[email] [meds - PharmacyExpress.com] (inrealisti.com) dottle protein
TomezNet
IP 213.254.79.75 cable79a075.usuarios.retecal.es
(at dns03.ono.com / sunic.sunet.se)
Spamvert:
www.inrealisti.com IP 61.31.214.81
(SBL34806 / SBL35716 / SBL35657) (at tfn.net.tw)
Received at an address harvested from domain registration.
Canadian Pharm Spamhaus => PharmacyExpress.com
Pharmacy Express a.k.a PharmaExpress
Technical Consultants and Experts Group Inc aka TCE Group
See More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse
See Also the same spammer most recent:
relatisandi.com, anodefen.com, ebantene.com, specioser.com,
turinwads.com, pharmacyexpressgroup.com, chemistshop.com,
freighteo.manyuman.com, variousrevitalization.com,
toplevelcombination.com, mixesandtopvalue.com,
rightfromtoddlingweb.com, offamilyniceweb.com, elofanxiet.com,
orredecte.com, morreser.com, Etc .....
More info below:
====================
X-Message-Info: moY6YVwXQ46MLOHbSVNmvxHHS4glPtF4/V/UCYiOnjY=
Received: from tomts11-srv.bellnexxia.net ([209.226.175.55]) by
bay0-pamc1-f10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sun, 11 Dec 2005 07:48:59 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com) (207.228.2...)
by toip4.bellnexxia.net with ESMTP; 11 Dec 2005 10:48:59 -0500
Received: from hotmill.com (cable79a075.usuarios.retecal.es
[213.254.79.75])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jBBFmvX29631
for <xx..xx@xx..xx.com>; Sun, 11 Dec 2005 10:48:58 -0500 (EST)
Message-ID: <000001c5fe6a$3cfeb0c0$775aa8c0@splodge>
Reply-To: "Jessalyn Skeen" <skee...@hotmill.com>
From: "Jessalyn Skeen" <skee...@hotmill.com>
To: "Olivia Pruett" <xx..xx@xx..xx.com>
Subject: Re: dottle protein
Date: Sun, 11 Dec 2005 10:47:49 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C5FE40.5428A8C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: skee...@hotmill.com
X-OriginalArrivalTime: 11 Dec 2005 15:48:59.0939 (UTC)
FILETIME=[6715AF30:01C5FE6A]
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C5FE40.5428A8C0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0002_01C5FE40.5428A8C0"
------=_NextPart_001_0002_01C5FE40.5428A8C0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
*** REMOVED Attachment: gif (< 0.01 MB - 2k) ***
------=_NextPart_000_0001_01C5FE40.5428A8C0--
----------
From: "Jessalyn Skeen" <skee...@hotmill.com>
Reply-To: "Jessalyn Skeen" <skee...@hotmill.com>
Date: Sun, 11 Dec 2005 10:47:49 -0500
To: "Olivia Pruett" <xx..xx@xx..xx.com>
Subject: Re: dottle protein
sometimes just a short, sharp, hostile Webb, formerly a member of
Saigons infamous Medusa, and a man they suspected of feigning his loss
of memory. ... Loss of memory? Alex Conklin had told them that the
Medusan they had trained to go out in deep cover for Carlos the Jackal,
an agent provocateur they called Jason Bourne, had lost his memory.
Lost
his memory and nefirst door, then the second, remaining on the
left-then
they crossed the hall, the pattern now altered, no longer steady,
instead zigzagging, as if the wound had been located, the bleeding
partially stemmed. The trail passed the sixth door on the right, and
the
seventh ... then abruptly the shining red drops stopped-no, not
entirely. There was a trickle heading left, barely visible, and again,
across the hallway-there it was! A faint smudge of red just above the
knob on the eighth door on the left, no more than
------=_NextPart_001_0002_01C5FE40.56FFBD90
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV> </DIV>
<DIV><A
href="http://www.inrealisti.com">http://www.inrealisti.com</A></DIV>
<DIV> </DIV>
<DIV><IMG src="cid:000101c5fe6a$3fd5e7be$2f63a8c0@odontology"></DIV>
<DIV></DIV>
<DIV> </DIV>
<DIV>out a bird of prey Ive wanted for thirteen years. His claws are
razor-sharp and hes killed too often, too many, and now he wants to
kill my own-your own. Get away from me!
Bloodstains. On the dull, dark brown carpet, wet driblets glistening
in the dim overhead light. Bourne crouched and felt them; they were
wet;
they were red-bloodred. Unbroken, they passed the first door, then the
second, remaining on the left-then they crossed the hall, the pattern
now altered, no longer steady, instead zigzagging, as if the wound had
been located, the bleeding partially stemmed. The trail passed the
sixth
door on the right, and the seventh ... then abruptly the shining red
drops stopped-no, not entirely. There was a trickle heading left,
barely
visible, and again, across the hallway-there it was! A faint smudge of
red just above the knob on the eighth door on the left, no more
than</DIV></BODY></HTML>
------=_NextPart_001_0002_01C5FE40.56FFBD90--
------=_NextPart_000_0001_01C5FE40.56FFBD90
Content-Type: image/gif
Content-Transfer-Encoding: base64
Content-ID: <000101c5fe6a$3fd5e7be$2f63a8c0@odontology>
----------
From: "Jessalyn Skeen" <skee...@hotmill.com>
Reply-To: "Jessalyn Skeen" <skee...@hotmill.com>
Date: Sun, 11 Dec 2005 10:47:49 -0500
To: "Olivia Pruett" <xx..xx@xx..xx.com>
Subject: Re: dottle protein
sometimes just a short, sharp, hostile Webb, formerly a member of
Saigons infamous Medusa, and a man they suspected of feigning his loss
of memory. ... Loss of memory? Alex Conklin had told them that the
Medusan they had trained to go out in deep cover for Carlos the Jackal,
an agent provocateur they called Jason Bourne, had lost his memory.
Lost
his memory and nefirst door, then the second, remaining on the
left-then
they crossed the hall, the pattern now altered, no longer steady,
instead zigzagging, as if the wound had been located, the bleeding
partially stemmed. The trail passed the sixth door on the right, and
the
seventh ... then abruptly the shining red drops stopped-no, not
entirely. There was a trickle heading left, barely visible, and again,
across the hallway-there it was! A faint smudge of red just above the
knob on the eighth door on the left, no more than
------=_NextPart_000_0001_01C5FE40.5428A8C0--
-- END OF SPAM --
More Technical Consultants and Experts Group sightings:
http://groups.google.com/groups?q=%22Technical+Consultants+and+Experts+Group%22+group%3A*abuse
More PharmacyExpress.com sightings:
http://groups.google.com/groups?q=PharmacyExpress.com+group%3A*abuse
See:
IP 213.254.79.75 cable79a075.usuarios.retecal.es
http://www.moensted.dk/spam/?addr=213.254.79.75
http://spamcop.net/w3m?action=checkblock&ip=213.254.79.75
http://cbl.abuseat.org/lookup.cgi?ip=213.254.79.75
inetnum: 213.254.64.0 - 213.254.95.255
netname: SIMBADNET
descr: Retecal Sociedad Operadora de Telecomunicaciones
descr: Red de usuarios de cable
route: 213.254.64.0/20
descr: RETECAL PA Block 11
origin: AS13066
See:
www.inrealisti.com IP 61.31.214.81
ns0.orredecte.com [201.49.143.64]
ns0.morreser.com [58.20.160.16]
www.inrealisti.com has no MX records -> inrealisti.com has no MX
records
http://www.moensted.dk/spam/?addr=61.31.214.81
Spam source - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=61.31.214.81
http://www.abuse.net/sbl.phtml?IP=61.31.214.81
More 61.31.214.81 sightings:
http://groups.google.com/groups?q=61.31.214.81+group%3A*abuse
inetnum: 61.31.0.0 - 61.31.255.255
netname: TFN-NET
descr: Taiwan Fixed Network CO.,LTD.
route: 61.31.0.0/16
descr: Proxy Announcement
origin: AS17444
remarks: Addresses from AS9924
remarks: Transit via AS17444
notify: radb_...@newworldtel.com
mnt-by: MAINT-AS17444
changed: radb_...@newworldtel.com
route: 61.31.0.0/16
descr: Taiwna Fixed Network
origin: AS9924
notify: eri...@profond.com.tw
mnt-by: MAINT-AS9924
changed: ting_...@howin.com.tw
26 SBL/ROKSO listings for IPs under the responsibility of
newworldtel.com
http://www.spamhaus.org/sbl/listings.lasso?isp=newworldtel.com
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL34806
61.31.214.0/24 is listed on the Spamhaus Block List (SBL)
24-Nov-2005 20:10 GMT | SR15
midvalue.com etc Canadian Pharm Spamhaus - dirty block
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL35657
61.31.208.0/20 is listed on the Spamhaus Block List (SBL)
09-Dec-2005 03:44 GMT | SR15
dirty block
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL35716
61.31.214.81/32 is listed on the Spamhaus Block List (SBL)
10-Dec-2005 20:18 GMT | SR04
35 SBL/ROKSO listings for IPs under the responsibility of tfn.net.tw
http://www.spamhaus.org/sbl/listings.lasso?isp=tfn.net.tw
Let see whois:
ICANN Registrar: ONLINE SAS
DOMAIN
Domain Name : inrealisti.com (INREAL6-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com
Registrant / Admin Contact :
PERSON
Richard FRANKENFIELD (FRANKE10-BMN-PE)
192 Front St
18055 Hellertown
UNITED STATES Pennsylvania
phone : 610-838-2720
fax :
e-mail : eth...@yahoo.com
Billing Contact :
PERSON
Richard FRANKENFIELD (FRANKE10-BMN-PE)
192 Front St
18055 Hellertown
UNITED STATES Pennsylvania
phone : 610-838-2720
fax :
e-mail : eth...@yahoo.com
Technical Contact :
PERSON
Richard FRANKENFIELD (FRANKE10-BMN-PE)
192 Front St
18055 Hellertown
UNITED STATES Pennsylvania
phone : 610-838-2720
fax :
e-mail : eth...@yahoo.com
Domain servers :
ns0.morreser.com (NMC102-BMN-HST)
ns0.orredecte.com (NOC40-BMN-HST)
Created on 12/09/2005 20:42:58
Updated on 12/10/2005 16:15:44
Expires on 12/09/2006 15:42:57
More inrealisti.com sightings:
http://groups.google.com/groups?q=inrealisti.com+group%3A*abuse
See also forged false site "certificates":
Verified by VISA
Better Business Bureau (BBB)
The Canadian International Pharmacy Association (CIPA)
Note:
All text and images located on the same website only!
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/81dafaf59e0dcc02
AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/a045b18a4be5f806
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: