[email] [meds] (specioser.com) pedicure
TomezNet
IP 201.135.135.245 dsl-201-135-135-245.prod-infinitum.com.mx
(at dns.uninet.net.mx)
Spamvert:
www.specioser.com IP 61.31.214.81
(SBL34806) (at tfn.net.tw)
Canadian Pharm Spamhaus
(relatisandi.com, anodefen.com, ebantene.com)
Received at an address harvested from domain registration.
More info below:
====================
X-SID-PRA: Feige Dartez <feigey...@federalbook.ru>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ46MLOHbSVNmv4uesPhLExV/ia99NIqSRvA=
Received: from tomts3-srv.bellnexxia.net ([209.226.175.115]) by
bay0-pamc1-f12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Wed, 7 Dec 2005 10:25:27 -0800
Received: from xxx.superb.net (HELO xxx.web-hosting.com)
([207.228.238.14])
by toip5.bellnexxia.net with ESMTP; 07 Dec 2005 13:36:57 -0500
Received: from federalbook.ru
(dsl-201-135-135-245.prod-infinitum.com.mx [201.135.135.245] (may be
forged))
by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id jB7IP8D04918
for <xx..xx@xx..xx.com>; Wed, 7 Dec 2005 13:25:09 -0500 (EST)
From: "Feige Dartez" <feigey...@federalbook.ru>
To: "Dympna Crigler" <xx..xx@xx..xx.com>
Message-ID: <000001c5fb5b$8a01b2d0$fafea8c0@taken>
Subject: Re: pedicure
Date: Wed, 7 Dec 2005 13:25:02 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C5FB31.A12E1BD0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Originating-IP: [0]
Return-Path: feigey...@federalbook.ru
X-OriginalArrivalTime: 07 Dec 2005 18:25:27.0769 (UTC)
FILETIME=[9903DC90:01C5FB5B]
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C5FB31.A12E1BD0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0002_01C5FB31.A12E1BD0"
------=_NextPart_001_0002_01C5FB31.A12E1BD0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
=20
dignity, and if you will come when I reach my own stall in the
evening, I will give you a little sack full of barley. The Ass
replied, Thank you. But I cant think that you, who refuse me a
little matter now. will by and by confer on me a greater
benefit.=20
Truth and the Traveler=20
A WAYFARING MAN, traveling in the desert, met a woman standing
alone and terribly dejected. He inquired of her, Who art thou?
My name is Truth, she replied. And for what cause, he asked,
have you left the city to dwell alone here in the wilderness?
She made answer, Because in former times, falsehood was with
few, but is now with all men.=20
The Manslayer=20
------=_NextPart_001_0002_01C5FB31.A12E1BD0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV> </DIV>
<DIV><A =
href=3D"http://www.specioser.com">http://www.specioser.com</A></DIV>
<DIV><IMG src=3D"cid:000101c5fb5b$89eec22e$fafea8c0@taken"></DIV>
<DIV> </DIV>
<DIV>dignity, and if you will come when I reach my own stall in the<BR>
evening, I will give you a little sack full of barley. The Ass<BR>
replied, Thank you. But I cant think that you, who refuse me a<BR>
little matter now. will by and by confer on me a greater<BR>
benefit. <BR>
Truth and the Traveler <BR>
A WAYFARING MAN, traveling in the desert, met a woman standing<BR>
alone and terribly dejected. He inquired of her, Who art thou?<BR>
My name is Truth, she replied. And for what cause, he asked,<BR>
have you left the city to dwell alone here in the wilderness?<BR>
She made answer, Because in former times, falsehood was with<BR>
few, but is now with all men. <BR>
The Manslayer </DIV></BODY></HTML>
------=_NextPart_001_0002_01C5FB31.A12E1BD0--
------=_NextPart_000_0001_01C5FB31.A12E1BD0
Content-Type: image/gif;
name="recalcitrant74.gif"
Content-Transfer-Encoding: base64
Content-ID: <000101c5fb5b$89eec22e$fafea8c0@taken>
*** REMOVED Attachment: recalcitrant74.gif (< 0.01 MB) ***
------=_NextPart_000_0001_01C5FB31.A12E1BD0--
-- END OF SPAM --
See:
IP 201.135.135.245 dsl-201-135-135-245.prod-infinitum.com.mx
http://www.moensted.dk/spam/?addr=201.135.135.245
http://dsbl.org/listing?201.135.135.245
inetnum: 201.135.128/17
status: reallocated
owner: Uninet S.A. de C.V.
ownerid: MX-USCV4-LACNIC
responsible: Arturo Zaldivar Mendez
route: 201.135.128.0/18
descr: UNINET
origin: AS8151
remarks: UniNet IDE Network
notify: hostm...@telentente.com
notify: upd...@ops.telentente.com
mnt-by: MAINT-TELENT
changed: fan...@reduno.com.mx
4 SBL listings for IPs under the responsibility of
prod-infinitum.com.mx
http://www.spamhaus.org/sbl/listings.lasso?isp=prod-infinitum.com.mx
20 SBL/ROKSO listings for IPs under the responsibility of uninet.net.mx
http://www.spamhaus.org/sbl/listings.lasso?isp=uninet.net.mx
See:
www.specioser.com IP 61.31.214.81
ns0.anodefen.com [201.49.143.64]
ns0.ebantene.com [221.7.209.83]
www.specioser.com has no MX records -> specioser.com has no MX records
http://www.moensted.dk/spam/?addr=61.31.214.81
Spam source - http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=61.31.214.81
http://www.abuse.net/sbl.phtml?IP=61.31.214.81
More ebantene.com sightings:
http://groups.google.com/groups?q=ebantene.com+group%3A*abuse
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL34806
61.31.214.0/24 is listed on the Spamhaus Block List (SBL)
24-Nov-2005 20:10 GMT | SR15
midvalue.com etc Canadian Pharm Spamhaus - dirty block
33 SBL listings for IPs under the responsibility of tfn.net.tw
http://www.spamhaus.org/SBL/listings.lasso?isp=tfn.net.tw
Let see whois:
domain: specioser.com
owner: Charlotte Cole
organization: n/a
email: can...@yahoo.com
address: 8 A Bear Creek Ln
city: Asheville
state: NC
postal-code: 28806
country: US
phone: +18283509614
admin-c: can...@yahoo.com#0
tech-c: can...@yahoo.com#0
billing-c: can...@yahoo.com#0
nserver: ns0.ebantene.com
nserver: ns0.anodefen.com
status: lock
created: 2005-12-06 22:01:37 UTC
modified: 2005-12-07 13:27:09 UTC
expires: 2006-12-06 17:01:36 UTC
source: joker.com live whois service
query-time: 0.015175
db-updated: 2005-12-07 18:42:37
ICANN Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
More joker.com sightings:
http://groups.google.com/groups?q=joker.com+group%3A*abuse&start=0&scoring=d&
More anodefen.com sightings:
http://groups.google.com/groups?q=anodefen.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/401fff50186aa72b
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: