[email] [drugs - HealthSuite] (218.92.211.179) Premier
TomezNet
IP 218.92.211.179
(at nmc1.ptt.js.cn / CHINANET-JS)
Spamvert:
overeattos.com IP 211.144.69.243
(SBL39667 / SBL42192 - ROK4932)
(at dns2.cableplus.com.cn / a.in-addr.cn / scn.com.cn)
More Premier Pharfmacy aka HealthSuite aka Medic Suite LTD. sightings
http://groups.google.com/groups?q=%22HealthSuite%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.172; Sun, 04 Jun 2006
08:31:15 -0700
X-YahooFilteredBulk: 218.92.211.179
X-Originating-IP: [218.92.211.179]
Return-Path: <anama...@gpb-mag.com>
Authentication-Results: mta196.mail.re4.yahoo.com from=gpb-mag.com;
domainkeys=neutral (no sig)
Received: from 207.228.2..... (EHLO xxx.web-hosting.com)
(207.228.2.....) by mta196.mail.re4.yahoo.com with SMTP; Sun, 04 Jun
2006 08:31:15 -0700
Received: from 144612168 ([218.92.211.179]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k54FV7Q22501 for <xx..xx@xx..xx.com>; Sun,
4 Jun 2006 11:31:08 -0400 (EDT)
Received: from gpb-mag.com (143842624 [143867920]) by globalcoal.com
(Qmailv1) with ESMTP id 62596271B7 for <xx..xx@xx..xx.com>; Sun, 04 Jun
2006 11:31:20 -0400
Date: Sun, 04 Jun 2006 11:31:20 -0400
From: "Tactless E. Whippets" <anama...@gpb-mag.com>
X-Mailer: The Bat! (v2.00.2) Personal
X-Priority: 3
Message-ID: <5121984094.2...@gpb-mag.com>
To: "Webmaster" <xx..xx@xx..xx.com>
Subject: Premier
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------544334C969AC4C3"
X-AntiVirus: Checked by Dr.Web (http://www.drweb.net)
Content-Length: 872
<html>
<xbody>
Man's Health<br>
Anti-Depressants<br>
Antibiotics<br>
Cholesterol<br>
Diabetes<br>
Diuretic<br>
Pain Relief<br>
Sexual Health<br>
Sleep Aids<br>
Weight Loss
<p>and more on <a target="_blank"
href="http://overeattos.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
>Premier Pharfmacy</a></p>
<br>
<br>
<br>
<br>
<br>
<br>
ghfgdrtpu RldRWVRCRlZGdVJaVllBVFEdW0dW
</xbody>
</html>
-- END OF SPAM --
More Morph of Premier Pharfmacy sightings:
http://groups.google.com/groups/search?q=%22Premier+Pharfmacy%22+group%3A*abuse&start=0&scoring=d&
See:
IP 218.92.211.179
http://www.moensted.dk/spam/?addr=218.92.211.179
http://www.spamsources.fabel.dk/ip/218.92.211.179
inetnum: 218.90.0.0 - 218.94.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
route: 218.92.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: i...@jsinfo.net
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 218.64.0.0 to 218.95.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
See:
overeattos.com IP 211.144.69.243
overeattos.com NS IN 300 ns0.sinacessi.com [211.144.68.59]
overeattos.com NS IN 300 ns0.thoumaybe.com [211.144.69.243]
ns0.thoumaybe.com [211.144.69.243]
Primary DNS server: ns0.thoumaybe.com
Responsible Name: n...@sinacessi.com
http://www.moensted.dk/spam/?addr=211.144.69.243
[1] dns2you/zhousvr/name2you, see http://spews.org/html/S2319.html
http://www.spamhaus.org/query/bl?ip=211.144.69.243
211.144.69.243 PTR record: reserve.cableplus.com.cn
More 211.144.69.243 sightings:
http://groups.google.com/groups/search?q=211.144.69.243+group%3A*abuse&start=0&scoring=d&
inetnum: 211.144.69.1 - 211.144.69.255
netname: CHANGNING1POPNET
descr: Cable OnLine Network CHANGNING1POPNet
descr: Internet Service Provider shnet.edu.cn
descr: Shanghai China
country: CN
route: 211.144.64.0/19
descr: Asia Netcom (proxy-registered route object)
origin: AS9812
route: 211.144.64.0/20
descr: CHINA NETCOM
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
http://www.cidr-report.org/cgi-bin/as-report?as=9929
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39667
211.144.69.0/24 is listed on the Spamhaus Block List (SBL)
22-May-2006 00:00 GMT | SR02
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42192
211.144.69.243/32 is listed on the Spamhaus Block List (SBL/ROKSO)
22-May-2006 03:27 GMT | SR09
Leo Kuvayev / BadCow
Numerous pill domains.
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
5 SBL/ROKSO listings for IPs under the responsibility of asianetcom.net
http://www.spamhaus.org/sbl/listings.lasso?isp=asianetcom.net
17 SBL/ROKSO listings for IPs under the responsibility of scn.com.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=scn.com.cn
More overeattos.com sightings:
http://groups.google.com/groups/search?q=overeattos.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/b6f878a55d24c95c
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: