[email] [drugs - Canadian Pharmacy botnet] [218.175.222.163] (topfinal.hk / chitionkdetunlionpsa.com / fionkunjerunhedase.com / gedsactunjerion.com / piotiongandesunkdes.com) Make significant savings buying medications in Canada.
TomezNet
IP 218.175.222.163 218-175-222-163.dynamic.hinet.net
www.topfinal.hk botnet
www.topfinal.hk Resolved to 24.127.212.143 to 58.151.98.15 to
59.188.135.248 to 61.15.9.165 to 64.228.136.188 to 67.149.216.193 to
68.124.60.251 to 69.136.80.156 to 75.1.21.149 to 81.226.63.252 to
85.93.105.115 to 147.251.55.100 to 148.160.183.213 to 203.168.173.57
to 203.203.35.55 to 218.190.239.123 to 218.255.229.89 to
221.124.239.60 to 221.125.184.100 to 221.127.110.84
Title => Canadian Pharmacy
Š Copyright Canadian Pharmacy, 2003-2007. All Rights Reserved.
Much More Canadian Pharmacy sightings:
http://groups.google.com/groups/search?q=%22Canadian+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
Plenty of Forged Certificates and logos as always.
(VeriSign, Approved by ADA, CIDA, PharmaChecker, etc...)
Much More info below:
====================
Return-Path: <co...@coupeville.net>
Delivered-To: [MUNGED]
Received: (qmail 9518 invoked from network); 8 Jun 2007 02:32:47 -0400
Received: from 218-175-222-163.dynamic.hinet.net (HELO philly)
(218.175.222.163)
by [MUNGED] with SMTP; 8 Jun 2007 02:32:47 -0400
Return-Path: <co...@coupeville.net>
Received: from 207.115.64.103 (HELO mailmx.isomedia.com)
by [MUNGED] with (8.10.7/8.54.1) ESMTP id icmf2wo8g2g8h1
for [MUNGED]; Fri, 8 Jun 2007 06:21:52 -0480
Received: from 4ajzm7.dmpop.echomail.com ([140.206.105.17])
by 9h9.dmpop.echomail.com (7.13.7.2006908/0.19.5) with ESMTP id
g7Q96t5el249187
for [MUNGED]; Fri, 8 Jun 2007 06:21:52 -0480
From: "Karyann Smith" <co...@coupeville.net>
To: <[MUNGED]>
Subject: Make significant savings buying medications in Canada.
Date: Fri, 8 Jun 2007 06:21:52 -0480
Message-ID: <01c7a995$4dd5b1a0$6c822ecf@cori>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C7A9D8.5BF8F1A0"
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
Thread-Index: Aca6Q(275Z7O;'JEK8G)X037(-94AG==
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html;
charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
</head>
<body>
<body>
<p>
There's a lot of information online but people continue to ask us
whether they can trust online drugstores.
</p>
<p>
Everyone has heard about lower-cost drugs from abroad drugstore.
</p>
<p>
All the popular medications are available online. Great service,
quick shipping and complete security!
</p>
<a href=http://topfinal.hk><font size=+1 color=black><b>Go to
"Canadian Phamacy" store</b></font></a>
<p>
<b>http://topfinal.hk</b>
</p>
<p>
<b>Purchase meds with us and enjoy the life to the full.</b>
</p>
<p>
Karyann Smith
</p>
</body></html>
</body>
</html>
-- END OF SPAM --
WEB:
Licensed by The College of Pharmacists of British Columbia.
If you have any questions or concerns you can contact the college at
200-1765 West 8th Ave. Vancouver, BC, Canada V6J 5C6
You may contact us at +1(210) 787-1711, please, keep your order I.D.
every time you make a call.
See:
IP 218.175.222.163 218-175-222-163.dynamic.hinet.net
http://www.moensted.dk/spam/?addr=218.175.222.163
http://www.spamhaus.org/query/bl?ip=218.175.222.163
http://www.spamhaus.org/pbl/query/PBL109625
http://cbl.abuseat.org/lookup.cgi?ip=218.175.222.163
http://spamcop.net/w3m?action=checkblock&ip=218.175.222.163
Much More hinet.net sightings:
http://groups.google.com/groups/search?q=hinet.net+group%3A*abuse&start=0&scoring=d&
inetnum: 218.160.0.0 - 218.175.255.255
netname: HINET
descr: CHTD, Chunghwa Telecom Co.,Ltd.
e-mail: netwo...@hinet.net
e-mail: network...@hinet.net
abuse[]hinet.net is listed in rfc-ignorant.org database
route: 218.168.0.0/13
descr: (HiNet) Chunghwa Telecom Co., Ltd.
origin: AS3462
member-of: RS-COMM_NSFNET
mnt-by: MAINT-AS3462
changed: cyk...@ms1.hinet.net
Prefix: 218.175.0.0/16
Prefix Name: error
AS: 3462
AS Name: HiNet Chunghwa Telecom Co , Ltd Data Communication Business
Group (HiNet)
http://www.cidr-report.org/cgi-bin/as-report?as=3462
19 SBL listings for IPs under the responsibility of ttnet.net.tr
http://www.spamhaus.org/sbl/listings.lasso?isp=ttnet.net.tr
See:
topfinal.hk IP
NS0.FIONKUNJERUNHEDASE.COM [68.78.132.98 (NO GLUE)] [US]
NS0.PIOTIONGANDESUNKDES.COM [75.49.1.81 (NO GLUE)] [US]
NS0.CHITIONKDETUNLIONPSA.COM [66.61.89.1 (NO GLUE)] [US]
NS0.GEDSACTUNJERION.COM [222.111.193.43 (NO GLUE)] [KR]
topfinal.hk A Records
a 148.160.183.213(SE) host183-213.bornet.net
a 203.168.173.57(HK) cm203-168-173-57.hkcable.com.hk
a 218.190.239.123(HK)
a 218.252.72.87(HK) cm218-252-72-87.hkcable.com.hk
a 218.255.229.89(HK) cm218-255-229-89.hkcable.com.hk
a 221.124.239.60(HK)
a 221.125.184.100(HK)
a 221.127.110.84(HK)
a 58.151.98.15(KR)
a 59.188.135.248(HK)
a 61.15.9.165(HK) cm61-15-9-165.hkcable.com.hk
a 66.177.73.244(US) c-66-177-73-244.hsd1.fl.comcast.net
a 66.61.89.1(US) cpe-66-61-89-1.neo.res.rr.com
a 67.149.216.193(US) d149-67-193-216.col.wideopenwest.com
a 68.124.60.251(US) adsl-68-124-60-251.dsl.irvnca.pacbell.net
a 69.136.80.156(US) c-69-136-80-156.hsd1.nj.comcast.net
a 70.230.156.145(US) adsl-70-230-156-145.dsl.stlsmo.sbcglobal.net
a 77.182.59.178() essn-4db63bb2.pool.einsundeins.de
a 81.226.63.252(SE) h252n2fls308o1033.telia.com
a 85.93.105.115(CZ)
NS Records:
ns ns0.chitionkdetunlionpsa.com 76.104.139.174(US)
ns ns0.fionkunjerunhedase.com 208.120.41.135(US)
ns ns0.gedsactunjerion.com 69.229.238.218(US)
ns ns0.piotiongandesunkdes.com 24.238.187.40(US)
76.104.139.174 = c-76-104-139-174.hsd1.wa.comcast.net
208.120.41.135 = user-387gac7.cable.mindspring.com
69.229.238.218 = adsl-69-229-238-218.dsl.scrm01.pacbell.net
24.238.187.40 = user-0cetep8.cable.mindspring.com
www.topfinal.hk has no MX records -> topfinal.hk has no MX records
Let see whois:
Domain Name: TOPFINAL.HK
Contract Version: HKDNR latest version
Registrant Contact Information:
Holder English Name (It should be the same as your legal name on your
HKID card or other relevant documents): MR TOM SAMSSON
Holder Chinese Name:
Email: davida...@yahoo.com
Domain Name Commencement Date: 05-06-2007
Country: US
Expiry Date: 05-06-2008
Re-registration Status: Complete
Name of Registrar: HKDNR
Account Name: HK1905708T
Technical Contact:
First name: TOM
Last name: SAMSSON
Company Name: TOM SAMSSON
Name Servers Information:
NS0.FIONKUNJERUNHEDASE.COM
NS0.GEDSACTUNJERION.COM
NS0.PIOTIONGANDESUNKDES.COM
NS0.CHITIONKDETUNLIONPSA.COM
More topfinal.hk sightings:
http://groups.google.com/groups/search?q=topfinal.hk+group%3A*abuse&qt_s=Search
See:
ns0.chitionkdetunlionpsa.com IP 76.104.139.174 (OLD IP 89.212.163.153)
NS0.CHITIONKDETUNLIONPSA.COM has no MX records ->
CHITIONKDETUNLIONPSA.COM has no MX records
http://www.moensted.dk/spam/?addr=89.212.163.153
76.104.139.174 = c-76-104-139-174.hsd1.wa.comcast.net
More CHITIONKDETUNLIONPSA.COM sightings:
http://groups.google.com/groups/search?q=CHITIONKDETUNLIONPSA.COM+group%3A*abuse&start=0&scoring=d&
See:
ns0.fionkunjerunhedase.com IP 208.120.41.135 (OLD IP 165.230.94.99)
NS0.FIONKUNJERUNHEDASE.COM has no MX records -> FIONKUNJERUNHEDASE.COM
has no MX records
http://www.moensted.dk/spam/?addr=208.120.41.135
208.120.41.135 = user-387gac7.cable.mindspring.com
More FIONKUNJERUNHEDASE.COM sightings:
http://groups.google.com/groups/search?q=FIONKUNJERUNHEDASE.COM+group%3A*abuse&start=0&scoring=d&
See:
ns0.gedsactunjerion.com IP 69.229.238.218 (OLD IP 70.52.60.13)
NS0.GEDSACTUNJERION.COM has no MX records -> GEDSACTUNJERION.COM has
no MX records
http://www.moensted.dk/spam/?addr=69.229.238.218
69.229.238.218 = adsl-69-229-238-218.dsl.scrm01.pacbell.net
More GEDSACTUNJERION.COM sightings:
http://groups.google.com/groups/search?q=GEDSACTUNJERION.COM+group%3A*abuse&start=0&scoring=d&
See:
ns0.piotiongandesunkdes.com IP 24.238.187.40 ( OLD IP 65.34.221.18)
NS0.PIOTIONGANDESUNKDES.COM has no MX records ->
PIOTIONGANDESUNKDES.COM has no MX records
http://www.moensted.dk/spam/?addr=24.238.187.40
24.238.187.40 = user-0cetep8.cable.mindspring.com
More PIOTIONGANDESUNKDES.COM sightings:
http://groups.google.com/groups/search?q=PIOTIONGANDESUNKDES.COM+group%3A*abuse&start=0&scoring=d&
Read More:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/59ef0f3613385af9
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: