[email] [drugs - Enlarge Patch Rx] [86.204.31.73] (fonfel.com - srepol.com - polons.com) Beware of fake pills
TomezNet
IP 86.204.31.73 ANancy-156-1-96-73.w86-204.abo.wanadoo.fr
(at ns2.wanadoo.fr / francetelecom.com)
Spamver:
www.fonfel.com IP 121.31.56.34 -> cncgroup-gx, SBL48362
www.fonfel.com IP 221.4.243.131 => cncgroup-gd, SBL48363
Web Title:
Penis Enlarge Patch Rx
by Advanced Laboratories Inc.
More Penis Enlarge Patch Rx sightings:
http://groups.google.com/groups/search?q=%22Penis+Enlarge+Patch+Rx%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: [MUNGED] via 216.252.100.182; Wed, 22 Nov 2006
05:59:59 -0800
X-YahooFilteredBulk: 86.204.31.73
X-Originating-IP: [86.204.31.73]
Return-Path: <gentre...@forhealthyskin.com>
Authentication-Results: mta196.mail.re3.yahoo.com
from=forhealthyskin.com; domainkeys=neutral (no sig)
Received: from 86.204.31.73 (HELO localhost) (86.204.31.73) by
mta196.mail.re3.yahoo.com with SMTP; Wed, 22 Nov 2006 05:59:59 -0800
Message-ID: <000001c70e3e$6ba3b300$0100007f@localhost>
From: "Quentin Campbell" <gentre...@forhealthyskin.com>
To: [MUNGED]
Subject: Beware of fake pills
Date: mer., 22 nov. 2006 14:59:43 +0100
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0001_01C70E3E.6BA3B300"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2745.2800
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2745.2800
Content-Length: 17199
<div id=yiv1312718982><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0
Transitional//EN">
<html><head>
<xmetahttp-equiv=Content-Type>
<xmeta>
<style>
#message #yiv1312718982 textarea {display:none;visibility:hidden;}
</style>
</head>
<xbody><div align=center>
<table id="whro" border="0">
<tr id="veg" align=center><td><img
src="http://attach.mud.mail.yahoo.com/us.f905.mail.yahoo.com/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=7004_0_137239_1256_17199_0_17865_23246_2008372065_oSOYkYn4Ur6Rg9euJfSMZ2XWQsPy9M8u7l9rEmxgG0OZjDOPCv6aThKPaFQ_nufaQ2yW0eGb9chqkZjlX7EPS6.SIvs_UDDZovVvWpsl7ft2BXeU60tP23ZAxq5Cb0oEMvHMGcAcQS7eau5T5FrZLmu3aXdc6ER.rjxI7cX5hsV9&bodyPart=2&YY=59796&y5beta=yes&y5beta=yes&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
border=0></td></tr>
<tr id="otyp" align=center><td><img
src="http://attach.mud.mail.yahoo.com/us.f905.mail.yahoo.com/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=7004_0_137239_1256_17199_0_17865_23246_2008372065_oSOYkYn4Ur6Rg9euJfSMZ2XWQsPy9M8u7l9rEmxgG0OZjDOPCv6aThKPaFQ_nufaQ2yW0eGb9chqkZjlX7EPS6.SIvs_UDDZovVvWpsl7ft2BXeU60tP23ZAxq5Cb0oEMvHMGcAcQS7eau5T5FrZLmu3aXdc6ER.rjxI7cX5hsV9&bodyPart=3&YY=59796&y5beta=yes&y5beta=yes&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
border=0></td></tr>
</table></div>
<xtextarea>Please view as original HTML.</xtextarea>
<xbody>
</html>
</div>
-- END OF SPAM --
Filter evasion tactic. Animated gif asking to key web site in browser.
"Please don`t click. Enter manually following address"
Identical spam as for:
kvakrx.com IP 60.200.246.243 (OLD IP 58.83.0.6)
ns1.moisharx.com. [60.200.246.243] [TTL=172800] [CN]
ns2.moisharx.com. [60.200.246.243] [TTL=172800] [CN]
(SBL48022 - ROK4932) (at jxtvnet.com)
See:
IP 86.204.31.73 ANancy-156-1-96-73.w86-204.abo.wanadoo.fr
http://www.moensted.dk/spam/?addr=86.204.31.73
http://cbl.abuseat.org/lookup.cgi?ip=86.204.31.73
http://www.spamhaus.org/query/bl?ip=86.204.31.73
inetnum: 86.204.31.0 - 86.204.31.255
netname: IP2000-ADSL-BAS
descr: BSNCY156 Nancy Bloc 1
country: FR
admin-c: WITR1-RIPE
tech-c: WITR1-RIPE
status: ASSIGNED PA
remarks: for hacking, spamming or security problems send mail to
remarks: postm...@wanadoo.fr AND ab...@wanadoo.fr
mnt-by: FT-BRX
changed: gestio...@francetelecom.com
route: 86.192.0.0/12
descr: France Telecom
origin: AS3215
mnt-by: RAIN-TRANSPAC
changed: gestio...@francetelecom.com
ASN: 3215
ASN Name: AS3215 (France Telecom Transpac)
Country (per IP registrar): FR [France]
Country IP Range: 86.192.0.0 to 86.255.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3215
1 SBLlistings for IPs under the responsibility of francetelecom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=francetelecom.com
6 SBL listings for IPs under the responsibility of wanadoo.fr
http://www.spamhaus.org/sbl/listings.lasso?isp=wanadoo.fr
See:
www.fonfel.com IP 221.4.243.131
www.fonfel.com IP 121.31.56.34
ns1.polons.com. [211.161.3.55] [TTL=172800] [CN]
ns1.srepol.com. [121.31.56.34] [TTL=172800] [CN]
www.fonfel.com has no MX records -> [fonfel.com has 1 MX record
relay.fonfel.com (10)]
1 MX record is:
10 relay.fonfel.com. [TTL=60] IP=121.31.56.34
NS records at your nameservers are:
ns2.srepol.com [121.31.56.34] [TTL=60]
ns1.srepol.com [121.31.56.34] [TTL=60]
SOA record [TTL=60] is:
Primary nameserver: ns1.srepol.com
Hostmaster E-mail address: ro...@srepol.com
http://www.moensted.dk/spam/?addr= 221.4.243.131
http://www.spamhaus.org/query/bl?ip=221.4.243.131
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL48363
221.4.243.131/32 is listed on the Spamhaus Block List (SBL)
18-Nov-2006 11:48 GMT | SR22
Spam webhosting - demselt.com
11 SBL/ROKSO listings for IPs under the responsibility of cncgroup-gd
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gd
See:
www.fonfel.com IP 121.31.56.34
http://www.moensted.dk/spam/?addr=121.31.56.34
http://www.spamhaus.org/query/bl?ip=121.31.56.34
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL48362
121.31.56.34/32 is listed on the Spamhaus Block List (SBL)
18-Nov-2006 12:46 GMT | SR22
Spam webhosting - demselt.com/melsed.com / ns1.srepol.com
3 SBL/ROKSO listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gx
More 121.31.56.34 sightings:
http://groups.google.com/groups/search?q=121.31.56.34+group%3A*abuse&start=0&scoring=d&
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... fonfel.com
Creation Date........ 2006-10-22 22:16:01
Registration Date.... 2006-10-22 22:16:01
Expiry Date.......... 2007-10-22 22:16:01
Organisation Name.... wu fei
Organisation Address. nan chang
Organisation Address.
Organisation Address. nan chang
Organisation Address. 321000
Organisation Address. JX
Organisation Address. CN
Admin Name........... wu fei
Admin Address........ nan chang
Admin Address........
Admin Address........ nan chang
Admin Address........ 321000
Admin Address........ JX
Admin Address........ CN
Admin Email.......... admin[]fernol.com
Admin Phone.......... +86.7913210002
Admin Fax............ +86.7913210003
Tech Name............ wu fei
Tech Address......... nan chang
Tech Address.........
Tech Address......... nan chang
Tech Address......... 321000
Tech Address......... JX
Tech Address......... CN
Tech Email........... ad...@fernol.com
Tech Phone........... +86.7913210002
Tech Fax............. +86.7913210003
Bill Name............ wu fei
Bill Address......... nan chang
Bill Address.........
Bill Address......... nan chang
Bill Address......... 321000
Bill Address......... JX
Bill Address......... CN
Bill Email........... ad...@fernol.com
Bill Phone........... +86.7913210002
Bill Fax............. +86.7913210003
Name Server.......... ns1.srepol.com
Name Server.......... ns1.polons.com
See:
ns1.srepol.com IP 121.31.56.34
ns1.srepol.com has no MX records -> [srepol.com has 1 MX record
relay.srepol.com (10)]
http://www.moensted.dk/spam/?addr=121.31.56.34
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... srepol.com
Creation Date........ 2006-08-04 01:04:32
Registration Date.... 2006-08-04 01:04:32
Expiry Date.......... 2007-08-04 01:04:32
Organisation Name.... pei fei
Organisation Address. zhen zhen
Organisation Address.
Organisation Address. zhen zhen
Organisation Address. 518000
Organisation Address. SZ
Organisation Address. CN
Admin Name........... pei fei
Admin Address........ zhen zhen
Admin Address........
Admin Address........ zhen zhen
Admin Address........ 518000
Admin Address........ SZ
Admin Address........ CN
Admin Email.......... admin[]gffffa.com
Admin Phone.......... +86.75583256945
Admin Fax............ +86.75583256945
Tech Name............ pei fei
Tech Address......... zhen zhen
Tech Address.........
Tech Address......... zhen zhen
Tech Address......... 518000
Tech Address......... SZ
Tech Address......... CN
Tech Email........... ad...@gffffa.com
Tech Phone........... +86.75583256945
Tech Fax............. +86.75583256945
Bill Name............ pei fei
Bill Address......... zhen zhen
Bill Address.........
Bill Address......... zhen zhen
Bill Address......... 518000
Bill Address......... SZ
Bill Address......... CN
Bill Email........... ad...@gffffa.com
Bill Phone........... +86.75583256945
Bill Fax............. +86.75583256945
Name Server.......... ns2.srepol.com
Name Server.......... ns1.srepol.com
More srepol.com sightings:
http://groups.google.com/groups/search?q=srepol.com+group%3A*abuse&start=0&scoring=d&
See:
ns1.polons.com IP 211.161.3.55
ns1.polons.com has no MX records -> polons.com has no MX records
http://www.moensted.dk/spam/?addr=211.161.3.55
More 211.161.3.55 sightings:
http://groups.google.com/groups/search?q=211.161.3.55+group%3A*abuse&qt_s=Search
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... polons.com
Creation Date........ 2006-08-04 01:34:24
Registration Date.... 2006-08-04 01:34:24
Expiry Date.......... 2007-08-04 01:34:24
Organisation Name.... feng fei
Organisation Address. shang hai
Organisation Address.
Organisation Address. shang hai
Organisation Address. 210000
Organisation Address. SH
Organisation Address. CN
Admin Name........... feng fei
Admin Address........ shang hai
Admin Address........
Admin Address........ shang hai
Admin Address........ 210000
Admin Address........ SH
Admin Address........ CN
Admin Email.......... admifnads[]163.com
Admin Phone.......... +86.2183265215
Admin Fax............ +86.2183265215
Tech Name............ feng fei
Tech Address......... shang hai
Tech Address.........
Tech Address......... shang hai
Tech Address......... 210000
Tech Address......... SH
Tech Address......... CN
Tech Email........... admi...@163.com
Tech Phone........... +86.2183265215
Tech Fax............. +86.2183265215
Bill Name............ feng fei
Bill Address......... shang hai
Bill Address.........
Bill Address......... shang hai
Bill Address......... 210000
Bill Address......... SH
Bill Address......... CN
Bill Email........... admi...@163.com
Bill Phone........... +86.2183265215
Bill Fax............. +86.2183265215
Name Server.......... ns2.polons.com
Name Server.......... ns1.polons.com
More polons.com sightings:
http://groups.google.com/groups/search?q=polons.com+group%3A*abuse&start=0&scoring=d&
Also more Registrant email sightings:
http://groups.google.com/groups/search?q=%22admifnads%40163.com%22+group%3A*abuse&qt_s=Search
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/9b171aa51c384975
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/d1bc95ea38dbd796
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: