[email] Re: ND, derived pleasure from
spam...@nil.nil
Fraudulent claim of "security" at http://www.2006hosting.com/cd/order/order.htm
which claims to be a "SECURE ORDER FORM" while
one's credit card data is sent unencrypted and insecurely
to http://www.2006hosting.com/cd/order/order.php.
---
Spam FROM: bb-203-125-85-187.singnet.com.sg [203.125.85.187]
ab...@singnet.com.sg,postm...@singnet.com.sg
Spamvertized URL: http://www.2006hosting.com/cd/
at IP address 202.102.249.103 on cnc-noc.net,Chinanet/Henan.
postm...@public.zz.ha.cn,anti...@public.zz.ha.cn,
anti...@chinanet.cn.net,postm...@chinanet.cn.net,
ctsu...@special.abuse.net,dm...@publicf.bta.net.cn
anti...@chinanet.cn.net,ro...@dns.fz.fj.cn,ab...@cnc-noc.net,
postm...@cnc-noc.net
==========
[DETAILS:]
SPAM FROM: bb-203-125-85-187.singnet.com.sg [203.125.85.187]
inetnum: 203.125.0.0 - 203.125.127.255
netname: SINGNET-SG
descr: SingNet Pte Ltd
e-mail: hostm...@singnet.com.sg
'[whois.abuse.net]
ab...@singnet.com.sg (for singnet.com.sg)
SPAMVERTIZED URL: http://www.2006hosting.com/cd/
'[a href="http://www.2006hosting.com/cd/"]
[image on which to click][/a]'
* Connected to 202.102.249.103
Host: www.2006hosting.com
-----------------------------------------------
inetnum: 202.102.249.0 - 202.102.249.255
netname: ZZTB-MIB
country: CN
descr: Zhengzhou Telecom bureau Multimedia Information Bureau,
descr: Zhengzhou city, Henan Provice
admin-c: LZ33-AP anti...@public.zz.ha.cn
BGP routing shows this to be on Autonomous System 4837
aut-num: AS4837
as-name: China-Network-Communications-Group
(contacts listed at cnc-noc.net)
[whois.abuse.net]
ab...@cnc-noc.net (for cnc-noc.net)
postm...@cnc-noc.net (for cnc-noc.net)
TCPTRACEROUTE to port 80 on 202.102.249.103 shows:
...
21 221.13.223.74 (221.13.223.74) [0]
22 221.13.223.78 (221.13.223.78) [0]
23 61.168.255.34 (61.168.255.34) [1]
24 61.168.251.146 (61.168.251.146) [1]
25 202.102.249.103 (202.102.249.103) [open]
0: inetnum: 221.13.128.0 - 221.15.255.255
netname: CNCGROUP-HA
descr: CNCGROUP Henan Province Network
1: inetnum: 61.168.0.0 - 61.168.255.255
netname: CHINANET-HA
descr: CHINANET henan province network
e-mail: anti...@public.zz.ha.cn
e-mail: dm...@publicf.bta.net.cn
[whois.abuse.net]
postm...@public.zz.ha.cn (for ha.cn)
anti...@public.zz.ha.cn (for ha.cn)
anti...@chinanet.cn.net (for chinanet.cn.net)
postm...@chinanet.cn.net (for chinanet.cn.net)
ctsu...@special.abuse.net (for chinanet.cn.net)
-----------------------------------------------
===========================================================
[ORIGINAL SPAM: with angle brackets, such as "<", converted
to square brackets, such as "[", so as not
to affect HTML enabled mail/news readers.]
Return-Path: <shae...@china.com>
Received: from _my_isp_ (_my_isp_ [xxx.xxx.xxx.xxx])
by _my_isp_ (xxx) with ESMTP id i08AwQxi010182;
Thu, 8 Jan 2004 05:58:26 -0500 (EST)
(envelope-from shae...@china.com)
Received: from bb-203-125-85-187.singnet.com.sg (bb-203-125-85-187.singnet.com.sg [203.125.85.187])
by _my_isp_ (xxx) with SMTP id i08AwGlP072399;
Thu, 8 Jan 2004 05:58:18 -0500 (EST)
(envelope-from shae...@china.com)
Received: from [203.125.85.187] by 540000x.comIP with HTTP;
Thu, 08 Jan 2004 19:18:09 -0400
From: "Elbert Harding" <shae...@china.com>
To: <xxx>
Subject: Re: ND, derived pleasure from
xxxMime-Version: 1.0
X-Mailer: mPOP Web-Mail 2.19
X-Originating-IP: [540000x.comIP]
Date: Thu, 08 Jan 2004 22:15:09 -0100
Reply-To: "Elbert" <shae...@china.com>
xxxContent-Type: multipart/alternative;
xxx boundary="--ALT--AKPN45513088583084"
Message-Id: <OZSBRTJ-0004710498127@toddle>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
_my_isp_
X-Spam-DCC: sonic.net: _my_isp_ 1117; Body=1 Fuz1=1 Fuz2=1
X-Spam-Report:
* 2.7 CHINA_HEADER Involves 'china.com'
* 2.5 INCH_BANNEDCD BODY: INCH CUSTOM RULE -- banned cd
* 0.0 BAYES_50 BODY: Bayesian spam probability is 50 to 56%
* [score: 0.5006]
* 0.1 HTML_MESSAGE BODY: HTML included in message
* 1.0 J_BACKHAIR_31 BODY: 3 letters - Unsightly html tag - 1 letters
* 1.0 J_BACKHAIR_33 BODY: 3 letters - Unsightly html tag - 3 letters
* 1.0 J_BACKHAIR_37 BODY: 3 letters - Unsightly html tag - 7 letters
* 1.0 J_BACKHAIR_11 BODY: 1 letters - Unsightly html tag - 1 letters
* 1.0 J_BACKHAIR_12 BODY: 1 letters - Unsightly html tag - 2 letters
* 1.0 J_BACKHAIR_13 BODY: 1 letters - Unsightly html tag - 3 letters
* 1.0 J_BACKHAIR_21 BODY: 2 letters - Unsightly html tag - 1 letters
* 0.0 RCVD_IN_NJABL_RELAY RBL: NJABL: sender is confirmed open relay
* [203.125.85.187 listed in dnsbl.njabl.org]
* 0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
* [203.125.85.187 listed in dnsbl.njabl.org]
* 1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?203.125.85.187>]
X-Spam-Status: Yes, hits=13.9 required=6.0 tests=BAYES_50,CHINA_HEADER,
HTML_MESSAGE,INCH_BANNEDCD,J_BACKHAIR_11,J_BACKHAIR_12,J_BACKHAIR_13,
J_BACKHAIR_21,J_BACKHAIR_31,J_BACKHAIR_33,J_BACKHAIR_37,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_NJABL,RCVD_IN_NJABL_RELAY
autolearn=spam version=2.60
X-Spam-Level: *************
X-UIDL: 1i^"!4;T"!KRo"!gS8!!
Status: RO
X-Status:
X-Keywords:
X-UID: 44
xxx----ALT--AKPN45513088583084
xxxContent-Type: text/plain; charset=us-ascii
xxxContent-Transfer-Encoding: 8bit
calorie widowhood bradshaw dugan larsen phalarope collagen transshipping bramble
collagen patrolled blackmail nan knight byword
coulomb crew wealthy anchorite combinator cheeky dialysis benedikt
xxx----ALT--AKPN45513088583084
xxxContent-Type: text/html; charset=us-ascii
xxxContent-Transfer-Encoding: 8bit
[HTML][HEAD]
[BODY]
[p]Ban[/tidal]ned C[/debater]D Gov[/inverness]ernment d[/lymph]on't wan[/linotype]t m[/shanghai]e t[/awry]o s[/amphibian]ell i[/fieldstone]t. Se[/berlioz]e N[/misty]ow &[/p]
[a href="http://www.2006hosting.com/cd/"]
[img border="0" src="http://www.540000x.com/cd/ads2.jpg"][/a]
epidermis gremlin carport madsen schoolmarm anabaptist aquatic gerontology kid rachel bondage copyright biceps worthwhile agitate retail brassiere cattail cosy hasp heathenish [BR]
schoolwork bowel clytemnestra wac handful ether padre angel autonomy lignite myth richter rho subsidy jakarta anteater glory rhea metropolitan colatitude imprecate mugho royce electoral contractor home [BR]
california drier exuberant permeable sanctity tapeworm detest abominable mort corpora citizenry symposia corruption juxtaposition chaplain alternate trip posable ellsworth conklin acumen solemnity [BR]
temptation parabola nib term transom airframe andover therein delirium libelous radiology dice aztec cater eggshell assign conscript abscissa [BR]
stonecrop radical sphinx landscape resumption univariate campground nordhoff dismissal ketch asphyxiate e impudent jealous curie [BR]
wastebasket abigail poultry upraise onomatopoeic clobber edge borderline whereabout onion diligent triphenylphosphine tremble coral checkerberry basis compensable courtney romance sodden purvey gleason abridge beggar estimate bad persecute circumferential familiar hetty bowfin centrist alec burnside julio alligator brownell apparatus playoff [BR]
realisable absentminded became vanderbilt brigadier april mcguire cleveland deallocate irresponsible fresh cuckoo polytope mcgraw formatting florist deforest camelopard priory [BR]
cone bizet rawhide decline weldon derbyshire jacobite fovea bedside leningrad bluefish nowaday communicate architectonic euphoria intimidate doreen jiggle dwindle straddle [BR]
diagrammatic stolid quaint peggy bash caribbean flub delphinus pocketbook found modern cartographic impulsive cyrillic deprecate back sandwich sigh aloft orkney submitted plantation badminton metabolism flair fivefold intensify alkaline whiplash liniment vertebrae compress giraffe emigrant clergymen light grandstand atlantica certified bingham [BR]
passaic butane pervade chrome bawl trivalent corporal junta windowpane knelt jon bespoke dole cargill cutthroat counterattack pillsbury col denmark [BR]
passenger trichloroethane dodge tunnel garfield clap guernsey arteriolosclerosis islam deign hierarchic clyde salk clamber silicate dilemma nasty brakeman pyroelectric shill koppers lowboy mash submitted telephotography leper inequity bestial approval comb iridium ambition boyle cowhide drank glycine demonic collar peltry [BR]
[/BODY]
[/HTML]
xxx----ALT--AKPN45513088583084--
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
<URL:http://www.killfile.org/~tskirvin/nana/>