[email] [drugs - HealthSuite] (zapolinsde.com - sinacessi.com) Premier
TomezNet
IP 221.237.147.249
(at CHINANET-SC)
Spamvert:
zapolinsde.com IP 211.144.69.243
(at dns2.cableplus.com.cn / a.in-addr.cn / scn.com.cn)
(SBL39667 / SBL42192 - ROK4932)
More HealthSuite aka Premier Pharfmacy aka Medic Suite LTD. sightings
http://groups.google.com/groups?q=%22HealthSuite%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.172; Sun, 11 Jun 2006
03:25:37 -0700
X-YahooFilteredBulk: 221.237.147.249
X-Originating-IP: [221.237.147.249]
Return-Path: <sha...@golfworldbusiness.com>
Authentication-Results: mta113.mail.mud.yahoo.com
from=golfworldbusiness.com; domainkeys=neutral (no sig)
Received: from 207.228.2..... (EHLO xxx.web-hosting.com)
(207.228.2....) by mta113.mail.mud.yahoo.com with SMTP; Sun, 11 Jun
2006 03:25:37 -0700
Received: from -1208079152 ([221.237.147.249]) by
xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id k5BAPMQ19340 for
<xx..xx@xx..xx.com>; Sun, 11 Jun 2006 06:25:23 -0400 (EDT)
Received: from golfworldbusiness.com (-1211494168 [-1211583512]) by
grahamcomm.com (Qmailv1) with ESMTP id F7BB7A8235 for
<xx..xx@xx..xx.com>; Sun, 11 Jun 2006 02:56:01 -0700
Date: Sun, 11 Jun 2006 02:56:01 -0700
From: "Fiesta G. Cockiest" <SHA...@golfworldbusiness.com>
X-Mailer: The Bat! (v2.00.3) Personal
X-Priority: 3
Message-ID: <1769873956.2...@golfworldbusiness.com>
To: xx..xx@xx..xx.com
Subject: Premier
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------A36C22D7A04981B"
X-Virus-Scanned: Norton
Content-Length: 872
<html>
<xbody>
Man's Health<br>
Anti-Depressants<br>
Antibiotics<br>
Cholesterol<br>
Diabetes<br>
Diuretic<br>
Pain Relief<br>
Sexual Health<br>
Sleep Aids<br>
Weight Loss
<p>and more on <a target="_blank"
href="http://zapolinsde.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
>Premier Pharwmacy</a></p>
<br>
<br>
<br>
<br>
<br>
<br>
ghfgdrtpu RldRWVRCRlZGdVJaVllBVFEdW0dW
</xbody>
</html>
-- END OF SPAM --
More Morph of Premier Pharwmacy / Pharfmacy / Pharsmacy sightings:
http://groups.google.com/groups/search?q=%22Premier+Pharwmacy%22+group%3A*abuse&start=0&scoring=d&
See:
IP 221.237.147.249
http://www.moensted.dk/spam/?addr=221.237.147.249
http://cbl.abuseat.org/lookup.cgi?ip=221.237.147.249
http://www.spamhaus.org/query/bl?ip=221.237.147.249
http://spamcop.net/w3m?action=checkblock&ip=221.237.147.249
inetnum: 221.236.0.0 - 221.237.255.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
route: 221.236.0.0/15
descr: ChinaNet Sichuan Province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
http://www.cidr-report.org/cgi-bin/as-report?as=4134
3 SBL/ROKSO listings for IPs under the responsibility of CHINANET-SC
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-SC
See:
zapolinsde.com IP 211.144.69.243
ns0.sinacessi.com [211.144.68.59] (OLD IP 211.156.120.9)
ns0.thoumaybe.com [211.144.69.243] (OLD IP 222.208.183.164)
zapolinsde.com has no MX records
http://www.moensted.dk/spam/?addr=211.144.69.243
[1] dns2you/zhousvr/name2you, see http://spews.org/html/S2319.html
http://www.spamhaus.org/query/bl?ip=211.144.69.243
211.144.69.243 PTR record: reserve.cableplus.com.cn
More 211.144.69.243 sightings:
http://groups.google.com/groups/search?q=211.144.69.243+group%3A*abuse&start=0&scoring=d&
inetnum: 211.144.69.1 - 211.144.69.255
netname: CHANGNING1POPNET
descr: Cable OnLine Network CHANGNING1POPNet
descr: Internet Service Provider shnet.edu.cn
descr: Shanghai China
country: CN
route: 211.144.64.0/19
descr: Asia Netcom (proxy-registered route object)
origin: AS9812
route: 211.144.64.0/20
descr: CHINA NETCOM
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
http://www.cidr-report.org/cgi-bin/as-report?as=9929
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39667
211.144.69.0/24 is listed on the Spamhaus Block List (SBL)
06-Jun-2006 06:58 GMT | SR02
Dirty block: businessguide4u.net ; etc
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39667
211.144.69.0/24 is listed on the Spamhaus Block List (SBL/ROKSO)
22-May-2006 00:00 GMT | SR02
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42192
211.144.69.243/32 is listed on the Spamhaus Block List (SBL/ROKSO)
22-May-2006 03:27 GMT | SR09
Leo Kuvayev / BadCow
Numerous pill domains.
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
5 SBL/ROKSO listings for IPs under the responsibility of asianetcom.net
http://www.spamhaus.org/sbl/listings.lasso?isp=asianetcom.net
19 SBL/ROKSO listings for IPs under the responsibility of scn.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=scn.com.cn
More zapolinsde.com sightings:
http://groups.google.com/groups/search?q=zapolinsde.com+group%3A*abuse
Let see whois:
Registrar: HICHINA WEB SOLUTIONS (HONG KONG) LIMITED
Domain Name ..................... zapolinsde.com
Name Server ..................... ns0.thoumaybe.com
ns0.sinacessi.com
Registrant ID ................... hc231763285-cn
Registrant Name ................. mingqiang zhang
Registrant Organization ......... lxm
Registrant Address .............. Jun gong 1219
Registrant City ................. s h
Registrant Province/State ....... s h
Registrant Postal Code .......... 200093
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.02176886639 -
Registrant Fax .................. +86.02176886676 -
Registrant Email ................ dimdimdim8888[]yahoo.com.cn
Administrative ID ............... hc231763285-cn
Administrative Name ............. mingqiang zhang
Administrative Organization ..... lxm
Administrative Address .......... Jun gong 1219
Administrative City ............. s h
Administrative Province/State ... s h
Administrative Postal Code ...... 200093
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.02176886639 -
Administrative Fax .............. +86.02176886676 -
Administrative Email ............ dimdim...@yahoo.com.cn
Billing ID ...................... hichina001-cn
Billing Name .................... hichina
Billing Organization ............ HiChina Web Solutions Limited
Billing Address ................. 3/F., HiChina Mansion
No.27 Gulouwai Avenue
Dongcheng District
Billing City .................... Beijing
Billing Province/State .......... Beijing
Billing Postal Code ............. 100011
Billing Country Code ............ CN
Billing Phone Number ............ +86.01064242299 -
Billing Fax ..................... +86.01064258796 -
Billing Email ................... doma...@hichina.com
Technical ID .................... hichina001-cn
Technical Name .................. hichina
Technical Organization .......... HiChina Web Solutions Limited
Technical Address ............... 3/F., HiChina Mansion
No.27 Gulouwai Avenue
Dongcheng District
Technical City .................. Beijing
Technical Province/State ........ Beijing
Technical Postal Code ........... 100011
Technical Country Code .......... CN
Technical Phone Number .......... +86.01064242299 -
Technical Fax ................... +86.01064258796 -
Technical Email ................. doma...@hichina.com
Expiration Date ................. 2007-06-02 02:00:35
See also more dimdimdim8888[]yahoo.com.cn sightings:
http://groups.google.com/groups/search?q=%22dimdi...@yahoo.com.cn%22+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/d09144a63623170c
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: