Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [drugs - Patch Rx] (maftor.com - gubrel.com - zotlo.com) Hey bro, found this site

0 views

Skip to first unread message

TomezNet

unread,

Aug 21, 2006, 3:01:56 AM8/21/06

Received From:
IP 83.26.9.33 akf33.neoplus.adsl.tpnet.pl
(at ns2.tpnet.pl / telekomunikacja.pl)

Spamvert:
www.maftor.com IP 58.20.108.121
(SBL45654) (at CNCGROUP-HN)

www.maftor.com IP 125.208.6.216
(SBL45653) (at primetelecom.cn)

Web:
Advanced Laboratories Inc.
Copyright Penis Enlarge Patch Rx 2005

More Penis Enlarge Patch Rx sightings:
http://groups.google.com/groups/search?q=%22Enlarge+Patch+Rx%22+group%3A*abuse&start=0&scoring=d&

More info below:
====================

X-SID-PRA: Janelle Suarez <b...@0theory.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW42dMiS5aeL+q6hP19kk80rfnCq970B3L5w=
Received: from tomts3-srv.bellnexxia.net ([209.226.175.115]) by
bay0-pamc1-f11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sun, 20 Aug 2006 04:19:11 -0700
Received: from [MUNGED]
by toip5.bellnexxia.net with ESMTP; 20 Aug 2006 07:19:02 -0400
Message-Id: <597c13$1dp...@toip5.bellnexxia.net>
Received: (qmail 7778 invoked by uid 110); 20 Aug 2006 07:19:01 -0400
Delivered-To: [MUNGED]
Received: (qmail 7733 invoked from network); 20 Aug 2006 07:19:00 -0400
Received: from akf33.neoplus.adsl.tpnet.pl (83.26.9.33)
by [MUNGED] with SMTP; 20 Aug 2006 07:19:00 -0400
From: "Janelle Suarez" <b...@0theory.com>
To: [MUNGED]
Subject: Hey bro, found this site
Date: Sun, 20 Aug 2006 11:18:26 -0060
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_006A_01C6C45B.1EB3DD90"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Return-Path: b...@0theory.com
X-OriginalArrivalTime: 20 Aug 2006 11:19:11.0121 (UTC)
FILETIME=[75E51810:01C6C44A]

This is a multi-part message in MIME format.

------=_NextPart_000_006A_01C6C45B.1EB3DD90
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hey=20
bro,=20
nice=20
talking=20
to=20
you=20
the=20
other=20
day!!!**************************************************************************=
***********************
* Thought you wou1d want to check this out,I got some for* myse1f=20
cause they were on sa1e,you shou1d check out the s!te, I added the
1ink=20
below.*

* Stee1 Pa(kage: 10 Patches reg $79.95 N0vv $49.95 ! Free shipping=20
to:!* Si1ver Pa(kage: 25 Patches reg $129.95, N0vv $99.95! Free=20
shipping and free exercise manua1 inc1uded!* Go1d Pa(kage: 40
Patches=20
reg $189.95, N0vv $149.95! Free shipping and free exercise manua1=20
inc1uded!* P1atinum Pa(kage: 65 Patches=20
reg=20
$259.95,=20
N0vv=20
$199.95!=20
Free=20
shipping=20
and=20
free=20
exercise=20
manua1=20
inc1uded!***=20
=20
I=20
kn0vv=20
l!ke=20
10=20
guys=20
wh0=20
have=20
already=20
st0(ked=20
up=20
on=20
these.=20
Here's=20
the=20
link=20
to=20
(heck=20
out=20
br0=20
L|NK

*Talk=20
to=20
you=20
soon!*************************************************************************************************T0=20
$top g0 |-|ere!

------=_NextPart_000_006A_01C6C45B.1EB3DD90
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2869" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY><html>
<body=20
bgcolor=3D"#FFFFFF">
<font=20
size=3D"4"=20
color=3D"6633cc"><center>Hey=20
bro,=20
nice=20
talking=20
to=20
you=20
the=20
other=20
day!!!</center> 
<font=20
size=3D"4"color=3D"cc0099">********************************************************=
***************************************** 
*  Thought you wou1d want to check this out,I got some=20
for 
* myse1f cause they were on=20
sa1e,you shou1d check out the s!te, I added the 1ink below. 
*

* Stee1 Pa(kage: 10 Patches
reg=20
$79.95 N0vv $49.95 ! Free shipping to:! 
* Si1ver Pa(kage: 25
Patches=20
reg $129.95, N0vv $99.95! Free shipping and free exercise=20
manua1=20
inc1uded! 
<font=20
size=3D"4"color=3D"cc0099">*=20
=20
Go1d=20
Pa(kage:=20
40=20
Patches=20
reg=20
$189.95,=20
N0vv=20
$149.95!=20
Free=20
shipping=20
and=20
free=20
exercise=20
manua1=20
inc1uded! 
<font=20
size=3D"4"color=3D"cc0099">*=20
=20
P1atinum=20
Pa(kage:=20
65=20
Patches=20
reg=20
$259.95,=20
N0vv=20
$199.95!=20
Free=20
shipping=20
and=20
free=20
exercise=20
manua1=20
inc1uded! 
<font=20
size=3D"4"color=3D"cc0099">* 
<font=20
size=3D"4"color=3D"cc0099">* 
<font=20
size=3D"4"color=3D"cc0099">*=20
=20
<center><a=20
href=3D"http://www.maftor.com/a/?90&NfdsGijgdsf59ghfd36gNBgffgdg">I=20
kn0vv=20
l!ke=20
10=20
guys=20
wh0=20
have=20
already=20
st0(ked=20
up=20
on=20
these.=20
Here's=20
the=20
link=20
to=20
(heck=20
out=20
br0=20
L|NK</a></center>

<font=20
size=3D"4"color=3D"cc0099">*<font=20
size=3D"4"=20
color=3D"6633cc"><center>Talk=20
to=20
you=20
soon!</center> 
<font=20
size=3D"4"color=3D"cc0099">************************************************************************************************* 
 
T0 $top g0 <a=20
href=3D"http://www.maftor.com/u.php">|-|ere!</a> 
</body>
</html>

</BODY></HTML>

------=_NextPart_000_006A_01C6C45B.1EB3DD90--

-- END OF SPAM --

See:
IP 83.26.9.33 akf33.neoplus.adsl.tpnet.pl

http://www.moensted.dk/spam/?addr=83.26.9.33

More tpnet.pl sightings:
http://groups.google.com/groups/search?q=tpnet.pl+group%3A*abuse&start=0&scoring=d&

inetnum: 83.26.0.0 - 83.26.255.255
netname: NEOSTRADA-ADSL
descr: Neostrada Plus
descr: Lodz
country: PL [Poland]
mnt-by: TPNET
changed: hostm...@tpnet.pl
person: Hostmaster TPSA-CST
address: Telekomunikacja Polska S.A.
address: Data Transmission Systems Centre
address: ISP

route: 83.0.0.0/11
descr: TPNET
descr: for abuse: ab...@tpnet.pl ??????
origin: AS5617
mnt-by: AS5617-MNT
changed: na...@tpnet.pl
ASN: 5617
ASN Name: TPNET (Polish Telecom's commercial IP network)
Country IP Range: 83.0.0.0 to 83.31.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=5617

26 SBL/ROKSO listings for IPs under the responsibility of tpnet.pl
http://www.spamhaus.org/sbl/listings.lasso?isp=tpnet.pl

See:
www.maftor.com IP 58.20.108.121
www.maftor.com IP 125.208.6.216
ns2.zotlo.com A IN 112699 58.20.108.121
ns1.gubrel.com [125.208.6.216] [TTL=172800] [CN]
ns2.zotlo.com [58.20.108.121] [TTL=172800] [CN]

www.maftor.com has no MX records -> [maftor.com has 1 MX record
relay.maftor.com.(10)]

http://www.moensted.dk/spam/?addr=125.208.6.216
http://www.spamhaus.org/query/bl?ip=125.208.6.216

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45653
125.208.6.216/32 is listed on the Spamhaus Block List (SBL)

18-Aug-2006 22:21 GMT | SR08

ns1.gubrel.com / ns1.pozgel.com / rutsots.com

6 SBL listings for IPs under the responsibility of primetelecom.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=primetelecom.cn

inetnum: 125.208.0.0 - 125.208.31.255
netname: PRIMETELECOM
descr: Beijing Primezone Technologies Inc.
descr: 44 Fu Cheng Road,Beijing,P.R.China
country: CN
changed: ip...@cnnic.cn
person: Kemin Shi
nic-hdl: KS434-AP
e-mail: aj...@vip.sina.com
person: Cong Zhang
nic-hdl: CZ1-CN
e-mail: sh...@euncn.com

ASN: 24416
ASN Name: CNNIC-PRIMETELECOM-AP (Beijing Primezone Technologies Inc.)
Country IP Range: 125.208.0.0 to 125.208.63.255
http://www.cidr-report.org/cgi-bin/as-report?as=24416

See:
www.maftor.com IP 58.20.108.121

http://www.spamhaus.org/query/bl?ip=58.20.108.121
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45654
58.20.108.121/32 is listed on the Spamhaus Block List (SBL)

19-Aug-2006 22:40 GMT | SR08

ns2.pozgel.com / rutsots.com / www.maftor.com

5 SBL/ROKSO listings for IPs under the responsibility of cncgroup-hn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hn

inetnum: 58.20.0.0 - 58.20.255.255
netname: CNCGROUP-HN
descr: CNC Group HuNan province network

route: 58.20.0.0/16
descr: CNCGroup HuNan province network
country: CN
origin: AS9929
mnt-by: MAINT-CNCGROUP-RR
changed: hm-ch...@apnic.net
ASN: 9929
ASN Name: CNCNET-CN (China Netcom Corp.)
Country IP Range: 58.16.0.0 to 58.23.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9929

Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN

Domain Name.......... maftor.com
Creation Date........ 2006-08-18 05:13:22
Registration Date.... 2006-08-18 05:13:22
Expiry Date.......... 2007-08-18 05:13:22
Organisation Name.... li fei
Organisation Address. shen zhen
Organisation Address.
Organisation Address. shen zhen
Organisation Address. 518000
Organisation Address. SZ
Organisation Address. CN

Admin Name........... li fei
Admin Address........ shen zhen
Admin Address........
Admin Address........ shen zhen
Admin Address........ 518000
Admin Address........ SZ
Admin Address........ CN
Admin Email.......... admin[]lomris.com
Admin Phone.......... +86.75583289922
Admin Fax............ +86.75583289922

Tech Name............ li fei
Tech Address......... shen zhen
Tech Address.........
Tech Address......... shen zhen
Tech Address......... 518000
Tech Address......... SZ
Tech Address......... CN
Tech Email........... ad...@lomris.com
Tech Phone........... +86.75583289922
Tech Fax............. +86.75583289922

Bill Name............ li fei
Bill Address......... shen zhen
Bill Address.........
Bill Address......... shen zhen
Bill Address......... 518000
Bill Address......... SZ
Bill Address......... CN
Bill Email........... ad...@lomris.com
Bill Phone........... +86.75583289922
Bill Fax............. +86.75583289922
Name Server.......... ns2.zotlo.com
Name Server.......... ns1.gubrel.com

More maftor.com sightings:
http://groups.google.com/groups/search?q=maftor.com+group%3A*abuse

See:
ns1.gubrel.com IP 125.208.6.216

More gubrel.com sightings:
http://groups.google.com/groups/search?q=gubrel.com+group%3A*abuse&start=0&scoring=d&

See:
ns2.zotlo.com IP 58.20.108.121

More zotlo.com sightings:
http://groups.google.com/groups/search?q=zotlo.com+group%3A*abuse

Let see whois lomris.com from Registrant:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN

Domain Name.......... lomris.com
Creation Date........ 2006-08-18 05:13:27
Registration Date.... 2006-08-18 05:13:27
Expiry Date.......... 2007-08-18 05:13:27
Organisation Name.... li fei
Organisation Address. shen zhen
Organisation Address.
Organisation Address. shen zhen
Organisation Address. 518000
Organisation Address. SZ
Organisation Address. CN

More lomris.com sightings:
http://groups.google.com/groups/search?q=lomris.com+group%3A*abuse

And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8af9ad8b1af9621f

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages