|
![]() |
|||||||
![]()
![]()
![]() |
![]() Posting with info on drug spam - Subject: [email] [spam] CIALIS - 94560097 Date: 2004-06-25 04:32:35 PST Spammed from Singapore, advertising the following sites which sell prescription-controlled pharmaceuticals without proper licenses and without requiring prescriptions. drmeds.info A 202.106.127.228 justrecommendation.info A 202.106.127.228 staminadrugs.com A 202.106.127.228 hecanhelp.net A 202.106.127.228 24phd.biz A 219.148.62.228 mfav.biz A 219.148.62.228 drproof.net A 219.148.62.228 phdmeds.net A 219.148.62.228 202.106.127.228: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15460 219.148.62.228: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL17386 ------------------------------------------------------------------------------- inetnum: 202.106.127.0 - 202.106.127.255 netname: IDC-HOSTNODE descr: idc-hostnode descr: Idc descr: beijing country: CN admin-c: LL212-AP tech-c: LL212-AP mnt-by: MAINT-CHINANET-BJ changed: llz@srit.com.cn 20020510 status: ASSIGNED NON-PORTABLE source: APNIC changed: hostmast@publicf.bta.net.cn 20031111 person: lizhang li nic-hdl: LL212-AP e-mail: as9811@srit.com.cn address: No.225 Chaonei Street Dongcheng District Beijing China phone: +86-10-65253831 fax-no: +86-10-65244907 country: CN changed: ipas@cnnic.net.cn 20030318 mnt-by: MAINT-CNNIC-AP source: APNIC ------------------------------------------------------------------------------- inetnum: 219.148.62.192 - 219.148.62.255 netname: SJZ-HEVNET-PLATFORM descr: HULIANXINGKONG information platform of HEBEI province country: CN admin-c: BR3-AP tech-c: BR3-AP status: ASSIGNED NON-PORTABLE mnt-by: MAINT-CHINATELECOM-HE changed: renbin@hbtele.com 20031218 source: APNIC person: Bin Ren nic-hdl: BR3-AP e-mail: renbin@mail.he.cn address: 10F Ximei Building NO.6 Jianshe South Street address: Shijiazhuang 050011 China phone: +86-311-5211551 fax-no: +86-311-5211578 country: CN changed: renbin@mail.he.cn 20040430 mnt-by: MAINT-CHINATELECOM-HE source: APNIC ------------------------------------------------------------------------------- Domain ID:D5996602-LRMS Domain Name:DRMEDS.INFO Created On:16-Jun-2004 09:59:38 UTC Last Updated On:19-Jun-2004 18:22:42 UTC Expiration Date:16-Jun-2005 09:59:38 UTC Sponsoring Registrar:R159-LRMS Status:ACTIVE Status:OK Registrant ID:C4846801-LRMS Registrant Name:Bruce Willing Registrant Organization:Private Imaging Registrant Street1:128 ventura blvd #212 Registrant City:Englewood Registrant State/Province:CO Registrant Postal Code:48310 Registrant Country:US Registrant Phone:+1.3526792560 Registrant Email:mycomp4ever@yahoo.com ... Name Server:NS1.3070.BIZ Name Server:NS2.3070.BIZ Name Server:NS3.3070.BIZ ------------------------------------------------------------------------------- ns1.3070.biz A 201.100.100.3 ns2.3070.biz A 201.3.240.133 ns3.3070.biz A 202.106.127.235 201.3.240.133: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL17407 202.106.127.235: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15460 Domain Name: 3070.BIZ Domain ID: D6940947-BIZ Sponsoring Registrar: ENOM, INC. Domain Status: ok Registrant ID: ADAE8E9B5E31F500 Registrant Name: francisco moreno Registrant Organization: na Registrant Address1: rua 12 Registrant City: Toledo Registrant Postal Code: 80420 Registrant Country: Spain Registrant Country Code: ES Registrant Email: 3070d@terra.com.mx ... Name Server: NS2.3070.BIZ Name Server: NS3.3070.BIZ Name Server: NS1.3070.BIZ Created by Registrar: ENOM, INC. Last Updated by Registrar: ENOM, INC. Domain Registration Date: Mon May 17 15:22:07 GMT 2004 Domain Expiration Date: Mon May 16 23:59:59 GMT 2005 Domain Last Updated Date: Tue May 18 01:52:08 GMT 2004 ------------------------------------------------------------------------------- Domain ID:D5996603-LRMS Domain Name:JUSTRECOMMENDATION.INFO Created On:16-Jun-2004 09:59:57 UTC Last Updated On:19-Jun-2004 18:23:29 UTC Expiration Date:16-Jun-2005 09:59:57 UTC Sponsoring Registrar:R159-LRMS Status:ACTIVE Status:OK Registrant ID:C4846801-LRMS Registrant Name:Bruce Willing Registrant Organization:Private Imaging Registrant Street1:128 ventura blvd #212 Registrant City:Englewood Registrant State/Province:CO Registrant Postal Code:48310 Registrant Country:US Registrant Phone:+1.3526792560 Registrant Email:mycomp4ever@yahoo.com ... Name Server:NS1.3070.BIZ Name Server:NS2.3070.BIZ Name Server:NS3.3070.BIZ ------------------------------------------------------------------------------- Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: STAMINADRUGS.COM Registrant: Private Imaging Bruce Willing (mycomp4ever@yahoo.com) 128 ventura blvd #212 Englewood CO,48310 US Tel. +1.3526792560 Creation Date: 16-Jun-2004 Expiration Date: 16-Jun-2005 Domain servers in listed order: ns1.3070.biz ns2.3070.biz ns3.3070.biz ------------------------------------------------------------------------------- Query: ssl4all.com Registry: whois.stargateinc.com Results: Domain Name: ssl4all.com Name Servers ns.host2010.com 62.65.252.227 ns2.host2010.com 62.65.252.228 Domain Created: 2/26/2003 Domain Expires: 2/25/2005 Registrant Yambo Financials Inc. (DE) 1001 SW 16th Avenue, 103, Gainesville, FL 32601 United States -- US email: ssl@host2010.com phone: 8778542861 fax: 8778542861 ------------------------------------------------------------------------------- Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: HOST2010.COM Registrant: Virtual World Ltd. Andrey Burdin (client09@ssl4all.com) 313 Victoria House Victoria null,n/a SC Tel. +187.78542861 Creation Date: 23-Mar-2000 Expiration Date: 23-Mar-2005 Domain servers in listed order: ns2.host2010.com ns.host2010.com ------------------------------------------------------------------------------- Why are they hosting in Estonia? Connectivity to Starman is provided by GBLX. inetnum: 62.65.252.224 - 62.65.252.239 netname: EE-EXODUS descr: Exodus Hosting OY descr: server-housing country: EE admin-c: RT974-RIPE tech-c: RT974-RIPE status: ASSIGNED PA notify: ripe@starman.ee mnt-by: AS13272-MNT changed: ripe@starman.ee 20031124 source: RIPE route: 62.65.192.0/18 descr: Starman Internet AS origin: AS13272 notify: ripe@starman.ee mnt-by: AS13272-MNT changed: ripe@starman.ee 20020620 source: RIPE person: Roman Tserkesov address: K.rberi 4-212 address: 13812 Tallinn address: Estonia phone: +37255954712 e-mail: goodies@elf.exodus.ro nic-hdl: RT974-RIPE notify: ripe@starman.ee changed: ripe@starman.ee 20031112 source: RIPE Why does Mr. Tserkesov have a contact address that appears to be in Romania? (elf.exodus.ro is 212.7.7.58 in Tallinn, Estonia.) ------------------------------------------------------------------------------- domain-name: exodus.ro description: [PI Removed] description: [PI Removed] description: [PI Removed] description: [PI Removed] description: Suceava description: RO description: Postal Code: [PI Removed] description: Phone: [PI Removed] description: Email: narcis@warpnet.ro admin-contact: BL27-ROTLD technical-contact: BL27-ROTLD zone-contact: BL27-ROTLD billing-contact: BL27-ROTLD nameserver: ns1.exodus.ro 82.211.36.130 nameserver: ns2.exodus.ro 62.65.252.137 nameserver: ns1.procopter.com 69.36.7.247 nameserver: ns2.procopter.com 69.36.7.248 ------------------------------------------------------------------------------- inetnum: 82.211.36.128 - 82.211.36.255 netname: DE-INTERNET-HOMING-GMBH-20040206 descr: Internet-Homing GmbH country: DE ------------------------------------------------------------------------------- inetnum: 62.65.252.128 - 62.65.252.191 netname: EE-EXODUS descr: Exodus Hosting OÜ country: EE ------------------------------------------------------------------------------- OrgName: JTL Networks Inc. OrgID: JTLNE Address: 240 N Fifth Street Address: Suite 210 City: Columbus StateProv: OH PostalCode: 43215 Country: US NetRange: 69.36.0.0 - 69.36.15.255 CIDR: 69.36.0.0/20 ------------------------------------------------------------------------------- Registration Service Provided By: NameCheap.com Contact: support@NameCheap.com Visit: http://www.namecheap.com/ Domain name: procopter.com Registrant Contact: C Ionut Vatavu (grimshrat@yahoo.com) +1.5555555555 Fax: +1.5555555555 Filimon 22 Solca, MD 6800 UK Name Servers: dns1.name-services.com dns2.name-services.com dns3.name-services.com dns4.name-services.com dns5.name-services.com Creation date: 26 Apr 2004 07:15:39 Expiration date: 26 Apr 2005 07:15:39 ------------------------------------------------------------------------------- Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: HECANHELP.NET Registrant: Private Imaging Bruce Willing (mycomp4ever@yahoo.com) 128 ventura blvd #212 Englewood CO,48310 US Tel. +1.3526792560 Creation Date: 16-Jun-2004 Expiration Date: 16-Jun-2005 Domain servers in listed order: ns1.3070.biz ns2.3070.biz ns3.3070.biz ------------------------------------------------------------------------------- Domain Name: 24PHD.BIZ Domain ID: D7185482-BIZ Sponsoring Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM) Domain Status: clientTransferProhibited Registrant ID: DI_450997 Registrant Name: Allen Tran Registrant Organization: ChocoPower Registrant Address1: 1871 McLaughlin Street Registrant City: San Jose Registrant State/Province: CA Registrant Postal Code: 95121 Registrant Country: United States Registrant Country Code: US Registrant Phone Number: +1.9259809320 Registrant Email: masterofchocolate2000@yahoo.com ... Name Server: NS1.24PHD.BIZ Name Server: NS2.24PHD.BIZ Created by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM) Last Updated by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM) Domain Registration Date: Tue Jun 15 08:38:28 GMT 2004 Domain Expiration Date: Tue Jun 14 23:59:59 GMT 2005 Domain Last Updated Date: Wed Jun 16 09:16:57 GMT 2004 ------------------------------------------------------------------------------- ns1.24phd.biz A 219.148.62.228 ns2.24phd.biz A 219.148.62.228 ------------------------------------------------------------------------------- Domain Name: MFAV.BIZ Domain ID: D7185483-BIZ Sponsoring Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM) Domain Status: clientTransferProhibited Registrant ID: DI_450997 Registrant Name: Allen Tran Registrant Organization: ChocoPower Registrant Address1: 1871 McLaughlin Street Registrant City: San Jose Registrant State/Province: CA Registrant Postal Code: 95121 Registrant Country: United States Registrant Country Code: US Registrant Phone Number: +1.9259809320 Registrant Email: masterofchocolate2000@yahoo.com ... Name Server: NS1.MFAV.BIZ Name Server: NS2.MFAV.BIZ Created by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM) Last Updated by Registrar: DIRECT INFORMATION PVT. LTD., (D.B.A. DIRECTI.COM) Domain Registration Date: Tue Jun 15 08:38:33 GMT 2004 Domain Expiration Date: Tue Jun 14 23:59:59 GMT 2005 Domain Last Updated Date: Wed Jun 16 09:13:25 GMT 2004 ------------------------------------------------------------------------------- ns1.mfav.biz A 219.148.62.228 ns2.mfav.biz A 219.148.62.228 ------------------------------------------------------------------------------- Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: DRPROOF.NET Registrant: ChocoPower Allen Tran (masterofchocolate2000@yahoo.com) 1871 McLaughlin Street San Jose CA,95121 US Tel. +1.9259809320 Creation Date: 15-Jun-2004 Expiration Date: 15-Jun-2005 Domain servers in listed order: ns1.drproof.net ns2.drproof.net ------------------------------------------------------------------------------- ns1.drproof.net A 219.148.62.228 ns2.drproof.net A 219.148.62.228 ------------------------------------------------------------------------------- Registration Service Provided By: NAME15.COM Contact: support@ssl4all.com Website: http://name15.com Domain Name: PHDMEDS.NET Registrant: ChocoPower Allen Tran (masterofchocolate2000@yahoo.com) 1871 McLaughlin Street San Jose CA,95121 US Tel. +1.9259809320 Creation Date: 15-Jun-2004 Expiration Date: 15-Jun-2005 Domain servers in listed order: ns1.phdmeds.net ns2.phdmeds.net ------------------------------------------------------------------------------- ns1.phdmeds.net A 219.148.62.228 ns2.phdmeds.net A 219.148.62.228 --------forwarded message-------- >From andre@auctionwatch.com Tue Jun 22 21:00:27 2004 Received: from bb220-255-59-201.singnet.com.sg (bb220-255-59-201.singnet.com.sg [220.255.59.201]) by send.it.helsinki.fi (8.12.11/8.12.11) with SMTP id i5MI09o5028382 for <-removed->; Tue, 22 Jun 2004 21:00:14 +0300 (EEST) Message-Id: <200406221800.i5MI09o5028382@send.it.helsinki.fi> From: don <andre@auctionwatch.com> To: -removed- Subject: CIALIS - 94560097 Date: Tue, 22 Jun 2004 17:53:03 +0000 MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0000_BC2B0905.C0F4A4FC" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-HY-Spam-Status: HIGH ; 123 X-HY-Spam-Level: ************+++ X-Status: Status: O This is a multi-part message in MIME format. ------=_NextPart_000_0000_BC2B0905.C0F4A4FC Content-Type: multipart/alternative; boundary="----=_NextPart_001_0001_640FB053.B5CB7D3F" ------=_NextPart_001_0001_640FB053.B5CB7D3F Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit CIALIS or Super Viagra * the effect lasts 36 hours! * you are ready to start within just 10 minutes! * you can mix it with alcohol! For more info and order: http://drmeds.info/sv/index.php?pid=eph6929 http://justrecommendation.info/sv/index.php?pid=eph6929 http://staminadrugs.com/sv/index.php?pid=eph6929 http://hecanhelp.net/sv/index.php?pid=eph6929 http://24phd.biz/sv/index.php?pid=eph6929 http://mfav.biz/sv/index.php?pid=eph6929 http://drproof.net/sv/index.php?pid=eph6929 http://phdmeds.net/sv/index.php?pid=eph6929 Check also "Maxaman", "Fat Blast", "Human Growth Hormone", . . . ------=_NextPart_001_0001_640FB053.B5CB7D3F Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <title>...</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> </head> <body> <table width="500" border="1" align="center" cellpadding="5" cellspacing="0" bordercolor="#000000"> <tr> <td><div align="center"><font face="Arial, Helvetica, sans-serif"><b><font size="+2">CIALIS <font size="2">(Super Viagra)</font></font></b></font></div></td> </tr> <tr> <td><ul> <li> <div align="left"><font face="Arial, Helvetica, sans-serif"><b>the effect lasts 36 hours !</b></font></div> </li> <li> <div align="left"><font face="Arial, Helvetica, sans-serif"><b>you are ready to start within just 10 minutes !</b></font></div> </li> <li> <div align="left"><font face="Arial, Helvetica, sans-serif"><b>you can mix it with alcohol !</b></font></div> </li> </ul></td> </tr> <tr> <td bgcolor="#CCCC33"><div align="center"><font color="#FFFFFF" face="Arial, Helvetica, sans-serif"><b>For more info and order click here <a href="http://phdmeds.net/sv/index.php?pid=eph6929"><font color="#FFFFFF" face="Arial, Helvetica, sans-serif"><b>>>></b></font></a></b></font></div></td> </tr> <tr> <td bgcolor="#FF9900"><div align="center"><b><font size="-1" face="Arial, Helvetica, sans-serif">Check also "Maxaman", "Fat Blast", "Human Growth Hormone", . . .</font></b></div></td> </tr> <tr> <td bgcolor="#FF9900"> <center> <a href="http://drmeds.info/sv/index.php?pid=eph6929"><font color="#FFFFFF" size="1" face="Arial, Helvetica, sans-serif"><font size="2"><b>mirror #1</b></font></font></a><b><font size="2"><font face="Arial, Helvetica, sans-serif"> <font color="#FFFFFF">|</font> <a href="http://justrecommendation.info/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #2</font></a> <font color="#FFFFFF">|</font> <a href="http://staminadrugs.com/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #3</font></a> <font color="#FFFFFF">|</font> <a href="http://hecanhelp.net/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #4</font></a> <font color="#FFFFFF">|</font> <a href="http://24phd.biz/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #5</font></a> <font color="#FFFFFF">|</font> <a href="http://mfav.biz/sv/index.php?pid=eph6929"><font color="#FFFFFF">mirror #6</font></a> <font color="#FFFFFF">|</font> <a href="http://drproof.net/sv/index.php?pid=eph6929"><font color="#FFF! FFF">mirror #7</font></a></font></font><font size="1" face="Arial, Helvetica, sans-serif"></font></b> </center></td> </tr> </table> </body> </html> ------=_NextPart_001_0001_640FB053.B5CB7D3F-- ------=_NextPart_000_0000_BC2B0905.C0F4A4FC-- -----end of forwarded message----- ![]() Link to posting |
||||||
![]() The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies. |
![]() |
|