[email] [drugs - MyCanadianPharmacy] (perchstage.com) Your health, mid-hour
TomezNet
IP 201.246.66.195 195-66-246-201.adsl.terra.cl
(at NS2.TERRA.CL)
Spamvert:
D74U30.perchstage.com IP 213.253.214.132
(SBL42747 - ROK3095) (at ns1.pantel.net / pantel.hu)
IP 62.75.178.134 static-ip-62-75-178-134.inaddr.intergenia.de
(SBL40023 - ROK6271) (at ptr1.intergenia.de)
Yambo Financials (ROK6271) MyCanadianPharmacy Corp. sightings:
http://groups.google.com/groups/search?q=%22MyCanadianPharmacy%22+group%3A*abuse&start=0&scoring=d&
Plenty of forged site certificates and logos.
Received at an address harvested from domain registration.
More info below:
====================
X-SID-PRA: Ty Driver <TyDr...@0451.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW41tblzJdplpsntaoxogZOtC1Z6kHnoKt4g=
Received: from tomts1-srv.bellnexxia.net ([209.226.175.113]) by
bay0-pamc1-f10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 16 Jun 2006 11:11:17 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip1.bellnexxia.net with ESMTP; 16 Jun 2006 14:11:12 -0400
Received: (qmail 1974 invoked by uid 110); 16 Jun 2006 18:11:09 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 1964 invoked from network); 16 Jun 2006 18:11:09 -0000
Received: from 195-66-246-201.adsl.terra.cl (201.246.66.195)
by xx..xx..xx.net with SMTP; 16 Jun 2006 18:11:09 -0000
Message-ID:
<662161c80604v7rjir97ia...@mail.0451.com>
Date: Fri, 16 Jun 2006 18:11:09 +0240
From: "Ty Driver" <TyDr...@0451.com>
To: xx..xx@xx..xx.com
Subject: Your health, mid-hour
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
X-Spam: Not detected
Return-Path: aw...@0451.com
X-OriginalArrivalTime: 16 Jun 2006 18:11:17.0946 (UTC)
FILETIME=[436169A0:01C69170]
Even if you have no erectin problems SOFT CIAzLIS
would help you to make BETTER SE X MORE OFTEN!
and to bring unimagnable plesure to her.
Just disolve half a pil under your tongue
and get ready for action in 15 minutes.
The tests showed that the majority of men
after taking this medic ation were able to have
PERFECT ER ECTI ON during 36 hours!
VISIT US, AND GET OUR SPECIAL 70% DISC OUNT OFER!
==========
brighter and brighter and at last turned so brilliant that no gull
could
garage. If stalkers could get their hands on a map like that ...
but it
instructor here. You couldn't leave!"
"Here," he said. "From a grateful humanity.
quietly with them all, exhorting them never to stop their learning
and
away. It was clear. I could see every blade of grass, every crack. It
looked
from his spot.
had spent almost all of the money. They hadn't caught me with the
goods, and
-- END OF SPAM --
See forged site certificates and logos by My Canadian Pharmacy:
* Pharmacy Checker Certificate
My Canadian Pharmacy
Company Name: Pharmacy
Country: Canada
CEO/President: Jack Poppins
My Canadian Pharmacy Corp.
1592 Wilson Avenue,
Toronto, ON M3L 1A6
* BBB Certificate
BBBOnLine Reliability
Participation Confirmed For Pharmacy
Participant through 12/30/2007
* Visa Certificate - Verified by Visa
* Verisign Certificate - Secure Site Seal
Pharmacy is a Soltrus Secure Site
Validity Period: 10-MAY-06 - 10-MAY-08
Server ID Information:
Country = CA
State = Ontario
Locality = Toronto
Organization = Technical Consultants and Experts Group Inc
Organizational Unit = TCE Group
Organizational Unit = Terms of use at Verisign (c) 04
* CIPA Membership (The Canadian International Pharmacy Association)
Valid Member: Certified Member
Organization: Pharmacy
Licence #: 91959
Location: Toronto, Canada
Current Status: Active
AND:
State of Ontario drug reselling License
Redirected to:
http://62.75.178.134:8080/p/p/images/license.jpg
404 not found
See:
IP 201.246.66.195 195-66-246-201.adsl.terra.cl
http://www.moensted.dk/spam/?addr=201.246.66.195
http://dsbl.org/listing?201.246.66.195
inetnum: 201.246.64/18
status: allocated
owner: Terra Networks Chile S.A.
ownerid: CL-TNCS-LACNIC
ASN Name: LACNIC-7417
Country IP Range: 201.246.0.0 to 201.246.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=7418
1 SBL listings for IPs under the responsibility of terra.cl
http://www.spamhaus.org/sbl/listings.lasso?isp=terra.cl
See:
IP 62.75.178.134
62.75.178.134 PTR record: static-ip-62-75-178-134.inaddr.intergenia.de
at ptr1.intergenia.de
http://www.moensted.dk/spam/?addr=62.75.178.134
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40023
62.75.178.134/32 is listed on the Spamhaus Block List (SBL/ROKSO)
08-Apr-2006 09:27 GMT | SR20
Yambo Financials
Yambo Pharmacy: image hosting
7 SBL/ROKSO listings for IPs under the responsibility of intergenia.de
http://www.spamhaus.org/sbl/listings.lasso?isp=intergenia.de
See:
D74U30.perchstage.com IP 213.253.214.132
ns1.perchstage.com A IN 600 213.253.214.132
ns2.perchstage.com A IN 600 213.253.214.132
ns3.perchstage.com A IN 600 109.51.200.45
mail.perchstage.com IP 251.229.97.66
ns2.reallysmarts.info [218.5.1.241]
ns1.reallysmarts.info [216.147.136.218]
ns2.pushberry.info [218.5.1.241]
ns1.pushberry.info [216.147.136.218]
D74U30.perchstage.com has no MX records -> [perchstage.com has 1 MX
record mail.perchstage.com(10)]
http://www.moensted.dk/spam/?addr=213.253.214.132
http://www.spamhaus.org/query/bl?ip=213.253.214.132
More 213.253.214.132 sightings:
http://groups.google.com/groups/search?q=213.253.214.132+group%3A*abuse&start=0&scoring=d&
inetnum: 213.253.214.128 - 213.253.214.143
netname: Ereco
descr: Ereco
country: HU
route: 213.253.192.0/18
descr: PanTel
origin: AS12301
notify: regi...@pantel.hu
mnt-by: AS12301-MNT
changed: art...@pantel.hu 20010309
changed: pnt...@freestart.hu
http://www.cidr-report.org/cgi-bin/as-report?as=12301
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42747
213.253.214.132/32 is listed on the Spamhaus Block List (SBL/ROKSO)
31-May-2006 00:29 GMT | SR20
Yambo Financials
Yambo (Pharmacy and Rolex) hosts, nameservers
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Yambo%20Financials
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK3095
1 SBL/ROKSO listings for IPs under the responsibility of pantel.hu
http://www.spamhaus.org/sbl/listings.lasso?isp=pantel.hu
Let see whois:
Registrar: LEAD NETWORKS DOMAINS PVT. LTD.
Domain Name: PERCHSTAGE.COM
Registrant:
Akeifuke Hirano
Akeifuke Hirano (try...@yahoo.com)
193 N Sierra Vista Dr
TUCSON
Arizona,85719
US
Tel. +001.5203207562
Creation Date: 12-Jun-2006
Expiration Date: 12-Jun-2007
Domain servers in listed order:
ns2.reallysmarts.info [218.5.1.241]
ns1.oaktint.info [216.147.136.218]
ns2.pushberry.info [218.5.1.241]
ns1.greatgoget.info [200.161.200.252]
Administrative Contact:
Akeifuke Hirano
Akeifuke Hirano (trynxjf[]yahoo.com)
193 N Sierra Vista Dr
TUCSON
Arizona,85719
US
Tel. +001.5203207562
Technical Contact:
Akeifuke Hirano
Akeifuke Hirano (try...@yahoo.com)
193 N Sierra Vista Dr
TUCSON
Arizona,85719
US
Tel. +001.5203207562
Billing Contact:
Akeifuke Hirano
Akeifuke Hirano (try...@yahoo.com)
193 N Sierra Vista Dr
TUCSON
Arizona,85719
US
Tel. +001.5203207562
Status: ACTIVE
See:
ns2.reallysmarts.info IP 218.5.1.241
http://www.moensted.dk/spam/?addr=218.5.1.241
http://www.spamhaus.org/query/bl?ip=218.5.1.241
More 218.5.1.241 sightings:
http://groups.google.com/groups/search?q=218.5.1.241+group%3A*abuse
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43363
218.5.1.241/32 is listed on the Spamhaus Block List (SBL/ROKSO)
14-Jun-2006 15:14 GMT | SR22
Yambo Financials
Spammer DNS - ns2.pushberry.info
1 SBL/ROKSO listings for IPs under the responsibility of chinanet-fj
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-fj
Let see whois.afilias.info:
Domain ID:D13487836-LRMS
Domain Name: REALLYSMARTS.INFO
Created On:20-May-2006 15:50:17 UTC
Last Updated On:25-May-2006 16:15:34 UTC
Expiration Date:20-May-2007 15:50:17 UTC
Sponsoring Registrar:eNom, Inc. (R126-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:ACE6C0B0E6A91129
Registrant Name:Danuta Sarzynscy
Registrant Organization:Sarzynscy Danuta
Registrant Street1:Hrubieszowska 16
Registrant Street2:
Registrant Street3:
Registrant City:Horodlo
Registrant State/Province:HO
Registrant Postal Code:22523
Registrant Country:PL
Registrant Phone:+48.846515401
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: sarzyscy[]yahoo.com
Admin ID:ACE6C0B0E6A91129
Admin Name:Danuta Sarzynscy
Admin Organization:Sarzynscy Danuta
Admin Street1:Hrubieszowska 16
Admin Street2:
Admin Street3:
Admin City:Horodlo
Admin State/Province:HO
Admin Postal Code:22523
Admin Country:PL
Admin Phone:+48.846515401
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: sarz...@yahoo.com
Billing ID:ACE6C0B0E6A91129
Billing Name:Danuta Sarzynscy
Billing Organization:Sarzynscy Danuta
Billing Street1:Hrubieszowska 16
Billing Street2:
Billing Street3:
Billing City:Horodlo
Billing State/Province:HO
Billing Postal Code:22523
Billing Country:PL
Billing Phone:+48.846515401
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: sarz...@yahoo.com
Tech ID:ACE6C0B0E6A91129
Tech Name:Danuta Sarzynscy
Tech Organization:Sarzynscy Danuta
Tech Street1:Hrubieszowska 16
Tech Street2:
Tech Street3:
Tech City:Horodlo
Tech State/Province:HO
Tech Postal Code:22523
Tech Country:PL
Tech Phone:+48.846515401
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: sarz...@yahoo.com
Name Server:NS2.REALLYSMARTS.INFO
Name Server:NS1.REALLYSMARTS.INFO
More reallysmarts.info sightings:
http://groups.google.com/groups/search?q=reallysmarts.info+group%3A*abuse&start=0&scoring=d&
See:
ns1.pushberry.info IP 216.147.136.218
ns1.pushberry.info has no MX records -> [pushberry.info has 1 MX record
mail.pushberry.info.(10)]
http://www.moensted.dk/spam/?addr=216.147.136.218
http://www.spamhaus.org/query/bl?ip=216.147.136.218
More 216.147.136.218 sightings:
http://groups.google.com/groups/search?q=216.147.136.218+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40595
216.147.136.0/23 is listed on the Spamhaus Block List (SBL/ROKSO)
03-Jun-2006 12:51 GMT | SR04
Yambo Financials
Hosting hacked server @216.147.136.218,notifications ignored
1 SBL/ROKSO listings for IPs under the responsibility of lymanbros.com
http://www.spamhaus.org/sbl/listings.lasso?isp=lymanbros.com
Let see whois.afilias.info:
Domain ID:D13445012-LRMS
Domain Name:PUSHBERRY.INFO
Created On:17-May-2006 19:01:01 UTC
Last Updated On:25-May-2006 16:15:14 UTC
Expiration Date:17-May-2007 19:01:01 UTC
Sponsoring Registrar:Tucows Inc. (R139-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:tuCj0jDed3lPiwgz
Registrant Name:Mike Ounen
Registrant Organization:Teich Andre
Registrant Street1:Rr.Qemal Stafa, 1
Registrant Street2:
Registrant Street3:
Registrant City:Tirane
Registrant State/Province:Tirane
Registrant Postal Code:16040
Registrant Country:AL
Registrant Phone:+355.04230880
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: cbtgyur8[]yahoo.com
Admin ID:tuo8YXO11UIMRMLT
Admin Name:Mike Ounen
Admin Organization:Teich Andre
Admin Street1:Rr.Qemal Stafa, 1
Admin Street2:
Admin Street3:
Admin City:Tirane
Admin State/Province:Tirane
Admin Postal Code:16040
Admin Country:AL
Admin Phone:+355.04230880
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: cbtg...@yahoo.com
Billing ID:tu8uC9XP4z6V13F3
Billing Name:Mike Ounen
Billing Organization:Teich Andre
Billing Street1:Rr.Qemal Stafa, 1
Billing Street2:
Billing Street3:
Billing City:Tirane
Billing State/Province:Tirane
Billing Postal Code:16040
Billing Country:AL
Billing Phone:+355.04230880
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: cbtg...@yahoo.com
Tech ID:tuBgL7Rk9FO4gNPB
Tech Name:Mike Ounen
Tech Organization:Teich Andre
Tech Street1:Rr.Qemal Stafa, 1
Tech Street2:
Tech Street3:
Tech City:Tirane
Tech State/Province:Tirane
Tech Postal Code:16040
Tech Country:AL
Tech Phone:+355.04230880
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:cbtg...@yahoo.com
Name Server:NS2.PUSHBERRY.INFO
Name Server:NS1.PUSHBERRY.INFO
More pushberry.info sightings:
http://groups.google.com/groups/search?q=pushberry.info+group%3A*abuse&start=0&scoring=d&
See:
ns1.oaktint.info IP 216.147.136.218
ns1.oaktint.info has no MX records -> [oaktint.info has 1 MX record
mail.oaktint.info.(10)]
http://www.moensted.dk/spam/?addr=216.147.136.218
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL40595
Let see whois.afilias.info:
Domain ID:D13125149-LRMS
Domain Name: OAKTINT.INFO
Created On:19-Apr-2006 17:45:21 UTC
Last Updated On:30-May-2006 20:39:23 UTC
Expiration Date:19-Apr-2007 17:45:21 UTC
Sponsoring Registrar:Tucows Inc. (R139-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:tu8X2zmGNq7MXA2X
Registrant Name:Margarita Emanuylova
Registrant Organization:Margarita Emanuylova
Registrant Street1:7300 W College Dr
Registrant Street2:
Registrant Street3:
Registrant City:Palos Heights
Registrant State/Province:IL
Registrant Postal Code:60463
Registrant Country:US
Registrant Phone:+1.7084488470
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: emaova3[]yahoo.com
Admin ID:tu8X2zmGNq7MXA2X
Admin Name:Margarita Emanuylova
Admin Organization:Margarita Emanuylova
Admin Street1:7300 W College Dr
Admin Street2:
Admin Street3:
Admin City:Palos Heights
Admin State/Province:IL
Admin Postal Code:60463
Admin Country:US
Admin Phone:+1.7084488470
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: ema...@yahoo.com
Billing ID:tu8X2zmGNq7MXA2X
Billing Name:Margarita Emanuylova
Billing Organization:Margarita Emanuylova
Billing Street1:7300 W College Dr
Billing Street2:
Billing Street3:
Billing City:Palos Heights
Billing State/Province:IL
Billing Postal Code:60463
Billing Country:US
Billing Phone:+1.7084488470
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: ema...@yahoo.com
Tech ID:tup6U6xVZv1Ed63k
Tech Name:Domains Manager
Tech Organization:Netfirms, Inc.
Tech Street1:5160 Yonge St
Tech Street2:1800
Tech Street3:
Tech City:Toronto
Tech State/Province:ON
Tech Postal Code:M2N6L9
Tech Country:CA
Tech Phone:+1.4166612100
Tech Phone Ext.:
Tech FAX:+1.4166610700
Tech FAX Ext.:
Tech Email: sup...@netfirms.com
Name Server:NS1.OAKTINT.INFO
Name Server:NS2.OAKTINT.INFO
More oaktint.info sightings:
http://groups.google.com/groups/search?q=oaktint.info+group%3A*abuse&start=0&scoring=d&
See:
ns1.greatgoget.info IP 200.161.200.252
ns1.greatgoget.info has no MX records -> greatgoget.info has no MX
records
http://www.moensted.dk/spam/?addr=200.161.200.252
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL42983
200.161.200.252/32 is listed on the Spamhaus Block List (SBL/ROKSO)
05-Jun-2006 21:46 GMT | SR20
Yambo Financials
Yambo webservers and nameservers
22 SBL/ROKSO listings for IPs under the responsibility of telesp.net.br
http://www.spamhaus.org/sbl/listings.lasso?isp=telesp.net.br
Let see whois.afilias.info:
Domain ID:D13235189-LRMS
Domain Name: GREATGOGET.INFO
Created On:27-Apr-2006 14:13:36 UTC
Last Updated On:25-May-2006 16:15:06 UTC
Expiration Date:27-Apr-2007 14:13:36 UTC
Sponsoring Registrar:Tucows Inc. (R139-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:tuBsNOLGjWe1GwdL
Registrant Name:Maria Walencik
Registrant Organization:home
Registrant Street1:Kolejowa 13
Registrant Street2:
Registrant Street3:
Registrant City:Pionki
Registrant State/Province:PI
Registrant Postal Code:24-44
Registrant Country:PL
Registrant Phone:+1.7184863935
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: walencik_mar[]yahoo.com
Admin ID:tuGHUySUMBk2iz88
Admin Name:Maria Walencik
Admin Organization:home
Admin Street1:Kolejowa 13
Admin Street2:
Admin Street3:
Admin City:Pionki
Admin State/Province:PI
Admin Postal Code:24-44
Admin Country:PL
Admin Phone:+1.7184863935
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: walenc...@yahoo.com
Billing ID:tupvQgrVGHdEtkc9
Billing Name:Maria Walencik
Billing Organization:home
Billing Street1:Kolejowa 13
Billing Street2:
Billing Street3:
Billing City:Pionki
Billing State/Province:PI
Billing Postal Code:24-44
Billing Country:PL
Billing Phone:+1.7184863935
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: walenc...@yahoo.com
Tech ID:tune6D7pMRpZTsC9
Tech Name:Maria Walencik
Tech Organization:home
Tech Street1:Kolejowa 13
Tech Street2:
Tech Street3:
Tech City:Pionki
Tech State/Province:PI
Tech Postal Code:24-44
Tech Country:PL
Tech Phone:+1.7184863935
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:walenc...@yahoo.com
Name Server:NS1.GREATGOGET.INFO
Name Server:NS2.GREATGOGET.INFO
More greatgoget.info sightings:
http://groups.google.com/groups/search?q=greatgoget.info+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.email/msg/9cd978d9e756e6a6
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/5b01f8474560e21c
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: