[email] [drugs - Canadian Pharmacy botnet] [68.150.133.67] (lifequiet.com / gedsactunjerion.com / piotiongandesunkdes.com / chitionkdetunlionpsa.com / fionkunjerunhedase.com) Men's pills at superior prices...
TomezNet
IP 68.150.133.67 s0106000f1f73ce51.ed.shawcable.net
(at shaw.ca / sjrb.ca)
Spamvert botnet:
lifequiet.com => botnet
lifequiet.com Resolved to 77.192.215.227 to 82.82.87.10 to
84.160.244.209 to 89.109.45.207 to 99.244.252.132 to 122.123.159.243
to 122.126.89.29 to 203.186.31.188 to 210.6.132.179 to 213.250.13.232
to 218.175.239.23 to 218.253.152.67 to 218.255.78.116 to
221.126.247.80 to 222.167.199.80
Title: Canadian Pharmacy
WEB:
Š Copyright Canadian Pharmacy, 2003-2007. All Rights Reserved.
Much More Canadian Pharmacy sightings:
http://groups.google.com/groups/search?q=%22Canadian+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
See sender identity and headers forgery by spammer.
Plenty of Forged Certificates and logos as always.
Much More info below:
====================
X-SID-PRA: #1 Canadian online Pharmacy <JarrodF...@ranmamail.com>
X-Message-Info:
txF49lGdW40p46CnM7/6ApyQSag5gjFau2vtK28C2SHsWLOWLQ3M2yWBySU4OKhv
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by bay0-
pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 10 Jul 2007 17:20:21 -0700
Received: from [MUNGED]
by toip24.srvr.bell.ca with ESMTP; 10 Jul 2007 20:20:18 -0400
Received: (qmail 13912 invoked by uid 110); 10 Jul 2007 20:20:18 -0400
Delivered-To: [MUNGED]
Received: (qmail 13827 invoked from network); 10 Jul 2007 20:20:17
-0400
Received: from s0106000f1f73ce51.ed.shawcable.net (68.150.133.67)
by [MUNGED] with SMTP; 10 Jul 2007 20:20:17 -0400
Date: Tue, 10 Jul 2007 20:19:56 -0500
From: "#1 Canadian online Pharmacy" <JarrodF...@ranmamail.com>
Message-ID: <10115.severe@locomotor>
To: [MUNGED]
Subject: Men's pills at superior prices...
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Return-Path: Jared...@wildmail.com
X-OriginalArrivalTime: 11 Jul 2007 00:20:22.0046 (UTC)
FILETIME=[44FBABE0:01C7C351]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML>
<HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<body bgcolor="FFFFCC" text="003399">
<div align="justify">
<u><b>Canadian online Pharmacy co. can bring you quality Generic Drugs
</b></u><br>
Vi@gra and Ci@lis Soft Tabs is the new impotence treatment drug that
everyone is talking about. <br>
It has benefits over Vi...ra and other ED treatment solutions. Here
goes some reason to choose Soft Tabs:<br><br>
<ul>
<li>You can mix alcohol drinks with Soft Tabs without any undesired
effects</li>
Click here <a href="http://lifequiet.com">http://lifequiet.com</
a><br>
<li>Via..ra and Ciali_s Soft Tabs does not make you feel dizzy or
make vision blurred, <br>
so you can easily drive a car or operate heavy machinery.</li>
<li>Viagr_a and Cial_is softtabs works much faster than any known ED
treatment solution. <br>
SoftTabs enter the bloodstream directly instead of going through the
stomach, <br>
thus you need only 15 minutes till you feel the effect. <br>
Just look at the graph below, red line represents Soft Tab efficacy
(in percent) during first 75 minutes,<br>
and green line represents Pfizer V_i_agra. You can see that Soft
Tabs begins to act much faster.</li>
<li>And at last, but not least, Soft Tabs acts up to 36 hours,
compare this to only two or three hours of V_ia_gra action!</li>
</ul>
Click here <a href="http://lifequiet.com">http://lifequiet.com</a><br>
Win the lady's favor with Soft Vi@gra
Make your own sex timetable with Super Vi..gra.<br>
Soft Vi..@gra will save you from se_xual death.
</div>
</body>
</html>
-- END OF SPAM --
See:
IP 68.150.133.67 s0106000f1f73ce51.ed.shawcable.net
http://www.moensted.dk/spam/?addr=68.150.133.67
http://www.spamhaus.org/query/bl?ip=68.150.133.67
http://www.spamhaus.org/pbl/query/PBL131791
http://www.apews.org/?page=test&C=130&E=231279&ip=68.150.133.67
Much More shawcable.net sightings:
http://groups.google.com/groups/search?q=shawcable.net+group%3A*abuse&start=0&scoring=d&
OrgName: Shaw Communications Inc.
OrgID: SHAWC
NetRange: 68.144.0.0 - 68.151.255.255
CIDR: 68.144.0.0/13
NetName: SHAW-COMM
NetHandle: NET-68-144-0-0-1
Parent: NET-68-0-0-0-0
NetType: Direct Allocation
bogusmx[]speedy.net.pe is listed in rfc-ignorant.org database
postmaster and abuse[]TELEFONICA.NET.PE are listed in rfc-ignorant.org
database
route: 68.148.0.0/14
descr: SHAWC
Shaw Communications Inc.
origin: AS6327
notify: ipa...@sjrb.ca
notify: ipadmin...@bigpipeinc.com
mnt-by: MAINT-AS6327
Prefix: 68.148.0.0/14
Prefix Name: SHAWC Shaw Communications Inc
AS: 6327
AS Name: ASN SHAW Shaw Big Pipe IP Backbone Network
http://www.cidr-report.org/cgi-bin/as-report?as=6327
4 SBL/ROKSO listings for IPs under the responsibility of shawcable.net
http://www.spamhaus.org/sbl/listings.lasso?isp=shawcable.net
See:
lifequiet.com => botnet
lifequiet.com Resolved to 77.192.215.227 to 82.82.87.10 to
84.160.244.209 to 89.109.45.207 to 99.244.252.132 to 122.123.159.243
to 122.126.89.29 to 203.186.31.188 to 210.6.132.179 to 213.250.13.232
to 218.175.239.23 to 218.253.152.67 to 218.255.78.116 to
221.126.247.80 to 222.167.199.80
ns0.gedsactunjerion.com [84.95.127.128] [TTL=172800] [IL]
ns0.piotiongandesunkdes.com [88.72.225.123] [TTL=172800] [DE]
SOA record [TTL=300] is:
Primary nameserver: ns0.piotiongandesunkdes.com
Hostmaster E-mail address:
Serial #: 0
lifequiet.com has no MX records
www.lifequiet.com A record is:
www.lifequiet.com A 221.126.247.80 [TTL=300] [HK]
www.lifequiet.com A 61.18.218.98 [TTL=300] [HK]
www.lifequiet.com A 76.104.9.196 [TTL=300] [US]
www.lifequiet.com A 77.192.215.227 [TTL=300] [FR]
www.lifequiet.com A 82.82.87.10 [TTL=300] [DE]
www.lifequiet.com A 84.160.244.209 [TTL=300] [DE]
www.lifequiet.com A 89.110.53.196 [TTL=300] [RU]
www.lifequiet.com A 122.123.139.185 [TTL=300] [TW]
www.lifequiet.com A 122.126.89.29 [TTL=300] [TW]
www.lifequiet.com A 203.186.31.188 [TTL=300] [HK]
www.lifequiet.com A 210.6.132.179 [TTL=300] [HK]
www.lifequiet.com A 213.250.13.232 [TTL=300] [SI]
www.lifequiet.com A 218.175.239.23 [TTL=300] [TW]
lifequiet.com A record is:
lifequiet.com A 221.126.247.80 [TTL=300]
lifequiet.com A 222.166.107.136 [TTL=300]
lifequiet.com A 61.18.218.98 [TTL=300]
lifequiet.com A 71.194.73.254 [TTL=300]
lifequiet.com A 74.160.98.140 [TTL=300]
lifequiet.com A 76.104.9.196 [TTL=300]
lifequiet.com A 77.192.215.227 [TTL=300]
lifequiet.com A 79.178.242.95 [TTL=300]
lifequiet.com A 82.131.44.26 [TTL=300]
lifequiet.com A 84.160.244.209 [TTL=300]
lifequiet.com A 122.126.89.29 [TTL=300]
lifequiet.com A 213.250.13.232 [TTL=300]
lifequiet.com A 218.175.239.23 [TTL=300]
a 122.123.139.185(AU) 122-123-139-185.dynamic.hinet.net
a 122.126.89.29(AU) 122-126-89-29.dynamic.hinet.net
a 203.186.31.188(HK) 203186031188.ctinets.com
a 210.6.132.179(HK) 210006132179.ctinets.com
a 213.250.13.232(SI) bsn-250-13-232.dial-up.dsl.siol.net
a 218.175.239.23(TW) 218-175-239-23.dynamic.hinet.net
a 218.253.152.67(HK) cm218-253-152-67.hkcable.com.hk
a 218.255.78.116(HK) cm218-255-78-116.hkcable.com.hk
a 221.126.247.80(HK)
a 61.18.218.98(HK) cm61-18-218-98.hkcable.com.hk
a 76.104.9.196(US) c-76-104-9-196.hsd1.va.comcast.net
a 77.192.215.227() 227.215.192-77.rev.gaoland.net
a 82.82.87.10(DE) dslc-082-082-087-010.pools.arcor-ip.net
a 84.160.244.209(DE) p54a0f4d1.dip.t-dialin.net
a 89.110.53.196(RU) pppoe-196.53.110.89-adsl.spbnit.ru
lifequiet.com
ns ns0.chitionkdetunlionpsa.com 76.104.139.174(US)
ns ns0.fionkunjerunhedase.com 208.120.41.135(US)
ns ns0.gedsactunjerion.com 69.229.238.218(US)
ns ns0.piotiongandesunkdes.com 122.123.129.211(AU) and
24.238.187.40(US)
76.104.139.174 = c-76-104-139-174.hsd1.wa.comcast.net
208.120.41.135 = user-387gac7.cable.mindspring.com
69.229.238.218 = adsl-69-229-238-218.dsl.scrm01.pacbell.net
122.123.129.211 = 122-123-129-211.dynamic.hinet.net
24.238.187.40 = user-0cetep8.cable.mindspring.com
9 hosts sharing ip
boardpattern.hk
directmedmass.com
levelside.hk
loudlow.com
malware.degreeinch.hk
rxcare.org
rxfast.org
stationweather.hk
www.whitecry.com
nameserver for 1 domains
containone.hk*
Let see whois.bizcn.com:
Domain name: lifequiet.com
Registrant Contact:
QuietLife inc.
Jim Radogna quiet[]lifequiet.com
9736255010 fax:
25 Bloomfield Ave
Denville NJ 07834
us
Administrative Contact:
Jim Radogna qu...@lifequiet.com
9736255010 fax:
25 Bloomfield Ave
Denville NJ 07834
us
Technical Contact:
Jim Radogna qu...@lifequiet.com
9736255010 fax:
25 Bloomfield Ave
Denville NJ 07834
us
Billing Contact:
Jim Radogna qu...@lifequiet.com
9736255010 fax:
25 Bloomfield Ave
Denville NJ 07834
us
DNS:
ns0.gedsactunjerion.com
ns0.piotiongandesunkdes.com
Created: 2007-07-06
Expires: 2008-07-06
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/ae0a8cc1a8b9e918
More lifequiet.com sightings:
http://groups.google.com/groups/search?q=lifequiet.com+group%3A*abuse&qt_s=Search
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: