[email] [drugs - Yambo botnet] [83.131.248.111] (bchealthcoalition.ca / masterchorale.org / smallever.com / kopepharas.com / mukopkufude.com / nuspharkosa.com / pharokufuma.com) [MUNGED] - Shop
TomezNet
IP 83.131.248.111 83-131-248-111.adsl.net.t-com.hr
(at ht.hr)
Spamvert:
www.bchealthcoalition.ca IP 204.174.223.211
www.masterchorale.org IP 204.174.223.211
(at netnation.com / siteprotect.com)
Both Redirected to:
http://www.smallever.com/
Title => Canadian Pharmacy
www.smallever.com botnet Resolved to IP 78.48.229.253 to 78.106.26.233
to 80.133.250.97 to 91.89.4.16 to 121.137.164.98 to 125.59.38.208 to
125.231.208.235 to 210.71.62.81 to 218.252.90.8 to 218.253.18.253 to
218.254.186.212 to 219.98.194.184 to 221.124.196.204 to
221.126.245.203 to 221.127.111.197
Spamvert E-mail Return-Path:
communications_msn_cs_enau[]cimail15.msn.com
More Canadian Pharmacy sightings:
http://groups.google.com/groups/search?q=%22Canadian+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
Plenty of Forged Certificates and logos as always.
More info below:
====================
X-SID-PRA: [MUNGED]
X-Message-Info: JGTYoYF78jHnXwnS1uPhQ1peSMSD9rmo/lBFbGysSdtMcZmot1Fc
+M5v9InyXJU/FwN/ieGQaqQWX6Cu4c2exw==
Received: from tomts11-srv.bellnexxia.net ([209.226.175.55]) by bay0-
pamc1-f3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 29 Aug 2007 02:17:13 -0700
Received: from [MUNGED]
by toip24.srvr.bell.ca with ESMTP; 29 Aug 2007 05:17:05 -0400
Received: (qmail 15591 invoked by uid 110); 29 Aug 2007 04:47:46 -0400
Delivered-To: [MUNGED]
Received: (qmail 15557 invoked from network); 29 Aug 2007 04:47:45
-0400
Received: from 83-131-248-111.adsl.net.t-com.hr (HELO dlovric)
(83.131.248.111)
by [MUNGED] with SMTP; 29 Aug 2007 04:47:45 -0400
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Return-Path: communication...@cimail15.msn.com
Received: (qmail 14418 by uid 727); Wed, 29 Aug 2007 10:48:23 +0100
Message-Id: <20070829114823.14420.qmail@dlovric>
To: <[MUNGED]>
Subject: [MUNGED] - Shop
From: <[MUNGED]>
MIME-Version: 1.0
Importance: High
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Date: Wed, 29 Aug 2007 05:17:12 -0400
X-OriginalArrivalTime: 29 Aug 2007 09:17:13.0588 (UTC)
FILETIME=[62CCAB40:01C7EA1D]
<TABLE cellSpacing=0 cellPadding=8 width=548 border=0>
<TBODY>
<TR>
<TBODY>
<TR><script>
<TD><FONT face=verdana color=#666666 size=1><a target="_blank"
href="http://email.bose.com/cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0BQUk0Gp&src=EM218424&dartsourceid=EM218424"><IMG
height=25 alt="Add address" src="http://products.bose.com/static/email/
images/shared_assets/address.gif" width=29 align=absMiddle border=0></
A></FONT></TD>
<TD><FONT face=verdana color=#666666 size=1>To ensure you receive our
emails, please add <STRONG>Bo...@email.bose.com</STRONG> to your
address book. <a target="_blank" class=header href="http://
email.bose.com/cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0BQUk0Gp&src=EM218424&dartsourceid=EM218424">Click here</
A> for instructions.</FONT></TD>
</TR>
</TBODY></TABLE>
<!-- footer -->
<TABLE cellSpacing=0 cellPadding=0 width=548 border=0><!---spacer--->
<TBODY>
<TR>
<TD><IMG height=3 src="http://products.bose.com/static/email/images/
shared_assets/spacer.gif" width=3></TD>
</TR>
<TR>
<TD>
<TABLE cellSpacing=0 cellPadding=0 width=548 border=0>
<TBODY>
<TR>
<TD width=263>
<DIV style="BORDER-RIGHT: #cccccc 1px dotted; BORDER-TOP: #cccccc 1px
dotted; FONT-SIZE: 11px; BORDER-LEFT: #cccccc 1px; COLOR: #666666;
BORDER-BOTTOM: #cccccc 1px dotted; FONT-FAMILY: arial; TEXT-ALIGN:
left"><IMG height=18 alt="Shop @ Bose 3 ways" hspace=3 src="http://
products.bose.com/static/email/images/shared_assets/shop3way.gif"
width=123 align=absMiddle vspace=6 border=0> <IMG height=19
src="http://products.bose.com/static/email/images/shared_assets/
phone.gif" width=21 align=absMiddle vspace=6 border=0> Call<SPAN
style="COLOR: #4670ac"> 1-888-757-9972 </SPAN></DIV></TD>
<TD style="BORDER-RIGHT: #cccccc 1px dotted; BORDER-TOP: #cccccc 1px
dotted; FONT-SIZE: 11px; BORDER-LEFT: #cccccc 1px; COLOR: #666666;
BORDER-BOTTOM: #cccccc 1px dotted; FONT-FAMILY: arial" width=130><a
target="_blank" href="http://email.bose.com/cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0BJt10GH&src=EM218424&dartsourceid=EM218424"><IMG
height=19 hspace=3 src="http://products.bose.com/static/email/images/
shared_assets/online.gif" width=21 align=absMiddle vspace=6 border=0></
A> Online at <a target="_blank" class=footer href="http://
email.bose.com/cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0BJt10GH&src=EM218424&dartsourceid=EM218424">Bose.com</
A></TD>
<TD style="BORDER-RIGHT: #cccccc 1px; BORDER-TOP: #cccccc 1px dotted;
FONT-SIZE: 11px; BORDER-LEFT: #cccccc 1px; COLOR: #666666; BORDER-
BOTTOM: #cccccc 1px dotted; FONT-FAMILY: arial" width=155><a
target="_blank" href="http://email.bose.com/cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0BJtz0GU&src=EM218424&dartsourceid=EM218424"><IMG
height=19 hspace=3 src="http://products.bose.com/static/email/images/
shared_assets/store.gif" width=21 align=absMiddle vspace=6 border=0></
A> Find a <a target="_blank" class=footer href="http://email.bose.com/
cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0BJtz0GU&src=EM218424&dartsourceid=EM218424" alt="Bose
retail store">Bose retail store</A></TD>
</TR>
</TBODY></TABLE></TD>
</TR>
<!--subscriber and send to a friend--><!--need to change EM Code for
each project and Send to a friend hosted version URL-->
<TR>
<TD style="FONT-SIZE: 11px; COLOR: #666666; BORDER-BOTTOM: #cccccc 1px
dotted; FONT-FAMILY: arial; TEXT-ALIGN: left"><a target="_blank"
href="http://email.bose.com/cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0BJt20GI&src=EM218424&dartsourceid=EM218424"><IMG
height=26 alt="Not a Bose subscriber? Sign up to receive emails about
Bose products and events." hspace=3 src="http://products.bose.com/
static/email/images/shared_assets/subscriber.gif" width=421 vspace=6
border=0></A> <a target="_blank" href="http://email.bose.com/cgi-bin24/
DM/y/nfo80Pa5Vb0KRc0Bag30GT&src=EM218424&dartsourceid=EM218424"><IMG
height=26 alt="Send to a friend" src="http://products.bose.com/static/
email/images/shared_assets/sendafriend.gif" width=117
vspace=6 border=0></A></TD>
</TR>
<!---Update and mouse print--->
<TR>
<TD>
<TABLE cellSpacing=0 cellPadding=6 border=0>
<TBODY>
<TR>
<TD>
<DIV style="FONT-SIZE: 11px; COLOR: #666666; FONT-FAMILY: arial"><a
target="_blank" class=footer href="http://email.bose.com/cgi-bin24/DM/
y/nfo80Pa5Vb0KRc0BFtN0Gg">Update email address</A> | <a
target="_blank" class=footer href="http://email.bose.com/cgi-bin24/DM/
y/nfo80Pa5Vb0KRc0BFtN0Gg">Unsubscribe</A> | <a target="_blank"
class=footer href="http://email.bose.com/cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0BJt50GL&src=EM218424&dartsourceid=EM218424">Privacy
policy</A> <BR>
<BR>
You are subscribed to receive Bose emails as [MUNGED]. To unsubscribe
or update your email address, please <a target="_blank" class=footer
href="http://email.bose.com/cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0BFtN0Gg">click here</A>. If you are unable to use the
link provided, please call 1-800-723-1255. <BR>
<BR>
For customer service and all other inquiries, please call
1-888-757-9972. <BR>
<BR>
Bose Corporation, Framingham, MA 01701, USA<BR>
<BR>
Quotes used with permission. <BR>
<BR>
Featured offers valid only for purchases made at <a target="_blank"
href="http://email.bose.com/cgi-bin24/DM/y/
nfo80Pa5Vb0KRc0h0Gu">www.Bose.com</A> or at an authorized Bose
dealer.<BR>
<BR>
</DIV></TD>
</TR>
</TBODY></TABLE></TD>
</TR>
</TBODY></TABLE><!---Update and mouse print---><!-- end footer --
><XXBODYXX>
<IMG SRC="http://email.bose.com/cgi-bin24/flosensing?z="><XXHTMLXX></
script>
<TD style="BORDER-BOTTOM: #cccccc 1px dotted"><FONT face=verdana
color=#666666 size=1>Can't view this email? <a href="http://
www.bchealthcoalition.ca/shop.htm">See it online</a></A>.</FONT></TD>
</TR>
</TBODY></TABLE>
<TABLE cellSpacing=0 cellPadding=8 width=548 border=0>
<p><a href="http://www.masterchorale.org/shop.htm"><img src="http://
www.limestonegolf.com/inbox.gif" border="0" /></a></p>
-- END OF SPAM --
And More www.bose.com and Yambo sightings:
http://groups.google.com/groups/search?q=bose.com+group%3A*abuse&start=0&scoring=d&
Bose Corporation knows about it since May 17, 2007
WEB:
Licensed by The College of Pharmacists of British Columbia.
If you have any questions or concerns you can contact the college at
200-1765 West 8th Ave. Vancouver, BC, Canada V6J 5C6
You may contact us at +1(210) 787-1711, please, keep your order I.D.
every time you make a call.
© Copyright Canadian Pharmacy, 2003-2007. All Rights Reserved.
See:
IP 83.131.248.111 83-131-248-111.adsl.net.t-com.hr
http://www.moensted.dk/spam/?addr=83.131.248.111
http://spamcop.net/w3m?action=checkblock&ip=83.131.248.111
Much More t-com.hr sightings:
http://groups.google.com/groups/search?q=t-com.hr+group%3A*abuse&start=0&scoring=d&
inetnum: 83.131.248.0 - 83.131.251.255
netname: T-HT
descr: T-Com Croatia Internet network
descr: Croatian Telecom Inc., Zagreb, Croatia
country: HR
role: T-HT Contact
address: T-HT, Croatian Telecom Inc.
address: Draskoviceva 26
address: HR-10000 Zagreb
address: Croatia
postmaster and abuse[]hinet.hr are listed in rfc-ignorant.org database
route: 83.131.0.0/16
descr: T-Com Croatia Internet network
descr: Croatian Telecom Inc., Zagreb, Croatia
origin: AS5391
mnt-lower: HPT-MNT
mnt-by: HPT-MNT
changed: davor...@hinet.hr => ???
changed: ripe-...@t.ht.hr
AS Name: T-HT T-Com Croatia Internet network
http://www.cidr-report.org/cgi-bin/as-report?as=5391
Spamvert URL:
http://www.bchealthcoalition.ca/shop.htm
See Source code:
HTTP/1.1 200 OK
Date: Wed, 29 Aug 2007 18:45:36 GMT
Server: Apache/2.0.54 (Debian GNU/Linux) FrontPage/5.0.2.2635 mod_ssl/
2.0.54 OpenSSL/0.9.7e
Last-Modified: Tue, 28 Aug 2007 09:43:28 GMT
ETag: "47-4e281000"
Accept-Ranges: bytes
Content-Length: 71
Connection: close
Content-Type: text/html
<META http-equiv="refresh" content="0; url=http://www.smallever.com">
Title => Canadian Pharmacy
Redirected to:
http://www.smallever.com/
See:
www.bchealthcoalition.ca IP 204.174.223.211
w.dns.netnation.com IP 204.174.223.169
x.dns.netnation.com IP 64.40.97.2
www.bchealthcoalition.ca has no MX records -> bchealthcoalition.ca has
no MX records
204.174.223.211 = lsh415.van.ca.siteprotect.com
http://www.moensted.dk/spam/?addr=204.174.223.211
http://apews.org/?page=test&ip=204.174.223.211
OrgName: NetNation Communications Inc
OrgID: NNC
NetRange: 204.174.223.0 - 204.174.223.255
CIDR: 204.174.223.0/24
NetName: NETNATION-CA
NetHandle: NET-204-174-223-0-1
Parent: NET-204-0-0-0-0
NetType: Direct Assignment
NameServer: NS1.NETNATION.COM
NameServer: NS2.NETNATION.COM
AS Name: NETNATION - NetNation Communications Inc
http://www.cidr-report.org/cgi-bin/as-report?as=14280
1 SBL listings for IPs under the responsibility of netnation.com
http://www.spamhaus.org/sbl/listings.lasso?isp=netnation.com
Let see whois.cira.ca:
Registrar: Webnames.ca (UBC Research Enterprises Inc.)
Registrar-no: 70
Registrant-no: 478458
Domaine-no: 485552
Subdomain: bchealthcoalition.ca
Renewal-Date: 2008/09/09
Date-Approved: 2002/09/09
Date-Modified: 2007/05/11
Organization: BC Health Coalition
Description:
Admin-Name: Maryann Abbs
Admin-Title: Coordinator
Admin-Postal: BC Health Coalition
2nd floor - 411 Dunsmuir St.
Vancouver BC V6B1X4 Canada
Admin-Phone: 1 604 6817945
Admin-Fax:
Admin-Mailbox: bc...@vcn.bc.ca
Tech-Name: Maryann Abbs
Tech-Title: Coordinator
Tech-Postal: BC Health Coalition
2nd floor - 411 Dunsmuir St.
Vancouver BC V6B1X4 Canada
Tech-Phone: 1 604 6817945
Tech-Fax:
Tech-Mailbox: bc...@vcn.bc.ca
NS1-Hostname: w.dns.netnation.com
NS1-Netaddress: 204.174.223.169
NS2-Hostname: x.dns.netnation.com
NS2-Netaddress: 204.174.223.225
See spamvert URL:
http://www.masterchorale.org/shop.htm
See source code:
HTTP/1.1 200 OK
Date: Wed, 29 Aug 2007 18:45:36 GMT
Server: Apache/2.0.54 (Debian GNU/Linux) FrontPage/5.0.2.2635 mod_ssl/
2.0.54 OpenSSL/0.9.7e
Last-Modified: Tue, 28 Aug 2007 09:44:33 GMT
ETag: "47-4e281000"
Accept-Ranges: bytes
Content-Length: 71
Connection: close
Content-Type: text/html
<META http-equiv="refresh" content="0; url=http://www.smallever.com">
See:
www.masterchorale.org IP 204.174.223.211
w.dns.netnation.com IP 204.174.223.169
x.dns.netnation.com IP 64.40.97.2
www.masterchorale.org has no MX records -> masterchorale.org has no MX
records
hostnames sharing ip indirectly via cnames
www.alcaninbc.com
hostnames sharing ip with a-records
madaboutfood.net
tremware.com
www.madaboutfood.net
lsh415.van.ca.siteprotect.com
nortrak.com
alcaninbc.com
bcatpr.ca
bciscalling.ca
citylooksroch.com
ronsmachinetools.ca
www.bchealthcoalition.ca
Let see whois.publicinterestregistry.net:
Domain ID:D7614119-LROR
Domain Name: MASTERCHORALE.ORG
Created On:30-Jun-1999 17:03:01 UTC
Last Updated On:12-Apr-2007 17:19:57 UTC
Expiration Date:30-Jun-2008 17:03:01 UTC
Sponsoring Registrar: Network Solutions LLC (R63-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:24655077-NSI
Registrant Name:MasterChoraleof Washington, Inc.
Registrant Organization:MasterChoraleof Washington, Inc.
Registrant Street1:5630 Connecticut Avenue NW Sui
Registrant Street2:
Registrant Street3:
Registrant City:Washington
Registrant State/Province:DC
Registrant Postal Code:20015
Registrant Country:US
Registrant Phone:+1.9999999999
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: sin...@PAULHILLCHORALE.ORG
Admin ID:24655079-NSI
Admin Name:MasterChoraleof Washington, Inc.
Admin Organization:MasterChoraleof Washington, Inc.
Admin Street1:5630 CONNECTICUT AVE NW STE 20
Admin Street2:
Admin Street3:
Admin City:WASHINGTON
Admin State/Province:DC
Admin Postal Code:20015-2605
Admin Country:US
Admin Phone:+1.20236443
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: sin...@PAULHILLCHORALE.ORG
Tech ID:24655077-NSI
Tech Name:MasterChoraleof Washington, Inc.
Tech Organization:MasterChoraleof Washington, Inc.
Tech Street1:5630 Connecticut Avenue NW Sui
Tech Street2:
Tech Street3:
Tech City:Washington
Tech State/Province:DC
Tech Postal Code:20015
Tech Country:US
Tech Phone:+1.9999999999
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: sin...@PAULHILLCHORALE.ORG
Name Server: W.DNS.NETNATION.COM
Name Server: X.DNS.NETNATION.COM
See:
IP 204.174.223.211 = lsh415.van.ca.siteprotect.com
204.174.223.211 A alcaninbc.com
204.174.223.211 A bcatpr.ca
204.174.223.211 A bciscalling.ca
204.174.223.211 A citylooksroch.com
204.174.223.211 A lsh415.van.ca.siteprotect.com
204.174.223.211 A madaboutfood.net
204.174.223.211 A nortrak.com
204.174.223.211 A ronsmachinetools.ca
204.174.223.211 A tremware.com
204.174.223.211 A www.bchealthcoalition.ca
204.174.223.211 A www.madaboutfood.net
204.174.223.211 lsh415.van.ca.siteprotect.com 204.174.223.211
204.174.223.211 C www.alcaninbc.com
See:
www.smallever.com botnet Resolved to IP 78.48.229.253 to 78.106.26.233
to 80.133.250.97 to 91.89.4.16 to 121.137.164.98 to 125.59.38.208 to
125.231.208.235 to 210.71.62.81 to 218.252.90.8 to 218.253.18.253 to
218.254.186.212 to 219.98.194.184 to 221.124.196.204 to
221.126.245.203 to 221.127.111.197
www.smallever.com has no MX records -> smallever.com has no MX records
ns0.kopepharas.com [218.254.186.212] [TTL=172800] [HK]
ns0.mukopkufude.com [221.127.111.197] [TTL=172800] [HK]
ns0.nuspharkosa.com [219.98.194.184] [TTL=172800] [JP]
ns0.pharokufuma.com [210.203.52.206] [TTL=172800] [TW]
NS records at nameservers are:
smallever.com [58.91.165.91] [61.18.156.174] [61.238.0.82]
[78.106.26.233] [121.137.164.98] [125.59.38.208] [125.231.208.235]
[210.71.62.81] [211.244.211.37] [218.252.90.8] [218.253.18.253]
[219.98.194.184] [221.124.196.204] [221.126.245.203] [221.127.174.198]
[TTL=300]
smallever.com [58.91.165.91] [61.18.156.174] [61.238.0.82]
[78.106.26.233] [121.137.164.98] [125.59.38.208] [125.231.208.235]
[210.71.62.81] [211.244.211.37] [218.252.90.8] [218.253.18.253]
[219.98.194.184] [221.124.196.204] [221.126.245.203] [221.127.174.198]
[TTL=300]
smallever.com [58.91.165.91] [61.18.156.174] [61.238.0.82]
[78.106.26.233] [121.137.164.98] [125.59.38.208] [125.231.208.235]
[210.71.62.81] [211.244.211.37] [218.252.90.8] [218.253.18.253]
[219.98.194.184] [221.124.196.204] [221.126.245.203] [221.127.174.198]
[TTL=300]
smallever.com [58.91.165.91] [61.18.156.174] [61.238.0.82]
[78.106.26.233] [121.137.164.98] [125.59.38.208] [125.231.208.235]
[210.71.62.81] [211.244.211.37] [218.252.90.8] [218.253.18.253]
[219.98.194.184] [221.124.196.204] [221.126.245.203] [221.127.174.198]
[TTL=300]
smallever.com [58.91.165.91] [61.18.156.174] [61.238.0.82]
[78.106.26.233] [121.137.164.98] [125.59.38.208] [125.231.208.235]
[210.71.62.81] [211.244.211.37] [218.252.90.8] [218.253.18.253]
[219.98.194.184] [221.124.196.204] [221.126.245.203] [221.127.174.198]
[TTL=300]
smallever.com [58.91.165.91] [61.18.156.174] [61.238.0.82]
[78.106.26.233] [121.137.164.98] [125.59.38.208] [125.231.208.235]
[210.71.62.81] [211.244.211.37] [218.252.90.8] [218.253.18.253]
[219.98.194.184] [221.124.196.204] [221.126.245.203] [221.127.174.198]
[TTL=300]
smallever.com [58.91.165.91] [61.18.156.174] [61.238.0.82]
[78.106.26.233] [121.137.164.98] [125.59.38.208] [125.231.208.235]
[210.71.62.81] [211.244.211.37] [218.252.90.8] [218.253.18.253]
[219.98.194.184] [221.124.196.204] [221.126.245.203] [221.127.174.198]
[TTL=300]
smallever.com [58.91.165.91] [61.18.156.174]
SOA record [TTL=300] is:
Primary nameserver: ns0.pharokufuma.com
Hostmaster E-mail address:
Serial #: 0
Let see whois.dns.com.cn:
Domain Name.......... smallever.com
Creation Date........ 2007-08-25 12:51:23
Registration Date.... 2007-08-25 12:51:23
Expiry Date.......... 2008-08-25 12:51:23
Organisation Name.... happyinternational.inc
Organisation Address. chaoyang avenue 468
Organisation Address.
Organisation Address. beijing
Organisation Address. 100438
Organisation Address. BJ
Organisation Address. CN
Admin Name........... huan huan
Admin Address........ chaoyang avenue 468
Admin Address........
Admin Address........ beijing
Admin Address........ 100438
Admin Address........ BJ
Admin Address........ CN
Admin Email.......... dfeendlo...@hotmail.com
Admin Phone.......... +86.1045875892
Admin Fax............ +86.1093859833
Tech Name............ he sir
Tech Address......... shennanzhong rd
Tech Address.........
Tech Address......... Shenzhen
Tech Address......... 518031
Tech Address......... GD
Tech Address......... CN
Tech Email........... admins...@126.com
Tech Phone........... +86.75583233325
Tech Fax............. +86.75583233325
Bill Name............ he sir
Bill Address......... shennanzhong rd
Bill Address.........
Bill Address......... Shenzhen
Bill Address......... 518031
Bill Address......... GD
Bill Address......... CN
Bill Email........... admins...@126.com
Bill Phone........... +86.75583233325
Bill Fax............. +86.75583233325
Name Server.......... ns0.nuspharkosa.com
Name Server.......... ns0.pharokufuma.com
Name Server.......... ns0.kopepharas.com
Name Server.......... ns0.mukopkufude.com
See:
ns0.kopepharas.com [218.254.186.212] [TTL=172800] [HK]
Let see whois.paycenter.com.cn:
Domain Name:kopepharas.com
Registrant:
Stephen Patterson
9857 WEXFORD CIR
95746
Administrative Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
dfd[]hotmail.com
Technical Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Billing Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Registration Date: 2007-07-12
Update Date: 2007-07-13
Expiration Date: 2008-07-12
Primary DNS: ns0.kopepharas.com 218.254.186.212
Secondary DNS: ns1.kopepharas.com 80.133.250.97
See:
ns0.mukopkufude.com [221.127.111.197] [TTL=172800] [HK]
Let see whois.paycenter.com.cn:
Domain Name:mukopkufude.com
Registrant:
Stephen Patterson
9857 WEXFORD CIR
95746
Administrative Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Technical Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Billing Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Registration Date: 2007-07-12
Update Date: 2007-07-13
Expiration Date: 2008-07-12
Primary DNS: ns0.mukopkufude.com 221.127.111.197
Secondary DNS: ns1.mukopkufude.com 78.48.51.39
See:
ns0.nuspharkosa.com [219.98.194.184] [TTL=172800] [JP]
Let see whois.paycenter.com.cn:
Domain Name:nuspharkosa.com
Registrant:
Stephen Patterson
9857 WEXFORD CIR
95746
Administrative Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Technical Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Billing Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Registration Date: 2007-07-12
Update Date: 2007-07-13
Expiration Date: 2008-07-12
Primary DNS: ns0.nuspharkosa.com 219.98.194.184
Secondary DNS: ns1.nuspharkosa.com 81.202.126.112
See:
ns0.pharokufuma.com [210.203.52.206] [TTL=172800] [TW]
Let see whois.paycenter.com.cn:
Domain Name:pharokufuma.com
Registrant:
Stephen Patterson
9857 WEXFORD CIR
95746
Administrative Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Technical Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Billing Contact:
Stephen Patterson
Stephen Patterson
9857 WEXFORD CIR
GRANITE BAY 95746
United States
tel: 86 916 791 6222
fax: 86 916 791 6222
d...@hotmail.com
Registration Date: 2007-07-12
Update Date: 2007-07-13
Expiration Date: 2008-07-12
Primary DNS: ns0.pharokufuma.com 210.203.52.206
Secondary DNS: ns1.pharokufuma.com 210.203.52.206
See also more identical spam sightings with email.bose.com:
http://groups.google.com/groups/search?q=email.bose.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/0827b157cb221a8f
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/2a1c8f4e8da40436
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/0709c18e7f3847f2
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: