[email] (expressdealleads.com) FW: Wear our superb accessories and show your co-workers you have become a success.
TomezNet
IP 58.33.191.137
(at ns-pxb.online.sh.cn / CHINANET-SH)
Spamvert:
ujh.g46R.expressdealleads.com IP 218.106.33.103
(SBL36607 / SBL31432) (at bj-dns.cnc171.net / china-netcom.com)
Watches replica spam.
Received at an address harvested from domain registration.
More info below:
====================
X-SID-PRA: Meeka <el...@my.love.km.ru>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ46MLOHbSVNmv1CtUx84iUAKb20ATtrhJ8o=
Received: from tomts41-srv.bellnexxia.net ([209.226.175.98]) by
bay0-pamc1-f12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 14 Jan 2006 06:45:57 -0800
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 14 Jan 2006 09:45:56 -0500
Received: (qmail 30562 invoked by uid 110); 14 Jan 2006 14:45:55 -0000
Delivered-To: 13-xx..xx@xx..xx.com
Received: (qmail 29505 invoked from network); 14 Jan 2006 14:45:55
-0000
Received: from unknown (HELO my.love.km.ru) (58.33.191.137)
by xx..xx..xx.net with SMTP; 14 Jan 2006 14:45:54 -0000
Message-ID: <68603416...@my.love.km.ru>
Date: Fri, 13 Jan 2006 05:30:02 -1100
From: "Meeka" <el...@my.love.km.ru>
User-Agent: Pegasus Mail for Win32 (v3.12a)
MIME-Version: 1.0
To: "Yosha" <xx..xx@xx..xx.com>
Subject: FW: Wear our superb accessories and show your co-workers you
have become a success.
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: el...@my.love.km.ru
X-OriginalArrivalTime: 14 Jan 2006 14:45:58.0021 (UTC)
FILETIME=[3AEE4B50:01C61919]
Hey guy,
Hey bro, just wanted to let you know about my latest frill grabbing
secret-
take a look at this e-mail!
Thank you for your attention,
Meeka
-----Original Message-----
From: Gawayne [mailto:xx..xx@xx..xx.com]
Sent: Monday, January 09, 2006 10:30 AM
To: Meeka
Subject: Wear our superb accessories and show your co-workers you have
become a success.
Hey missy, Meeka
It'd be splendid for you to purchase some unique timepieces for
yourself.
You'll be even more stunning than before! Specials! Fashionable
chronometers
available just for you at discounted prices! I see you being frugal on
comfortable things every month. This is such a good deal that you can
splurge a little!
http://ujh.g46R.expressdealleads.com/kmu/
The e store is convenient, with a hasty consignment and web package
positioning device. Moreover, you truly deserve to have a beautiful
item on
your wrist.
lamely a couple of times, cleared his throat, became red in the face,
and
finally ended by fisherman remarking that all he hoped the cabins
signs.
This is the first time I have spoken with another of my shot-put kind
through substitute written words.
lamely a couple of times, cleared his throat, became red in the face,
and
finally ended by fisherman remarking that listen he hoped the cabins
Best regards,
Gawayne
-- END OF SPAM --
See:
IP 58.33.191.137
http://www.moensted.dk/spam/?addr=58.33.191.137
inetnum: 58.33.188.0 - 58.33.191.255
netname: CHINANET-SH-BBAD-205
descr: Chinanet shanghai boardband adsl 205
country: CN
route: 58.32.0.0/13
descr: China Telecom ShangHai province
origin: AS4134
mnt-by: MAINT-AS4134
changed: tia...@cndata.com
7 SBL listings for IPs under the responsibility of CHINANET-SH
http://www.spamhaus.org/SBL/listings.lasso?isp=CHINANET-SH
See:
ujh.g46R.expressdealleads.com IP 218.106.33.103
ns1.expressdealleads.com [218.106.33.102]
ns2.expressdealleads.com [218.27.177.158]
ujh.g46R.expressdealleads.com has no MX records ->
g46R.expressdealleads.com has no MX records -> [expressdealleads.com
has 1 MX record mail.expressdealleads.com (12300)]
http://www.moensted.dk/spam/?addr=218.106.33.103
http://www.spamhaus.org/query/bl?ip=218.106.33.103
More 218.106.33.103 spam sightings:
http://groups.google.com/groups?q=218.106.33.103+group%3A*abuse
inetnum: 218.106.33.64 - 218.106.33.127
netname: baosui-information-Ltd
country: cn
descr: jiaxing city,jiangsu province
route: 218.106.32.0/21
descr: CHINA NETCOM
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL31432
218.106.33.64/26 is listed on the Spamhaus Block List (SBL)
03-Sep-2005 23:51 GMT | SR04
einewsnet.com - stock pump & dump spammers @218.106.33.98
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL36607
218.106.33.103/32 is listed on the Spamhaus Block List (SBL)
12-Jan-2006 13:32 GMT | SR04
35 SBL/ROKSO listings for IPs under the responsibility of
china-netcom.com
http://www.spamhaus.org/SBL/listings.lasso?isp=china-netcom.com
Let see whois:
ICANN Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA
DNS.COM.CN
Domain Name.......... expressdealleads.com
Creation Date........ 2006-01-11 13:23:01
Registration Date.... 2006-01-11 13:23:01
Expiry Date.......... 2007-01-11 13:23:01
Organisation Name.... Lixing JIANG
Organisation Address. 513 Xujiahui Road
Organisation Address.
Organisation Address. Shanghai
Organisation Address. 200335
Organisation Address. SH
Organisation Address. CN
Admin Name........... Lixing JIANG
Admin Address........ 513 Xujiahui Road
Admin Address........
Admin Address........ Shanghai
Admin Address........ 200335
Admin Address........ SH
Admin Address........ CN
Admin Email.......... art_kordus[]hotmail.com
Admin Phone.......... +86.2154827154
Admin Fax............ +86.2154827154
Tech Name............ he wenjie
Tech Address......... 706,huanandianli building,shennanzhong rd
Tech Address.........
Tech Address......... shenzhen
Tech Address......... 518031
Tech Address......... SZ
Tech Address......... CN
Tech Email........... support[]speed123.com
Tech Phone........... +86.75561320100
Tech Fax............. +86.61320100
Bill Name............ he wenjie
Bill Address......... 706,huanandianli building,shennanzhong rd
Bill Address.........
Bill Address......... shenzhen
Bill Address......... 518031
Bill Address......... SZ
Bill Address......... CN
Bill Email........... sup...@speed123.com
Bill Phone........... +86.75561320100
Bill Fax............. +86.61320100
Name Server.......... ns2.expressdealleads.com
Name Server.......... ns1.expressdealleads.com
More expressdealleads.com spam sightings:
http://groups.google.com/groups?q=expressdealleads.com+group%3A*abuse
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
TomezNet
IP 58.33.191.137
(at CHINANET-SH)
Spamvert:
ujh.g46R.expressdealleads.com IP 218.106.33.103
(SBL36607 / SBL31432) (at bj-dns.cnc171.net / china-netcom.com)
Watches replica spam.
Received at a spam-trap.
More info below:
====================
X-Message-Status: n:0
X-SID-PRA: Meeka <el...@my.love.km.ru>
X-SID-Result: TempError
X-Message-Info: 6sSXyD95QpWnwh9YPe6mmxygMRzrInhfoEYhhRVvoBw=
Received: from tomts49-srv.bellnexxia.net ([209.226.175.193]) by
bay0-pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 14 Jan 2006 06:46:02 -0800
Received: from xx..xx..xx.net ([207.58.1....])
by toip1.bellnexxia.net with ESMTP; 14 Jan 2006 09:45:56 -0500
Received: (qmail 30243 invoked by uid 110); 14 Jan 2006 14:45:55 -0000
Delivered-To: 17-xx..xx@xx..xx.com
Received: (qmail 29505 invoked from network); 14 Jan 2006 14:45:55
-0000
Received: from unknown (HELO my.love.km.ru) (58.33.191.137)
by xx..xx..xx.net with SMTP; 14 Jan 2006 14:45:54 -0000
Message-ID: <68603416...@my.love.km.ru>
Date: Fri, 13 Jan 2006 05:30:02 -1100
From: "Meeka" <el...@my.love.km.ru>
User-Agent: Pegasus Mail for Win32 (v3.12a)
MIME-Version: 1.0
To: xx..xx@xx..xx.com
Subject: FW: Wear our superb accessories and show your co-workers you
have become a success.
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: el...@my.love.km.ru
X-OriginalArrivalTime: 14 Jan 2006 14:46:02.0498 (UTC)
FILETIME=[3D996E20:01C61919]
Hey guy,
Meeka
Hey missy, Meeka
Best regards,
Gawayne
See:
IP 58.33.191.137
http://www.moensted.dk/spam/?addr=58.33.191.137
route: 58.32.0.0/13
http://www.moensted.dk/spam/?addr=218.106.33.103
http://www.spamhaus.org/query/bl?ip=218.106.33.103
More expressdealleads.com spam sightings:
http://groups.google.com/groups?q=expressdealleads.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/fc0f2d7a54a14903
TomezNet
IP 58.33.191.137
(at ns-pxb.online.sh.cn / CHINANET-SH)
Spamvert:
ujh.g46R.expressdealleads.com IP 218.106.33.103
(SBL36607 / SBL31432) (at china-netcom.com)
Watches replica spam.
More info below:
====================
X-SID-PRA: Meeka <el...@my.love.km.ru>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ46MLOHbSVNmv1CtUx84iUAKb20ATtrhJ8o=
Received: from tomts41-srv.bellnexxia.net ([209.226.175.98]) by
bay0-pamc1-f12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 14 Jan 2006 06:46:00 -0800
Received: from xx..xx..xx.net ([207.58.1....])
by toip2.bellnexxia.net with ESMTP; 14 Jan 2006 09:45:56 -0500
Received: (qmail 30530 invoked by uid 110); 14 Jan 2006 14:45:55 -0000
Delivered-To: 17-xx..xx@xx..xx.com
Received: (qmail 29505 invoked from network); 14 Jan 2006 14:45:55
-0000
Received: from unknown (HELO my.love.km.ru) (58.33.191.137)
by xx..xx.com with SMTP; 14 Jan 2006 14:45:54 -0000
Message-ID: <68603416...@my.love.km.ru>
Date: Fri, 13 Jan 2006 05:30:02 -1100
From: "Meeka" <el...@my.love.km.ru>
User-Agent: Pegasus Mail for Win32 (v3.12a)
MIME-Version: 1.0
To: xx..xx@xx..xx.com
Subject: FW: Wear our superb accessories and show your co-workers you
have become a success.
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: el...@my.love.km.ru
X-OriginalArrivalTime: 14 Jan 2006 14:46:00.0865 (UTC)
FILETIME=[3CA04110:01C61919]
Hey guy,
Meeka
Hey missy, Meeka
Best regards,
Gawayne
See:
IP 58.33.191.137
http://www.moensted.dk/spam/?addr=58.33.191.137
inetnum: 58.33.188.0 - 58.33.191.255