Spamvert:
cherkessek.st IP 211.91.232.119
(SBL45664 - ROK4932) (at dns.hncs.cnuninet.net)
a.puzzlingdg.com IP 211.156.250.183
(at WANTONGNET - wtonline.net / wantong.net.cn)
b.puzzlingdg.com IP 220.113.9.75
(SBL43773, SBL44839, SBL45165) (at gwbn.net.cn)
Web:
Copyright © ED Med Choice Online
More ED Med Chest Online / ED Med Choice Online Viagra sightings:
http://groups.google.com/groups/search?q=%22ED+Med%22+group%3A*abuse&start=0&scoring=d&
Supported by Visa and MasterCard
More info below:
====================
X-SID-PRA: Mr. Farrell <dschramm...@electide.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43RQUvPzPU7nP801m1n7LyBhavtc1e6zcc=
Received: from tomts30-srv.bellnexxia.net ([209.226.175.104]) by
bay0-pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sat, 19 Aug 2006 13:22:25 -0700
Received: from [MUNGED]
by toip3.bellnexxia.net with ESMTP; 19 Aug 2006 16:22:21 -0400
Received: (qmail 28580 invoked by uid 110); 19 Aug 2006 16:22:20 -0400
Delivered-To: [MUNGED]
Received: (qmail 28529 invoked from network); 19 Aug 2006 16:22:16
-0400
Received: from 901.asx.dial.vsi.ru (80.82.36.133)
by [MUNGED] with SMTP; 19 Aug 2006 16:22:16 -0400
Received: (from curtain@localhost)
by pro60.quickfindit.com (8.13.4/8.13.4/Submit) id k270k67Q806542;
Sat, 19 Aug 2006 15:21:57 -0600
(envelope-from slip)
Message-Id: <0353617_@TLZ9325301_@TLZ>
Date: Sat, 19 Aug 2006 15:21:57 -0600
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: [MUNGED]
From: "Mr. Farrell" <dschramm...@electide.com>
Subject: you wont regret it Kevin
Return-Path: dschramm...@electide.com
X-OriginalArrivalTime: 19 Aug 2006 20:22:26.0077 (UTC)
FILETIME=[2F96ECD0:01C6C3CD]
The three brand name drugs available to improve sex lives are now
available in generic form at a significantly
lower price.
Pick up the one that is best for you at:
http://29qt7sqf8jppukkdp2kv7k22.cherkessek.st
move bottle
-- END OF SPAM --
See:
IP 80.82.36.133 901.asx.dial.vsi.ru
http://www.moensted.dk/spam/?addr=80.82.36.133
More vsi.ru sightings:
http://groups.google.com/groups/search?q=vsi.ru+group%3A*abuse&start=0&scoring=d&
inetnum: 80.82.36.0 - 80.82.39.255
netname: VSI-DIAL
descr: CenterTelecom Voronezh ISP
descr: 35, Revolutsii prosp.
descr: Voronezh,394000
country: RU [Russian Federation]
route: 80.82.36.0/22
descr: CenterTelecom Voronezh ISP
descr: 35, Revolutsii prosp.
descr: Voronezh,394000
descr: Russia
origin: AS21017
mnt-by: VSI-MNT
changed: ol...@vsi.ru
ASN: 21017
ASN Name: VSI-AS (VSI AS)
Country IP Range: 80.82.32.0 to 80.82.63.255
http://www.cidr-report.org/cgi-bin/as-report?as=21017
See:
cherkessek.st IP 211.91.232.119
b.puzzlingdg.com [220.113.9.75 (NO GLUE)] [CN]
a.puzzlingdg.com [211.156.250.183 (NO GLUE)] [CN]
cherkessek.st has no MX records
http://www.moensted.dk/spam/?addr=211.91.232.119
http://www.spamhaus.org/query/bl?ip=211.91.232.119
inetnum: 211.90.0.0 - 211.91.255.255
netname: UNICOM
country: CN
descr: China United Telecommunications Corporation
route: 211.91.224.0/20
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: jin...@bj.cnuninet.net
ASN: 9800
ASN Name: UNICOM (CHINA UNICOM)
Country IP Range: 211.80.0.0 to 211.95.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9800
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45664
211.91.232.119/32 is listed on the Spamhaus Block List (SBL/ROKSO)
19-Aug-2006 21:49 GMT | SR02
Leo Kuvayev / BadCow
urinalgi.com
3 SBL/ROKSO listings for IPs under the responsibility of cnuninet.com
http://www.spamhaus.org/sbl/listings.lasso?isp=cnuninet.com
Let see whois.nic.st:
Registration Service Provided By: ST Registry
Contact: regi...@nic.st
Domain name: cherkessek.st
Administrative Contact:
Company Name: Tina Willadsen
Contact: Tina Willadsen
Address: Axel mllers vej 6
State:
City: kvistgrd
Country: UK
Status: Active
Name Servers:
a.puzzlingdg.com
b.puzzlingdg.com
Using 0 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more
likely that you will trigger our rate limiting system).
Whois Server Version 1.1
Domain Name: cherkessek.st
Registrar: ST Registry
Whois at: whois.nic.st
Name Server: a.puzzlingdg.com
Name Server: b.puzzlingdg.com
Updated Date: 15-Aug-2006
Creation Date: 15-Aug-2006
More cherkessek.st sightings:
http://groups.google.com/groups/search?q=cherkessek.st+group%3A*abuse
See:
a.puzzlingdg.com IP 211.156.250.183, 211.91.232.119
a.puzzlingdg.com has no MX records -> puzzlingdg.com has no MX records
http://www.moensted.dk/spam/?addr=211.156.250.183
inetnum: 211.156.240.0 - 211.156.255.255
netname: ZhanjiangWantong
country: CN
descr: Zhan Jiang Wan Tong Co.,Ltd
route: 211.156.240.0/20
descr: CNC Group Guangdong Network User
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 211.144.0.0 to 211.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
4 SBL listings for IPs under the responsibility of wantong.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=wantong.net.cn
Let see whois:
Registrar: TUCOWS INC.
Registrant:
Private
850 3rd Ave
NY, NY 10019
US
Domain name: PUZZLINGDG.COM
Administrative Contact:
Mavon, Ravvin ravvinMavon[]yahoo.com
850 3rd Ave
NY, NY 10019
US
+1.2123990091
Technical Contact:
Mavon, Ravvin ravvi...@yahoo.com
850 3rd Ave
NY, NY 10019
US
+1.2123990091
Registration Service Provider:
myOstrich Internet Services, dom...@myostrich.net
http://www.myostrich.net
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: TUCOWS, INC.
Record last updated on 10-Aug-2006.
Record expires on 10-Aug-2007.
Record created on 10-Aug-2006.
Domain servers in listed order:
A.PUZZLINGDG.COM 211.91.232.119
B.PUZZLINGDG.COM 220.113.9.75
Domain status: ACTIVE
See:
b.puzzlingdg.com IP 220.113.9.75
http://www.moensted.dk/spam/?addr=220.113.9.75
http://www.spamhaus.org/query/bl?ip=220.113.9.75
Listed: SBL43773, SBL44839, SBL45165
inetnum: 220.113.9.0 - 220.113.9.255
netname: GWBN-BEIJING-NET10
country: CN
descr: FOR GREAT WALL BROADBAND NETWORK SERVICE ACCESS IN BEIJING
NET10
route: 220.113.0.0/20
descr: citic network co.,ltd
bj-gw
origin: as18118
mnt-by: MAINT-AS17430
changed: m...@citicnet.com
route: 220.113.0.0/20
descr: China United Telecom
origin: AS4837
mnt-by: MAINT-AS4837
changed: jin...@bj.cnuninet.net
ASN: 18118
ASN Name: CITICNET-AP (CITIC Networks Management Co.,Ltd.)
Country IP Range: 220.112.0.0 to 220.115.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=18118
12 SBL/ROKSO listings for IPs under the responsibility of gwbn.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=gwbn.net.cn
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/b3f08cfcab51b873
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: