Spamver:
uzerx.com IP 58.83.0.6
(SBL43899 and SBL47590 - ROK4932) (at cncgroup-gd / APNIC)
Web:
©2005-2006 Toronto Pharmacy.com
Much More Toronto Pharmacy sightings:
http://groups-beta.google.com/groups/search?q=%22Toronto+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: [MUNGED] via 69.147.75.80; Mon, 23 Oct 2006 14:55:05
-0700
X-YahooFilteredBulk: 121.134.32.13
X-Originating-IP: [121.134.32.13]
Return-Path: <da...@leestradingcompany.com>
Authentication-Results: mta192.mail.re4.yahoo.com
from=leestradingcompany.com; domainkeys=neutral (no sig)
Received: from 121.134.32.13 (HELO localhost) (121.134.32.13) by
mta192.mail.re4.yahoo.com with SMTP; Mon, 23 Oct 2006 14:55:04 -0700
Message-ID: <000001c6f6ed$9094f100$0100007f@localhost>
From: "Esteban Cooper" <da...@leestradingcompany.com>
To: [MUNGED]
Subject: Just save a pot of money
Date: Tue, 24 Oct 2006 06:54:57 +0900
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0001_01C6F6ED.9094F100"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3416
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
Content-Length: 16873
<div id=yiv1352579742><html>
<head>
<xmetaHTTP-EQUIV="Content-Type">
<xmeta>
<style>
<!--
#message #yiv1352579742
/* Style Definitions */
p.MsoNormal,#message #yiv1352579742 li.MsoNormal,#message
#yiv1352579742 div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
#message #yiv1352579742 a:link,#message #yiv1352579742
span.MsoHyperlink
{color:blue;
text-decoration:underline;}
#message #yiv1352579742 a:visited,#message #yiv1352579742
span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
#message #yiv1352579742 span.EmailStyle17
{font-family:Arial;
color:windowtext;}
#message _filtered #yiv1352579742 {
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
#message #yiv1352579742 div.Section1
{}
-->
</style>
</head>
<xbodylang=RU link=blue vlink=purple>
<a target="_blank" rel="nofollow" _ href="http://uzerx.com/" ><img
src="http://attach.re3.mail.yahoo.com/us.f624.mail.yahoo.com/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=3472_3775149_79337_1323_16873_0_17289_26775_149409602&bodyPart=2&YY=29048&order=down&sort=date&pos=0&view=a&head=f&Idx=8"
border="0"></a>
<textarea style="visibility:hidden;">Stan Planton</textarea>
<textarea style="visibility:hidden;">for being my</textarea>
<textarea style="visibility:hidden;">number one</textarea>
<textarea style="visibility:hidden;">source of information</textarea>
<textarea style="visibility:hidden;">on countless topics</textarea>
<textarea style="visibility:hidden;">head librarian</textarea>
<textarea style="visibility:hidden;">Ohio University</textarea>
<textarea style="visibility:hidden;">and the Vatican
Observatory</textarea>
<textarea style="visibility:hidden;">Thanks also </textarea>
<textarea style="visibility:hidden;">to CERN</textarea>
<textarea style="visibility:hidden;">Henry Beckett</textarea>
<textarea style="visibility:hidden;">Brett Trotter</textarea>
<textarea style="visibility:hidden;">the Pontifical Academy</textarea>
<textarea style="visibility:hidden;">of Science</textarea>
<textarea style="visibility:hidden;">Brookhaven Institute</textarea>
<textarea style="visibility:hidden;">FermiLab Library</textarea>
<textarea style="visibility:hidden;">Olga Wieser</textarea>
<textarea style="visibility:hidden;">Don Ulsch</textarea>
<textarea style="visibility:hidden;">of the National</textarea>
<textarea style="visibility:hidden;">Security Institute</textarea>
<textarea style="visibility:hidden;">Caroline H. Thompson</textarea>
<textarea style="visibility:hidden;">at University of Wales</textarea>
<textarea style="visibility:hidden;">Kathryn Gerhard</textarea>
<textarea style="visibility:hidden;">Omar Al Kindi</textarea>
<textarea style="visibility:hidden;">Federation of American
Scientists</textarea>
<textarea style="visibility:hidden;">upside down</textarea>
<textarea style="visibility:hidden;">In slow motion</textarea>
<textarea style="visibility:hidden;">afraid of what</textarea>
<textarea style="visibility:hidden;">he was about</textarea>
<textarea style="visibility:hidden;">to witness, Langdon</textarea>
<textarea style="visibility:hidden;">rotated the fax</textarea>
<textarea style="visibility:hidden;">180 degrees. He</textarea>
<textarea style="visibility:hidden;">looked at the word</textarea>
<textarea style="visibility:hidden;"> light a long time</textarea>
<textarea style="visibility:hidden;">Stunned, Langdon </textarea>
<textarea style="visibility:hidden;">collapsed in a chair</textarea>
<textarea style="visibility:hidden;">He sat a moment in</textarea>
<textarea style="visibility:hidden;">utter bewilderment</textarea>
<textarea style="visibility:hidden;">Gradually, his eyes</textarea>
<textarea style="visibility:hidden;">were drawn to the</textarea>
<textarea style="visibility:hidden;">blinking red light</textarea>
<textarea style="visibility:hidden;">on his fax machine</textarea>
<textarea style="visibility:hidden;">Whoever had sent this</textarea>
<textarea style="visibility:hidden;">fax was still on the</textarea>
<textarea style="visibility:hidden;">line waiting</textarea>
<textarea style="visibility:hidden;">to talk. Langdon</textarea>
<textarea style="visibility:hidden;">gazed at the blinking</textarea>
<textarea style="visibility:hidden;">He felt like a
paleontologist</textarea>
<textarea style="visibility:hidden;">Langdon's eyes</textarea>
<textarea style="visibility:hidden;">were locked on</textarea>
<textarea style="visibility:hidden;">the brand. Illuminati</textarea>
<textarea style="visibility:hidden;">he read over and over</textarea>
<textarea style="visibility:hidden;">His work had always</textarea>
<textarea style="visibility:hidden;">been based on the</textarea>
<textarea style="visibility:hidden;">symbolic equivalent</textarea>
<textarea style="visibility:hidden;">of fossils</textarea>
<textarea style="visibility:hidden;">documents and historical
</textarea>
<textarea style="visibility:hidden;"></textarea>
<textarea style="visibility:hidden;">hearsay but this image </textarea>
<textarea style="visibility:hidden;">before him was</textarea>
<textarea style="visibility:hidden;">today. Present tense</textarea>
<xbody>
</html>
</div>
-- END OF SPAM --
All forged logos, certificaties and images are provided from and only
within website
domain.
See:
IP 121.134.32.13
http://www.moensted.dk/spam/?addr=121.134.32.13
http://cbl.abuseat.org/lookup.cgi?ip=121.134.32.13
http://www.spamhaus.org/query/bl?ip=121.134.32.13
http://spamcop.net/w3m?action=checkblock&ip=121.134.32.13
http://korea.services.net/blocked.phtml?addr=121.134.32.13
More KORNET sightings:
http://groups-beta.google.com/groups/search?q=KORNET+group%3A*abuse&start=0&scoring=d&
inetnum: 121.128.0.0 - 121.159.255.255
netname: KORNET
descr: Korea Telecom
descr: Network Management Center
country: KR
e-mail: i...@krnic.kornet.net
changed: hostm...@nic.or.kr
route: 121.128.0.0/11
descr: KORNET
origin: AS4766
mnt-by: MAINT-AS4766
changed: odd...@kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 121.128.0.0 to 121.159.255.25
http://www.cidr-report.org/cgi-bin/as-report?as=4766
17 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
See:
uzerx.com IP 58.83.0.6
ns1.moisharx.com [58.83.0.6] [TTL=172800] [CN]
ns2.moisharx.com [58.83.0.6] [TTL=172800] [CN]
http://www.moensted.dk/spam/?addr=58.83.0.6
http://www.spamhaus.org/query/bl?ip=58.83.0.6
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43899
58.83.0.0/22 is listed on the Spamhaus Block List (SBL)
22-Oct-2006 13:17 GMT | SR15
Yongzhou City Guangzhiyuan Technology Development Co., LTD
20 SBL/ROKSO listings for IPs under the responsibility of APNIC
http://www.spamhaus.org/sbl/listings.lasso?isp=APNIC
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL47590
58.83.0.6/32 is listed on the Spamhaus Block List (SBL/ROKSO)
25-Oct-2006 23:14 GMT | SR02
Leo Kuvayev / BadCow => ROK4932
"Toronto Pharmacy"
6 SBL/ROKSO listings for IPs under the responsibility of cncgroup-gd
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gd
More 58.83.0.6 sightings:
http://groups-beta.google.com/groups/search?q=58.83.0.6+group%3A*abuse&start=0&scoring=d&
inetnum: 58.83.0.0 - 58.83.3.255
netname: yzgzynetwork---cn
descr: Yongzhou City Guangzhiyuan Technology Development Co.,
LTD
descr: Room 201, Hedong Businesstown, Lengshuitan, Yongzhou
City, Hunan Province, China.
country: CN
mnt-routes: MAINT-CNCGROUP-RR
changed: w...@chinanetlink.com
nic-hdl: HW542-AP
e-mail: c...@86ad.com
changed: bluesky...@163.com
notify: c...@86ad.com
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street
Country IP Range: 58.82.0.0 to 58.83.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Domain name: UZERX.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: TOTALNIC-128733 (XSALSA[]GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (XSA...@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.MOISHARX.COM
Name Server: NS2.MOISHARX.COM
Domain creaton date: 2006-10-19 15:50:25.0
Domain expiration date: 2007-10-19 21:11:26.0
Much More Registrant sightings:
http://groups-beta.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&
See:
ns1.moisharx.com IP 58.83.0.6
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Domain name: MOISHARX.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: TOTALNIC-128733 (XSALSA[]GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (XSA...@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.MOISHARX.COM
Name Server: NS2.MOISHARX.COM
Domain creaton date: 2006-05-17 21:57:33.0
Domain expiration date: 2007-05-17 22:30:21.0
More moisharx.com sightings:
http://groups-beta.google.com/groups/search?q=moisharx.com+group%3A*abuse&qt_s=Search
Read more:
http://groups-beta.google.com/group/news.admin.net-abuse.sightings/msg/60fc54283c7e26b4
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: