Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [meds - PharmacyExpress.com] (estemegins.com) Re: heeltap presume

0 views

Skip to first unread message

TomezNet

unread,

Dec 17, 2005, 4:02:32 PM12/17/05

Received From:
IP 81.84.152.60
(at tvcabo.pt)

Spamvert:
www.estemegins.com IP 221.7.209.69
(SBL35655) (at cncgroup-gx)

ns0.orredecte.com IP 201.49.143.64
(SBL35689, SBL35029, SBL34829)

Canadian Pharm Spamhaus => PharmacyExpress.com
Pharmacy Express a.k.a PharmaExpress
Technical Consultants and Experts Group Inc aka TCE Group
Forged false site "certificates"

See More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse

Received at an address harvested from our autoresponder.

More info below:
====================
X-SID-PRA: Nuala Galicia <gal...@radion.co.il>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ47rJiI9mN7koFTl0WRbLOQnivEjo1XYjr8=
Received: from tomts41-srv.bellnexxia.net ([209.226.175.98]) by
bay0-pamc1-f12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 17 Dec 2005 11:39:26 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
([207.228.2....])
by toip5.bellnexxia.net with ESMTP; 17 Dec 2005 14:54:02 -0500
Received: from radion.co.il ([81.84.152.60])
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jBHJdIa06255
for <xx..xx@xx..xx.com>; Sat, 17 Dec 2005 14:39:18 -0500 (EST)
From: "Nuala Galicia" <gal...@radion.co.il>
To: "Kwaku Melendrez" <xx..xx@xx..xx.com>
Message-ID: <000001c60341$881c6e40$fa8aa8c0@decussate>
Subject: Re: heeltap presume
Date: Sat, 17 Dec 2005 14:39:01 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C60317.9F466640"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: gal...@radion.co.il
X-OriginalArrivalTime: 17 Dec 2005 19:39:26.0716 (UTC)
FILETIME=[96F6EBC0:01C60341]

This is a multi-part message in MIME format.

------=_NextPart_000_0001_01C60317.9F466640
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

=20
http://www.estemegins.com
=20
VA
Am
VlA
So
Xa
ClA
Pro
Me
Lev
LlUM
bien
GRA
ma
nax
LlS
pecia
ridia
itra
$8
$6
$6
$7
$1
$9
$6
$9
$9
5.45
8.00
9.95
5.95
23.45
9.95
4.95
9.95
9.95
=20
=20
=20
It was 3:25 in the afternoon when Charles Casset walked into Peter
Hollands office at the Central Intelligence Agency. Breakthrough, said
the deputy director, then added less enthusiastically, Of sorts. The
Ogilvie firm? asked the DCI. From left field, replied Casset, nodding
and placing several stock photographs on Hollands desk. These were
faxed
down from Kennedy Airport an hour ago. Believe me, its been a heavy
sixty minutes since then. From Kennedy? Frowning, Peter studied the
facsimiled duplicates. They comprised a sequence of photographs showing
a crowd of people passing through metal detectors in one of the
airports
international terminals. The head of a single man was circled in red in
each photo. What is it? Who is it?

------=_NextPart_000_0001_01C60317.9F466640
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV> </DIV>
<DIV><A =
href=3D"http://www.estemegins.com">http://www.estemegins.com</A></DIV>
<DIV> </DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>VA<BR>Am<BR>VlA<BR>So<BR>Xa<BR>ClA<BR>Pro<BR>Me<BR>Lev</FONT=
></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>LlUM<BR>bien<BR>GRA<BR>ma<BR>nax<BR>LlS<BR>pecia<BR>ridia<BR=
>itra</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial> $8<BR> $6<BR> $6<BR> $7<BR> $1<BR>=
 $9<BR> $6<BR> $9<BR> $9</FONT></DIV>
<DIV style=3D"FLOAT: left"><FONT =
face=3DArial>5.45<BR>8.00<BR>9.95<BR>5.95<BR>23.45<BR>9.95<BR>4.95<BR>9.9=
5<BR>9.95</FONT></DIV>
<DIV style=3D"CLEAR: both"> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> It was 3:25 in the afternoon when Charles Casset walked into =
Peter
Hollands office at the Central Intelligence Agency. Breakthrough,
said the deputy director, then added less enthusiastically, Of sorts.
The Ogilvie firm? asked the DCI.
From left field, replied Casset, nodding and placing several stock
photographs on Hollands desk. These were faxed down from Kennedy
Airport an hour ago. Believe me, its been a heavy sixty minutes since
then.
From Kennedy? Frowning, Peter studied the facsimiled duplicates.
They comprised a sequence of photographs showing a crowd of people
passing through metal detectors in one of the airports international
terminals. The head of a single man was circled in red in each photo.
What is it? Who is it?</DIV></BODY></HTML>
------=_NextPart_000_0001_01C60317.9F466640--

-- END OF SPAM --

More Technical Consultants and Experts Group sightings:
http://groups.google.com/groups?q=%22Technical+Consultants+and+Experts+Group%22+group%3A*abuse

More PharmacyExpress.com sightings:
http://groups.google.com/groups?q=PharmacyExpress.com+group%3A*abuse

See:
IP 81.84.152.60

http://www.moensted.dk/spam/?addr=81.84.152.60

inetnum: 81.84.150.0 - 81.84.165.255
netname: TVCABO
descr: TVCABO-Portugal Cable Modem Network
country: PT

route: 81.84.0.0/16
descr: TVCABO-Portugal
origin: AS12542

3 SBL/ROKSO listings for IPs under the responsibility of tvcabo.pt
http://www.spamhaus.org/sbl/listings.lasso?isp=tvcabo.pt

See:
www.estemegins.com IP 221.7.209.69
ns0.morreser.com A IN 80024 58.20.160.16
ns0.orredecte.com A IN 135433 201.49.143.64

www.estemegins.com has no MX records -> estemegins.com has no MX
records

http://www.moensted.dk/spam/?addr=221.7.209.69
Spam source - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=221.7.209.69
http://www.abuse.net/sbl.phtml?IP=221.7.209.69

More estemegins.com sightings:
http://groups.google.com/groups?q=estemegins.com+group%3A*abuse

inetnum: 221.7.209.0 - 221.7.209.255
netname: CNC-GL-INTER-3
country: CN
descr: CNC Guilin INternet network

route: 221.7.128.0/17
descr: CNC Group GuangXi Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net

http://www.spamhaus.org/SBL/sbl.lasso?query=SBL35655
221.7.209.69/32 is listed on the Spamhaus Block List (SBL)

15-Dec-2005 04:05 GMT | SR03

iseasieto.com ; etc.

3 SBL listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gx

See:
ns0.orredecte.com -->> SBL35689, SBL35029, SBL34829

More orredecte.com sightings:
http://groups.google.com/groups?q=orredecte.com+group%3A*abuse

Let see whois:
Registrar : BookMyName

Domain Name : estemegins.com (ESTEME3-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com

Registrant / Admin Contact :
PERSON
Dennis MARTIN (MARTIN329-BMN-PE)

2380 Laurel Valley Drive

44313 Akron
UNITED STATES OH
phone : 330-928-8008
fax :
e-mail : atetabish[]yahoo.com

Billing Contact :
PERSON
Dennis MARTIN (MARTIN329-BMN-PE)

2380 Laurel Valley Drive

44313 Akron
UNITED STATES OH
phone : 330-928-8008
fax :
e-mail : atet...@yahoo.com

Technical Contact :
PERSON
Dennis MARTIN (MARTIN329-BMN-PE)

2380 Laurel Valley Drive

44313 Akron
UNITED STATES OH
phone : 330-928-8008
fax :
e-mail : atet...@yahoo.com

Domain servers :
ns0.morreser.com (NMC102-BMN-HST)
ns0.orredecte.com (NOC40-BMN-HST)

Created on 12/14/2005 21:24:30
Updated on 12/16/2005 14:56:43
Expires on 12/14/2006 16:24:30

More 221.7.209.69 sightings:
http://groups.google.com/groups?q=221.7.209.69+group%3A*abuse&start=0&scoring=d&

See also forged false site "certificates":
Verified by VISA
Better Business Bureau (BBB)
The Canadian International Pharmacy Association (CIPA)

Note:
All text and images located on the same website only!

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages