[email] [drugs] (atravelan.com - lasromtea.com - poltraini.com) Premier
TomezNet
IP 86.125.150.146 cl-86-125-150-146.cablelink.mures.rdsnet.ro
Spamvert:
atravelan.com IP 222.60.14.240
(at crc.net.cn)
ns0.lasromtea.com IP 202.103.178.125 => CHINANET-GD
ns0.lasromtea.com IP 222.178.181.22 => chinanet-cq
(ROK4932 - SBL40967 / SBL40705) (at chinanet-cq)
ns0.poltraini.com IP 125.208.3.42
(ROK4932 - SBL40882 / SBL40239 / SBL40669) (at primetelecom.cn )
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.174; Fri, 28 Apr 2006
09:15:58 -0700
X-YahooFilteredBulk: 86.125.150.146
X-Originating-IP: [86.125.150.146]
Return-Path: <ba...@horafeliz.com>
Authentication-Results: mta359.mail.scd.yahoo.com from=horafeliz.com;
domainkeys=neutral (no sig)
Received: from 207.228.2.... (EHLO xxx.web-hosting.com)
(207.228.2.....) by mta359.mail.scd.yahoo.com with SMTP; Fri, 28 Apr
2006 09:15:58 -0700
Received: from -1208985584 (cl-86-125-150-146.cablelink.mures.rdsnet.ro
[86.125.150.146] (may be forged)) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k3SGE9Z21261 for <xx..xx@xx..xx.com>; Fri,
28 Apr 2006 12:14:10 -0400 (EDT)
Received: from horafeliz.com (-1208573704 [-1208807312]) by
cl-86-125-150-146.cablelink.mures.rdsnet.ro (Qmailv1) with ESMTP id
9E1E17943A for <xx..xx@xx..xx.com>; Fri, 28 Apr 2006 10:07:43 -0500
Date: Fri, 28 Apr 2006 10:07:43 -0500
From:"Defiant I. Hitch" <ba...@horafeliz.com>
X-Mailer: The Bat! (v2.00.4) Personal
X-Priority: 3
Message-ID: <0284357844.2...@horafeliz.com>
To:"Webmaster" <xx..xx@xx..xx.com>
Subject: Premier
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------42973F957AC4D05"
X-AntiVirus: Checked by Dr.Web (http://www.drweb.net)
Content-Length: 870
<html>
<xbody>
Man's Health<br>
Anti-Depressants<br>
Antibiotics<br>
Cholesterol<br>
Diabetes<br>
Diuretic<br>
Pain Relief<br>
Sexual Health<br>
Sleep Aids<br>
Weight Loss
<p>and more on <a target="_blank"
href="http://atravelan.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
>Premier Pharxmacy</a></p>
<br>
<br>
<br>
<br>
<br>
<br>
ghfgdrtpu RldRWVRCRlZGdVJaVllBVFEdW0dW
</xbody>
</html>
-- END OF SPAM --
See:
IP 86.125.150.146 cl-86-125-150-146.cablelink.mures.rdsnet.
http://cbl.abuseat.org/lookup.cgi?ip=86.125.150.146
http://www.moensted.dk/spam/?addr=86.125.150.146
http://www.spamhaus.org/query/bl?ip=86.125.150.146
inetnum: 86.125.128.0 - 86.125.191.255
netname: RO-RDSNET-MS-TARGUMURES-CABLELINK
descr: Cablelink access in Targu Mures, Mures
country: RO
route: 86.120.0.0/13
descr: RDSNET
origin: AS8708
mnt-by: AS8708-MNT
changed: cipria...@rdsnet.ro
http://www.cidr-report.org/cgi-bin/as-report?as=8708
13 SBL/ROKSO listings for IPs under the responsibility of rdsnet.ro
http://www.spamhaus.org/sbl/listings.lasso?isp=rdsnet.ro
Spamvert
atravelan.com IP 222.60.14.240
ns0.lasromtea.com [202.103.178.125]
ns0.poltraini.com [125.208.3.42]
atravelan.com has no MX records
http://www.moensted.dk/spam/?addr=222.60.14.240
inetnum: 222.32.0.0 - 222.63.255.255
netname: CRTC
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
17 SBL/ROKSO listings for IPs under the responsibility of crc.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=crc.net.cn
Let see whois:
Registrar: ONLINE SAS
Domain Name : atravelan.com (ATRAVE3-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com
Registrant / Admin Contact :
PERSON
Misty BROWN (BROWN13-BMN-PE)
2123 Flamingo
73533 Duncan
UNITED STATES OK
phone : 5802558797
fax :
e-mail : pounsonte[]yahoo.com
Billing Contact :
PERSON
Misty BROWN (BROWN13-BMN-PE)
2123 Flamingo
73533 Duncan
UNITED STATES OK
phone : 5802558797
fax :
e-mail : poun...@yahoo.com
Technical Contact :
PERSON
Misty BROWN (BROWN13-BMN-PE)
2123 Flamingo
73533 Duncan
UNITED STATES OK
phone : 5802558797
fax :
e-mail : poun...@yahoo.com
Domain servers :
ns0.lasromtea.com (NLC85-BMN-HST)
ns0.poltraini.com (NPC108-BMN-HST)
Created on 04/25/2006 16:36:51
Updated on 04/26/2006 15:58:17
Expires on 04/25/2007 12:36:51
More atravelan.com sightings:
http://groups.google.com/groups/search?q=atravelan.com+group%3A*abuse
See:
ns0.lasromtea.com IP 202.103.178.125 => CHINANET-GD
ns0.lasromtea.com IP 222.178.181.22 => chinanet-cq
ns0.lasromtea.com has no MX records -> lasromtea.com has no MX records
http://www.spamhaus.org/query/bl?ip=222.178.181.22
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40705
222.178.181.0/24 is listed on the Spamhaus Block List (SBL)
21-Apr-2006 18:41 GMT | SR02
spammer DNS @ 222.178.181.25 (dirty block / bestdnsservices)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40967
222.178.181.22/32 is listed on the Spamhaus Block List (SBL/ROKSO)
30-Apr-2006 03:32 GMT | SR21
Leo Kuvayev / BadCow
Spammer Controlled DNS Server
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
5 SBL/ROKSO listings for IPs under the responsibility of chinanet-cq
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-cq
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : lasromtea.com
Registrant:
Name : Lisa Wemple
Email : ateshallo[]yahoo.com
Address : 6604 SW 114 Place
Zipcode : 33173
Nation : US
Tel : 3052796113
Fax :
Administrative Contact:
Name : Lisa Wemple
Email : ates...@yahoo.com
Address : 6604 SW 114 Place
Zipcode : 33173
Nation : US
Tel : 3052796113
Fax :
Technical Contact:
Name : Lisa Wemple
Email : ates...@yahoo.com
Address : 6604 SW 114 Place
Zipcode : 33173
Nation : US
Tel : 3052796113
Fax :
Name Servers:
Dates & Status:
Created Date 2006-04-22 10:23:15 EDT
Updated Date 2006-04-22 10:23:15 EDT
Valid Date 2007-04-22 10:23:15 EDT
Status ACTIVE
16 SBL/ROKSO listings for IPs under the responsibility of chinanet-gd
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-gd
More lasromtea.com sightings:
http://groups.google.com/groups/search?q=lasromtea.com+group%3A*abuse&start=0&scoring=d&
See:
ns0.poltraini.com IP 125.208.3.42
ns0.poltraini.com has no MX records -> poltraini.com has no MX records
http://www.moensted.dk/spam/?addr=125.208.3.42
http://www.spamhaus.org/query/bl?ip=125.208.3.42
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40239
125.208.0.0/22 is listed on the Spamhaus Block List (SBL)
13-Apr-2006 00:48 GMT | SR04
Beijing Primezone Technologies -spammer hosting (escalation)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40669
125.208.3.0/24 is listed on the Spamhaus Block List (SBL)
21-Apr-2006 00:26 GMT | SR04
Dirty block: namedada.com ; addwdnow.info ; etc
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40882
125.208.3.42/32 is listed on the Spamhaus Block List (SBL/ROKSO)
30-Apr-2006 03:31 GMT | SR22
Leo Kuvayev / BadCow
Spammer DNS - ns0.wingela.com
5 SBL/ROKSO listings for IPs under the responsibility of
primetelecom.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=primetelecom.cn
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : poltraini.com
Registrant:
Name : Briittaney Parbs
Email : becaisarm[]yahoo.com
Address : 358 1/2 N Gardner Stl
Zipcode : 90036
Nation : US
Tel : 3238577011
Fax :
Administrative Contact:
Name : Briittaney Parbs
Email : beca...@yahoo.com
Address : 358 1/2 N Gardner Stl
Zipcode : 90036
Nation : US
Tel : 3238577011
Fax :
Technical Contact:
Name : Briittaney Parbs
Email : beca...@yahoo.com
Address : 358 1/2 N Gardner Stl
Zipcode : 90036
Nation : US
Tel : 3238577011
Fax :
Name Servers:
Dates & Status:
Created Date 2006-04-22 10:29:20 EDT
Updated Date 2006-04-22 10:29:20 EDT
Valid Date 2007-04-22 10:29:20 EDT
Status ACTIVE
More poltraini.com sightings:
http://groups.google.com/groups/search?q=poltraini.com+group%3A*abuse&start=0&scoring=d&
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: