[email] [LowestMortgageQuotes] (brokenpotatoes.com - groobers.com) Highest priority: interest rates are rising again.
TomezNet
IP 81.190.205.214 host-81-190-205-214.gorzow.mm.pl
(at ns1.kalisz.mm.pl / multimedia.pl / szel-sat.pl)
Spamvert:
brokenpotatoes.com IP 222.122.60.250
(SBL41341, SBL41883, SBL45147) (at rev1.kornet.net)
ns2.groobers.com IP 221.4.247.57
(SBL45146) (at cncgroup-gd)
Web: LowestMortgageQuotes Š 2006
More LowestMortgageQuotes sightings:
http://groups.google.com/groups/search?q=LowestMortgageQuotes+group%3A*abuse
Forged Logos:
TRUSTE
VeriSign
More info below:
====================
X-SID-PRA: NewsAlert <Bianca...@address.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW40xsBN0en71ZhNC2Mfn9WBAbr+bDLKrhf0=
Received: from tomts12-srv.bellnexxia.net ([209.226.175.56]) by
bay0-pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 3 Aug 2006 09:24:50 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip5.bellnexxia.net with ESMTP; 03 Aug 2006 12:24:48 -0400
Received: (qmail 32498 invoked by uid 110); 3 Aug 2006 12:18:07 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 32284 invoked from network); 3 Aug 2006 12:17:59 -0400
Received: from host-81-190-205-214.gorzow.mm.pl (81.190.205.214)
by xx..xx..xx.net with SMTP; 3 Aug 2006 12:17:59 -0400
Date: Thu, 03 Aug 2006 12:15:56 -0500
From: "NewsAlert" <Bianca...@address.com>
Message-ID: <10161.risky@turnaround>
To: xx..xx@xx..xx.com
Subject: Highest priority: interest rates are rising again.
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Return-Path: Bianca...@address.com
X-OriginalArrivalTime: 03 Aug 2006 16:24:50.0698 (UTC)
FILETIME=[581CB6A0:01C6B719]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
<HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY bgColor=#ffffff>
<BR>
Secure a low rate today, before it's too late.<BR><BR>
Don't beat yourself up for not doing it earlier.<BR>
Every day you wait you lose hundreds of dollars.<BR>
If you're even considering a mortgage or refinance, you've got to make
up your mind fast, before rates go up, there is still time.<BR><BR>
Click here to learn more on how to get the lowest rates, today<BR><BR>
<a href="http://brokenpotatoes.com/">http://brokenpotatoes.com/</a>
</BODY>
</HTML>
-- END OF SPAM --
See:
IP 81.190.205.214 host-81-190-205-214.gorzow.mm.pl
http://www.moensted.dk/spam/?addr=81.190.205.214
http://dsbl.org/listing?81.190.205.214
inetnum: 81.190.204.0 - 81.190.207.255
netname: MULTIMEDIA-POLSKA-5
descr: Multimedia Polska Sp. z o.o.
descr: Cable TV Provider
descr: Gdynia
country: PL [Poland]
route: 81.190.200.0/21
descr: Networks in Poland
origin: AS30824
notify: l...@multimedia.pl
mnt-by: SZELSAT-MNT
changed: p.s...@multimedia.pl
ASN: 30824
ASN Name: MULTIMEDIA-AS-2 (Multimedia Polska Sp.z o.o.)
Country IP Range: 81.190.0.0 to 81.190.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=30824
1 SBL listings for IPs under the responsibility of mm.pl
http://www.spamhaus.org/sbl/listings.lasso?isp=mm.pl
See:
brokenpotatoes.com IP 222.122.60.250
dns1.brokenpotatoes.com
dns2.brokenpotatoes.com
ns2.groobers.com [221.4.247.57]
ns1.groobers.com [222.122.60.250]
brokenpotatoes.com has no MX records
http://www.moensted.dk/spam/?addr=222.122.60.250
http://www.spamhaus.org/query/bl?ip=222.122.60.250
More 222.122.60.250 sightings:
http://groups.google.com/groups/search?q=222.122.60.250+group%3A*abuse
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41341
222.122.60.0/24 is listed on the Spamhaus Block List (SBL)
04-May-2006 08:33 GMT | SR02
dirty block
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41883
222.122.60.0/22 is listed on the Spamhaus Block List (SBL)
01-Aug-2006 20:59 GMT | SR02
www.m37m.com [222.122.60.161] (escalation)
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45147
222.122.60.250/32 is listed on the Spamhaus Block List (SBL)
02-Aug-2006 16:18 GMT | SR08
18 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
Org Name : Korea Telecom
Service Name : KORNET
route: 222.122.0.0/16
descr: Korea Telecom, Seoul, Korea
origin: AS4766
mnt-by: MAINT-AS4766
changed: chs...@soback.kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 222.122.0.0 to 222.122.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
Let see whois:
No match for domain "BROKENPOTATOES.COM"
See:
ns2.groobers.com IP 221.4.247.57
ns2.groobers.com has no MX records -> groobers.com has no MX records
http://www.moensted.dk/spam/?addr=221.4.247.57
http://www.spamhaus.org/query/bl?ip=221.4.247.57
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45146
221.4.247.57/32 is listed on the Spamhaus Block List (SBL)
02-Aug-2006 16:15 GMT | SR08
2 SBL listings for IPs under the responsibility of cncgroup-gd
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gd
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/
Domain name: groobers.com
Registrant Contact:
PrivateDomainRegistrations
Gary Reed (publicdomains[]hushmail.com)
+1.6047678695
Fax: +1.5555555555
150-3495 Cambie Street
Vancouver, BC V5Z 4R3
CA
Administrative Contact:
PrivateDomainRegistrations
Gary Reed (public...@hushmail.com)
+1.6047678695
Fax: +1.5555555555
150-3495 Cambie Street
Vancouver, BC V5Z 4R3
CA
Technical Contact:
PrivateDomainRegistrations
Gary Reed (public...@hushmail.com)
+1.6047678695
Fax: +1.5555555555
150-3495 Cambie Street
Vancouver, BC V5Z 4R3
CA
Status: Locked
Name Servers:
ns1.groobers.com
ns2.groobers.com
Creation date: 02 Aug 2006 17:27:40
Expiration date: 02 Aug 2007 17:27:40
More 221.4.247.57 sightings:
http://groups.google.com/groups/search?q=221.4.247.57+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/ee0e8af31437b8c9
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: