[email] [drugs - Legal RX] [218.142.224.34] (awhak.hk - rupponce.com - tyroidont.com - jotokio.info) herein
TomezNet
IP 218.142.224.34 softbank218142224034.bbtec.net
(at ns-c.bbtec.net / softbank.co.jp)
Spamvert:
awhak.hk IP 200.47.54.114
(at COBE.COMSAT.NET.AR)
Web:
Copyright 1994-2006 © International Legal RX medications All rights
reserved.
Much More International Legal RX sightings
http://groups.google.com/groups/search?q=%22International+Legal+RX%22+group%3A*abuse&start=0&scoring=d&
See plenty of forged site certificates and logos.
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: [MUNGED] via 216.252.100.180; Fri, 22 Dec 2006
02:38:30 -0800
X-Originating-IP: [218.142.224.34]
Return-Path: <restr...@evfreefresno.org>
Authentication-Results: mta289.mail.re4.yahoo.com from=;
domainkeys=neutral (no sig)
Received: from 218.142.224.34 (EHLO softbank218142224034.bbtec.net)
(218.142.224.34) by mta289.mail.re4.yahoo.com with SMTP; Fri, 22 Dec
2006 02:38:30 -0800
Received: from UKHWZN (unknown [117.162.38.41]) by bbtec.net with
ESMTP id AEB03B5AFFD7 for <[MUNGED]>; Fri, 22 Dec 2006 19:38:54 +0900
(GMT)
Message-ID: <000901c725b5$4a440af0$22e08eda@computer>
From: "they" <restr...@evfreefresno.org>
To: [MUNGED]
Subject: herein
Date: Fri, 22 Dec 2006 19:38:16 +0900
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative";
boundary="----=_NextPart_000_0005_01C72600.BA1348F0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Content-Length: 7407
<html><head>
<meta http-equiv="Content-Type" content="text/html;
charset=iso-2022-jp">
<meta>
<style></style>
</head>
<div><font face="Arial" size="2"><a rel="nofollow" target="_blank"
HREF="http://awhak.hk"><img alt="" hspace="0"
src="http://attach.mud.mail.yahoo.com/us.f905.mail.yahoo.com/ym/us/ShowLetter?box=Inbox&MsgId=6932_6155257_102903_1363_7407_0_18397_11408_3632858024&bodyPart=2&YY=77369&y5beta=yes&y5beta=yes&order=down&sort=date&pos=0&view=a&head=f&Idx=0"
align="baseline"
border="0"></a></font></div>
<div><font face="Arial" size="2">Contact electronic paper mail short
like. Performing received accord subsection preferred, modules
plus.</font></div>
<div><font face="Arial" size="2">Compiler kernel operating
system.</font></div>
<div><font face="Arial" size="2">Writing holders kind expressed
implied, warranties!</font></div>
<div><font face="Arial" size="2">Service if wish receive. Herein
enforcing, court judgment allegation reason limited issues,
imposed.</font></div>
<div><font face="Arial" size="2">Disclaims interest makes passes
compilers james hacker.</font></div>
<div><font face="Arial" size="2">Copy and distribute, verbatim copies
of this, document, but. Promoting sharing reuse generally because.
Storage bring object executable form one.</font></div>
<div><font face="Arial" size="2">Use pieces in new know do. She,
willing choice thoroughly, believed rest countries interfaces places.
Holder saying, may under below?</font></div>
<div><font face="Arial" size="2">Alter names yoyodyne hereby disclaims,
interest.</font></div>
<div><font face="Arial" size="2">Explicit excluding, among excluded
case body revised!</font></div>
<div><font face="Arial" size="2">Placed holder saying may under below,
refers based means. Equivalent counts, even though compelled sublicense
except expressly. Physically performing received accord subsection,
preferred modules plus.</font></div></html>
</div>
-- END OF SPAM --
See:
IP 218.142.224.34 softbank218142224034.bbtec.net
http://www.moensted.dk/spam/?addr=218.142.224.34
abuse[]bbtec.net is listed in rfc-ignorant.org database
postmaster and abuse[]softbank.co.jp are listed in rfc-ignorant.org
database
inetnum: 218.112.0.0 - 218.143.255.255
netname: BBTECH
descr: Japan Nation-wide Network of Softbank BB Corp.
country: JP
admin-c: SA127-AP
tech-c: SA127-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-JP-BBTECH
changed: hostm...@apnic.net
e-mail: hostm...@bbtec.net
nic-hdl: SA127-AP
notify: ad...@bbtec.net
mnt-by: MAINT-JP-BBTECH
changed: stsu...@softbank.co.jp
route: 218.142.0.0/16
descr: BBT-CIDR-BLOCK-21
origin: AS17676
notify: jmat...@softbank.co.jp
mnt-by: MAINT-AS17676
changed: jmat...@softbank.co.jp
source: RADB
route: 218.142.0.0/16
descr: Yahoo BB CIDR BLOCK
origin: AS17676
mnt-by: MAINT-AS17676
changed: mka...@bb.softbank.co.jp
ASN: 17676
ASN Name: JPNIC-JP-ASN-BLOCK (Japan Network Information Center)
Country (per IP registrar): JP [Japan]
Country IP Range: 218.128.0.0 to 218.143.255.255
City (per outside source): Kobe, Hyogo
http://www.cidr-report.org/cgi-bin/as-report?as=17676
5 SBL/ROKSO listings for IPs under the responsibility of softbank.co.jp
http://www.spamhaus.org/sbl/listings.lasso?isp=softbank.co.jp
See:
awhak.hk IP 200.47.54.114
NS2.UPGOANDSTAY.COM [148.204.182.89 (NO GLUE)] [MX]
NS2.TYROIDONT.COM [148.204.182.89 (NO GLUE)] [MX]
NS1.RUPPONCE.COM [143.248.158.233 (NO GLUE)] [KR]
NS1.JOTOKIO.INFO [63.223.11.14 (NO GLUE)] [US]
[awhak.hk has 1 MX record mail.awhak.hk (10)]
Resolved mail.awhak.hk to 237.167.66.66 at flag.ep.net
http://www.moensted.dk/spam/?addr=200.47.54.114
200.47.54.114 PTR record: 200-47-54-114.comsat.net.ar
postmaster and abuse[]comsat.net.ar are listed in rfc-ignorant.org
database
inetnum: 200.47.0/17
status: allocated
owner: Comsat Argentina S.A.
ownerid: AR-CASA2-LACNIC
responsible: Gabriel Adonaylo
address: Carlos Pellegrini, 1363, 6
person: Administrador IP
e-mail: ip-admin...@COMSAT.COM.AR
route: 200.47.0.0/18
descr: TL route object
descr: Telefonica Data Argentina
descr: Red de Comsat
origin: AS7908
notify: TRE...@advance.com.ar
mnt-by: TDATANET-RR
route: 200.47.54.0/24
descr: COMSAT Argentina S.A.
origin: AS7908
member-of: rs-COMSAT
mnt-by: MNT-COA
changed: gabriel...@comsat.com.ar
ASN: 7908
ASN Name: LACNIC-7908
Country (per IP registrar): AR [Argentina]
Country IP Range: 200.47.0.0 to 200.47.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=7908
5 SBL listings for IPs under the responsibility of comsat.net.ar
http://www.spamhaus.org/sbl/listings.lasso?isp=comsat.net.ar
Let see whois:
Holder English Name (It should be the same as your legal name on your
HKID card or other relevant documents): FLORA DADGARI
Holder Chinese Name:
Email: let...@yahoo.com
Domain Name Commencement Date: 2006-11-25
Country: US
Expiry Date: 2007-11-28
Re-registration Status: Complete
Name of Registrar: HKDNR
Account Name: HK1750562T
Technical Contact:
First name: FLORA
Last name: DADGARI
Company Name: FLORA DADGARI
Name Servers Information:
NS1.JOTOKIO.INFO
NS2.TYROIDONT.COM
NS1.RUPPONCE.COM
NS2.UPGOANDSTAY.COM
More awhak.hk sightings
http://groups.google.com/groups/search?q=awhak.hk+group%3A*abuse&qt_s=Search
See:
NS2.UPGOANDSTAY.COM IP 148.204.182.89
NS2.UPGOANDSTAY.COM has no MX records -> [UPGOANDSTAY.COM has 1 MX
record mail.UPGOANDSTAY.COM (10)]
http://www.moensted.dk/spam/?addr=83.143.12.252
http://www.spamhaus.org/query/bl?ip=83.143.12.252
148.204.182.89 PTR record: www.video.ipn.mx
at apollo.telecom.ipn.mx
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL47528
83.143.12.252/32 is listed on the Spamhaus Block List (SBL/ROKSO)
14-Dec-2006 13:52 GMT | SR20
Yambo Financials.
Yambo nameservers/webhosts:
1 SBL/ROKSO listings for IPs under the responsibility of vgccl.net
http://www.spamhaus.org/sbl/listings.lasso?isp=vgccl.net
inetnum: 148.204/16
status: reassigned
owner: Instituto Politecnico Nacional
ASN Name: LACNIC-3484
http://www.cidr-report.org/cgi-bin/as-report?as=3484
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... upgoandstay.com
Creation Date........ 2006-11-20 19:49:28
Registration Date.... 2006-11-20 19:49:28
Expiry Date.......... 2007-11-20 19:49:28
Organisation Name.... liu fei
Organisation Address. nan chang
Organisation Address.
Organisation Address. nan chang
Organisation Address. 321000
Organisation Address. JX
Organisation Address. CN
Admin Name........... liu fei
Admin Address........ nan chang
Admin Address........
Admin Address........ nan chang
Admin Address........ 321000
Admin Address........ JX
Admin Address........ CN
Admin Email.......... admin[]yergoon.com
Admin Phone.......... +86.79132199223
Admin Fax............ +86.79132100023
Tech Name............ liu fei
Tech Address......... nan chang
Tech Address.........
Tech Address......... nan chang
Tech Address......... 321000
Tech Address......... JX
Tech Address......... CN
Tech Email........... ad...@yergoon.com
Tech Phone........... +86.79132199223
Tech Fax............. +86.79132100023
Bill Name............ liu fei
Bill Address......... nan chang
Bill Address.........
Bill Address......... nan chang
Bill Address......... 321000
Bill Address......... JX
Bill Address......... CN
Bill Email........... ad...@yergoon.com
Bill Phone........... +86.79132199223
Bill Fax............. +86.79132100023
Name Server.......... ns2.upgoandstay.com
Name Server.......... ns1.upgoandstay.com
More upgoandstay.com sightings
http://groups.google.com/groups/search?q=upgoandstay.com+group%3A*abuse&start=0&scoring=d&
See:
NS2.TYROIDONT.COM IP 148.204.182.89
ns2.tyroidont.com has no MX records -> [tyroidont.com has 1 MX record
mail.tyroidont.com (10)]
http://www.moensted.dk/spam/?addr=83.143.12.252
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL47528
Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name:tyroidont.com
Registrant:
liu fei
nanchang
321000
Administrative Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
ad...@ferrywend.com
Technical Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
ad...@ferrywend.com
Billing Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
ad...@ferrywend.com
Registration Date: 2006-11-20
Update Date: 2006-12-02
Expiration Date: 2007-11-20
Primary DNS: ns1.tyroidont.com 63.223.11.14
Secondary DNS: ns2.tyroidont.com 83.143.12.252
More tyroidont.com sightings
http://groups.google.com/groups/search?q=tyroidont.com+group%3A*abuse&start=0&scoring=d&
See:
NS1.RUPPONCE.COM IP 63.223.11.14 and 143.248.158.233
NS1.RUPPONCE.COM has no MX records -> [RUPPONCE.COM has 1 MX record
mail.RUPPONCE.COM (10)]
http://www.moensted.dk/spam/?addr=63.223.11.14
http://www.spamhaus.org/query/bl?ip=63.223.11.14
No PTR records exist for 63.223.11.14
at ns3.wvfiber.net / ns.cais.com / pccwglobal.com
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL49084
63.223.11.14/32 is listed on the Spamhaus Block List (SBL/ROKSO)
13-Dec-2006 18:35 GMT | SR21
Yambo Financials.
Spam DNS Server
5 SBL/ROKSO listings for IPs under the responsibility of pccwglobal.com
http://www.spamhaus.org/sbl/listings.lasso?isp=pccwglobal.com
Let see whois:
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name: rupponce.com
Registrant:
liu fei
nanchang
321000
Administrative Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
admin[]ferrywend.com
Technical Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
ad...@ferrywend.com
Billing Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
ad...@ferrywend.com
Registration Date: 2006-11-20
Update Date: 2006-11-30
Expiration Date: 2007-11-20
Primary DNS: ns1.rupponce.com 63.223.11.14
Secondary DNS: ns2.rupponce.com 83.143.12.252
More rupponce.com sightings
http://groups.google.com/groups/search?q=rupponce.com+group%3A*abuse&start=0&scoring=d&
See:
NS1.JOTOKIO.INFO IP 63.223.11.14, 210.34.0.101
NS1.JOTOKIO.INFO has no MX records -> [JOTOKIO.INFO has 1 MX record
mail.JOTOKIO.INFO (10)]
More 63.223.11.14 sightings
http://www.moensted.dk/spam/?addr=63.223.11.14
http://groups.google.com/groups/search?q=63.223.11.14+group%3A*abuse&start=0&scoring=d&
Let see whois:
Domain ID:D15412445-LRMS
Domain Name:JOTOKIO.INFO
Created On:23-Nov-2006 14:01:34 UTC
Last Updated On:22-Dec-2006 14:34:38 UTC
Expiration Date:23-Nov-2007 14:01:34 UTC
Sponsoring Registrar:Moniker Online Services Inc. (R245-LRMS)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:MONIKER490017
Registrant Name:Emil Trombulak
Registrant Organization:
Registrant Street1:718 18 Ave
Registrant Street2:
Registrant Street3:
Registrant City:Beaver Falls
Registrant State/Province:PA
Registrant Postal Code:15010
Registrant Country:US
Registrant Phone:+1.7248439287
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: bdasly8uip[]yahoo.com
Admin ID:MONIKER490017
Admin Name:Emil Trombulak
Admin Organization:
Admin Street1:718 18 Ave
Admin Street2:
Admin Street3:
Admin City:Beaver Falls
Admin State/Province:PA
Admin Postal Code:15010
Admin Country:US
Admin Phone:+1.7248439287
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: bdasl...@yahoo.com
Billing ID:MONIKER490017
Billing Name:Emil Trombulak
Billing Organization:
Billing Street1:718 18 Ave
Billing Street2:
Billing Street3:
Billing City:Beaver Falls
Billing State/Province:PA
Billing Postal Code:15010
Billing Country:US
Billing Phone:+1.7248439287
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: bdasl...@yahoo.com
Tech ID:MONIKER490017
Tech Name:Emil Trombulak
Tech Organization:
Tech Street1:718 18 Ave
Tech Street2:
Tech Street3:
Tech City:Beaver Falls
Tech State/Province:PA
Tech Postal Code:15010
Tech Country:US
Tech Phone:+1.7248439287
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: bdasl...@yahoo.com
Name Server:NS2.JOTOKIO.INFO
Name Server:NS1.JOTOKIO.INFO
More jotokio.info sightings
http://groups.google.com/groups/search?q=jotokio.info+group%3A*abuse&start=0&scoring=d&
Also from Registrant Contact record let see:
More ferrywend.com sightings
http://groups.google.com/groups/search?q=ferrywend.com+group%3A*abuse&qt_s=Search
Registrar: XIN NET TECHNOLOGY CORPORATION
Domain Name: ferrywend.com
Registrant:
liu fei
nanchang
321000
Administrative Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
admin[]ferrywend.com
Technical Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
ad...@ferrywend.com
Billing Contact:
liu fei
liu fei
nanchang
jiang xi Jiangxi 321000
China
tel: 86 0791 32299123
fax: 86 0791 32299123
ad...@ferrywend.com
Registration Date: 2006-11-20
Update Date: 2006-11-20
Expiration Date: 2007-11-20
Primary DNS: ns2.xinnetdns.com 210.51.170.48
Secondary DNS: ns2.xinnet.cn 210.51.170.67
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/0de1983718dc3710
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8ecd40ace3a1cdd5
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: