[email] [drugs - HealthSuite] (ingaroe.com - oneoraels.com) Premier
TomezNet
IP 211.223.150.164
(at rev1.kornet.net / korea.blackholes)
open proxy -- 1115350803 (Fri May 6 05:40:03 2005)
http://njabl.org/cgi-bin/lookup.cgi?query=211.223.150.164
Spamvert:
ingaroe.com IP 222.60.80.180
Redirected now to:
oneoraels.com IP 222.60.80.180
(ROK4932 - SBL40700) (at crc.net.cn)
More HealthSuite AKA Medic Suite LTD sightings:
http://groups.google.com/groups/search?q=HealthSuite+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.177; Sat, 22 Apr 2006
15:33:21 -0700
X-YahooFilteredBulk: 211.223.150.164
X-Originating-IP: [211.223.150.164]
Return-Path: <rhw...@belice.com>
Authentication-Results: mta325.mail.scd.yahoo.com from=belice.com;
domainkeys=neutral (no sig)
Received: from 207.228...... (EHLO xxx.web-hosting.com)
(207.228......) by mta325.mail.scd.yahoo.com with SMTP; Sat, 22 Apr
2006 15:33:21 -0700
Received: from -1215150656 (fu@[211.223.150.164]) by
xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id k3MMWQ514659 for
<xx..xx@xx..xx.com>; Sat, 22 Apr 2006 18:32:27 -0400 (EDT)
Received: from belice.com (-1215231352 [-1215126192]) by
miho-nakayama.com (Qmailv1) with ESMTP id 4AAD38E313 for
<xx..xx@xx..xx.com>; Sat, 22 Apr 2006 17:27:41 -0500
Date: Sat, 22 Apr 2006 17:27:41 -0500
From: "Cuter T. Apse" <rhw...@belice.com>
X-Mailer: The Bat! (v2.00.9) Personal
X-Priority: 3
Message-ID: <3497476516.2...@belice.com>
To: "Webmaster" <xx..xx@xx..xx.com>
Subject: Premier
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------A88BA2F0046F354"
X-AntiVirus: OK! AntiVir MailGate Version 2.0.1; AVE: 6.15.0.0; VDF:
6.15.0.6
Content-Length: 456
<html>
<xbody>
Tired of low-quality Chinese and Indian medications?<br>
Use only the branded one!<br>
<br>
Man's Health<br>
Anti-Depressants<br>
Antibiotics<br>
Cholesterol<br>
Diabetes<br>
Diuretic<br>
Pain Relief<br>
Sexual Health<br>
Sleep Aids<br>
Weight Loss
<p>and more on <a target="_blank" href="http://ingaroe.com/[MUNGED]"
>Premier Pharhmacy</a></p>
<br>
<br>
<br>
<br>
<br>
<br>
[MUNGED]
</xbody>
</html>
-- END OF SPAM --
According to website:
SQUARETRADE - Licensed Pharmacy Program Member
Pharmacy License BCL65
COPYRIGHT © 2004. Medic Suite LTD
More Medic Suite LTD sightings:
http://groups.google.com/groups/search?q=%22Medic+Suite%22+group%3A*abuse
See:
IP 211.223.150.164
http://www.moensted.dk/spam/?addr=211.223.150.164
http://cbl.abuseat.org/lookup.cgi?ip=211.223.150.164
http://www.spamhaus.org/query/bl?ip=211.223.150.164
http://www.spamcop.net/bl.shtml?211.223.150.164
http://dsbl.org/listing?211.223.150.164
IPv4 Address : 211.223.150.0-211.223.150.255
Network Name : KORNET-INFRA000001
Connect ISP Name : KORNET
route: 211.216.0.0/13
descr: KORnet Powered BY Korea Telecom
origin: AS4766
mnt-by: MAINT-AS4766
changed: chinny7...@kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom
http://www.cidr-report.org/cgi-bin/as-report?as=4766
28 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
See:
ingaroe.com IP 222.60.80.180
ns0.timopoted.com [222.60.80.180]
ns0.wingela.com [202.67.138.52]
Primary DNS server: ns0.timopoted.com
Responsible Name: n...@wingela.com
ingaroe.com has no MX records
http://www.moensted.dk/spam/?addr=222.60.80.180
http://www.spamhaus.org/query/bl?ip=222.60.80.180
inetnum: 222.32.0.0 - 222.63.255.255
netname: CRTC
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
descr: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
country: CN
route: 222.32.0.0/11
descr: CHINA RAILWAY TELECOMMUNICATIONS
country: CN
origin: AS9394
mnt-by: MAINT-CN-CRTC
changed: wan...@crc.net.cn
ASN: 9394
ASN Name: CRNET (CHINA RAILWAY Internet(CRNET))
http://www.cidr-report.org/cgi-bin/as-report?as=9394
16 SBL/ROKSO listings for IPs under the responsibility of crc.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=crc.net.cn
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40700
222.60.80.180/32 is listed on the Spamhaus Block List (SBL/ROKSO)
22-Apr-2006 04:58 GMT | SR22
Leo Kuvayev / BadCow
Spammer webhosting & DNS - clovapinus.com (Pharmacy Express)
See related listings SBL40637 and SBL40724
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : ingaroe.com (INGARO2-BMN-DOM)
Registrar : BookMyName
Registrant / Admin Contact :
PERSON
Julio PEREZ (PEREZ84-BMN-PE)
215 Fuchsia Dr
95019 Freedom
UNITED STATES CA
phone : 8318406259
fax :
e-mail : arrivinatte[]yahoo.com
Billing Contact :
PERSON
Julio PEREZ (PEREZ84-BMN-PE)
215 Fuchsia Dr
95019 Freedom
UNITED STATES CA
phone : 8318406259
fax :
e-mail : arriv...@yahoo.com
Technical Contact :
PERSON
Julio PEREZ (PEREZ84-BMN-PE)
215 Fuchsia Dr
95019 Freedom
UNITED STATES CA
phone : 8318406259
fax :
e-mail : arriv...@yahoo.com
Domain servers :
ns0.timopoted.com (NTC120-BMN-HST)
ns0.wingela.com (NWC147-BMN-HST)
Created on 04/19/2006 18:19:10
Updated on 04/21/2006 01:05:56
Expires on 04/19/2007 14:19:09
More ingaroe.com sightings:
http://groups.google.com/groups/search?q=ingaroe.com+group%3A*abuse
See:
oneoraels.com IP 222.60.80.180
ns0.timopoted.com [222.60.80.180]
ns0.wingela.com [202.67.138.52]
oneoraels.com has no MX records
http://www.moensted.dk/spam/?addr=222.60.80.180
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : oneoraels.com (ONEORA2-BMN-DOM)
Registrar : BookMyName (bookmyname.com)
Registrant / Admin Contact :
PERSON
Magdalena PORTER (PORTER26-BMN-PE)
5604 Norwalk Court
92505 Riverside
UNITED STATES CA
phone : 909-352-9185
fax :
e-mail : lung...@yahoo.com
Billing Contact :
PERSON
Magdalena PORTER (PORTER26-BMN-PE)
5604 Norwalk Court
92505 Riverside
UNITED STATES CA
phone : 909-352-9185
fax :
e-mail : lung...@yahoo.com
Technical Contact :
PERSON
Magdalena PORTER (PORTER26-BMN-PE)
5604 Norwalk Court
92505 Riverside
UNITED STATES CA
phone : 909-352-9185
fax :
e-mail : lung...@yahoo.com
Domain servers :
ns0.timopoted.com (NTC120-BMN-HST)
ns0.wingela.com (NWC147-BMN-HST)
Created on 04/21/2006 18:51:06
Updated on 04/22/2006 11:01:46
Expires on 04/21/2007 14:51:06
Let see whois:
Registrar: YESNIC CO. LTD.
DNS Servers: No nameserver ???
Domain Name : timopoted.com
Registrant:
Name : Tonya Colpitts
Email : tree...@yahoo.com
Address : 811 17th St
Zipcode : 77550
Nation : US
Tel : 4092569401
Fax :
Administrative Contact:
Name : Tonya Colpitts
Email : tree...@yahoo.com
Address : 811 17th St
Zipcode : 77550
Nation : US
Tel : 4092569401
Fax :
Technical Contact:
Name : Tonya Colpitts
Email : tree...@yahoo.com
Address : 811 17th St
Zipcode : 77550
Nation : US
Tel : 4092569401
Fax :
Name Servers:
Dates & Status:
Created Date 2006-04-19 14:55:08 EDT
Updated Date 2006-04-19 14:55:08 EDT
Valid Date 2007-04-19 14:55:08 EDT
Status ACTIVE
See also more timopoted.com sightings:
http://groups.google.com/groups/search?q=timopoted.com+group%3A*abuse
Let see whois:
Registrar: YESNIC CO. LTD.
DNS Servers: No nameserver ???
Domain Name : wingela.com
Registrant::
Name : Tonya Colpitts
Email : hoid...@yahoo.com
Address : 811 17th St
Zipcode : 77550
Nation : US
Tel : 4092569401
Fax :
Administrative Contact::
Name : Tonya Colpitts
Email : hoid...@yahoo.com
Address : 811 17th St
Zipcode : 77550
Nation : US
Tel : 4092569401
Fax :
Technical Contact:
Name : Tonya Colpitts
Email : hoid...@yahoo.com
Address : 811 17th St
Zipcode : 77550
Nation : US
Tel : 4092569401
Fax :
Name Servers:
Dates & Status:
Created Date 2006-04-19 14:57:15 EDT
Updated Date 2006-04-19 14:57:15 EDT
Valid Date 2007-04-19 14:57:15 EDT
Status ACTIVE
More wingela.com sightings:
http://groups.google.com/groups/search?q=wingela.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/b8e35e4a2cceb9b1
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/1bc133422897c25f
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: