Spamvert:
www.angrohear.com IP 61.31.214.81
(SBL34806) (at tfn.net.tw)
Received at an address harvested from this abuse group.
Canadian Pharm Spamhaus => PharmacyExpress.com
See More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse
See Also the same spammer most recent:
relatisandi.com, anodefen.com, ebantene.com, specioser.com,
pharmacyexpressgroup.com, chemistshop.com, freighteo.manyuman.com,
variousrevitalization.com, toplevelcombination.com,
mixesandtopvalue.com, rightfromtoddlingweb.com, offamilyniceweb.com,
Etc .....
More info below:
====================
X-SID-PRA: Kristeen Tenny <kristee...@ignesti.it>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ47/42YGDBWzbQLep8mplA5VK5mM+8Ihh7o=
Received: from bay0-pamc1-f8.bay0.hotmail.com ([65.54.247.16]) by
bay0-imc2-s32.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Thu, 8 Dec 2005 01:43:04 -0800
Received: from tomts42-srv.bellnexxia.net ([209.226.175.99]) by
bay0-pamc1-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Thu, 8 Dec 2005 01:43:00 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
([207.228....])
by toip5.bellnexxia.net with ESMTP; 08 Dec 2005 04:54:53 -0500
Received: from ignesti.it (host50-238.pool8291.interbusiness.it
[82.91.238.50])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jB89gvD06081
for <xx..xx@xx..xx.com>; Thu, 8 Dec 2005 04:42:57 -0500 (EST)
From: "Kristeen Tenny" <kristee...@ignesti.it>
To: "Amynta Orrell" <xx..xx@xx..xx.com>
Message-ID: <000001c5fbdb$c529aea0$c2e3a8c0@clerestory>
Subject: Re: umbilical
Date: Thu, 8 Dec 2005 04:42:57 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C5FBB1.DC55F090"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: kristee...@ignesti.it
X-OriginalArrivalTime: 08 Dec 2005 09:43:00.0159 (UTC)
FILETIME=[C6CBECF0:01C5FBDB]
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C5FBB1.DC55F090
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0002_01C5FBB1.DC55F090"
------=_NextPart_001_0002_01C5FBB1.DC55F090
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
=20
reason he had called him. The Old Man hurriedly replied, That,
lifting up the load, you may place it again upon my shoulders.=20
The Fir-Tree and the Bramble=20
A FIR-TREE said boastingly to the Bramble, You are useful for
nothing at all; while I am everywhere used for roofs and houses.
The Bramble answered: You poor creature, if you would only call
to mind the axes and saws which are about to hew you down, you
would have reason to wish that you had grown up a Bramble, not a
Fir-Tree.=20
Better poverty without care, than riches with.=20
The Mouse, the Frog, and the Hawk=20
A MOUSE who always lived on the land, by an unlucky chance formed
an intimate acquaintance with a Frog, who lived for the most part
------=_NextPart_001_0002_01C5FBB1.DC55F090
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV> </DIV>
<DIV><A =
href=3D"http://www.angrohear.com">http://www.angrohear.com</A></DIV>
<DIV><IMG src=3D"cid:000101c5fbdb$c529aea0$c2e3a8c0@clerestory"></DIV>
<DIV> </DIV>
<DIV>reason he had called him. The Old Man hurriedly replied,
That,<BR>
lifting up the load, you may place it again upon my shoulders. <BR>
The Fir-Tree and the Bramble <BR>
A FIR-TREE said boastingly to the Bramble, You are useful for<BR>
nothing at all; while I am everywhere used for roofs and houses.<BR>
The Bramble answered: You poor creature, if you would only call<BR>
to mind the axes and saws which are about to hew you down, you<BR>
would have reason to wish that you had grown up a Bramble, not a<BR>
Fir-Tree. <BR>
Better poverty without care, than riches with. <BR>
The Mouse, the Frog, and the Hawk <BR>
A MOUSE who always lived on the land, by an unlucky chance formed<BR>
an intimate acquaintance with a Frog, who lived for the most =
part</DIV></BODY></HTML>
------=_NextPart_001_0002_01C5FBB1.DC55F090--
------=_NextPart_000_0001_01C5FBB1.DC55F090
Content-Type: image/gif;
name="denature82.gif"
Content-Transfer-Encoding: base64
Content-ID: <000101c5fbdb$c529aea0$c2e3a8c0@clerestory>
*** REMOVED Attachment: denature82.gif (< 0.01 MB - 2k) ***
------=_NextPart_000_0001_01C5FBB1.DC55F090--
-- END OF SPAM --
See:
IP 82.91.238.50 host50-238.pool8291.interbusiness.it
http://www.moensted.dk/spam/?addr=82.91.238.50
http://cbl.abuseat.org/lookup.cgi?ip=82.91.238.50
http://www.spamhaus.org/query/bl?ip=82.91.238.50
More 82.91.238.50 sightings:
http://groups.google.com/groups?q=82.91.238.50+group%3A*abuse
inetnum: 82.88.0.0 - 82.91.255.255
org: ORG-TIWS1-RIPE
netname: IT-TIWS-20030506
descr: Telecom Italia Wireline Services PROVIDER
route: 82.91.0.0/16
descr: INTERBUSINESS
origin: AS3269
notify: net...@cgi.interbusiness.it
mnt-by: TIWS-MNT
mnt-routes: INTERB-MNT
changed: net...@telecomitalia.it
30 SBL/ROKSO listings for IPs under the responsibility of
interbusiness.it
http://www.spamhaus.org/sbl/listings.lasso?isp=interbusiness.it
See:
www.angrohear.com IP 61.31.214.81
ns0.anodefen.com A IN 160181 201.49.143.64
ns0.anodefen.com A IN 160181 61.31.214.81
ns0.ebantene.com A IN 160182 221.7.209.83
www.angrohear.com has no MX records -> angrohear.com has no MX records
http://www.moensted.dk/spam/?addr=61.31.214.81
inetnum: 61.31.0.0 - 61.31.255.255
netname: TFN-NET
descr: Taiwan Fixed Network CO.,LTD.
route: 61.31.0.0/16
descr: Proxy Announcement
origin: AS17444
remarks: Addresses from AS9924
remarks: Transit via AS17444
notify: radb_...@newworldtel.com
mnt-by: MAINT-AS17444
changed: radb_...@newworldtel.com
route: 61.31.0.0/16
descr: Taiwna Fixed Network
origin: AS9924
notify: eri...@profond.com.tw
mnt-by: MAINT-AS9924
changed: ting_...@howin.com.tw
27 SBL/ROKSO listings for IPs under the responsibility of
newworldtel.com
http://www.spamhaus.org/sbl/listings.lasso?isp=newworldtel.com
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL34806
61.31.214.0/24 is listed on the Spamhaus Block List (SBL)
24-Nov-2005 20:10 GMT | SR15
midvalue.com etc Canadian Pharm Spamhaus - dirty block
33 SBL/ROKSO listings for IPs under the responsibility of tfn.net.tw
http://www.spamhaus.org/sbl/listings.lasso?isp=tfn.net.tw
Let see whois:
Domain Name : angrohear.com
ICANN Registrar: YESNIC CO. LTD.
Registrant:
Name : John S Jackson
Email : bothe...@yahoo.com
Address : 4802 S Washington Place
Zipcode : 99337
Nation : US
Tel : 509-582-7753
Fax :
Administrative Contact:
Name : John S Jackson
Email : bothe...@yahoo.com
Address : 4802 S Washington Place
Zipcode : 99337
Nation : US
Tel : 509-582-7753
Fax :
Technical Contact:
Name : John S Jackson
Email : bothe...@yahoo.com
Address : 4802 S Washington Place
Zipcode : 99337
Nation : US
Tel : 509-582-7753
Fax :
Name Servers:
ns0.ebantene.com
ns0.anodefen.com
Dates & Status:
Created Date 2005-12-06 17:50:08 EST
Updated Date 2005-12-06 17:50:08 EST
Valid Date 2006-12-06 17:50:08 EST
Status ACTIVE
More 61.31.214.81 sightings:
http://groups.google.com/groups?q=61.31.214.81+group%3A*abuse
See also site "certificates":
Note:
All text and images located on the same website only!
©2005 PharmacyExpress.com
View License file
http://www.angrohear.com/images/license.jpg
STATE OF ONTARIO
Department of Health Services
Food and Drug Brunch
DRUG RESELING LICENCE
Pharmacy Express Corp
1460 Don Mills Rd. at York Mills, 2nd floor
Don Mills, ON M3B 2X9
LICENCE NO: D2849912
ISSU DATE: 07/10/2002
EXPIRATION DATE: 07/10/2012
Cipa Certification
http://www.angrohear.com/_cipa.html
CIPA Membership
Valid Member: Certified Member
Organization: Pharmacy
Licence #: 91959
Location: Toronto, Canada
Current Status: Active
The only domain authorized for this The Canadian International Pharmacy
Association CIPA Seal is: pharmacy
The Canadian International Pharmacy Association (CIPA) is an
organization which represents the Canadian International Pharmacy
Industry. Our presence is to represent and support the ethical and
professional practice of International Pharmacy, and to ensure the
highest standards of practice are carried out by its members.
NOTE - WARNING
Search of CIPA website did NOT verify use of CIPA Seal
http://www.ciparx.ca/
Sorry, no results found based on any criteria or method regarding any
corporate name, domain name, etc ...
Verisign Secure Site
http://www.angrohear.com/_verisign.html
Secure Site Seal
Pharmacy is a Soltrus Secure Site
Security remains the primary concern of online consumers. The VeriSign
Secure Site Program, brought to you by Soltrus, allows you to learn
more about Web sites you visit before you submit any confidential
information. Please verify that the information below is consistent
with the site you are visiting.
Secure Site Seal
Pharmacy is a Soltrus Secure Site
Security remains the primary concern of online consumers. The VeriSign
Secure Site Program, brought to you by Soltrus, allows you to learn
more about Web sites you visit before you submit any confidential
information. Please verify that the information below is consistent
with the site you are visiting.
Name: Pharmacy
Status: Valid
Validity Period: 13-OCT-04 - 13-OCT-05
Server ID Information:
Country = CA
State = Ontario
Locality = Toronto
Organization = Technical Consultants and Experts Group Inc
Organizational Unit = TCE Group
Organizational Unit = Terms of use at Verisign (c) 04
Organizational Unit = Authenticated by Verisign
Organizational Unit = Member, VeriSign Trust Network
Common Name = Pharmacy
If the information is correct, you may submit sensitive data (e.g.,
credit card numbers) to this site with the assurance that:
* This site has a VeriSign Secure Server ID, authenticated by
Soltrus.
* Soltrus has verified the organizational name and that TECHNICAL
CONSULTANTS AND EXPERTS GROUP INC has the proof of right to use it.
* This site legitimately runs under the auspices of TECHNICAL
CONSULTANTS AND EXPERTS GROUP INC.
* All information sent to this site, if in an SSL session, is
encrypted and protected against disclosure to third parties.
To ensure that this is a legitimate Soltrus Secure Site, make sure
that:
1. The original URL of the site you are visiting comes from Pharmacy
2. The status of the Server ID is Valid.
Verified by VISA
http://www.angrohear.com/_visa.html
Same card, added safety online.
Verified by Visa is a new service that lets you shop online with added
confidence.
Through a simple checkout process, Verified by Visa confirms your
identity when you make purchases at participating online stores. It's
convenient, and it works with your existing Visa card.
Plus, Verified by Visa is a snap to use. You register your card just
once, and create your own password. Then, when you make purchases at
participating online stores, a Verified by Visa window will appear.
Simply enter your password and click submit. Your identity is verified
and the purchase is secure.
To activate Verified by Visa in your Visa card, or to learn more,
contact the financial institution that issued your Visa card or visit
visa.com/verified.
Top rated by PharmacyChecker
http://www.angrohear.com/_pchecker.html
Company Name: Pharmacy
Country: Canada
Type of Site: Pharmacy Intermediary
Year Founded: 2001
CEO/President: Jack Poppins
My Canadian Pharmacy Corp.
1592 Wilson Avenue,
Toronto, ON M3L 1A6
Listed at Better Business Bureau
http://www.angrohear.com/_bbb.html
BBBOnLine Reliability
Participation Confirmed For Pharmacy
Participant through 12/30/2005
Pharmacy meets all BBBOnLine Reliability participation and Better
Business Bureau membership standards and is authorized to display the
BBBOnLine Reliability seal.
BBB Background Information on Pharmacy
The BBBOnLine Reliability Program Standards
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/b82f78ac7051cce9
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/15341e00bd1cb7a2
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: