Spamvert:
oucjtwc0c7ufxo6yqr6mb66o.sortalhh.com IP 89.248.175.37
(SBL44870 - SBL44840 / ROK4932) (at ecatel.nl / iqarus.com)
More info below:
====================
X-SID-PRA: Amparo Dotson <tkov...@rymsa.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43trpqTnsZTjz+S++/k26ARSHK67407oD8=
Received: from tomts30-srv.bellnexxia.net ([209.226.175.104]) by
bay0-pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 31 Jul 2006 01:30:59 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip4.bellnexxia.net with ESMTP; 31 Jul 2006 04:30:49 -0400
Message-Id: <578r3m$ngf...@toip4.bellnexxia.net>
Received: (qmail 29716 invoked by uid 110); 31 Jul 2006 08:30:47 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 29703 invoked from network); 31 Jul 2006 08:30:47
-0000
Received: from c-68-47-26-69.hsd1.ga.comcast.net (HELO
your-us67pi6luv.hsd1.ga.comcast.net.) (68.47.26.69)
by xx..xx..xx.net with SMTP; 31 Jul 2006 08:30:47 -0000
From: "Amparo Dotson" <tkov...@rymsa.com>
To: xx..xx@xx..xx.com
Subject: View Our Wholesale Rolex Replica ////atches Today!
Date: Mon, 31 Jul 2006 08:30:47 +0480
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_006A_01C6B438.914934A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Return-Path: tkov...@rymsa.com
X-OriginalArrivalTime: 31 Jul 2006 08:30:59.0304 (UTC)
FILETIME=[A6710680:01C6B47B]
This is a multi-part message in MIME format.
------=_NextPart_000_006A_01C6B438.914934A0
Content-Type: text/plain;
charset="iso-8859-2"
Content-Transfer-Encoding: quoted-printable
Genuine Swiss made Rolex replicas are as close to the real thing
as a replica watch can be. Sometimes even the professional jewelers
are unable to tell the difference from the real Rolex watch.
All genuine Swiss Rolex Replicas should have the following:- Full
1-year=20
Warranty
- Solid 14k or 18k Gold on two-toned models
- Guaranteed triple-wrapped gold on all-gold models
- Genuine sapphire crystal - a type of glass that is many times
better=20
at resisting scratches than regular glass.
- The color of the gold looks exactly like a genuine Rolex watch
If=20
the retailer does not offer this, do not purchase from them!//e have
all=20
this! JUST
COME and buy your REPLICA //atches!
------=_NextPart_000_006A_01C6B438.914934A0
Content-Type: text/html;
charset="iso-8859-2"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
<META content="MSHTML 6.00.2900.2180" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY><body bgcolor=3D"#CCCCCC">
<b><font size=3D"+1">Genuine Swiss made Rolex replicas are as close
to=20
the real thing
as a replica watch can be. Sometimes even the professional jewelers
are unable to tell the difference from the real Rolex watch.
</font></b>=20
<p>All genuine Swiss Rolex Replicas should have the following:</p>
<p>- Full 1-year Warranty <br>
- Solid 14k or 18k Gold on two-toned models<br>
- Guaranteed triple-wrapped gold on all-gold models <br>
- Genuine sapphire crystal - a type of glass that is many times
better=20
at resisting scratches than regular glass.<br>
- The color of the gold looks exactly like a genuine Rolex watch </p>
<p>If the retailer does not offer this, do not purchase from them!</p>
<p></p>
<p><a
href=3D"http://oucjtwc0c7ufxo6yqr6mb66o.sortalhh.com/"><b><font=20
size=3D"+2">//e have all this! JUST
COME and buy your REPLICA //atches!</font></b></a></p>
</body></BODY></HTML>
------=_NextPart_000_006A_01C6B438.914934A0--
-- END OF SPAM --
See:
IP 68.47.26.69 c-68-47-26-69.hsd1.ga.comcast.net
http://www.moensted.dk/spam/?addr=68.47.26.69
http://cbl.abuseat.org/lookup.cgi?ip=68.47.26.69
http://www.spamhaus.org/query/bl?ip=68.47.26.69
Comcast Cable Communications, Inc. JUMPSTART-1 (NET-68-32-0-0-1)
68.32.0.0 - 68.63.255.255
Comcast Cable Communications, Inc. AUGUSTA-1 (NET-68-47-0-0-1)
68.47.0.0 - 68.47.127.255
ASN: 22909
ASN Name: DNEO-OSP1
Country IP Range: 68.0.0.0 to 68.127.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=22909
43 SBL/ROKSO listings for IPs under the responsibility of comcast.net
http://www.spamhaus.org/sbl/listings.lasso?isp=comcast.net
See:
oucjtwc0c7ufxo6yqr6mb66o.sortalhh.com IP 89.248.175.37
ro.urorubinlg.com A IN 3600 220.113.9.75
ur.urorubinlg.com A IN 3600 211.156.250.180
oucjtwc0c7ufxo6yqr6mb66o.sortalhh.com has no MX records -> sortalhh.com
has no MX records
http://www.moensted.dk/spam/?addr=89.248.175.37
http://www.spamhaus.org/query/bl?ip=89.248.175.37
http://www.cidr-report.org/cgi-bin/as-report?as=
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44840
89.248.175.0/25 is listed on the Spamhaus Block List (SBL/ROKSO)
27-Jul-2006 12:45 GMT | SR04
Leo Kuvayev / BadCow
nitriotch.com ; viscidlyln.com ; minyasbb.com
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
1 SBL/ROKSO listings for IPs under the responsibility of ecatel.nl
http://www.spamhaus.org/sbl/listings.lasso?isp=ecatel.nl
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL44870
89.248.160.0/20 is listed on the Spamhaus Block List (SBL)
26-Jul-2006 08:08 GMT | SR04
ECATEL-AS AS29073 = iqarus.com = Colinks hosting spammers
30 SBL/ROKSO listings for IPs under the responsibility of iqarus.com
http://www.spamhaus.org/sbl/listings.lasso?isp=iqarus.com
Let see whois.bookmyname.com:
Registrar: ONLINE SAS
DOMAIN
Domain Name : sortalhh.com (SORTAL3-BMN-DOM)
Registrar : BookMyName
Registrant / Admin Contact :
PERSON
Lando_mongo[]yahoo.com LANDO...@YAHOO.COM (LMYC2-BMN-PE)
800 W Avon Rd
MI 48307-2 Rochester
UNITED STATES
phone : (248) 651-5800
fax :
e-mail : lando_mongo[]yahoo.com
Billing Contact :
PERSON
Lando...@yahoo.com LANDO...@YAHOO.COM (LMYC2-BMN-PE)
800 W Avon Rd
MI 48307-2 Rochester
UNITED STATES
phone : (248) 651-5800
fax :
e-mail : lando...@yahoo.com
Technical Contact :
PERSON
Lando...@yahoo.com LANDO...@YAHOO.COM (LMYC2-BMN-PE)
800 W Avon Rd
MI 48307-2 Rochester
UNITED STATES
phone : (248) 651-5800
fax :
e-mail : lando...@yahoo.com
Domain servers :
ro.urorubinlg.com (RUC2-BMN-HST) [220.113.9.75]
ur.urorubinlg.com (UUC4-BMN-HST) [211.156.250.180]
Created on 07/30/2006 14:47:16
Updated on 07/30/2006 14:45:55
Expires on 07/30/2007 10:47:16
See:
ro.urorubinlg.com IP 220.113.9.75
More 211.156.250.180 sightings:
http://groups.google.com/groups/search?q=211.156.250.180+group%3A*abuse
inetnum: 211.156.240.0 - 211.156.255.255
netname: ZhanjiangWantong
country: CN
descr: Zhan Jiang Wan Tong Co.,Ltd.
descr: GuoMao Edifice the 10th Storey A18 Room,RenMing South Avenue
45
descr: Zhanjiang City,Guandong,China
route: 211.156.240.0/20
descr: CNC Group Guangdong Network User
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 211.144.0.0 to 211.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
Let see whois:
Registrar: TUCOWS INC.
Registrant:
Private
1901 1st Ave
NY, NY 10035
US
Domain name: URORUBINLG.COM
Administrative Contact:
limaa, chuchu lerjokermaner2[]yahoo.com
1901 1st Ave
NY, NY 10035
US
212-410-8000
Technical Contact:
limaa, chuchu lerjoke...@yahoo.com
1901 1st Ave
NY, NY 10035
US
212-410-8000
Registration Service Provider:
CyberConnectics, sup...@cybcon.com
503-248-4449
503-682-7701 (fax)
http://www.cyberconnectics.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: TUCOWS, INC.
Record last updated on 23-Jul-2006.
Record expires on 18-Jul-2007.
Record created on 18-Jul-2006.
Domain servers in listed order:
UR.URORUBINLG.COM 211.156.250.180
RO.URORUBINLG.COM 220.113.9.75
Domain status: ACTIVE
More urorubinlg.com sightings:
http://groups.google.com/groups/search?q=urorubinlg.com+group%3A*abuse
See:
ro.urorubinlg.com IP 220.113.9.75 => gwbn.net.cn
http://www.spamhaus.org/query/bl?ip=220.113.9.75
Listed: SBL43773 and SBL44839 (both Leo Kuvayev / BadCow)
inetnum: 220.113.9.0 - 220.113.9.255
netname: GWBN-BEIJING-NET10
country: CN
descr: FOR GREAT WALL BROADBAND NETWORK SERVICE ACCESS IN
BEIJING NET10
route: 220.113.0.0/20
descr: citic network co.,ltd
bj-gw
origin: as18118
mnt-by: MAINT-AS17430
changed: m...@citicnet.com
route: 220.113.0.0/20
descr: China United Telecom
origin: AS4837
mnt-by: MAINT-AS4837
changed: jin...@bj.cnuninet.net
ASN: 18118
ASN Name: CITICNET-AP (CITIC Networks Management Co.,Ltd.)
Country IP Range: 220.112.0.0 to 220.115.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=18118
10 SBL/ROKSO listings for IPs under the responsibility of gwbn.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=gwbn.net.cn
More 220.113.9.75 sightings:
http://groups.google.com/groups/search?q=220.113.9.75+group%3A*abuse&start=0&scoring=d&
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: