Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [Mortgage] (ztr261.com - hhn1.com) you win when lenders bid

0 views
Skip to first unread message

TomezNet

unread,
Aug 5, 2006, 2:00:29 AM8/5/06
to
Received From:
IP 84.167.106.137 p54a76a89.dip.t-dialin.net
(at dns04.btx.dtag.de / telekom.de / t-ipnet.de)

Spamvert:
www.ztr261.com IP 59.188.14.201
(SBL45181) (at newworldtel.com / dns1.nwtgigalink.com)

Site:
© Awesome Rates 2003 - 2006

More spammer sightings:
http://groups.google.com/groups/search?q=%22Awesome+Rates%22+group%3A*abuse

More info below:
====================

X-SID-PRA: Marquita <lovem...@freudich.ch>
X-SID-Result: TempError
X-Message-Info: txF49lGdW41CoJjR4n1X4Rm42ROAVK+/PBQXVEtrbpo=
Received: from tomts34-srv.bellnexxia.net ([209.226.175.108]) by
bay0-pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 4 Aug 2006 05:31:30 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip6.bellnexxia.net with ESMTP; 04 Aug 2006 08:31:13 -0400
Message-Id: <578pq2$1ud...@toip6.bellnexxia.net>
Received: (qmail 18289 invoked by uid 110); 4 Aug 2006 08:31:12 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 18246 invoked from network); 4 Aug 2006 08:31:11 -0400
Received: from p54a76a89.dip.t-dialin.net (HELO 46996978)
(84.167.106.137)
by xx..xx..xx.net with SMTP; 4 Aug 2006 08:31:11 -0400
Received: from freelist1 (10.12.8.254) by listserv1.about.com (LSMTP
for Windows NT v1.1b) with SMTP id <8.000...@listserv1.about.com>;
Fri, 04 Aug 2006 05:31:09 -0800
Date: Fri, 04 Aug 2006 05:31:09 -0800
From: "Marquita" <lovem...@freudich.ch>
To: xx..xx@xx..xx.com
Subject: you win when lenders bid
X-Accept-Language: en
Approved-by: get...@about.com
User-Agent: AboutSpecial/1.1
MIME-Version: 1.0
Content-Type: text/plain
Return-Path: loum...@98babies.every1.net
X-OriginalArrivalTime: 04 Aug 2006 12:31:30.0595 (UTC)
FILETIME=[E9D04730:01C6B7C1]

Dear Home Owner,

Your Credit Doesn't Matter To Us!

If you own real estate and want Immiediate cash to spend
ANY way you like, or simply wish to LOWER your monthly payments
by over 33% or more then you have found the right place.

$500,000 as low as 3.65%
$375,000 as low as 3.85%
$275,000 as low as 3.90%
$125,000 as low as 3.89%

Visit our site by clicking http://www.ztr261.com

Marlon Dow Account Manager


-- END OF SPAM --

See:
IP 84.167.106.137 p54a76a89.dip.t-dialin.net

http://www.moensted.dk/spam/?addr=84.167.106.137
http://cbl.abuseat.org/lookup.cgi?ip=84.167.106.137
http://www.spamhaus.org/query/bl?ip=84.167.106.137
http://spamcop.net/w3m?action=checkblock&ip=84.167.106.137

inetnum: 84.136.0.0 - 84.191.255.255
netname: DTAG-DIAL20
descr: Deutsche Telekom AG
country: DE [Germany]

route: 84.128.0.0/10
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
changed: b...@nic.dtag.de
ASN: 3320
ASN Name: DTAG (Deutsche Telekom AG)
Country IP Range: 84.128.0.0 to 84.191.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3320

4 SBL/ROKSO listings for IPs under the responsibility of telekom.de
http://www.spamhaus.org/sbl/listings.lasso?isp=telekom.de

See:
www.ztr261.com IP 59.188.14.201
ns3.ztr261.com A IN 14400 59.188.14.201
ns4.ztr261.com A IN 14400 59.188.14.201
ns3.hhn1.com [59.188.14.201]

www.ztr261.com has no MX records -> [ztr261.com has 1 MX record
mail.ztr261.com (10)]

http://www.moensted.dk/spam/?addr=59.188.14.201
http://spam.deadbeef.com/bl/?a=59.188.14.201
http://www.spamhaus.org/query/bl?ip=59.188.14.201

inetnum: 59.188.0.0 - 59.188.255.255
netname: NWT-NET
descr: New World Telecom Ltd., Hong Kong
country: HK
route: 59.188.0.0/19
descr: NWT IP Network
origin: AS17444
remarks: 32 Class C
notify: radb_...@newworldtel.com
ASN: 17444
Country IP Range: 59.188.0.0 to 59.188.255.255
ASN Name: NWT-AS-AP (AS number for New World Telephone Ltd.)
http://www.cidr-report.org/cgi-bin/as-report?as=17444

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45181
59.188.14.201/32 is listed on the Spamhaus Block List (SBL)

03-Aug-2006 13:49 GMT | SR22

Spam webhosting and DNS - lowestrates2.net
Spam websites for mortgages.

36 SBL/ROKSO listings for IPs under the responsibility of
newworldtel.com
http://www.spamhaus.org/sbl/listings.lasso?isp=newworldtel.com

Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : ztr261.com (ZTRCOM2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com

Registrant / Admin Contact :
ORGANISATION
dinka (DINKA2-BMN-ORG)

17 Demesne

3243 IRELAND
IRELAND

Contact
John GARLAND
phone : 353-8725-634
fax :
e-mail : rich281[]yahoo.com

Billing Contact :
ORGANISATION
dinka (DINKA2-BMN-ORG)

17 Demesne

3243 IRELAND
IRELAND

Contact
John GARLAND
phone : 353-8725-634
fax :
e-mail : ric...@yahoo.com

Technical Contact :
ORGANISATION
dinka (DINKA2-BMN-ORG)

17 Demesne

3243 IRELAND
IRELAND

Contact
John GARLAND
phone : 353-8725-634
fax :
e-mail : ric...@yahoo.com

Domain servers :
ns3.hhn1.com (NHC221-BMN-HST)
ns4.hhn1.com (NHC222-BMN-HST)

Created on 08/01/2006 17:08:52
Updated on 08/01/2006 17:07:26
Expires on 08/01/2007 13:08:52

More ztr261.com sightings:
http://groups.google.com/groups/search?q=ztr261.com+group%3A*abuse

See:
ns3.hhn1.com IP 59.188.14.201

Let see whois:
Registrar: YESNIC CO. LTD.
Domain Name : hhn1.com

Registrant:
Name : michael ASHCROFT
Email : fannypack29[]yahoo.com
Address : 96 LEADER RD
Zipcode : MOUNT ORAB
Nation : US
Tel : 513-532-9342
Fax :

Administrative Contact:
Name : michael ASHCROFT
Email : fanny...@yahoo.com
Address : 96 LEADER RD
Zipcode : MOUNT ORAB
Nation : US
Tel : 513-532-9342
Fax :

Technical Contact:
Name : michael ASHCROFT
Email : fanny...@yahoo.com
Address : 96 LEADER RD
Zipcode : MOUNT ORAB
Nation : US
Tel : 513-532-9342
Fax :

Name Servers:
ns3.hhn1.com 59.188.14.201
ns4.hhn1.com 59.188.14.201

Dates & Status:
Created Date 2006-06-14 13:00:04 EDT
Updated Date 2006-06-14 13:00:04 EDT
Valid Date 2007-06-14 13:00:04 EDT
Status ACTIVE

More hhn1.com sightings:
http://groups.google.com/groups/search?q=hhn1.com+group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/c116ba5c605f65c8

Cheers, Tomez


--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages