[email] [drugs - HealthSuite] (ingaroe.com - oneoraels.com) The Ultimate Online Pharmaceuticals
TomezNet
IP 222.46.70.138
(at CRTC - crc.net.cn / a.in-addr.cn)
open proxy -- 1120276804 (Sat Jul 2 06:00:04 2005)
http://njabl.org/cgi-bin/lookup.cgi?query=222.46.70.138
Spamvert:
ingaroe.com IP 222.60.80.180
Redirected now to:
oneoraels.com IP 222.60.80.180
(ROK4932 - SBL40700) (at crc.net.cn)
More HealthSuite AKA Medic Suite LTD sightings:
http://groups.google.com/groups/search?q=HealthSuite+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.172; Sat, 22 Apr 2006
19:48:26 -0700
X-YahooFilteredBulk: 222.46.70.138
X-Originating-IP: [222.46.70.138]
Return-Path: <ca...@femenino.com>
Authentication-Results: mta171.mail.re2.yahoo.com from=femenino.com;
domainkeys=neutral (no sig)
Received: from 207.228...... (EHLO xxx.web-hosting.com)
(207.228......) by mta171.mail.re2.yahoo.com with SMTP; Sat, 22 Apr
2006 19:48:26 -0700
Received: from -1214183176 ([222.46.70.138]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k3N2mEG17688 for <xx..xx@xx..xx.com>; Sat,
22 Apr 2006 22:48:15 -0400 (EDT)
Received: from femenino.com (-1210997096 [-1210999400]) by
aaronkwok.net (Qmailv1) with ESMTP id 9AFD0837C1 for
<xx..xx@xx..xx.com>; Sat, 22 Apr 2006 22:50:16 -0400
Date: Sat, 22 Apr 2006 22:50:16 -0400
From: "Whites G. Anchoring" <ca...@femenino.com>
X-Mailer: The Bat! (v2.00.6) Personal
X-Priority: 3
Message-ID: <3021786810.2...@femenino.com>
To: "Webmaster" <xx..xx@xx..xx.com>
Subject: The Ultimate Online Pharmaceuticals
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------622CB857989FCB8"
X-Virus-Scanned: by amavisd-milter at aaronkwok.net
Content-Length: 663
<html>
<xbody>
<b>Vlitagra - $3.3 <br>
Levitpra - $3.3<br>
Cialois - $3.7<br>
Imitraex - $16.4<br>
Fhlomax - $2.2<br>
Ultraam - $0.78<br>
Viorxx - $4.75 <br>
Amkblem - $2.2<br>
VaIioum - $0.97<br>
Xanpax - $1.09<br>
Sooma - $3 <br>
Meripdia - $2.2</b><br>
<br>
<br>
<a target="_blank"
href="http://ingaroe.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
><strong>visit our website</strong></a><br>
<br>
<br>
Best regards,<br>
Online Pharmaceuticals
<br>
<br>
repgnbnls RldRWVRCRlZGdVJaVllBVFEdW0dW
<br>
<br>
<br>
February makes a bridge and March breaks it.
<br>
Always merry is seldom rich.
<br>
Better late than never.
</xbody>
</html>
-- END OF SPAM --
See:
IP 222.46.70.138 (open proxy)
http://www.moensted.dk/spam/?addr=222.46.70.138
http://cbl.abuseat.org/lookup.cgi?ip=222.46.70.138
http://www.spamhaus.org/query/bl?ip=222.46.70.138
http://dsbl.org/listing?222.46.70.138
inetnum: 222.32.0.0 - 222.63.255.255
netname: CRTC
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
descr: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
country: CN
ASN: 9394
ASN Name: CRNET (CHINA RAILWAY Internet(CRNET))
http://www.cidr-report.org/cgi-bin/as-report?as=9394
See:
ingaroe.com IP 222.60.80.180
ns0.timopoted.com [222.60.80.180]
ns0.wingela.com [202.67.138.52]
ingaroe.com has no MX records
http://www.moensted.dk/spam/?addr=222.60.80.180
http://www.spamhaus.org/query/bl?ip=222.60.80.180
inetnum: 222.32.0.0 - 222.63.255.255
netname: CRTC
descr: CHINA RAILWAY TELECOMMUNICATIONS CENTER
descr: 22F Yuetan Mansion,Xicheng District,Beijing,P.R.China
country: CN
route: 222.32.0.0/11
descr: CHINA RAILWAY TELECOMMUNICATIONS
country: CN
origin: AS9394
mnt-by: MAINT-CN-CRTC
changed: wan...@crc.net.cn
http://www.cidr-report.org/cgi-bin/as-report?as=9394
16 SBL/ROKSO listings for IPs under the responsibility of crc.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=crc.net.cn
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40700
222.60.80.180/32 is listed on the Spamhaus Block List (SBL/ROKSO)
22-Apr-2006 04:58 GMT | SR22
Leo Kuvayev / BadCow
Spammer webhosting & DNS - clovapinus.com (Pharmacy Express)
See related listings SBL40637 and SBL40724
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
More ingaroe.com sightings:
http://groups.google.com/groups/search?q=ingaroe.com+group%3A*abuse
See:
oneoraels.com IP 222.60.80.180
ns0.timopoted.com [222.60.80.180]
ns0.wingela.com [202.67.138.52]
oneoraels.com has no MX records
http://www.moensted.dk/spam/?addr=222.60.80.180
More 222.60.80.180 sightings:
http://groups.google.com/groups/search?q=222.60.80.180+group%3A*abuse&start=0&scoring=d&
See:
ns0.wingela.com IP 202.67.138.52
http://www.moensted.dk/spam/?addr=202.67.138.52
http://www.spamhaus.org/query/bl?ip=202.67.138.52
inetnum: 202.67.128.0 - 202.67.159.255
netname: HKNET-HK
descr: HKNet Company Limited
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40724
202.67.138.52/32 is listed on the Spamhaus Block List (SBL/ROKSO)
22-Apr-2006 04:55 GMT | SR21
Leo Kuvayev / BadCow
Spam Haven Hosting
2 SBL/ROKSO listings for IPs under the responsibility of hknet.com
http://www.spamhaus.org/sbl/listings.lasso?isp=hknet.com
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8beaec290c7e8eae
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: