[email] [drugs - VIP Pharmacy] (fortick.com - specialunique.info - topuguide.info - scumowl.info - reftdwu.info) shame of sex? we can change it
TomezNet
IP 84.3.181.151 catv5403B597.pool.t-online.hu
(at matav.net / telekom.hu)
Spamvert:
gnk61.fortick.com IP 82.76.25.36
(at ns2.rdsnet.ro)
www.fortick.com IP 213.183.228.226
(at ns.dio.ru)
See:
ns1.fortick.com A IN 600 82.76.25.36, 213.183.228.226
ns2.fortick.com A IN 600 82.76.25.36, 213.183.228.226
ns3.fortick.com A IN 600 109.51.200.45
AND:
ns2.topuguide.info IP 200.171.136.123 and 200.171.161.91
ns1.therotech.info IP 200.171.37.115 and 213.155.197.172
ns2.reftdwu.info IP 200.171.161.91
ns1.scumowl.info IP 200.171.37.115 and 213.155.197.172
specialunique.info Resolved to 68.142.212.40 to 68.142.212.41 to
68.142.212.42 to 68.142.212.43 to 68.142.212.98 to 68.142.212.99
(at yahoo.com)
Yambo Financials (ROK6271) VIP Pharmacy aka MyCanadianPharmacy Corp.
sightings:
http://groups.google.com/groups/search?q=%22Vip+Pharmacy%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.166; Tue, 20 Jun 2006
01:03:48 -0700
X-YahooFilteredBulk: 84.3.181.151
X-Originating-IP: [84.3.181.151]
Return-Path: <br...@jogo.net>
Authentication-Results: mta308.mail.mud.yahoo.com from=jogo.net;
domainkeys=neutral (no sig)
Received: from 207.58.1.... (EHLO xx..xx..xx.net) (207.58.1....) by
mta308.mail.mud.yahoo.com with SMTP; Tue, 20 Jun 2006 01:03:48 -0700
Received: (qmail 7909 invoked by uid 110); 20 Jun 2006 08:03:48
-0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 7392 invoked from network); 20 Jun 2006 08:03:47
-0000
Received: from catv5403b597.pool.t-online.hu (HELO
KAPRONCZAI.uooyw.net) (84.3.181.151) by xx..xx..xx.net with SMTP; 20
Jun 2006 08:03:46 -0000
Received: from unknown (HELO ns1.csx.jp) (221.251.37.9) by
KAPRONCZAI.uooyw.net with SMTP; Tue, 20 Jun 2006 10:04:15 -0100
From: "Vickie Rosenberg" <br...@jogo.net>
To: xx..xx@xx..xx.com
Subject: shame of sex? we can change it
Date: Tue, 20 Jun 2006 10:04:15 -0100
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: CoEJjcVa5E421r5reAagCWoHibBL6lbFDHdT
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Content-Length: 1000
Cialis Soft Tabs is the new impotence treatment drug that everyone is
talking about. It has benefits over Viagra and other ED treatment
solutions. Here goes some reasons to choose Cialis Soft Tabs:
1. You can mix alcohol drinks with Cialis Soft Tabs without any
undesired effects.
2.Cialis Soft Tabs does not make you feel dizzy or make vision blurred,
so you can easily drive a car or operate heavy machinery.
3.Cialis soft tabs works much faster than any known ED treatment
solution. Cialis Soft Tabs enters the bloodstream directly instead of
going
through the stomach, thus you need only 15 minutes till you feel the
effect. Just look at the graph below
If you are interested ? Just click here and Read more about it
http://gnk61.fortick.com/ct
AND ALSO
Cialis Soft Tabs formula is effective for 95% of the patients. If this
treatment is not effective for you, we will refund you for every
unopened pack. All you have to do is send them back, and we will
immediatley
refund your account!
-- END OF SPAM --
www.fortick.com claims to be:
© Copyright VIP Pharmacy, 2000-2006. All Rights Reserved.
Plenty of forged site certificates and logos served from the same
domain.
* Web Site Awards
The Web Site Award is issued once a year by The Web Marketing
Association.
* VeriSign Secure
VIP Pharmacy LTD is a Soltrus Secure Site
Status: Valid
Validity Period: 18-JUL-05 - 18-JUL-06
Server ID Information:
Country = US
State = FL
Locality = New Port Richey
Organization = Technical Consultants and Experts Group Inc
Organizational Unit = TCE Group
Organizational Unit = Terms of use at Verisign (c) 04
Organizational Unit = Authenticated by Verisign
Organizational Unit = Member, VeriSign Trust Network
Common Name = VIP Pharmacy
* This Site uses thawte SSL Certificate
[ organization ] VIP Pharmacy Ltd
[ current status ] Valid
[ valid from ] 2005.09.06
[ valid until ] 2006.09.16
* Express Shipping
This site is certified by Express Shipping Bureau.
Organization: VIP Pharmacy
The Seal is valid untill: 2006.05.12
Current Seal Status: Valid
* FDA Approved
All the products on the site are approved by FDA.
Contact us:
VIP Pharmacy Headquarters
USA, New Port Richey
FL 34652
See also Yambo Financials (ROK6271) MyCanadianPharmacy Corp. sightings:
http://groups.google.com/groups/search?q=%22MyCanadianPharmacy%22+group%3A*abuse&start=0&scoring=d&
See:
IP 84.3.181.151 catv5403B597.pool.t-online.hu
http://www.moensted.dk/spam/?addr=84.3.181.151
http://cbl.abuseat.org/lookup.cgi?ip=84.3.181.151
http://www.spamhaus.org/query/bl?ip=84.3.181.151
inetnum: 84.3.0.0 - 84.3.255.255
netname: CATV-TO
descr: CATV clients (T-Online dynamic pool)
descr: Hungarian Telecom
country: HU
route: 84.0.0.0/14
descr: Hungarian Telecom , T-Online Hungary
descr: Public Internet Access Provider
descr: Budapest, Hungary
descr: HU
origin: AS5483
Country IP Range: 84.0.0.0 to 84.3.255.255
Country fraud profile: High
ASN Name: HTC-AS (Hungarian Telecom)
http://www.cidr-report.org/cgi-bin/as-report?as=5483
3 SBL listings for IPs under the responsibility of matav.net
http://www.spamhaus.org/sbl/listings.lasso?isp=matav.net
See:
IP 221.251.37.9 server.csx.jp
Resolved 221.251.37.9 to 9.0/24.37.251.221.in-addr.arpa to
server.csx.jp
at ns1.platz.jp / ns02.usen.ad.jp
http://www.moensted.dk/spam/?addr=221.251.37.9
More 221.251.37.9 sightings:
http://groups.google.com/groups/search?q=221.251.37.9+group%3A*abuse
See:
gnk61.fortick.com IP 82.76.25.36
ns1.fortick.com A IN 600 82.76.25.36
ns2.fortick.com A IN 600 82.76.25.36
ns3.fortick.com A IN 600 109.51.200.45
ns2.topuguide.info [200.171.136.123]
ns1.therotech.info [200.171.37.115]
gnk61.fortick.com has no MX records -> [fortick.com has 1 MX record
mail.fortick.com (10)]
http://www.moensted.dk/spam/?addr=82.76.25.36
82.76.25.36 PTR record: 82-76-25-36.rdsnet.ro
inetnum: 82.76.25.0 - 82.76.25.255
netname: RDSNET-82-76-25
descr: Romania Data Systems
descr: Bucharest branch
country: RO
route: 82.76.0.0/14
descr: RDSNET
origin: AS8708
mnt-by: AS8708-MNT
changed: b...@rdsnet.ro
Country fraud profile: High
ASN Name: RDSNET (Romania Data Systems S.A.)
Country IP Range: 82.76.0.0 to 82.79.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=8708
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: http://www.powerpipe.com
Contact: 625do...@powerpipe.com
Domain name: fortick.com
Registrant Contact:
Dimitr Irov
Dimitr Irov (irovmitr01[]yahoo.com)
+35.998202437
Fax: none
Razsadnika 23
Sofia, Sofia 262002
BG
Administrative Contact:
Dimitr Irov
Dimitr Irov (irovm...@yahoo.com)
+35.998202437
Fax: none
Razsadnika 23
Sofia, Sofia 262002
BG
Technical Contact:
Dimitr Irov
Dimitr Irov (irovm...@yahoo.com)
+35.998202437
Fax: none
Razsadnika 23
Sofia, Sofia 262002
BG
Status: Locked
Name Servers:
ns1.scumowl.info [200.171.37.115]
ns1.therotech.info [200.171.37.115]
ns2.reftdwu.info [200.171.161.91]
ns2.topuguide.info [200.171.136.123]
Creation date: 15 Apr 2006 10:33:51
Expiration date: 15 Apr 2007 10:33:51
See:
www.fortick.com IP 213.183.228.226
ns1.fortick.com A IN 600 82.76.25.36, 213.183.228.226
ns2.fortick.com A IN 600 82.76.25.36, 213.183.228.226
ns3.fortick.com A IN 600 109.51.200.45
ns2.reftdwu.info [200.171.161.91]
www.fortick.com has no MX records -> fortick.com has no MX records
http://www.moensted.dk/spam/?addr=213.183.228.226
inetnum: 213.183.228.224 - 213.183.228.231
netname: Pokotorg-Net
descr: Shop number 3 "Dary Prirody" the branch of "Prodbaza
Pokotorg" Ltd.
descr: 3, Initsyativnaya str.,
descr: 121357, Moscow, Russia
country: RU
route: 213.183.224.0/21
descr: ArtX route with MTU
origin: AS20985
notify: so...@artx.ru
notify: pa...@artx.ru
notify: el...@dio.ru
mnt-by: ARTX-RIPE-MNT
changed: so...@dio.ru
Country IP Range: 213.183.224.0 to 213.183.255.255
Country fraud profile: High
ASN Name: ARTX-AS (JSC ARTX Autonomous System
http://www.cidr-report.org/cgi-bin/as-report?as=20985
More fortick.com sightings:
http://groups.google.com/groups/search?q=fortick.com+group%3A*abuse
See:
ns2.topuguide.info IP 200.171.136.123 and 200.171.161.91
200.171.136.123 PTR record: 200-171-136-123.speedyterra.com.br
at dnsqipbr2.telesp.net.BR
http://www.spamhaus.org/query/bl?ip=200.171.136.123
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43305
200.171.136.123/32 is listed on the Spamhaus Block List (SBL/ROKSO)
12-Jun-2006 23:53 GMT | SR20
Yambo Financials
Yambo nameservers, web sites.
200.171.161.91 PTR record: 200-171-161-91.dsl.telesp.net.br
at dnsqipbr1.telesp.net.BR
http://www.spamhaus.org/query/bl?ip=200.171.161.91
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43369
200.171.161.91/32 is listed on the Spamhaus Block List (SBL/ROKSO)
14-Jun-2006 19:36 GMT | SR20
Yambo Financials
Yambo nameservers, web sites.
More topuguide.info sightings:
http://groups.google.com/groups/search?q=topuguide.info+group%3A*abuse&start=0&scoring=d&
See:
ns1.therotech.info IP 200.171.37.115 and 213.155.197.172
http://www.moensted.dk/spam/?addr=213.155.197.172
http://www.spamhaus.org/query/bl?ip=213.155.197.172
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40024
213.155.197.172/32 is listed on the Spamhaus Block List (SBL/ROKSO)
08-Apr-2006 09:30 GMT | SR20
Yambo Financials
Yambo Pharmacy sites: image hosting
1 SBL/ROKSO listings for IPs under the responsibility of telvia.it
http://www.spamhaus.org/sbl/listings.lasso?isp=telvia.it
http://www.spamhaus.org/query/bl?ip=200.171.37.115
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43239
200.171.37.115/32 is listed on the Spamhaus Block List (SBL/ROKSO)
10-Jun-2006 19:00 GMT | SR20
Yambo Financials
Yambo nameservers, web sites.
22 SBL/ROKSO listings for IPs under the responsibility of telesp.net.br
http://www.spamhaus.org/sbl/listings.lasso?isp=telesp.net.br
More therotech.info sightings:
http://groups.google.com/groups/search?q=therotech.info+group%3A*abuse&start=0&scoring=d&
See:
ns2.reftdwu.info IP 200.171.161.91
200.171.161.91 PTR record: 200-171-161-91.dsl.telesp.net.br
at dnsqipbr1.telesp.net.BR
http://www.spamhaus.org/query/bl?ip=200.171.161.91
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43369
Let see whois.afilias.info:
Domain ID:D12967237-LRMS
Domain Name: REFTDWU.INFO
Created On:03-Apr-2006 13:30:58 UTC
Last Updated On:02-Jun-2006 20:46:25 UTC
Expiration Date:03-Apr-2007 13:30:58 UTC
Sponsoring Registrar:eNom, Inc. (R126-LRMS)
Status:CLIENT HOLD
Registrant ID:8FBC601360997314
Registrant Name:Slawomir Mytyk
Registrant Organization:Slawomir Mytyk
Registrant Street1:ul. Przy Bazantarni 8/14
Registrant Street2:
Registrant Street3:
Registrant City:WARSAW
Registrant State/Province:WA
Registrant Postal Code:02793
Registrant Country:PL
Registrant Phone:+48.226492382
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: dfterg56[]yahoo.com
Admin ID:8FBC601360997314
Admin Name:Slawomir Mytyk
Admin Organization:Slawomir Mytyk
Admin Street1:ul. Przy Bazantarni 8/14
Admin Street2:
Admin Street3:
Admin City:WARSAW
Admin State/Province:WA
Admin Postal Code:02793
Admin Country:PL
Admin Phone:+48.226492382
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: dfterg56[]yahoo.com
Billing ID:8FBC601360997314
Billing Name:Slawomir Mytyk
Billing Organization:Slawomir Mytyk
Billing Street1:ul. Przy Bazantarni 8/14
Billing Street2:
Billing Street3:
Billing City:WARSAW
Billing State/Province:WA
Billing Postal Code:02793
Billing Country:PL
Billing Phone:+48.226492382
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: dfte...@yahoo.com
Tech ID:8FBC601360997314
Tech Name:Slawomir Mytyk
Tech Organization:Slawomir Mytyk
Tech Street1:ul. Przy Bazantarni 8/14
Tech Street2:
Tech Street3:
Tech City:WARSAW
Tech State/Province:WA
Tech Postal Code:02793
Tech Country:PL
Tech Phone:+48.226492382
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: dfte...@yahoo.com
Name Server: NS2.REFTDWU.INFO
Name Server: NS1.REFTDWU.INFO
More reftdwu.info sightings:
http://groups.google.com/groups/search?q=reftdwu.info+group%3A*abuse&start=0&scoring=d&
See:
ns1.scumowl.info IP 200.171.37.115 and 213.155.197.172
Let see whois.afilias.info:
Domain ID:D12975834-LRMS
Domain Name: SCUMOWL.INFO
Created On:04-Apr-2006 14:15:38 UTC
Last Updated On:03-Jun-2006 20:50:15 UTC
Expiration Date:04-Apr-2007 14:15:38 UTC
Sponsoring Registrar: Tucows Inc. (R139-LRMS)
Status:OK
Registrant ID:tuZlSiaeC2XCbz6U
Registrant Name: Rudolf Pop
Registrant Organization: Pop Rudolf
Registrant Street1:36 W Rockwood St
Registrant Street2:
Registrant Street3:
Registrant City:Ecorse
Registrant State/Province:MI
Registrant Postal Code:48229
Registrant Country:US
Registrant Phone:+1.3133868367
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: poprudo02[]yahoo.com
Admin ID:tuZlSiaeC2XCbz6U
Admin Name:Rudolf Pop
Admin Organization:Pop Rudolf
Admin Street1:36 W Rockwood St
Admin Street2:
Admin Street3:
Admin City:Ecorse
Admin State/Province:MI
Admin Postal Code:48229
Admin Country:US
Admin Phone:+1.3133868367
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: popr...@yahoo.com
Billing ID:tuZlSiaeC2XCbz6U
Billing Name:Rudolf Pop
Billing Organization:Pop Rudolf
Billing Street1:36 W Rockwood St
Billing Street2:
Billing Street3:
Billing City:Ecorse
Billing State/Province:MI
Billing Postal Code:48229
Billing Country:US
Billing Phone:+1.3133868367
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: popr...@yahoo.com
Tech ID:tukyEJjj10NVJBE4
Tech Name:Domains Manager
Tech Organization: Netfirms, Inc.
Tech Street1:5160 Yonge St
Tech Street2:1800
Tech Street3:
Tech City:Toronto
Tech State/Province:ON
Tech Postal Code:M2N6L9
Tech Country:CA
Tech Phone:+1.4166612100
Tech Phone Ext.:
Tech FAX:+1.4166610700
Tech FAX Ext.:
Tech Email: sup...@netfirms.com
Name Server: NS2.SCUMOWL.INFO
Name Server: NS1.SCUMOWL.INFO
More scumowl.info sightings:
http://groups.google.com/groups/search?q=scumowl.info+group%3A*abuse&start=0&scoring=d&
See also:
specialunique.info => see web stats / cookies
specialunique.info Resolved to 68.142.212.40 to 68.142.212.41 to
68.142.212.42 to 68.142.212.43 to 68.142.212.98 to 68.142.212.99
(at yahoo.com)
More specialunique.info sightings:
http://groups.google.com/groups/search?q=specialunique.info+group%3A*abuse
21 SBL/ROKSO listings for IPs under the responsibility of yahoo.com
http://www.spamhaus.org/sbl/listings.lasso?isp=yahoo.com
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/5420db36fc6acb70
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: