Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [meds] (variousrevitalization.com) Our oulet is considerate of your medicinal wishes.

0 views
Skip to first unread message

TomezNet

unread,
Nov 30, 2005, 3:00:43 AM11/30/05
to
Received From:
IP 58.33.183.77
(at ns-pxb.online.sh.cn / CHINANET-SH)

Spamvert:
onlinepharmacy.variousrevitalization.com IP 222.168.100.163
(at ns1.jltele.net / CHINATELECOM-JL / CHINANET-JL)

Spammer:
Discount Pharmacy a.k.a Instant Pharmacy

instant-pharmacy.net IP 201.49.143.104
(SBL34829) (at easytone.com.br) (OLD IP 211.93.72.96)

See Spamvert URL at:
http://sg.geocities.com/palmer_sellek/
Redirected:
http://onlinepharmacy.variousrevitalization.com/

Received at an address harvested from our autoresponder and from domain
registration.

More instant-pharmacy.net sightings:
http://groups.google.com/groups?q=instant-pharmacy.net+group%3A*abuse

More info below:
====================
X-Message-Info: moY6YVwXQ47QelIc4FDsHasuL5ZT+1isv/AfIJBI5Ew=
Received: from tomts39-srv.bellnexxia.net ([209.226.175.96]) by
bay0-pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Tue, 29 Nov 2005 21:41:32 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
(207.228.2....)
by toip4.bellnexxia.net with ESMTP; 30 Nov 2005 00:41:30 -0500
Received: from mexicansrule.com ([58.33.183.77])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jAU5fLV15538;
Wed, 30 Nov 2005 00:41:22 -0500 (EST)
Message-ID: <e98201c5f511$dd3a6cd0$c82f944b@rickie>
From: "Kyara" <ric...@mexicansrule.com>
To: xx..xx@xx..xx.com
Subject: Our oulet is considerate of your medicinal wishes.
Date: Tue, 29 Nov 2005 18:22:32 +0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
X-Originating-IP: [0]
Return-Path: ric...@mexicansrule.com
X-OriginalArrivalTime: 30 Nov 2005 05:41:32.0776 (UTC)
FILETIME=[B856B680:01C5F570]

Trustworthiness and low prices turn up hand in hand at our treatments
store.

Having trouble acquiring certain products? You shouldn't have a problem
finding it here!
It's not likely you will get lost when going to the treatments store
when
its on the internet!
Our lower operating costs result in min fees on all supplements. You
will
be hard pressed to find cheaper prices anywhere!
Not happy? No bother! Simply run it back and you'll collect all of your
money in return!
Our U.S. Licensed shopping site will fedex your shipment fast and
discreetly the next businesss day.


http://sg.geocities.com/palmer_sellek/


With all my love,

Kyara

degree score London?"
football pitch twelfth the moment, mirror undisturbed. and number
traffic
jam expense, including legal fees, foot that arise directly or Yc


-- END OF SPAM --

More sightings of URL redirect at sg.geocities.com:
http://groups.google.com/groups?q=%22sg.geocities.com%22+group:*abuse*&start=0&scoring=d&

Identical onlinepharmacy spam as:
onlinepharmacy.toplevelcombination.com IP 211.93.72.96
onlinepharmacy.mixesandtopvalue.com IP 211.93.72.97
onlinepharmacy.rightfromtoddlingweb.com IP 222.168.100.163
onlinepharmacy.offamilyniceweb.com IP 211.93.72.96

See:
IP 58.33.183.77

http://www.moensted.dk/spam/?addr=58.33.183.77

inetnum: 58.33.180.0 - 58.33.183.255
netname: CHINANET-SH-BBAD-203
descr: Chinanet shanghai boardband adsl 203
mnt-by: MAINT-CHINANET-SH

route: 58.32.0.0/13
descr: China Telecom ShangHai province
origin: AS4134

11 SBL/ROKSO listings for IPs under the responsibility of CHINANET-SH
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-SH

See:
onlinepharmacy.variousrevitalization.com IP 222.168.100.163
ns1.variousrevitalization.com A IN 172800 211.93.72.97
ns2.variousrevitalization.com A IN 172800 218.12.197.158

onlinepharmacy.variousrevitalization.com has no MX records ->
variousrevitalization.com has no MX records

http://www.moensted.dk/spam/?addr=222.168.100.163

More 222.168.100.163 sightings:
http://groups.google.com/groups?q=222.168.100.163+group%3A*abuse&start=0&scoring=d&

inetnum: 222.168.0.0 - 222.169.255.255
netname: CHINATELECOM-JL
mnt-by: MAINT-CHINANET-JL

route: 222.168.0.0/15
descr: ChinaNet JiLin Province Network
origin: AS4134

5 SBL listings for IPs under the responsibility of CHINANET-JL
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-JL

Let see whois:

Domain Name.......... variousrevitalization.com
Creation Date........ 2005-07-10 13:34:07
Registration Date.... 2005-07-10 13:34:07
Expiry Date.......... 2006-07-10 13:34:07
Organisation Name.... Liangding ZHOU
Organisation Address. 610 South Hubin Road
Organisation Address.
Organisation Address. Xiamen
Organisation Address. 361004
Organisation Address. FJ
Organisation Address. CN

Admin Name........... Liangding ZHOU
Admin Address........ 610 South Hubin Road
Admin Address........
Admin Address........ Xiamen
Admin Address........ 361004
Admin Address........ FJ
Admin Address........ CN
Admin Email.......... wtv8...@hotmail.com
Admin Phone.......... +86.5925193328
Admin Fax............ +86.5925193328

Tech Name............ Liangding ZHOU
Tech Address......... 610 South Hubin Road
Tech Address.........
Tech Address......... Xiamen
Tech Address......... 361004
Tech Address......... FJ
Tech Address......... CN
Tech Email........... wtv8...@hotmail.com
Tech Phone........... +86.5925193328
Tech Fax............. +86.5925193328

Bill Name............ Liangding ZHOU
Bill Address......... 610 South Hubin Road
Bill Address.........
Bill Address......... Xiamen
Bill Address......... 361004
Bill Address......... FJ
Bill Address......... CN
Bill Email........... wtv8...@hotmail.com
Bill Phone........... +86.5925193328
Bill Fax............. +86.5925193328
Name Server.......... ns2.variousrevitalization.com
Name Server.......... ns1.variousrevitalization.com

More variousrevitalization.com sightings:
http://groups.google.com/groups?q=variousrevitalization.com+group%3A*abuse

>From Web:
http://onlinepharmacy.offamilyniceweb.com/contactus.php
Email: ques...@instant-pharmacy.net

See:
instant-pharmacy.net IP 211.172.244.169
(OLD IP 201.49.143.104, 211.93.72.96)

ns1.instant-pharmacy.net A IN 172800 211.172.244.169
ns2.instant-pharmacy.net A IN 172800 201.49.143.104

[instant-pharmacy.net has 1 MX record mail.instant-pharmacy.net (10)]

http://www.moensted.dk/spam/?addr=211.172.244.169

OLD Listing:
http://www.moensted.dk/spam/?addr=201.49.143.104

http://www.spamhaus.org/SBL/sbl.lasso?query=SBL34829
201.49.143.0/24 is listed on the Spamhaus Block List (SBL)

27-Nov-2005 06:49 GMT | SR14

qwaszx.com.br spamhaus - breaktheglassnow.com

6 SBL listings for IPs under the responsibility of easytone.com.br
http://www.spamhaus.org/SBL/listings.lasso?isp=easytone.com.br

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/f3bac89bdf4606f1

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages