Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [counterfeit] (passiveglory.com - dmmrq.com) quality replica timepieces

0 views
Skip to first unread message

TomezNet

unread,
Aug 21, 2006, 5:04:56 PM8/21/06
to
Received From:
IP 83.7.38.234 abfa234.neoplus.adsl.tpnet.pl
(at ns2.tpnet.pl / telekomunikacja.pl)

Spamvert:
www.passiveglory.com IP 58.20.108.151
(SBL45471) (at CNCGROUP-HN)

Spammer on the move from IP 58.20.108.156

See more Registrant subs[]ait.com sightings:
http://groups.google.com/groups?q=%22subs%40ait.com%22+group%3A*abuse&start=0&scoring=d&

More info below:
====================

X-SID-PRA: Norma Curry <tkoma...@mackvenca.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW42YgvgOHQIgPAn7XD12QLTkzAIvTgqhnsY=
Received: from tomts1-srv.bellnexxia.net ([209.226.175.113]) by
bay0-pamc1-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 21 Aug 2006 13:20:29 -0700
Received: from [MUNGED]
by toip6.bellnexxia.net with ESMTP; 21 Aug 2006 16:20:24 -0400
Received: (qmail 26185 invoked by uid 110); 21 Aug 2006 16:20:22 -0400
Delivered-To: [MUNGED]
Received: (qmail 26153 invoked from network); 21 Aug 2006 16:20:18
-0400
Received: from abfa234.neoplus.adsl.tpnet.pl (HELO paolcia-9b2csxh)
(oytn...@83.7.38.234)
by [MUNGED] with SMTP; 21 Aug 2006 16:20:18 -0400
Date: Mon, 21 Aug 2006 20:20:31 -0060
From: "Norma Curry" <tkoma...@mackvenca.com>
X-Mailer: The Bat! (v3.01 RC8) UNREG / CD5BF9353B3B7091
Reply-To: "Norma Curry" <tkoma...@mackvenca.com>
X-Priority: 3 (Normal)
Message-ID: <13210928.20...@mackvenca.com>
To: [MUNGED]
Subject: quality replica timepieces
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Return-Path: tkoma...@mackvenca.com
X-OriginalArrivalTime: 21 Aug 2006 20:20:29.0738 (UTC)
FILETIME=[3F1280A0:01C6C55F]

We only sell premium watches.

There's no battery in these re plicas just like the real ones since
they charge themselves as you move.
The second hand moves JUST like the real ones, too. These original
watches sell in stores for thousands of dollars.
We sell them for much less.

Replicated to the Smallest Detail

98% Perfectly Accurate Markings

Signature Green Sticker w/ Serial Number on Wa tch Back

Magnified Quickset Date

Includes all Proper Markings

www.passiveglory.com

-- END OF SPAM --

See:
IP 83.7.38.234 abfa234.neoplus.adsl.tpnet.pl

http://www.moensted.dk/spam/?addr=83.7.38.234

More tpnet.pl sightings:
http://groups.google.com/groups/search?q=tpnet.pl+group%3A*abuse&start=0&scoring=d&

inetnum: 83.7.0.0 - 83.7.127.255
netname: NEOSTRADA-ADSL
descr: Neostrada Plus
descr: Lublin
country: PL [Poland]
role: TP S.A. Hostmaster
changed: hostm...@tpnet.pl
address: TP S.A. "POLPAK"
person: Hostmaster TPSA-CST
address: Telekomunikacja Polska S.A.
address: Data Transmission Systems Centre
address: ISP

route: 83.0.0.0/11
descr: TPNET
descr: for abuse: ab...@tpnet.pl
origin: AS5617
mnt-by: AS5617-MNT
changed: na...@tpnet.pl
ASN: 5617
ASN Name: TPNET (Polish Telecom's commercial IP network)
Country IP Range: 83.0.0.0 to 83.31.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=5617

26 SBL/ROKSO listings for IPs under the responsibility of tpnet.pl
http://www.spamhaus.org/sbl/listings.lasso?isp=tpnet.pl

See:
www.passiveglory.com IP 58.20.108.151
ns1.dmmrq.com [58.20.108.151] [TTL=172800] [CN]
ns2.dmmrq.com [58.20.108.151] [TTL=172800] [CN]

www.passiveglory.com has no MX records -> passiveglory.com has no MX
records

http://www.moensted.dk/spam/?addr=58.20.108.156
http://www.spamhaus.org/query/bl?ip=58.20.108.156

More 58.20.108.156 sightings:
http://groups.google.com/groups/search?q=58.20.108.156+group%3A*abuse&start=0&scoring=d&

inetnum: 58.20.0.0 - 58.20.255.255
netname: CNCGROUP-HN

route: 58.20.0.0/16
descr: CNCGroup HuNan province network
country: CN
origin: AS9929
mnt-by: MAINT-CNCGROUP-RR
changed: hm-ch...@apnic.net
ASN: 9929
ASN Name: CNCNET-CN (China Netcom Corp.)
Country IP Range: 58.16.0.0 to 58.23.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9929

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45471
58.20.108.156/32 is listed on the Spamhaus Block List (SBL/ROKSO)

20-Aug-2006 09:08 GMT | SR04

Leo Kuvayev / BadCow
bulletproof spam host (rolex) - nsX.publictemp.com

5 SBL/ROKSO listings for IPs under the responsibility of cncgroup-hn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hn

Let see whois:
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET

Domain Name: passiveglory.com
Registrant Contact

Name: Private Registration through AIT Domains
Address: 421 Maiden Lane
Fayetteville, NC 28301
US
Email Address: subs[]ait.com
Phone Number: (910) 321-1200

Administrative Contact
Name: Private Registration through AIT Domains
Address: 421 Maiden Lane
Fayetteville, NC 28301
US
Email Address: su...@ait.com
Phone Number: (910) 321-1200

Technical Contact
Name: Private Registration through AIT Domains
Address: 421 Maiden Lane
Fayetteville, NC 28301
US
Email Address: su...@ait.com
Phone Number: (910) 321-1200

Record Created on........ 2006-08-21 12:30:48.099
Expire on................ 2007-08-21 00:39:03.000

Domain servers in listed order:
ns1.dmmrq.com
ns2.dmmrq.com

More passiveglory.com sightings:
http://groups.google.com/groups?q=passiveglory.com+group%3A*abuse

See also dmmrq.com sightings:
http://groups.google.com/groups/search?q=dmmrq.com+group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/3e1322b375e0c562

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages