Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [meds - PharmacyExpress.com] (morsavem.com) Re: putty arbiter

0 views

Skip to first unread message

TomezNet

unread,

Dec 19, 2005, 12:01:04 PM12/19/05

Received From:
IP 59.39.226.238
(at CHINANET-GD)

Spamvert:
www.morsavem.com IP 221.7.209.69
(SBL35655 / SBL35677) (at cncgroup-gx)

ns0.orredecte.com IP 201.49.143.64
(SBL35689, SBL35029, SBL34829)

Canadian Pharm Spamhaus => PharmacyExpress.com
Pharmacy Express a.k.a PharmaExpress
Technical Consultants and Experts Group Inc aka TCE Group
Forged false site "certificates"

See More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse

Received at an address harvested from domain registration.

More info below:
====================
X-SID-PRA: Ewa Wynne <ew...@alu.upco.es>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ47rJiI9mN7koKDTKK2ZRpeaIK3oAl3ZQDY=
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by
bay0-pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Mon, 19 Dec 2005 07:14:15 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
([207.228.2....])
by toip7.bellnexxia.net with ESMTP; 19 Dec 2005 10:22:18 -0500
Received: from alu.upco.es ([59.39.226.238])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jBJFE6713862
for <xx..xx@xx..xx.com>; Mon, 19 Dec 2005 10:14:07 -0500 (EST)
Message-ID: <000001c604ae$ba7813d0$3c15a8c0@coolie>
Reply-To: "Ewa Wynne" <ew...@alu.upco.es>
From: "Ewa Wynne" <ew...@alu.upco.es>
To: "Idelle Slocumb" <xx..xx@xx..xx.com>
Subject: Re: putty arbiter
Date: Mon, 19 Dec 2005 10:13:12 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C60484.D1A20BD0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: ew...@alu.upco.es
X-OriginalArrivalTime: 19 Dec 2005 15:14:15.0840 (UTC)
FILETIME=[E02B6A00:01C604AE]

This is a multi-part message in MIME format.

------=_NextPart_000_0001_01C60484.D1A20BD0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

=20
http://www.morsavem.com
=20
L
V
X
S
A
V
C
P
M
e
A
a
o
m
i
i
r
e
v
L
n
m
b
A
A
o
r
i
i
a
a
i
G
L
p
i
t
U
x
=20
e
R
i
e
d
r
M
=20
=20
n
A
S
c
i
a
=20
=20
=20
=20
=20
=20
i
a
=20
=20
=20
=20
=20
=20
=20
a
=20
$9
$8
$1
$7
$6
$6
$9
$6
$9
9.95
5.45
23.45
5.95
8.00
9.95
9.95
4.95
9.95
=20
=20
=20
Not for an analysts analyst, countered Holland. If it walks like an odd
duck and sounds like an odd duck, look for an odd duck. I submit that
somewhere along the line DeSole made the connection between Jason
Bourne
and the madman who had infiltrated Medusa-the new Medusa. For Christs
sake, how? I dont know. Maybe because you told us Bourne came out of
the
old Saigon Medusa-thats one hell of a connection to begin with. My God,
you may be right, said Alex, falling back on the couch. The driving
force we gave our unnamed madman was that hed been cut off from, the
new
Medusa. I used the words myself with every phone call. Hes spent years
putting it together. ... Hes got names and ranks and banks in Zurich.
..Jesus, Im blind! I said those things to total strangers on a
telephone fishing expedition and never even thought about

------=_NextPart_000_0001_01C60484.D1A20BD0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV> </DIV>
<DIV><A =
href=3D"http://www.morsavem.com">http://www.morsavem.com</A></DIV>
<DIV> </DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>L<BR>V<BR>X<BR>S<BR>A<BR>V<BR>C<BR>P<BR>M</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>e<BR>A<BR>a<BR>o<BR>m<BR>i<BR>i<BR>r<BR>e</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>v<BR>L<BR>n<BR>m<BR>b<BR>A<BR>A<BR>o<BR>r</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>i<BR>i<BR>a<BR>a<BR>i<BR>G<BR>L<BR>p<BR>i</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>t<BR>U<BR>x<BR> <BR>e<BR>R<BR>i<BR>e<BR>d</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>r<BR>M<BR> <BR> <BR>n<BR>A<BR>S<BR>c<BR>i</FONT></=
DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>a<BR> <BR> <BR> <BR> <BR> <BR>&nbsp=
;<BR>i<BR>a</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial> <BR> <BR> <BR> <BR> <BR> <BR>=
 <BR>a<BR> </FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial> $9<BR> $8<BR> $1<BR> $7<BR> $6<BR>=
 $6<BR> $9<BR> $6<BR> $9</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>9.95<BR>5.45<BR>23.45<BR>5.95<BR>8.00<BR>9.95<BR>9.95<BR>4.9=
5<BR>9.95</FONT></DIV>
<DIV style=3D"CLEAR: both"> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> Not for an analysts analyst, countered Holland. If it walks
like
an odd duck and sounds like an odd duck, look for an odd duck. I submit
that somewhere along the line DeSole made the connection between Jason
Bourne and the madman who had infiltrated Medusa-the new Medusa.
For Christs sake, how?
I dont know. Maybe because you told us Bourne came out of the old
Saigon Medusa-thats one hell of a connection to begin with.
My God, you may be right, said Alex, falling back on the couch.
The driving force we gave our unnamed madman was that hed been cut off
from, the new Medusa. I used the words myself with every phone call.
Hes spent years putting it together. ... Hes got names and ranks
and banks in Zurich. ...Jesus, Im blind! I said those things to total
strangers on a telephone fishing expedition and never even thought =
about</DIV></BODY></HTML>
------=_NextPart_000_0001_01C60484.D1A20BD0--

-- END OF SPAM --

See:
IP 59.39.226.238

http://www.moensted.dk/spam/?addr=59.39.226.238

inetnum: 59.32.0.0 - 59.42.255.255
netname: CHINANET-GD

route: 59.32.0.0/13
descr: China Telecom Guangdong province
origin: AS4134

17 SBL/ROKSO listings for IPs under the responsibility of CHINANET-GD
http://www.spamhaus.org/SBL/listings.lasso?isp=CHINANET-GD

See:
www.morsavem.com IP 221.7.209.69
ns0.morreser.com A IN 80024 58.20.160.16
ns0.orredecte.com A IN 135433 201.49.143.64

www.morsavem.com has no MX records -> morsavem.com has no MX records

http://www.moensted.dk/spam/?addr=221.7.209.69
Spam source - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=221.7.209.69
http://www.abuse.net/sbl.phtml?IP=221.7.209.69

More 221.7.209.69 sightings:
http://groups.google.com/groups?q=221.7.209.69+group%3A*abuse

inetnum: 221.7.209.0 - 221.7.209.255
netname: CNC-GL-INTER-3
country: CN

route: 221.7.128.0/17
descr: CNC Group GuangXi Network
origin: AS4837

http://www.spamhaus.org/SBL/sbl.lasso?query=SBL35655
221.7.209.69/32 is listed on the Spamhaus Block List (SBL)

15-Dec-2005 04:05 GMT | SR03

iseasieto.com ; etc.

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL35677
221.7.209.0/24 is listed on the Spamhaus Block List (SBL)

14-Dec-2005 06:01 GMT | SR21

China Netcom Group Dirty Block: CNC Guilin INternet network

3 SBL listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/SBL/listings.lasso?isp=cncgroup-gx

Let see whois:
domain: morsavem.com

ICANN Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM

owner: roger miller
organization: n/a
email: acarappro[]yahoo.com
address: 9400 N Meridian Ave
city: Fresno
state: CA
postal-code: 93720
country: US
phone: +14086271648
admin-c: acar...@yahoo.com#0
tech-c: acar...@yahoo.com#0
billing-c: acar...@yahoo.com#0
nserver: ns0.morreser.com
nserver: ns0.orredecte.com
status: lock
created: 2005-12-16 22:21:30 UTC
modified: 2005-12-19 02:01:47 UTC
expires: 2006-12-16 17:21:28 UTC
source: joker.com live whois service
query-time: 0.017591
db-updated: 2005-12-19 16:22:45

More morsavem.com sightings:
http://groups.google.com/groups?q=morsavem.com+group%3A*abuse

See:
ns0.orredecte.com -->> SBL35689, SBL35029, SBL34829

More orredecte.com sightings:
http://groups.google.com/groups?q=orredecte.com+group%3A*abuse

See also forged false site "certificates":
Verified by VISA
Better Business Bureau (BBB)
The Canadian International Pharmacy Association (CIPA)

Note:
All text and images located on the same website only!

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages