[email] [meds -PharmacyExpress.com] (chestain.com) Re: demonstration thermal
TomezNet
IP 212.32.96.198
(at mistral.co.uk / ftech.net)
Spamvert:
www.chestain.com IP 221.7.209.69
(SBL35655 / SBL35677) (at cncgroup-gx)
Canadian Pharm Spamhaus => PharmacyExpress.com
Pharmacy Express a.k.a PharmaExpress
Technical Consultants and Experts Group Inc aka TCE Group
Forged false site "certificates"
Logos and support by Visa and MasterCard
Visa, CIPA (Licence #91959), BBB (Participant through 12/30/2005),
Verisign
See Also the same spammer most recent:
relatisandi.com, anodefen.com, ebantene.com, specioser.com,
turinwads.com, pharmacyexpressgroup.com, chemistshop.com,
freighteo.manyuman.com, variousrevitalization.com,
toplevelcombination.com, mixesandtopvalue.com,
rightfromtoddlingweb.com, offamilyniceweb.com, elofanxiet.com,
orredecte.com, morreser.com, inrealisti.com, needonsan.com,
estemegins.com, noculat.com, morsavem.com, Etc .....
Received at an address harvested from domain registration.
More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Ibraheem Marshal <m...@lrmm.com>
X-SID-Result: TempError
X-Message-Info: 6sSXyD95QpW7uhWn3PSsnTXcymRnavb3mWBxVxK5vLU=
Received: from tomts19-srv.bellnexxia.net ([209.226.175.73]) by
bay0-pamc1-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Wed, 21 Dec 2005 06:21:41 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
([207.228.2...])
by toip4.bellnexxia.net with ESMTP; 21 Dec 2005 09:21:40 -0500
Received: from lrmm.com ([212.32.96.198])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jBLELXD06432
for <xx..xx@xx..xx.com>; Wed, 21 Dec 2005 09:21:33 -0500 (EST)
From: "Ibraheem Marshal" <m...@lrmm.com>
To: "Luchjo Pyron" <xx..xx@xx..xx.com>
Message-ID: <000001c60639$d1b17b90$1703a8c0@mazarine>
Subject: Re: demonstration thermal
Date: Wed, 21 Dec 2005 09:21:22 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C6060F.E8DB7390"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: m...@lrmm.com
X-OriginalArrivalTime: 21 Dec 2005 14:21:41.0796 (UTC)
FILETIME=[DD09FE40:01C60639]
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C6060F.E8DB7390
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
=20
If the link does not work automatically, copy it into your browser -
=20
www.chestain
.com
=20
Me
ClA
Xa
VA
Am
VlA
Pro
So
Lev
ridia
LlS
nax
LlUM
bien
GRA
pecia
ma
itra
$9
$9
$1
$8
$6
$6
$6
$7
$9
9.95
9.95
23.45
5.45
8.00
9.95
4.95
5.95
9.95
=20
------=_NextPart_000_0001_01C6060F.E8DB7390
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV> </DIV>
<DIV><FONT face=3DArial>If the link does not work automatically, copy
it =
into your browser -</FONT></DIV>
<DIV> </DIV>
<DIV style=3D"FLOAT: left"><FONT face=3DArial =
color=3D#0000ff><U>www.chestain</U></FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT face=3DArial =
color=3D#0000ff><U>.com</U></FONT></DIV>
<DIV style=3D"CLEAR: both"> </DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>Me<BR>ClA<BR>Xa<BR>VA<BR>Am<BR>VlA<BR>Pro<BR>So<BR>Lev</FONT=
></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>ridia<BR>LlS<BR>nax<BR>LlUM<BR>bien<BR>GRA<BR>pecia<BR>ma<BR=
>itra</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial> $9<BR> $9<BR> $1<BR> $8<BR> $6<BR>=
$6<BR> $6<BR> $7<BR> $9</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>9.95<BR>9.95<BR>23.45<BR>5.45<BR>8.00<BR>9.95<BR>4.95<BR>5.9=
5<BR>9.95</FONT></DIV>
<DIV style=3D"CLEAR: both"> </DIV></BODY></HTML>
------=_NextPart_000_0001_01C6060F.E8DB7390--
-- END OF SPAM --
See:
IP 212.32.96.198
http://www.moensted.dk/spam/?addr=212.32.96.198
http://www.spamcop.net/bl.shtml?212.32.96.198
inetnum: 212.32.64.0 - 212.32.127.255
netname: MISTRAL-ADSL-TELECOMP
descr: Telecom Plus Dynamic IP Block
country: GB
route: 212.32.0.0/17
descr: MISTRAL-ROUTE-212.32.0.0
descr: ALLOCATED PA Space do not break up
descr: Former Frontier block2
origin: AS8897
route: 212.32.0.0/17
descr: Frontier Internet Services Ltd
descr: UK-Network-Route-2
origin: AS5611
3 SBL listings for IPs under the responsibility of mistral.net
http://www.spamhaus.org/sbl/listings.lasso?isp=mistral.net
See:
www.chestain.com IP 221.7.209.69
ns0.ameseers.com [58.20.160.16]
ns0.canalsactasa.com [201.49.143.64]
www.chestain.com has no MX records -> chestain.com has no MX records
http://www.moensted.dk/spam/?addr=221.7.209.69
Spam source - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=221.7.209.69
http://www.abuse.net/sbl.phtml?IP=221.7.209.69
More 221.7.209.69 sightings:
http://groups.google.com/groups?q=221.7.209.69+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/query/bl?ip=221.7.209.69
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL35655
221.7.209.69/32 is listed on the Spamhaus Block List (SBL)
15-Dec-2005 04:05 GMT | SR03
iseasieto.com ; etc.
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL35677
221.7.209.0/24 is listed on the Spamhaus Block List (SBL)
17-Dec-2005 19:13 GMT | SR21
China Netcom Group Dirty Block: CNC Guilin Internet network
3 SBL listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/SBL/listings.lasso?isp=cncgroup-gx
Let see whois:
ICANN Registrar: YESNIC CO. LTD.
Domain Name : chestain.com
Registrant:
Name : Robert Shakour
Email : juso...@yahoo.com
Address : 2107 Boatfactory Road
Zipcode : 37146
Nation : US
Tel : 6159691426
Fax :
Administrative Contact:
Name : Robert Shakour
Email : juso...@yahoo.com
Address : 2107 Boatfactory Road
Zipcode : 37146
Nation : US
Tel : 6159691426
Fax :
Technical Contact:
Name : Robert Shakour
Email : juso...@yahoo.com
Address : 2107 Boatfactory Road
Zipcode : 37146
Nation : US
Tel : 6159691426
Fax :
Name Servers:
ns0.ameseers.com
ns0.canalsactasa.com
Dates & Status:
Created Date 2005-12-16 19:30:39 EST
Updated Date 2005-12-16 19:30:39 EST
Valid Date 2006-12-16 19:30:39 EST
Status ACTIVE
Let see whois:
ICANN Registrar: YESNIC CO. LTD.
Domain Name : ameseers.com
Registrant:
Name : Denny Payne
Email : fasp...@yahoo.com
Address : 120 allentown road
Zipcode : 18964
Nation : US
Tel : 2157232980
Fax :
Administrative Contact:
Name : Denny Payne
Email : fasp...@yahoo.com
Address : 120 allentown road
Zipcode : 18964
Nation : US
Tel : 2157232980
Fax :
Technical Contact:
Name : Denny Payne
Email : fasp...@yahoo.com
Address : 120 allentown road
Zipcode : 18964
Nation : US
Tel : 2157232980
Fax :
Name Servers:
Dates & Status:
Created Date 2005-12-16 19:46:54 EST
Updated Date 2005-12-16 19:46:54 EST
Valid Date 2006-12-16 19:46:54 EST
Status ACTIVE
Let see whois:
ICANN Registrar: YESNIC CO. LTD.
Domain Name : canalsactasa.com
Registrant:
Name : Bent Sullivan
Email : nes...@yahoo.com
Address : 3200 County Road
Zipcode : 33538
Nation : US
Tel : 3525692644
Fax :
Administrative Contact:
Name : Bent Sullivan
Email : nes...@yahoo.com
Address : 3200 County Road
Zipcode : 33538
Nation : US
Tel : 3525692644
Fax :
Technical Contact:
Name : Bent Sullivan
Email : nes...@yahoo.com
Address : 3200 County Road
Zipcode : 33538
Nation : US
Tel : 3525692644
Fax :
Name Servers:
Dates & Status
Created Date 2005-12-15 15:25:05 EST
Updated Date 2005-12-15 15:25:05 EST
Valid Date 2006-12-15 15:25:05 EST
Status ACTIVE
More chestain.com sightings:
http://groups.google.com/groups?q=chestain.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/0a4bd23b6a87cfa6
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: