Spamvert:
ainiortpiklais.com
NS0.ANOTHEGISA.COM [202.103.178.125] => (SBL41284 / ROK4932)
NS0.SIGUMEBERSI.COM [219.153.19.40] => (SBL42281 / ROK4932)
Registrar: ENOM, INC. (enom.com)
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.177; Thu, 18 May 2006
03:00:39 -0700
X-YahooFilteredBulk: 61.144.98.3
X-Originating-IP: [61.144.98.3]
Return-Path: <t...@e-hkma.com>
Authentication-Results: mta181.mail.mud.yahoo.com from=e-hkma.com;
domainkeys=neutral (no sig)
Received: from 207.228.2.... (EHLO xxx.web-hosting.com)
(207.228.2....) by mta181.mail.mud.yahoo.com with SMTP; Thu, 18 May
2006 03:00:39 -0700
Received: from 136856408 ([61.144.98.3]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k4IA05h03045 for <xx..xx@xx..xx.com>; Thu,
18 May 2006 06:00:06 -0400 (EDT)
Received: from e-hkma.com (-1213983112 [-1214142896]) by mcimail.com
(Qmailv1) with ESMTP id E830112E20 for <xx..xx@xx..xx.com>; Thu, 18 May
2006 05:26:00 -0400
Date: Thu, 18 May 2006 05:26:00 -0400
From: "Anorexia H. Reprehended" <t...@e-hkma.com>
X-Mailer: The Bat! (v2.00.8) Personal
X-Priority: 3
Message-ID: <8875369955.2...@e-hkma.com>
To: xx..xx@xx..xx.com
Subject: Premier
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------C8E219CD61DC6EC"
X-Kaspersky-Antivirus: passed
Content-Length: 878
<html>
<xbody>
Man's Health<br>
Anti-Depressants<br>
Antibiotics<br>
Cholesterol<br>
Diabetes<br>
Diuretic<br>
Pain Relief<br>
Sexual Health<br>
Sleep Aids<br>
Weight Loss
<p>and more on <a target="_blank"
href="http://ainiortpiklais.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
>Premier Pharomacy</a></p>
<br>
<br>
<br>
<br>
<br>
<br>
asdffgjd RldRWVRCRlZGdVJaVllBVFEdW0dW
</xbody>
</html>
-- END OF SPAM --
More Premier Pharomacy sightings:
http://groups.google.com/groups/search?q=%22Premier+Pharomacy%22+group%3A*abuse&start=0&scoring=d&
See:
IP 61.144.98.3
http://www.moensted.dk/spam/?addr=61.144.98.3
http://cbl.abuseat.org/lookup.cgi?ip=61.144.98.3
http://www.spamhaus.org/query/bl?ip=61.144.98.3
inetnum: 61.144.0.0 - 61.147.255.255
netname: CHINANET-CN
descr: Data Communication Division
descr: China Telecom
country: CN
route: 61.144.0.0/16
descr: Chinanet Guangdong Telecom
origin: AS4134
remarks: this is registered by ruan zhidan
notify: r...@gddc.com.cn
http://www.cidr-report.org/cgi-bin/as-report?as=
route: 61.144.0.0/15
descr: China Telecom
origin: AS4134
mnt-by: MAINT-AS4134
changed: rout...@ns.chinanet.cn.net
http://www.cidr-report.org/cgi-bin/as-report?as=
21 SBL/ROKSO listings for IPs under the responsibility of CHINANET-GD
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-GD
See:
ainiortpiklais.com IP
NS0.ANOTHEGISA.COM [202.103.178.125] => (SBL41284 / ROK4932)
NS0.SIGUMEBERSI.COM [219.153.19.40] => (SBL42281 / ROK4932)
www.ainiortpiklais.com has no MX records -> ainiortpiklais.com has no
MX records
Let see whois:
Registrar: ENOM, INC.
5 SBL/ROKSO listings for IPs under the responsibility of enom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=enom.com
Registration Service Provided By: Gold-Domain, Inc.
Contact: support@gold-domain . com
Domain name: ainiortpiklais.com
Registrant Contact:
lXM
li xiao ming (zatertusion[]yahoo.com.cn)
+86.02176886639
Fax: none
jun gong lu
shang hai, shang hai 200093
CN
Administrative Contact:
lXM
li xiao ming (zater...@yahoo.com.cn)
+86.02176886639
Fax: none
jun gong lu
shang hai, shang hai 200093
CN
Technical Contact:
lXM
li xiao ming (zater...@yahoo.com.cn)
+86.02176886639
Fax: none
jun gong lu
shang hai, shang hai 200093
CN
Status: Locked
Name Servers:
NS0.ANOTHEGISA.COM
NS0.SIGUMEBERSI.COM
Creation date: 15 May 2006 07:30:50
Expiration date: 15 May 2007 07:30:50
More ANOTHEGISA.COM sightings:
http://groups.google.com/groups/search?q=ANOTHEGISA.COM+group%3A*abuse&start=0&scoring=d&
See also more SIGUMEBERSI.COM sightings:
http://groups.google.com/groups/search?q=SIGUMEBERSI.COM+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/1d4a118b19750260
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8beaec290c7e8eae
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: