[email] [counterfeit] [200.49.3.168] Rw lex Dg tejust watchg s for like $200
TomezNet
IP 200.49.3.168
(at IMPSAT.NET.AR / Ver TV S.A. / telintar.net.ar)
More spammer recent sightings:
http://groups.google.com/groups/search?q=%22KING+REPLICA%22+group%3A*abuse*&qt_s=Search
SEE sender identity and headers forgery by spammer spoofing our
domain.
More info below:
====================
X-SID-PRA: [MUNGED]
X-Message-Info: 6sSXyD95QpW1ShYB7jmM+h9VYWPZiB/
DXchZikLzfUSkBQBozBQnOPtR02h8cl3gJeVLbGaTc+QF6aTqRc/1Aw==
Received: from tomts1-srv.bellnexxia.net ([209.226.175.113]) by bay0-
pamc1-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 25 Mar 2008 20:47:52 -0700
Received: from toip21.srvr.bell.ca ([67.69.240.23])
by toip50.srvr.bell.ca with ESMTP; 25 Mar 2008 23:47:50 -0400
Received: from [MUNGED]
by toip21.srvr.bell.ca with ESMTP; 25 Mar 2008 23:47:43 -0400
Received: (qmail 5715 invoked by uid 110); 25 Mar 2008 23:47:46 -0400
Delivered-To: [MUNGED]
Received: (qmail 5661 invoked from network); 25 Mar 2008 23:47:46
-0400
Received: from [MUNGED](200.49.3.168)
by [MUNGED] with SMTP; 25 Mar 2008 23:47:46 -0400
Received: from 226.88.222.80 by 200.49.3.168; Wed, 26 Mar 2008
06:46:45 +0200
Message-ID: <rgzbgbdneoxdybqtkcxcdppg$mysbmtljqunhnytftvxgs>
From: [MUNGED]
Reply-To: [MUNGED]
To: [MUNGED]
Subject: Rw lex Dg tejust watchg s for like $200
Date: Tue, 25 Mar 2008 23:47:45 -0500
MIME-Version: 1.0
Return-Path: colemanthreeness2941795[]yahoo.com
X-OriginalArrivalTime: 26 Mar 2008 03:47:52.0746 (UTC)
FILETIME=[2B2AF8A0:01C88EF4]
Looking for superior quality replq ca watches? Then welcome to the
newly redesigned
Presi ige Ree licas, home of the best reproduction Rb lex
Sportmk del watm hes on the whole web! Prw stige Ru plicas
offv rs a tremendous selection of Ros ex rem lica timepieces for both
men and women, all of them featuring the original manud acturer
markings along with a myriad
of details that make these watk hes look so much like the brand new
Rolu xes that
even the experts are having a hard time differentiating them!
So, come visit Preh stige Repq icas and enjoy not only the most
beautiful
Re lex Sporta odel repl ica wao ches at unbelievable
prj ces, but also get an extra 15% obf when you bcy two!
H3rmes
-- END OF SPAM --
Also More spammer sightings:
http://groups.google.com/groups/search?q=%22Diamond+Watches%22+group%3A*abuse&start=0&scoring=d&
Spammer old listings SBL52081, SBL54224, SBL54249
See:
IP 200.49.3.168
http://www.moensted.dk/spam/?addr=200.49.3.168
inetnum: 200.49.3.128/25
status: reallocated
owner: Ver TV S.A.
ownerid: AR-VTSA-LACNIC
responsible: Juan Jose Rodriguez
address: Pte. Peron, 1783, -
address: B1663GHG - San Miguel - BA
country: AR
route: 200.49.0.0/21
descr: TL route object
descr: Redes de DATACOOP
origin: AS11503
mnt-by: TDATANET-RR
changed: op...@ciscow1.telintar.net.ar
Spamvert URL => missing
This spammer is always sending multiple emails to unknown users (Cc: /
Bcc:), from forged senders that are their actual targets, relying on
MTA to bounce the mail to the forged sender, with original body
trying
to create backscatter spam.
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8e90e6e72da1385f
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/d50ae08e4a6aa2c3
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/51d5585110aebe89
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/001cca8ddb4effbd
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and unverified
unless stated otherwise by the moderators. All opinions expressed above are
considered the opinions of the original poster, not the moderators or their
respective employers. For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/