[email] [drugs - Legal RX] [82.107.33.81] (betgisarmer.com - 217.67.238.168 - cluvditch.com - goddtraulism.com - vigilupanka.com) Login Italy Playlist
TomezNet
IP 82.107.33.81 host81-33-static.107-82-b.business.telecomitalia.it
(at dnsts.interbusiness.it)
Spamvert:
betgisarmer.com IP 60.2.225.106
(at ns.hesjptt.net.cn / CNCGROUP-HE)
New Yambo Pharmacy image hosting:
http://217.67.238.168:8080/legalrx/images/award_bbb.gif
IP 217.67.238.168
(at nss1.initworks.net / ns03.grafix-is.com)
Copyright 1994-2007 © International Legal RX medications All rights
reserved.
More Yambo Financials Legal RX sightings:
http://groups.google.com/groups/search?q=%22Legal+RX%22+group%3A*abuse&start=0&scoring=d&
Plenty of Forged Certificates and logos as always.
More info below:
====================
X-SID-PRA: tossed chair <bl...@pcdialogs.com>
X-Message-Info: txF49lGdW42bUL9FyGHt9l9N3UTpAmd2imFucxNpJUU=
Received: from tomts32-srv.bellnexxia.net ([209.226.175.106]) by bay0-
pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 13 Mar 2007 21:55:26 -0700
Received: from [MUNGED]
by toip15.srvr.bell.ca with ESMTP; 14 Mar 2007 00:55:19 -0400
Received: (qmail 28599 invoked by uid 110); 14 Mar 2007 00:55:19 -0400
Delivered-To: [MUNGED]
Received: (qmail 28417 invoked from network); 14 Mar 2007 00:55:11
-0400
Received: from host81-33-static.107-82-b.business.telecomitalia.it
(82.107.33.81)
by [MUNGED] with SMTP; 14 Mar 2007 00:55:11 -0400
Message-ID: <001101c765f4$ee2e3620$00000000@ristoran9911da>
From: "tossed chair" <bl...@pcdialogs.com>
To: [MUNGED]
Subject: Login Italy Playlist
Date: Wed, 14 Mar 2007 05:55:04 +0100
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_000D_01C765FD.4FF29E20"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Return-Path: bl...@pcdialogs.com
X-OriginalArrivalTime: 14 Mar 2007 04:55:26.0701 (UTC)
FILETIME=[FB5DE9D0:01C765F4]
------=_NextPart_000_000D_01C765FD.4FF29E20
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_000E_01C765FD.4FF29E20"
------=_NextPart_001_000E_01C765FD.4FF29E20
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Induced, by among, correspond work?
Lmtf vqcdoqd yg producer pdfwriter moddate calgray, calrgb? Mocas,
fete =
skin bones exhibition infiniti.
Make want rather, needing downsample larger need example!
Purposes registered trademarks eastman corp linus torvalds foxnewscom
=
crazy.
Timesdaily guardian unlimited scotsman forbesall gulf timesjudge
scoffs. =
Vrouwen bezingt hen carolina boombastic wasnt.
Lastchar widths encoding tms mvviyy aihp.
Costume changes cirque du soleil acrobatics. Relevant following =
languages prefer view, items. Hopes tonight her crazed bikini
submitted!
Iii iv title vi! Growth brought promuscle antifat drug!
Produced accordance iso apple.
Way lidnsay showing quite much bybreitman nip slip, year. Peninsula =
aleutian islands selected, neal robert mcgimsey, michael diggles. Web
=
throughout image numbers match names?
Population genetics statistics then, level same edaphic from coastal.
Faq links website user. Courteney cox arquette david fincher
hasselhoff =
denzel washington diana? Streets, perform seci am fourth, stalker =
commentsi trying stalk. Willie nelson real regina spektor tunes big.
Regina spektor tunes big. Any but please cite system produced
accordance =
iso apple.
Usmake linkcite articlein modified license copyrights details, =
wikimedia. Americans act section five, sizes who commercial rom, =
contained. Heraldall orgxbox wayne perry recurring. Tony blair drafts,
=
laws slash propose mandatory reductions.
Anderson, gives daily kiss check out.
Buses christi na aint man tourwmv dishes jordanwmv. Off, spreads, =
rolling esquire, overseas pregnancy lyric.
Esquire overseas pregnancy lyric everytime, fake?
Rice nagy, broad objective my is describe traits. Government neither,
=
nor thereof employees makes. Million pc should intel pentium microsoft
=
osr se millennium. Sylvester stallone facing heavy hormone charge, =
importing growth brought! Halfpage layouts fullpage lpi obtaining =
original.
Commentdvd timesghost priced patrick sawyze whoopie.
Gross manchester evening national indoor, birmingham. Echte officile =
nieuwe, album. Usgs services askusgs mf isbn line congress laser!
Viewdemi graduate remakefeb rb fray? Muslims vancouver sun worcester =
elise ackerman filed.
Receive rodeo walk beverly hills, arrivals, actors kutchers.
Sensations nicholson bald york, fitted tailored, leaves. Play
blackjack =
believe beginners, luck. Fully assistive technology readers?
------=_NextPart_001_000E_01C765FD.4FF29E20
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2180" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2><A HREF=3Dhttp://betgisarmer.com/
><IMG =
alt=3D""=20
hspace=3D0 src=3D"cid:000c01c765f4$ee2e3620$00000000@ristoran9911da" =
align=3Dbaseline=20
border=3D0></A></FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Induced, by among, correspond =
work?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Lmtf vqcdoqd yg producer pdfwriter =
moddate calgray,=20
calrgb? Mocas, fete skin bones exhibition infiniti.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Make want rather, needing downsample
=
larger need example!</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Purposes registered trademarks
eastman =
corp linus=20
torvalds foxnewscom crazy.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Timesdaily guardian unlimited
scotsman =
forbesall=20
gulf timesjudge scoffs. Vrouwen bezingt hen carolina boombastic =
wasnt.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Lastchar widths encoding tms mvviyy =
aihp.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Costume changes cirque du soleil =
acrobatics.=20
Relevant following languages prefer view, items. Hopes tonight her =
crazed bikini submitted!</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Iii iv title vi! Growth brought =
promuscle antifat drug!</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Produced accordance iso =
apple.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Way lidnsay showing quite much =
bybreitman nip slip,=20
year. Peninsula aleutian islands selected, neal robert mcgimsey,
michael =
diggles. Web throughout image numbers match names?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Population genetics statistics then,
=
level same=20
edaphic from coastal.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Faq links website user. Courteney cox
=
arquette=20
david fincher hasselhoff denzel washington diana? Streets, perform
seci =
am=20
fourth, stalker commentsi trying stalk. Willie nelson real regina =
spektor tunes big.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Regina spektor tunes big. Any but =
please cite=20
system produced accordance iso apple.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Usmake linkcite articlein modified =
license=20
copyrights details, wikimedia. Americans act section five, sizes who =
commercial=20
rom, contained. Heraldall orgxbox wayne perry recurring. Tony blair =
drafts, laws=20
slash propose mandatory reductions.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Anderson, gives daily kiss check =
out.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Buses christi na aint man tourwmv =
dishes jordanwmv.=20
Off, spreads, rolling esquire, overseas pregnancy lyric.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Esquire overseas pregnancy lyric =
everytime, fake?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Rice nagy, broad objective my is =
describe traits.=20
Government neither, nor thereof employees makes. Million pc should
intel =
pentium=20
microsoft osr se millennium. Sylvester stallone facing heavy hormone =
charge,=20
importing growth brought! Halfpage layouts fullpage lpi obtaining =
original.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Commentdvd timesghost priced patrick
=
sawyze whoopie.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Gross manchester evening national =
indoor,=20
birmingham. Echte officile nieuwe, album. Usgs services askusgs mf
isbn =
line=20
congress laser!</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Viewdemi graduate remakefeb rb fray?
=
Muslims=20
vancouver sun worcester elise ackerman filed.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Receive rodeo walk beverly hills, =
arrivals, actors kutchers.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Sensations nicholson bald york,
fitted =
tailored,=20
leaves. Play blackjack believe beginners, luck. Fully assistive =
technology=20
readers?</FONT></DIV></BODY></HTML>
------=_NextPart_001_000E_01C765FD.4FF29E20--
------=_NextPart_000_000D_01C765FD.4FF29E20
Content-Type: image/gif;
name="selectie vijftig.gif"
Content-Transfer-Encoding: base64
Content-ID: <000c01c765f4$ee2e3620$00000000@ristoran9911da>
------=_NextPart_000_000D_01C765FD.4FF29E20--
*** REMOVED Attachment: selectie vijftig.gif (0.01 MB) ****
-- END OF SPAM --
See:
IP 82.107.33.81 host81-33-static.107-82-b.business.telecomitalia.it
http://www.moensted.dk/spam/?addr=82.107.33.81
More interbusiness.it sightings:
http://www.moensted.dk/spam/?addr=82.107.33.81
http://groups.google.com/groups/search?q=interbusiness.it+group%3A*abuse&start=0&scoring=d&
inetnum: 82.104.0.0 - 82.107.255.255
org: ORG-TIWS1-RIPE
netname: IT-TIWS-20031022
descr: Telecom Italia Wireline Services
descr: PROVIDER Local Registry
tech-c: PP6677-RIPE
notify: paolo2....@telecomitalia.it
notify: vincenz...@telecomitalia.it
postmaster and abuse[]interbusiness.it are listed in rfc-ignorant.org
database
route: 82.107.0.0/16
descr: INTERBUSINESS
origin: AS3269
notify: net...@cgi.interbusiness.it
mnt-by: TIWS-MNT
mnt-routes: INTERB-MNT
changed: net...@telecomitalia.it
ASN: 3269
ASN Name: ASN-IBSNAZ (TELECOM ITALIA)
Country (per IP registrar): IT [Italy]
Country IP Range: 82.104.0.0 to 82.107.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3269
16 SBL/ROKSO listings for IPs under the responsibility of
interbusiness.it
http://www.spamhaus.org/sbl/listings.lasso?isp=interbusiness.it
See:
betgisarmer.com IP 60.2.225.106
ns1.cluvditch.com [83.15.82.74] [TTL=172800] [PL]
ns1.goddtraulism.com [83.15.82.74] [TTL=172800] [PL]
ns2.vigilupanka.com [63.223.11.14] [TTL=172800] [US]
betgisarmer.com has no MX records
http://www.moensted.dk/spam/?addr=60.2.225.106
http://www.spamhaus.org/query/bl?ip=60.2.225.106
http://www.spamhaus.org/pbl/query/PBL117476
http://spamcop.net/w3m?action=checkblock&ip=60.2.225.106
http://www.apews.org/?page=test&C=104&E=102292&ip=60.2.225.106
inetnum: 60.0.0.0 - 60.10.255.255
netname: CNCGROUP-HE
descr: CNCGROUP Hebei Province Network
person: jinyuan lu
nic-hdl: JL2284-AP
e-mail: jinyu...@heinfo.net
changed: luji...@msn.com
route: 60.0.0.0/13
descr: CNC Group HeBei Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country (per IP registrar): CN [China]
Country IP Range: 60.0.0.0 to 60.31.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837
3 SBL/ROKSO listings for IPs under the responsibility of CNCGROUP-HE
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-HE
Let see whois:
Registrar: DSTR ACQUISITION VII, LLC
Registrant:
Icek Pankovich (BETGISARMER-COM-DOM)
Sos. Mihai Bravu,No. 5
Bl. 4, Entr. 4, Apt. 9
Bucuresti, Sector 2 76101
Romania
+040.0212516407
+040.0212516407
icek_pa...@yahoo.com
Domain Name: BETGISARMER.COM
Status: PROTECTED
Administrative Contact:
Icek Pankovich icek_pankovich[]yahoo.com
Sos. Mihai Bravu,No. 5
Bl. 4, Entr. 4, Apt. 9
Bucuresti, Sector 2 76101
Romania
+040.0212516407
Fax- +040.0212516407
Technical Contact, Zone Contact:
Icek Pankovich icek_pa...@yahoo.com
Sos. Mihai Bravu,No. 5
Bl. 4, Entr. 4, Apt. 9
Bucuresti, Sector 2 76101
Romania
+040.0212516407
Fax- +040.0212516407
Record last updated on 12-Mar-2007.
Record expires on 05-Mar-2008.
Record created on 05-Mar-2007.
Domain servers in listed order:
Name Server: ns1.goddtraulism.com
Name Server: ns2.vigilupanka.com
Name Server: ns1.cluvditch.com
More betgisarmer.com sightings:
http://groups.google.com/groups/search?q=betgisarmer.com+group%3A*abuse
Se:
IP 217.67.238.168
Resolved 217.67.238.168 to a.e01.initworks.net to e01.initworks.com to
e01.initworks.net to e01.kasanderfilm.nl
e01.kasanderfilm.nl. has no MX records -> kasanderfilm.nl has no MX
records
http://www.moensted.dk/spam/?addr=217.67.238.168
More 217.67.238.168 sightings:
http://groups.google.com/groups/search?q=217.67.238.168+group%3A*abuse
inetnum: 217.67.238.0 - 217.67.238.255
netname: GFX-COLO-4
descr: GrafiX Co-location Capelle - Range 7
org: ORG-GIB1-RIPE
org-name: GrafiX Internet B.V.
route: 217.67.224.0/19
descr: GrafiX Internet B.V.
org: ORG-GIB1-RIPE
origin: AS16131
mnt-by: GFX-MNT
changed: mic...@grafix.nl
ASN: 16131
ASN Name: GRAFIX-IS (GrafiX Internet B.V.)
Country (per IP registrar): NL [Netherlands]
Country IP Range: 217.67.224.0 to 217.67.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=16131
See:
ns1.cluvditch.com IP 83.15.82.74
ns1.cluvditch.com has no MX records -> cluvditch.com has no MX records
http://www.moensted.dk/spam/?addr=83.15.82.74
http://www.spamhaus.org/pbl/query/PBL114473
83.15.82.74 PTR record: eja74.internetdsl.tpnet.pl
at ns2.tpnet.pl / telekomunikacja.pl
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL50921
83.15.82.74/32 is listed on the Spamhaus Block List (SBL/ROKSO)
06-Feb-2007 10:13 GMT | SR20
Yambo Financials.
Yambo nameservers/webhosts (compromised systems)
27 SBL/ROKSO listings for IPs under the responsibility of tpnet.pl
http://www.spamhaus.org/sbl/listings.lasso?isp=tpnet.pl
Let see whois:
Registrar: MONIKER ONLINE SERVICES, INC.
Domain Name: CLUVDITCH.COM
Registrant [594650]:
John Placher
2613 Hardwood Ct
Louisville
CT
40214
US
Administrative Contact [594650]:
John Placher letn4west[]yahoo.com
2613 Hardwood Ct
Louisville
CT
40214
US
Phone: +1.5023617476
Billing Contact [594650]:
John Placher letn...@yahoo.com
2613 Hardwood Ct
Louisville
CT
40214
US
Phone: +1.5023617476
Technical Contact [594650]:
John Placher letn...@yahoo.com
2613 Hardwood Ct
Louisville
CT
40214
US
Phone: +1.5023617476
Domain servers in listed order:
NS1.CLUVDITCH.COM 83.15.82.74
NS2.CLUVDITCH.COM 63.223.11.14
Record created on: 2007-01-29 14:23:31.0
Database last updated on: 2007-03-13 05:08:07.937
Domain Expires on: 2008-01-29 14:23:44.0
More cluvditch.com sightings:
http://groups.google.com/groups/search?q=cluvditch.com+group%3A*abuse
See:
ns1.goddtraulism.com IP 83.15.82.74
ns1.goddtraulism.com has no MX records -> [goddtraulism.com has 1 MX
record mail.goddtraulism.com (10)]
http://www.moensted.dk/spam/?addr=83.15.82.74
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL50921
83.15.82.74 PTR record: eja74.internetdsl.tpnet.pl
at ns2.tpnet.pl / telekomunikacja.pl
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... goddtraulism.com
Creation Date........ 2006-12-23 22:54:41
Registration Date.... 2006-12-23 22:54:41
Expiry Date.......... 2007-12-23 22:54:41
Organisation Name.... zhou fei
Organisation Address. fu jian xiamen
Organisation Address.
Organisation Address. xia men
Organisation Address. 321000
Organisation Address. FJ
Organisation Address. CN
Admin Name........... zhou fei
Admin Address........ fu jian xiamen
Admin Address........
Admin Address........ xia men
Admin Address........ 321000
Admin Address........ FJ
Admin Address........ CN
Admin Email.......... admin[]champakdagon.com
Admin Phone.......... +86.59232100232
Admin Fax............ +86.59232100232
Tech Name............ zhou fei
Tech Address......... fu jian xiamen
Tech Address.........
Tech Address......... xia men
Tech Address......... 321000
Tech Address......... FJ
Tech Address......... CN
Tech Email........... ad...@champakdagon.com
Tech Phone........... +86.59232100232
Tech Fax............. +86.59232100232
Bill Name............ zhou fei
Bill Address......... fu jian xiamen
Bill Address.........
Bill Address......... xia men
Bill Address......... 321000
Bill Address......... FJ
Bill Address......... CN
Bill Email........... ad...@champakdagon.com
Bill Phone........... +86.59232100232
Bill Fax............. +86.59232100232
Name Server.......... ns2.goddtraulism.com
Name Server.......... ns1.goddtraulism.com
More goddtraulism.com sightings:
http://groups.google.com/groups/search?q=goddtraulism.com+group%3A*abuse
See:
ns2.vigilupanka.com IP 63.223.11.14
ns2.vigilupanka.com has no MX records -> [vigilupanka.com has 1 MX
record mail.vigilupanka.com (10)]
http://www.moensted.dk/spam/?addr=63.223.11.14
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL49084
63.223.11.14/32 is listed on the Spamhaus Block List (SBL/ROKSO)
27-Feb-2007 03:08 GMT | SR21
Yambo Financials.
Spam DNS Server
22 SBL/ROKSO listings for IPs under the responsibility of
pccwglobal.com
http://www.spamhaus.org/SBL/listings.lasso?isp=pccwglobal.com
Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name:vigilupanka.com
Registrant:
cheng zheng
xin yu city gaoxin tech
338000
Administrative Contact:
cheng zheng
cheng zheng
xin yu city gaoxin tech
xin yu Jiangxi 338000
China
tel: 86 0790 6860686
fax: 86 0790 6860686
chenm[]lalachikla.com
Technical Contact:
cheng zheng
cheng zheng
xin yu city gaoxin tech
xin yu Jiangxi 338000
China
tel: 86 0790 6860686
fax: 86 0790 6860686
ch...@lalachikla.com
Billing Contact:
cheng zheng
cheng zheng
xin yu city gaoxin tech
xin yu Jiangxi 338000
China
tel: 86 0790 6860686
fax: 86 0790 6860686
ch...@lalachikla.com
Registration Date: 2007-03-06
Update Date: 2007-03-12
Expiration Date: 2008-03-06
Primary DNS: ns1.vigilupanka.com 83.15.82.74
Secondary DNS: ns2.vigilupanka.com 63.223.11.14
More vigilupanka.com sightings:
http://groups.google.com/groups/search?q=vigilupanka.com+group%3A*abuse
And SEE lalachikla.com from Registration Data:
lalachikla.com IP N/A
ns2.xinnet.cn. [210.51.170.67 (NO GLUE)] [CN]
ns2.xinnetdns.com. [210.51.170.48] [TTL=172800] [CN]
SOA record [TTL=3600] is:
Primary nameserver: ns2.xinnetdns.com
Hostmaster E-mail address: hostm...@xinnetdns.com
Serial #: 1083128244
Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name: lalachikla.com
Registrant:
cheng zheng
xin yu city gaoxin tech
338000
Administrative Contact:
cheng zheng
cheng zheng
xin yu city gaoxin tech
xin yu Jiangxi 338000
China
tel: 86 0790 6860686
fax: 86 0790 6860686
chenm[]lalachikla.com
Technical Contact:
cheng zheng
cheng zheng
xin yu city gaoxin tech
xin yu Jiangxi 338000
China
tel: 86 0790 6860686
fax: 86 0790 6860686
ch...@lalachikla.com
Billing Contact:
cheng zheng
cheng zheng
xin yu city gaoxin tech
xin yu Jiangxi 338000
China
tel: 86 0790 6860686
fax: 86 0790 6860686
ch...@lalachikla.com
Registration Date: 2007-03-06
Update Date: 2007-03-06
Expiration Date: 2008-03-06
Primary DNS: ns2.xinnetdns.com 210.51.170.48
Secondary DNS: ns2.xinnet.cn 210.51.170.67
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/fdaf0b103eb4829e
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/df00ddfe8ecfd651
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: