[email] [drugs - Pharmacy Express] (radesunmdetrin.com - centalace.com - cobeltees.com - alesornal.com) Re: new ty
TomezNet
IP 87.17.152.3 host3-152.pool8717.interbusiness.it
(at dnsti.interbusiness.it / telecomitalia.it)
Spamvert:
radesunmdetrin.com IP 211.144.68.67
radesunmdetrin.com IP 211.144.68.87
(SBL42231 - SBL44806 - SBL44807) (at dns1.cableplus.com.cn /
scn.com.cn)
ns0.centalace.com IP 211.144.68.67
ns0.cobeltees.com IP 211.144.68.59
Web source code:
stat.alesornal.com IP 61.172.246.174
(at ns1.shaidc.com / nns.sta.net.cn / CHINANET-SH)
More Pharmacy Express sightings:
http://groups.google.com/groups/search?q=%22Pharmacy+Express%22+group%3A*abuse&start=0&scoring=d&
Web:
© 2006 PharmacyExpress.com All Rights Reserved.
More info below:
====================
X-SID-PRA: Eadbha Milburn <fl...@indianlandfarm.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW418fxWk9mPttUeRWWsRCsYS2kFV3jww9OQ=
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by
bay0-pamc1-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 22 Aug 2006 13:18:16 -0700
Received: from [MUNGED]
by toip3.bellnexxia.net with ESMTP; 22 Aug 2006 16:18:04 -0400
Received: (qmail 22474 invoked by uid 110); 22 Aug 2006 16:18:03 -0400
Delivered-To: [MUNGED]
Received: (qmail 22471 invoked from network); 22 Aug 2006 16:18:03
-0400
Received: from host3-152.pool8717.interbusiness.it (HELO
indianlandfarm.com) (87.17.152.3)
by [MUNGED] with SMTP; 22 Aug 2006 16:18:03 -0400
Received: by 192.168.253.115 with SMTP id DTXAUrGX;
for <[MUNGED]>; Tue, 22 Aug 2006 13:17:46 -0700
Message-ID: <000001c6c628$08189ca0$73fda8c0@aeiewzx>
Reply-To: "Eadbha Milburn" <fl...@indianlandfarm.com>
From: "Eadbha Milburn" <fl...@indianlandfarm.com>
To: [MUNGED]
Subject: Re: new ty
Date: Tue, 22 Aug 2006 13:17:46 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C6C5ED.5BBC35A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Return-Path: fl...@indianlandfarm.com
X-OriginalArrivalTime: 22 Aug 2006 20:18:16.0925 (UTC)
FILETIME=[1A5298D0:01C6C628]
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C6C5ED.5BBC35A0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi,
=20
Not very good erecxction? You are welcome - http://radesunmdetrin.com
=20
=20
=20
Women. I had six sisters and there were two aunts who lived with us.
I had no brothers. I never think about women except one at a time in
the right situation.
------=_NextPart_000_0001_01C6C5ED.5BBC35A0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>Hi,</DIV>
<DIV> </DIV>
<DIV>Not very good erecxction? You are welcome - <A =
href=3D"http://radesunmdetrin.com">http://radesunmdetrin.com</A></DIV><P>=
</P><P> </P><P> </P><P> Women. I had six sisters and =
there were two aunts who lived with us.<BR>
I had no brothers. I never think about women except one at a time =
in<BR>
the right situation.<BR></P></BODY></HTML>
------=_NextPart_000_0001_01C6C5ED.5BBC35A0--
-- END OF SPAM --
See forged site certificates and logos:
* Top rated by PharmacyChecker
CEO/President: Jack Poppins
My Canadian Pharmacy Corp.
1592 Wilson Avenue,
Toronto, ON M3L 1A6
* BBBOnLine Reliability
Participation Confirmed For Pharmacy
Participant through 12/30/2005
* CIPA Membership (The Canadian International Pharmacy Association)
Valid Member: Certified Member
Organization: Pharmacy
Licence #: 91959
Location: Toronto, Canada
Current Status: Active
* Pharmacy is a Soltrus Secure Site
Name: Pharmacy
Status: Valid
Validity Period: 13-OCT-04 - 13-OCT-05
Server ID Information:
Server ID Information: Country = CA
State = Ontario
Locality = Toronto
Organization = Technical Consultants and Experts Group Inc
Organizational Unit = TCE Group
Organizational Unit = Terms of use at Verisign (c) 04
Organizational Unit = Authenticated by Verisign
Organizational Unit = Member, VeriSign Trust Network
Common Name = Pharmacy
* Verified by Visa
* license.jpg
State of Ontario drug reselling License # D2849912
Pharmacy Express Corp
1460Don Mills Rd. at York Mills, 2nd floor
Don Mills, ON M3B 2X9
More D2849912 sightings:
http://groups.google.com/groups/search?q=%22D2849912%22+group%3A*abuse
See:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/be58f36bcf3c16da
See:
IP 87.17.152.3 host3-152.pool8717.interbusiness.it
http://www.moensted.dk/spam/?addr=87.17.152.3
http://spamcop.net/w3m?action=checkblock&ip=87.17.152.3
inetnum: 87.0.0.0 - 87.31.255.255
org: ORG-TIN1-RIPE
netname: IT-TIN-20050713
descr: Telecom Italia Net
descr: Provider Local Registry
country: IT [Italy]
route: 87.16.0.0/15
descr: INTERBUSINESS
origin: AS3269
notify: net...@cgi.interbusiness.it
mnt-by: TIWS-MNT
mnt-routes: INTERB-MNT
changed: net...@telecomitalia.it
ASN: 3269
ASN Name: ASN-IBSNAZ (TELECOM ITALIA)
Country IP Range: 87.0.0.0 to 87.31.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3269
59 SBL/ROKSO listings for IPs under the responsibility of
interbusiness.it
http://www.spamhaus.org/sbl/listings.lasso?isp=interbusiness.it
See:
radesunmdetrin.com IP 211.144.68.67
radesunmdetrin.com IP 211.144.68.87
ns0.centalace.com [211.144.68.67] [TTL=172800] [CN]
ns0.cobeltees.com [211.144.68.59] [TTL=172800] [CN]
[radesunmdetrin.com has 1 MX record mail.radesunmdetrin.com (10)]
http://www.moensted.dk/spam/?addr=211.144.68.87
http://www.spamhaus.org/query/bl?ip=211.144.68.87
inetnum: 211.144.64.0 - 211.144.95.255
netname: COLNET
descr: Oriental Cable Network Co., Ltd.
descr: 9/F, Broadcasting&TV Building, No.651 Nanjing Rd.(W)
descr: Shanghai, P.R.China 200041
country: CN
route: 211.144.64.0/20
descr: CHINA NETCOM
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
ASN: 9812
ASN Name: CNNIC-HLTT-AP (HLTT Communication Co.,Ltd.)
Country IP Range: 211.144.0.0 to 211.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9812
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42231
211.144.68.0/24 is listed on the Spamhaus Block List (SBL/ROKSO)
20-Aug-2006 07:24 GMT | SR02
MailTrain
xpdns.info porn spam site @ 211.144.68.78
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44806
211.144.68.87/32 is listed on the Spamhaus Block List (SBL/ROKSO)
20-Aug-2006 06:11 GMT | SR02
Leo Kuvayev / BadCow
more VljAGGRA spam hosting
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44807
211.144.64.0/19 is listed on the Spamhaus Block List (SBL)
25-Jul-2006 09:42 GMT | SR02
Oriental Cable Network Co., Ltd. (scn.com.cn escalation)
28 SBL/ROKSO listings for IPs under the responsibility of scn.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=scn.com.cn
Let see whois.paycenter.com.cn:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name:radesunmdetrin.com
Registrant:
Dima li
jungonglu1219hao
200093
Administrative Contact:
Dima li
Dima li
jungonglu1219hao
shang hai Shanghai 200093
China
tel: 86 021 76886639
fax: 86 021 76886639
mmlara[]163.com
Technical Contact:
centaur doing
centaur doing
tty xi san qu 4#3101
bei jing Beijing 102218
China
tel: 86 010 64117521
fax: 86 010 64117521
mml...@163.com
Billing Contact:
centaur doing
centaur doing
tty xi san qu 4#3101
bei jing Beijing 102218
China
tel: 86 010 64117521
fax: 86 010 64117521
mml...@163.com
Registration Date: 2006-08-17
Update Date: 2006-08-22
Expiration Date: 2007-08-17
Primary DNS: ns0.cobeltees.com 211.144.68.59
Secondary DNS: ns0.centalace.com 211.144.68.67
More Registrant mmlara[]163.com sightings:
http://groups.google.com/groups/search?q=%22mm...@163.com%22+group%3A*abuse
See:
ns0.centalace.com IP 211.144.68.67
http://www.spamhaus.org/query/bl?ip=211.144.68.67
Listed: SBL42231, SBL44399, SBL44807, SBL45525
More centalace.com sightings:
http://groups.google.com/groups/search?q=centalace.com+group%3A*abuse&start=0&scoring=d&
See:
ns0.cobeltees.com IP 211.144.68.59
http://www.spamhaus.org/query/bl?ip=211.144.68.59
Listed: SBL42231, SBL43244, SBL44807
More cobeltees.com sightings:
http://groups.google.com/groups/search?q=cobeltees.com+group%3A*abuse&start=0&scoring=d&
Web source code:
stat.alesornal.com IP 61.172.246.174
ns0.alesornal.com A IN 3600 61.172.246.174
ns1.alesornal.com A IN 3600 61.172.246.174
stat.alesornal.com has no MX records -> alesornal.com has no MX records
http://www.moensted.dk/spam/?addr=61.172.246.174
No PTR records exist for 61.172.246.174 at ns1.shaidc.com
inetnum: 61.172.0.0 - 61.173.255.255
netname: CHINANET-SH
descr: CHINANET Shanghai province network
descr: Data Communication Division
descr: China Telecom
country: CN
route: 61.172.0.0/16
descr: Chinanet Shanghai
origin: AS4812
notify: ip-a...@mail.online.sh.cn
mnt-by: MAINT-AS4812
changed: sh-a...@8163.net.cn
ASN: 4812
ASN Name: CHINANET-SH-AP (China Telecom (Group))
Country IP Range: 61.128.0.0 to 61.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4812
3 SBL/ROKSO listings for IPs under the responsibility of CNCGROUP-SH
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-SH
Let see whois.yesnic.com:
Registrar: YESNIC CO. LTD.
Domain Name : alesornal.com
::Registrant::
Name : Andrew Chen
Email : obalomeece[]yahoo.com
Address : 3 Lakeview Ct
Zipcode : 08902
Nation : US
Tel : 7323093313
Fax :
::Administrative Contact::
Name : Andrew Chen
Email : obalo...@yahoo.com
Address : 3 Lakeview Ct
Zipcode : 08902
Nation : US
Tel : 7323093313
Fax :
::Technical Contact::
Name : Andrew Chen
Email : obalo...@yahoo.com
Address : 3 Lakeview Ct
Zipcode : 08902
Nation : US
Tel : 7323093313
Fax :
::Name Servers::
ns0.alesornal.com 61.172.246.174
ns1.alesornal.com 61.172.246.174
::Dates & Status::
Created Date 2006-07-21 18:18:40 EDT
Updated Date 2006-07-21 18:18:40 EDT
Valid Date 2007-07-21 18:18:40 EDT
Status ACTIVE
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/3420787a26d13922
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/be58f36bcf3c16da
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: