Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [meds - PharmacyExpress.com] (lovetequi.com) Re: a news 6365

0 views

Skip to first unread message

TomezNet

unread,

Feb 6, 2006, 10:01:34 AM2/6/06

Received From:
IP 84.6.75.207
(at ns2.sky.fr)

Spamvert:
www.lovetequi.com IP 59.188.12.74
(SBL37430) (at newworldtel.com)

More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse&start=0&scoring=d&

Forged false site "certificates"
Logos and support by Visa, CIPA (Licence #91959), BBB (Participant
through 12/30/2005),
Verisign (Validity Period: 13-OCT-04 - 13-OCT-05)

More info below:
====================
X-SID-PRA: Reynaud Youmans <reyn...@darkstar.mv.com>
X-SID-Result: TempError
X-Message-Info: 6sSXyD95QpWtR50Nwqw1ep/RebKqSfiT+R6On7d1DH0=
Received: from tomts49-srv.bellnexxia.net ([209.226.175.193]) by
bay0-pamc1-f4.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sun, 5 Feb 2006 09:32:20 -0800
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 05 Feb 2006 12:32:18 -0500
Received: (qmail 11292 invoked by uid 110); 5 Feb 2006 17:32:17 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 11272 invoked from network); 5 Feb 2006 17:32:17 -0000
Received: from unknown (HELO darkstar.mv.com) (84.6.75.207)
by xx..xx..xx.net with SMTP; 5 Feb 2006 17:32:17 -0000
Message-ID: <000001c62a7a$11e7abd0$23e5a8c0@derisive>
Reply-To: "Reynaud Youmans" <reyn...@darkstar.mv.com>
From: "Reynaud Youmans" <reyn...@darkstar.mv.com>
To: "Estavan Monterroso" <xx..xx@xx..xx.com>
Subject: Re: a news 6365
Date: Sun, 5 Feb 2006 12:32:00 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C62A50.2911A3D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Return-Path: reyn...@darkstar.mv.com
X-OriginalArrivalTime: 05 Feb 2006 17:32:21.0240 (UTC)
FILETIME=[1E7B1F80:01C62A7A]

This is a multi-part message in MIME format.

------=_NextPart_000_0001_01C62A50.2911A3D0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi,
you do not need to OVER P/\Y for your piIls, visit
http://www.lovetequi.com and S A \/ E over 50%

------=_NextPart_000_0001_01C62A50.2911A3D0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>Hi,</FONT></DIV>
<DIV><FONT face=3DArial>you do not need to OVER
P/\Y for your piIls, visit=20
<A href=3D"http://www.lovetequi.com">http://www.lovetequi.com</A> and S
A
\/
E=20
over=20
50%</FONT></DIV></BODY></HTML>
------=_NextPart_000_0001_01C62A50.2911A3D0--

-- END OF SPAM --

See:
IP 84.6.75.207

http://www.moensted.dk/spam/?addr=84.6.75.207
http://www.spamcop.net/bl.shtml?84.6.75.207
http://cbl.abuseat.org/lookup.cgi?ip=84.6.75.207

inetnum: 84.4.0.0 - 84.7.216.255
netname: CEGETEL-INTERNET-RESIDENTIEL
descr: INTERNET RESIDENTIEL CEGETEL France
descr: Bloc - 13

route: 84.4.0.0/14
descr: CEGETEL CIDR Block
descr: CEGETEL France
origin: AS8228
mnt-by: CEGETEL-ENTREPRISES

See:
www.lovetequi.com IP 59.188.12.74
ns0.albeiti.com [58.20.176.46]
ns0.simpleloo.com [221.11.133.48]

www.lovetequi.com has no MX records -> lovetequi.com has no MX records

http://www.moensted.dk/spam/?addr=59.188.12.74
http://www.spamhaus.org/query/bl?ip=59.188.12.74

More lovetequi.com spam sightings:
http://groups.google.com/groups?q=lovetequi.com+group%3A*abuse

inetnum: 59.188.12.64 - 59.188.12.127
netname: FECOM-HK
country: HK
descr: F.E.Company
descr: Servers and Internet
descr: Access Facilities
descr: Hong Kong

route: 59.188.0.0/19
descr: NWT IP Network
origin: AS17444

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL37430
59.188.12.0/24 is listed on the Spamhaus Block List (SBL)

06-Feb-2006 09:19 GMT | SR20

healthsuite/pharmacy express website/nameserver

29 SBL/ROKSO listings for IPs under the responsibility of
newworldtel.com
http://www.spamhaus.org/sbl/listings.lasso?isp=newworldtel.com

Let see whois:
Registrar: NAMEBAY

Domain Name : LOVETEQUI.COM
Created On : 2006-02-02
Expiration Date : 2007-02-02
Status : ACTIVE
Registrant Name : Lawrence De Leon
Registrant Street1 : 6399 Stagg Court
Registrant City : Springfield
Registrant State/Province : VA
Registrant Postal Code : 22150
Registrant Country : US
Admin Handle : LD46764
Admin Name : Lawrence De Leon
Admin Street1 : 6399 Stagg Court
Admin City : Springfield
Admin State/Province : VA
Admin Postal Code : 22150
Admin Country : US
Admin Phone : +1.7039215005
Admin Email : innuckle[]yahoo.com
Tech Handle : LD46764
Tech Name : Lawrence De Leon
Tech Street1 : 6399 Stagg Court
Tech City : Springfield
Tech State/Province : VA
Tech Postal Code : 22150
Tech Country : US
Tech Phone : +1.7039215005
Tech Email : innu...@yahoo.com
Billing Handle : LD46764
Billing Name : Lawrence De Leon
Billing Street1 : 6399 Stagg Court
Billing City : Springfield
Billing State/Province : VA
Billing Postal Code : 22150
Billing Country : US
Billing Phone : +1.7039215005
Billing Email : innuckle[]yahoo.com
Name Server : NS0.SIMPLELOO.COM
Name Server : NS0.ALBEITI.COM

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages