Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [botnet] (190.162.15.100) #1_Lose Weight SuperFood Acai Berry FREE-TRIAL, yo..

1 view

Skip to first unread message

David Ritz

unread,

May 15, 2009, 8:54:12 PM5/15/09

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SpamCop info:
http://www.spamcop.net/sc?id=z2894195995zd36d4e0edc3124af6638a163df217bd6z

Reports regarding this spam have already been sent:
Re: 190.162.15.100 (Administrator of network where email originates)
Reportid: 4145231580 To: postmaster#vtr...@devnull.spamcop.net
Reportid: 4145231582 To: hostm...@vtr.net
Reportid: 4145231585 To: ab...@vtr.net
Re: http://sfto.dissiyy.cn/ (Administrator of network hosting website referenced in spam)
Reportid: 4145231591 To: n.re...@baltkom.lv
Reportid: 4145231595 To: arv...@parks.lv

============================================================================
spam source:

dritz:~> whois -h whois.cymru.com 190.162.15.100 ; date
AS | IP | AS Name
22047 | 190.162.15.100 | VTR BANDA ANCHA S.A.
Fri May 15 22:40:25 UTC 2009

============================================================================
botnet redirector landing hosts and DNS:

cheap-meds.cn... 218.75.144.6, 119.39.238.2
cheaperwatch.cn... 125.181.106.181
cosgahrorda.com... 208.73.210.121
longerdick.cn... 125.181.106.181
loseweightfast.cn... 125.181.106.181
lowpricepills.cn... 119.39.238.2, 218.75.144.6
mycheaprxs.org... failed: No address associated with hostname.
pharmacyyy.com... 212.150.147.3
wholesale-pharmacy.org... failed: No address associated with hostname.
yourbiggerpenis.com... failed: No address associated with hostname.

[ whois.cymru.com ]
AS | IP | AS Name
4134 | 218.75.144.6 | CHINANET-BACKBONE No.31,Jin-rong Street
4837 | 58.20.191.2 | CHINA169-BACKBONE CNCGROUP China169 Backbone
4837 | 119.39.238.2 | CHINA169-BACKBONE CNCGROUP China169 Backbone
4847 | 124.207.41.201 | CNIX-AP China Networks Inter-Exchange
4847 | 124.207.117.60 | CNIX-AP China Networks Inter-Exchange
8584 | 212.150.147.3 | BARAK Netvision 013 Barak - Barak Network
9394 | 61.235.157.29 | CRNET CHINA RAILWAY Internet(CRNET)
17816 | 124.207.41.201 | CHINA169-GZ CNCGROUP IP network China169 Guangzhou MAN
17816 | 124.207.117.60 | CHINA169-GZ CNCGROUP IP network China169 Guangzhou MAN
17858 | 125.181.106.181 | KRNIC-ASBLOCK-AP KRNIC
27699 | 189.19.76.194 | TELECOMUNICACOES DE SAO PAULO S/A - TELESP
Sat May 16 00:45:15 UTC 2009

============================================================================
fast-flux botnet IP addresses:

[ whois.cymru.com ]
AS | IP | AS Name
1741 | 157.24.52.48 | FUNETAS FUNET autonomous system
3249 | 85.29.240.149 | ESTPAK Elion Enterprises Ltd.
3786 | 61.39.110.183 | LGDACOM LG DACOM Corporation
4766 | 222.100.6.243 | KIXS-AS-KR Korea Telecom
6678 | 89.156.146.142 | ASN-NOOS NUMERICABLE is a cable operator,
6746 | 78.97.10.209 | ASTRAL UPC Romania Srl, Romania
6830 | 89.132.180.100 | UPC UPC Broadband
6830 | 89.132.92.72 | UPC UPC Broadband
8728 | 93.185.246.131 | INFONET.EE ISP Autonomous System
8997 | 91.122.153.34 | ASN-SPBNIT OJSC North-West Telecom Autonomous System
9143 | 83.86.122.42 | ZIGGO Ziggo - tv, internet, telefoon
9498 | 124.123.235.146 | BBIL-AP BHARTI Airtel Ltd.
10318 | 190.18.234.34 | CABLEVISION S.A.
10318 | 200.126.229.73 | CABLEVISION S.A.
11351 | 74.69.116.98 | RR-NYSREGION-ASN-01 - Road Runner HoldCo LLC
11976 | 76.236.231.159 | FIDN - Fidelity Networks, Inc.
12578 | 87.110.61.92 | APOLLO-AS LATTELEKOM-APOLLO
12578 | 87.110.192.121 | APOLLO-AS LATTELEKOM-APOLLO
13272 | 82.131.1.232 | STARMAN Starman Internet AS
15836 | 217.26.171.29 | AXAUTSYS ARAX Autonomous System
16338 | 62.57.213.68 | AUNA_TELECOM-AS Cableuropa - ONO
17858 | 124.63.111.24 | KRNIC-ASBLOCK-AP KRNIC
18101 | 123.238.13.134 | RIL-IDC Reliance Infocom Ltd Internet Data Centre,
20797 | 87.226.97.153 | IPASAULE-AS _Interneta Pasaule_ SIA
20910 | 77.38.138.117 | BALTKOM-AS BALTKOM Autonomous System
20910 | 89.201.78.122 | BALTKOM-AS BALTKOM Autonomous System
20910 | 89.201.79.30 | BALTKOM-AS BALTKOM Autonomous System
24852 | 84.55.63.103 | VINITA VINITA Internet Services
25229 | 77.122.232.98 | VOLIA-AS Volia Autonomous System
25229 | 77.123.83.215 | VOLIA-AS Volia Autonomous System
25229 | 93.72.115.234 | VOLIA-AS Volia Autonomous System
29096 | 88.147.33.235 | MACTELECOM-AS MAC Telecom Blue Tower,
33668 | 68.83.195.43 | DNEO-OSP7 - Comcast Cable Communications, Inc.
36727 | 74.130.143.157 | INSIGHT-COMMUNICATIONS-CORP-AS1 - INSIGHT COMMUNICATIONS COMPANY, L.P.
41232 | 94.240.173.85 | SSN SouthSide Network
41897 | 95.85.189.20 | SAT-TRAKT-AS SAT-TRAKT D.O.O. Autonomous System
42232 | 88.87.250.142 | PARISAT Parisat
Sat May 16 00:51:50 UTC 2009

============================================================================
[ Offending message ]
Return-Path: <b.el...@kesslercpa.com>
X-Original-To: x
Delivered-To: x.mako.ath.cx
Received: from glimmer.mako.ath.cx (localhost [127.0.0.1])
by glimmer.local (Postfix) with ESMTP id 6DB16CDFB83
for <x>; Fri, 15 May 2009 16:30:50 -0500 (CDT)
Received: from pop.mindspring.com
by glimmer.mako.ath.cx with POP3 (fetchmail-6.3.8)
for <x> (single-drop); Fri, 15 May 2009 16:30:50 -0500 (CDT)
Received: from albert.mail.atl.earthlink.net ([127.0.0.1])
by albert.mail.atl.earthlink.net (EarthLink SMTP Server) with SMTP id 1m54Yc5333Nl3qU2; Fri, 15 May 2009 17:29:32 -0400 (EDT)
Received: from kpoghjfms ([190.162.15.100])
by albert.mail.atl.earthlink.net (EarthLink SMTP Server) with ESMTP id 1m54XW7J33Nl3qU0; Fri, 15 May 2009 17:29:19 -0400 (EDT)
To: <x>
In-Reply-To: <da2601c9d0a8$34399a9d$199682ea@0vehc72>
Subject: #1_Lose Weight SuperFood Acai Berry FREE-TRIAL, you pay only $5.95 shipping! apmmbi vb
Reply-To: "Birdie Elsa" <b.el...@kesslercpa.com>
Message-ID: <1242___...@kesslercpa.com>
Date: Fri, 15 May 2009 13:37:35 -0700
Sender: <b.el...@kesslercpa.com>
From: "Birdie Elsa" <b.el...@kesslercpa.com>
Content-Type: text/plain;
charset="iso-8859-2"
Content-Transfer-Encoding: 8bit
X-ELNK-Received-Info: spv=1;
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=0b; sbw=000;

D1ET/WieghtLoss SUPERFOOD! Lose 5-10 P0UNDs fast!
FREE 1 bottle TRIAL, you pay only $5.95 for shipping

"Little Berry" BIG POWER!
Secret Celebrity Diets include Acai!
Acai is taking Hollywood by storm!

Experience increased Healthy Energy
Increase alertness, concentration, and mental sharpness.
Higher Antioxidants than pomegranate & green tea!
Increased Energy levels! Satisfaction Guaranteeed!

Claim your RISK-FREE trial!
http://sfto.dissiyy.cn
http://shiy.dissiyy.cn

Acai is the Talk of the media:
1) Oprah Show:
- -: Dr. Oz On Oprah said :-
While blueberries are a great anti-aging food, Acai has twice the amount of the antioxidants. Since you need 5-6 servings of antioxidant foods a day, Acai is a wonderful alternative.

2) USA TODAY:
- -: The Acai Secret :-
Acai is a top superfood due to the amazing health and medicinal values that are in the fruit. This energy packed food contains antioxidants, fiber, amino acids and various other vitamins and minerals.

3) MSNBC:
- -: A Bizarre New Healthy Fruit :-
Studies show that acai fruit, is one of the most nutritious and energy rich foods in the world. Harvested in the Brazilian rainforests, Acai puls contains 10 times more antioxidants than red grapes.

4) CBS NEWS:
- -: Food for a Healthy Heart :-
Dietician Keri Glassman says that keeping your body weight at a heallthy level can dramatically improve your heart health. Also, Acai berries are among the most nutritious foods of the Amazon.

Get you FREE bottle of Acai Berry while they last

http://sgcd.dissiyy.cn
http://ssg.dissiyy.cn

============================================================================
[ SpamCop V4.5.0.102 ]
This message is brief for your comfort. Please use links below for details.

User-targeted report, see notes, if any.
http://www.spamcop.net/w3m?i=z4145231588zda91b799389753fab5a946119d39c5c2z
190.162.15.100 is open proxy, see: http://www.spamcop.net/mky-proxies.html
[ Comments from recipient regarding 190.162.15.100 ]
> dritz:~> blq -ant 190.162.15.100 ; date
> 190.162.15.100 : cbl.abuseat.org : BLOCKED (127.0.0.2)
> Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=190.162.15.100
> 190.162.15.100 : zen.spamhaus.org : BLOCKED (127.0.0.4)
> http://www.spamhaus.org/query/bl?ip=190.162.15.100
> Sat May 16 00:02:17 UTC 2009
>

[ Additional comments from recipient ]
dritz:~> wget -t1 s\*.dissiyy.cn ; date
- --2009-05-15 17:29:48-- http://s*.dissiyy.cn/
Resolving s*.dissiyy.cn... 89.156.146.142, 190.18.234.34, 217.26.171.29, ...
Connecting to s*.dissiyy.cn|89.156.146.142|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://loseweightfast.cn [following]
- --2009-05-15 17:29:50-- http://loseweightfast.cn/
Resolving loseweightfast.cn... 125.181.106.181
Connecting to loseweightfast.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2009-05-15 17:29:51 ERROR 403: Forbidden.

Fri May 15 22:29:51 UTC 2009

dritz:~% wget -t1 s.dissiyy.cn ; date
- --17:31:41-- http://s.dissiyy.cn/
=> `index.html'
Resolving s.dissiyy.cn... 84.55.63.103, 87.110.61.92, 89.156.146.142, ...
Connecting to s.dissiyy.cn|84.55.63.103|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://loseweightfast.cn [following]
- --17:31:51-- http://loseweightfast.cn/
=> `index.html'
Resolving loseweightfast.cn... 125.181.106.181
Connecting to loseweightfast.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
17:31:52 ERROR 403: Forbidden.

Fri May 15 22:31:52 UTC 2009

dritz:~% wget -t1 s.dissiyy.cn ; date
- --17:32:29-- http://s.dissiyy.cn/
=> `index.html'
Resolving s.dissiyy.cn... 77.38.138.117, 78.97.10.209, 84.55.63.103, ...
Connecting to s.dissiyy.cn|77.38.138.117|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://loseweightfast.cn [following]
- --17:32:40-- http://loseweightfast.cn/
=> `index.html'
Resolving loseweightfast.cn... 125.181.106.181
Connecting to loseweightfast.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
17:32:40 ERROR 403: Forbidden.

Fri May 15 22:32:40 UTC 2009

dritz:~> uri dissiyy.cn ; uri loseweightfast.cn ; blq -at zen
loseweightfast.cn ; date
dissiyy.cn.multi.uribl.com descriptive text "Blacklisted, see
http://lookup.uribl.com/?domain=dissiyy.cn"
dissiyy.cn.multi.surbl.org descriptive text "Blocked, dissiyy.cn on
lists [jp][ob][sc], See: http://www.surbl.org/lists.html"
loseweightfast.cn.multi.uribl.com descriptive text "Blacklisted, see
http://lookup.uribl.com/?domain=loseweightfast.cn"
loseweightfast.cn.multi.surbl.org descriptive text "Blocked,
loseweightfast.cn on lists [ws], See:
http://www.surbl.org/lists.html"
125.181.106.181 loseweightfast.cn : zen.spamhaus.org : BLOCKED
(127.0.0.2)
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL74684
http://www.spamhaus.org/query/bl?ip=125.181.106.181
Fri May 15 22:34:12 UTC 2009

dritz:~> telnet 62.57.213.68 80 ; dig @62.57.213.68 \*.dissiyy.cn ; date
Trying 62.57.213.68...
Connected to 62.57.213.68.dyn.user.ono.com.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:35:37 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @62.57.213.68 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37431
;; flags: qr aa rd; QUERY: 1, ANSWER: 9, AUTHORITY: 4, ADDITIONAL: 4
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;*.dissiyy.cn. IN A

;; ANSWER SECTION:
*.dissiyy.cn. 180 IN CNAME dissiyy.cn.
dissiyy.cn. 180 IN A 77.38.138.117
dissiyy.cn. 180 IN A 78.97.10.209
dissiyy.cn. 180 IN A 84.55.63.103
dissiyy.cn. 180 IN A 87.110.61.92
dissiyy.cn. 180 IN A 89.156.146.142
dissiyy.cn. 180 IN A 190.18.234.34
dissiyy.cn. 180 IN A 217.26.171.29
dissiyy.cn. 180 IN A 62.57.213.68

;; AUTHORITY SECTION:
dissiyy.cn. 180 IN NS ns3.ojujnhgwqnyt.com.
dissiyy.cn. 180 IN NS ns4.vybuww.com.
dissiyy.cn. 180 IN NS ns1.vybuww.com.
dissiyy.cn. 180 IN NS ns2.ojujnhgwqnyt.com.

;; ADDITIONAL SECTION:
ns1.vybuww.com. 172444 IN A 200.126.229.73
ns2.ojujnhgwqnyt.com. 172444 IN A 157.24.52.48
ns3.ojujnhgwqnyt.com. 172444 IN A 222.100.6.243
ns4.vybuww.com. 172444 IN A 77.122.232.98

;; Query time: 274 msec
;; SERVER: 62.57.213.68#53(62.57.213.68)
;; WHEN: Fri May 15 17:35:04 2009
;; MSG SIZE rcvd: 331

Fri May 15 22:35:04 UTC 2009

dritz:~> telnet 89.156.146.142 80 ; dig @89.156.146.142 \*.dissiyy.cn ;
date
Trying 89.156.146.142...
Connected to 89-156-146-142.rev.numericable.fr.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:35:56 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @89.156.146.142 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
Fri May 15 22:35:38 UTC 2009

dritz:~> telnet 190.18.234.34 80 ; dig @190.18.234.34 \*.dissiyy.cn ;
date
Trying 190.18.234.34...
Connected to 34-234-18-190.fibertel.com.ar.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:36:25 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @190.18.234.34 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
Fri May 15 22:36:07 UTC 2009

dritz:~> telnet 217.26.171.29 80 ; dig @217.26.171.29 \*.dissiyy.cn ;
date
Trying 217.26.171.29...
Connected to 217.26.171.29.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:36:55 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @217.26.171.29 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47068
;; flags: qr aa rd; QUERY: 1, ANSWER: 6, AUTHORITY: 4, ADDITIONAL: 4
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;*.dissiyy.cn. IN A

;; ANSWER SECTION:
*.dissiyy.cn. 180 IN CNAME dissiyy.cn.
dissiyy.cn. 180 IN A 89.201.78.122
dissiyy.cn. 180 IN A 87.110.192.121
dissiyy.cn. 180 IN A 88.147.33.235
dissiyy.cn. 180 IN A 89.132.92.72
dissiyy.cn. 180 IN A 89.132.180.100

;; AUTHORITY SECTION:
dissiyy.cn. 180 IN NS ns1.vybuww.com.
dissiyy.cn. 180 IN NS ns2.ojujnhgwqnyt.com.
dissiyy.cn. 180 IN NS ns3.ojujnhgwqnyt.com.
dissiyy.cn. 180 IN NS ns4.vybuww.com.

;; ADDITIONAL SECTION:
ns1.vybuww.com. 172784 IN A 89.132.180.100
ns2.ojujnhgwqnyt.com. 172784 IN A 157.24.52.48
ns3.ojujnhgwqnyt.com. 172784 IN A 93.185.246.131
ns4.vybuww.com. 172784 IN A 89.156.146.142

;; Query time: 333 msec
;; SERVER: 217.26.171.29#53(217.26.171.29)
;; WHEN: Fri May 15 17:36:22 2009
;; MSG SIZE rcvd: 283

Fri May 15 22:36:22 UTC 2009

dritz:~> telnet 84.55.63.103 80 ; dig @84.55.63.103 \*.dissiyy.cn ; date
Trying 84.55.63.103...
Connected to ctv-84-55-63-103.sugardas.lt.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:37:15 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @84.55.63.103 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
Fri May 15 22:36:57 UTC 2009

dritz:~> telnet 87.110.61.92 80 ; dig @87.110.61.92 \*.dissiyy.cn ; date
Trying 87.110.61.92...
Connected to 87.110.61.92.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:37:53 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @87.110.61.92 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36650
;; flags: qr aa rd; QUERY: 1, ANSWER: 6, AUTHORITY: 4, ADDITIONAL: 4
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;*.dissiyy.cn. IN A

;; ANSWER SECTION:
*.dissiyy.cn. 180 IN CNAME dissiyy.cn.
dissiyy.cn. 180 IN A 89.132.92.72
dissiyy.cn. 180 IN A 89.132.180.100
dissiyy.cn. 180 IN A 89.201.78.122
dissiyy.cn. 180 IN A 87.110.192.121
dissiyy.cn. 180 IN A 88.147.33.235

;; AUTHORITY SECTION:
dissiyy.cn. 180 IN NS ns1.vybuww.com.
dissiyy.cn. 180 IN NS ns2.ojujnhgwqnyt.com.
dissiyy.cn. 180 IN NS ns3.ojujnhgwqnyt.com.
dissiyy.cn. 180 IN NS ns4.vybuww.com.

;; ADDITIONAL SECTION:
ns1.vybuww.com. 172726 IN A 89.132.180.100
ns2.ojujnhgwqnyt.com. 172726 IN A 157.24.52.48
ns3.ojujnhgwqnyt.com. 172726 IN A 93.185.246.131
ns4.vybuww.com. 172726 IN A 89.156.146.142

;; Query time: 314 msec
;; SERVER: 87.110.61.92#53(87.110.61.92)
;; WHEN: Fri May 15 17:37:20 2009
;; MSG SIZE rcvd: 283

Fri May 15 22:37:20 UTC 2009

dritz:~> telnet 89.156.146.142 80 ; dig @89.156.146.142 \*.dissiyy.cn ;
date
Trying 89.156.146.142...
Connected to 89-156-146-142.rev.numericable.fr.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:38:12 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @89.156.146.142 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
Fri May 15 22:37:54 UTC 2009

dritz:~> telnet 77.38.138.117 80 ; dig @77.38.138.117 \*.dissiyy.cn ;
date
Trying 77.38.138.117...
Connected to 77.38.138.117.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:38:45 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @77.38.138.117 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5888
;; flags: qr aa rd; QUERY: 1, ANSWER: 6, AUTHORITY: 4, ADDITIONAL: 4
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;*.dissiyy.cn. IN A

;; ANSWER SECTION:
*.dissiyy.cn. 180 IN CNAME dissiyy.cn.
dissiyy.cn. 180 IN A 87.110.192.121
dissiyy.cn. 180 IN A 88.147.33.235
dissiyy.cn. 180 IN A 89.132.92.72
dissiyy.cn. 180 IN A 89.132.180.100
dissiyy.cn. 180 IN A 89.201.78.122

;; AUTHORITY SECTION:
dissiyy.cn. 180 IN NS ns4.vybuww.com.
dissiyy.cn. 180 IN NS ns1.vybuww.com.
dissiyy.cn. 180 IN NS ns2.ojujnhgwqnyt.com.
dissiyy.cn. 180 IN NS ns3.ojujnhgwqnyt.com.

;; ADDITIONAL SECTION:
ns1.vybuww.com. 172674 IN A 89.132.180.100
ns2.ojujnhgwqnyt.com. 172674 IN A 157.24.52.48
ns3.ojujnhgwqnyt.com. 172674 IN A 93.185.246.131
ns4.vybuww.com. 172674 IN A 89.156.146.142

;; Query time: 270 msec
;; SERVER: 77.38.138.117#53(77.38.138.117)
;; WHEN: Fri May 15 17:38:12 2009
;; MSG SIZE rcvd: 283

Fri May 15 22:38:12 UTC 2009

dritz:~> telnet 78.97.10.209 80 ; dig @78.97.10.209 \*.dissiyy.cn ; date
Trying 78.97.10.209...
Connected to 78.97.10.209.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:39:12 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @78.97.10.209 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5523
;; flags: qr aa rd; QUERY: 1, ANSWER: 6, AUTHORITY: 4, ADDITIONAL: 4
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;*.dissiyy.cn. IN A

;; AUTHORITY SECTION:
dissiyy.cn. 180 IN NS ns4.vybuww.com.
dissiyy.cn. 180 IN NS ns1.vybuww.com.
dissiyy.cn. 180 IN NS ns2.ojujnhgwqnyt.com.
dissiyy.cn. 180 IN NS ns3.ojujnhgwqnyt.com.

;; ADDITIONAL SECTION:
ns1.vybuww.com. 172647 IN A 89.132.180.100
ns2.ojujnhgwqnyt.com. 172647 IN A 157.24.52.48
ns3.ojujnhgwqnyt.com. 172647 IN A 93.185.246.131
ns4.vybuww.com. 172647 IN A 89.156.146.142

;; Query time: 345 msec
;; SERVER: 78.97.10.209#53(78.97.10.209)
;; WHEN: Fri May 15 17:38:39 2009
;; MSG SIZE rcvd: 283

Fri May 15 22:38:39 UTC 2009

dritz:~> telnet 84.55.63.103 80 ; dig @84.55.63.103 \*.dissiyy.cn ; date
Trying 84.55.63.103...
Connected to ctv-84-55-63-103.sugardas.lt.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 22:39:33 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @84.55.63.103 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
Fri May 15 22:39:14 UTC 2009

dritz:~> telnet 94.240.173.85 80 ; dig @94.240.173.85 \*.dissiyy.cn ;
date
Trying 94.240.173.85...
Connected to 94.240.173.85.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Fri, 15 May 2009 23:59:35 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @94.240.173.85 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
Fri May 15 23:59:16 UTC 2009

dritz:~> telnet 89.201.79.30 80 ; dig @89.201.79.30 \*.dissiyy.cn ; date
Trying 89.201.79.30...
Connected to btv892017930.btv.lv.
Escape character is '^]'.
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Sat, 16 May 2009 00:00:48 GMT
Server: Apache/2.0.59 (FreeBSD) PHP/4.4.4 with Suhosin-Patch
Last-Modified: Sat, 01 Mar 2008 02:01:27 GMT
ETag: "d4e89-0-8856ebc0"
Accept-Ranges: bytes
Connection: close
Content-Type: text/html

Connection closed by foreign host.

; <<>> DiG 9.4.3-P1 <<>> @89.201.79.30 *.dissiyy.cn
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48312
;; flags: qr aa rd; QUERY: 1, ANSWER: 6, AUTHORITY: 4, ADDITIONAL: 4
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;*.dissiyy.cn. IN A

;; ANSWER SECTION:
*.dissiyy.cn. 180 IN CNAME dissiyy.cn.
dissiyy.cn. 180 IN A 78.97.10.209
dissiyy.cn. 180 IN A 84.55.63.103
dissiyy.cn. 180 IN A 87.110.61.92
dissiyy.cn. 180 IN A 89.201.79.30
dissiyy.cn. 180 IN A 94.240.173.85

;; AUTHORITY SECTION:
dissiyy.cn. 180 IN NS ns3.ojujnhgwqnyt.com.
dissiyy.cn. 180 IN NS ns4.vybuww.com.
dissiyy.cn. 180 IN NS ns1.vybuww.com.
dissiyy.cn. 180 IN NS ns2.ojujnhgwqnyt.com.

;; ADDITIONAL SECTION:
ns1.vybuww.com. 172633 IN A 68.83.195.43
ns2.ojujnhgwqnyt.com. 172633 IN A 89.132.180.100
ns3.ojujnhgwqnyt.com. 172633 IN A 74.69.116.98
ns4.vybuww.com. 172633 IN A 76.236.231.159

;; Query time: 332 msec
;; SERVER: 89.201.79.30#53(89.201.79.30)
;; WHEN: Fri May 15 19:00:14 2009
;; MSG SIZE rcvd: 283

Sat May 16 00:00:14 UTC 2009

dritz:~> digger dissiyy.cn ; digger ns1.ojujnhgwqnyt.com ; digger
ns2.ojujnhgwqnyt.com ; digger ns3.ojujnhgwqnyt.com ; digger
ns4.ojujnhgwqnyt.com ; digger ns1.vybuww.com ; digger
ns2.vybuww.com ; digger ns3.vybuww.com ; digger ns4.vybuww.com
dissiyy.cn 85.29.240.149
dissiyy.cn 87.110.192.121
dissiyy.cn 89.132.180.100
dissiyy.cn 89.201.79.30
ns1.vybuww.com 157.24.52.48
ns1.vybuww.com 200.126.229.73
ns1.vybuww.com 68.83.195.43
ns2.ojujnhgwqnyt.com 124.123.235.146
ns2.ojujnhgwqnyt.com 77.122.232.98
ns2.ojujnhgwqnyt.com 82.131.1.232
ns2.ojujnhgwqnyt.com 87.226.97.153
ns3.ojujnhgwqnyt.com 123.238.13.134
ns3.ojujnhgwqnyt.com 157.24.52.48
ns3.ojujnhgwqnyt.com 88.147.33.235
ns3.ojujnhgwqnyt.com 93.185.246.131
ns3.ojujnhgwqnyt.com 93.72.115.234
ns4.vybuww.com 77.122.232.98
ns4.vybuww.com 85.29.240.149
ns4.vybuww.com 87.110.61.92
ns4.vybuww.com 88.147.33.235
ns4.vybuww.com 91.122.153.34
Sat May 16 00:12:22 UTC 2009
ns1.ojujnhgwqnyt.com 157.24.52.48
ns1.ojujnhgwqnyt.com 200.126.229.73
Sat May 16 00:12:25 UTC 2009
ns2.ojujnhgwqnyt.com 124.123.235.146
ns2.ojujnhgwqnyt.com 222.100.6.243
ns2.ojujnhgwqnyt.com 77.122.232.98
ns2.ojujnhgwqnyt.com 82.131.1.232
ns2.ojujnhgwqnyt.com 85.29.240.149
ns2.ojujnhgwqnyt.com 88.87.250.142
Sat May 16 00:12:27 UTC 2009
ns3.ojujnhgwqnyt.com 123.238.13.134
ns3.ojujnhgwqnyt.com 124.63.111.24
ns3.ojujnhgwqnyt.com 157.24.52.48
ns3.ojujnhgwqnyt.com 77.123.83.215
ns3.ojujnhgwqnyt.com 83.86.122.42
Sat May 16 00:12:29 UTC 2009
ns4.ojujnhgwqnyt.com 77.122.232.98
ns4.ojujnhgwqnyt.com 95.85.189.20
Sat May 16 00:12:32 UTC 2009
ns1.vybuww.com 157.24.52.48
ns1.vybuww.com 200.126.229.73
ns1.vybuww.com 68.83.195.43
ns1.vybuww.com 74.130.143.157
ns1.vybuww.com 87.226.97.153
Sat May 16 00:12:34 UTC 2009
ns2.vybuww.com 222.100.6.243
Sat May 16 00:12:37 UTC 2009
ns3.vybuww.com 124.63.111.24
Sat May 16 00:12:39 UTC 2009
ns4.vybuww.com 77.122.232.98
ns4.vybuww.com 88.147.33.235
ns4.vybuww.com 89.156.146.142
ns4.vybuww.com 91.122.153.34
ns4.vybuww.com 93.72.115.234
Sat May 16 00:12:41 UTC 2009

dritz:~> wgetter dissiyy.cn
- --2009-05-15 19:11:37-- http://a*.dissiyy.cn/
Resolving a*.dissiyy.cn... 87.110.192.121, 89.132.180.100, 89.201.79.30, ...
Connecting to a*.dissiyy.cn|87.110.192.121|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://pharmacyyy.com [following]
- --2009-05-15 19:11:45-- http://pharmacyyy.com/
Resolving pharmacyyy.com... 212.150.147.3
Connecting to pharmacyyy.com|212.150.147.3|:80... failed: Operation timed out.
Giving up.

- --2009-05-15 19:13:01-- http://b*.dissiyy.cn/
Resolving b*.dissiyy.cn... 89.132.180.100, 89.201.79.30, 85.29.240.149, ...
Connecting to b*.dissiyy.cn|89.132.180.100|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://lowpricepills.cn [following]
- --2009-05-15 19:13:26-- http://lowpricepills.cn/
Resolving lowpricepills.cn... 218.75.144.6, 119.39.238.2
Connecting to lowpricepills.cn|218.75.144.6|:80... connected.
HTTP request sent, awaiting response... No data received.
Giving up.

- --2009-05-15 19:13:28-- http://c*.dissiyy.cn/
Resolving c*.dissiyy.cn... 89.132.180.100, 89.201.79.30, 85.29.240.149, ...
Connecting to c*.dissiyy.cn|89.132.180.100|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://wholesale-pharmacy.org [following]
- --2009-05-15 19:13:40-- http://wholesale-pharmacy.org/
Resolving wholesale-pharmacy.org... failed: nodename nor servname provided, or not known.
wget: unable to resolve host address `wholesale-pharmacy.org'
- --2009-05-15 19:13:41-- http://d*.dissiyy.cn/
Resolving d*.dissiyy.cn... 89.201.79.30, 85.29.240.149, 87.110.192.121, ...
Connecting to d*.dissiyy.cn|89.201.79.30|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://mycheaprxs.org [following]
- --2009-05-15 19:13:43-- http://mycheaprxs.org/
Resolving mycheaprxs.org... failed: nodename nor servname provided, or not known.
wget: unable to resolve host address `mycheaprxs.org'
- --2009-05-15 19:13:43-- http://g*.dissiyy.cn/
Resolving g*.dissiyy.cn... failed: nodename nor servname provided, or not known.
wget: unable to resolve host address `g*.dissiyy.cn'
- --2009-05-15 19:14:13-- http://k*.dissiyy.cn/
Resolving k*.dissiyy.cn... 85.29.240.149, 87.110.192.121, 89.132.180.100, ...
Connecting to k*.dissiyy.cn|85.29.240.149|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://cheap-meds.cn [following]
- --2009-05-15 19:14:20-- http://cheap-meds.cn/
Resolving cheap-meds.cn... 218.75.144.6, 119.39.238.2
Connecting to cheap-meds.cn|218.75.144.6|:80... connected.
HTTP request sent, awaiting response... No data received.
Giving up.

- --2009-05-15 19:14:22-- http://o*.dissiyy.cn/
Resolving o*.dissiyy.cn... 85.29.240.149, 87.110.192.121, 89.132.180.100, ...
Connecting to o*.dissiyy.cn|85.29.240.149|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://cosgahrorda.com [following]
- --2009-05-15 19:14:23-- http://cosgahrorda.com/
Resolving cosgahrorda.com... 208.73.210.121
Connecting to cosgahrorda.com|208.73.210.121|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `index.html.1'

[ <=> ] 757 --.-K/s in 0s

2009-05-15 19:14:24 (9.50 MB/s) - `index.html.1' saved [757]

- --2009-05-15 19:14:24-- http://p*.dissiyy.cn/
Resolving p*.dissiyy.cn... 89.201.79.30, 85.29.240.149, 87.110.192.121, ...
Connecting to p*.dissiyy.cn|89.201.79.30|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://longerdick.cn [following]
- --2009-05-15 19:14:30-- http://longerdick.cn/
Resolving longerdick.cn... 125.181.106.181
Connecting to longerdick.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2009-05-15 19:14:31 ERROR 403: Forbidden.

- --2009-05-15 19:14:31-- http://r*.dissiyy.cn/
Resolving r*.dissiyy.cn... 89.201.79.30, 85.29.240.149, 87.110.192.121, ...
Connecting to r*.dissiyy.cn|89.201.79.30|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://cheaperwatch.cn [following]
- --2009-05-15 19:14:35-- http://cheaperwatch.cn/
Resolving cheaperwatch.cn... 125.181.106.181
Connecting to cheaperwatch.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2009-05-15 19:14:36 ERROR 403: Forbidden.

- --2009-05-15 19:14:36-- http://s*.dissiyy.cn/
Resolving s*.dissiyy.cn... 89.132.180.100, 89.201.79.30, 85.29.240.149, ...
Connecting to s*.dissiyy.cn|89.132.180.100|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://loseweightfast.cn [following]
- --2009-05-15 19:14:43-- http://loseweightfast.cn/
Resolving loseweightfast.cn... 125.181.106.181
Connecting to loseweightfast.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2009-05-15 19:14:44 ERROR 403: Forbidden.

- --2009-05-15 19:14:44-- http://t*.dissiyy.cn/
Resolving t*.dissiyy.cn... 89.132.180.100, 89.201.79.30, 85.29.240.149, ...
Connecting to t*.dissiyy.cn|89.132.180.100|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://cheaperwatch.cn [following]
- --2009-05-15 19:14:46-- http://cheaperwatch.cn/
Resolving cheaperwatch.cn... 125.181.106.181
Connecting to cheaperwatch.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2009-05-15 19:14:46 ERROR 403: Forbidden.

- --2009-05-15 19:14:46-- http://v*.dissiyy.cn/
Resolving v*.dissiyy.cn... failed: nodename nor servname provided, or not known.
wget: unable to resolve host address `v*.dissiyy.cn'
Sat May 16 00:15:16 UTC 2009

dritz:~% wgetter dissiyy.cn
- --20:11:32-- http://a.dissiyy.cn/
=> `index.html'
Resolving a.dissiyy.cn... 87.110.192.121, 89.132.180.100, 89.201.79.30, ...
Connecting to a.dissiyy.cn|87.110.192.121|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://pharmacyyy.com [following]
- --20:11:37-- http://pharmacyyy.com/
=> `index.html'
Resolving pharmacyyy.com... 212.150.147.3
Connecting to pharmacyyy.com|212.150.147.3|:80... failed: Connection timed out.
Giving up.

- --20:12:53-- http://b.dissiyy.cn/
=> `index.html'
Resolving b.dissiyy.cn... 85.29.240.149, 87.110.192.121, 89.132.180.100, ...
Connecting to b.dissiyy.cn|85.29.240.149|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://lowpricepills.cn [following]
- --20:12:57-- http://lowpricepills.cn/
=> `index.html'
Resolving lowpricepills.cn... 119.39.238.2, 218.75.144.6
Connecting to lowpricepills.cn|119.39.238.2|:80... connected.
HTTP request sent, awaiting response... No data received.
Giving up.

- --20:13:21-- http://c.dissiyy.cn/
=> `index.html'
Resolving c.dissiyy.cn... 89.201.79.30, 85.29.240.149, 87.110.192.121, ...
Connecting to c.dissiyy.cn|89.201.79.30|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://wholesale-pharmacy.org [following]
- --20:13:28-- http://wholesale-pharmacy.org/
=> `index.html'
Resolving wholesale-pharmacy.org... failed: No address associated with hostname.
- --20:13:28-- http://d.dissiyy.cn/
=> `index.html'
Resolving d.dissiyy.cn... 89.132.180.100, 89.201.79.30, 85.29.240.149, ...
Connecting to d.dissiyy.cn|89.132.180.100|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://mycheaprxs.org [following]
- --20:13:32-- http://mycheaprxs.org/
=> `index.html'
Resolving mycheaprxs.org... failed: No address associated with hostname.
- --20:13:32-- http://g.dissiyy.cn/
=> `index.html'
Resolving g.dissiyy.cn... 87.110.192.121, 89.132.180.100, 89.201.79.30, ...
Connecting to g.dissiyy.cn|87.110.192.121|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://pharmacyyy.com [following]
- --20:13:35-- http://pharmacyyy.com/
=> `index.html'
Resolving pharmacyyy.com... 212.150.147.3
Connecting to pharmacyyy.com|212.150.147.3|:80... failed: Connection timed out.
Giving up.

- --20:14:50-- http://k.dissiyy.cn/
=> `index.html'
Resolving k.dissiyy.cn... 61.39.110.183, 78.97.10.209, 84.55.63.103, ...
Connecting to k.dissiyy.cn|61.39.110.183|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://cheap-meds.cn [following]
- --20:14:58-- http://cheap-meds.cn/
=> `index.html'
Resolving cheap-meds.cn... 218.75.144.6, 119.39.238.2
Connecting to cheap-meds.cn|218.75.144.6|:80... connected.
HTTP request sent, awaiting response... No data received.
Giving up.

- --20:15:22-- http://o.dissiyy.cn/
=> `index.html'
Resolving o.dissiyy.cn... 217.26.171.29, 61.39.110.183, 78.97.10.209, ...
Connecting to o.dissiyy.cn|217.26.171.29|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://cosgahrorda.com [following]
- --20:15:24-- http://cosgahrorda.com/
=> `index.html'
Resolving cosgahrorda.com... 208.73.210.121
Connecting to cosgahrorda.com|208.73.210.121|:80... connected.
HTTP request sent, awaiting response... 200 (OK)
Length: 986 [text/html]

100%[====================================>] 986 --.--K/s

20:15:24 (43.71 MB/s) - `index.html' saved [986/986]

- --20:15:24-- http://p.dissiyy.cn/
=> `index.html.1'
Resolving p.dissiyy.cn... 190.18.234.34, 217.26.171.29, 61.39.110.183, ...
Connecting to p.dissiyy.cn|190.18.234.34|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://longerdick.cn [following]
- --20:15:26-- http://longerdick.cn/
=> `index.html.1'
Resolving longerdick.cn... 125.181.106.181
Connecting to longerdick.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
20:15:27 ERROR 403: Forbidden.

- --20:15:27-- http://r.dissiyy.cn/
=> `index.html.1'
Resolving r.dissiyy.cn... 89.156.146.142, 190.18.234.34, 217.26.171.29, ...
Connecting to r.dissiyy.cn|89.156.146.142|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://cheaperwatch.cn [following]
- --20:15:28-- http://cheaperwatch.cn/
=> `index.html.1'
Resolving cheaperwatch.cn... 125.181.106.181
Connecting to cheaperwatch.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
20:15:29 ERROR 403: Forbidden.

- --20:15:29-- http://s.dissiyy.cn/
=> `index.html.1'
Resolving s.dissiyy.cn... 87.110.61.92, 89.156.146.142, 190.18.234.34, ...
Connecting to s.dissiyy.cn|87.110.61.92|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://loseweightfast.cn [following]
- --20:15:30-- http://loseweightfast.cn/
=> `index.html.1'
Resolving loseweightfast.cn... 125.181.106.181
Connecting to loseweightfast.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
20:15:31 ERROR 403: Forbidden.

- --20:15:31-- http://t.dissiyy.cn/
=> `index.html.1'
Resolving t.dissiyy.cn... 84.55.63.103, 87.110.61.92, 89.156.146.142, ...
Connecting to t.dissiyy.cn|84.55.63.103|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://cheaperwatch.cn [following]
- --20:15:32-- http://cheaperwatch.cn/
=> `index.html.1'
Resolving cheaperwatch.cn... 125.181.106.181
Connecting to cheaperwatch.cn|125.181.106.181|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
20:15:32 ERROR 403: Forbidden.

- --20:15:32-- http://v.dissiyy.cn/
=> `index.html.1'
Resolving v.dissiyy.cn... 78.97.10.209, 84.55.63.103, 87.110.61.92, ...
Connecting to v.dissiyy.cn|78.97.10.209|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://yourbiggerpenis.com [following]
- --20:15:33-- http://yourbiggerpenis.com/
=> `index.html.1'
Resolving yourbiggerpenis.com... failed: No address associated with hostname.
Sat May 16 00:15:33 UTC 2009

dritz:~> dig cheap-meds.cn ; dig cheaperwatch.cn ; dig cosgahrorda.com
; dig longerdick.cn ; dig loseweightfast.cn ; dig lowpricepills.cn
; dig pharmacyyy.com @212.150.147.3 ; dig pharmacyyy.com ; date

; <<>> DiG 9.4.3-P1 <<>> cheap-meds.cn
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22047
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;cheap-meds.cn. IN A

;; ANSWER SECTION:
cheap-meds.cn. 3600 IN A 218.75.144.6
cheap-meds.cn. 3600 IN A 119.39.238.2

;; AUTHORITY SECTION:
cheap-meds.cn. 21600 IN NS ns1.topdrool.com.
cheap-meds.cn. 21600 IN NS ns3.comepalatial.com.
cheap-meds.cn. 21600 IN NS ns2.topdrool.com.
cheap-meds.cn. 21600 IN NS ns4.comepalatial.com.

;; ADDITIONAL SECTION:
ns4.comepalatial.com. 172800 IN A 61.61.61.61
ns1.topdrool.com. 172800 IN A 124.207.41.201
ns2.topdrool.com. 172800 IN A 124.207.117.60
ns3.comepalatial.com. 172800 IN A 61.61.61.61

;; Query time: 611 msec
;; SERVER: 192.168.101.1#53(192.168.101.1)
;; WHEN: Fri May 15 19:39:28 2009
;; MSG SIZE rcvd: 224

; <<>> DiG 9.4.3-P1 <<>> cheaperwatch.cn
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2097
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;cheaperwatch.cn. IN A

;; ANSWER SECTION:
cheaperwatch.cn. 600 IN A 125.181.106.181

;; AUTHORITY SECTION:
cheaperwatch.cn. 600 IN NS ns2.cheaperwatch.cn.
cheaperwatch.cn. 600 IN NS ns1.cheaperwatch.cn.

;; ADDITIONAL SECTION:
ns1.cheaperwatch.cn. 600 IN A 125.181.106.181
ns2.cheaperwatch.cn. 600 IN A 125.181.106.181

;; Query time: 440 msec
;; SERVER: 192.168.101.1#53(192.168.101.1)
;; WHEN: Fri May 15 19:39:29 2009
;; MSG SIZE rcvd: 117

; <<>> DiG 9.4.3-P1 <<>> cosgahrorda.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39105
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;cosgahrorda.com. IN A

;; ANSWER SECTION:
cosgahrorda.com. 3600 IN A 208.73.210.121

;; AUTHORITY SECTION:
cosgahrorda.com. 3600 IN NS ns1.dsredirection.com.
cosgahrorda.com. 3600 IN NS ns2.dsredirection.com.

;; Query time: 113 msec
;; SERVER: 192.168.101.1#53(192.168.101.1)
;; WHEN: Fri May 15 19:39:29 2009
;; MSG SIZE rcvd: 99

; <<>> DiG 9.4.3-P1 <<>> longerdick.cn
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53250
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;longerdick.cn. IN A

;; ANSWER SECTION:
longerdick.cn. 600 IN A 125.181.106.181

;; AUTHORITY SECTION:
longerdick.cn. 600 IN NS ns1.longerdick.cn.
longerdick.cn. 600 IN NS ns2.longerdick.cn.

;; ADDITIONAL SECTION:
ns1.longerdick.cn. 600 IN A 125.181.106.181
ns2.longerdick.cn. 600 IN A 125.181.106.181

;; Query time: 511 msec
;; SERVER: 192.168.101.1#53(192.168.101.1)
;; WHEN: Fri May 15 19:39:29 2009
;; MSG SIZE rcvd: 115

; <<>> DiG 9.4.3-P1 <<>> loseweightfast.cn
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51689
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;loseweightfast.cn. IN A

;; ANSWER SECTION:
loseweightfast.cn. 600 IN A 125.181.106.181

;; AUTHORITY SECTION:
loseweightfast.cn. 600 IN NS ns1.loseweightfast.cn.
loseweightfast.cn. 600 IN NS ns2.loseweightfast.cn.

;; ADDITIONAL SECTION:
ns1.loseweightfast.cn. 600 IN A 125.181.106.181
ns2.loseweightfast.cn. 600 IN A 125.181.106.181

;; Query time: 528 msec
;; SERVER: 192.168.101.1#53(192.168.101.1)
;; WHEN: Fri May 15 19:39:30 2009
;; MSG SIZE rcvd: 119

; <<>> DiG 9.4.3-P1 <<>> lowpricepills.cn
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49422
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;lowpricepills.cn. IN A

;; ANSWER SECTION:
lowpricepills.cn. 3600 IN A 218.75.144.6
lowpricepills.cn. 3600 IN A 119.39.238.2

;; AUTHORITY SECTION:
lowpricepills.cn. 21600 IN NS ns2.topdrool.com.
lowpricepills.cn. 21600 IN NS ns3.comepalatial.com.
lowpricepills.cn. 21600 IN NS ns4.comepalatial.com.
lowpricepills.cn. 21600 IN NS ns1.topdrool.com.

;; Query time: 599 msec
;; SERVER: 192.168.101.1#53(192.168.101.1)
;; WHEN: Fri May 15 19:39:30 2009
;; MSG SIZE rcvd: 227

; <<>> DiG 9.4.3-P1 <<>> pharmacyyy.com @212.150.147.3
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 759
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;pharmacyyy.com. IN A

;; ANSWER SECTION:
pharmacyyy.com. 600 IN A 212.150.147.3

;; AUTHORITY SECTION:
pharmacyyy.com. 600 IN NS ns2.pharmacyyy.com.
pharmacyyy.com. 600 IN NS ns3.pharmacyyy.com.
pharmacyyy.com. 600 IN NS ns1.pharmacyyy.com.

;; ADDITIONAL SECTION:
ns1.pharmacyyy.com. 600 IN A 61.235.157.29
ns2.pharmacyyy.com. 600 IN A 189.19.76.194
ns3.pharmacyyy.com. 600 IN A 58.20.191.2

;; Query time: 278 msec
;; SERVER: 212.150.147.3#53(212.150.147.3)
;; WHEN: Fri May 15 19:39:31 2009
;; MSG SIZE rcvd: 150

; <<>> DiG 9.4.3-P1 <<>> pharmacyyy.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61014
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3

;; QUESTION SECTION:
;pharmacyyy.com. IN A

;; ANSWER SECTION:
pharmacyyy.com. 600 IN A 212.150.147.3

;; AUTHORITY SECTION:
pharmacyyy.com. 600 IN NS ns1.pharmacyyy.com.
pharmacyyy.com. 600 IN NS ns3.pharmacyyy.com.
pharmacyyy.com. 600 IN NS ns2.pharmacyyy.com.

;; ADDITIONAL SECTION:
ns3.pharmacyyy.com. 600 IN A xxx.xxx.xxx.xxx
ns1.pharmacyyy.com. 600 IN A 61.235.157.29
ns2.pharmacyyy.com. 600 IN A 189.19.76.194

;; Query time: 569 msec
;; SERVER: 192.168.101.1#53(192.168.101.1)
;; WHEN: Fri May 15 19:39:31 2009
;; MSG SIZE rcvd: 150

Sat May 16 00:39:31 UTC 2009

- --
David Ritz <dr...@mindspring.com>
Be kind to animals; kiss a shark.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (Darwin)
Comment: Public Keys: <http://dritz.home.mindspring.com/keys.txt>

iEYEARECAAYFAkoODrQACgkQUrwpmRoS3usdfgCcDHefjkdBLus919UsQnUtW5VJ
BW4Anjzfiz1k4jH5PhaquKwfAuLuysjU
=Sr0C
-----END PGP SIGNATURE-----

0 new messages