Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [meds - PharmacyExpress.com] (turinwads.com) mellow

0 views

Skip to first unread message

TomezNet

unread,

Dec 8, 2005, 4:04:22 PM12/8/05

Received From:
IP 200.66.133.156 xdy...@dup-200-66-133-156.prodigy.net.mx
(at nsgdl1.uninet.net.mx)

Spamvert:
www.turinwads.com IP 61.31.214.81
(SBL34806) (at tfn.net.tw)

Received at an address harvested from our autoresponder.

Canadian Pharm Spamhaus => PharmacyExpress.com
Pharmacy Express a.k.a PharmaExpress
Technical Consultants and Experts Group Inc aka TCE Group

See More Pharmacy Express sightings:
http://groups.google.com/groups?q=%22Pharmacy+Express%22+group%3A*abuse

More info below:
====================
X-Message-Status: n
X-SID-PRA: Leevi Keas <ke...@shelcoinc.com>
X-SID-Result: TempError
X-Message-Info: 6sSXyD95QpX2JT7NLAr2W92dUtyKAlLdTt5tp3bIyfs=
Received: from bay0-pamc1-f5.bay0.hotmail.com ([65.54.247.13]) by
bay0-imc1-s11.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Thu, 8 Dec 2005 08:11:03 -0800
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by
bay0-pamc1-f5.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Thu, 8 Dec 2005 07:46:54 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
([207.228.238.14])
by toip12.bellnexxia.net with ESMTP; 08 Dec 2005 10:47:06 -0500
Received: from shelcoinc.com (xdy...@dup-200-66-133-156.prodigy.net.mx
[200.66.133.156] (may be forged))
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jB8FkYE27404
for <xx..xx@xx..xx.com>; Thu, 8 Dec 2005 10:46:36 -0500 (EST)
From: "Leevi Keas" <ke...@shelcoinc.com>
To: "Mikayla Mullinax" <xx..xx@xx..xx.com>
Message-ID: <000001c5fc0e$7e421990$7f29a8c0@Columbian>
Subject: Re: mellow
Date: Thu, 8 Dec 2005 10:46:02 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C5FBE4.956C1190"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: ke...@shelcoinc.com
X-OriginalArrivalTime: 08 Dec 2005 15:46:54.0185 (UTC)
FILETIME=[9CE3E590:01C5FC0E]

This is a multi-part message in MIME format.

------=_NextPart_000_0001_01C5FBE4.956C1190
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0002_01C5FBE4.956C1190"

------=_NextPart_001_0002_01C5FBE4.956C1190
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

http://www.turinwads.com
=20
=20
yourself and take the consequences! But we must leave. If you get hold
of yourself, well be in touch with the proper officials of your
government within the hour from Paris. Ive read the warning to you and
I
can assure you your own people are capable of protecting your family-as
your family was explained to me by Aleksei. But you, yourself, must be
part of that communication. You can become rational, Mr. Bourne, or you
can go to hell. Which will it be? The Chameleon, straining against the
knees pinning him to the ground, exhaled as if it were his final
breath.
His eyes came into focus and he said, Get these bastards off me. One of
those bastards saved your life, said Conklin. And I saved one of
theirs.
So be it. The armor-plated CitroC+n sped down the country road toward
the Paris

------=_NextPart_001_0002_01C5FBE4.956C1190
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><IMG src=3D"cid:000101c5fc0e$7e33cb74$7f29a8c0@Columbian"></DIV>
<DIV><A =
href=3D"http://www.turinwads.com">http://www.turinwads.com</A></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>yourself and take the consequences! But we must leave. If you get
=
hold
of yourself, well be in touch with the proper officials of your
government within the hour from Paris. Ive read the warning to you and
I can assure you your own people are capable of protecting your
family-as your family was explained to me by Aleksei. But you,
yourself,
must be part of that communication. You can become rational, Mr.
Bourne,
or you can go to hell. Which will it be?
The Chameleon, straining against the knees pinning him to the
ground,
exhaled as if it were his final breath. His eyes came into focus and he
said, Get these bastards off me.
One of those bastards saved your life, said Conklin.
And I saved one of theirs. So be it.
The armor-plated Citro=C3=ABn sped down the country road toward the
=
Paris</DIV></BODY></HTML>

------=_NextPart_001_0002_01C5FBE4.956C1190--

------=_NextPart_000_0001_01C5FBE4.956C1190
Content-Type: image/gif
Content-Transfer-Encoding: base64
Content-ID: <000101c5fc0e$7e33cb74$7f29a8c0@Columbian>

*** REMOVED Attachment: image5.gif (< 0.01 MB - 2k) ***

------=_NextPart_000_0001_01C5FBE4.98C8AA10--

-- END OF SPAM --

More Technical Consultants and Experts Group sightings:
http://groups.google.com/groups?q=%22Technical+Consultants+and+Experts+Group%22+group%3A*abuse

See:
IP 200.66.133.156 xdy...@dup-200-66-133-156.prodigy.net.mx

http://www.moensted.dk/spam/?addr=200.66.133.156
http://cbl.abuseat.org/lookup.cgi?ip=200.66.133.156
Web - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=200.66.133.156

inetnum: 200.66.133/24
status: reallocated
owner: Reasignacion UniNet
ownerid: MX-REUN-LACNIC
responsible: David Chavez Alba

route: 200.66.128.0/19
descr: telentente-cust
origin: AS8151
remarks: Telentente customer or transit route
notify: hostm...@telentente.com
notify: upd...@ops.telentente.com
mnt-by: MAINT-TELENT
changed: d...@telentente.com

20 SBL/ROKSO listings for IPs under the responsibility of uninet.net.mx
http://www.spamhaus.org/sbl/listings.lasso?isp=uninet.net.mx

See:
www.turinwads.com IP 61.31.214.81
ns0.anodefen.com A IN 160181 201.49.143.64
ns0.anodefen.com A IN 160181 61.31.214.81
ns0.ebantene.com A IN 160182 221.7.209.83

www.turinwads.com has no MX records -> turinwads.com has no MX records

http://www.moensted.dk/spam/?addr=61.31.214.81

More 61.31.214.81 sightings:
http://groups.google.com/groups?q=61.31.214.81+group%3A*abuse

inetnum: 61.31.0.0 - 61.31.255.255
netname: TFN-NET
descr: Taiwan Fixed Network CO.,LTD.

route: 61.31.0.0/16
descr: Proxy Announcement
origin: AS17444
remarks: Addresses from AS9924
remarks: Transit via AS17444
notify: radb_...@newworldtel.com
mnt-by: MAINT-AS17444
changed: radb_...@newworldtel.com

route: 61.31.0.0/16
descr: Taiwna Fixed Network
origin: AS9924
notify: eri...@profond.com.tw
mnt-by: MAINT-AS9924
changed: ting_...@howin.com.tw

27 SBL/ROKSO listings for IPs under the responsibility of
newworldtel.com
http://www.spamhaus.org/sbl/listings.lasso?isp=newworldtel.com

http://www.spamhaus.org/SBL/sbl.lasso?query=SBL34806
61.31.214.0/24 is listed on the Spamhaus Block List (SBL)

24-Nov-2005 20:10 GMT | SR15

midvalue.com etc Canadian Pharm Spamhaus - dirty block

33 SBL/ROKSO listings for IPs under the responsibility of tfn.net.tw
http://www.spamhaus.org/sbl/listings.lasso?isp=tfn.net.tw

Let see whois:
domain: turinwads.com

ICANN Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM

owner: christine puchtler
organization: n/a
email: respondagre[]yahoo.com
address: 1764 mertz rd
city: caro
state: Michigan
postal-code: 48723
country: US
phone: +19895298927
admin-c: respo...@yahoo.com#0
tech-c: respo...@yahoo.com#0
billing-c: respo...@yahoo.com#0
nserver: ns0.ebantene.com
nserver: ns0.anodefen.com
status: lock
created: 2005-12-07 20:42:24 UTC
modified: 2005-12-07 23:26:33 UTC
expires: 2006-12-07 15:42:22 UTC
source: joker.com live whois service
query-time: 0.015233
db-updated: 2005-12-08 16:26:07

More turinwads.com sightings:
http://groups.google.com/groups?q=turinwads.com+group%3A*abuse