[email] [meds] (manyuman.com) fulminate Phaaramacy
TomezNet
IP 86.200.183.200 AMontpellier-157-1-32-200.w86-200.abo.wanadoo.fr
(at ns.wanadoo.fr / francetelecom.com)
Spamvert:
www.freighteo.manyuman.com IP 221.7.209.83
(SBL35139 / SBL34606) (at gxcc.com.cn / CNCGROUP-GX)
Redirected to:
http://www.freighteo.manyuman.com/732ed624e1fd95934aeb5f2b502e5dad/aspx/index.asp
Spammer:
Pharmacy Express a.k.a PharmaExpress
Palm Grove House, P.O.Box 438, Road Town, Tortola, British Virgin
Islands
Second address:
CEO/President: Jack Poppins
My Canadian Pharmacy Corp.
1592 Wilson Avenue,
Toronto, ON M3L 1A6
See also:
PharmacyExpress.com
pharmacyexpressgroup.com
chemistshop.com
Received at an address harvested from our autoresponder.
More info below:
====================
X-Message-Info: 6sSXyD95QpVFJ7svcmBg6X+Rsd4ktj7V0a8tsZseEmU=
Received: from tomts17-srv.bellnexxia.net ([209.226.175.71]) by
pamc1-f9.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Wed, 30 Nov 2005 09:05:00 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
(207.228.238.14)
by toip4.bellnexxia.net with ESMTP; 30 Nov 2005 12:04:54 -0500
Received: from berdyansk.net
(AMontpellier-157-1-32-200.w86-200.abo.wanadoo.fr [86.200.183.200])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jAUH4qP08524
for <xx..xx@xx..xx.com>; Wed, 30 Nov 2005 12:04:53 -0500 (EST)
Received: from [192.168.130.217] (helo=isotope)
by berdyansk.net
id KnnAJL-nANOVB-Bc
for xx..xx@xx..xx.com
Message-ID: <000001c5f5d0$1e836f20$d982a8c0@isotope>
Reply-To: "Wynfor Siegfried" <wyn...@berdyansk.net>
From: "Wynfor Siegfried" <wyn...@berdyansk.net>
To: "Ulisse Knaus" <xx..xx@xx..xx.com>
Subject: Re: fulminate Phaaramacy
Date: Wed, 30 Nov 2005 12:04:26 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C5F5A6.35AD6720"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: wyn...@berdyansk.net
X-OriginalArrivalTime: 30 Nov 2005 17:05:01.0472 (UTC)
FILETIME=[336D2200:01C5F5D0]
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C5F5A6.35AD6720
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0002_01C5F5A6.35AD6720"
------=_NextPart_001_0002_01C5F5A6.35AD6720
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hello,=20
We acknowledge you for being our customer. Thus, we put wise you of
information and renovates between whiles.
=20
Our notes show you may possibly need an additional explanation.
=20
We beg your pardon and would like to propose you again a set of the
most
popular medicines online at reduced prices, fast delivery and toll-free
customer support.=20
If you wish to order drugs you are in need or to run over the edition,
please go to:
=20
http://www.freighteo.manyuman.com
<http://www.freighteo.manyuman.com>=20
=20
=20
Yours Respectfully, Wynfor Siegfried Support Centre
------=_NextPart_001_0002_01C5F5A6.35AD6720
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>Hello, <BR>
We acknowledge you for being our customer. Thus, we put wise you of =
information and renovates between whiles.</FONT></DIV>
<DIV><FONT face=3DArial> </FONT></DIV>
<DIV><FONT face=3DArial>Our notes show you may possibly need an =
additional explanation.</FONT></DIV>
<DIV><FONT face=3DArial> </FONT></DIV>
<DIV><FONT face=3DArial>We beg your pardon and would like to propose
you =
again a set of the most=20
popular medicines online at reduced prices, fast delivery and
toll-free=20
customer support. <BR> If you wish to order drugs you are in need or to
=
run=20
over the edition, please go to:</FONT></DIV>
<DIV><FONT face=3DArial> </FONT></DIV>
<DIV><FONT face=3DArial><A =
href=3D"http://www.freighteo.manyuman.com"><FONT =
face=3DArial>http://www.freighteo.manyuman.com</FONT></A></FONT></DIV>
<DIV><FONT face=3DArial> </FONT></DIV>
<DIV><IMG src=3D"cid:000101c5f5d0$1e6bb006$_CDOSYS2.0"></DIV>
<DIV><FONT face=3DArial> </FONT></DIV>
<DIV><FONT face=3DArial>Yours Respectfully, Wynfor Siegfried Support =
Centre</FONT></DIV></BODY></HTML>
------=_NextPart_001_0002_01C5F5A6.35AD6720--
------=_NextPart_000_0001_01C5F5A6.35AD6720
Content-Type: image/gif
Content-Transfer-Encoding: base64
Content-ID: <000101c5f5d0$1e6bb006$_CDOSYS2.0>
Content-Disposition: inline
*** REMOVED Attachment: image5.gif (< 0.01 MB) ***
------=_NextPart_000_0001_01C5F5A6.35AD6720--
----------
From: "Wynfor Siegfried" <wyn...@berdyansk.net>
Reply-To: "Wynfor Siegfried" <wyn...@berdyansk.net>
Date: Wed, 30 Nov 2005 12:04:26 -0500
To: "Ulisse Knaus" <xx..xx@xx..xx.com>
Subject: Re: fulminate Phaaramacy
Hello,
We acknowledge you for being our customer. Thus, we put wise you of
information and renovates between whiles.
Our notes show you may possibly need an additional explanation.
We beg your pardon and would like to propose you again a set of the
most popular medicines online at reduced prices, fast delivery and
toll-free customer support.
If you wish to order drugs you are in need or to run over the edition,
please go to:
http://www.freighteo.manyuman.com
Yours Respectfully, Wynfor Siegfried Support Centre
-- END OF SPAM --
Identical onlinepharmacy spam with connection to:
Discount Pharmacy a.k.a Instant Pharmacy
instant-pharmacy.net
Organization = Technical Consultants and Experts Group Inc
Organizational Unit = TCE Group
However layout is different.
See site "certificates":
onlinepharmacy.variousrevitalization.com IP 222.168.100.163
onlinepharmacy.toplevelcombination.com IP 211.93.72.96
onlinepharmacy.mixesandtopvalue.com IP 211.93.72.97
onlinepharmacy.rightfromtoddlingweb.com IP 222.168.100.163
onlinepharmacy.offamilyniceweb.com IP 211.93.72.96
See:
IP 86.200.183.200 AMontpellier-157-1-32-200.w86-200.abo.wanadoo.fr
http://www.moensted.dk/spam/?addr=86.200.183.200
http://www.spamcop.net/bl.shtml?86.200.183.200
inetnum: 86.200.183.0 - 86.200.183.255
netname: IP2000-ADSL-BAS
descr: BSMON157 Montpellier Bloc 2
country: FR
role: Wanadoo France Technical Role
address: WANADOO FRANCE
8 SBL listings for IPs under the responsibility of wanadoo.fr
http://www.spamhaus.org/sbl/listings.lasso?isp=wanadoo.fr
2 SBL/ROKSO listings for IPs under the responsibility of
francetelecom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=francetelecom.com
See:
www.freighteo.manyuman.com IP 221.7.209.83
ns0.howodeal.com A IN 139466 221.7.209.83
ns0.helpaeron.com A IN 172800 201.49.143.64
www.freighteo.manyuman.com has no MX records -> freighteo.manyuman.com
has no MX records -> manyuman.com has no MX records
Contact Info from Web:
Palm Grove House, P.O.Box 438, Road Town, Tortola, British Virgin
Islands
http://www.moensted.dk/spam/?addr=221.7.209.83
Spam source - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=221.7.209.83
http://www.abuse.net/sbl.phtml?IP=221.7.209.83
inetnum: 221.7.209.0 - 221.7.209.255
netname: CNC-GL-INTER-3
country: CN
descr: CNC Guilin INternet network
route: 221.7.128.0/17
descr: CNC Group GuangXi Network
origin: AS4837
http://www.spamhaus.org/query/bl?ip=221.7.209.83
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL34606
221.7.209.83/32 is listed on the Spamhaus Block List (SBL)
01-Dec-2005 01:00 GMT | SR19
finduamon.com etc.
Drug spammers.
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL35139
221.7.209.0/24 is listed on the Spamhaus Block List (SBL)
01-Dec-2005 00:58 GMT | SR15
dirty block
This block is controlled by spammers. This is the third time this
/24 has been listed.
4 SBL/ROKSO listings for IPs under the responsibility of CNCGROUP-GX
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-GX
Let see whois:
Domain Name: MANYUMAN.COM
Domain Status: ACTIVE
Registrar: Wooho T&C Co., Ltd. d/b/a RGNames.com
Referral URL: http://www.RGNames.com
Domain Registration Date....: 2005-11-28 GMT.
Domain Expiration Date......: 2006-11-28 GMT.
Domain Last Updated Date....: 2005-11-29 15:52:00 GMT.
Registrant:
anthony farina
265 Ferndale Ct,
copiague, New York 11726
US
Administrative, Technical, Billing Contact:
anthony farina tens...@yahoo.com
265 Ferndale Ct,
copiague, New York 11726
US
(PHONE) +516-779-44-17 (FAX) +--
Domain Name Servers in listed order:
NS0.HOWODEAL.COM 211.239.152.141
NS0.HELPAERON.COM 211.239.152.171
See site "certificates":
Note:
All text and images located on the same website only!
Verisign Secure Site / Pharmacy is a Soltrus Secure Site
http://www.freighteo.manyuman.com/_verisign.html
Status: Valid
Validity Period: 13-OCT-04 - 13-OCT-05
Country = CA
State = Ontario
Locality = Toronto
Organization = Technical Consultants and Experts Group Inc
Organizational Unit = TCE Group
Organizational Unit = Terms of use at Verisign (c) 04
Organizational Unit = Authenticated by Verisign
Organizational Unit = Member, VeriSign Trust Network
Common Name = Pharmacy
Verified by VISA
http://www.freighteo.manyuman.com/_visa.html
Verified by Visa is a new service that lets you shop online with added
confidence.
Through a simple checkout process, Verified by Visa confirms your
identity when you make purchases at participating online stores. It's
convenient, and it works with your existing Visa card.
Plus, Verified by Visa is a snap to use. You register your card just
once, and create your own password. Then, when you make purchases at
participating online stores, a Verified by Visa window will appear.
Simply enter your password and click submit. Your identity is verified
and the purchase is secure.
To activate Verified by Visa in your Visa card, or to learn more,
contact the financial institution that issued your Visa card or visit
visa.com/verified.
Listed at Better Business Bureau
http://www.freighteo.manyuman.com/_bbb.html
BBBOnLine Reliability
Participation Confirmed For Pharmacy
Participant through 12/30/2005
Pharmacy meets all BBBOnLine Reliability participation and Better
Business Bureau membership standards and is authorized to display the
BBBOnLine Reliability seal
Cipa Certification (Canadian International Pharmacy Association)
http://www.freighteo.manyuman.com/_cipa.html
CIPA Membership
Valid Member: Certified Member
Organization: Pharmacy
Licence #: 91959
Location: Toronto, Canada
Current Status: Active
The only domain authorized for this CIPA Seal is: pharmacy
Top rated by PharmacyChecker
http://www.freighteo.manyuman.com/_pchecker.html
Company Name: Pharmacy
Country: Canada
Type of Site: Pharmacy Intermediary
Year Founded: 2001
Range of Prescription Drugs: Full Range
Other Pharmacy Products: OTC, V&S, Dx, Pet
Contact Information
Hours of Operation: 9:00 AM - 6:00 PM EST
CEO/President: Jack Poppins
My Canadian Pharmacy Corp.
1592 Wilson Avenue,
Toronto, ON M3L 1A6
More 221.7.209.83 sightings:
http://groups.google.com/groups?q=221.7.209.83+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8623e8eb871bc9d1
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: