[email] [drugs - ED Pills] [190.84.83.5] (redavisandsoninc.com / name-services.com / genuine-pharmacy.com / eNom.com) Get now your pack of Genuine Cialis!
TomezNet
IP 190.84.83.5 dynamic-ip-19084835.cable.net.co
Spamvert:
www.redavisandsoninc.com IP 63.251.92.195
(at name-services.com / eNom.com / internap.com)
redavisandsoninc.com IP 216.52.184.240
(at name-services.com / eNom.com / internap.com)
Redirected to:
https://www.genuine-pharmacy.com/
www.genuine-pharmacy.com IP 124.42.127.50
(SBL54680) (at sinnet.com.cn)
Title:
Ed Pills - Donāt let ED affect your sex life. Take control.
Much More Ed Pills sightings:
http://groups.google.com/groups/search?q=%22Ed+Pills%22+group%3A*abuse&start=0&scoring=d&
Much More info below:
====================
Return-Path: <sa...@redavisandsoninc.com>
Delivered-To: [MUNGED]
Received: (qmail 19491 invoked from network); 22 May 2007 18:11:35
-0400
Received: from dynamic-ip-19084835.cable.net.co (190.84.83.5)
by [MUNGED] with SMTP; 22 May 2007 18:11:35 -0400
Message-ID: <1b9601c79cbd$0ac1a491$055354be@Dynamic-
IP-19084835.cable.net.co>
From: "Sales Department" <sa...@redavisandsoninc.com>
To: [MUNGED]
Subject: Get now your pack of Genuine Cialis!
Date: Tue, 22 May 2007 22:08:39 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Now you can order Genuine Viagra directly from Pfizer
Here: http://www.redavisandsoninc.com/
All prices are tax/vat free and same-day free worldwide shipping also
included.
--
[MUNGED]
-- END OF SPAM --
Web ED Pills:
Wbsite is in secure mode https
with link:
https://smarticon.geotrust.com/smarticonprofile?Referer=https://www.genuine-pharmacy.com
GeoTrust, Inc. - QuickSSLā¢ certificate
Domain: https://www.genuine-pharmacy.com
Status: Active
Serial Number: 5f2a0
Validity Period: 3-May-2007 to 3-May-2008
abuse[]geotrust.com is listed in rfc-ignorant.org database
And:
SSL Server Certificate
Connection Encrepted (AES-256) PKCS #1 MD5 With RSA Encryption
Organizational Unit (OU) GT74764619
Version 3
Serial Number 05:F2:A0
Issuer:
CN = Equifax Secure Global eBusiness CA-1
O = Equifax Secure Global
C = US
Issued On 5/4/2007
CRL Distribution Points
Not Critical
URI: http://crl.geotrust.com/crls/globalca1.crl
CN = www.genuine-pharmacy.com
OU = Domain Control Validated - QuickSSL(R)
OU = See www.geotrust.com/resources/cps (c)07
OU = GT74764619
O = www.genuine-pharmacy.com
C = FR
See:
IP 190.84.83.5 dynamic-ip-19084835.cable.net.co
http://www.moensted.dk/spam/?addr=190.84.83.5
http://www.spamhaus.org/query/bl?ip=190.84.83.5
http://www.spamhaus.org/pbl/query/PBL116345
inetnum: 190.84/16
status: allocated
owner: TV Cable S.A.
ownerid: CO-TCSA1-LACNIC
responsible: Heider Javier Motta Barrera
nic-hdl: TCS
person: TV Cable S.A. Static IP Block
e-mail: ipso...@CABLE.NET.CO
postmaster and abuse[]cable.net.co are listed in rfc-ignorant.org
database
route: 190.84.83.0/24
descr: PNAP-MIA asurnet
origin: AS23520
mnt-by: INAP-MAINT-RADB
changed: sh...@internap.com
http://www.cidr-report.org/cgi-bin/as-report?as=23520
IP: 190.84.83.5
Reverse: dynamic-ip-19084835.cable.net.co
Aliases:
Prefix: 190.84.80.0/22
Prefix Name: error
AS: 10620
AS Name: CO-TVBO-LACNIC TVCABLE BOGOTA
http://www.cidr-report.org/cgi-bin/as-report?as=10620
6 SBL/ROKSO listings for IPs under the responsibility of cable.net.co
http://www.spamhaus.org/sbl/listings.lasso?isp=cable.net.co
Spamver URL:
http://www.redavisandsoninc.com/
See sorce code:
<head><title>Object moved</title></head><body><h1>Object Moved</
h1>This object may be found <a HREF="http://www.genuine-
pharmacy.com">here</a>.</body>
See:
redavisandsoninc.com IP 216.52.184.240
www.redavisandsoninc.com IP 63.251.92.195
dns1.name-services.com [69.25.142.1] [TTL=172800] [US]
dns2.name-services.com [216.52.184.230] [TTL=172800] [US]
dns3.name-services.com [63.251.92.193] [TTL=172800] [US]
dns4.name-services.com [64.74.96.242] [TTL=172800] [US]
dns5.name-services.com [70.42.37.1] [TTL=172800] [US]
SOA record [TTL=1800] is:
Primary nameserver: dns1.name-services.com
Hostmaster E-mail address: in...@name-services.com
Serial #: 2002050701
1 MX record are:
10 mail.redavisandsoninc.com [TTL=1800] IP=64.92.172.211 [TTL=1800]
[US]
64.92.172.211 = 211.172.92.64.static.reverse.layeredtech.com
postmaster and abuse[]layeredtech.com are listed in rfc-ignorant.org
database
IP: 64.92.172.211
Reverse: 211.0-24.172.92.64.in-addr.arpa
211.172.92.64.static.reverse.layeredtech.com
Aliases:
mail.jtidevelopment.com
mail.redavisandsoninc.com
Prefix: 64.92.160.0/20
Prefix Name: error
AS: 3561
AS Name: SAVVIS SAVVIS Communications
http://www.moensted.dk/spam/?addr=216.52.184.240
http://www.apews.org/?page=test&C=82&E=162808&ip=216.52.184.240
Blocked - see http://www.spambag.org/cgi-bin/spambag?mailfrom=enom
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/lookup.shtml?216.52.184.240
Much More 216.52.184.240 sightings:
http://groups.google.com/groups/search?q=216.52.184.240+group%3A*abuse&start=0&scoring=d&
Internap Network Services PNAP-8-98 (NET-216-52-0-0-1)
216.52.0.0 - 216.52.255.255
eNom PNAP-DAL-ENOM-RM-01 (NET-216-52-184-224-1)
216.52.184.224 - 216.52.184.255
OrgName: Internap Network Services
OrgID: PNAP
NetRange: 216.52.0.0 - 216.52.255.255
CIDR: 216.52.0.0/16
NetName: PNAP-8-98
NetHandle: NET-216-52-0-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.PNAP.NET
NameServer: NS2.PNAP.NET
CustName: eNom
NetRange: 216.52.184.224 - 216.52.184.255
CIDR: 216.52.184.224/27
NetName: PNAP-DAL-ENOM-RM-01
NetHandle: NET-216-52-184-224-1
Parent: NET-216-52-0-0-1
NetType: Reassigned
route: 216.52.176.0/20
descr: PNAP-DAL
origin: AS12179
mnt-by: INAP-MAINT-RADB
changed: pe...@internap.com
Prefix: 216.52.176.0/20
Prefix Name: PNAP DAL PNAP DAL
AS: 12179
AS Name: INTERNAP-2BLK Internap Network Services
http://www.cidr-report.org/cgi-bin/as-report?as=12179
18 SBL/ROKSO listings for IPs under the responsibility of internap.com
http://www.spamhaus.org/sbl/listings.lasso?isp=internap.com
5 SBL/ROKSO listings for IPs under the responsibility of eNom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=eNom.com
See:
www.redavisandsoninc.com IP 63.251.92.195
www.redavisandsoninc.com has no MX records -> [redavisandsoninc.com
has 1 MX record mail.redavisandsoninc.com (10)]
http://www.sorbs.net/lookup.shtml?63.251.92.195
Much More 63.251.92.195 sightings:
http://groups.google.com/groups/search?q=63.251.92.195+group%3A*abuse&start=0&scoring=d&
999 hosts sharing the same IP
Internap Network Services NETBLK-PNAP-11-99 (NET-63-251-0-0-1)
63.251.0.0 - 63.251.255.255
eNom INAP-WDC002-ENOM-1942 (NET-63-251-92-192-1)
63.251.92.192 - 63.251.92.255
CustName: eNom
Address: 2002 156th Ave NE
NetRange: 63.251.92.192 - 63.251.92.255
CIDR: 63.251.92.192/26
NetName: INAP-WDC002-ENOM-1942
NetHandle: NET-63-251-92-192-1
Parent: NET-63-251-0-0-1
NetType: Reassigned
route: 63.251.80.0/20
descr: PNAP-WDC
descr: InterNAP
origin: AS10913
mnt-by: INAP-MAINT-MCI
changed: jo...@internap.com
Prefix: 63.251.80.0/20
Prefix Name: PNAP WDC InterNAP PNAP WDC InterNAP
AS: 10913
AS Name: INTERNAP-BLK Internap Network Services
http://www.cidr-report.org/cgi-bin/as-report?as=10913
Let see whois:
Registration Service Provided By: eNom, Inc.
Contact: in...@eNom.com
Domain name: redavisandsoninc.com
Administrative Contact:
fernbach d
fabien fernbach (fabien.fernbach[]gmail.com)
+33.0321808051
Fax: -
175 lot les platanes
puget sur argens, ALPESCTTE 83480
FR
Technical Contact:
fernbach d
fabien fernbach (fabien....@gmail.com)
+33.0321808051
Fax: -
175 lot les platanes
puget sur argens, ALPESCTTE 83480
FR
Registrant Contact:
fernbach d
fabien fernbach (fabien....@gmail.com)
+33.0321808051
Fax: -
175 lot les platanes
puget sur argens, ALPESCTTE 83480
FR
Status: Locked
Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com
Creation date: 20 May 2007 22:07:10
Expiration date: 20 May 2008 22:07:10
Redirected to:
https://www.genuine-pharmacy.com/
See:
www.genuine-pharmacy.com IP 124.42.127.50
dns1.name-services.com [69.25.142.1] [TTL=172800] [US]
dns2.name-services.com [216.52.184.230] [TTL=172800] [US]
dns3.name-services.com [63.251.92.193] [TTL=172800] [US]
dns4.name-services.com [64.74.96.242] [TTL=172800] [US]
dns5.name-services.com [70.42.37.1] [TTL=172800] [US]
SOA record [TTL=1800] is:
Primary nameserver: dns1.name-services.com
Hostmaster E-mail address: in...@name-services.com
Serial #: 2002050701
1 MX record is:
10 mail.genuine-pharmacy.com [TTL=1800] IP=124.42.8.150 [TTL=1800]
[CN]
www.genuine-pharmacy.com has no MX records -> [genuine-pharmacy.com
has 1 MX record mail.genuine-pharmacy.com (10)]
http://www.moensted.dk/spam/?addr=124.42.127.50
http://www.spamhaus.org/query/bl?ip=124.42.127.50
inetnum: 124.42.0.0 - 124.42.127.255
netname: SINNET
descr: Beijing Guanghuan Xinwang Digital Technology co.Ltd
person: Chen hao
nic-hdl: CH471-AP
e-mail: lic...@sinnet.com.cn
person: Wang Huijun
nic-hdl: WH271-AP
e-mail: che...@sinnet.com.cn
abuse[]sinnet.com.cn is listed in rfc-ignorant.org database
Prefix: 124.42.0.0/19
Prefix Name: error
AS: 23844
AS Name: BJ GUANGHUAN AP Beijing Guanghuan Xinwang Digital Technology
Co , LTD
http://www.cidr-report.org/cgi-bin/as-report?as=23844
route: 124.42.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: y...@chinaunicom.com.cn
http://www.cidr-report.org/cgi-bin/as-report?as=4134
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL54680
124.42.127.50/32 is listed on the Spamhaus Block List (SBL)
21-May-2007 13:49 GMT | SR22
Spam webhosting - genuine-pharmacy.com
1 SBL listings for IPs under the responsibility of sinnet.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=sinnet.com.cn
Let see whois:
Domain name: genuine-pharmacy.com
Administrative Contact:
trustedmedicals
Daffis Maxime (admin[]wiccanwell.org)
+33.870447578
Fax: -
54 Bd Frederic Arnaud
Midi-Pyrinies, SAINT-GIRONS 09200
FR
Technical Contact:
trustedmedicals
Daffis Maxime (ad...@wiccanwell.org)
+33.870447578
Fax: -
54 Bd Frederic Arnaud
Midi-Pyrinies, SAINT-GIRONS 09200
FR
Registrant Contact:
trustedmedicals
Daffis Maxime (ad...@wiccanwell.org)
+33.870447578
Fax: -
54 Bd Frederic Arnaud
Midi-Pyrinies, SAINT-GIRONS 09200
FR
Status: Locked
Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com
Creation date: 03 May 2007 15:20:01
Expiration date: 03 May 2008 15:20:01
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/a683ef4a285914d3
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/7541b88414d363b1
See also thread:
http://groups.google.com/group/news.admin.net-abuse.email/browse_thread/thread/ee3433c401b6b7c1/28ee636c8dedff9a#28ee636c8dedff9a
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: