Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [USDrugs] [84.145.59.244] (bidderner.com - cheeseflick.info - fatbast.com - guardlessrod.com - lebee4ae.com - champakdagon.com) Presentation [new US e-shop]

0 views

Skip to first unread message

TomezNet

unread,

Mar 8, 2007, 10:00:23 AM3/8/07

Received From:
IP 84.145.59.244 p54913bf4.dip0.t-ipconnect.de
(at dns01.btx.dtag.de / pns.dtag.de / telekom.de / t-ipnet.de)

Spamvert:
www.bidderner.com IP 219.158.69.114
(SBL51496 - ROK3095) (at cncgroup-cn)

Yambo Pharmacy domain image hosting again on Yahoo:
cheeseflick.info
Resolved cheeseflick.info to 68.142.212.117 to 68.142.212.137 to
68.142.212.138 to 68.142.212.139 to 68.142.212.140 to 68.142.212.141

Web:
Copiright Š 2003-2007 USDrugs. All Rights Reserved.

More info below:
====================

X-SID-PRA: Truman Galloway <Swinburne'sdefo...@lionlover.com>
X-SID-Result: SoftFail
X-Message-Info: txF49lGdW41bSEufHX0Z8plXaLQUqDx3Xy3FRIjc84U=
Received: from tomts21-srv.bellnexxia.net ([209.226.175.183]) by bay0-
pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 8 Mar 2007 00:03:05 -0800
Received: from [MUNGED]
by toip22.srvr.bell.ca with ESMTP; 08 Mar 2007 03:02:59 -0500
Received: (qmail 10181 invoked by uid 110); 8 Mar 2007 03:02:59 -0500
Delivered-To: [MUNGED]
Received: (qmail 10168 invoked from network); 8 Mar 2007 03:02:58
-0500
Received: from p54913bf4.dip0.t-ipconnect.de (84.145.59.244)
by [MUNGED] with SMTP; 8 Mar 2007 03:02:58 -0500
Return-Path: <Swinburne'sdefo...@lionlover.com>
Received: from 64.233.167.27 (HELO ALT1.ASPMX.L.GOOGLE.com)
by [MUNGED] with esmtp (F;/,801* 1U/*')
id +CRJX(-HU-*0=-@P
for [MUNGED]; Thu, 8 Mar 2007 08:02:59 -0060
From: "Truman Galloway" <Swinburne'sdefo...@lionlover.com>
To: [MUNGED]
Subject: Presentation [new US e-shop]
Date: Thu, 8 Mar 2007 08:02:59 -0060
Message-ID: <01c76158$30164290$6c822ecf@Swinburne'sdeforming>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C76160.91DAAA90"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Thread-Index: Aca6Q6Z-B,@5+96):789/5ZW9(>,I)==
X-OriginalArrivalTime: 08 Mar 2007 08:03:05.0176 (UTC)
FILETIME=[33765D80:01C76158]

This is a multi-part message in MIME format.

------=_NextPart_000_0006_01C76160.91DAAA90
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Dear valued member!
This is a letter from United Medical Research Organization. We just
wanted to ask you to be as attentive as possible when buying drugs on
the Web.
Recently, a research aimed at monitoring the quality of the drugs sold
at the most popular online pharmacies has been made. The results of
this research were rather surprising. Only one out of 53 Web
drugstores - USDrugs - has proved its meds to be 100% generic.
Hope that you've found the information provided in the letter
useful.Click here to learn more.
With Best Regards, Truman Galloway
USDrugs B.V.
http://www.bidderner.com/

------=_NextPart_000_0006_01C76160.91DAAA90
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html;
charset=3Diso-8859-1">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered
medium)">
</head>
<body>
<html>
<body bgcolor=3D"#FFFFFF" link=3D"#0000FF">
Dear valued member! 
 
This is a letter from United Medical Research Organization. We just
wanted =
to ask you to be as attentive as possible when buying drugs on the
Web. 
 
Recently, a research aimed at monitoring the quality of the drugs sold
at t=
he most popular online pharmacies has been made. The results of this
resear=
ch were rather surprising. Only one out of 53 Web drugstores =96 <a
href=3D=
"http://www.bidderner.com/">USDrugs</a> =96 has proved its meds to be
100% =
generic. 
 
Hope that you=92ve found the information provided in the letter
useful. 
 
<a href=3D"http://www.bidderner.com/">Click here to learn more.</
a> 
 
With Best Regards, Truman Galloway 
USDrugs B.V. 
http://www.bidderner.com/
</body>
</html>

</body>
</html>

------=_NextPart_000_0006_01C76160.91DAAA90--

-- END OF SPAM --

See:
IP 84.145.59.244 p54913bf4.dip0.t-ipconnect.de

http://www.moensted.dk/spam/?addr=84.145.59.244
http://www.spamhaus.org/query/bl?ip=84.145.59.244
http://www.spamhaus.org/pbl/query/PBL043009

postmaster and abuse[]t-ipconnect.de are listed in rfc-ignorant.org
database
abuse[]telekom.de is listed in rfc-ignorant.org database
whois, postmaster and abuse[]dtag.de are listed in rfc-ignorant.org
database

inetnum: 84.136.0.0 - 84.191.255.255
netname: DTAG-DIAL20
descr: Deutsche Telekom AG

descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
changed: b...@nic.dtag.de
ASN: 3320
ASN Name: DTAG (Deutsche Telekom AG)
Country (per IP registrar): DE [Germany]
Country IP Range: 84.128.0.0 to 84.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3320

1 SBL listings for IPs under the responsibility of t-ipconnect.de
http://www.spamhaus.org/sbl/listings.lasso?isp=t-ipconnect.de

5 SBL/ROKSO listings for IPs under the responsibility of telekom.de
http://www.spamhaus.org/sbl/listings.lasso?isp=telekom.de

6 SBL/ROKSO listings for IPs under the responsibility of dtag.de
http://www.spamhaus.org/SBL/listings.lasso?isp=dtag.de

See:
www.bidderner.com IP 219.158.69.114
ns1.fatbast.com. [85.136.20.235] [TTL=172800] [ES]
ns1.guardlessrod.com. [63.223.11.14] [TTL=172800] [US]
ns2.lebee4ae.com. [63.223.11.14] [TTL=172800] [US]

www.bidderner.com has no MX records -> bidderner.com has no MX records

http://www.moensted.dk/spam/?addr=219.158.69.114
http://www.spamhaus.org/query/bl?ip=219.158.69.114

inetnum: 219.158.0.0 - 219.158.255.255
netname: CNCGROUP
country: CN
descr: CNC group
role: CNCGroup Hostmaster
e-mail: ab...@cnc-noc.net => ???

whois, bogusmx, postmaster and abuse[]cnc-noc.net are listed in rfc-
ignorant.org database

Prefix: 219.158.69.0/24
ASN: 4837
ASN Name: China Network Communications Group China Network
Communications (CNC Group)
Country (per IP registrar): *P [[APNIC Unlisted]]
Country IP Range: 219.0.0.0 to 219.255.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837

Aliases on the same IP:
eum.suprapturousz.com
ns1.suprapturousz.com
ns2.suprapturousz.com
getjuaik.hk
ns1.getjuaik.hk
ns2.getjuaik.hk

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL51496
219.158.69.114/32 is listed on the Spamhaus Block List (SBL/ROKSO)

20-Feb-2007 16:21 GMT | SR22

Yambo Financials.
Spam webhosting - miqa.hk

1 SBL/ROKSO listings for IPs under the responsibility of cncgroup-cn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-cn

Let see whois:
Registrar: DSTR ACQUISITION VII, LLC
Registrant:
Icek Pankovich (BIDDERNER-COM-DOM)
Sos. Mihai Bravu,No. 5
Bl. 4, Entr. 4, Apt. 9
Bucuresti, Sector 2 76101
Romania
+040.0212516407
+040.0212516407
icek_pankovich[]yahoo.com

Domain Name: BIDDERNER.COM
Status: PROTECTED

Administrative Contact:
Icek Pankovich icek_pa...@yahoo.com
Sos. Mihai Bravu,No. 5
Bl. 4, Entr. 4, Apt. 9
Bucuresti, Sector 2 76101
Romania
+040.0212516407
Fax- +040.0212516407

Technical Contact, Zone Contact:
Icek Pankovich icek_pa...@yahoo.com
Sos. Mihai Bravu,No. 5
Bl. 4, Entr. 4, Apt. 9
Bucuresti, Sector 2 76101
Romania
+040.0212516407
Fax- +040.0212516407

Record last updated on 22-Feb-2007.
Record expires on 22-Feb-2008.
Record created on 22-Feb-2007.

Domain servers in listed order:
Name Server: ns1.tonsilsbot.com
Name Server: ns2.groupron.com
Name Server: ns1.belikeyous.com

More bidderner.com sightings:
http://groups.google.com/groups/search?q=bidderner.com+group%3A*abuse&start=0&scoring=d&

SEE NEW Yambo Pharmacy domain image hosting on Yahoo:
cheeseflick.info
Resolved cheeseflick.info to 68.142.212.117 to 68.142.212.137 to
68.142.212.138 to 68.142.212.139 to 68.142.212.140 to 68.142.212.141

See:
http://www.robtex.com/dns/cheeseflick.info.html

Let see whois.afilias.info:
Registrar: CSL Computer Service Langenbach GmbH

Domain ID:D16128380-LRMS
Domain Name:CHEESEFLICK.INFO
Created On:15-Jan-2007 21:57:59 UTC
Last Updated On:02-Feb-2007 16:35:28 UTC
Expiration Date:15-Jan-2008 21:57:59 UTC
Sponsoring Registrar:CSL Computer Service Langenbach GmbH (R161-LRMS)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CAFI-236776
Registrant Name:Tammy Bargy
Registrant Organization:Tammy Bargy
Registrant Street1:1253 Broadway
Registrant Street2:
Registrant Street3:
Registrant City:Rensselaer
Registrant State/Province:NY
Registrant Postal Code:12144
Registrant Country:US
Registrant Phone:+1.5184361512
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: latterpart253[]yahoo.com
Admin ID:CAFI-236775
Admin Name:Tammy Bargy
Admin Organization:Tammy Bargy
Admin Street1:1253 Broadway
Admin Street2:
Admin Street3:
Admin City:Rensselaer
Admin State/Province:NY
Admin Postal Code:12144
Admin Country:US
Admin Phone:+1.5184361512
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: latter...@yahoo.com
Billing ID:CAFI-236775
Billing Name:Tammy Bargy
Billing Organization:Tammy Bargy
Billing Street1:1253 Broadway
Billing Street2:
Billing Street3:
Billing City:Rensselaer
Billing State/Province:NY
Billing Postal Code:12144
Billing Country:US
Billing Phone:+1.5184361512
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: latter...@yahoo.com
Tech ID:CAFI-236775
Tech Name:Tammy Bargy
Tech Organization:Tammy Bargy
Tech Street1:1253 Broadway
Tech Street2:
Tech Street3:
Tech City:Rensselaer
Tech State/Province:NY
Tech Postal Code:12144
Tech Country:US
Tech Phone:+1.5184361512
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: latter...@yahoo.com
Name Server: YNS1.YAHOO.COM
Name Server: YNS2.YAHOO.COM

More cheeseflick.info sightings:
http://groups.google.com/groups/search?q=cheeseflick.info+group%3A*abuse

See:
ns1.fatbast.com IP 85.136.20.235 => SBL49493

ns1.fatbast.com has no MX records -> [fatbast.com has 1 MX record
mail.fatbast.com (10)]

See:
ns1.fatbast.com IP 63.223.11.14 => SBL49084

Let see whois:
Registrar: MONIKER ONLINE SERVICES, INC.
Domain Name: FATBAST.COM

Registrant [587337]:
Scott Olander
Route 2 Box 202
Omaha
NE
68122
US

Administrative Contact [587337]:
Scott Olander arllmazd[]yahoo.com
Route 2 Box 202
Omaha
NE
68122
US
Phone: +1.4025718078

Billing Contact [587337]:
Scott Olander arll...@yahoo.com
Route 2 Box 202
Omaha
NE
68122
US
Phone: +1.4025718078

Technical Contact [587337]:
Scott Olander arll...@yahoo.com
Route 2 Box 202
Omaha
NE
68122
US
Phone: +1.4025718078

Domain servers in listed order:
NS1.FATBAST.COM 63.223.11.14
NS2.FATBAST.COM 85.136.20.235

Record created on: 2007-01-23 07:14:04.0
Database last updated on: 2007-03-01 18:49:04.14
Domain Expires on: 2008-01-23 07:14:05.0

More fatbast.com sightings:
http://groups.google.com/groups/search?q=fatbast.com+group%3A*abuse

See:
ns1.guardlessrod.com IP 63.223.11.14 => SBL49084

ns1.guardlessrod.com has no MX records -> [guardlessrod.com has 1 MX
record mail.guardlessrod.com (10)]

Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... guardlessrod.com
Creation Date........ 2006-12-23 22:54:27
Registration Date.... 2006-12-23 22:54:27
Expiry Date.......... 2007-12-23 22:54:27
Organisation Name.... zhou fei
Organisation Address. fu jian xiamen
Organisation Address.
Organisation Address. xia men
Organisation Address. 321000
Organisation Address. FJ
Organisation Address. CN

Admin Name........... zhou fei
Admin Address........ fu jian xiamen
Admin Address........
Admin Address........ xia men
Admin Address........ 321000
Admin Address........ FJ
Admin Address........ CN
Admin Email.......... admin[]champakdagon.com
Admin Phone.......... +86.59232100232
Admin Fax............ +86.59232100232

Tech Name............ zhou fei
Tech Address......... fu jian xiamen
Tech Address.........
Tech Address......... xia men
Tech Address......... 321000
Tech Address......... FJ
Tech Address......... CN
Tech Email........... ad...@champakdagon.com
Tech Phone........... +86.59232100232
Tech Fax............. +86.59232100232

Bill Name............ zhou fei
Bill Address......... fu jian xiamen
Bill Address.........
Bill Address......... xia men
Bill Address......... 321000
Bill Address......... FJ
Bill Address......... CN
Bill Email........... ad...@champakdagon.com
Bill Phone........... +86.59232100232
Bill Fax............. +86.59232100232
Name Server.......... ns2.guardlessrod.com
Name Server.......... ns1.guardlessrod.com

More guardlessrod.com sightings:
http://groups.google.com/groups/search?q=guardlessrod.com+group%3A*abuse

See:
ns2.lebee4ae.com IP 63.223.11.14 => SBL49084

ns2.lebee4ae.com has no MX records -> [lebee4ae.com has 1 MX record
mail.lebee4ae.com (10)]

See:
ns2.lebee4ae.com IP 83.15.82.74 => SBL50921

83.15.82.74 PTR record: eja74.internetdsl.tpnet.pl
at ns2.tpnet.pl / telekomunikacja.pl

Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name:lebee4ae.com
Registrant:
zhou long
NO.32 hong cheng road
330008

Administrative Contact:
zhou long
zhou long
NO.32 hong cheng road
nan chang Jiangxi 330008
China
tel: 86 0791 6775669
fax: 86 0791 6775669
ad...@lebee4ae.com

Technical Contact:
zhou long
zhou long
NO.32 hong cheng road
nan chang Jiangxi 330008
China
tel: 86 0791 6775669
fax: 86 0791 6775669
ad...@lebee4ae.com

Billing Contact:
zhou long
zhou long
NO.32 hong cheng road
nan chang Jiangxi 330008
China
tel: 86 0791 6775669
fax: 86 0791 6775669
ad...@lebee4ae.com

Registration Date: 2007-03-01
Update Date: 2007-03-02
Expiration Date: 2008-03-01

Primary DNS: ns1.lebee4ae.com 63.223.11.14
Secondary DNS: ns2.lebee4ae.com 85.136.20.235

More lebee4ae.com sightings:
http://groups.google.com/groups/search?q=lebee4ae.com+group%3A*abuse

And SEE champakdagon.com from Registration Data:
champakdagon.com IP N/A

champakdagon.com has no MX records

See also whois champakdagon.com from Registrant record:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... champakdagon.com
Creation Date........ 2006-12-23 22:54:54
Registration Date.... 2006-12-23 22:54:54
Expiry Date.......... 2007-12-23 22:54:54
Organisation Name.... zhou fei
Organisation Address. fu jian xiamen
Organisation Address.
Organisation Address. xia men
Organisation Address. 321000
Organisation Address. FJ
Organisation Address. CN

And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/09a2e676474cfcad

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages