[email] [drugs - MyCanadianPharmacy] (chesquer.com) Why should they, alone, have all
TomezNet
IP 201.1.208.20 201-1-208-20.dsl.telesp.net.br
(at dnsqipbr1.telesp.net.BR / LACNIC)
Spamvert:
chesquer.com IP 200.174.142.181
(SBL42219) (at ns.embratel.net.BR)
open proxy -- 1133211606 (Mon Nov 28 22:00:06 2005)
http://njabl.org/cgi-bin/lookup.cgi?query=200.174.142.181
Yambo Financials (ROK6271) MyCanadianPharmacy Corp. sightings:
http://groups.google.com/groups/search?q=%22MyCanadianPharmacy%22+group%3A*abuse&start=0&scoring=d&
chesquer.com drugs license.jpg => 404
Redirected to:
http://62.75.178.134:8080/p/p/images/license.jpg
IP 62.75.178.134 static-ip-62-75-178-134.inaddr.intergenia.de
(ROK3095 - SBL40023) (ptr2.intergenia.de)
Received at an address harvested from domain registration.
More info below:
====================
X-SID-PRA: Monroe Hogan <Monro...@hiking.be>
X-SID-Result: TempError
X-Message-Info: 5nqZTeGJnBF/sSuNvY2oB6VsGv9RaZDOaS3Dky4jA9c=
Received: from tomts30-srv.bellnexxia.net ([209.226.175.104]) by
bay0-pamc1-f12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830);
Wed, 24 May 2006 19:29:24 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 24 May 2006 22:29:22 -0400
Received: (qmail 3009 invoked by uid 110); 25 May 2006 02:29:19 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 30672 invoked from network); 25 May 2006 02:29:18
-0000
Received: from 201-1-208-20.dsl.telesp.net.br (201.1.208.20)
by xx..xx..xx.net with SMTP; 25 May 2006 02:29:11 -0000
Received: from AspEmail ([201.1.208.20]) by mail3.hiking.be with
Microsoft SMTPSVC(5.0.2195.6713);
Thu, 25 May 2006 06:21:01 +0400
From: "Monroe Hogan" <Monro...@hiking.be>
To: xx..xx@xx..xx.com
Subject: Why should they, alone, have all
Date: Thu, 25 May 2006 05:20:01 +0300
MIME-Version: 1.0
Message-ID: <MAIL10UY6669WFDPT...@hiking.be>
Content-Type: text/plain;
Return-Path: Mike...@tohuwines.co.nz
X-OriginalArrivalTime: 25 May 2006 02:29:24.0880 (UTC)
FILETIME=[09E16100:01C67FA3]
We have the popular Med,s you are looking for
you can save up to 80%
Our website is http://<mlf>.chesquer.com/?23578392
detention, the kids reject,recreation league games,to the scene with
orders to establish,transforms everything it touches,When Harlan
Carruthers
-- END OF SPAM --
See also sightings of the license 02838940 issued on 18 February 2001
http://groups .google.com/groups/search?q=%2202838940%22+group%3A*abuse
See:
IP 201.1.208.20 201-1-208-20.dsl.telesp.net.br
http://www.moensted.dk/spam/?addr=201.1.208.20
inetnum: 201.1/16
aut-num: AS27699
abuse-c: ABL226
owner: TELECOMUNICACOES DE SAO PAULO S.A. - TELESP
ownerid: 002.558.157/0001-62
responsible: Luiz A. P. Lopes
ASN: 27699
ASN Name: LACNIC-27648
Country IP Range: 201.0.0.0 to 201.63.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=
6 SBL/ROKSO listings for IPs under the responsibility of LACNIC
http://www.spamhaus.org/sbl/listings.lasso?isp=LACNIC
18 SBL/ROKSO listings for IPs under the responsibility of telesp.net.br
http://www.spamhaus.org/sbl/listings.lasso?isp=telesp.net.br
See:
chesquer.com IP 200.174.142.181
ns1.chesquer.com A IN 600 200.174.142.181
ns2.chesquer.com A IN 600 200.174.142.181
ns3.chesquer.com A IN 600 109.51.200.45
mail.chesquer.com A IN 600 109.51.200.45
[chesquer.com has 1 MX record mail.chesquer.com (10)]
http://www.moensted.dk/spam/?addr=200.174.142.181
http://www.spamhaus.org/query/bl?ip=200.174.142.181
More 200.174.142.181 sightings:
http://groups.google.com/groups/search?q=200.174.142.181+group%3A*abuse
inetnum: 200.174.142.128/26
aut-num: AS4230
abuse-c: GSE6
owner: 614 TVC INTERIOR S/A
ownerid: 003.722.616/0001-64
responsible: Gustavo Alberto de Godoy Pereira Filho
route: 200.174.0.0/16
descr: EMBRATEL BRAZIL
origin: AS4230
http://www.cidr-report.org/cgi-bin/as-report?as=4230
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42219
200.174.142.181/32 is listed on the Spamhaus Block List (SBL)
24-May-2006 05:07 GMT | SR02
19 SBL/ROKSO listings for IPs under the responsibility of
embratel.net.br
http://www.spamhaus.org/sbl/listings.lasso?isp=embratel.net.br
See also Yambo Financials (ROK3095) at qwertynet.hu
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39594
Let see whois:
Registrar: ENOM, INC. (enom.com)
DNS Servers:
NS2.RENTSIN.INFO NS1.TURDIREKT.INFO NS1.CONBRAIN.INFO
NS2.BOLDKLUB.INFO
Registration Service Provided By: http://www.powerpipe.com
Contact: 625do...@powerpipe.com
Domain name: chesquer.com
Registrant Contact:
Savcho Savov
Savcho Savov (vchogrqa[]yahoo.com)
+1.7346654312
Fax: none
1126 Wines Dr
Ann Arbor, MI 48103
US
Administrative Contact:
Savcho Savov
Savcho Savov (vcho...@yahoo.com)
+1.7346654312
Fax: none
1126 Wines Dr
Ann Arbor, MI 48103
US
Technical Contact:
Savcho Savov
Savcho Savov (vcho...@yahoo.com)
+1.7346654312
Fax: none
1126 Wines Dr
Ann Arbor, MI 48103
US
Status: Locked
Name Servers:
ns1.conbrain.info [72.164.184.191] => (ROK3095 - SBL39594)
ns1.turdirekt.info [72.164.184.191]
ns2.boldklub.info [212.52.166.78] => (ROK6271 - SBL39594)
ns2.rentsin.info [212.52.166.78]
Creation date: 20 May 2006 13:44:29
Expiration date: 20 May 2007 13:44:29
See:
IP 62.75.178.134
62.75.178.134 PTR record: static-ip-62-75-178-134.inaddr.intergenia.de
http://www.moensted.dk/spam/?addr=62.75.178.134
http://www.spamhaus.org/query/bl?ip=62.75.178.134
inetnum: 62.75.178.0 - 62.75.178.255
netname: SERVER4YOU-1
descr: SERVER4YOU Dedicated Server Hosting
descr: http://www.server4you.de
country: DE
route: 62.75.128.0/17
descr: intergenia AG
origin: AS8972
mnt-by: INTERGENIA-MNT
changed: ri...@intergenia.de
http://www.cidr-report.org/cgi-bin/as-report?as=8972
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40023
62.75.178.134/32 is listed on the Spamhaus Block List (SBL/ROKSO)
08-Apr-2006 09:27 GMT | SR20
Yambo Financials
Yambo Pharmacy: image hosting
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Yambo%20Financials
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK3095
7 SBL/ROKSO listings for IPs under the responsibility of intergenia.de
http://www.spamhaus.org/sbl/listings.lasso?isp=intergenia.de
More 62.75.178.134 sightings:
http://groups.google.com/groups/search?q=62.75.178.134+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8142e392b11c7ae7
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: