Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [Replica Watches] (tasktosatisfy.com) Fw: Present the gift of chic and class.

0 views
Skip to first unread message

TomezNet

unread,
Feb 4, 2006, 1:01:38 PM2/4/06
to
Received From:
IP 58.33.180.105
(at CHINANET-SH)

Spamvert:
www.kgip.5.tasktosatisfy.com IP 218.62.100.50
(SBL36927 / SBL37144) (at cncgroup-jl)

AND:
www.areaofthebest.com IP 218.62.100.50
(SBL36927 / SBL37144) (at cncgroup-jl)

Prime Replica Watches spammer.

Maillist:
Optinmail-Pro.com IP N/A

Received at a spamtrap.

More info below:
====================
X-SID-PRA: whitney vantreese <li...@michigandental.com>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ46bhMTfePt+1jGQDGzZKz7Nomp+UR+aLrQ=
Received: from tomts34-srv.bellnexxia.net ([209.226.175.108]) by
bay0-pamc1-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 4 Feb 2006 07:53:21 -0800
Received: from xx..xx..xx.net ([207.58.1....])
by toip1.bellnexxia.net with ESMTP; 04 Feb 2006 10:53:15 -0500
Received: (qmail 27585 invoked by uid 110); 4 Feb 2006 15:53:14 -0000
Delivered-To: 17-xx..xx@xx..xx.com
Received: (qmail 26946 invoked from network); 4 Feb 2006 15:53:14 -0000
Received: from unknown (HELO michigandental.com) (58.33.180.105)
by xx..xx..xx.net with SMTP; 4 Feb 2006 15:53:14 -0000
Message-ID: <8D5758CE...@michigandental.com>
Date: Sat, 04 Feb 2006 11:42:26 +0000
Reply-To: "whitney vantreese" <li...@michigandental.com>
From: "whitney vantreese" <li...@michigandental.com>
User-Agent: QUALCOMM Windows Eudora Version 5.1
MIME-Version: 1.0
To: xx..xx@xx..xx.com
Subject: Fw: Present the gift of chic and class.
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: li...@michigandental.com
X-OriginalArrivalTime: 04 Feb 2006 15:53:21.0186 (UTC)
FILETIME=[1F851020:01C629A3]

My greetings,

I was so inspired when I was forwarded this that I thought I should
extend
the luxriance.

Until next time,

----- Original Message -----
From: "Bennett" <ber...@abdi.kz>
To: "whitney vantreese" <li...@michigandental.com>
Sent: Monday, January 30, 2006 2:42 PM
Subject: Present the gift of chic and class.

I recall that you have an exquisite refinement and also how you
appreciate
a terrific purchase. You should totally purchase one for yourself. I
found
something so cool on the worldweb today!
www.kgip.5.tasktosatisfy.com/jam/

You deserve to have a luxury wrist accessory and it won't cut apart
your
paycheck much.

Since you've been so helpful to me, I wanted to tell you this excellent
deal I found out about on this website.

* annoy traffic In jam the history of structural engineering,
steel-frame
high-rise buildings have never been brought down due to fires either
before
or since 9/11, so how can fires have brought down three in one day? How
is
this possible?* The BBC has reported that at least five of the nineteen
alleged "hijackers" have turned up alive and well living in Saudi
Arabia,
yet according to suppose the FBI, they were among those furniture
killed
in the attacks. How is this possible?
to the candidate, stating that if he and technique Lord detective
Tynedale*
Frank DeMartini, a project manager for the WTC, hurt said the buildings
were
designed with load redistribution capabilities to withstand the impact
of
airliners, whose effects would be like "puncturing mosquito netting
with a
pencil." role Yet they completely collapsed. How is this possible?
* dentist Since the melting point of steel is about 2,700*F, the
temperature of jet fuel fires does not exceed 1,800*F under optimal
conditions, and UL certified the steel to 2,000*F for six, the
buildings
cannot wrist have collapsed due to heat from the fires. How is this
possible?
* Flight 77, which allegedly hit the building, left the radar screen in
the
vicinity of the Ohio/Kentucky border, only to "reappear" in very close
proximity to the Pentagon shortly before pressure treatment impact.
How
is this possible? * Foreign "terrorists" who were sensible clever
enough to
coordinate overuse hijacking four commercial airliners seemingly did
not
know that the least damage to the factor Pentagon would be done by
hitting
its west wing. How is this possible?
That's emotion not to say she's become a Belgium deserve
ill/well,better/of
real Steelers fan. Rice is loyal to the Cleveland Browns.

-- END OF SPAM --

More Optinmail-Pro.com sightings:
http://groups.google.com/groups?q=Optinmail-Pro.com+group%3A*abuse&start=0&scoring=d&

See:
IP 58.33.180.105

http://www.moensted.dk/spam/?addr=58.33.180.105
http://cbl.abuseat.org/lookup.cgi?ip=58.33.180.105
http://www.spamhaus.org/query/bl?ip=58.33.180.105

inetnum: 58.33.180.0 - 58.33.183.255
netname: CHINANET-SH-BBAD-203
descr: Chinanet shanghai boardband adsl 203
country: CN

route: 58.32.0.0/13
descr: China Telecom ShangHai province
origin: AS4134
mnt-by: MAINT-AS4134
changed: tia...@cndata.com

10 SBL/ROKSO listings for IPs under the responsibility of CHINANET-SH
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-SH

See:
www.kgip.5.tasktosatisfy.com IP 218.62.100.50
ns2.areaofthebest.com [218.62.100.51]
ns1.areaofthebest.com [218.12.197.158]
ns1.tasktosatisfy.com [218.62.100.50]
ns2.tasktosatisfy.com [218.62.100.50]

www.kgip.5.tasktosatisfy.com has no MX records ->
kgip.5.tasktosatisfy.com has no MX records -> 5.tasktosatisfy.com has
no MX records -> tasktosatisfy.com has no MX records

http://www.moensted.dk/spam/?addr=218.62.100.50
http://www.spamhaus.org/query/bl?ip=218.62.100.50

inetnum: 218.62.100.48 - 218.62.100.55
netname: BS-CHAXIANG-NETBAR
country: CN

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL36927
218.62.100.48/29 is listed on the Spamhaus Block List (SBL)

20-Jan-2006 13:11 GMT | SR14

Spam hosting in another Chinese NetBar ...

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL37144
218.62.100.0/24 is listed on the Spamhaus Block List (SBL)

21-Jan-2006 21:32 GMT | SR15

dirty block

10 SBL/ROKSO listings for IPs under the responsibility of cncgroup-jl
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-jl

Let see whois:
Registrar: TODAYNIC.COM, INC.

Domain name: tasktosatisfy.com
Status:lock

Registrant:
Boqin Zhou Boqin Zhou fredrick_hundley[]hotmail.com
+86.02583223786 +86.02583223786
oom 505, 28 North Zhongshan Road
Nan Jing Shi JS 210009
CN

Administrative Contact:
Boqin Zhou Boqin Zhou fredrick_hundley[]hotmail.com
+86.02583223786 +86.02583223786
oom 505, 28 North Zhongshan Road
Nan Jing Shi JS 210009
CN

Technical Contact:
Boqin Zhou Boqin Zhou fredrick...@hotmail.com
+86.02583223786 +86.02583223786
oom 505, 28 North Zhongshan Road
Nan Jing Shi JS 210009
CN

Billing Contact:
Boqin Zhou Boqin Zhou fredrick...@hotmail.com
+86.02583223786 +86.02583223786
oom 505, 28 North Zhongshan Road
Nan Jing Shi JS 210009
CN

Nameserver Information:
ns1.areaofthebest.com 218.12.197.158
ns2.areaofthebest.com 218.62.100.51

Create: 2006-01-07 14:56:54
Update: 2006-01-25
Expired: 2007-01-07

More 218.62.100.50 sightings:
http://groups.google.com/groups?q=218.62.100.50+group%3A*abuse

See:
www.areaofthebest.com IP 218.62.100.50
ns1.areaofthebest.com [218.12.197.158]
ns1.areaofthebest.com [218.62.100.50]
ns2.areaofthebest.com [218.62.100.51]

ns1.areaofthebest.com has no MX records -> [areaofthebest.com has 1 MX
record mail.areaofthebest.com.(12300)]

http://www.moensted.dk/spam/?addr=218.62.100.50
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL36927

ns1.areaofthebest.com [218.12.197.158]

More 218.12.197.158 sightings:
http://groups.google.com/groups?q=218.12.197.158+group%3A*abuse&start=0&scoring=d&

http://www.moensted.dk/spam/?addr=218.12.197.158

inetnum: 218.11.0.0 - 218.12.255.255
netname: CNCGROUP-HE

route: 218.12.0.0/16
descr: CNC Group CHINA169 Hebei Province Network
descr: CNC Group HeBei Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net

http://www.spamhaus.org/SBL/sbl.lasso?query=SBL30286
218.12.197.158/32 is listed on the Spamhaus Block List (SBL)

13-Jan-2006 22:07 GMT | SR02

spammer DNS

Listed: August 14 2005

2 SBL listings for IPs under the responsibility of cncgroup-he
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-he

Let see whois:
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA
DNS.COM.CN

Domain Name.......... areaofthebest.com
Creation Date........ 2005-08-01 16:57:24
Registration Date.... 2005-08-01 16:57:24
Expiry Date.......... 2006-08-01 16:57:24
Organisation Name.... Zhongyuan CHEN
Organisation Address. 15 Liaoyang Street Nangang District
Organisation Address.
Organisation Address. Harbin
Organisation Address. 150001
Organisation Address. HL
Organisation Address. CN

Admin Name........... Zhongyuan CHEN
Admin Address........ 15 Liaoyang Street Nangang District
Admin Address........
Admin Address........ Harbin
Admin Address........ 150001
Admin Address........ HL
Admin Address........ CN
Admin Email.......... wuabsuyh[]hotmail.com
Admin Phone.......... +86.4518376123
Admin Fax............ +86.4518376123

Tech Name............ he wenjie
Tech Address......... 706,huanandianli building,shennanzhong rd
Tech Address.........
Tech Address......... shenzhen
Tech Address......... 518031
Tech Address......... GD
Tech Address......... CN
Tech Email........... agent1843[]agent.dns.com.cn
Tech Phone........... +86.75561320100
Tech Fax............. +86.75561320100

Bill Name............ he wenjie
Bill Address......... 706,huanandianli building,shennanzhong rd
Bill Address.........
Bill Address......... shenzhen
Bill Address......... 518031
Bill Address......... GD
Bill Address......... CN
Bill Email........... agen...@agent.dns.com.cn
Bill Phone........... +86.75561320100
Bill Fax............. +86.75561320100
Name Server.......... ns2.areaofthebest.com
Name Server.......... ns1.areaofthebest.com

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/b8e35e4a2cceb9b1

AND Thread:
Subject: Replica Watch spammers using Geocities redirects
http://groups.google.com/group/news.admin.net-abuse.email/browse_thread/thread/839245670bf6094c/8de08aaf6f77c36c#8de08aaf6f77c36c

See:
Optinmail-Pro.com IP N/A

Registrar: CAPITOLDOMAINS, LLC (whois.capdom.com)
Status: REDEMPTIONPERIOD [expired, past registrar grace period]
Dates: Created 05-aug-2005 Updated 11-jan-2006 Expires
05-aug-2006
DNS Servers: NS1.2N4C0.COM NS2.2N4C0.COM NS3.2N4C0.COM

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

TomezNet

unread,
Feb 4, 2006, 2:02:06 PM2/4/06
to
Received From:
IP 58.33.180.105 (at CHINANET-SH)

Spamvert:
www.kgip.5.tasktosatisfy.com IP 218.62.100.50
(SBL36927 / SBL37144) (at cncgroup-jl)

AND:
ns1.areaofthebest.com [218.12.197.158]
(SBL30286) (at CNCGROUP-HE)

Prime Replica Watches spammer.

Maillist:
Optinmail-Pro.com IP N/A

Received at an address harvested from domain registration.

More info below:
====================
X-SID-PRA: whitney vantreese <li...@michigandental.com>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ46bhMTfePt+1jGQDGzZKz7Nomp+UR+aLrQ=

Received: from tomts11-srv.bellnexxia.net ([209.226.175.55]) by
bay0-pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 4 Feb 2006 07:53:17 -0800


Received: from xx..xx..xx.net ([207.58.1....])

by toip4.bellnexxia.net with ESMTP; 04 Feb 2006 10:53:16 -0500
Received: (qmail 27520 invoked by uid 110); 4 Feb 2006 15:53:14 -0000
Delivered-To: xx..xx@xx..xx.com


Received: (qmail 26946 invoked from network); 4 Feb 2006 15:53:14 -0000
Received: from unknown (HELO michigandental.com) (58.33.180.105)

by xx..xx..xx.com with SMTP; 4 Feb 2006 15:53:14 -0000


Message-ID: <8D5758CE...@michigandental.com>
Date: Sat, 04 Feb 2006 11:42:26 +0000
Reply-To: "whitney vantreese" <li...@michigandental.com>
From: "whitney vantreese" <li...@michigandental.com>
User-Agent: QUALCOMM Windows Eudora Version 5.1
MIME-Version: 1.0
To: xx..xx@xx..xx.com
Subject: Fw: Present the gift of chic and class.
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: li...@michigandental.com

X-OriginalArrivalTime: 04 Feb 2006 15:53:17.0336 (UTC)
FILETIME=[1D399980:01C629A3]

My greetings,

Until next time,

See:
IP 58.33.180.105

http://www.moensted.dk/spam/?addr=218.62.100.50
http://www.spamhaus.org/query/bl?ip=218.62.100.50

route: 218.62.0.0/17
descr: CNC Group


origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net

route: 218.62.0.0/17
descr: PNAP-SEA USEI-routes
origin: AS4134
mnt-by: INAP-MAINT-RADB
changed: des...@internap.com

20-Jan-2006 13:11 GMT | SR14

Spam hosting in another Chinese NetBar ...

21-Jan-2006 21:32 GMT | SR15

dirty block

10 SBL/ROKSO listings for IPs under the responsibility of cncgroup-jl
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-jl

More 218.62.100.50 sightings:
http://groups.google.com/groups?q=218.62.100.50+group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/60adc50d4774319e

0 new messages