[email] [drugs - ED Med] (indicterjd.st - transferln.com) Ci*lis letter fot you!
TomezNet
IP 219.95.28.88 tm.net.my
(at ns1.tm.net.my / telekom.com.my)
Spamvert:
0iorn95i6dor90i0llit5ii0.indicterjd.st IP 220.113.9.75
(SBL43773, SBL44839 and SBL45165) (at gwbn.net.cn)
ln.transferln.com IP 222.170.114.148
(SBL45164 - SBL45179) (at chinanet-hl)
Site (Copyright © ED Med Choice Online. All rights reserved.) at:
http://0iorn95i6dor90i0llit5ii0.indicterjd.st/lccly/
More ED Med Chest Online / ED Med Choice Online Viagra sightings:
http://groups.google.com/groups/search?q=%22ED+Med%22+group%3A*abuse&start=0&scoring=d&
Supported by Visa and MasterCard
More info below:
====================
X-SID-PRA: Guy Atkins <tku...@shawlumberco.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43ZBbj9mdwwi+Dl8Yi0qKmqDSxsGv8hEIE=
Received: from tomts19-srv.bellnexxia.net ([209.226.175.73]) by
bay0-pamc1-f3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 3 Aug 2006 04:26:36 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip5.bellnexxia.net with ESMTP; 03 Aug 2006 07:26:29 -0400
Message-Id: <57848o$1cr...@toip5.bellnexxia.net>
Received: (qmail 20072 invoked by uid 110); 3 Aug 2006 07:26:28 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 20058 invoked from network); 3 Aug 2006 07:26:26 -0400
Received: from tm.net.my (219.95.28.88)
by xx..xx..xx.net with SMTP; 3 Aug 2006 07:26:26 -0400
From: "Guy Atkins" <tku...@shawlumberco.com>
To: xx..xx@xx..xx.com
Subject: Ci*lis letter fot you!
Date: Wed, 2 Aug 2006 23:27:37 -0480
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_006A_01C6B6CE.4BB41890"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Return-Path: tku...@shawlumberco.com
X-OriginalArrivalTime: 03 Aug 2006 11:26:36.0467 (UTC)
FILETIME=[AE51C030:01C6B6EF]
This is a multi-part message in MIME format.
------=_NextPart_000_006A_01C6B6CE.4BB41890
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Having problems maintaining a full erection or one at all?\/lagra
works=20
excellently for your problem.
Get your confidence back, and have great s e x.
------=_NextPart_000_006A_01C6B6CE.4BB41890
Content-Type: text/html;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html;
charset=Windows-1252">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY><html><head>
<meta http-equiv=3D"Content-Type" content=3D"text/html;=20
charset=3Dus-ascii">
<meta content=3D"MSHTML 6.00.2800.1106" name=3D"GENERATOR">
<style></style></head>
<body bgcolor=3D"#ffffff">
<div style=3D"border-color: #00FFFF; border-right-width: 0px;=20
border-bottom-width: 0px; margin-bottom: 0px;" align=3D"center">
<table style=3D"border: 1px; border-style: solid;
border-color:#000000;=20
font-family: Tahoma; font-weight: bold;" bgcolor=3D"#FFFF33"=20
cellpadding=3D"5" cellspacing=3D"1">
<tr><td style=3D"border: 1px; border-style: solid;
border-color:#000000;=20
color:#FFFF33" bgcolor=3D"#AA0099" align=3Dcenter>
<div><br>
Having <font>prob</font><font>lems</font> maintaining a full erection
or=20
one at all?<br>
<font>\/l</font><font>agra</font> works excellently for your=20
<font>pro</font><font>blem.</font>
<br></div>
</td></tr>
<tr><td align=3Dcenter><a=20
href=3D"http://0iorn95i6dor90i0llit5ii0.indicterjd.st">
Get your confidence back, and have great <B>s<font> e=20
</font>x</B>.</a></td></tr>
</table>
</div></body></html></BODY></HTML>
------=_NextPart_000_006A_01C6B6CE.4BB41890--
-- END OF SPAM --
See:
IP 219.95.28.88 tm.net.my
http://www.moensted.dk/spam/?addr=219.95.28.88
http://spamcop.net/w3m?action=checkblock&ip=219.95.28.88
http://www.spamsources.fabel.dk/ip/219.95.28.88
inetnum: 219.95.0.0 - 219.95.127.255
netname: ADSL-STREAMYX-TMNET
descr: TMNET
country: MY [Malaysia]
person: Mahadi Harun
address: Level 26 (North),
address: Menara Telekom
route: 219.95.0.0/19
descr: TMnet route object
origin: AS4788
mnt-by: MAINT-AS4788
changed: amza...@tm.net.my
ASN: 4788
ASN Name: TMNET-AS-AP (TM Net, Internet Service Provider)
Country IP Range: 219.95.0.0 to 219.95.255.255
Country fraud profile: High
http://www.cidr-report.org/cgi-bin/as-report?as=4788
5 SBL/ROKSO listings for IPs under the responsibility of tm.net.my
http://www.spamhaus.org/sbl/listings.lasso?isp=tm.net.my
See:
0iorn95i6dor90i0llit5ii0.indicterjd.st IP 220.113.9.75
tr.transferln.com A IN 4263 220.113.9.75
ln.transferln.com A IN 4263 89.248.175.38, 222.170.114.148
NS1.BAHNHOF.NET [195.178.160.2]
0iorn95i6dor90i0llit5ii0.indicterjd.st has no MX records ->
indicterjd.st has no MX records
ln.transferln.com.:
Parent server (ns1.bahnhof.net) says A record is 89.248.175.38, but
authoritative DNS server (220.113.9.75) says it is 222.170.114.148
http://www.moensted.dk/spam/?addr=220.113.9.75
http://www.spamhaus.org/query/bl?ip=220.113.9.75
More 220.113.9.75 sightings:
http://groups.google.com/groups/search?q=220.113.9.75+group%3A*abuse&start=0&scoring=d&
Listed:
SBL43773, SBL44839 and SBL45165
Leo Kuvayev / BadCow
12 SBL/ROKSO listings for IPs under the responsibility of gwbn.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=gwbn.net.cn
inetnum: 220.113.9.0 - 220.113.9.255
netname: GWBN-BEIJING-NET10
country: CN
descr: FOR GREAT WALL BROADBAND NETWORK SERVICE ACCESS IN BEIJING
NET10
route: 220.113.0.0/20
descr: citic network co.,ltd
bj-gw
origin: as18118
mnt-by: MAINT-AS17430
changed: m...@citicnet.com
route: 220.113.0.0/20
descr: China United Telecom
origin: AS4837
mnt-by: MAINT-AS4837
changed: jin...@bj.cnuninet.net
ASN: 18118
ASN Name: CITICNET-AP (CITIC Networks Management Co.,Ltd.)
Country IP Range: 220.112.0.0 to 220.115.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=18118
Let see whois.nic.st:
Registration Service Provided By: ST Registry
Contact: regi...@nic.st
Domain Name: indicterjd.st
Registrar: ST Registry
Whois at: whois.nic.st
Name Server: tr.transferln.com
Name Server: ln.transferln.com
Updated Date: 01-Aug-2006
Creation Date: 01-Aug-2006
Domain name: indicterjd.st
Administrative Contact:
Company Name: C J HALL
Contact: C J HALL
Address: 10, Regent Street
State:
City: Aberdare
Country: UK
Status: Active
Name Servers:
tr.transferln.com
ln.transferln.com
See:
ln.transferln.com IP 222.170.114.148
ln.transferln.com has no MX records -> transferln.com has no MX records
http://www.moensted.dk/spam/?addr=222.170.114.148
http://www.spamhaus.org/query/bl?ip=222.170.114.148
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45164
222.170.114.0/24 is listed on the Spamhaus Block List (SBL)
03-Aug-2006 10:52 GMT | SR04
Dirty block - crawling with spammers for months
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45179
222.170.114.148/32 is listed on the Spamhaus Block List (SBL/ROKSO)
03-Aug-2006 10:49 GMT | SR22
Leo Kuvayev / BadCow - ROK4932
Spam webhosting - impetigobk.com (ED Med Choice)
8 SBL/ROKSO listings for IPs under the responsibility of chinanet-hl
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-hl
Let see whois:
Registrar: TUCOWS INC.
Registrant:
Private
1610 Vine St
Texas, Texas 79901
US
Domain name: TRANSFERLN.COM
Administrative Contact:
mortia, larti larti...@yahoo.com
1610 Vine St
Texas, Texas 79901
US
9156726399
Technical Contact:
Fenison, Elden sup...@cybcon.com
30240 SW Parkway Ave #10
Wilsonville, OR 97070
US
+1.5032484449 Fax: +1.5036827701
Registration Service Provider:
CyberConnectics, sup...@cybcon.com
503-248-4449
503-682-7701 (fax)
http://www.cyberconnectics.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: TUCOWS, INC.
Record last updated on 01-Aug-2006.
Record expires on 31-Jul-2007.
Record created on 31-Jul-2006.
Domain servers in listed order:
TR.TRANSFERLN.COM 220.113.9.75
LN.TRANSFERLN.COM 222.170.114.148
Domain status: ACTIVE
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/d0c354910024fd27
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: