Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [LowestMortgageQuotes] (greatssearching.com - forallrecents.com) Mortgage Servicing News Sat, 09 Sep 2006 01:42:38 +0400

0 views
Skip to first unread message

TomezNet

unread,
Sep 8, 2006, 7:00:35 PM9/8/06
to
Received From:
IP 81.203.192.235 81-203-192-235.user.ono.com
(at dns02.ono.com)

Spamvert:
greatssearching.com IP 203.186.92.76
(SBL46240) (at ctinets.com / ctihk.com)

Web: LowestMortgageQuotes Š 2006

More LowestMortgageQuotes sightings:
http://groups.google.com/groups/search?q=LowestMortgageQuotes+group%3A*abuse

Forged Logos:
TRUSTE
VeriSign

More info below:
====================

X-SID-PRA: NewsAlert <outla...@ffgg.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW40ejQ7BThPR+PC7tbwjtV9cOCim1g2H5xE=
Received: from tomts19-srv.bellnexxia.net ([209.226.175.73]) by
bay0-pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 8 Sep 2006 13:51:45 -0700
Received: from [MUNGED]
by toip5.bellnexxia.net with ESMTP; 08 Sep 2006 16:51:43 -0400
Received: (qmail 1911 invoked by uid 110); 8 Sep 2006 16:51:41 -0400
Delivered-To: [MUNGED]
Received: (qmail 1887 invoked from network); 8 Sep 2006 16:51:39 -0400
Received: from 81-203-192-235.user.ono.com (81.203.192.235)
by [MUNGED] with SMTP; 8 Sep 2006 16:51:39 -0400
Date: Sat, 09 Sep 2006 01:46:38 +0400
From: NewsAlert <outla...@ffgg.com>
Message-ID: <wyman.breeches@coequal>
To: [MUNGED]
Subject: Mortgage Servicing News Sat, 09 Sep 2006 01:42:38 +0400
MIME-Version: 1.0
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: 8bit
Return-Path: outla...@ffgg.com
X-OriginalArrivalTime: 08 Sep 2006 20:51:45.0769 (UTC)
FILETIME=[98B59D90:01C6D388]

<html>
<head>
<meta http-equiv=Content-Type content="text/html;
charset=windows-1252">
<title>Hello,</title>
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
</head>

<body lang=EN link=blue vlink=purple style='tab-interval:35.4pt'>
<div class=Section1>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'>Hello,<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'>We tried contacting you awhile ago about your
low
interest mor/tag rate.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'>You have qualified for the lowest rate in
years...<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'>You could get over 380.000 for as little as
500 a
month!<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'>B ad credit? Doesn't matter, low rates are
fixed no
matter what!<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'>To get a free, no oblig-ation consultation
click
below:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US
style='font-size:10.0pt;font-family:"Courier New";
mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier
New"'><a
href="http://greatssearching.com/">http://greatssearching.com/</a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier
New"'><o:p>&nbsp;</o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier
New"'>Regards,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier
New"'>Nicole Lyon<o:p></o:p></span></p>
</div>
</body>
</html>

-- END OF SPAM --

See:
IP 81.203.192.235 81-203-192-235.user.ono.com

http://www.moensted.dk/spam/?addr=81.203.192.235
http://tqmcube.com/cgi-bin/rbltqm?ip=81.203.192.235

postmaster and abuse[]ono.com are listed in rfc-ignorant.org database

inetnum: 81.203.0.0 - 81.203.255.255
netname: ONO-SCOPES-2
descr: Cableuropa - ONO
descr: ONO net in whole Spain
country: ES [Spain]

ASN: 6739
ASN Name: ONO-AS (Cableuropa - ONO)
Country IP Range: 81.202.0.0 to 81.203.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=6739

31 SBL/ROKSO listings for IPs under the responsibility of ono.com
http://www.spamhaus.org/sbl/listings.lasso?isp=ono.com

See:
greatssearching.com IP 203.186.92.76
ns1.forallrecents.com [218.16.124.252] [TTL=172800] [CN]
ns2.forallrecents.com [203.186.92.76] [TTL=172800] [HK]

greatssearching.com has no MX records

http://www.moensted.dk/spam/?addr=203.186.92.76
http://www.spamhaus.org/query/bl?ip=203.186.92.76

203.186.92.76 PTR record: 203186092076.ctinets.com
at ns2o.ctihk.com

http://www.cidr-report.org/cgi-bin/as-report?as=

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL46240
203.186.92.76/32 is listed on the Spamhaus Block List (SBL)

05-Sep-2006 04:32 GMT | SR23

Spam webhosting - timeloanisfour.com

11 SBL/ROKSO listings for IPs under the responsibility of ctihk.com
http://www.spamhaus.org/sbl/listings.lasso?isp=ctihk.com

Lets see whois:
Registrar: ENOM, INC.

Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: greatssearching.com

Registrant Contact:
PrivateDomainRegistrations
Gary Reed (proxydomainservice[]mac.hush.com)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA

Administrative Contact:
PrivateDomainRegistrations
Gary Reed (proxydoma...@mac.hush.com)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA

Technical Contact:
PrivateDomainRegistrations
Gary Reed (proxydoma...@mac.hush.com)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA

Status: Locked

Name Servers:
ns1.forallrecents.com
ns2.forallrecents.com

Creation date: 08 Sep 2006 07:55:38
Expiration date: 08 Sep 2007 07:55:38

See:
ns1.forallrecents.com IP 218.16.124.252

Let see whois:
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: forallrecents.com

Registrant Contact:
PrivateDomainRegistrations
Gary Reed (proxydomainservice[]mac.hush.com)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA

Administrative Contact:
PrivateDomainRegistrations
Gary Reed (proxydoma...@mac.hush.com)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA

Technical Contact:
PrivateDomainRegistrations
Gary Reed (proxydoma...@mac.hush.com)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA

Status: Locked

Name Servers:
ns1.j00l.info [60.200.228.30]
ns2.j00l.info [218.16.124.252]

Creation date: 03 Sep 2006 13:00:27
Expiration date: 03 Sep 2007 13:00:27

More forallrecents.com sightings:
http://groups.google.com/groups/search?q=forallrecents.com+group%3A*abuse

See:
ns1.j00l.info [60.200.228.30}

Let see whois.afilias.info:

Domain ID:D14513642-LRMS
Domain Name: J00L.INFO
Created On:28-Aug-2006 16:08:15 UTC
Last Updated On:02-Sep-2006 19:45:25 UTC
Expiration Date:28-Aug-2007 16:08:15 UTC
Sponsoring Registrar: eNom, Inc. (R126-LRMS)
Status:TRANSFER PROHIBITED
Registrant ID:5979FA4FA429F8B3
Registrant Name:Gary Reed
Registrant Organization: PrivateDomainRegistrations
Registrant Street1:150-3495 Cambie Street
Registrant Street2:
Registrant Street3:
Registrant City:Vancouver
Registrant State/Province:ST
Registrant Postal Code:V5Z 4R3
Registrant Country:CA
Registrant Phone:+1.6047678695
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email: proxydomainservice[]mac.hush.com
Admin ID:5979FA4FA429F8B3
Admin Name:Gary Reed
Admin Organization:PrivateDomainRegistrations
Admin Street1:150-3495 Cambie Street
Admin Street2:
Admin Street3:
Admin City:Vancouver
Admin State/Province:ST
Admin Postal Code:V5Z 4R3
Admin Country:CA
Admin Phone:+1.6047678695
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email: proxydoma...@mac.hush.com
Billing ID:5979FA4FA429F8B3
Billing Name:Gary Reed
Billing Organization:PrivateDomainRegistrations
Billing Street1:150-3495 Cambie Street
Billing Street2:
Billing Street3:
Billing City:Vancouver
Billing State/Province:ST
Billing Postal Code:V5Z 4R3
Billing Country:CA
Billing Phone:+1.6047678695
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email: proxydoma...@mac.hush.com
Tech ID:5979FA4FA429F8B3
Tech Name:Gary Reed
Tech Organization:PrivateDomainRegistrations
Tech Street1:150-3495 Cambie Street
Tech Street2:
Tech Street3:
Tech City:Vancouver
Tech State/Province:ST
Tech Postal Code:V5Z 4R3
Tech Country:CA
Tech Phone:+1.6047678695
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email: proxydoma...@mac.hush.com
Name Server: NS1.J00L.INFO
Name Server: NS2.J00L.INFO

More j00l.info sightings:
http://groups.google.com/groups/search?q=j00l.info+group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/0d3bec75b04d91e8

Cheers, Tomez


--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages