[email] [LowestMortgageQuotes] (bananayoke.net - g0ow.net) News About Mortgage Rates Wed, 02 Aug 2006 06:29:02 -0700
TomezNet
IP 83.157.120.114 dyn-83-157-120-114.ppp.tiscali.fr
(at ns.libertysurf.net / fr.tiscali.com)
Spamvert:
bananayoke.net IP 222.122.60.250
(SBL41341 - SBL41883 - SBL45147) (at rev2.kornet.net)
ns2.g0ow.net [222.122.60.250]
ns1.g0ow.net [221.4.247.57] => SBL45146
(at ns1.cnc-gd.net / CNCGROUP-GD)
Web: LowestMortgageQuotes Š 2006
More LowestMortgageQuotes sightings:
http://groups.google.com/groups/search?q=LowestMortgageQuotes+group%3A*abuse
Forged Logos:
TRUSTE
VeriSign
More info below:
====================
X-SID-PRA: NewsAlert <Tiffan...@allsaintsfan.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW41hs2qOOYDfbnHY/IihxSljAel3C8WLpJY=
Received: from tomts30-srv.bellnexxia.net ([209.226.175.104]) by
bay0-pamc1-f4.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 2 Aug 2006 05:36:58 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip5.bellnexxia.net with ESMTP; 02 Aug 2006 08:36:56 -0400
Received: (qmail 3137 invoked by uid 110); 2 Aug 2006 08:36:55 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 3125 invoked from network); 2 Aug 2006 08:36:54 -0400
Received: from dyn-83-157-120-114.ppp.tiscali.fr (83.157.120.114)
by xx..xx..xx.net with SMTP; 2 Aug 2006 08:36:54 -0400
Date: Wed, 02 Aug 2006 11:36:02 -0200
From: "NewsAlert" <Tiffan...@allsaintsfan.com>
Message-ID: <10187.dominique@staple>
To: xx..xx@xx..xx.com
Subject: News About Mortgage Rates Wed, 02 Aug 2006 06:29:02 -0700
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Return-Path: Tiffan...@allsaintsfan.com
X-OriginalArrivalTime: 02 Aug 2006 12:36:58.0359 (UTC)
FILETIME=[58599870:01C6B630]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
<HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY bgColor=#ffffff>
<BR>Hello,<BR><BR>
We spoke a few days ago and I'd like to confirm everything now.<BR>
Please go over the information below and let me know if you have any
questions.<BR><BR>
<a href="http://bananayoke.net">http://bananayoke.net</a><BR><BR>
We are accepting your form. Your status has been accepted.<BR>
We need to confirm your details one more time.<BR>
Just check the URL above and fill out our last form.<BR><BR>
Thank you,<BR>
Clement Schultz
</BODY>
</HTML>
-- END OF SPAM --
See:
IP 83.157.120.114 dyn-83-157-120-114.ppp.tiscali.fr
http://www.moensted.dk/spam/?addr=83.157.120.114
http://cbl.abuseat.org/lookup.cgi?ip=83.157.120.114
http://www.spamhaus.org/query/bl?ip=83.157.120.114
inetnum: 83.156.0.0 - 83.159.255.255
netname: TIF-200401
descr: Telecom Italia France Broadband Pools
country: FR [France]
route: 83.152.0.0/13
descr: Tiscali France
origin: AS12876
mnt-by: MNT-TISCALIFR
changed: jerome...@fr.tiscali.com
ASN: 12876
ASN Name: AS12876 (Telecom Italia France)
Country IP Range: 83.152.0.0 to 83.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=12876
2 SBL listings for IPs under the responsibility of tiscali.fr
http://www.spamhaus.org/sbl/listings.lasso?isp=tiscali.fr
See:
bananayoke.net IP 222.122.60.250
ns2.g0ow.net [222.122.60.250]
ns1.g0ow.net [221.4.247.57]
dns1.bananayoke.net [222.122.60.250]
dns2.bananayoke.net [222.122.60.250]
bananayoke.net has no MX records
http://www.moensted.dk/spam/?addr=222.122.60.250
http://www.spamhaus.org/query/bl?ip=222.122.60.250
http://korea.services.net/blocked.phtml?addr=222.122.60.250
More 222.122.60.250 sightings:
http://groups.google.com/groups/search?q=222.122.60.250+group%3A*abuse
Org Name : Korea Telecom
Service Name : KORNET
route: 222.122.0.0/16
descr: Korea Telecom, Seoul, Korea
origin: AS4766
mnt-by: MAINT-AS4766
changed: chs...@soback.kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 222.122.0.0 to 222.122.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45147
222.122.60.250/32 is listed on the Spamhaus Block List (SBL)
02-Aug-2006 16:18 GMT | SR08
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41341
222.122.60.0/24 is listed on the Spamhaus Block List (SBL)
04-May-2006 08:33 GMT | SR02
dirty block
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41883
222.122.60.0/22 is listed on the Spamhaus Block List (SBL)
13-May-2006 10:21 GMT | SR02
www.m37m.com [222.122.60.161] (escalation)
17 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
Let see whois:
No match for "BANANAYOKE.NET"
See:
ns1.g0ow.net IP 221.4.247.57
ns1.g0ow.net has no MX records -> g0ow.net has no MX records
http://www.moensted.dk/spam/?addr=221.4.247.57
http://www.spamhaus.org/query/bl?ip=221.4.247.57
inetnum: 221.4.0.0 - 221.5.127.255
netname: CNCGROUP-GD
descr: CNC Group Guangdong province network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
route: 221.4.0.0/16
descr: CNC Group GuangDong Network
origin: AS17816
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 17816
ASN Name: CHINA169-GZ (CNCGROUP IP network China169 Guangzhou MAN)
Country IP Range: 221.0.0.0 to 221.7.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=17816
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45146
221.4.247.57/32 is listed on the Spamhaus Block List (SBL)
02-Aug-2006 16:15 GMT | SR08
3 SBL listings for IPs under the responsibility of cncgroup-gd
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gd
Let see whois:
No match for domain "G0OW.NET"
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/2d66b6b703dda552
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: