[email] [LowestMortgageQuotes] (bubbleactions.com - hirrupyes.com) Mortgage Market Weakens Thu, 10 Aug 2006 00:29:04 -0300
TomezNet
IP 222.184.137.16
(at ns.jsinfo.net / nmc1.ptt.js.cn / CHINANET-JS)
Spamvert:
bubbleactions.com IP 222.122.149.99
(SBL45236) (at kornet.net / ns2.nasmedia.co.kr)
Web:
LowestMortgageQuotes Š 2006
More LowestMortgageQuotes sightings:
http://groups.google.com/groups/search?q=LowestMortgageQuotes+group%3A*abuse&start=0&scoring=d&
Forged Logos:
TRUSTE
VeriSign
Can-Spam Act
More info below:
====================
X-SID-PRA: NewsAlert <Randa...@finklfan.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43trpqTnsZTj+TfLhKu1PXVsHJ9hHkBJoU=
Received: from tomts32-srv.bellnexxia.net ([209.226.175.106]) by
bay0-pamc1-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 9 Aug 2006 19:34:23 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip4.bellnexxia.net with ESMTP; 09 Aug 2006 22:34:11 -0400
Received: (qmail 13459 invoked by uid 110); 9 Aug 2006 22:34:09 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 13447 invoked from network); 9 Aug 2006 22:34:05 -0400
Received: from unknown (HELO 207.58.1....) (222.184.137.16)
by xx..xx..xx.net with SMTP; 9 Aug 2006 22:34:05 -0400
Date: Thu, 10 Aug 2006 02:27:04 -0100
From: "NewsAlert" <Randa...@finklfan.com>
Message-ID: <10149.could@rater>
To: xx..xx@xx..xx.com
Subject: Mortgage Market Weakens Thu, 10 Aug 2006 00:29:04 -0300
Return-Path: Randa...@finklfan.com
X-OriginalArrivalTime: 10 Aug 2006 02:34:24.0300 (UTC)
FILETIME=[7E27FEC0:01C6BC25]
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
<HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY bgColor=#ffffff>
<BR>Hello,<BR><BR>
You have been chosen to participate in an invitation only limited time
event!<BR>
Are you currently paying over 3% for your mortgage?<BR>
STOP!<BR>
We can help you lower that today!<BR>
Answer only a few questions and we can give you an approval in under 30
seconds it's that simple!<BR><BR>
<a href="http://bubbleactions.com">http://bubbleactions.com</a><BR><BR>
And stop fighting for lenders let them fight for you! Make them work
for your business by giving you the lowest rates around!<BR>
230,000 loans are available for only 340/month!<BR>
WE'RE PRACTICALLY GIVING AWAY MONEY!<BR><BR>
Think your credit is too bad to get a deal like this?<BR>
THINK AGAIN!<BR>
We will have you saving your money in no time!<BR>
Are you ready to save your money?<BR><BR>
<a href="http://bubbleactions.com">http://bubbleactions.com</a><BR><BR>
Regards,<BR>
Alfred Keller
</BODY>
</HTML>
-- END OF SPAM --
See:
IP 222.184.137.16
http://www.moensted.dk/spam/?addr=222.184.137.16
http://spamcop.net/w3m?action=checkblock&ip=222.184.137.16
inetnum: 222.184.0.0 - 222.191.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
route: 222.184.0.0/13
descr: ChinaNet Jiangsu Province Network
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 222.176.0.0 to 222.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
1 SBL listings for IPs under the responsibility of CHINANET-JS
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-JS
See:
bubbleactions.com IP 222.122.149.99
dns2.bubbleactions.com [222.122.149.99]
dns1.bubbleactions.com [222.122.149.99]
ns2.hirrupyes.com [222.122.149.99]
ns1.hirrupyes.com [211.156.254.115]
bubbleactions.com has no MX records
http://www.moensted.dk/spam/?addr=222.122.149.99
http://korea.services.net/blocked.phtml?addr=222.122.149.99
http://www.spamhaus.org/query/bl?ip=222.122.149.99
More 222.122.149.99 sightings:
http://groups.google.com/groups/search?q=222.122.149.99+group%3A*abuse
Org Name : Korea Telecom
Service Name : KORNET
route: 222.122.0.0/16
descr: Korea Telecom, Seoul, Korea
origin: AS4766
mnt-by: MAINT-AS4766
changed: chs...@soback.kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 222.122.0.0 to 222.122.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45236
222.122.149.99/32 is listed on the Spamhaus Block List (SBL)
06-Aug-2006 00:25 GMT | SR23
Spam webhosting - busyjoints.com etc
19 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/
Domain name: bubbleactions.com
Registrant Contact:
PrivateDomainRegistrations
Gary Reed (publicdomains[]hushmail.com)
+1.6047678695
Fax: +1.5555555555
150-3495 Cambie Street
Vancouver, BC V5Z 4R3
CA
Administrative Contact:
PrivateDomainRegistrations
Gary Reed (public...@hushmail.com)
+1.6047678695
Fax: +1.5555555555
150-3495 Cambie Street
Vancouver, BC V5Z 4R3
CA
Technical Contact:
PrivateDomainRegistrations
Gary Reed (public...@hushmail.com)
+1.6047678695
Fax: +1.5555555555
150-3495 Cambie Street
Vancouver, BC V5Z 4R3
CA
Status: Locked
Name Servers:
ns1.hirrupyes.com
ns2.hirrupyes.com
Creation date: 08 Aug 2006 05:33:03
Expiration date: 08 Aug 2007 05:33:03
More bubbleactions.com sightings:
http://groups.google.com/groups/search?q=bubbleactions.com+group%3A*abuse
And see more registrant publicdomains[]hushmail.com sightings:
http://groups.google.com/groups/search?q=%22publi...@hushmail.com%22+group%3A*abuse
See:
ns1.hirrupyes.com IP 211.156.254.115
ns1.hirrupyes.com has no MX records -> hirrupyes.com has no MX records
http://www.moensted.dk/spam/?addr=211.156.254.115
Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
More hirrupyes.com sightings:
http://groups.google.com/groups/search?q=hirrupyes.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/089d784837a20689
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: