open proxy -- 1083696003 (Tue May 4 20:40:03 2004)
http://njabl.org/cgi-bin/lookup.cgi?query=218.155.115.217
Spamvert:
59tjSTT5tJAxsn5yAn5yS5NN.pEEpHolEHH.COM IP 222.170.97.137
(at CNCGROUP-HL)
>From web:
Copyright © ED Med Chest Online
Logos and support by VISA and MasterCard
More ED Med Chest Online sightings:
http://groups.google.com/groups/search?q=%22ED+Med%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.49.53; Fri, 05 May 2006
23:11:05 -0700
X-YahooFilteredBulk: 218.155.115.217
X-Originating-IP: [218.155.115.217]
Return-Path: <ujsdiw...@slonet.org>
Authentication-Results: mta113.mail.re4.yahoo.com from=slonet.org;
domainkeys=fail (bad syntax)
Received: from 218.155.115.217 (HELO 67.28.113.70) (218.155.115.217) by
mta113.mail.re4.yahoo.com with SMTP; Fri, 05 May 2006 23:11:05 -0700
Received: from [192.168.1.5] ([218.155.115.217]) by avalon.net
(Sendmail 8.7.2) with ESMTP (SSL) id IYT83139 for <xx..xx@xx..xx.com>;
Sat, 06 May 2006 01:10:57 -0600
Message-ID: <766e144u...@avalon.net>
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=human.love;
d=avalon.net;
b=FTvYociDRJbdptzQ0M5yVCTgwNQ7hVoBSgdA5Vlr2YF3LORV6ppAL0WLJW9KorATbRUXHDk1HSpujUrn;
Date: Sat, 06 May 2006 01:10:57 -0600
From:"Ivelisse Zola" <ujsdiw...@slonet.org>
MIME-Version: 1.0
To: xx..xx@xx..xx.com
Subject: SAVE 82%: VIAGR*, AMBIE*, CIALI*, XANA*, RIVOTRI*, LEVITR*,
CIPRO, MERIDI*, CELEBRE*, VALIU* supposedto
Content-Type: multipart/related; boundary="------------85122023==.MRA"
Content-Length: 959
---------------------------------
companion yours yours window drew fascinate. taught next letters. night
turning disappoint the rich?Quality Meds Selling At Cheeap
We dont keep ur record (not even your name)
You just pay & we ship, No Question form to fill
We ship to all countries
Viagr*, Ambie*, Ciali*, Xana*, Rivotri*, Levitr*, Cipro, Meridi*,
Celebre*, Valiu*, Zoloft & Many More Meds miserable
love C11ck Here for Huge Saving letters
out nothing nothing money commit. anything supposedto edge reading
friends.
reference principle carefully we again.
few bought social servants prison? taught friends news prison principle
principle, bought again companion supposedto.
very she turning goes.
disappoint sandwich leader reference studied nothing,
principle letters yours very, promised bought music nothing commit
speaking, edge out latter,
<html>
<head>
<xmeta http-equiv="Content-Type" content="text; charset=iso-8859-1">
</head>
<xbody>
<font color=FFA4D1 size=1>companion yours yours window drew fascinate.
taught next letters. night turning disappoint the rich?</font>
<table border=10 cellspacing=0 cellpadding=3 width=520
bordercolor=CDFF59>
<tr><td bgcolor=ffffff bordercolor=000000><center>
<font size=2 face=arial color=CC0000>
<font size=4 color=000000><b>Quality Meds Selling At Cheeap<br><font
color=EA0000>We dont keep ur record (not even your
name)</font><br><font color=AEAE00>You just pay & we ship, No Question
form to fill</font><br><font color=FF5EAE>We ship to all
countries</b></center></font></font><br><font color=000000
size=2>Viagr*, Ambie*, Ciali*, Xana*, Rivotri*, Levitr*, Cipro,
Meridi*, Celebre*, Valiu*, Zoloft & Many More Meds
miserable<br><center>
<a target="_blank"
href=http://59tjSTT5tJAxsn5yAn5yS5NN.pEEpHolEHH.COM><font size=4
color=5E5EFF><u>love <b>C11ck Here for Huge Saving</b>
letters</font></u></a></font></center><br></td></tr></table><font
color=FFA4D1 size=1>out nothing nothing money commit. anything
supposedto edge reading friends.<br>
reference principle carefully we again.<br>
few bought social servants prison? taught friends news prison principle
principle, bought again companion supposedto.<br>
very she turning goes.<br>
disappoint sandwich leader reference studied nothing,<br>
principle letters yours very, promised bought music nothing commit
speaking, edge out latter,<br></font>
</xbody>
</html>
</font>
-- END OF SPAM --
See:
IP 218.155.115.217
http://www.moensted.dk/spam/?addr=218.155.115.217
http://cbl.abuseat.org/lookup.cgi?ip=218.155.115.217
http://www.spamhaus.org/query/bl?ip=218.155.115.217
Org Name : Korea Telecom
Service Name : KORNET
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 218.144.0.0 to 218.159.255.255
route: 218.144.0.0/12
descr: KORnet Powered BY Korea Telecom
origin: AS4766
mnt-by: MAINT-AS4766
changed: chinny7...@kornet.net
http://www.cidr-report.org/cgi-bin/as-report?as=4766
29 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
See:
59tjSTT5tJAxsn5yAn5yS5NN.pEEpHolEHH.COM IP 222.170.97.137
st.redamagedg.com A IN 3600 59.191.125.254
we.redamagedg.com A IN 3600 222.51.91.98
59tjSTT5tJAxsn5yAn5yS5NN.pEEpHolEHH.COM has no MX records ->
pEEpHolEHH.COM has no MX records
http://www.moensted.dk/spam/?addr=222.170.97.137
http://www.spambag.org/cgi-bin/spambag?mailfrom=chinatelecomhl
More 222.170.97.137 sightings:
http://groups.google.com/groups/search?q=222.170.97.137+group%3A*abuse
inetnum: 222.170.0.0 - 222.171.31.255
netname: HEILONGJIANG-QIQIHAER-TELECOM
country: CN
descr: QIQIHAER TELECOM
descr: QIQIHAER
descr: HEILONGJIANG PROVINCE
person: LIJUAN ZHENG
nic-hdl: LZ298-AP
e-mail: net...@hljtele.com
address: Communication Corporation Internet Enterprise Division of
HLJ
ASN: 17897
ASN Name: CHINATELECOM-HLJ-AS-AP (asn for Heilongjiang Provincial Net
of CT)
Country IP Range: 222.168.0.0 to 222.175.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=17897
32 SBL/ROKSO listings for IPs under the responsibility of CNCGROUP-HL
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-HL
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : peepholehh.com (PEEPHO2-BMN-DOM)
Registrar : BookMyName
Registrant / Admin Contact :
PERSON
Michael-D. MOORE (MOORE10-BMN-PE)
2600 MARTIN WAY EAST SUITE C
98506 OLYMPIA
UNITED STATES
phone : +48 22 3895469
fax :
e-mail : MICHMOOREBOX[]yahoo.com
Billing Contact :
PERSON
Michael-D. MOORE (MOORE10-BMN-PE)
2600 MARTIN WAY EAST SUITE C
98506 OLYMPIA
UNITED STATES
phone : +48 22 3895469
fax :
e-mail : MICHMO...@yahoo.com
Technical Contact :
PERSON
Michael-D. MOORE (MOORE10-BMN-PE)
2600 MARTIN WAY EAST SUITE C
98506 OLYMPIA
UNITED STATES
phone : +48 22 3895469
fax :
e-mail : MICHMO...@yahoo.com
Domain servers :
we.redamagedg.com (WRC5-BMN-HST)
st.redamagedg.com (SRC6-BMN-HST)
Created on 05/02/2006 14:49:56
Updated on 05/02/2006 17:43:57
Expires on 05/02/2007 10:49:56
More peepholehh.com sightings:
http://groups.google.com/groups/search?q=peepholehh.com+group%3A*abuse
See also more redamagedg.com sightings:
http://groups.google.com/groups/search?q=redamagedg.com+group%3A*abuse
Let see whois:
Registrar: TUCOWS INC.
Registrant:
Club Betterbeng
Krafttech Ave 67
#91
Cammore, JK 01923
DM
Domain name: REDAMAGEDG.COM
Administrative Contact:
Nenaylo, Boris NEALTHOMAST[]yahoo.com
Krafttech Ave 67
#91
Cammore, JK 01923
DM
+48.223895469
Technical Contact:
Fenison, Elden el...@cybcon.com
30240 SW Parkway #10
Wilsonville, OR 97070
US
+1.5032484449 Fax: +1.5036827701
Registration Service Provider:
CyberConnectics, sup...@cybcon.com
503-248-4449
503-682-7701 (fax)
http://www.cyberconnectics.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: TUCOWS, INC.
Record last updated on 02-May-2006.
Record expires on 02-May-2007.
Record created on 02-May-2006.
Domain servers in listed order:
WE.REDAMAGEDG.COM 58.19.254.157
ST.REDAMAGEDG.COM 59.191.125.254
Domain status: ACTIVE
See also more redamagedg.com sightings:
http://groups.google.com/groups/search?q=redamagedg.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/e40c54e08a4181c7
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: