[email] [drugs - Canadian Pharmacy botnet] [207.118.235.35] (topfinal.hk / chitionkdetunlionpsa.com / fionkunjerunhedase.com / gedsactunjerion.com / piotiongandesunkdes.com) Try CanadianPharmacy online service and you will not be disappointed.
TomezNet
IP 207.118.235.35 207-118-235-35.dyn.centurytel.net
www.topfinal.hk botnet
www.topfinal.hk Resolved to 24.127.212.143 to 58.151.98.15 to
59.188.135.248 to 61.15.9.165 to 64.228.136.188 to 67.149.216.193 to
68.124.60.251 to 69.136.80.156 to 75.1.21.149 to 81.226.63.252 to
85.93.105.115 to 147.251.55.100 to 148.160.183.213 to 203.168.173.57
to 203.203.35.55 to 218.190.239.123 to 218.255.229.89 to
221.124.239.60 to 221.125.184.100 to 221.127.110.84
Title => Canadian Pharmacy
© Copyright Canadian Pharmacy, 2003-2007. All Rights Reserved.
Much More Canadian Pharmacy sightings:
http://groups.google.com/groups/search?q=%22Canadian+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
Plenty of Forged Certificates and logos as always.
(VeriSign, Approved by ADA, CIDA, PharmaChecker, etc...)
Much More info below:
====================
Return-Path: <acco...@msn.com>
Delivered-To: [MUNGED]
X-Spam-Flag: YES
Received: (qmail 17729 invoked from network); 9 Jun 2007 00:07:21
-0400
Received: from 207-118-235-35.dyn.centurytel.net (207.118.235.35)
by [MUNGED] with SMTP; 9 Jun 2007 00:07:21 -0400
Return-Path: <acco...@msn.com>
Received: from 65.54.244.40 (HELO mx2.hotmail.com)
by [MUNGED] with (8.58.3/8.87.0) ESMTP id [MUNGED]
for [MUNGED]; Sat, 9 Jun 2007 04:07:23 +0300
Received: from 9tvorr.dmpop.echomail.com ([213.78.200.111])
by 5nt3.dmpop.echomail.com (7.42.5.20001302/9.13.8) with ESMTP id
h62T2n6j140480
for [MUNGED]; Sat, 9 Jun 2007 04:07:23 +0300
From: "Bashar Parker" <acco...@msn.com>
To: <[MUNGED]>
Subject: *****SPAM***** Try CanadianPharmacy online service and you
will not be disappointed.
Date: Sat, 9 Jun 2007 04:07:23 +0300
Message-ID: <01c7aa4b$aeff6230$6c822ecf@accogrady>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C7AA2A.27EDC230"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Thread-Index: Aca6Q)6T6U8,+2,A(K6@)M?65EQ(33==
X-Spam-Prev-Subject: Try CanadianPharmacy online service and you will
not be disappointed.
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html;
charset=Windows-1252">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
</head>
<body>
<body>
<p>
The difficulty is to find the reliable one. <a href=http://
topfinal.hk><b><font color=black>«CanadianPharmacy»</a></b></a> is an
experienced, trusted, and fully-licensed Canadian online drugstore.
</p>
<p>
We recommend purchasing with <a href=http://topfinal.hk><b><font
color=black>«CanadianPharmacy»</a></b></a>.
</p>
<p>
Large selection of medications which are 100% generic!
</p>
<a href=http://topfinal.hk><font size=+1 color=black><b>Go to
"Canadian Phamacy" store</b></font></a>
<p>
<b>http://topfinal.hk</b>
</p>
<p>
<b> Quality medications should be affordable for all!</b>
</p>
<p>
Bashar Parker
</p>
</body></html>
</body>
</html>
-- END OF SPAM --
WEB:
Licensed by The College of Pharmacists of British Columbia.
If you have any questions or concerns you can contact the college at
200-1765 West 8th Ave. Vancouver, BC, Canada V6J 5C6
You may contact us at +1(210) 787-1711, please, keep your order I.D.
every time you make a call.
See:
IP 207.118.235.35 207-118-235-35.dyn.centurytel.net
http://www.moensted.dk/spam/?addr=207.118.235.35
http://www.spamhaus.org/query/bl?ip=207.118.235.35
http://www.spamhaus.org/pbl/query/PBL109625
http://cbl.abuseat.org/lookup.cgi?ip=207.118.235.35
http://www.apews.org/?page=test&C=82&E=176514&ip=207.118.235.35
Much More centurytel.net sightings:
http://groups.google.com/groups/search?q=centurytel.net+group%3A*abuse&start=0&scoring=d&
OrgName: CenturyTel Internet Holdings, Inc.
OrgID: CIH-12
NetRange: 207.118.0.0 - 207.119.255.255
CIDR: 207.118.0.0/15
NetName: NETBLK-CENTURYTEL9
NetHandle: NET-207-118-0-0-1
Parent: NET-207-0-0-0-0
NetType: Direct Allocation
whois and abuse[]centurytel.net are listed in rfc-ignorant.org
database
route: 207.118.0.0/15
descr: CenturyTel
origin: AS5668
mnt-by: MAINT-CENTURYTEL
changed: net...@centurytel.net
http://www.cidr-report.org/cgi-bin/as-report?as=5668
10 SBL listings for IPs under the responsibility of centurytel.net
http://www.spamhaus.org/sbl/listings.lasso?isp=centurytel.net
See:
topfinal.hk => botnet
NS0.PIOTIONGANDESUNKDES.COM [61.93.185.122 (NO GLUE)] [HK]
NS0.GEDSACTUNJERION.COM [68.20.20.220 (NO GLUE)] [US]
NS0.FIONKUNJERUNHEDASE.COM [66.177.73.244 (NO GLUE)] [US]
NS0.CHITIONKDETUNLIONPSA.COM [59.16.110.54 (NO GLUE)] [KR]
NS records at nameservers are:
ns0.gedsactunjerion.com [68.20.20.220] [TTL=300]
ns0.fionkunjerunhedase.com [218.190.86.117] [TTL=300]
ns0.chitionkdetunlionpsa.com [203.168.173.57] [TTL=300]
ns0.piotiongandesunkdes.com [78.48.9.49] [TTL=300]
topfinal.hk A Records
a 148.160.183.213(SE) host183-213.bornet.net
a 203.168.173.57(HK) cm203-168-173-57.hkcable.com.hk
a 218.190.239.123(HK)
a 218.252.72.87(HK) cm218-252-72-87.hkcable.com.hk
a 218.255.229.89(HK) cm218-255-229-89.hkcable.com.hk
a 221.124.239.60(HK)
a 221.125.184.100(HK)
a 221.127.110.84(HK)
a 58.151.98.15(KR)
a 59.188.135.248(HK)
a 61.15.9.165(HK) cm61-15-9-165.hkcable.com.hk
a 66.177.73.244(US) c-66-177-73-244.hsd1.fl.comcast.net
a 66.61.89.1(US) cpe-66-61-89-1.neo.res.rr.com
a 67.149.216.193(US) d149-67-193-216.col.wideopenwest.com
a 68.124.60.251(US) adsl-68-124-60-251.dsl.irvnca.pacbell.net
a 69.136.80.156(US) c-69-136-80-156.hsd1.nj.comcast.net
a 70.230.156.145(US) adsl-70-230-156-145.dsl.stlsmo.sbcglobal.net
a 77.182.59.178() essn-4db63bb2.pool.einsundeins.de
a 81.226.63.252(SE) h252n2fls308o1033.telia.com
a 85.93.105.115(CZ)
NS Records:
ns ns0.chitionkdetunlionpsa.com 76.104.139.174(US)
ns ns0.fionkunjerunhedase.com 208.120.41.135(US)
ns ns0.gedsactunjerion.com 69.229.238.218(US)
ns ns0.piotiongandesunkdes.com 24.238.187.40(US)
76.104.139.174 = c-76-104-139-174.hsd1.wa.comcast.net
208.120.41.135 = user-387gac7.cable.mindspring.com
69.229.238.218 = adsl-69-229-238-218.dsl.scrm01.pacbell.net
24.238.187.40 = user-0cetep8.cable.mindspring.com
www.topfinal.hk has no MX records -> topfinal.hk has no MX records
More topfinal.hk sightings:
http://groups.google.com/groups/search?q=topfinal.hk+group%3A*abuse&qt_s=Search
SEE Also more NS sightings:
More CHITIONKDETUNLIONPSA.COM sightings:
http://groups.google.com/groups/search?q=CHITIONKDETUNLIONPSA.COM+group%3A*abuse&start=0&scoring=d&
More fionkunjerunhedase.com sightings:
http://groups.google.com/groups/search?q=fionkunjerunhedase.com+group%3A*abuse&start=0&scoring=d&
More gedsactunjerion.com sightings:
http://groups.google.com/groups/search?q=gedsactunjerion.com+group%3A*abuse&start=0&scoring=d&
More piotiongandesunkdes.com sightings:
http://groups.google.com/groups/search?q=piotiongandesunkdes.com+group%3A*abuse&start=0&scoring=d&
Read More:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/87001d4d87025c54
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/3ed4377d0510c573
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: