Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [meds -PharmacyExpress.com] (comoconta.com) Re: heathendom teeter

0 views
Skip to first unread message

TomezNet

unread,
Dec 21, 2005, 2:00:30 PM12/21/05
to
Received From:
IP 218.9.191.162
(at CNCGROUP-HL)

Spamvert:
palletbeo.comoconta.com IP 221.7.209.69
(SBL35655 / SBL35677) (at cncgroup-gx)

Canadian Pharm Spamhaus => PharmacyExpress.com
Pharmacy Express a.k.a PharmaExpress
Technical Consultants and Experts Group Inc aka TCE Group
Forged false site "certificates"
Logos and support by Visa and MasterCard
Visa, CIPA (Licence #91959), BBB (Participant through 12/30/2005),
Verisign

See Also the same spammer most recent:
relatisandi.com, anodefen.com, ebantene.com, specioser.com,
turinwads.com, pharmacyexpressgroup.com, chemistshop.com,
freighteo.manyuman.com, variousrevitalization.com,
toplevelcombination.com, mixesandtopvalue.com,
rightfromtoddlingweb.com, offamilyniceweb.com, elofanxiet.com,
orredecte.com, morreser.com, inrealisti.com, needonsan.com,
estemegins.com, noculat.com, morsavem.com, chestain.com, Etc .....

Received at an address harvested from our autoresponder.

More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse&start=0&scoring=d&

More info below:
====================
X-SID-PRA: Ena Dole <ena...@noma.net>
X-SID-Result: TempError
X-Message-Info: 6sSXyD95QpXrknei0pwb49pIixoCtvUNlTbXdAGsfoA=
Received: from tomts19-srv.bellnexxia.net ([209.226.175.73]) by
bay0-pamc1-f10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Wed, 21 Dec 2005 02:10:10 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
([207.228.2...])
by toip4.bellnexxia.net with ESMTP; 21 Dec 2005 05:10:09 -0500
Received: from noma.net ([218.9.191.162])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jBLAA5c29040
for <xx..xx@xx..xx.com>; Wed, 21 Dec 2005 05:10:06 -0500 (EST)
Message-ID: <000001c60616$95a39250$136aa8c0@paradisical>
Reply-To: "Ena Dole" <ena...@noma.net>
From: "Ena Dole" <ena...@noma.net>
To: "Sophocles Rigdon" <xx..xx@xx..xx.com>
Subject: Re: heathendom teeter
Date: Wed, 21 Dec 2005 05:09:09 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C605EC.ACCD8A50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: ena...@noma.net
X-OriginalArrivalTime: 21 Dec 2005 10:10:10.0134 (UTC)
FILETIME=[B9B51F60:01C60616]

This is a multi-part message in MIME format.

------=_NextPart_000_0001_01C605EC.ACCD8A50
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

=20
http://palletbeo.comoconta.com
=20
A
P
V
X
S
V
L
C
M mb
ro
AL
an
om
IA
ev
IA
er ie
pe
IU
ax
a=20
GR
it
LI
id n
cia
M
=20
=20
A
ra
S
ia $68
$64
$85
$12
$75
$69
$99
$99
$99 .00
.95
.45
3.45
.95
.95
.95
.95
.95
=20
=20
It wasnt the Jackal-the Jackal, said Conklin, abruptly resuming a
conversational tone as the roar of the aircraft became a hum in the
distance. Of course it wasnt him-hes here. It was his goons following
orders. Not his goons, not his orders. What are you talking about? Well
go into it later. Lets get out of here. Wait. Krupkin arched his brows.
Well talk first-and first, welcome to Mother Russia. Second, it would
be
most appreciated if you would refrain from discussing certain aspects
of
my life-style while in the service of my government in the hostile,
war-mongering West with anyone you might meet. You know, Kruppie, one
of
these days theyll catch up with you.

------=_NextPart_000_0001_01C605EC.ACCD8A50
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>&nbsp;</DIV>
<DIV><A =
href=3D"http://palletbeo.comoconta.com">http://palletbeo.comoconta.com</A=
></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DCourier style=3D"FLOAT: =
left">A<BR>P<BR>V<BR>X<BR>S<BR>V<BR>L<BR>C<BR>M</FONT>
<FONT face=3DCourier style=3D"FLOAT: =
left">mb<BR>ro<BR>AL<BR>an<BR>om<BR>IA<BR>ev<BR>IA<BR>er</FONT>
<FONT face=3DCourier style=3D"FLOAT: =
left">ie<BR>pe<BR>IU<BR>ax<BR>a&nbsp;<BR>GR<BR>it<BR>LI<BR>id</FONT>
<FONT face=3DCourier style=3D"FLOAT: =
left">n<BR>cia<BR>M<BR>&nbsp;<BR>&nbsp;<BR>A<BR>ra<BR>S<BR>ia</FONT>
<FONT face=3DCourier style=3D"FLOAT: =
left">&nbsp;$68<BR>&nbsp;$64<BR>&nbsp;$85<BR>&nbsp;$12<BR>&nbsp;$75<BR>&n=
bsp;$69<BR>&nbsp;$99<BR>&nbsp;$99<BR>&nbsp;$99</FONT>
<FONT face=3DCourier style=3D"FLOAT: =
left">.00<BR>.95<BR>.45<BR>3.45<BR>.95<BR>.95<BR>.95<BR>.95<BR>.95</FONT>=
</DIV>
<DIV style=3D"CLEAR: both">&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<DIV> It wasnt the Jackal-the Jackal, said Conklin, abruptly resuming
=
a
conversational tone as the roar of the aircraft became a hum in the
distance.
Of course it wasnt him-hes here. It was his goons following orders.
Not his goons, not his orders.
What are you talking about?
Well go into it later. Lets get out of here.
Wait. Krupkin arched his brows. Well talk first-and first,
welcome to Mother Russia. Second, it would be most appreciated if you
would refrain from discussing certain aspects of my life-style while in
the service of my government in the hostile, war-mongering West with
anyone you might meet.
You know, Kruppie, one of these days theyll catch up with =
you.</DIV></BODY></HTML>
------=_NextPart_000_0001_01C605EC.ACCD8A50--


-- END OF SPAM --

See:
IP 218.9.191.162

http://www.moensted.dk/spam/?addr=218.9.191.162
http://cbl.abuseat.org/lookup.cgi?ip=218.9.191.162
http://www.spamhaus.org/query/bl?ip=218.9.191.162

inetnum: 218.7.0.0 - 218.10.255.255
netname: CNCGROUP-HL

route: 218.9.0.0/16
descr: China Telecom heilongjiang Province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@ns.chinanet.cn.net

1 SBL listings for IPs under the responsibility of CNCGROUP-HL
http://www.spamhaus.org/SBL/listings.lasso?isp=CNCGROUP-HL

See:
palletbeo.comoconta.com IP 221.7.209.69
ns0.ameseers.com [58.20.160.16]
ns0.canalsactasa.com [201.49.143.64]

palletbeo.comoconta.com has no MX records -> comoconta.com has no MX
records

http://www.moensted.dk/spam/?addr=221.7.209.69
Spam source - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=221.7.209.69
http://www.abuse.net/sbl.phtml?IP=221.7.209.69

More 221.7.209.69 sightings:
http://groups.google.com/groups?q=221.7.209.69+group%3A*abuse&start=0&scoring=d&

http://www.spamhaus.org/query/bl?ip=221.7.209.69
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL35655
221.7.209.69/32 is listed on the Spamhaus Block List (SBL)

15-Dec-2005 04:05 GMT | SR03

iseasieto.com ; etc.

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL35677
221.7.209.0/24 is listed on the Spamhaus Block List (SBL)

17-Dec-2005 19:13 GMT | SR21

China Netcom Group Dirty Block: CNC Guilin Internet network

3 SBL listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/SBL/listings.lasso?isp=cncgroup-gx

Let see whois:
ICANN Registrar: NAMEBAY

Domain Name : COMOCONTA.COM
Created On : 2005-12-17
Expiration Date : 2006-12-16
Status : ACTIVE
Registrant Name : Amisha Amin
Registrant Street1 : 10909 Valley Spring Drive
Registrant City : Charlotte
Registrant State/Province : NC
Registrant Postal Code : 28277
Registrant Country : US
Admin Handle : AA34500
Admin Name : Amisha Amin
Admin Street1 : 10909 Valley Spring Drive
Admin City : Charlotte
Admin State/Province : NC
Admin Postal Code : 28277
Admin Country : US
Admin Phone : +1.7045403657
Admin Email : ilearsle[]yahoo.com
Tech Handle : AA34500
Tech Name : Amisha Amin
Tech Street1 : 10909 Valley Spring Drive
Tech City : Charlotte
Tech State/Province : NC
Tech Postal Code : 28277
Tech Country : US
Tech Phone : +1.7045403657
Tech Email : ilea...@yahoo.com
Billing Handle : AA34500
Billing Name : Amisha Amin
Billing Street1 : 10909 Valley Spring Drive
Billing City : Charlotte
Billing State/Province : NC
Billing Postal Code : 28277
Billing Country : US
Billing Phone : +1.7045403657
Billing Email : ilea...@yahoo.com
Name Server : NS0.AMESEERS.COM
Name Server : NS0.CANALSACTASA.COM
Registrar Name : NAMEBAY
Registrar WebSite : http://www.namebay.com

More comoconta.com sightings:
http://groups.google.com/groups?q=comoconta.com+group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/835916778c955fed

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages