[email] [drugs - PharmacyExpress] (hounkanjndase.com - stroticcutu.com - orinaluch.com) Re: eusyp 795
TomezNet
IP 86.200.123.147 ANice-252-1-87-147.w86-200.abo.wanadoo.fr
(at ns.wanadoo.fr / francetelecom.com)
Spamvert:
www.hounkanjndase.com IP 211.144.69.243
(SBL39667 / SBL42192 - ROK4932)
(at dns2.cableplus.com.cn / a.in-addr.cn / scn.com.cn)
NS
ns0.stroticcutu.com IP 211.144.69.243
ns0.orinaluch.com IP 211.144.68.59
(SBL42231 - ROK3552 / SBL43244 - ROK4932)
(at dns1.cableplus.com.cn / b.in-addr.cn / scn.com.cn)
More PharmacyExpress.com sightings:
http://groups.google.com/groups/search?q=%22Pharmacy+Express%22+group%3A*abuse*&start=0&scoring=d&
Received at an address harvested from domain registration.
More info below:
====================
X-SID-PRA: Irmhild Tercero <irmhild...@futurekidsnyc.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW40fmM6maDc4NeY2LvdIJEoqCgvJ8N0N57w=
Received: from tomts11-srv.bellnexxia.net ([209.226.175.55]) by
bay0-pamc1-f5.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 13 Jun 2006 04:39:51 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 13 Jun 2006 07:39:45 -0400
Received: (qmail 11103 invoked by uid 110); 13 Jun 2006 11:39:42 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 11083 invoked from network); 13 Jun 2006 11:39:42
-0000
Received: from anice-252-1-87-147.w86-200.abo.wanadoo.fr (HELO
futurekidsnyc.com) (86.200.123.147)
by xx..xx..xx.net with SMTP; 13 Jun 2006 11:39:41 -0000
Message-ID: <000001c68edd$f486f640$77c4a8c0@yjq80>
Reply-To: "Irmhild Tercero" <irmhild...@futurekidsnyc.com>
From: "Irmhild Tercero" <irmhild...@futurekidsnyc.com>
To: xx..xx@xx..xx.com
Subject: Re: eusyp 795
Date: Tue, 13 Jun 2006 04:38:56 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C68EA3.48281E40"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Return-Path: irmhild...@futurekidsnyc.com
X-OriginalArrivalTime: 13 Jun 2006 11:39:52.0526 (UTC)
FILETIME=[15BD76E0:01C68EDE]
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C68EA3.48281E40
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi
Me
te=20
ridia
C
fn=20
lALlS f
yz=20
rom on
ro=20
ly $
tj=20
3,7
bt=20
5
VlAGR
xy=20
A f
oy=20
rom onl
ko=20
y $
ze=20
3,3
qz=20
3
P
gi=20
rozac
Amb
yu=20
ien
So
hy=20
ma
Xa
vh=20
nax
VAL
hd=20
lUM fro
yy=20
m on
cc=20
ly $=20
he=20
1,2
ph=20
1
Levitr
nr=20
a
Sav
fi=20
e o
yp=20
ver 50
oo=20
% wit
bz=20
h u
yp=20
s http://www.hounkanjndase.com
=20
_____ =20
known to you once. It is a hundred years and three and fifty since I=20
came out of the egg, but I do not forget what my father told me. Now
I=20
am the chief of the great ravens of the Mountain. We are few, but we=20
remember still the king that was of old. Most of my people are
abroad,=20
for there are great tidings in the South =13 some are tidings of joy
to=20
you, and some you will not think so good. Behold! the birds are=20
------=_NextPart_000_0001_01C68EA3.48281E40
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>Hi<BR>
<BR>Me<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> te </DIV>ridia<BR>
C<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> fn </DIV>lALlS f<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> yz </DIV>rom on<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> ro </DIV>ly $<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> tj </DIV> 3,7<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> bt </DIV>5<BR>
VlAGR<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> xy </DIV>A f<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> oy </DIV>rom onl<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> ko </DIV>y $<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> ze </DIV> 3,3<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> qz </DIV>3<BR>
P<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> gi </DIV>rozac<BR>
Amb<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> yu </DIV>ien<BR>
So<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> hy </DIV>ma<BR>
Xa<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> vh </DIV>nax<BR>
VAL<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> hd </DIV>lUM fro<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> yy </DIV>m on<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> cc </DIV>ly $ <DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> he </DIV>1,2<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> ph </DIV>1<BR>
Levitr<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> nr </DIV>a<BR>
<BR>
<DIV>Sav<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> fi </DIV>e o<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> yp </DIV>ver 50<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> oo </DIV>% wit<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> bz </DIV>h u<DIV STYLE=3D"MARGIN: 0px;
FLOAT
:
RIGHT"> yp </DIV>s <A =
href=3D"http://www.hounkanjndase.com">http://www.hounkanjndase.com</A></D=
IV></DIV>
<DIV> </DIV><HR><DIV><FONT face=3DArial size=3D2>known to you
once. =
It is a hundred years and three and fifty since I <BR>came out of the =
egg, but I do not forget what my father told me. Now I <BR>am the chief
=
of the great ravens of the Mountain. We are few, but we <BR>remember =
still the king that was of old. Most of my people are abroad, <BR>for =
there are great tidings in the South =80=93 some are tidings of joy to
=
<BR>you, and some you will not think so good. Behold! the birds are =
<BR></FONT></DIV></BODY></HTML>
------=_NextPart_000_0001_01C68EA3.48281E40--
-- END OF SPAM --
See forged site certificates and logos by PharmacyExpress.com:
* PharmacyChecker
CEO/President: Jack Poppins
My Canadian Pharmacy Corp.
1592 Wilson Avenue,
Toronto, ON M3L 1A6
Delivery Royal Post, Airmail, EMS with tracking info
* BBBOnLine Reliability
Participation Confirmed For Pharmacy
Participant through 12/30/2005
* CIPA Membership (Canadian International Pharmacy Association)
Valid Member: Certified Member
Organization: Pharmacy
Licence #: 91959
Location: Toronto, Canada
Current Status: Active
* VeriSign Secure Site Seal
Pharmacy is a Soltrus Secure Site
Name: Pharmacy
Status: Valid
Validity Period: 13-OCT-04 - 13-OCT-05
Server ID Information:
Country = CA
State = Ontario
Locality = Toronto
Organization = Technical Consultants and Experts Group Inc
Organizational Unit = TCE Group
Organizational Unit = Terms of use at Verisign (c) 04
Organizational Unit = Authenticated by Verisign
Organizational Unit = Member, VeriSign Trust Network
Common Name = Pharmacy
* Verified by VISA
AND:
State of Ontario drug reselling License # D2849912
Pharmacy Express Corp
1460 Don Mills Rd. at York Mills, 2nd floor
Don Mills, ON M3B 2X9
More D2849912 sightings:
http://groups.google.com/groups/search?q=%22D2849912%22+group%3A*abuse
See:
IP 86.200.123.147 ANice-252-1-87-147.w86-200.abo.wanadoo.fr
http://www.moensted.dk/spam/?addr=86.200.123.147
http://cbl.abuseat.org/lookup.cgi?ip=86.200.123.147
http://www.spamhaus.org/query/bl?ip=86.200.123.147
http://spamcop.net/w3m?action=checkblock&ip=86.200.123.147
inetnum: 86.200.123.0 - 86.200.123.255
netname: IP2000-ADSL-BAS
descr: BSNIC252 Nice Bloc 1
country: FR
route: 86.192.0.0/12
descr: France Telecom
origin: AS3215
mnt-by: RAIN-TRANSPAC
changed: gestio...@francetelecom.com
http://www.cidr-report.org/cgi-bin/as-report?as=3215
7 SBL listings for IPs under the responsibility of wanadoo.fr
http://www.spamhaus.org/sbl/listings.lasso?isp=wanadoo.fr
3 SBL/ROKSO listings for IPs under the responsibility of
francetelecom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=francetelecom.com
See:
www.hounkanjndase.com IP 211.144.69.243
ns0.stroticcutu.com [211.144.69.243]
ns0.orinaluch.com [211.144.68.59]
www.hounkanjndase.com has no MX records -> hounkanjndase.com has no MX
records
http://www.moensted.dk/spam/?addr=211.144.69.243
[1] dns2you/zhousvr/name2you, see http://spews.org/html/S2319.html
http://www.spamhaus.org/query/bl?ip=211.144.69.243
211.144.69.243 PTR record: reserve.cableplus.com.cn
More 211.144.69.243 sightings:
http://groups.google.com/groups?q=211.144.69.243+group%3A*abuse
inetnum: 211.144.69.1 - 211.144.69.255
netname: CHANGNING1POPNET
descr: Cable OnLine Network CHANGNING1POPNet
descr: Internet Service Provider shnet.edu.cn
descr: Shanghai China
country: CN
route: 211.144.64.0/19
descr: Asia Netcom (proxy-registered route object)
origin: AS9812
route: 211.144.64.0/20
descr: CHINA NETCOM
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
http://www.cidr-report.org/cgi-bin/as-report?as=9929
More hounkanjndase.com sightings:
http://groups.google.com/groups/search?q=hounkanjndase.com+group%3A*abuse
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39667
211.144.69.0/24 is listed on the Spamhaus Block List (SBL)
06-Jun-2006 06:58 GMT | SR02
Dirty block: businessguide4u.net ; etc
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42192
Numerous pill domains.
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39667
211.144.69.0/24 is listed on the Spamhaus Block List (SBL/ROKSO)
22-May-2006 00:00 GMT | SR02
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42192
211.144.69.243/32 is listed on the Spamhaus Block List (SBL/ROKSO)
22-May-2006 03:27 GMT | SR09
Leo Kuvayev / BadCow
Numerous pill domains.
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
5 SBL/ROKSO listings for IPs under the responsibility of asianetcom.net
http://www.spamhaus.org/sbl/listings.lasso?isp=asianetcom.net
19 SBL/ROKSO listings for IPs under the responsibility of scn.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=scn.com.cn
let see whois:
Registrar: DOMAIN JINGLES, INC.
Registration Service Provided By: ENAMEBIZ
Contact: +086.551360
Domain Name: HOUNKANJNDASE.COM
Registrant:
Li xiaoming
Li xiaoming (dimdimdim8888[]yahoo.com.cn)
street.Sheng li 42
Shang Hai
Shanghai,200093
CN
Tel. +021.76886639
Creation Date: 09-Jun-2006
Expiration Date: 09-Jun-2007
Domain servers in listed order:
ns0.orinaluch.com
ns0.stroticcutu.com
Administrative Contact:
Li xiaoming
Li xiaoming (dimdim...@yahoo.com.cn)
street.Sheng li 42
Shang Hai
Shanghai,200093
CN
Tel. +021.76886639
Technical Contact:
Li xiaoming
Li xiaoming (dimdim...@yahoo.com.cn)
street.Sheng li 42
Shang Hai
Shanghai,200093
CN
Tel. +021.76886639
Billing Contact:
Li xiaoming
Li xiaoming (dimdim...@yahoo.com.cn)
street.Sheng li 42
Shang Hai
Shanghai,200093
CN
Tel. +021.76886639
Status:ACTIVE
See more dimdimdim8888[]yahoo.com.cn sightings:
http://groups.google.com/groups/search?q=%22dimdi...@yahoo.com.cn%22+group%3A*abuse*
See:
ns0.stroticcutu.com IP 211.144.69.243
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : stroticcutu.com
Registrant:
Name : ROBERT BLAKE
Email : espieteact[]yahoo.com
Address : 609 HIDDEN FALLS LANE
Zipcode : 23320
Nation : US
Tel : 7577391616
Fax :
Administrative Contact:
Name : ROBERT BLAKE
Email : espie...@yahoo.com
Address : 609 HIDDEN FALLS LANE
Zipcode : 23320
Nation : US
Tel : 7577391616
Fax :
Technical Contact:
Name : ROBERT BLAKE
Email : espie...@yahoo.com
Address : 609 HIDDEN FALLS LANE
Zipcode : 23320
Nation : US
Tel : 7577391616
Fax :
Name Servers:
Dates & Status:
Created Date 2006-06-04 12:37:37 EDT
Updated Date 2006-06-04 12:37:37 EDT
Valid Date 2007-06-04 12:37:37 EDT
Status ACTIVE
More stroticcutu.com sightings:
http://groups.google.com/groups/search?q=stroticcutu.com+group%3A*abuse&start=0&scoring=d&
See:
ns0.orinaluch.com IP 211.144.68.59
ns0.orinaluch.com has no MX records -> orinaluch.com has no MX records
http://www.moensted.dk/spam/?addr=211.144.68.59
http://www.spamhaus.org/query/bl?ip=211.144.68.59
More 211.144.68.59 sightings:
http://groups.google.com/groups/search?q=211.144.68.59+group%3A*abuse
inetnum: 211.144.68.1 - 211.144.68.255
netname: CHANGNING2POPNET
descr: Cable OnLine Network CHANGNING2POPNet
descr: Internet Service Provider
descr: Shanghai China
country: CN
route: 211.144.64.0/20
descr: CHINA NETCOM
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
ASN Name: COLNET (Shanghai Cable Network Co., Ltd)
Country IP Range: 211.144.0.0 to 211.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9812
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42231
211.144.68.0/24 is listed on the Spamhaus Block List (SBL/ROKSO)
05-Jun-2006 21:54 GMT | SR02
MailTrain
xpdns.info porn spam site @ 211.144.68.78
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=MailTrain
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK3552
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43244
211.144.68.59/32 is listed on the Spamhaus Block List (SBL/ROKSO)
10-Jun-2006 21:26 GMT | SR22
Leo Kuvayev / BadCow
Spammer DNS - ns0.orinaluch.com
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : orinaluch.com
Registrant:
Name : Patrick Walsh
Email : longiritta[]yahoo.com
Address : 706 Venice Ct
Zipcode : 92109
Nation : US
Tel : 7818564388
Fax :
Administrative Contact:
Name : Patrick Walsh
Email : longi...@yahoo.com
Address : 706 Venice Ct
Zipcode : 92109
Nation : US
Tel : 7818564388
Fax :
Technical Contact:
Name : Patrick Walsh
Email : longi...@yahoo.com
Address : 706 Venice Ct
Zipcode : 92109
Nation : US
Tel : 7818564388
Fax :
Name Servers:
Dates & Status:
Created Date 2006-06-04 12:31:52 EDT
Updated Date 2006-06-04 12:31:52 EDT
Valid Date 2007-06-04 12:31:52 EDT
Status ACTIVE
More orinaluch.com sightings:
http://groups.google.com/groups/search?q=orinaluch.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/e9dbbde1d0eec037
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: