Spamvert:
www.rustratix.com IP 221.7.209.69
(SBL35655 / SBL35677) (at cncgroup-gx)
www.PharmacyExpress.com IP 203.97.56.43
www.expressgroup.co.nz IP 203.97.56.43
(at manux.co.nz / telstraclear.co.nz)
Canadian Pharm Spamhaus => PharmacyExpress.com
Pharmacy Express a.k.a PharmaExpress
Pyxis Holdings Limited and/or Express Group Limited
Technical Consultants and Experts Group Inc aka TCE Group
Forged false site "certificates"
Logos and support by Visa and MasterCard
Visa, CIPA (Licence #91959), BBB (Participant through 12/30/2005),
Verisign (Validity Period: 13-OCT-04 - 13-OCT-05)
PHARMACYEXPRESS.CO.NZ / CHEMISTSHOP.COM / expressgroup.co.nz
See Also the same spammer most recent:
relatisandi.com, anodefen.com, ebantene.com, specioser.com,
turinwads.com, pharmacyexpressgroup.com, chemistshop.com,
freighteo.manyuman.com, variousrevitalization.com,
toplevelcombination.com, mixesandtopvalue.com,
rightfromtoddlingweb.com, offamilyniceweb.com, elofanxiet.com,
orredecte.com, morreser.com, inrealisti.com, needonsan.com,
estemegins.com, noculat.com, morsavem.com, chestain.com, comoconta.com,
ajersau.com,
Etc .....
All above domains websites were marked as ©2005 PharmacyExpress.com
All Rights Reserved.
Search of CIPA website did NOT verify use of CIPA Seal
http://www.ciparx.ca/
Sorry, no results found based on any criteria or method regarding any
corporate name, domain name, etc ...
Received at an address harvested from domain registration.
More Technical Consultants and Experts Group sightings:
http://groups.google.com/groups?q=%22Technical+Consultants+and+Experts+Group%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Nickolas Melara <mela...@klass-und-co.de>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ47rJiI9mN7koH4Lwvl2EKZD711NGQkAr/0=
Received: from tomts42-srv.bellnexxia.net ([209.226.175.99]) by
bay0-pamc1-f6.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Fri, 23 Dec 2005 08:13:26 -0800
Received: from xx..xx..xx.net ([207.58.1....])
by toip6.bellnexxia.net with ESMTP; 23 Dec 2005 11:23:29 -0500
Received: (qmail 4384 invoked by uid 110); 23 Dec 2005 16:13:15 -0000
Received: (qmail 4031 invoked from network); 23 Dec 2005 16:13:15 -0000
Received: from 200-232-180-88.dsl.telesp.net.br (HELO klass-und-co.de)
(200.232.180.88)
by xx..xx..xx.net with SMTP; 23 Dec 2005 16:13:14 -0000
Delivered-To: 13-xx..xx@xx..xx.com
Message-ID: <000001c607db$bb4f0c70$8189a8c0@haversack>
Reply-To: "Nickolas Melara" <mela...@klass-und-co.de>
From: "Nickolas Melara" <mela...@klass-und-co.de>
To: "Xenocrates Critchlow" <xx..xx@xx..xx.com>
Subject: Re: accredit ichthyologist
Date: Fri, 23 Dec 2005 11:12:54 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C607B1.D2790470"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: mela...@klass-und-co.de
X-OriginalArrivalTime: 23 Dec 2005 16:13:26.0255 (UTC)
FILETIME=[CE08BFF0:01C607DB]
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C607B1.D2790470
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hello,
http://www.rustratix.com <http://www.rustratix.com>=20
M
X
P
C
A
L
V
V
S
er idia
ana x
rope cia
i alis
m bien
evitr a
iagr a
ali um
o ma
=20
=20
=20
now from $ 3.85 per piII
=20
=20
now from $ 3.35 per piII
now from $ 1.25 per piII
=20
------=_NextPart_000_0001_01C607B1.D2790470
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hello,</DIV>
<P><DIV><FONT face=3DArial size=3D3><A =
href=3D"http://www.rustratix.com"><FONT face=3DArial =
size=3D3>http://www.rustratix.com</FONT></A></FONT></DIV></P>
<P><DIV style=3D"FLOAT: left"><FONT face=3DArial =
size=3D3><DIV>M</DIV><DIV>X</DIV>P<BR><DIV><B>C</B></DIV><DIV>A</DIV><DIV=
>L</DIV><B>V</B><BR><DIV><B>V</B></DIV>S<BR></FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT face=3DArial size=3D3>er idia<BR>ana =
x<BR>rope cia<BR><B>i alis</B><BR><DIV>m bien</DIV>evitr a<BR><B>iagr =
a</B><BR><B>ali um</B><BR>o ma<BR></FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT face=3DArial =
size=3D3> <BR><DIV> </DIV> <BR> now from <STRONG>$
=
3.85</STRONG> per piII<BR><DIV> </DIV> <BR> now from =
<STRONG>$ 3.35</STRONG> per piII<BR><DIV> now from <STRONG>$ =
1.25</STRONG> per =
piII</DIV><DIV> </DIV></FONT></DIV></P></BODY></HTML>
------=_NextPart_000_0001_01C607B1.D2790470--
----------
From: "Nickolas Melara" <mela...@klass-und-co.de>
Reply-To: "Nickolas Melara" <mela...@klass-und-co.de>
Date: Fri, 23 Dec 2005 11:12:54 -0500
To: "Xenocrates Critchlow" <xx..xx@xx..xx.com>
Subject: Re: accredit ichthyologist
Hello,
http://www.rustratix.com
M
X
P
C
A
L
V
V
S
er idia
ana x
rope cia
i alis
m bien
evitr a
iagr a
ali um
o ma
now from $ 3.85 per piII
now from $ 3.35 per piII
now from $ 1.25 per piII
-- END OF SPAM --
More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse&start=0&scoring=d&
See:
IP 200.232.180.88 200-232-180-88.dsl.telesp.net.br
http://www.moensted.dk/spam/?addr=200.232.180.88
http://cbl.abuseat.org/lookup.cgi?ip=200.232.180.88
http://www.spamhaus.org/query/bl?ip=200.232.180.88
inetnum: 200.232.128/17
aut-num: AS27699
abuse-c: ABL226
owner: TELECOMUNICACOES DE SAO PAULO S.A. - TELESP
ownerid: 002.558.157/0001-62
responsible: Luiz A. P. Lopes
route: 200.232.160.0/19
descr: TELECOMUNICACOES DE SAO PAULO S/A - TELESP
origin: AS27699
1 SBL/ROKSO listings for IPs under the responsibility of rnp.br
http://www.spamhaus.org/sbl/listings.lasso?isp=rnp.br
19 SBL/ROKSO listings for IPs under the responsibility of telesp.net.br
http://www.spamhaus.org/sbl/listings.lasso?isp=telesp.net.br
See:
www.rustratix.com IP 221.7.209.69
ns0.ameseers.com A IN 133678 221.7.209.69
ns0.ameseers.com A IN 133678 58.20.160.16
ns0.ameseers.com A IN 133678 218.201.43.140
www.rustratix.com has no MX records -> rustratix.com has no MX records
http://www.moensted.dk/spam/?addr=221.7.209.69
Spam source - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=221.7.209.69
http://www.abuse.net/sbl.phtml?IP=221.7.209.69
More 221.7.209.69 sightings:
http://groups.google.com/groups?q=221.7.209.69+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/query/bl?ip=221.7.209.69
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL35655
221.7.209.69/32 is listed on the Spamhaus Block List (SBL)
15-Dec-2005 04:05 GMT | SR03
iseasieto.com ; etc.
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL35677
221.7.209.0/24 is listed on the Spamhaus Block List (SBL)
17-Dec-2005 19:13 GMT | SR21
China Netcom Group Dirty Block: CNC Guilin Internet network
3 SBL listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/SBL/listings.lasso?isp=cncgroup-gx
Let see whois:
ICANN Registrar: NAMEBAY
Domain Name : RUSTRATIX.COM
Created On : 2005-12-21
Expiration Date : 2006-12-21
Status : ACTIVE
Registrant Name : Liliana Gomez
Registrant Street1 : 1756 N BAYSHORE DR APT 27M
Registrant City : MIAMI
Registrant State/Province : FL
Registrant Postal Code : 33132-1182
Registrant Country : US
Admin Handle : LG68109
Admin Name : Liliana Gomez
Admin Street1 : 1756 N BAYSHORE DR APT 27M
Admin City : MIAMI
Admin State/Province : FL
Admin Postal Code : 33132-1182
Admin Country : US
Admin Phone : +1.3052068423
Admin Email : doedepe[]yahoo.com
Tech Handle : LG68109
Tech Name : Liliana Gomez
Tech Street1 : 1756 N BAYSHORE DR APT 27M
Tech City : MIAMI
Tech State/Province : FL
Tech Postal Code : 33132-1182
Tech Country : US
Tech Phone : +1.3052068423
Tech Email : doe...@yahoo.com
Billing Handle : LG68109
Billing Name : Liliana Gomez
Billing Street1 : 1756 N BAYSHORE DR APT 27M
Billing City : MIAMI
Billing State/Province : FL
Billing Postal Code : 33132-1182
Billing Country : US
Billing Phone : +1.3052068423
Billing Email : doe...@yahoo.com
Name Server : NS0.AMESEERS.COM
Name Server : NS0.CANALSACTASA.COM
Registrar Name : NAMEBAY
Registrar WebSite : http://www.namebay.com
More rustratix.com.co sightings:
http://groups.google.com/groups?q=rustratix.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/a7251fb20d0d40f2
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: