[email] [Awesome Rates] (r26q.com - c9482.com) Ms
TomezNet
IP 210.113.109.198
(at rev2.kornet.net)
URL:
http://geocities.yahoo.com.br/navarro63myatt
Redirected to:
http://br.geocities.com/navarro63myatt/
And Redirected again to:
http://www.r26q.com/
Spamvert:
www.r26q.com IP 222.122.151.204
(SBL42440 / SBL43387) (at kornet.net)
© Awesome Rates 2003 - 2006
More Awesome Rates spam sightings:
http://groups.google.com/groups/search?q=%22Awesome+Rates%22+group%3A*abuse
Received at an address harvested from domain registration.
More info below:
====================
X-SID-PRA: Ben Weeks <Adam.S...@bkzbhv.belpak.mogilev.by>
X-SID-Result: TempError
X-Message-Info: txF49lGdW41xBpIxIAUpnGhri55vaGJQil9yeHG2TKg=
Received: from tomts21-srv.bellnexxia.net ([209.226.175.183]) by
bay0-pamc1-f5.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 16 Jun 2006 15:03:35 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 16 Jun 2006 18:03:29 -0400
Received: (qmail 18592 invoked by uid 110); 16 Jun 2006 22:03:28 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 18049 invoked from network); 16 Jun 2006 22:03:28
-0000
Received: from unknown (HELO 461B678) (210.113.109.198)
by xx..xx..xx.net with SMTP; 16 Jun 2006 22:03:27 -0000
Received: from 200.51.%DIGSTAT2.%STATDIG
(srv-200-51-%DIGSTAT2-%STATDIG.vacsatup.com)
(200.51.%DIGSTAT2.%STATDIG) by mta176.mail.re%LOWDIG.yahoo.com with
SMTP; Fri, 16 Jun 2006 17:03:24 -0600
Received: by srv-200-51-%DIGSTAT2-%STATDIG.vacsatup.com (Postfix, from
userid 0) id %UPPERDIGIT[11]; Fri, 16 Jun 2006 17:03:24 -0600 (ART)
Date: Fri, 16 Jun 2006 17:03:24 -0600
To: xx..xx@xx..xx.com
Cc:
From: "Ben Weeks" <Adam.S...@bkzbhv.belpak.mogilev.by>
Reply-to: reply-0...@bkzbhv.belpak.mogilev.by
Subject: Ms
Message-ID: <%LOWERDIGIT[32]@bkzbhv.belpak.mogilev.by>
X-Priority: 3
X-Loop: ab...@bkzbhv.belpak.mogilev.by
Errors-To: err...@bkzbhv.belpak.mogilev.by
Precedence: list
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="iso-8859-1"
Return-Path: stre...@bestspring.com
X-OriginalArrivalTime: 16 Jun 2006 22:03:35.0208 (UTC)
FILETIME=[B6A2D280:01C69190]
Decrease your monthly mortgage payments by more than 1/3.
Junes Prequalified-Rates
______________________
$333,000.00 @ 4.09%
$694,000.00 @ 3.86%
$536,000.00 @ 3.49%
http://geocities.yahoo.com.br/navarro63myatt
-- END OF SPAM --
See:
IP 210.113.109.198
http://www.moensted.dk/spam/?addr=210.113.109.198
Blocked due to spam, see http://korea.services.net/blocked.phtml
IPv4 Address : 210.113.109.0-210.113.109.255
Network Name : KORNET-INFRA000001
Connect ISP Name : KORNET
Organization ID : ORG1600
Org Name : Korea Telecom
route: 210.113.0.0/16
descr: KORnet operation Center
origin: AS4766
mnt-by: MAINT-AS4766
changed: ch...@streamwk.kix.net
changed: eyefa...@kornet.net
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 210.96.0.0 to 210.127.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
See:
www.r26q.com IP 222.122.151.204
ns0.r26q.com A IN 86400 222.122.151.204
ns1.r26q.com A IN 86400 222.122.151.204
dns5.c9482.com [222.122.151.204]
dns6.c9482.com [222.122.151.204]
www.r26q.com has no MX records -> [r26q.com has 2 MX records
mail.r26q.com (0) mx20.r26q.com (20)]
mail.r26q.com IP 222.122.151.204
mx20.r26q.com IP 222.122.151.204
http://www.moensted.dk/spam/?addr=222.122.151.204
http://www.spamhaus.org/query/bl?ip=222.122.151.204
More 222.122.151.204 sightings:
http://groups.google.com/groups/search?q=222.122.151.204+group%3A*abuse
Org Name : Korea Telecom
Service Name : KORNET
route: 222.122.0.0/16
descr: Korea Telecom, Seoul, Korea
origin: AS4766
mnt-by: MAINT-AS4766
changed: chs...@soback.kornet.net
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 222.122.0.0 to 222.122.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42440
222.122.151.204/32 is listed on the Spamhaus Block List (SBL)
15-Jun-2006 03:21 GMT | SR15
761m0rt.com ; etc
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43387
222.122.151.0/24 is listed on the Spamhaus Block List (SBL)
15-Jun-2006 03:29 GMT | SR04
Dirty block: American criminal mortgage spammers
26 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
Let see whois:
Registrar: ONLINE SAS
DNS Servers: DNS5.C9482.COM DNS6.C9482.COM
DOMAIN
Domain Name : r26q.com (RQC4-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Registrant / Admin Contact :
ORGANISATION
aleadz (ALEADZ2-BMN-ORG)
180 broadway suit 112
10005 new york
UNITED STATES
Contact
John PACE
phone : 212837
fax :
e-mail : a1gaming[]gmail.com
Billing Contact :
ORGANISATION
aleadz (ALEADZ2-BMN-ORG)
180 broadway suit 112
10005 new york
UNITED STATES
Contact
John PACE
phone : 212837
fax :
e-mail : a1ga...@gmail.com
Technical Contact :
ORGANISATION
aleadz (ALEADZ2-BMN-ORG)
180 broadway suit 112
10005 new york
UNITED STATES
Contact
John PACE
phone : 212837
fax :
e-mail : a1ga...@gmail.com
Domain servers :
dns5.c9482.com (DCC24-BMN-HST)
dns6.c9482.com (DCC25-BMN-HST)
Created on 04/14/2006 06:34:21
Updated on 05/24/2006 21:00:32
Expires on 04/14/2007 02:34:21
More r26q.com sightings:
http://groups.google.com/groups/search?q=r26q.com+group%3A*abuse
See:
c9482.com
Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : c9482.com
Registrant:
Name : mike williams
Email : mah...@yahoo.com
Address : 2832 20th st
Zipcode : 18273
Nation : US
Tel : 4324243
Fax :
Administrative Contact:
Name : mike williams
Email : mah...@yahoo.com
Address : 2832 20th st
Zipcode : 18273
Nation : US
Tel : 4324243
Fax :
Technical Contact:
Name : mike williams
Email : mah...@yahoo.com
Address : 2832 20th st
Zipcode : 18273
Nation : US
Tel : 4324243
Fax :
Name Servers:
dns5.c9482.com 222.122.151.204
dns6.c9482.com 222.122.151.204
Dates & Status:
Created Date 2006-04-05 20:47:19 EDT
Updated Date 2006-04-05 20:47:19 EDT
Valid Date 2007-04-05 20:47:19 EDT
Status ACTIVE
More c9482.com sightings:
http://groups.google.com/groups/search?q=c9482.com+group%3A*abuse
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: