[email] [drugs - HealthSuite] (estorelan.com - romkapisalker.com - toresinato.com) The Ultimate Online Pharmaceuticals
TomezNet
IP 221.127.2.254
(at hgc.com.hk / hutchcity.com / hgcbroadband.com )
Spamvert:
estorelan.com IP 125.65.77.102
(at CHINANET-SC)
Redirected to:
http://romkapisalker.com/
romkapisalker.com IP 125.65.77.102
both DNS
ns0.rapiexansi.com IP 222.60.14.242
SBL41303, SBL41304, SBL41402
ns0.toresinato.com IP 202.103.178.125
SBL41284
More HealthSuite AKA Medic Suite LTD sightings:
http://groups.google.com/groups/search?q=HealthSuite+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.166; Wed, 10 May 2006
00:27:58 -0700
X-YahooFilteredBulk: 221.127.2.254
X-Originating-IP: [221.127.2.254]
Return-Path: <and...@glymphandassociates.com>
Authentication-Results: mta125.mail.re4.yahoo.com
from=glymphandassociates.com; domainkeys=neutral (no sig)
Received: from 207.228.2.....(EHLO xxx.web-hosting.com) (207.228.2....
by mta125.mail.re4.yahoo.com with SMTP; Wed, 10 May 2006 00:27:58 -0700
Received: from 143506776 ([221.127.2.254]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k4A7OBY06580 for <xx..xx@xx..xx.com>; Wed,
10 May 2006 03:24:11 -0400 (EDT)
Received: from glymphandassociates.com (144177736 [143797896]) by
getsmut.com (Qmailv1) with ESMTP id 7A790263B9 for <xx..xx@xx..xx.com>;
Wed, 10 May 2006 03:38:35 -0400
Date: Wed, 10 May 2006 03:38:35 -0400
From:"Restless L. Montaigne" <and...@glymphandassociates.com>
X-Mailer: The Bat! (v2.00.5) Personal
X-Priority: 3
Message-ID: <1388659931.2...@glymphandassociates.com>
To: xx..xx@xx..xx.com
Subject: The Ultimate Online Pharmaceuticals
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------6C3FC37BD17DA1C"
X-Virus-Scanned: by amavisd-milter (http://amavis.org/)
Content-Length: 642
<html>
<xbody>
<b>Vlisagra - $3.3 <br>
Levitkra - $3.3<br>
Cialhis - $3.7<br>
Imitrsex - $16.4<br>
Frlomax - $2.2<br>
Ultroam - $0.78<br>
Viowxx - $4.75 <br>
Amoblem - $2.2<br>
VaIirum - $0.97<br>
Xanmax - $1.09<br>
Soama - $3 <br>
Merisdia - $2.2</b><br>
<br>
<br>
<a target="_blank"
href="http://estorelan.com/?UHJENDRldRWVRCRlZGdVJaVllBVFEdW0dW"
><strong>visit our website</strong></a><br>
<br>
<br>
Best regards,<br>
Online Pharmaceuticals
<br>
<br>
asdffgjd RldRWVRCRlZGdVJaVllBVFEdW0dW
<br>
<br>
<br>
Think much, speak little and write less.<br>
Where bees are, there is honey.<br>
Laughter is the best medicine.
</xbody>
</html>
-- END OF SPAM --
According to website:
SQUARETRADE - Lincensed Pharmacy Program Member
Pharmacy License BC L65
More Medic Suite LTD sightings:
http://groups.google.com/groups/search?q=%22Medic+Suite%22+group%3A*abuse
See:
IP 221.127.2.254
http://www.moensted.dk/spam/?addr=221.127.2.254
http://www.spamhaus.org/query/bl?ip=221.127.2.254
http://www.spamcop.net/bl.shtml?221.127.2.254
inetnum: 221.124.0.0 - 221.127.255.255
netname: HGC
descr: Hutchison Global Communications
country: HK
route: 221.127.2.0/24
descr: Verio transit
origin: AS9304
notify: ra...@hutchcity.com
route: 221.127.0.0/17
descr: Asia Netcom (proxy-registered route object)
origin: AS9304
http://www.cidr-report.org/cgi-bin/as-report?as=9304
5 SBL/ROKSO listings for IPs under the responsibility of asianetcom.net
http://www.spamhaus.org/SBL/listings.lasso?isp=asianetcom.net
27 SBL/ROKSO listings for IPs under the responsibility of hgc.com.hk
http://www.spamhaus.org/sbl/listings.lasso?isp=hgc.com.hk
2 SBL listings for IPs under the responsibility of hgcbroadband.com
http://www.spamhaus.org/SBL/listings.lasso?isp=hgcbroadband.com
See Spamvert:
estorelan.com IP 125.65.77.102
ns0.rapiexansi.com IP 222.60.14.242
SBL41303, SBL41304, SBL41402
ns0.toresinato.com IP 202.103.178.125
SBL41284
estorelan.com has no MX records
http://www.moensted.dk/spam/?addr=125.65.77.102
More 125.65.77.102 sightings:
http://groups.google.com/groups/search?q=125.65.77.102+group%3A*abuse
inetnum: 125.64.0.0 - 125.71.255.255
netname: CHINANET-SC
descr: CHINANET Sichuan province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
route: 125.65.77.0/24
descr: Wholesale Communications Group
origin: AS18104
mnt-by: MAINT-AS7474
changed: n...@optus.net.au 20060406
source: RADB
http://www.cidr-report.org/cgi-bin/as-report?as=18104
route: 125.64.0.0/13
descr: China Telecom ChengDu
origin: AS4134
mnt-by: MAINT-AS4134
changed: tia...@cndata.com
http://www.cidr-report.org/cgi-bin/as-report?as=4134
2 SBL/ROKSO listings for IPs under the responsibility of CHINANET-SC
http://www.spamhaus.org/SBL/listings.lasso?isp=CHINANET-SC
Let see whois:
Registrar: NAMESCOUT CORP
Domain estorelan.com
Date Registered: 5/7/2006
Date Modified: 5/7/2006
Expiry Date: 5/7/2007
DNS1: ns0.toresinato.com
DNS2: ns0.rapiexansi.com
Registrant
Sheth Nainsi
37 James Street
Bloomfield
NJ
07003
US
Administrative Contact
Sheth Nainsi
Nainsi Sheth
37 James Street
Bloomfield
NJ
US
07003
9739196929
mullanous[]yahoo.com
Technical Contact
Sheth Nainsi
Nainsi Sheth
37 James Street
Bloomfield
NJ
US
07003
9739196929
mull...@yahoo.com
More estorelan.com sightings:
http://groups.google.com/groups/search?q=estorelan.com+group%3A*abuse
See:
romkapisalker.com IP 125.65.77.102
ns0.rapiexansi.com IP 222.60.14.242
ns0.toresinato.com IP 202.103.178.125
romkapisalker.com has no MX records
http://www.moensted.dk/spam/?addr=125.65.77.102
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : romkapisalker.com (ROMKAP2-BMN-DOM)
Registrar : BookMyName
Registrant / Admin Contact :
PERSON
Max S (S2-BMN-PE)
Av. de l'Europe, 2500
6000 Charleroi
BELGIUM
phone : 0
fax :
e-mail : admin[]gaysforums.org
Billing Contact :
PERSON
Max S (S2-BMN-PE)
Av. de l'Europe, 2500
6000 Charleroi
BELGIUM
phone : 0
fax :
e-mail : ad...@gaysforums.org
Technical Contact :
PERSON
Max S (S2-BMN-PE)
Av. de l'Europe, 2500
6000 Charleroi
BELGIUM
phone : 0
fax :
e-mail : ad...@gaysforums.org
Domain servers :
ns0.toresinato.com (NTC121-BMN-HST)
ns0.rapiexansi.com (NRC71-BMN-HST)
Created on 05/08/2006 20:41:38
Updated on 05/09/2006 13:33:03
Expires on 05/08/2007 16:41:38
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/44435d4f746ac38d
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/18623a6ffcf6a1e2
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: