[email] [counterfeit] [61.7.150.142] (munkapc.com - killdns.com) All details are there shopworn
TomezNet
IP 61.7.150.142
(at cat.net.th)
Spamvert:
munkapc.com IP 221.7.193.186
(SBL48925) (at cncgroup-gx)
Web:
Title: King Replica
More sightings:
http://groups.google.com/groups/search?q=%22King+Replica%22+group%3A*abuse&start=0&scoring=d&
Identity Forgery.
Header forgery with our domain.
Received at an address harvested from domain registration.
More info below:
====================
X-SID-PRA: Jayson <dvpgdg@[MUNGED]>
X-Message-Info: txF49lGdW43qAiJAydp9VvcHJistII6w2wFZ0U0I3Uo=
Received: from tomts42-srv.bellnexxia.net ([209.226.175.99]) by bay0-
pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 8 Feb 2007 10:29:33 -0800
Received: from [MUNGED]
by toip23.srvr.bell.ca with ESMTP; 08 Feb 2007 13:29:29 -0500
Received: (qmail 9374 invoked by uid 110); 8 Feb 2007 13:29:28 -0500
Delivered-To: [MUNGED]
Received: (qmail 9368 invoked from network); 8 Feb 2007 13:29:28 -0500
Received: from unknown (HELO COM08) (61.7.150.142)
by [MUNGED] with SMTP; 8 Feb 2007 13:29:28 -0500
Return-path: <dvpgdg@[MUNGED]>
X-Original-To: [MUNGED]
Delivered-To: [MUNGED]
Received: from [61.7.150.142] (port=43948 helo=61.7.150.142)
by [MUNGED] with esmtp
id 214645-214645-60
for [MUNGED]; Fri, 09 Feb 2007 01:29:23 +0700 (EET)
Message-ID: <132401c74be9$01c74be9$8e96073d@[MUNGED]>
From: "Jayson" <dvpgdg@[MUNGED]>
To: [MUNGED]
Subject: All details are there shopworn
Date: Fri, 09 Feb 2007 01:29:23 +0700 (EET)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_1322_01C74BAF.0E7FB940"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-OriginalArrivalTime: 08 Feb 2007 18:29:33.0459 (UTC)
FILETIME=[14422E30:01C74BAF]
------=_NextPart_001_1322_01C74BAF.0E7FB940
For Branden's attention
------=_NextPart_001_1322_01C74BAF.0E7FB940
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-
ascii">
<META content=3D"MSHTML 6.00.2900.2180" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY><DIV align=3Dleft><FONT face=3DArial size=3D2><B>Dear Sir or
Madam,</B></FONT></DIV><BR>
<DIV align=3Dleft><FONT face=3DArial size=3D2>Attention please!</
FONT></DIV><BR>
<DIV align=3Dleft><FONT face=3DArial size=3D2>Hot sale of watches and
costume jewellery on really low prices is ending in <B>5 days</B></
FONT></DIV>
<DIV align=3Dleft><FONT face=3DArial size=3D2>We provide full <B>100%
quality guarantee!</B></FONT></DIV><BR>
<DIV align=3Dleft><FONT face=3DArial size=3D2><A=20href=3D"http://
munkapc.com">http://munkapc.com</A></FONT></DIV><BR></BODY>
</HTML>
------=_NextPart_001_1322_01C74BAF.0E7FB940--
-- END OF SPAM --
See:
IP 61.7.150.142
http://www.moensted.dk/spam/?addr=61.7.150.142
http://spamcop.net/w3m?action=checkblock&ip=61.7.150.142
http://www.apews.org/?page=test&C=2&E=50006&ip=61.7.150.142
inetnum: 61.7.128.0 - 61.7.255.255
netname: CAT
descr: CAT Telecom public company Ltd
descr: International Telecommunications Service Provider
person: Suchok Ardhmad
nic-hdl: SA51-AP
changed: suc...@cat.net.th 20050331
mnt-by: MAINT-TH-THIX-CAT
mnt-by: MAINT-TH-THIX-CAT
changed: kta...@cat.net.th
postmaster and abuse[]cat.net.th are listed in rfc-ignorant.org
database
route: 61.7.144.0/20
descr: CAT route object for CAT Broadband
origin: AS9931
mnt-by: MAINT-THIX-CAT-TH
changed: peer...@cat.net.th
ASN: 9931
ASN Name: CAT-AP (The Communication Authoity of Thailand, CAT)
Country (per IP registrar): TH [Thailand]
Country IP Range: 61.7.128.0 to 61.7.255.255
Country fraud profile: High
http://www.cidr-report.org/cgi-bin/as-report?as=9931
6 SBL listings for IPs under the responsibility of cat.net.th
http://www.spamhaus.org/sbl/listings.lasso?isp=cat.net.th
See:
munkapc.com IP 221.7.193.186
ns1.killdns.com [221.7.193.186] [TTL=172800] [CN]
ns2.killdns.com [221.7.193.186] [TTL=172800] [CN]
[munkapc.com has 1 MX record munkapc.com (1)]
http://www.moensted.dk/spam/?addr=221.7.193.186
http://www.spamhaus.org/query/bl?ip=221.7.193.186
http://www.spamhaus.org/pbl/query/PBL111818
http://www.apews.org/?page=test&C=53&E=20794&ip=221.7.193.186
Escalated Listing (Spam or Spam Support) See: http://www.sorbs.net/
lookup.shtml?221.7.193.186
More 221.7.193.186 sightings:
http://groups.google.com/groups/search?q=221.7.193.186+group%3A*abuse&start=0&scoring=d&
inetnum: 221.7.193.184 - 221.7.193.191
netname: gxjxtech-com
country: CN
descr: guangxigxjxtech-com
admin-c: LH602-AP
tech-c: LH602-AP
status: ASSIGNED NON-PORTABLE
changed: nn...@gxcc.com.cn
route: 221.7.128.0/17
descr: CNC Group CHINA169 Guangxi Province Network
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: ab...@cnc-noc.net => ???
whois, postmaster and abuse[]cnc-noc.net are listed in rfc-
ignorant.org database
abuse[]gxcc.com.cn is listed in rfc-ignorant.org database
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
Country (per IP registrar): CN [China]
Country IP Range: 221.0.0.0 to 221.7.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4837
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL48925
221.7.193.186/32 is listed on the Spamhaus Block List (SBL)
01-Feb-2007 07:42 GMT | SR02
fake rolex / thekingreplica.com / ns1.completeswiss.com
Update 31-jan-2006:
http://replicaestore.com
Watch spammers back here.
11 SBL/ROKSO listings for IPs under the responsibility of cncgroup-gx
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-gx
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/
Domain name: munkapc.com
Registrant Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007[]bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR
Administrative Contact:
Merengue do Brasil Ltda
Marco Maduro (mmadu...@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR
Technical Contact:
Merengue do Brasil Ltda
Marco Maduro (mmadu...@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR
Status: Locked
Name Servers:
ns1.killdns.com [221.7.193.186]
ns2.killdns.com [221.7.193.186]
Creation date: 24 Jan 2007 17:10:15
Expiration date: 24 Jan 2008 17:10:15
See More domain Registrant email: mmaduro2007[]bol.com.br sightings:
http://groups.google.com/groups/search?q=%22mmaduro2007%40bol.com.br%22+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/2a634f070517d1f9
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: