[email] [meds] (toplevelcombination.com) Private E-site, International express outlet.
TomezNet
IP 218.82.191.129
(at CHINANET-SH)
Spamvert:
onlinepharmacy.toplevelcombination.com IP 211.93.72.96
(SBL30697) (at dns.jlcc.cnuninet.net / cnuninet.com)
Spammer:
Discount Pharmacy a.k.a Instant Pharmacy
instant-pharmacy.net IP 201.49.143.104
(SBL34829) (at easytone.com.br) (OLD IP 211.93.72.96)
See Spamvert URL at:
http://it.geocities.com/vaughn_wirebaugh/
Redirected:
http://onlinepharmacy.toplevelcombination.com/
Received at an address harvested from our autoresponder and from domain
registration.
More info below:
====================
X-Message-Status: n
X-SID-PRA: Em <clar...@madder.com>
X-SID-Result: TempError
X-Message-Info: 6sSXyD95QpX7pXnqKtI5DOcVUuXxPB8SXLUaYOpdZKg=
Received: from tomts19-srv.bellnexxia.net ([209.226.175.73]) by
bay0-pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Tue, 29 Nov 2005 00:51:43 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
([207.228.2...])
by toip2.bellnexxia.net with ESMTP; 29 Nov 2005 03:59:43 -0500
Received: from madder.com ([218.82.191.129])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jAT8pbW04807;
Tue, 29 Nov 2005 03:51:40 -0500 (EST)
Message-ID: <64D55380...@madder.com>
Date: Mon, 28 Nov 2005 23:22:33 -0200
Reply-To: "Em" <clar...@madder.com>
From: "Em" <clar...@madder.com>
User-Agent: Internet Mail Service (5.5.2650.21)
MIME-Version: 1.0
To: "Chase" <xx..xx@xx..xx.com>
Cc: <xx..xx@xx..xx.com>
Subject: Private E-site, International express outlet.
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Originating-IP: [0]
Return-Path: clar...@madder.com
X-OriginalArrivalTime: 29 Nov 2005 08:51:44.0127 (UTC)
FILETIME=[1F9EF0F0:01C5F4C2]
Don't let our bargain price tags trick you; you are purchasing a high
quality good.
Superior service is our goal. Your order will be delivered in due time,
in
reliable packing ensuring complete safety and confidentiality.
No patron of ours waits for their orders with our punctual mailing.
A top epharmacy popular among American internet users. This zone is the
heart of top medicine, value & services.
Over 150 popularly used effective aid purchasable. Discover all the
brand
name goods and more in our outlet.
Get out of the awkwardness of commuting to the MD's consulting room.
Your
privacy is promised.
http://it.geocities.com/vaughn_wirebaugh/
Have a great day,
Em
her head measure made her proposal look up in a great hurry. Yc
comparison "Anywhere!" shouted the excited equally Professor. "Only be
quick about it!"
Crayford broke away from gram democracy the officers near him; and,
quintuplet hurrying
-- END OF SPAM --
More sightings of URL redirect at it.geocities.com:
http://groups.google.com/groups?q=%22it.geocities.com%22+group:*abuse*&start=0&scoring=d&
Identical onlinepharmacy spam as:
onlinepharmacy.mixesandtopvalue.com IP 211.93.72.97
onlinepharmacy.rightfromtoddlingweb.com IP 222.168.100.163
onlinepharmacy.offamilyniceweb.com IP 211.93.72.96
See:
IP 218.82.191.129
http://www.moensted.dk/spam/?addr=218.82.191.129
http://cbl.abuseat.org/lookup.cgi?ip=218.82.191.129
inetnum: 218.78.0.0 - 218.83.255.255
netname: CHINANET-SH
route: 218.80.0.0/14
descr: Chinanet Shanghai
origin: AS4812
10 SBL/ROKSO listings for IPs under the responsibility of CHINANET-SH
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-SH
See:
onlinepharmacy.toplevelcombination.com IP 211.93.72.96
ns1.toplevelcombination.com A IN 172800 218.12.197.158
ns2.toplevelcombination.com A IN 172800 222.168.100.163
onlinepharmacy.toplevelcombination.com has no MX records ->
[toplevelcombination.com has 1 MX record
mail.toplevelcombination.com.(12300)]
http://www.moensted.dk/spam/?addr=211.93.72.96
More 211.93.72.96 sightings:
http://groups.google.com/groups?q=211.93.72.96+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL30697
211.93.72.96/31 is listed on the Spamhaus Block List (SBL)
09-Nov-2005 21:16 GMT | SR03
broadernewspace.com / rws.totaldealspace.com etc.
21 SBL listings for IPs under the responsibility of cnuninet.com
http://www.spamhaus.org/SBL/listings.lasso?isp=cnuninet.com
inetnum: 211.92.0.0 - 211.93.255.255
netname: UNICOM
route: 211.93.64.0/20
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: jin...@bj.cnuninet.net
More toplevelcombination.com sightings:
http://groups.google.com/groups?q=toplevelcombination.com+group%3A*abuse
Let see whois:
Domain Name.......... toplevelcombination.com
Creation Date........ 2005-07-11 14:57:25
Registration Date.... 2005-07-11 14:57:25
Expiry Date.......... 2006-07-11 14:57:25
Organisation Name.... Minling Zhao
Organisation Address. NO.60 LANE 1034,RD XINZHA
Organisation Address.
Organisation Address. Shenyang
Organisation Address. 110031
Organisation Address. LN
Organisation Address. CN
Admin Name........... Minling Zhao
Admin Address........ NO.60 LANE 1034,RD XINZHA
Admin Address........
Admin Address........ Shenyang
Admin Address........ 110031
Admin Address........ LN
Admin Address........ CN
Admin Email.......... rhdb...@hotmail.com
Admin Phone.......... +86.2483993981
Admin Fax............ +86.2483993981
Tech Name............ Minling Zhao
Tech Address......... NO.60 LANE 1034,RD XINZHA
Tech Address.........
Tech Address......... Shenyang
Tech Address......... 110031
Tech Address......... LN
Tech Address......... CN
Tech Email........... rhdb...@hotmail.com
Tech Phone........... +86.2483993981
Tech Fax............. +86.2483993981
Bill Name............ Minling Zhao
Bill Address......... NO.60 LANE 1034,RD XINZHA
Bill Address.........
Bill Address......... Shenyang
Bill Address......... 110031
Bill Address......... LN
Bill Address......... CN
Bill Email........... rhdb...@hotmail.com
Bill Phone........... +86.2483993981
Bill Fax............. +86.2483993981
Name Server.......... ns2.toplevelcombination.com
Name Server.......... ns1.toplevelcombination.com
>From Web:
http://onlinepharmacy.toplevelcombination.com/contactus.php
Email: ques...@instant-pharmacy.net
See:
instant-pharmacy.net IP 201.49.143.104
(OLD IP 211.93.72.96)
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL34829
201.49.143.0/24 is listed on the Spamhaus Block List (SBL)
27-Nov-2005 06:49 GMT | SR14
qwaszx.com.br spamhaus - breaktheglassnow.com
6 SBL listings for IPs under the responsibility of easytone.com.br
http://www.spamhaus.org/SBL/listings.lasso?isp=easytone.com.br
More instant-pharmacy.net sightings:
http://groups.google.com/groups?q=instant-pharmacy.net+group%3A*abuse
Read more:
http://www.killfile.org/~tskirvin/news/?group=news.admin.net-abuse.sightings
1184627
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: