[email] [drugs -ED Med] (snufflejl.com - cetaceanjg.com) Get medications for your cure!
TomezNet
IP 84.138.15.160 p548a0fa0.dip0.t-ipconnect.de
(at dns01.btx.dtag.de / telekom.de)
Spamvert:
kr8t7aqf817xlkkd7k2d7kkk.snufflejl.com IP 220.113.9.75
(SBL43773, SBL44839, SBL45165 - ROK4932)
(at b.in-addr.cn / citicnet.com / gwbn.net.cn)
Copyright © ED Med Chest Online. All rights reserved.
More ED Med Chest Online / ED Med Choice Online Viagra sightings:
http://groups.google.com/groups/search?q=%22ED+Med%22+group%3A*abuse&start=0&scoring=d&
Supported by Visa and MasterCard
More info below:
====================
X-SID-PRA: Trowel H. Frocks <vand...@gmed.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW40W+VHr2UYSTaVInOPJltSeTdNoQmKGgLo=
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by
bay0-pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 14 Aug 2006 07:29:02 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip6.bellnexxia.net with ESMTP; 14 Aug 2006 10:28:58 -0400
Received: (qmail 17696 invoked by uid 110); 14 Aug 2006 10:28:57 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 17689 invoked from network); 14 Aug 2006 10:28:57
-0400
Received: from p548a0fa0.dip0.t-ipconnect.de (HELO 175233600)
(84.138.15.160)
by xx..xx..xx.net with SMTP; 14 Aug 2006 10:28:57 -0400
Received: from gmed.com (174620072 [174620648])
by p548A0FA0.dip0.t-ipconnect.de (Qmailv1) with ESMTP id F8A4B1EED5
for <xx..xx@xx..xx.com>; Mon, 14 Aug 2006 07:33:03 -0700
Date: Mon, 14 Aug 2006 07:33:03 -0700
From: "Trowel H. Frocks" <vand...@gmed.com>
X-Mailer: The Bat! (v2.00.0) Personal
X-Priority: 3
Message-ID: <6454887817.2...@gmed.com>
To: xx..xx@xx..xx.com
Subject: Get medications for your cure!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------7C42E89CF9C673D"
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.5; AVE:
6.17.0.2; VDF: 6.17.0.5; host: p548A0FA0.dip0.t-ipconnect.de)
Return-Path: vand...@gmed.com
X-OriginalArrivalTime: 14 Aug 2006 14:29:02.0142 (UTC)
FILETIME=[FCFE75E0:01C6BFAD]
This is a multi-part message in MIME format.
------------7C42E89CF9C673D
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
------------7C42E89CF9C673D
Content-Type: text/html
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
</head>
<body>
<p align="center">
<table width="383" style="border: 1px; border-style: solid;
border-color:#000000; font-family: Verdana; font-weight: bold;
font-size:13px;" bgcolor="#FFFFFF" cellpadding="5" cellspacing="2">
<tr><td align=center bgcolor="#0009AA" style="border: 1px;
border-style: solid; border-color:#000000; color:#FFFFFF"><p>Enjoy
sexual rebirth. No more excuses, no more frustration, no more having
to solely satisfy your girlfriend orally. Just pop viagra, and before
long, you'll be a sex machine and start enjoying favorite positions
without any fear.</p></td></tr>
<tr><td><a href="http://kr8t7aqf817xlkkd7k2d7kkk.snufflejl.com/">go to
the site</a></td>
</tr>
</table></p>
<p> </p>
<p><font color="#999999">The girl caught wise first. This urge must
have been the genesis of my idea to drown the stolen ship. This was the
most dangerous part of the trip. His eyes were glassy and unfocused and
I realized there was some truth in the rumor that he always got stoned
on his private bottle before coming to one of these affairs. Something
was badly wrong and this was the thing that would fix it. You should
have more brains than that,, he snarled. When I looked up I was the
only person in the bank that was able to see. What kind of stupidity do
you call that? It sounds like a line out of a TV thriller.</font></p>
</body>
</html>
------------7C42E89CF9C673D--
-- END OF SPAM --
See:
IP 84.138.15.160 p548a0fa0.dip0.t-ipconnect.de
http://www.moensted.dk/spam/?addr=84.138.15.160
inetnum: 84.136.0.0 - 84.191.255.255
netname: DTAG-DIAL20
descr: Deutsche Telekom AG
country: DE [Germany]
route: 84.128.0.0/10
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
changed: b...@nic.dtag.de
ASN: 3320
ASN Name: DTAG (Deutsche Telekom AG)
Country IP Range: 84.128.0.0 to 84.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3320
2 SBL listings for IPs under the responsibility of t-ipconnect.de
http://www.spamhaus.org/sbl/listings.lasso?isp=t-ipconnect.de
4 SBL/ROKSO listings for IPs under the responsibility of telekom.de
http://www.spamhaus.org/sbl/listings.lasso?isp=telekom.de
5 SBL/ROKSO listings for IPs under the responsibility of dtag.de
http://www.spamhaus.org/sbl/listings.lasso?isp=dtag.de
See:
kr8t7aqf817xlkkd7k2d7kkk.snufflejl.com IP 220.113.9.75
dd.cetaceanjg.com A IN 3600 220.113.9.75
ff.cetaceanjg.com A IN 3600 222.170.114.148
kr8t7aqf817xlkkd7k2d7kkk.snufflejl.com has no MX records ->
snufflejl.com has no MX records
http://www.moensted.dk/spam/?addr=220.113.9.75
http://www.spamhaus.org/query/bl?ip=220.113.9.75
More 220.113.9.75 sightings:
http://groups.google.com/groups/search?q=220.113.9.75+group%3A*abuse&start=0&scoring=d&
inetnum: 220.113.9.0 - 220.113.9.255
netname: GWBN-BEIJING-NET10
country: CN
descr: FOR GREAT WALL BROADBAND NETWORK SERVICE ACCESS IN
BEIJING NET10
route: 220.113.0.0/20
descr: citic network co.,ltd
bj-gw
origin: as18118
mnt-by: MAINT-AS17430
changed: m...@citicnet.com
source: RADB
route: 220.113.0.0/20
descr: China United Telecom
origin: AS4837
mnt-by: MAINT-AS4837
changed: jin...@bj.cnuninet.net
ASN: 18118
ASN Name: CITICNET-AP (CITIC Networks Management Co.,Ltd.)
Country IP Range: 220.112.0.0 to 220.115.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=18118
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43773
220.113.9.75/32 is listed on the Spamhaus Block List (SBL/ROKSO)
13-Aug-2006 05:19 GMT | SR23
Leo Kuvayev / BadCow
spammer controlled nameserver - fa.facundgj.com
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44839
220.113.8.0/23 is listed on the Spamhaus Block List (SBL/ROKSO)
25-Jul-2006 18:17 GMT | SR04
Leo Kuvayev / BadCow
Dirty block
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45165
220.113.0.0/19 is listed on the Spamhaus Block List (SBL)
03-Aug-2006 00:22 GMT | SR04
Refusal or inability to remove criminal spammers.
12 SBL/ROKSO listings for IPs under the responsibility of gwbn.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=gwbn.net.cn
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : snufflejl.com (SNUFFL2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com
Registrant / Admin Contact :
PERSON
Sharon-L. HIRATA (HIRATA2-BMN-PE)
9730 SW WASHINGTON SQ RD
97223 TIGARD
UNITED STATES
phone : +48 22 3895469
fax :
e-mail : sharonhirata[]yahoo.com
Billing Contact :
PERSON
Sharon-L. HIRATA (HIRATA2-BMN-PE)
9730 SW WASHINGTON SQ RD
97223 TIGARD
UNITED STATES
phone : +48 22 3895469
fax :
e-mail : sharon...@yahoo.com
Technical Contact :
PERSON
Sharon-L. HIRATA (HIRATA2-BMN-PE)
9730 SW WASHINGTON SQ RD
97223 TIGARD
UNITED STATES
phone : +48 22 3895469
fax :
e-mail : sharon...@yahoo.com
Domain servers :
dd.cetaceanjg.com (DCC26-BMN-HST)
ff.cetaceanjg.com (FCC5-BMN-HST)
Created on 05/18/2006 09:46:05
Updated on 07/27/2006 12:16:59
Expires on 05/18/2007 05:46:05
More snufflejl.com sightings:
http://groups.google.com/groups/search?q=snufflejl.com+group%3A*abuse
See:
ff.cetaceanjg.com IP 222.170.114.148
ff.cetaceanjg.com has no MX records -> cetaceanjg.com has no MX records
http://www.moensted.dk/spam/?addr=222.170.114.148
http://www.spamhaus.org/query/bl?ip=222.170.114.148
More 222.170.114.148 sightings:
http://groups.google.com/groups/search?q=222.170.114.148+group%3A*abuse
inetnum: 222.170.0.0 - 222.171.31.255
netname: HEILONGJIANG-QIQIHAER-TELECOM
country: CN
descr: QIQIHAER TELECOM
descr: QIQIHAER
descr: HEILONGJIANG PROVINCE
ASN: 17897
ASN Name: CHINATELECOM-HLJ-AS-AP (asn for Heilongjiang Provincial Net
of CT)
Country IP Range: 222.168.0.0 to 222.175.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=17897
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45164
222.170.114.0/24 is listed on the Spamhaus Block List (SBL)
03-Aug-2006 10:52 GMT | SR04
Dirty block - crawling with spammers for months
2 SBL/ROKSO listings for IPs under the responsibility of chinanet-hl
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-hl
Let see whois:
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
domain: cetaceanjg.com
origin-c: JOCO-1061512
owner: Vladimir Mironov
email: ubludons[]yahoo.com
address: Abonentsky yashik 16
city: Moscow
state: --
postal-code: 117525
country: RU
phone: +79032772599
admin-c: kitamurastephanie[]yahoo.com#0
tech-c: kitamura...@yahoo.com#0
billing-c: kitamura...@yahoo.com#0
nserver: dd.cetaceanjg.com 220.113.9.75
nserver: ff.cetaceanjg.com 222.170.114.148
status: hold,invalid-address
created: 2006-05-25 22:07:07 UTC
modified: 2006-08-09 12:02:21 UTC
expires: 2007-05-25 18:07:08 UTC
contact-hdl: kitamura...@yahoo.com#0
person: Vladimir Mironov
email: kitamura...@yahoo.com
address: Abonentsky yashik 16
city: Moscow
state: --
postal-code: 117525
country: RU
phone: +79032772599
source: joker.com live whois service
query-time: 0.03875
db-updated: 2006-08-14 15:19:40
See More Registrant Vladimir Mironov sightings:
http://groups.google.com/groups/search?q=%22Vladimir+Mironov%22+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/a899426ff3a6f674
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: