[email] [counterfeit] (bladesring.com - jestorn.com- pawlikdnskevin.com - fendersondns.com) Top secret
TomezNet
IP 203.101.32.5 dsl-tn-005.32.101.203.touchtelindia.net
(at dnsdel.mantraonline.com / bharti.com / bhartibroadband.com)
Spamvert:
bladesring.com IP 62.193.224.169
(at ns2.amenworld.com / amen.fr)
ns2.fendersondns.com IP 213.216.64.242
(SBL45177 - ROK3552) (at pik-net.pl)
See frames URL:
http://150.jestorn.com/us/
150.jestorn.com IP 210.172.177.175
(at ns.namedserver.net / dns.interq.or.jp)
Web:
Copyright © 2003 Exquisite Replicas. All rights reserved.
More Exquisite Replicas sightings:
http://groups.google.com/groups/search?q=%22Exquisite+Replicas%22+group%3A*abuse&start=0&scoring=d&
More info below:
====================
X-SID-PRA: lilllie vivyanne <bellan...@vchub.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW41dgdQqClKbj123vVKuRSBDeFhKzNjAJKY=
Received: from tomts42-srv.bellnexxia.net ([209.226.175.99]) by
bay0-pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 14 Aug 2006 22:30:28 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 15 Aug 2006 01:30:19 -0400
Received: (qmail 1830 invoked by uid 110); 15 Aug 2006 01:30:17 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 1720 invoked from network); 15 Aug 2006 01:30:14 -0400
Received: from dsl-tn-005.32.101.203.touchtelindia.net (HELO novatek)
(203.101.32.5)
by xx..xx..xx.net with SMTP; 15 Aug 2006 01:30:14 -0400
Message-Id: <00b001c6c024$12004100$b08bc0a8@seka>
From: "lilllie vivyanne" <bellan...@vchub.com>
To: xx..xx@xx..xx.com
Subject: Top secret
Date: Tue, 15 Aug 2006 04:34:18 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0024_01C6C024.12004100"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Return-Path: bellan...@vchub.com
X-OriginalArrivalTime: 15 Aug 2006 05:30:28.0216 (UTC)
FILETIME=[EACE6780:01C6C02B]
This is a multi-part message in MIME format.
------=_NextPart_000_0024_01C6C024.12004100
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
TODAYS SPECIAL
Jewelry * Handbags * Pens * Watches * Neckties * Clutches * Wallets
Natural leather, silk, white gold and real jewels!
http://bladesring.com/us/
surface switch root disease
beatrix antelope fourth-born
shittim wood patch pocket
palm cabbage swamp pine
ill-done furniture maker
quill-like first off
------=_NextPart_000_0024_01C6C024.12004100
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html;
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2180" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV><STRONG>TODAYS SPECIAL</STRONG></DIV>
<DIV><STRONG>Jewelry * Handbags * Pens * Watches * Neckties * Clutches
* Wallets</STRONG></DIV>
<DIV>Natural leather, silk, white gold and real jewels!</DIV>
<DIV><A
href=3D"http://bladesring.com/us/">http://bladesring.com/us/</A></DIV>
<BR><BR>
<DIV><FONT face=3DArial size=3D2>surface switch root disease<BR>
beatrix antelope fourth-born<BR>
shittim wood patch pocket<BR>
palm cabbage swamp pine<BR>
ill-done furniture maker<BR>
quill-like first off</FONT></DIV></BODY></HTML>
------=_NextPart_000_0024_01C6C024.12004100--
-- END OF SPAM --
See:
IP 203.101.32.5 dsl-tn-005.32.101.203.touchtelindia.net
http://www.moensted.dk/spam/?addr=203.101.32.5
[1] topsites, see http://spews.org/html/S2203.html
inetnum: 203.101.32.0 - 203.101.32.255
netname: BHARTI-IN
descr: BTNL-CHN-DSL
descr: Bharti Infotel Ltd.,Access Business Group,DSL Services ,
descr: Tamil Nadu Telecom Circle
descr: Bharti Towers,101, Santhome High Road,
descr: Chennai
descr: Tamilnadu
descr: India
ASN: 9498
ASN Name: BBIL-AP (BHARTI BT INTERNET LTD.)
Country IP Range: 203.101.0.0 to 203.101.127.255
http://www.cidr-report.org/cgi-bin/as-report?as=9498
10 SBL/ROKSO listings for IPs under the responsibility of
bhartibroadband.com
http://www.spamhaus.org/sbl/listings.lasso?isp=bhartibroadband.com
See:
bladesring.com IP 62.193.224.169
ns1.pawlikdnskevin.com [195.144.21.96] [TTL=172800] [UA]
ns2.fendersondns.com [213.216.64.242] [TTL=172800] [PL]
ns1.bladesring.com A IN 300 62.193.224.169
ns2.bladesring.com A IN 300 62.193.224.169
bladesring.com has no MX records
http://www.moensted.dk/spam/?addr=62.193.224.169
62.193.224.169 PTR record: wpc0233.amenworld.com
at ns2.amenworld.com
inetnum: 62.193.224.0 - 62.193.239.255
netname: AMEN-EUROPE-NETWORK
descr: AMEN European Network
country: FR [France]
route: 62.193.224.0/22
descr: AMEN Networks
origin: AS28677
mnt-by: AMEN-MNT
notify: ri...@amen.fr
changed: net...@amenworld.com
ASN: 28677
ASN Name: AMEN (AMEN Network)
Country IP Range: 62.193.192.0 to 62.193.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=28677
2 SBL listings for IPs under the responsibility of amen.fr
http://www.spamhaus.org/sbl/listings.lasso?isp=amen.fr
Let see whois:
Domain: bladesring.com
Registrant
Chris Puertas
Chris Puertas
julieblades[]yahoo.com
3773 E Walton
Auburn Hills, MI 48326 US
+1.2483543049
Administrative
Chris Puertas
Chris Puertas
julie...@yahoo.com
3773 E Walton
Auburn Hills, MI 48326 US
+1.2483543049
Billing
Chris Puertas
Chris Puertas
julie...@yahoo.com
3773 E Walton
Auburn Hills, MI 48326 US
+1.2483543049
Technical
Chris Puertas
Chris Puertas
julie...@yahoo.com
3773 E Walton
Auburn Hills, MI 48326 US
+1.2483543049
Record created on August 14, 2006
Record last updated on August 14, 2006
Record expires on August 14, 2007
Domain Name Servers:
NS1.PAWLIKDNSKEVIN.COM
NS2.FENDERSONDNS.COM
See:
150.jestorn.com IP 210.172.177.175
ns1.jestorn.com A IN 300 210.172.177.175
ns2.jestorn.com A IN 300 210.172.177.175
ns1.jestorn.com [202.144.228.170] [TTL=172800] [HK]
ns2.jestorn.com [202.147.26.2] [TTL=172800] [JP]
150.jestorn.com has no MX records -> [jestorn.com has 1 MX record
mx.jestorn.com (10)]
http://www.moensted.dk/spam/?addr=210.172.177.175
210.172.177.175 PTR record: fra-net.jp
at ns.namedserver.net / dns.interq.or.jp
inetnum: 210.160.0.0 - 210.175.255.255
netname: JPNIC-NET-JP
descr: Japan Network Information Center
country: JP
inetnum: 210.172.128.0 - 210.172.191.255
netname: INTERQ
descr: Global Media Online inc.
route: 210.172.128.0/18
descr: Global Media Online Inc
Cerulean Tower, 11F
Sakuragaokacho-26-1
Shibuya-ku, Tokyo
150-8512, Japan
origin: AS7506
mnt-by: MAINT-AS7506
changed: sh...@interq.or.jp
ASN: 7506
ASN Name: APNIC-AS-2-BLOCK
Country IP Range: 210.160.0.0 to 210.175.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=7506
4 SBL listings for IPs under the responsibility of interq.or.jp
http://www.spamhaus.org/sbl/listings.lasso?isp=interq.or.jp
More jestorn.com sightings:
http://groups.google.com/groups/search?q=jestorn.com+group%3A*abuse
See:
ns1.pawlikdnskevin.com IP 195.144.21.96
ns1.pawlikdnskevin.com has no MX records -> pawlikdnskevin.com has no
MX records
http://www.moensted.dk/spam/?addr=195.144.21.96
at ns4.rx-name.net / rx-host.net
Whois Output for: pawlikdnskevin.com
Domain Name Owner:
Pawlik, Kevin
1405 Sunshine Drive
Birmingham, AL 35213
US
Administrative Contact:
Pawlik, Kevin [KP-239]
1405 Sunshine Drive
Birmingham, AL 35213, US
Phone: 2054106861
Email: kevinpavlik[]yahoo.com
Technical Contact:
Pawlik, Kevin [KP-239]
1405 Sunshine Drive
Birmingham, AL 35213, US
Phone: 2054106861
Email: kevin...@yahoo.com
Billing Contact:
Pawlik, Kevin [KP-239]
1405 Sunshine Drive
Birmingham, AL 35213, US
Phone: 2054106861
Email: kevin...@yahoo.com
Record Information:
Domain Record Created: August 14, 2006 00:00
Domain Record Updated: August 14, 2006 13:00
Domain Record Expires: August 14, 2007 00:00
DNS Information:
Name Server: dom1.omnis.com [216.239.128.4]
Name Server: dom2.omnis.com [216.239.128.5]
See:
ns2.fendersondns.com IP 213.216.64.242 => SBL45177
ns2.fendersondns.com has no MX records -> fendersondns.com has no MX
records
http://www.moensted.dk/spam/?addr=213.216.64.242
http://www.spamhaus.org/query/bl?ip=213.216.64.242
More 213.216.64.242 sightings:
http://groups.google.com/groups/search?q=213.216.64.242+group%3A*abuse
213.216.64.242 PTR record: serv.ruchbytom.pik-net.pl
inetnum: 213.216.64.240 - 213.216.64.243
netname: PL-RUCHBYT
descr: Ruch S.A. w Warszawie Oddzial w Katowicach Zespol w
Bytomiu
descr: WAN Link
country: PL [Poland]
role: PIK-NET ROLE
address: PiK-Net Sieci Rozlegle sp. z o.o.
route: 213.216.64.0/18
member-of: RS-TDCPL
descr: PIK-Net (PL) - Provider LIR
origin: AS13086
notify: hostm...@pik-net.pl
mnt-by: PIK-NET-MNT
changed: j...@pik-net.pl
changed: go...@waw.pdi.net
ASN: 13086
ASN Name: PIK-NET-AS
Country IP Range: 213.216.64.0 to 213.216.127.255
http://www.cidr-report.org/cgi-bin/as-report?as=13086
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45177
213.216.64.0/24 is listed on the Spamhaus Block List (SBL/ROKSO)
03-Aug-2006 10:05 GMT | SR04
MailTrain
Spammer DNS @213.216.64.242
1 SBL/ROKSO listings for IPs under the responsibility of pik-net.pl
http://www.spamhaus.org/sbl/listings.lasso?isp=pik-net.pl
Whois Output for: fendersondns.com
Domain Name Owner:
Fenderson, Nathaniel
716 S 5th. St.# C
Burbank, CA 91501
US
Administrative Contact:
Fenderson, Nathaniel [NF-88]
716 S 5th. St.# C
Burbank, CA 91501, US
Phone: 8188489190
Email: nataniels[]yahoo.com
Technical Contact:
Fenderson, Nathaniel [NF-88]
716 S 5th. St.# C
Burbank, CA 91501, US
Phone: 8188489190
Email: nata...@yahoo.com
Billing Contact:
Fenderson, Nathaniel [NF-88]
716 S 5th. St.# C
Burbank, CA 91501, US
Phone: 8188489190
Email: nata...@yahoo.com
Record Information:
Domain Record Created: August 14, 2006 00:00
Domain Record Updated: August 14, 2006 13:02
Domain Record Expires: August 14, 2007 00:00
DNS Information:
Name Server: dom1.omnis.com [216.239.128.4]
Name Server: dom2.omnis.com [216.239.128.5]
See also more omnis.com sightings:
http://groups.google.com/groups/search?q=omnis.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/5e43a18eecacd913
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/2f0e711aea847feb
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: