Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [drugs - ED Med Chest] (peepholehh.com - redamagedg.com) SAVE 82%: VIAGR*, AMBIE*, CIALI*, XANA*, RIVOTRI*, LEVITR*, CIPRO, MERIDI*, CELEBRE*, VALIU* again

0 views
Skip to first unread message

TomezNet

unread,
May 22, 2006, 1:02:43 PM5/22/06
to
Received From:
IP 68.189.104.175 68-189-104-175.dhcp.wtvl.ca.charter.com

Spamvert:
e42M15JjKbJO1EEpJEE7JWEw.PeEPHolEhh.coM IP 218.62.89.39
(OLD IP 222.170.97.137)
(ROK4932 - SBL42114) (now at cncgroup-jl)

st.redamagedg.com IP 211.156.244.2 (OLD IP 59.191.125.254)
we.redamagedg.com IP 218.62.89.39 (OLD IP 222.51.91.98)

More ED Med Chest Online sightings:
http://groups.google.com/groups/search?q=%22ED+Med%22+group%3A*abuse&start=0&scoring=d&

More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.49.57; Thu, 18 May 2006
15:39:58 -0700
X-YahooFilteredBulk: 68.189.104.175
Return-Path: <vyj5...@jps.net>
Authentication-Results: mta312.mail.mud.yahoo.com from=jps.net;
domainkeys=fail (bad syntax)
Received: from 68.189.104.175 (HELO
68-189-104-175.dhcp.wtvl.ca.charter.com) (68.189.104.175) by
mta312.mail.mud.yahoo.com with SMTP; Thu, 18 May 2006 15:39:58 -0700
Received: from [192.168.1.1] ([68.189.104.175]) by blazenet.net
(Sendmail 8.7.4) with ESMTP (SSL) id IYT97622 for <xx..xx@xx..xx.com>;
Thu, 18 May 2006 17:39:53 -0600
Message-ID: <380b294i...@blazenet.net>
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=young.again;
d=blazenet.net;
b=RlZOFFnlH64YTaFO2PE79chRohe3MjVu3xQzMzQKI5qxFqaFnP5hgCtOsKyN6HMXezP5L4ewVl9cbLwR;
Date: Thu, 18 May 2006 17:39:53 -0600
From: "Clarence Ruthie" <vyj5...@jps.net>
User-Agent: Mozilla Thunderbird 1.5 (Windows/20060111)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: xx..xx@xx..xx.com
Subject: SAVE 82%: VIAGR*, AMBIE*, CIALI*, XANA*, RIVOTRI*, LEVITR*,
CIPRO, MERIDI*, CELEBRE*, VALIU* again
Content-Type: multipart/related;
boundary="------------76261236==.MRA"
Content-Length: 954

---------------------------------
edge leader supposedto added?Quality Meds Selling At Cheeap
We dont keep ur record (not even your name)
You just pay & we ship, No Question form to fill
We ship to all countries
Viagr*, Ambie*, Ciali*, Xana*, Rivotri*, Levitr*, Cipro, Meridi*,
Celebre*, Valiu*, Zoloft & Many More Meds commit
bought C11ck Here for Huge Saving fascinate
thats explain fly fascinate. goes different pride, anything parents
taught respect.
supposedto fire anything she next how. black mentioned a leader. bought
benefit supposedto light principle why.
sugar taught thus miserable.
latter steps the here miserable appearance, letters pride thats.
why reading appearance make back. corner force studied or principle
the. studied turning added pride reply social,
reply rich human beautiful?

<html><head>
<meta http-equiv="Content-Type" content="text; charset=iso-8859-1">
</head>
<body>
<font color=FFA4D1 size=1>edge leader supposedto added?</font>
<table border=10 cellspacing=0 cellpadding=3 width=520
bordercolor=CDFF59>
<tr><td bgcolor=ffffff bordercolor=000000><center>
<font size=2 face=arial color=CC0000>
<font size=4 color=000000><b>Quality Meds Selling At Cheeap<br><font
color=EA0000>We dont keep ur record (not even your
name)</font><br><font color=AEAE00>You just pay & we ship, No Question
form to fill</font><br><font color=FF5EAE>We ship to all
countries</b></center></font></font><br><font color=000000
size=2>Viagr*, Ambie*, Ciali*, Xana*, Rivotri*, Levitr*, Cipro,
Meridi*, Celebre*, Valiu*, Zoloft & Many More Meds commit<br><center>
<a href=http://e42M15JjKbJO1EEpJEE7JWEw.PeEPHolEhh.coM
target=_blank><font size=4 color=5E5EFF><u>bought <b>C11ck Here for
Huge Saving</b>
fascinate</font></u></a></font></center><br></td></tr></table><font
color=FFA4D1 size=1>thats explain fly fascinate. goes different pride,
anything parents taught respect.<br>
supposedto fire anything she next how. black mentioned a leader. bought
benefit supposedto light principle why.<br>
sugar taught thus miserable.<br>
latter steps the here miserable appearance, letters pride thats.<br>
why reading appearance make back. corner force studied or principle
the. studied turning added pride reply social,<br>
reply rich human beautiful?<br></font>
</body></html>

-- END OF SPAM --

See:
IP 68.189.104.175 68-189-104-175.dhcp.wtvl.ca.charter.com

http://www.moensted.dk/spam/?addr=68.189.104.175
http://www.spamhaus.org/query/bl?ip=68.189.104.175
http://cbl.abuseat.org/lookup.cgi?ip=68.189.104.175

Charter Communications CHARTER-NET-7BLK (NET-68-184-0-0-1)
68.184.0.0 - 68.191.255.255
Charter Communications SAC-CA-68-189-96 (NET-68-189-96-0-1)
68.189.96.0 - 68.189.127.255

route: 68.189.96.0/19
descr: Residential Cable Aggregates, NorthWest
origin: AS22291
notify: b...@pdx.net

ASN: 22291
ASN Name: CHARTER-LA
http://www.cidr-report.org/cgi-bin/as-report?as=22291

22 SBL/ROKSO listings for IPs under the responsibility of charter.com
http://www.spamhaus.org/sbl/listings.lasso?isp=charter.com

See:
e42M15JjKbJO1EEpJEE7JWEw.PeEPHolEhh.coM IP 218.62.89.39
(OLD IP 222.170.97.137)
st.redamagedg.com A IN 3600 211.156.244.2 (OLD IP 59.191.125.254)
we.redamagedg.com A IN 3600 218.62.89.39 (OLD IP 222.51.91.98)

e42M15JjKbJO1EEpJEE7JWEw.PeEPHolEhh.coM has no MX records ->
PeEPHolEhh.coM has no MX records

http://www.moensted.dk/spam/?addr=218.62.89.39
http://www.spamhaus.org/query/bl?ip=218.62.89.39

More 218.62.89.39 sightings:
http://groups.google.com/groups/search?q=218.62.89.39+group%3A*abuse&start=0&scoring=d&

inetnum: 218.62.0.0 - 218.62.127.255
netname: CNCGROUP-JL
country: CN

route: 218.62.0.0/17
descr: CNC Group CHINA169 Jilin Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
http://www.cidr-report.org/cgi-bin/as-report?as=4837

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42114
218.62.89.39/32 is listed on the Spamhaus Block List (SBL/ROKSO)

20-May-2006 21:47 GMT | SR23

Leo Kuvayev / BadCow
nigrouskg.com et al

Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow

http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932

5 SBL/ROKSO listings for IPs under the responsibility of cncgroup-jl
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-jl

More peepholehh.com sightings:
http://groups.google.com/groups/search?q=peepholehh.com+group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/613527e093aba7ae

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages