[email] [drugs - HealthSuite] (transoran.com - poltraini.com) The Ultimate Online Pharmaceuticals
TomezNet
IP 219.178.134.185 softbank219178134185.bbtec.net
(at softbank.co.jp)
Spamvert:
transoran.com IP 125.65.77.102
(at CHINANET-SC)
Redirected to:
http://romkapisalker.com/
romkapisalker.com IP 125.65.77.102
both domains DNS
ns0.rapiexansi.com IP 222.60.14.242
SBL41303, SBL41304, SBL41402
ns0.toresinato.com IP 202.103.178.125
SBL41284
More HealthSuite AKA Medic Suite LTD sightings:
http://groups.google.com/groups/search?q=HealthSuite+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.178; Wed, 03 May 2006
01:17:44 -0700
X-YahooFilteredBulk: 219.178.134.185
X-Originating-IP: [219.178.134.185]
Return-Path: <gar...@giinox.com>
Authentication-Results: mta286.mail.scd.yahoo.com from=giinox.com;
domainkeys=neutral (no sig)
Received: from 207.228.2.... (EHLO xxx.web-hosting.com) (207.228.2....)
by mta286.mail.scd.yahoo.com with SMTP; Wed, 03 May 2006 01:17:43 -0700
Received: from 143022224 (softbank219178134185.bbtec.net
[219.178.134.185]) by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id
k438HYJ28054 for <xx..xx@xx..xx.com>; Wed, 3 May 2006 04:17:36 -0400
(EDT)
Received: from giinox.com (142487640 [143487816]) by
softbank219178134185.bbtec.net (Qmailv1) with ESMTP id 6301604C9C for
<xx..xx@xx..xx.com>; Wed, 03 May 2006 04:31:25 -0400
Date: Wed, 03 May 2006 04:31:25 -0400
From:"Inoculations O. Natalia" <gar...@giinox.com>
X-Mailer: The Bat! (v2.00.8) Personal
X-Priority: 3
Message-ID: <3389658919.2...@giinox.com>
To: xx..xx@xx..xx.com
Subject: The Ultimate Online Pharmaceuticals
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------7DCF2D64BD4B530"
X-Kaspersky-Antivirus: passed
Content-Length: 656
<html>
<xbody>
<b>Vlisagra - $3.3 <br>
Levitrra - $3.3<br>
Cialmis - $3.7<br>
Imitrkex - $16.4<br>
Fnlomax - $2.2<br>
Ultrtam - $0.78<br>
Viowxx - $4.75 <br>
Ameblem - $2.2<br>
VaIioum - $0.97<br>
Xanxax - $1.09<br>
Sonma - $3 <br>
Meriedia - $2.2</b><br>
<br>
<br>
<a target="_blank"
href="http://transoran.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
><strong>visit our website</strong></a><br>
<br>
<br>
Best regards,<br>
Online Pharmaceuticals
<br>
<br>
ghfgdrtpu RldRWVRCRlZGdVJaVllBVFEdW0dW
<br>
<br>
<br>
In for a penny, in for a pound.
<br>
Laughter is the best medicine.
<br>
Cold hand, warm heart.
</xbody>
</html>
-- END OF SPAM --
See also more transoran.com sightings:
http://groups.google.com/groups/search?q=lasromtea.com+group%3A*abuse
See:
IP 219.178.134.185 softbank219178134185.bbtec.net
http://www.moensted.dk/spam/?addr=219.178.134.185
http://www.spamhaus.org/query/bl?ip=219.178.134.185
inetnum: 219.168.0.0 - 219.215.255.255
netname: BBTECH
descr: Japan nation-wide Network of SOFTBANK BB CORP
descr: Tokyo, Japan
country: JP
route: 219.178.0.0/16
descr: BBT-CIDR-BLOCK
origin: AS17676
notify: ad...@bbtec.net
mnt-by: MAINT-AS17676
changed: ad...@bbtec.net 20020412
source: RADB
route: 219.178.0.0/16
descr: Yahoo BB CIDR BLOCK
origin: AS17676
mnt-by: MAINT-AS17676
changed: mka...@bb.softbank.co.jp
5 SBL/ROKSO listings for IPs under the responsibility of softbank.co.jp
http://www.spamhaus.org/SBL/listings.lasso?isp=softbank.co.jp
See Spamvert:
transoran.com IP 125.65.77.102
ns0.poltraini.com A IN 165159 125.208.3.42
ns0.lasromtea.com A IN 165159 202.103.178.125
transoran.com has no MX records
http://www.moensted.dk/spam/?addr=125.65.77.102
More 125.65.77.102 sightings:
http://groups.google.com/groups/search?q=125.65.77.102+group%3A*abuse
inetnum: 125.64.0.0 - 125.71.255.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
route: 125.65.77.0/24
descr: Wholesale Communications Group
origin: AS18104
mnt-by: MAINT-AS7474
changed: n...@optus.net.au 20060406
source: RADB
http://www.cidr-report.org/cgi-bin/as-report?as=18104
route: 125.64.0.0/13
descr: China Telecom ChengDu
origin: AS4134
mnt-by: MAINT-AS4134
changed: tia...@cndata.com
http://www.cidr-report.org/cgi-bin/as-report?as=4134
1 SBL listings for IPs under the responsibility of optus.net.au
http://www.spamhaus.org/SBL/listings.lasso?isp=optus.net.au
Let see whois:
Registrar: GO DADDY SOFTWARE, INC.
Registrant:
Fred Cartland
1814 Harriman Ln, ste B
Redondo Beach, California 90278
United States
Registered through: GoDaddy.com (http://www.godaddy.com)
Domain Name: TRANSORAN.COM
Created on: 28-Apr-06
Expires on: 28-Apr-07
Last Updated on: 29-Apr-06
Administrative Contact:
Cartland, Fred everlarkam[]yahoo.com
1814 Harriman Ln, ste B
Redondo Beach, California 90278
United States
(310) 376-3498
Technical Contact:
Cartland, Fred everl...@yahoo.com
1814 Harriman Ln, ste B
Redondo Beach, California 90278
United States
(310) 376-3498
Domain servers in listed order:
NS0.LASROMTEA.COM
NS0.POLTRAINI.COM
More transoran.com sightings:
http://groups.google.com/groups/search?q=transoran.com+group%3A*abuse
See:
poltraini.com
Let see whois:
Domain Name : poltraini.com
::Registrant::
Name : Briittaney Parbs
Email : becaisarm[]yahoo.com
Address : 358 1/2 N Gardner Stl
Zipcode : 90036
Nation : US
Tel : 3238577011
Fax :
::Administrative Contact::
Name : Briittaney Parbs
Email : beca...@yahoo.com
Address : 358 1/2 N Gardner Stl
Zipcode : 90036
Nation : US
Tel : 3238577011
Fax :
::Technical Contact::
Name : Briittaney Parbs
Email : beca...@yahoo.com
Address : 358 1/2 N Gardner Stl
Zipcode : 90036
Nation : US
Tel : 3238577011
Fax :
::Name Servers::
::Dates & Status::
Created Date 2006-04-22 10:29:20 EDT
Updated Date 2006-04-22 10:29:20 EDT
Valid Date 2007-04-22 10:29:20 EDT
Status REGISTRAR-HOLD
More transoran.com sightings:
http://groups.google.com/groups/search?q=poltraini.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/7ce4cd272110e1df
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/d44be2bd927e33fe
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: