Spamvert:
rutsoms.com IP 125.208.6.216
(at ns2.euncn.com / primetele.com)
rutsoms.com IP 60.28.239.29
(at CNCGROUP-TJ)
HGH - Human growth hormone spammer => see more sightings:
http://groups.google.com/groups/search?q=%22Human+growth+hormone%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: Olen Arnold <con...@0800promote.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW42V3VqR36p6ozrXo8nX9wgcrSjsZHHNCzQ=
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by
bay0-pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 17 Aug 2006 08:43:36 -0700
Received: from [MUNGED]
by toip4.bellnexxia.net with ESMTP; 17 Aug 2006 11:43:29 -0400
Message-Id: <597aih$oe8...@toip4.bellnexxia.net>
Received: (qmail 1978 invoked by uid 110); 17 Aug 2006 11:43:29 -0400
Delivered-To: [MUNGED]
Received: (qmail 1925 invoked from network); 17 Aug 2006 11:43:28 -0400
Received: from static-ip-cr2007141152.cable.net.co (200.71.41.152)
by [MUNGED] with SMTP; 17 Aug 2006 11:43:28 -0400
From: "Olen Arnold" <con...@0800promote.com>
To: [MUNGED]
Subject: Your health and well-being can be restored
Date: Thu, 17 Aug 2006 15:43:29 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_006A_01C6C1E9.FA55B720"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1478
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478
Return-Path: con...@0800promote.com
X-OriginalArrivalTime: 17 Aug 2006 15:43:36.0457 (UTC)
FILETIME=[E721FF90:01C6C213]
This is a multi-part message in MIME format.
------=_NextPart_000_006A_01C6C1E9.FA55B720
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Feel oung again with Regenisis HGH
Just how often did you recall the times of youth when you felt a lot=20
better and full of energy? There is nothing bad in growing older -
except for the reduced body resource, declining health and wrinkles.
Don't miss your ticket to the train which will bring you to your
best=20
mental and health condition!
Human Growth Hormone was created to slow down your aging process and
make you feel and look a lot better. From smoother skin and thicker=20
hair
to better cardiac function and even improvements in your intimate life.
Rejuvenation has never been more real.
Don't miss our hottest special offers of Regenesis HGH, a sophisticated
method of regaining your youth!Click here to view special offers
ending=20
soon!don't receive more
------=_NextPart_000_006A_01C6C1E9.FA55B720
Content-Type: text/html;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html;
charset=Windows-1252">
<META content="MSHTML 6.00.2800.1478" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY><html>
<body>
<center>
<b>
<a href=3D"http://www.rutsoms.com/g/?90&HGfHDjSDGhGJzxdG675F3d">Feel=20
oung again with Regenisis HGH</a> </b>
</center>
<br> <br>
Just how often did you recall the times of youth when you felt a lot=20
better and full of energy? There is nothing bad in growing older -
except for the reduced body resource, declining health and wrinkles.
Don't miss your ticket to the train which will bring you to your
best=20
mental and health condition!<br> <br>
Human Growth Hormone was created to slow down your aging process and
make you feel and look a lot better. From smoother skin and thicker=20
hair to better cardiac function and even improvements in your intimate
life.
Rejuvenation has never been more real.<br> <br>
Don't miss our hottest special offers of Regenesis HGH, a sophisticated
method of regaining your youth!<br> <br>
<center>
<b>
<a
href=3D"http://www.rutsoms.com/g/?90&HGfHDjSDGhGJzxdG675F3d">Click=20
here to view special offers ending soon!</a>
</b>
</center>
<br> <br> <br> <br> <br> <br>
<font size=3D"2">
<a href=3D"http://www.rutsoms.com/u.php">don't receive more</a>
</font>
</body> </html></BODY></HTML>
------=_NextPart_000_006A_01C6C1E9.FA55B720--
-- END OF SPAM --
See:
IP 200.71.41.152 static-ip-cr2007141152.cable.net.co
http://www.moensted.dk/spam/?addr=200.71.41.152
inetnum: 200.71.41/24
status: reallocated
owner: TV Cable S.A. Static IP Block
ownerid: CO-TCSS-LACNIC
responsible: Network Security Team
ASN: 10620
ASN Name: LACNIC-10620
Country IP Range: 200.71.32.0 to 200.71.63.255
Country fraud profile: High
http://www.cidr-report.org/cgi-bin/as-report?as=10620
4 SBL listings for IPs under the responsibility of CABLE.NET.CO
http://www.spamhaus.org/sbl/listings.lasso?isp=CABLE.NET.CO
See:
rutsoms.com IP 125.208.6.216
rutsoms.com IP 60.28.239.29
ns1.gubrel.com [125.208.6.216] [TTL=172800] [CN]
ns2.pozgel.com [60.28.239.29] [TTL=172800] [CN]
ns1.zotlo.com A IN 153989 211.91.232.126
ns2.zotlo.com A IN 153989 58.20.108.121
relay.rutsoms.com A IN 60 60.28.239.29
[rutsoms.com has 1 MX record relay.rutsoms.com (10)]
http://www.moensted.dk/spam/?addr=125.208.6.216
http://www.spambag.org/cgi-bin/spambag?mailfrom=primetelecom
No PTR records exist for 125.208.6.216 at ns2.euncn.com
inetnum: 125.208.0.0 - 125.208.31.255
netname: PRIMETELECOM
descr: Beijing Primezone Technologies Inc.
descr: 44 Fu Cheng Road,Beijing,P.R.China
country: CN
ASN: 24416
ASN Name: CNNIC-PRIMETELECOM-AP (Beijing Primezone Technologies Inc.)
Country IP Range: 125.208.0.0 to 125.208.63.255
http://www.cidr-report.org/cgi-bin/as-report?as=24416
4 SBL listings for IPs under the responsibility of primetelecom.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=primetelecom.cn
Let see whois.leadnetworks.com:
Registrar: LEAD NETWORKS DOMAINS PVT. LTD.
Registration Service Provided By: LEAD NETWORKS DOMAINS PVT. LTD
Contact: +91.2226300138
Domain Name: RUTSOMS.COM
Registrant:
sharrel d
sharrel d lewis (rozinzon[]mindless.com)
3912 E Minton Circle
Mesa
Arizona,85215
US
Tel. +001.7144442724
Creation Date: 12-Aug-2006
Expiration Date: 12-Aug-2007
Domain servers in listed order:
ns2.pozgel.com
ns1.gubrel.com
Administrative Contact:
sharrel d
sharrel d lewis (rozi...@mindless.com)
3912 E Minton Circle
Mesa
Arizona,85215
US
Tel. +001.7144442724
Technical Contact:
sharrel d
sharrel d lewis (rozi...@mindless.com)
3912 E Minton Circle
Mesa
Arizona,85215
US
Tel. +001.7144442724
Billing Contact:
sharrel d
sharrel d lewis (rozi...@mindless.com)
3912 E Minton Circle
Mesa
Arizona,85215
US
Tel. +001.7144442724
Status:LOCKED
See:
rutsoms.com IP 60.28.239.29
http://www.moensted.dk/spam/?addr=60.28.239.29
More 60.28.239.29 sightings:
http://groups.google.com/groups/search?q=60.28.239.29+group%3A*abuse&start=0&scoring=d&
inetnum: 60.28.239.0 - 60.28.240.255
netname: chinacomm-COMMUNICATIONS-ltd
country: CN
descr: CECT-CHINACOMM COMMUNICATIONS Co.,Ltd.
route: 60.28.0.0/15
descr: CNC Group CHINA169 Tianjin Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
person: huang zheng
nic-hdl: HZ19-AP
e-mail: ipa...@ywb.online.tj.cn
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country IP Range: 60.16.0.0 to 60.31.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837
5 SBL listings for IPs under the responsibility of CNCGROUP-TJ
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-TJ
More rutsoms.com sightings:
http://groups.google.com/groups/search?q=rutsoms.com+group%3A*abuse
See:
ns1.gubrel.com IP 125.208.6.216
ns1.gubrel.com has no MX records -> gubrel.com has no MX records
Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Domain Name.......... gubrel.com
Creation Date........ 2006-08-04 00:59:30
Registration Date.... 2006-08-04 00:59:30
Expiry Date.......... 2007-08-04 00:59:30
Organisation Name.... liu fei
Organisation Address. guang zhou
Organisation Address.
Organisation Address. guang zhou
Organisation Address. 512000
Organisation Address. GD
Organisation Address. CN
Admin Name........... liu fei
Admin Address........ guang zhou
Admin Address........
Admin Address........ guang zhou
Admin Address........ 512000
Admin Address........ GD
Admin Address........ CN
Admin Email.......... admin[]gff.com
Admin Phone.......... +86.2083256545
Admin Fax............ +86.2083256464
Tech Name............ liu fei
Tech Address......... guang zhou
Tech Address.........
Tech Address......... guang zhou
Tech Address......... 512000
Tech Address......... GD
Tech Address......... CN
Tech Email........... ad...@gff.com
Tech Phone........... +86.2083256545
Tech Fax............. +86.2083256464
Bill Name............ liu fei
Bill Address......... guang zhou
Bill Address.........
Bill Address......... guang zhou
Bill Address......... 512000
Bill Address......... GD
Bill Address......... CN
Bill Email........... ad...@gff.com
Bill Phone........... +86.2083256545
Bill Fax............. +86.2083256464
Name Server.......... ns2.gubrel.com
Name Server.......... ns1.gubrel.com
See More Registrant admin[]gff.com sightings:
http://groups.google.com/groups/search?q=%22a...@gff.com%22+group%3A*abuse
See:
ns2.pozgel.com IP 60.28.239.29
ns2.pozgel.com has no MX records -> pozgel.com has no MX records
More pozgel.com sightings:
http://groups.google.com/groups/search?q=pozgel.com+group%3A*abuse
See:
ns1.zotlo.com IP 211.91.232.126
ns1.zotlo.com has no MX records -> zotlo.com has no MX records
More zotlo.com sightings:
http://groups.google.com/groups/search?q=zotlo.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/25a9fd3f0f2cb105
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: