Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [meds - PharmacyExpress.com] (needonsan.com) Re: catacomb unrig

0 views

Skip to first unread message

TomezNet

unread,

Dec 17, 2005, 12:01:16 PM12/17/05

Received From:
IP 60.31.128.239
(at CNCGROUP-NM)

Spamvert:
www.needonsan.com IP 221.7.209.69
(at cncgroup-gx)

ns0.orredecte.com IP 201.49.143.64
(SBL35689, SBL35029, SBL34829)

Canadian Pharm Spamhaus => PharmacyExpress.com
Pharmacy Express a.k.a PharmaExpress
Technical Consultants and Experts Group Inc aka TCE Group
Forged false site "certificates"

See More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse

Received at an address harvested from domain registration.

More info below:
====================
X-Message-Status: n:0
X-SID-PRA: Alexandre Haughey <alexan...@ramsey.k12.nj.us>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ46MLOHbSVNmv87FeZ/77D4DyoMIfNH4zUM=
Received: from tomts17-srv.bellnexxia.net ([209.226.175.71]) by
bay0-pamc1-f4.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 17 Dec 2005 05:17:25 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
([207.228.238.14])
by toip7.bellnexxia.net with ESMTP; 17 Dec 2005 08:25:15 -0500
Received: from ramsey.k12.nj.us ([60.31.128.239])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jBHDHM324026
for <xx..xx@xx..xx.com>; Sat, 17 Dec 2005 08:17:22 -0500 (EST)
Message-ID: <000001c6030c$28045020$49c1a8c0@nth>
Reply-To: "Alexandre Haughey" <alexan...@ramsey.k12.nj.us>
From: "Alexandre Haughey" <alexan...@ramsey.k12.nj.us>
To: "Carlton Mcghie" <xx..xx@xx..xx.com>
Subject: Re: catacomb unrig
Date: Sat, 17 Dec 2005 15:16:57 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C6031C.EB8F6A10"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: alexan...@ramsey.k12.nj.us
X-OriginalArrivalTime: 17 Dec 2005 13:17:25.0315 (UTC)
FILETIME=[38BEB130:01C6030C]

This is a multi-part message in MIME format.

------=_NextPart_000_0001_01C6031C.EB8F6A10
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

=20
http://www.needonsan.com
=20
Xa
So
Am
Me
ClA
VlA
VA
Pro
Lev
nax
ma
bien
ridia
LlS
GRA
LlUM
pecia
itra
$1
$7
$6
$9
$9
$6
$8
$6
$9
23.45
5.95
8.00
9.95
9.95
9.95
5.45
4.95
9.95
=20
=20
=20
The crash was enormous. Shattered glass and crushed metal accompanied
the rising mists of steam from burst cylinders, and the growing fires
of
viscous fluids underneath that would soon reach a gas tank. The guard
was moaning, semiconscious, his face bleeding; Panov pulled him out of
the wreck and into the grass as far as he could until exhaustion
overtook him, just before the car exploded. In the moist overgrowth,
his
breath somewhat restored but his fear still at the forefront, Mo
released his loosely bound hands and picked the fragments of glass out
of his guards face. He then checked for broken bones-the right arm and
the left leg were candidates-and with stolen stationery from a hotel he
had never heard of from the capos pocket, he used the guards pen to
write out his diagnosis. Among the items he removed was a gun-what
kind,
he had no idea-but it was heavy

------=_NextPart_000_0001_01C6031C.EB8F6A10
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV> </DIV>
<DIV><A =
href=3D"http://www.needonsan.com">http://www.needonsan.com</A></DIV>
<DIV> </DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>Xa<BR>So<BR>Am<BR>Me<BR>ClA<BR>VlA<BR>VA<BR>Pro<BR>Lev</FONT=
></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>nax<BR>ma<BR>bien<BR>ridia<BR>LlS<BR>GRA<BR>LlUM<BR>pecia<BR=
>itra</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial> $1<BR> $7<BR> $6<BR> $9<BR> $9<BR>=
 $6<BR> $8<BR> $6<BR> $9</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>23.45<BR>5.95<BR>8.00<BR>9.95<BR>9.95<BR>9.95<BR>5.45<BR>4.9=
5<BR>9.95</FONT></DIV>
<DIV style=3D"CLEAR: both"> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> The crash was enormous. Shattered glass and crushed metal =
accompanied
the rising mists of steam from burst cylinders, and the growing fires
of
viscous fluids underneath that would soon reach a gas tank. The guard
was moaning, semiconscious, his face bleeding; Panov pulled him out of
the wreck and into the grass as far as he could until exhaustion
overtook him, just before the car exploded.
In the moist overgrowth, his breath somewhat restored but his fear
still at the forefront, Mo released his loosely bound hands and picked
the fragments of glass out of his guards face. He then checked for
broken bones-the right arm and the left leg were candidates-and with
stolen stationery from a hotel he had never heard of from the capos
pocket, he used the guards pen to write out his diagnosis. Among the
items he removed was a gun-what kind, he had no idea-but it was =
heavy</DIV></BODY></HTML>
------=_NextPart_000_0001_01C6031C.EB8F6A10--

-- END OF SPAM --

More Technical Consultants and Experts Group sightings:
http://groups.google.com/groups?q=%22Technical+Consultants+and+Experts+Group%22+group%3A*abuse

More PharmacyExpress.com sightings:
http://groups.google.com/groups?q=PharmacyExpress.com+group%3A*abuse

See:
IP 60.31.128.239

http://www.moensted.dk/spam/?addr=60.31.128.239
http://cbl.abuseat.org/lookup.cgi?ip=60.31.128.239

inetnum: 60.31.0.0 - 60.31.255.255
netname: CNCGROUP-NM

route: 60.31.0.0/16
descr: CNC Group Neimeng Network
origin: AS4837

See:
www.needonsan.com IP 221.7.209.69
ns0.morreser.com A IN 80024 58.20.160.16
ns0.orredecte.com A IN 135433 201.49.143.64

www.needonsan.com has no MX records -> needonsan.com has no MX records

http://www.moensted.dk/spam/?addr=221.7.209.69
Spam source - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=221.7.209.69
http://www.abuse.net/sbl.phtml?IP=221.7.209.69

More 221.7.209.69 sightings:
http://groups.google.com/groups?q=221.7.209.69+group%3A*abuse

http://www.spamhaus.org/SBL/sbl.lasso?query=SBL35655
221.7.209.69/32 is listed on the Spamhaus Block List (SBL)

15-Dec-2005 04:05 GMT | SR03

iseasieto.com ; etc.

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL35677
221.7.209.0/24 is listed on the Spamhaus Block List (SBL)

14-Dec-2005 06:01 GMT | SR21

China Netcom Group Dirty Block: CNC Guilin INternet network

3 SBL listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/SBL/listings.lasso?isp=cncgroup-gx

Let see whois:
Registrar : BookMyName

Domain Name : needonsan.com (NEEDON2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com

Registrant / Admin Contact :
PERSON
Dennis MARTIN (MARTIN329-BMN-PE)

2380 Laurel Valley Drive

44313 Akron
UNITED STATES OH
phone : 330-928-8008
fax :
e-mail : atetabish[]yahoo.com

Billing Contact :
PERSON
Dennis MARTIN (MARTIN329-BMN-PE)

2380 Laurel Valley Drive

44313 Akron
UNITED STATES OH
phone : 330-928-8008
fax :
e-mail : atet...@yahoo.com

Technical Contact :
PERSON
Dennis MARTIN (MARTIN329-BMN-PE)

2380 Laurel Valley Drive

44313 Akron
UNITED STATES OH
phone : 330-928-8008
fax :
e-mail : atet...@yahoo.com

Domain servers :
ns0.morreser.com (NMC102-BMN-HST)
ns0.orredecte.com (NOC40-BMN-HST)

Created on 12/14/2005 21:37:17
Updated on 12/16/2005 14:57:18
Expires on 12/14/2006 16:37:17

More needonsan.com sightings:
http://groups.google.com/groups?q=needonsan.com+group%3A*abuse

See:
ns0.orredecte.com -->> SBL35689, SBL35029, SBL34829

More orredecte.com sightings:
http://groups.google.com/groups?q=orredecte.com+group%3A*abuse

See also forged false site "certificates":
Verified by VISA
Better Business Bureau (BBB)
The Canadian International Pharmacy Association (CIPA)

Note:
All text and images located on the same website only!

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages