Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [drugs - Canadian Pharmacy] [88.210.57.162] (kaylane.hk / oyondo.hk / TIROZ.INFO / BESTSISTETS.INFO) Lovers package at discount price

0 views
Skip to first unread message

TomezNet

unread,
May 22, 2007, 11:01:34 AM5/22/07
to
Received From:
IP 88.210.57.162
(at relsoft.ru / citylan.ru)

Spamvert:
www.kaylane.hk IP 203.125.9.89
oyondo.hk IP 203.125.9.89
(both at singnet.com.sg)

Title => Canadian Pharmacy

Much More Canadian Pharmacy sightings:
http://groups.google.com/groups/search?q=%22Canadian+Pharmacy%22+group%3A*abuse&start=0&scoring=d&

Headers Forgery by spammer.
Plenty of Forged Certificates and logos as always.

More info below:
====================

Return-Path: <[MUNGED]>
Received: from hql003 ([88.210.57.162])
by fayettevilleonline.com (8.12.10/8.12.10) with SMTP id
l4ICUD78009348
for <[MUNGED]; Fri, 18 May 2007 08:30:13 -0400
Delivered-To: <[MUNGED]>
Received: (qmail 18196 by uid 571); Fri, 18 May 2007 04:24:38 +0300
Date: Fri, 18 May 2007 04:24:38 +0300
Received: from hql003 (88.210.57.162)
by hql003 with SMTP;
Received: (qmail 18196 by uid 571); Fri, 18 May 2007 04:24:38 +0300
Message-Id: <20070518072438.18198.qmail@hql003>
To: <[MUNGED]>
Subject: Lovers package at discount price
From: "Tr...@viagra.com" <[MUNGED]>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit

<style>

Hi,

Is there an easy way to make a chart automatically include new rows as
they are entered?

I currently have a spreadsheet with three columns: A, B and C.
Column A contains dates (i.e. the period, ex: June 2005)
Column B and C contains figures for the period.
<!I made a post FS/FT A? recently and when I finished it the message
said
your post will take 3-10 hours to appear. Not more than 5 minutes
later I received a E-mail reply to the post. I could not view my post
until 5.5 hours later at 12:30 in the morning. I replied back to the
E-mail and asked him how he seen the post so quickly. He said he just
seen it come up and that the post time delay may have something to do
with my ISP! I sent a question to Google groups support but their
reply was they were very busy and it may take some time to respond! I
checked their FAQ's to no avail. My ISP is a cable company DSL hi
speed line.

Can anyone shed some light on this. Is there anything the member can
do differently to see these posts as soon as they are released. If it
is the ISP what do you tell them to do differently? Is there a better
URL or IP address to access??

Appreciate any replies,
Rich>

<!When I copy and paste printed text to news group post, the line
breaks from the original publication are retained and result in
something like:
------------------------------------------
POSTED 8:54 a.m. EST; UPDATED 9:21 a.m. EST, March 5, 2007

PACKERS CHASING BELL

Bell was acquired by the Lions last week as part of the Dre' Bly
deal. As we've reported, both Bell and former Broncos tackle
George Foster are candidates to be traded again.

We're also told that the Packers contacted the Bears about the
availability of running back Thomas Jones, but the Bears said that he
is not available. It remains to be seen whether the Bears would be
willing to trade him to a team other than their intra-division
arch-rivals.
</style><a target="_blank" href="http://kaylane.hk/index1.htm" ><img
src="http://oyondo.hk/1.jpg">
<style>
------------------------------------------

I think it might have something to do with

Tools/Options/Send/News Sending Format

Can the off the automatic word wrap be disabled?
I've heard that there's another Two-Wheeled Tuesday somewhere
west of the city. Anyone been there or know of any others in the
area?

<!
I've seen a different version of the Macross Plus LDs called
Macross Plus International Edition. I asked somebody about
them and my friend said they're supposed to be something
similar to the Pioneer LDs, english on the digital track, japanese
on the analog, and closed captioning. Can somebody please
confirm this? (so I can go out and buy these LDs right now :)

Wilson Verardi>
<!Hi...

I'm selling on eBay (link below) a brand new condition copy of the "jp
airline-fleets international edition 96/97". This is the most
comprehensive guide to the airline fleets of all countries. Includes
info on complete fleets, types of aircraft, numbers, registration
numbers, etc. A very impressive book.
</style>

-- END OF SPAM --

WEB:
Approved by ADA:
CEO/President:
Kris Thorkelson
200-1765 West 8th Ave. Vancouver, BC, Canada V6J 5C6

CIDA - Licence #: 1636

Pharma Checker:
CEO/President: Kris Thorkelson
24 Terracon Place
Winnipeg, MB, R2J 4G7
Canada

Licensed by: Manitoba Pharmaceutical Association - License #32195,
Canada

And much more "BS"

See:
IP 88.210.57.162

http://www.moensted.dk/spam/?addr=88.210.57.162
http://www.spamhaus.org/query/bl?ip=88.210.57.162
http://cbl.abuseat.org/lookup.cgi?ip=88.210.57.162

http://spamcop.net/w3m?action=checkblock&ip=212.242.218.44
Spam source - http://wpbl.info/record?ip=212.242.218.44
Exploitable Server See: http://www.sorbs.net/lookup.shtml?212.242.218.44

See more 212.242.218.44 sightings:
http://groups.google.com/groups/search?q=212.242.218.44+group%3A*abuse&qt_s=Search

inetnum: 88.210.57.0 - 88.210.57.255
netname: RELSOFTCOM
descr: OOO "RELSOFT Communications"
descr: The telecommunication company
country: RU
person: Dmitry Egorov
address: 11, Tekstilschikov 8 str.,
address: Moscow, 109129, Russia
e-mail: d...@relsoft.ru

route: 88.210.56.0/22
descr: CITYLAN2-NET
origin: AS25308
mnt-routes: CITYLAN-MNT
mnt-by: CITYLAN-MNT
changed: tang...@citylan.ru

Prefix: 88.210.56.0/22
Prefix Name: CITYLAN2 NET
AS: 25308
AS Name: CITYLAN AS CityLanCom, ISP, Moscow, Russia
http://www.cidr-report.org/cgi-bin/as-report?as=25308

1 SBL/ROKSO listings for IPs under the responsibility of citylan.ru
http://www.spamhaus.org/sbl/listings.lasso?isp=citylan.ru

See:
www.kaylane.hk IP 203.125.9.89
NS1.TIROZ.INFO [210.68.253.50 (NO GLUE)] [TW]
NS2.BESTSISTETS.INFO [209.88.177.67 (NO GLUE)] [US]

NS records at your nameservers are:
ns1.kaylane.hk [203.125.9.89] [TTL=600]
ns2.kaylane.hk [203.125.9.89] [TTL=600]

SOA record [TTL=300] is:
Primary nameserver: ns0.piotiongandesunkdes.com
Hostmaster E-mail address:
Serial #: 0

1 MX record is:
10 mail.kaylane.hk [TTL=600] IP=203.125.9.89 [TTL=600] [SG]

89.9.125.203.in-addr.arpa bb-203-125-9-89.singnet.com.sg

http://www.moensted.dk/spam/?addr=203.125.9.89

inetnum: 203.125.9.80 - 203.125.9.95
netname: FINANTIX-SG
descr: FINANTIX (AP) PTE LTD
descr: 61 ROBINSON RD #13-01A
descr: ROBINSON CENTRE
descr: Singapore 068893
country: SG
rev-srv: dnssec3.singnet.com.sg
notify: hostm...@singnet.com.sg
person: PATRICIA LOW
address: FINANTIX (AP) PTE LTD
e-mail: patric...@finantix.com

postmaster and abuse[]singnet.com.sg are listed in rfc-ignorant.org
database

route: 203.125.0.0/17
descr: Singapore Telecommunications Ltd
SingTel Magix BroadBand network
10 Eunos Road 8, #13-03, Singapore 408600
origin: AS9506
mnt-by: MAINT-AS3758
changed: gni...@staff.singnet.com.sg
http://www.cidr-report.org/cgi-bin/as-report?as=9506

IP: 203.125.9.89
Reverse: bb-203-125-9-89.singnet.com.sg
Aliases:
Prefix: 203.125.0.0/16
Prefix Name: Singapore Telecommunications Ltd SingNet Pte Ltd SingNet
Engineering & Operations 2 Stirling Road 03 00 Queenstown Exchange
Singapore 148943
AS: 3758
AS Name: SINGNET SINGNET Singapore Telecommunications 2 Stirling Road
Queenstown Exchange 3rd Storey SINGAPORE Tel: (65) 4722580
http://www.cidr-report.org/cgi-bin/as-report?as=3758

1 SBL/ROKSO listings for IPs under the responsibility of
singnet.com.sg
http://www.spamhaus.org/sbl/listings.lasso?isp=singnet.com.sg

Let see whois:
Domain Name: KAYLANE.HK
Contract Version: HKDNR latest version

Registrant Contact Information:
Holder English Name (It should be the same as your legal name on your
HKID card or other relevant documents): SEAN M CARLSON
Holder Chinese Name:
Email: dazzl...@yahoo.com
Domain Name Commencement Date: 11-05-2007
Country: US
Expiry Date: 11-05-2008
Re-registration Status: Complete
Name of Registrar: HKDNR
Account Name: HK1885586T

Technical Contact:
First name: SEAN
Last name: CARLSON
Company Name: SEAN M CARLSON

Name Servers Information:
NS1.TIROZ.INFO
NS2.BESTSISTETS.INFO

See:
oyondo.hk IP 203.125.9.89
NS1.TIROZ.INFO [210.68.253.50 (NO GLUE)] [TW]
NS2.BESTSISTETS.INFO [209.88.177.67 (NO GLUE)] [US]

NS records at your nameservers are:
ns1.oyondo.hk [203.125.9.89] [TTL=600]
ns2.oyondo.hk [203.125.9.89] [TTL=600]

SOA record [TTL=600] is:
Primary nameserver: oyondo.hk
Hostmaster E-mail address: ad...@oyondo.hk
Serial #: 2005000000

1 MX record is:
10 mail.oyondo.hk [TTL=600] IP=203.125.9.89 [TTL=600] [SG]

89.9.125.203.in-addr.arpa bb-203-125-9-89.singnet.com.sg

http://www.moensted.dk/spam/?addr=203.125.9.89

Let see whois:
Domain Name: OYONDO.HK
Contract Version: HKDNR latest version

Registrant Contact Information:
Holder English Name (It should be the same as your legal name on your
HKID card or other relevant documents): THOMAS DIGIANVITTORIO
Holder Chinese Name:
Email: oyon...@yahoo.com
Domain Name Commencement Date: 11-05-2007
Country: US
Expiry Date: 11-05-2008
Re-registration Status: Complete
Name of Registrar: HKDNR
Account Name: HK1885558T

Technical Contact:
First name: THOMAS
Last name: DIGIANVITTORIO
Company Name: THOMAS DIGIANVITTORIO

Name Servers Information:
NS1.TIROZ.INFO
NS2.BESTSISTETS.INFO

See:
NS1.TIROZ.INFO IP 210.68.253.50

NS2.BESTSISTETS.INFO has no MX records -> [BESTSISTETS.INFO has 1 MX
record mail.BESTSISTETS.INFO (10)]

http://www.moensted.dk/spam/?addr=210.68.253.50
http://www.spamhaus.org/query/bl?ip=210.68.253.50

210.68.253.50 NO PTR recors at seed.net.tw

postmaster and abuse[]seed.net.tw are listed in rfc-ignorant.org
database

inetnum: 210.68.0.0 - 210.68.255.255
netname: SEEDNET
descr: Digital United Inc.
descr: 9F, No. 125, Song Jiang Road
descr: Taipei, Taiwan
person: Chyi-Chuan Yang
nic-hdl: CY74-AP
e-mail: ccy...@du.net.tw
person: Seednet Seednet
address: Seednet
address: N/A Taiwan
e-mail: roo...@seed.net.tw
nic-hdl: RN472-TW
changed: hostm...@twnic.net.tw

route: 210.68.224.0/19
descr: SeedNet
Digital United Inc.
No. 220, Gangchi Rd., Taipei 114
Taiwan
origin: AS4780
mnt-by: MAINT-AS4780
changed: chun...@du.net.tw
Prefix: 210.68.224.0/19
Prefix Name: SeedNet Digital United Inc No 220, Gangchi Rd , Taipei
114 Taiwan REACH (Customer Route) REACH (Customer Route)
AS: 4780
AS Name: Seednet Digital United Inc No 220, Gangchi road, Nei Hu
district Taipei, Taiwan, 11444
http://www.cidr-report.org/cgi-bin/as-report?as=4780

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54279
210.68.253.50/32 is listed on the Spamhaus Block List (SBL/ROKSO)

05-May-2007 23:38 GMT | SR02

Yambo Financials.
Yambo hosting bot

1 SBL/ROKSO listings for IPs under the responsibility of seed.net.tw
http://www.spamhaus.org/sbl/listings.lasso?isp=seed.net.tw

Let see whois:
Domain ID:D17467287-LRMS
Domain Name:TIROZ.INFO
Created On:25-Apr-2007 04:05:10 UTC
Last Updated On:13-May-2007 11:50:35 UTC
Expiration Date:25-Apr-2008 04:05:10 UTC
Sponsoring Registrar:eNom, Inc. (R126-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:0DFB4D13CDBB8152
Registrant Name:Waclaw Pett
Registrant Organization:-
Registrant Street1:4055 W Devon Ave
Registrant Street2:
Registrant Street3:
Registrant City:Chicago
Registrant State/Province:IL
Registrant Postal Code:60646
Registrant Country:US
Registrant Phone:+1.7732865922
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: squferritor[]yahoo.com
Admin ID:0DFB4D13CDBB8152
Admin Name:Waclaw Pett
Admin Organization:-
Admin Street1:4055 W Devon Ave
Admin Street2:
Admin Street3:
Admin City:Chicago
Admin State/Province:IL
Admin Postal Code:60646
Admin Country:US
Admin Phone:+1.7732865922
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: squfe...@yahoo.com
Billing ID:0DFB4D13CDBB8152
Billing Name:Waclaw Pett
Billing Organization:-
Billing Street1:4055 W Devon Ave
Billing Street2:
Billing Street3:
Billing City:Chicago
Billing State/Province:IL
Billing Postal Code:60646
Billing Country:US
Billing Phone:+1.7732865922
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: squfe...@yahoo.com
Tech ID:0DFB4D13CDBB8152
Tech Name:Waclaw Pett
Tech Organization:-
Tech Street1:4055 W Devon Ave
Tech Street2:
Tech Street3:
Tech City:Chicago
Tech State/Province:IL
Tech Postal Code:60646
Tech Country:US
Tech Phone:+1.7732865922
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: squfe...@yahoo.com
Name Server: NS2.TIROZ.INFO
Name Server: NS1.TIROZ.INFO

More eNom sightings:
http://groups.google.com/groups/search?q=eNom+group%3A*abuse&start=0&scoring=d&

See:
NS2.BESTSISTETS.INFO IP 209.88.177.67

NS2.BESTSISTETS.INFO has no MX records -> [BESTSISTETS.INFO has 1 MX
record mail.BESTSISTETS.INFO (10)]

http://www.moensted.dk/spam/?addr=209.88.177.67

209.88.177.67 = ns2.pineapp.com / barakitc.co.il / equant.com

Equant, Inc. EQUANT-BLK6 (NET-209-88-0-0-1)
209.88.0.0 - 209.88.255.255
BARAK BARAK-BLK-3 (NET-209-88-176-0-1)
209.88.176.0 - 209.88.183.255
C.S.T.S. BARAK-24 (NET-209-88-177-64-1)
209.88.177.64 - 209.88.177.127

OrgName: Equant, Inc.
OrgID: EQUANT-1
NetRange: 209.88.0.0 - 209.88.255.255
CIDR: 209.88.0.0/16
NetName: EQUANT-BLK6
NetHandle: NET-209-88-0-0-1
Parent: NET-209-0-0-0-0
NetType: Direct Allocation

OrgName: C.S.T.S.
OrgID: CSTS-2
Address: HIFA, Israel
NetRange: 209.88.177.64 - 209.88.177.127
CIDR: 209.88.177.64/26
NetName: BARAK-24
NetHandle: NET-209-88-177-64-1
Parent: NET-209-88-176-0-1
NetType: Reassigned
RTechEmail: eg...@barakitc.co.il

postmaster and abuse[]barakitc.co.il are listed in rfc-ignorant.org
database

route: 209.88.0.0/16
descr: OPENTRANSIT
descr: France Telecom Worldwide IP Backbone
descr: EQUANT-BLK6 ARIN Allocation
origin: AS5511
notify: ad...@opentransit.net
mnt-by: RIPE-NCC-RPSL-MNT
http://www.cidr-report.org/cgi-bin/as-report?as=5511

Prefix: 209.88.176.0/20
Prefix Name: error
AS: 8584
AS Name: UNSPECIFIED Barak AS
http://www.cidr-report.org/cgi-bin/as-report?as=8584

2 SBL/ROKSO listings for IPs under the responsibility of
opentransit.net
http://www.spamhaus.org/sbl/listings.lasso?isp=opentransit.net

abuse[]opentransit.net is listed in rfc-ignorant.org database

2 SBL listings for IPs under the responsibility of equant.com
http://www.spamhaus.org/sbl/listings.lasso?isp=equant.com

Let see whois:
Domain ID:D17107249-LRMS
Domain Name:BESTSISTETS.INFO
Created On:03-Apr-2007 17:11:13 UTC
Last Updated On:18-May-2007 14:53:33 UTC
Expiration Date:03-Apr-2008 17:11:13 UTC
Sponsoring Registrar:CSL Computer Service Langenbach GmbH d/b/a
joker.com (R161-LRMS)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:CAFI-245073
Registrant Name:Kenny Michael
Registrant Organization:na
Registrant Street1:11706 Kiowa Ave
Registrant Street2:
Registrant Street3:
Registrant City:Los Angeles
Registrant State/Province:CA
Registrant Postal Code:90049
Registrant Country:US
Registrant Phone:+01.3108209172
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: bertsitxx[]yahoo.com
Admin ID:CAFI-245072
Admin Name:Kenny Michael
Admin Organization:na
Admin Street1:11706 Kiowa Ave
Admin Street2:
Admin Street3:
Admin City:Los Angeles
Admin State/Province:CA
Admin Postal Code:90049
Admin Country:US
Admin Phone:+01.3108209172
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: bert...@yahoo.com
Billing ID:CAFI-245072
Billing Name:Kenny Michael
Billing Organization:na
Billing Street1:11706 Kiowa Ave
Billing Street2:
Billing Street3:
Billing City:Los Angeles
Billing State/Province:CA
Billing Postal Code:90049
Billing Country:US
Billing Phone:+01.3108209172
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: bert...@yahoo.com
Tech ID:CAFI-245072
Tech Name:Kenny Michael
Tech Organization:na
Tech Street1:11706 Kiowa Ave
Tech Street2:
Tech Street3:
Tech City:Los Angeles
Tech State/Province:CA
Tech Postal Code:90049
Tech Country:US
Tech Phone:+01.3108209172
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: bert...@yahoo.com
Name Server: NS2.BESTSISTETS.INFO
Name Server: NS1.BESTSISTETS.INFO

More joker.com spam support sightings:
http://groups.google.com/groups/search?q=joker.com+group%3A*abuse&start=0&scoring=d&

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/f2175dcdedce9bf2

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

TomezNet

unread,
May 22, 2007, 11:01:37 AM5/22/07
to

TomezNet

unread,
May 22, 2007, 11:01:39 AM5/22/07
to

TomezNet

unread,
May 22, 2007, 1:00:56 PM5/22/07
to
0 new messages