[email] [drugs - HealthSuite] (220.184.254.139) Premier
TomezNet
IP 220.184.254.139 139.254.184.220.broad.hz.zj.dynamic.cndata.com
(at ns.zjnbptt.net.cn / CHINANET-ZJ)
Spamvert:
overeattos.com IP 211.144.69.243
(SBL39667 / SBL42192 - ROK4932)
(at dns2.cableplus.com.cn / a.in-addr.cn / scn.com.cn)
More Premier Pharfmacy aka HealthSuite aka Medic Suite LTD. sightings
http://groups.google.com/groups?q=%22HealthSuite%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.175; Sun, 04 Jun 2006
08:55:03 -0700
X-YahooFilteredBulk: 220.184.254.139
X-Originating-IP: [220.184.254.139]
Return-Path: <sha...@gingerstamp.com>
Authentication-Results: mta245.mail.re2.yahoo.com
from=gingerstamp.com; domainkeys=neutral (no sig)
Received: from 207.228.2..... (EHLO xxx.web-hosting.com)
(207.228.2.....) by mta245.mail.re2.yahoo.com with SMTP; Sun, 04 Jun
2006 08:55:03 -0700
Received: from 146093232
(139.254.184.220.broad.hz.zj.dynamic.cndata.com [220.184.254.139]) by
xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id k54FssQ22873 for
<xx..xx@xx..xx.com>; Sun, 4 Jun 2006 11:54:56 -0400 (EDT)
Received: from gingerstamp.com (142748784 [140706216]) by
139.254.184.220.broad.hz.zj.dynamic.cndata.com (Qmailv1) with ESMTP id
36BD3E1CE8 for <xx..xx@xx..xx.com>; Sun, 04 Jun 2006 11:55:04 -0400
Date: Sun, 04 Jun 2006 11:55:04 -0400
From: "Mannered R. Memorializing" <sha...@gingerstamp.com>
X-Mailer: The Bat! (v2.00.3) Personal
X-Priority: 3
Message-ID: <9252857968.2...@gingerstamp.com>
To: "Webmaster" <xx..xx@xx..xx.com>
Subject: Premier
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------1A64F35845C9B89"
X-Virus-Scanned: by amavisd-milter (http://amavis.org/)
Content-Length: 872
<html> <xbody>
Man's Health<br>
Anti-Depressants<br>
Antibiotics<br>
Cholesterol<br>
Diabetes<br>
Diuretic<br>
Pain Relief<br>
Sexual Health<br>
Sleep Aids<br>
Weight Loss
<p>and more on <a target="_blank"
href="http://overeattos.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
>Premier Pharemacy</a></p>
<br> <br> <br> <br> <br> <br> ghfgdrtpu RldRWVRCRlZGdVJaVllBVFEdW0dW
</xbody> </html>
-- END OF SPAM --
More Premier Pharemacy sightings
http://groups.google.com/groups/search?q=%22Premier+Pharemacy%22+group%3A*abuse&start=0&scoring=d&
See:
IP 220.184.254.139 139.254.184.220.broad.hz.zj.dynamic.cndata.com
http://www.moensted.dk/spam/?addr=220.184.254.139
http://cbl.abuseat.org/lookup.cgi?ip=220.184.254.139
http://www.spamhaus.org/query/bl?ip=220.184.254.139
inetnum: 220.184.0.0 - 220.184.255.255
netname: CHINANET-ZJ-HZ
country: CN
descr: CHINANET-ZJ Hangzhou node network
descr: Zhejiang Telecom
route: 220.184.0.0/13
descr: China Telecom Zhejiang Province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 220.160.0.0 to 220.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
2 SBL/ROKSO listings for IPs under the responsibility of CHINANET-ZJ
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-ZJ
See:
overeattos.com IP 211.144.69.243
overeattos.com NS IN 300 ns0.sinacessi.com.
overeattos.com NS IN 300 ns0.thoumaybe.com
ns0.thoumaybe.com [211.144.69.243]
Primary DNS server: ns0.thoumaybe.com
Responsible Name: n...@sinacessi.com
http://www.moensted.dk/spam/?addr=211.144.69.243
[1] dns2you/zhousvr/name2you, see http://spews.org/html/S2319.html
http://www.spamhaus.org/query/bl?ip=211.144.69.243
211.144.69.243 PTR record: reserve.cableplus.com.cn
More 211.144.69.243 sightings:
http://groups.google.com/groups/search?q=211.144.69.243+group%3A*abuse&start=0&scoring=d&
inetnum: 211.144.69.1 - 211.144.69.255
netname: CHANGNING1POPNET
descr: Cable OnLine Network CHANGNING1POPNet
descr: Internet Service Provider shnet.edu.cn
descr: Shanghai China
country: CN
route: 211.144.64.0/19
descr: Asia Netcom (proxy-registered route object)
origin: AS9812
route: 211.144.64.0/20
descr: CHINA NETCOM
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
http://www.cidr-report.org/cgi-bin/as-report?as=9929
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39667
211.144.69.0/24 is listed on the Spamhaus Block List (SBL)
22-May-2006 00:00 GMT | SR02
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42192
211.144.69.243/32 is listed on the Spamhaus Block List (SBL/ROKSO)
22-May-2006 03:27 GMT | SR09
Leo Kuvayev / BadCow
Numerous pill domains.
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
5 SBL/ROKSO listings for IPs under the responsibility of asianetcom.net
http://www.spamhaus.org/sbl/listings.lasso?isp=asianetcom.net
16 SBL/ROKSO listings for IPs under the responsibility of scn.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=scn.com.cn
More thoumaybe.com sightings:
http://groups.google.com/groups/search?q=thoumaybe.com+group%3A*abuse&start=0&scoring=d&
Let see whois:
Registrar: NAMESBEYOND.COM DBA GOODLUCKDOMAIN.COM
Registrant:
n/a
Benjamin M Kasper
413 Yorkshire Ct
Deer Park, TX 77536
United States
Phone:+1.2814795227
Domain Name: overeattos.com
Created on.............: 2006-06-01 11:49:35
Expires on.............: 2007-06-01 11:49:35
Record last updated on..: 2006-06-02 08:05:54
Administrative Contact:
n/a
Benjamin M Kasper
413 Yorkshire Ct
Deer Park, TX 77536
United States
Phone: +1.2814795227
Email: ollandian[]yahoo.com
Technical Contact:
n/a
Benjamin M Kasper
413 Yorkshire Ct
Deer Park, TX 77536
United States
Phone: +1.2814795227
Email: olla...@yahoo.com
Billing Contact:
n/a
Benjamin M Kasper
413 Yorkshire Ct
Deer Park, TX 77536
United States
Phone: +1.2814795227
Email: olla...@yahoo.com
Domain servers in listed order:
ns0.thoumaybe.com 72.3.165.120
ns0.sinacessi.com 72.3.165.121
And More sinacessi.com sightings:
http://groups.google.com/groups/search?q=sinacessi.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/34d78c76ddac2b48
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: