net
More molefancy.info sightings:
http://groups.google.com/groups/search?q=molefancy.info+group%3A*abuse&start=0&scoring=d&
See Yambo Financials Image spam hosting:
IP 194.145.201.202 => ts4-202.twistspace.com
194.145.201.202 PTR record: ts4-202.twistspace.com
at ns2.twistspace.com
More 194.145.201.202 sightings:
http://groups.google.com/groups/search?q=194.145.201.202+group%3A*abuse
http://www.spamhaus.org/query/bl?ip=194.145.201.202
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45225
1 SBL/ROKSO listings for IPs under the responsibility of compukos.nl
http://www.spamhaus.org/sbl/listings.lasso?isp=compukos.nl
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/390355f0b4c60baa
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/abdd0da207fc905d
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: