[email] [drugs] (safedroching.com - gnomez.com) You can save up to 70%
TomezNet
IP 66.67.148.39 cpe-66-67-148-39.rochester.res.rr.com
(at dns2.rr.com)
Spamvert:
bu.safedroching.com IP 211.156.120.11
(SBL43357 - ROK4932) (at wantong.net.cn / wtonline.net / kornet.net)
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 209.73.179.44; Sat, 10 Jun 2006
05:15:56 -0700
X-YahooFilteredBulk: 66.67.148.39
X-Originating-IP: [66.67.148.39]
Return-Path: <to...@lifeatitspeake.com>
Authentication-Results: mta126.mail.re2.yahoo.com
from=lifeatitspeake.com; domainkeys=neutral (no sig)
Received: from 66.67.148.39 (HELO localhost) (66.67.148.39) by
mta126.mail.re2.yahoo.com with SMTP; Sat, 10 Jun 2006 05:15:55 -0700
Message-ID: <000001c68c86$a8ac2c80$0100007f@localhost>
From: "Josiah Cook" <to...@lifeatitspeake.com>
To: xx..xx@xx..xx.com
Subject: You can save up to 70%
Date: Sat, 10 Jun 2006 08:15:28 -0900
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0001_01C68C86.A8AC2C80"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3416
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
Content-Length: 16881
<html>
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<xmeta name=Generator content="Microsoft Word 10 (filtered)">
<style>
<!--
#message /* Style Definitions */
p.MsoNormal, #message li.MsoNormal, #message div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
#message a:link, #message span.MsoHyperlink
{color:blue;
text-decoration:underline;}
#message a:visited, #message span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
#message span.EmailStyle17
{font-family:Arial;
color:windowtext;}
#message _page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
#message div.Section1
{page:Section1;}
-->
</style>
</head>
<xbody lang=RU link=blue vlink=purple>
<a target="_blank" href="http://bu.safedroching.com/" ><img
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=2752_0_75712_1276_16881_0_16224_26785_3933273329_oSOYkYn4Ur6Rg9euJfSMZ2XJUpXy9M8ud7zxUFO7KUwzcb5RTm2SrfecoZ41hdliyxzH3BeKgz0w7fxcWxy47yREGNyWy7WAsCehghty_W1sGC2UkvhS_TQB_FkcldeoR53S4ShZhOygIU1tYxVvYieIoxPm5bEeykJtLEknym3o&bodyPart=2&YY=5175&order=down&sort=date&pos=0&view=a&head=f&Idx=19"
border="0"></a>
<textarea style="visibility: hidden;">Stan Planton</textarea>
<textarea style="visibility: hidden;">for being my</textarea>
<textarea style="visibility: hidden;">number one</textarea>
<textarea style="visibility: hidden;">source of information</textarea>
<textarea style="visibility: hidden;">on countless topics</textarea>
<textarea style="visibility: hidden;">head librarian</textarea>
<textarea style="visibility: hidden;">Ohio University</textarea>
<textarea style="visibility: hidden;">and the Vatican
Observatory</textarea>
<textarea style="visibility: hidden;">Thanks also </textarea>
<textarea style="visibility: hidden;">to CERN</textarea>
<textarea style="visibility: hidden;">Henry Beckett</textarea>
<textarea style="visibility: hidden;">Brett Trotter</textarea>
<textarea style="visibility: hidden;">the Pontifical Academy</textarea>
<textarea style="visibility: hidden;">of Science</textarea>
<textarea style="visibility: hidden;">Brookhaven Institute</textarea>
<textarea style="visibility: hidden;">FermiLab Library</textarea>
<textarea style="visibility: hidden;">Olga Wieser</textarea>
<textarea style="visibility: hidden;">Don Ulsch</textarea>
<textarea style="visibility: hidden;">of the National</textarea>
<textarea style="visibility: hidden;">Security Institute</textarea>
<textarea style="visibility: hidden;">Caroline H. Thompson</textarea>
<textarea style="visibility: hidden;">at University of Wales</textarea>
<textarea style="visibility: hidden;">Kathryn Gerhard</textarea>
<textarea style="visibility: hidden;">Omar Al Kindi</textarea>
<textarea style="visibility: hidden;">Federation of American
Scientists</textarea>
<textarea style="visibility: hidden;">upside down</textarea>
<textarea style="visibility: hidden;">In slow motion</textarea>
<textarea style="visibility: hidden;">afraid of what</textarea>
<textarea style="visibility: hidden;">he was about</textarea>
<textarea style="visibility: hidden;">to witness, Langdon</textarea>
<textarea style="visibility: hidden;">rotated the fax</textarea>
<textarea style="visibility: hidden;">180 degrees. He</textarea>
<textarea style="visibility: hidden;">looked at the word</textarea>
<textarea style="visibility: hidden;"> light a long time</textarea>
<textarea style="visibility: hidden;">Stunned, Langdon </textarea>
<textarea style="visibility: hidden;">collapsed in a chair</textarea>
<textarea style="visibility: hidden;">He sat a moment in</textarea>
<textarea style="visibility: hidden;">utter bewilderment</textarea>
<textarea style="visibility: hidden;">Gradually, his eyes</textarea>
<textarea style="visibility: hidden;">were drawn to the</textarea>
<textarea style="visibility: hidden;">blinking red light</textarea>
<textarea style="visibility: hidden;">on his fax machine</textarea>
<textarea style="visibility: hidden;">Whoever had sent this</textarea>
<textarea style="visibility: hidden;">fax was still on the</textarea>
<textarea style="visibility: hidden;">line waiting</textarea>
<textarea style="visibility: hidden;">to talk. Langdon</textarea>
<textarea style="visibility: hidden;">gazed at the blinking</textarea>
<textarea style="visibility: hidden;">He felt like a
paleontologist</textarea>
<textarea style="visibility: hidden;">Langdon's eyes</textarea>
<textarea style="visibility: hidden;">were locked on</textarea>
<textarea style="visibility: hidden;">the brand. Illuminati</textarea>
<textarea style="visibility: hidden;">he read over and over</textarea>
<textarea style="visibility: hidden;">His work had always</textarea>
<textarea style="visibility: hidden;">been based on the</textarea>
<textarea style="visibility: hidden;">symbolic equivalent</textarea>
<textarea style="visibility: hidden;">of fossils</textarea>
<textarea style="visibility: hidden;">documents and historical
</textarea>
<textarea style="visibility: hidden;"></textarea>
<textarea style="visibility: hidden;">hearsay but this image
</textarea>
<textarea style="visibility: hidden;">before him was</textarea>
<textarea style="visibility: hidden;">today. Present tense</textarea>
</xbody>
</html>
-- END OF SPAM --
More XSALSA[]GMAIL.COM spammer sightings (previously XSALSA[]ETN.ORG):
http://groups.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&
See:
IP 66.67.148.39 cpe-66-67-148-39.rochester.res.rr.com
http://www.moensted.dk/spam/?addr=66.67.148.39
http://cbl.abuseat.org/lookup.cgi?ip=66.67.148.39
http://www.spamhaus.org/query/bl?ip=66.67.148.39
http://spamcop.net/w3m?action=checkblock&ip=66.67.148.39
OrgName: Road Runner HoldCo LLC
OrgID: RRNY
NetRange: 66.66.0.0 - 66.67.255.255
CIDR: 66.66.0.0/15
NetName: RR-NYS-2BLK
NetHandle: NET-66-66-0-0-1
route: 66.67.128.0/19
descr: RR-Route
origin: AS11351
ASN Name: RR-NYSREGION-ASN-01
http://www.cidr-report.org/cgi-bin/as-report?as=11351
28 SBL/ROKSO listings for IPs under the responsibility of rr.com
http://www.spamhaus.org/sbl/listings.lasso?isp=rr.com
See:
bu.safedroching.com IP 211.156.120.11
ns1.safedroching.com A IN 3600 211.156.120.11
ns2.safedroching.com A IN 3600 211.156.120.11
ns1.gnomez.com [211.156.120.11] (OLD IP 193.93.236.3)
ns2.gnomez.com [211.156.120.11] (OLD IP 222.133.3.200)
bu.safedroching.com has no MX records -> safedroching.com has no MX
records
http://www.moensted.dk/spam/?addr=211.156.120.11
http://www.spamhaus.org/query/bl?ip=211.156.120.11
More safedroching.com sightings:
http://groups.google.com/groups/search?q=safedroching.com+group%3A*abuse
inetnum: 211.156.120.0 - 211.156.121.255
netname: ZNY
country: cn
route: 211.156.120.0/22
descr: China Netcom
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 211.144.0.0 to 211.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43357
211.156.120.0/24 is listed on the Spamhaus Block List (SBL/ROKSO)
14-Jun-2006 08:15 GMT | SR02
Leo Kuvayev / BadCow
ns1.pinkyakor.com @ 211.156.120.11 (dirty block)
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
31 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
Let see whois:
VeriSign Global Registry Service
Domain name: SAFEDROCHING.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: TOTALNIC-128733 (XSALSA[]GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (XSA...@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.GNOMEZ.COM
Name Server: NS2.GNOMEZ.COM
Domain creation date: 2006-06-04 09:47:22.0
Domain expiration date: 2007-06-04 10:19:09.0
See:
ns1.gnomez.com IP 211.156.120.11
Let see whois (NEW Registration):
Domain name: GNOMEZ.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: TOTALNIC-128733 (XSA...@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (XSA...@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.GNOMEZ.COM
Name Server: NS2.GNOMEZ.COM
Domain creation date: 2006-04-27 00:10:55.0
Domain expiration date: 2007-04-27 00:45:00.0
See more gnomez.com sightings:
http://groups.google.com/groups/search?q=gnomez.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/3cfde6aab47d1cea
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: