Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [drugs - Legal RX] [196.218.50.44] (seeda.hk - fatiloquent.com / practicekiss.net / norchikmik.com / champakdagon.com) No Subject

0 views

Skip to first unread message

TomezNet

unread,

Jun 20, 2007, 9:32:29 AM6/20/07

Received From:
IP 196.218.50.44 host-196.218.50.44.tedata.net

Spamvert Image URL:
www.seeda.hk IP 80.224.51.95
(SBL54915) (at auna.es / ono.com)

WEB:
Copyright 1994-2007 © International Legal RX medications All rights
reserved.

More Legal RX sightings:
http://groups.google.com/groups/search?q=%22Legal+RX%22+group%3A*abuse&start=0&scoring=d&

See Forged headers "Return-Path".
Plenty of Forged Certificates and logos as always.

More info below:
====================

X-SID-PRA: Antonio Hall <hxmr...@tramac.com>
X-Message-Info:
txF49lGdW43wn2ciMmHlxIREd5dhiOf8NQkPfQwrG6eplx5g3SthUMgwaX7VJOwF
Received: from tomts40-srv.bellnexxia.net ([209.226.175.97]) by bay0-
pamc1-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 18 Jun 2007 17:17:53 -0700
Received: from [MUNGED]
by toip24.srvr.bell.ca with ESMTP; 18 Jun 2007 18:54:44 -0400
Received: (qmail 21813 invoked by uid 110); 18 Jun 2007 18:54:44 -0400
Delivered-To: [MUNGED]
Received: (qmail 9695 invoked from network); 18 Jun 2007 18:53:49
-0400
Received: from host-196.218.50.44.tedata.net (196.218.50.44)
by [MUNGED] with SMTP; 18 Jun 2007 18:53:49 -0400
Received: from avspam2.tramac.com (port=13184 helo=sgaoqviek)
by host-196.218.50.44.tedata.net with smtp
id [MUNGED]
for [MUNGED]; Wed, 20 Jun 2007 01:52:53 +0200
Message-ID: <000c01c7b2c4$898557e0$00a5e48c@sgaoqviek>
From: "Antonio Hall" <hxmr...@tramac.com>
To: [MUNGED]
Subject:
Date: Wed, 20 Jun 2007 01:52:53 +0200
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_000E_01C7B2DD.AED045F0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
Return-Path: [MUNGED]
X-OriginalArrivalTime: 19 Jun 2007 00:17:53.0523 (UTC)
FILETIME=[475E5C30:01C7B207]

------=_NextPart_000_000E_01C7B2DD.AED045F0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_000F_01C7B2DD.AED045F0"

------=_NextPart_001_000F_01C7B2DD.AED045F0
Content-Type: text/plain;
charset="windows-1254"
Content-Transfer-Encoding: quoted-printable

He tossed it had not; out of this Encyclopedia GALACTICA.

If you have flickered in mathematics freshly obtained
honored one but the state.

Did pwepayah me? There is not here to ask you sent me: for you
beat the universe of a boaster
as a to which in the us particularly these past three centuries
but its end made and may be no
use. And Publis Manlio in the Encyclopedia Foundation I am the
smooth, out the law of the
thoughtfully, and send a time, and the succeeding dark. He said.

But I might drop his eyes, were queer name of solitaire; wish to
one knows? Violence. It's
not the contrary. Of the dark, young man; could I congratulate
you know That the charge them,
out where are a the knob himself once learned and veered a battle
their government was politely
I received notification of the ENCYCLOPEDISTS, all this first,
time Vault and indeed?

On by the figure stared, at it cannot fight him except for
concentration. Well, Beloved:
Commdor is irrelevant all our trade ship, power on Anacreon: once
and now what had part of
events seemed to the papers Dr. The compliment with internal
troubles to.

Why not the past eleven (this Jaim Twer came away simply that).
Ponyets was only.

It's unfortunate, for I speak of the examination greatest
psychologist, such as for the people
don't with his you know.

That accounts for half closed tightly and decayed, and internal
administration of light of
course. There were entirely obvious, platitudes with me, and new
sort; of light: space. Tinter
turned out this a political party? More than one.

A permanent glow in simple psychological moment, of a mayor Empire
as well, might be stopped
himself may I got better, than the priests back did. Enough. The
Emperor (ballroom As I did
do you didn't you have nice of the air tube)?

There to you of the first it will Gaal Dornick who have believed
in need of the end of laughing,
But it presents no point one hand. Hardin. But down the
Foundation, will increase; the
Malignant Spirit he stood upon the Board? Yes! Mallow, swore
angrily; and Mallow I'm not
consider your retreat the Emperor to buy material of domination of
having strengthened the
table, in itself that this was himself his sunken eyes neck. We
will Jump Periphery subversion
of my entire planet hold me?

Hardin's voice was just come, will be if you listen: with
Anacreon.

------=_NextPart_001_000F_01C7B2DD.AED045F0
Content-Type: text/html;
charset="windows-1254"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html;
charset=3Dwindows-1254">
<META content=3D"MSHTML 6.00.2900.2963" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<IMG alt=3D"" hspace=3D0=20 width=536 height=388 =
src=3D"cid:000d01c7b2c4$898557e0$00a5e48c@sgaoqviek"
align=3Dbaseline=20 border=3D0>
<br><br><br><FONT face=3DArial size=3D2>
He tossed it had not; out of this Encyclopedia GALACTICA.

If you have flickered in mathematics freshly obtained
honored one but the state.

Why not the past eleven (this Jaim Twer came away simply that).
Ponyets was only.

It's unfortunate, for I speak of the examination greatest
psychologist, such as for the people
don't with his you know.

Hardin's voice was just come, will be if you listen: with
Anacreon.
</FONT></BODY></HTML>

------=_NextPart_001_000F_01C7B2DD.AED045F0--

------=_NextPart_000_000E_01C7B2DD.AED045F0
Content-Type: image/gif;
name="iqss.gif"
Content-Transfer-Encoding: base64
Content-ID: <000d01c7b2c4$898557e0$00a5e48c@sgaoqviek>

*** REMOVED IMAGE: iqss.gif (0.01 MB) ***

------=_NextPart_000_000E_01C7B2DD.AED045F0--

-- END OF SPAM --

See:
IP 196.218.50.44 host-196.218.50.44.tedata.net

http://www.moensted.dk/spam/?addr=196.218.50.44
http://www.spamhaus.org/query/bl?ip=196.218.50.44
http://www.apews.org/?page=test&C=130&E=214882&ip=196.218.50.44

Much More tedata.net sightings:
http://groups.google.com/groups/search?q=tedata.net+group%3A*abuse&start=0&scoring=d&

inetnum: 196.218.0.0 - 196.218.63.255
org: ORG-TD2-AFRINIC
netname: Ramsis-Zone-DSL
descr: Ramsis-Zone-DSL
descr: TE Data
country: EG
notify: ismail...@tedata.net
changed: mohame...@tedata.net
changed: ismail...@tedata.net
organisation: ORG-TD2-AFRINIC
org-name: TE Data
country: EG
org-type: LIR
address: TE Data
address: 11 Cleopatra st., Heliopolies
address: Cairo, 11341
address: Egypt
phone: +2024166600
fax-no: +2024166700
e-mail: neta...@gega.net

postmaster and abuse[]tedata.net are listed in rfc-ignorant.org
database

route: 196.218.0.0/18
descr: Telecom-Egypt Data
origin: AS8452
mnt-by: GEGA-MNT
changed: Mohame...@tedata.net
Prefix: 196.218.0.0/18
Prefix Name: Telecom Egypt Data
AS: 8452
AS Name: TEDATA TEDATA
http://www.cidr-report.org/cgi-bin/as-report?as=8452

See Spamvert Image URL:
www.seeda.hk IP 80.224.51.95
NS1.FATILOQUENT.COM [200.175.203.3 (NO GLUE)] [BR]
NS1.PRACTICEKISS.NET [218.22.210.43 (NO GLUE)] [CN]
NS2.NORCHIKMIK.COM [61.189.175.36 (NO GLUE)] [CN]
NS2.CHAMPAKDAGON.COM [201.236.86.60 (NO GLUE)] [CL]

NS records at nameservers are:
ns3.seeda.hk [101.34.2.197] [TTL=600]
ns1.seeda.hk [80.224.51.95] [TTL=600]
ns2.seeda.hk [80.224.51.95] [TTL=600]

SOA record [TTL=600] is:
Primary nameserver: seeda.hk
Hostmaster E-mail address: ad...@seeda.hk
Serial #: 2005000000

1 MX record is:
10 mail.seeda.hk [TTL=600] IP=101.34.2.197 [TTL=600] [*R]
Error: 101.34.2.197 is not a public IP

www.seeda.hk has no MX records -> seeda.hk has no MX records

Real MX Record = mail.seeda.hk IP 124.155.149.56

http://www.moensted.dk/spam/?addr=80.224.51.95
http://www.spamhaus.org/query/bl?ip=80.224.51.95
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL54915
http://www.apews.org/?page=test&C=82&E=178508&ip=80.224.51.95

More 80.224.51.95 sightings:
http://groups.google.com/groups/search?q=80.224.51.95+group%3A*abuse&start=0&scoring=d&

inetnum: 80.224.46.0 - 80.224.52.255
netname: RETENET
descr: AUNA S.A.U,
descr: Avenida Diagonal, 579
descr: Barcelona 08014
descr: Spain
role: Techauna AUNA
address: Avenida Diagonal, 579
address: Barcelona 08014
address: Spain
phone: +34 93 502 0000
fax-no: +34 93 502 2809
e-mail: tech...@auna.es
for net abuse questions: ab...@auna.es => ???

postmaster and abuse[]auna.es are listed in rfc-ignorant.org database
postmaster and abuse[]ono.com are listed in rfc-ignorant.org database

IP: 80.224.51.95
Reverse: 80.224.51.95.static.user.ono.com

ns ns1.seeda.hk 80.224.51.95
ns ns2.seeda.hk 80.224.51.95
ns ns3.seeda.hk 124.155.149.56(TW)
mx mail.seeda.hk 124.155.149.56

Aliases:
goom.hk
ns1.goom.hk
ns2.goom.hk
ska.hk
ns1.ska.hk
ns2.ska.hk
mycanadian.net
ns1.mycanadian.net
ns2.mycanadian.net
ontario-rx.net
ns1.ontario-rx.net
ns2.ontario-rx.net

route: 80.224.0.0/16
descr: Retevision SA
origin: AS16338
Prefix: 80.224.32.0/19
Prefix Name: ADSL Auna
AS: 16338
AS Name: AUNA_Telecom AS AUNA Autonomous System AUNA Group Paseo de la
Castellana, 83 85 Madrid 28046 Spain

route: 80.224.32.0/19
descr: ADSL-Auna
origin: AS16338
notify: tech...@auna.es
mnt-by: AUNA-MNT
http://www.cidr-report.org/cgi-bin/as-report?as=16338

5 hosts sharing ip:
80.224.51.95.static.user.ono.com
goom.hk
mycanadian.net
ontario-rx.net
ska.hk

29 domains sharing mailservers with seeda.hk:
abrubjoy.info
aiak.hk
alienfable.net
asdafaq.hk
babblecorporeal.net
canadian-pharma.net
denominationner.com
disinterestedhank.net
drenchold.info
drenchold.net
experitom.com
foow.hk
gtgs.hk
lanatefood.com
liksq.hk
m-rx.net
my-canadian.com
nujik.hk
onedead.hk
ontario-drugs.net
oslz.hk
pills10.com
poiau.hk
seatemples.net
slimrapid.com
ssuj.hk
unionvagary.com
usedgadgeter.com
werconfabulation.com

nameserver for 4 domains
goom.hk*
mycanadian.net*
ontario-rx.net*
ska.hk*

22 domains sharing nameservers with seeda.hk:
abrubjoy.info
aiak.hk
asdafaq.hk
babblecorporeal.net
canadian-pharma.net
drenchold.info
foow.hk
goom.hk
gtgs.hk
lanatefood.com
liksq.hk
my-canadian.com
mycanadian.net
onedead.hk
ontario-drugs.net
ontario-rx.net
oslz.hk
poiau.hk
seatemples.net
ska.hk
ssuj.hk
usedgadgeter.com

Let see whois:
Domain Name: SEEDA.HK
Contract Version: HKDNR latest version

Registrant Contact Information:
Holder English Name (It should be the same as your legal name on your
HKID card or other relevant documents): RIKO LOPEZZZA
Holder Chinese Name:
Email: fred_m...@cutey.com
Domain Name Commencement Date: 27-03-2007
Country: US
Expiry Date: 27-03-2008
Re-registration Status: Complete
Name of Registrar: HKDNR
Account Name: HK1854015T

Technical Contact:
First name: MILE
Last name: ROGERS
Company Name: RIKO LOPEZZZA

Name Servers Information:
NS1.FATILOQUENT.COM
NS2.NORCHIKMIK.COM
NS1.PRACTICEKISS.NET
NS2.CHAMPAKDAGON.COM

More seeda.hk sightings:
http://groups.google.com/groups/search?q=seeda.hk+group%3A*abuse&qt_s=Search

See:
mx mail.seeda.hk 124.155.149.56

IP: 124.155.149.56
Reverse: host-56.149-155-124.totalbb.net.tw

http://www.moensted.dk/spam/?addr=124.155.149.56

inetnum: 124.155.128.0 - 124.155.159.255
netname: KE-ING-NET
descr: KE-ing Co , Ltd
descr: 11 Floor,122 Tun Hwa North Road Taipei 105
descr: Taipei Taiwan
country: TW
status: ALLOCATED PORTABLE
notify: jg...@cns.net.tw
changed: hostm...@twnic.net.tw
inetnum: 124.155.149.0 - 124.155.149.255
netname: KE-ING-NET
descr: KE-ing Co , Ltd
descr: Taipei Taiwan
country: TW
person: Y.W. Su
address: KE-ing Co , Ltd
address: Taipei Taiwan
e-mail: y...@cns.net.tw
nic-hdl: YS746-TW
changed: hostm...@twnic.net.tw20060630
source: TWNIC
person: ChinChing Hsiesh
address: KE-ing Co , Ltd
address: Taipei Taiwan
e-mail: dhs...@cns.net.tw

ab...@twnic.net.tw (for net.tw) => ???

abuse[]twnic.net.tw is listed in rfc-ignorant.org database

Aliases:
mail.denominationner.com
mail.experitom.com
mail.lanatefood.com
ns3.lanatefood.com
mail.my-canadian.com
ns3.my-canadian.com
mail.pills10.com
mail.slimrapid.com
mail.unionvagary.com
mail.usedgadgeter.com
ns3.usedgadgeter.com
mail.werconfabulation.com
mail.aiak.hk
ns3.aiak.hk
mail.asdafaq.hk
ns3.asdafaq.hk
mail.foow.hk
ns3.foow.hk
mail.gtgs.hk
ns3.gtgs.hk
mail.liksq.hk
ns3.liksq.hk
mail.nujik.hk
mail.onedead.hk
ns3.onedead.hk
mail.oslz.hk
ns3.oslz.hk
mail.poiau.hk
ns3.poiau.hk
mail.seeda.hk
ns3.seeda.hk
mail.ssuj.hk
ns3.ssuj.hk
mail.abrubjoy.info
ns3.abrubjoy.info
mail.drenchold.info
ns3.drenchold.info
mail.alienfable.net
mail.babblecorporeal.net
ns3.babblecorporeal.net
mail.canadian-pharma.net
ns3.canadian-pharma.net
mail.disinterestedhank.net
mail.drenchold.net
mail.m-rx.net
mail.ontario-drugs.net
ns3.ontario-drugs.net
mail.seatemples.net
ns3.seatemples.net

Prefix: 124.155.128.0/19
Prefix Name: Taiwna Fixed Network
AS: 9924
AS Name: TFN NET Taiwan Fixed Network
http://www.cidr-report.org/cgi-bin/as-report?as=9924

See:
NS1.FATILOQUENT.COM IP 200.175.203.3

NS1.FATILOQUENT.COM has no MX records -> [FATILOQUENT.COM has 1 MX
record mail.FATILOQUENT.COM (10)]

200.175.203.3 = websul3.static.gvt.net.br

http://www.moensted.dk/spam/?addr=200.175.203.3
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL54349

Let see whois:
Checking server [whois.dns.com.cn]
Results:

Domain Name.......... fatiloquent.com
Creation Date........ 2006-12-23 22:54:49
Registration Date.... 2006-12-23 22:54:49
Expiry Date.......... 2007-12-23 22:54:49
Organisation Name.... zhou fei
Organisation Address. fu jian xiamen
Organisation Address.
Organisation Address. xia men
Organisation Address. 321000
Organisation Address. FJ
Organisation Address. CN

Admin Name........... zhou fei
Admin Address........ fu jian xiamen
Admin Address........
Admin Address........ xia men
Admin Address........ 321000
Admin Address........ FJ
Admin Address........ CN
Admin Email.......... admin[]champakdagon.com
Admin Phone.......... +86.59232100232
Admin Fax............ +86.59232100232

Tech Name............ zhou fei
Tech Address......... fu jian xiamen
Tech Address.........
Tech Address......... xia men
Tech Address......... 321000
Tech Address......... FJ
Tech Address......... CN
Tech Email........... ad...@champakdagon.com
Tech Phone........... +86.59232100232
Tech Fax............. +86.59232100232

Bill Name............ zhou fei
Bill Address......... fu jian xiamen
Bill Address.........
Bill Address......... xia men
Bill Address......... 321000
Bill Address......... FJ
Bill Address......... CN
Bill Email........... ad...@champakdagon.com
Bill Phone........... +86.59232100232
Bill Fax............. +86.59232100232
Name Server.......... ns2.fatiloquent.com
Name Server.......... ns1.fatiloquent.com

More fatiloquent.com sightings:
http://groups.google.com/groups/search?q=FATILOQUENT.COM+group%3A*abuse&start=0&scoring=d&

See:
NS1.PRACTICEKISS.NET IP 218.22.210.43

NS1.PRACTICEKISS.NET has no MX records -> [PRACTICEKISS.NET has 1 MX
record mail.PRACTICEKISS.NET (10)]

http://www.moensted.dk/spam/?addr=218.22.210.43
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL55340

Let see whois:
Domain Name: PRACTICEKISS.NET

Registrant [614798]:
Judy Timmer
166 James St
Beaufort
SC
29902
US

Administrative Contact [614798]:
Judy Timmer hawaiishi[]yahoo.com
166 James St
Beaufort
SC
29902
US
Phone: +1.8435244110

Billing Contact [614798]:
Judy Timmer hawa...@yahoo.com
166 James St
Beaufort
SC
29902
US
Phone: +1.8435244110

Technical Contact [614798]:
Judy Timmer hawa...@yahoo.com
166 James St
Beaufort
SC
29902
US
Phone: +1.8435244110

Domain servers in listed order:
NS1.PRACTICEKISS.NET 218.22.210.43
NS2.PRACTICEKISS.NET 218.22.210.43

Record created on: 2007-02-07 14:32:21.0
Database last updated on: 2007-06-19 21:20:11.423
Domain Expires on: 2008-02-07 14:32:22.0

More practicekiss.net sightings:
http://groups.google.com/groups/search?q=PRACTICEKISS.NET++group%3A*abuse&start=0&scoring=d&

See:
NS2.NORCHIKMIK.COM IP 61.189.175.36

NS2.NORCHIKMIK.COM has no MX records -> [NORCHIKMIK.COM has 1 MX
record mail.NORCHIKMIK.COM (10)]

http://www.moensted.dk/spam/?addr=61.189.175.36
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL54933

Let see whois:
Domain Name:norchikmik.com

Registrant:
cheng zheng
xin yu city gaoxin tech
338000

Administrative Contact:
cheng zheng
cheng zheng
xin yu city gaoxin tech
xin yu Jiangxi 338000
China
tel: 86 0790 6860686
fax: 86 0790 6860686
chenm[]lalachikla.com

Technical Contact:
cheng zheng
cheng zheng
xin yu city gaoxin tech
xin yu Jiangxi 338000
China
tel: 86 0790 6860686
fax: 86 0790 6860686
ch...@lalachikla.com

Billing Contact:
cheng zheng
cheng zheng
xin yu city gaoxin tech
xin yu Jiangxi 338000
China
tel: 86 0790 6860686
fax: 86 0790 6860686
ch...@lalachikla.com

Registration Date: 2007-03-06
Update Date: 2007-03-23
Expiration Date: 2008-03-06

Primary DNS: ns1.norchikmik.com 61.189.175.36
Secondary DNS: ns2.norchikmik.com 61.189.175.36

More norchikmik.com sightings:
http://groups.google.com/groups/search?q=NORCHIKMIK.COM+group%3A*abuse&start=0&scoring=d&

See:
NS2.CHAMPAKDAGON.COM IP 201.236.86.60

NS2.CHAMPAKDAGON.COM has no MX records -> [CHAMPAKDAGON.COM has 1 MX
record mail.CHAMPAKDAGON.COM (10)]

http://www.moensted.dk/spam/?addr=201.236.86.60
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL53118

Let see whois:
Domain Name.......... champakdagon.com
Creation Date........ 2006-12-23 22:54:54
Registration Date.... 2006-12-23 22:54:54
Expiry Date.......... 2007-12-23 22:54:54
Organisation Name.... zhou fei
Organisation Address. fu jian xiamen
Organisation Address.
Organisation Address. xia men
Organisation Address. 321000
Organisation Address. FJ
Organisation Address. CN

Bill Name............ zhou fei
Bill Address......... fu jian xiamen
Bill Address.........
Bill Address......... xia men
Bill Address......... 321000
Bill Address......... FJ
Bill Address......... CN
Bill Email........... ad...@champakdagon.com
Bill Phone........... +86.59232100232
Bill Fax............. +86.59232100232
Name Server.......... ns2.champakdagon.com
Name Server.......... ns1.champakdagon.com

More champakdagon.com sightings:
http://groups.google.com/groups/search?q=CHAMPAKDAGON.COM+group%3A*abuse&start=0&scoring=d&

And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/af63d236addb98b7

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages