Spamvert:
exlaponurisib.com IP 61.188.39.88
(at CHINANET-SC)
More HealthSuite AKA Medic Suite LTD sightings:
http://groups.google.com/groups/search?q=HealthSuite+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.173; Mon, 24 Apr 2006
04:21:19 -0700
X-YahooFilteredBulk: 220.190.38.58
X-Originating-IP: [220.190.38.58]
Return-Path: <ia_...@yyhmail.com>
Authentication-Results: mta203.mail.mud.yahoo.com from=yyhmail.com;
domainkeys=neutral (no sig)
Received: from 207.228.238.14 (EHLO aries.web-hosting.com)
(207.228.238.14) by mta203.mail.mud.yahoo.com with SMTP; Mon, 24 Apr
2006 04:21:19 -0700
Received: from 137680672
(k0r...@58.38.190.220.broad.wz.zj.dynamic.cndata.com [220.190.38.58])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id k3OBLCE16003 for
<xx..xx@xx..xx.com>; Mon, 24 Apr 2006 07:21:13 -0400 (EDT)
Received: from yyhmail.com (-1213773624 [-1213750904]) by
58.38.190.220.broad.wz.zj.dynamic.cndata.com (Qmailv1) with ESMTP id
251FD0D330 for <xx..xx@xx..xx.com>; Mon, 24 Apr 2006 06:16:17 -0500
Date: Mon, 24 Apr 2006 06:16:17 -0500
From:"Bluenose E. Semaphore" <ia_...@yyhmail.com>
X-Mailer: The Bat! (v2.00.1) Personal
X-Priority: 3
Message-ID: <2034276775.2...@yyhmail.com>
To: xx..xx@xx..xx.com
Subject: The Ultimate Online Pharmaceuticals
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------16E6E002E933763"
X-AntiVirus: skaner antywirusowy poczty Wirtualnej Polski S. A.
Content-Length: 642
<html>
<xbody>
<b>Vlimagra - $3.3 <br>
Levitfra - $3.3<br>
Cialfis - $3.7<br>
Imitrwex - $16.4<br>
Fmlomax - $2.2<br>
Ultrfam - $0.78<br>
Viowxx - $4.75 <br>
Amsblem - $2.2<br>
VaIifum - $0.97<br>
Xanaax - $1.09<br>
Sosma - $3 <br>
Merihdia - $2.2</b><br>
<br>
<br>
<a target="_blank"
href="http://exlaponurisib.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
><strong>visit our website</strong></a><br>
<br>
<br>
Best regards,<br>
Online Pharmaceuticals
<br>
<br>
repgnbnls RldRWVRCRlZGdVJaVllBVFEdW0dW
<br>
<br>
<br>
It is never too late to learn.
<br>
Never is a long time.
<br>
A mother's heard is always with her children.
</xbody>
</html>
-- END OF SPAM --
See:
IP 220.190.38.58
http://www.moensted.dk/spam/?addr=220.190.38.58
inetnum: 220.190.0.0 - 220.190.127.255
netname: CHINANET-ZJ-WZ
country: CN
route: 220.184.0.0/13
descr: China Telecom Zhejiang Province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
http://www.cidr-report.org/cgi-bin/as-report?as=4134
3 SBL listings for IPs under the responsibility of CHINANET-ZJ
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-ZJ
See Spamvert:
exlaponurisib.com IP 61.188.39.88
ns0.timopoted.com A IN 172800 222.60.80.180
ns0.timopoted.com A IN 172800 61.234.235.27
ns0.wingela.com [125.208.3.42]
exlaponurisib.com has no MX records
http://www.moensted.dk/spam/?addr=61.188.39.88
inetnum: 61.188.0.0 - 61.188.255.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
route: 61.188.0.0/16
descr: China Telecom Sichuan province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@ns.chinanet.cn.net
http://www.cidr-report.org/cgi-bin/as-report?as=4134
2 SBL/ROKSO listings for IPs under the responsibility of CHINANET-SC
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-SC
Let see whois:
Registrar: DOMAIN JINGLES, INC.
Domain Name: EXLAPONURISIB.COM
Registrant:
Li xiaoming
Li xiaoming (dimdimdim8888[]yahoo.com.cn)
street.Sheng li 42
Shang Hai
Shanghai,200093
CN
Tel. +021.76886639
Creation Date: 19-Apr-2006
Expiration Date: 19-Apr-2007
Domain servers in listed order:
ns0.wingela.com
ns0.timopoted.com
Administrative Contact:
Li xiaoming
Li xiaoming (dimdimdim8888[]yahoo.com.cn)
street.Sheng li 42
Shang Hai
Shanghai,200093
CN
Tel. +021.76886639
Technical Contact:
Li xiaoming
Li xiaoming (dimdim...@yahoo.com.cn)
street.Sheng li 42
Shang Hai
Shanghai,200093
CN
Tel. +021.76886639
Billing Contact:
Li xiaoming
Li xiaoming (dimdim...@yahoo.com.cn)
street.Sheng li 42
Shang Hai
Shanghai,200093
CN
Tel. +021.76886639
Status:ACTIVE
More exlaponurisib.com sightings:
http://groups.google.com/groups/search?q=exlaponurisib.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/4129db8f8466856e
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: