[email] [Mortgage - LowestMortgageQuotes] (hotofluxury.com - hormonalisation.com - whoisnowgood.com) Your Mortgage Report
TomezNet
IP 219.112.159.247 kita159247.kitanet.ne.jp
(at catv01.kitanet.co.jp / d.dns.jp)
Spamvert:
www.hotofluxury.com IP 218.234.22.15
(SBL42301, SBL44274, SBL46402, SBL46586) (at hanaro.com /
ins1.hananet.net)
NEW Mortgage image hosting:
http://www.hormonalisation.com/slices/
www.hormonalisation.com IP 203.186.92.80
(at ctinets.com / ns1o.ctihk.com)
Web: LowestMortgageQuotes Š 2006
More LowestMortgageQuotes sightings:
http://groups.google.com/groups/search?q=LowestMortgageQuotes+group%3A*abuse&start=0&scoring=d&
Forged Logos:
TRUSTE
VeriSign
For Decoded base64 text => see below
More info below:
====================
X-SID-PRA: Ricky Santos <Cody_...@alwaysbeconnected.com>
X-SID-Result: TempError
X-Message-Info: lDUZrA13SoVJm6aR8NaseEuzQfzC5FuwJSuT9nGGxZQ=
Received: from tomts41-srv.bellnexxia.net ([209.226.175.98]) by
bay0-pamc1-f7.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 28 Sep 2006 01:37:18 -0700
Received: from [MUNGED]
by toip6.bellnexxia.net with ESMTP; 28 Sep 2006 04:37:09 -0400
Received: (qmail 3740 invoked by uid 110); 28 Sep 2006 04:37:09 -0400
Delivered-To: [MUNGED]
Received: (qmail 3734 invoked from network); 28 Sep 2006 04:37:08 -0400
Received: from kita159247.kitanet.ne.jp (HELO 26553F8)
(219.112.159.247)
by [MUNGED] with SMTP; 28 Sep 2006 04:37:08 -0400
From: "Ricky Santos" <Cody_...@alwaysbeconnected.com>
Reply-To: "Ricky Santos" <Cody_...@alwaysbeconnected.com>
To: [MUNGED]
Subject: Re: Your Mortgage Report
Message-ID: <DLWJ557281...@alwaysbeconnected.com>
Date: Thu, 28 Sep 2006 04:37:08 -0500
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="--0-1789551589-1154907879=:37187"
Return-Path: Darcy...@ireland.com
X-OriginalArrivalTime: 28 Sep 2006 08:37:18.0852 (UTC)
FILETIME=[4F0AB440:01C6E2D9]
----0-1789551589-1154907879=:37187
Content-Type: multipart/alternative;
boundary="--0-1279078475-1825262125=:72217"
----0-1279078475-1825262125=:72217
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
spangle and propellant that automate it's
----0-1279078475-1825262125=:72217
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML>
<HEAD>
<META http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
</HEAD>
<BODY>
<div><font size="2" color="#FFFFFF" face="Arial, Helvetica,
sans-serif">
<a href="http://www.hotofluxury.com"><img alt=""
src="cid:wkuqn.15.mxzb" border="0"></a></font></div>
<div><font size="2" color="#FFFFFF" face="Courier New, Courier,
monospace">
spangle and propellant that automate it's</font></div>
</BODY>
</HTML>
----0-1279078475-1825262125=:72217--
----0-1789551589-1154907879=:37187
Content-Type: image/png;
name="delimitation.png"
Content-Transfer-Encoding: base64
Content-ID: <wkuqn.15.mxzb>
----0-1789551589-1154907879=:37187--
*** REMOVED Attachments: delimitation.png (6k) ****
Decoded base64 text:
Dear Home Owner,
Your credit does not matter to us! If you own real estate and want
IMMEDIATE
cash to spend ANY way you like, buy a new car of your dreams, or simply
wish to LOWER your monthly payments by one third or more, now is the
BEST time for it.
Our 10% FREE service will enable you to conveniently shop for mortgage
to obtain the best rates in the industry. Our national database will
allow you to access 100's lenders with thousands of programs that will
work with you, no matter your credit rating! With rates at 32 year
lows, now is the best time to take advantage and Save!
Don't worry about approval, credit is no matter for us!
Simply Click Here to fill out one-minute form and receive your FREE
competitive quotes.
John Morgan,
Approval Manager
- END of decoded text -
-- END OF SPAM --
See:
IP 219.112.159.247 kita159247.kitanet.ne.jp
http://www.moensted.dk/spam/?addr=219.112.159.247
abuse[]kitanet.ne.jp is listed in rfc-ignorant.org database
inetnum: 219.96.0.0 - 219.127.255.255
netname: JPNIC-NET-JP
descr: Japan Network Information Center
country: JP
inetnum: 219.112.144.0 - 219.112.159.255
netname: KITANET
descr: KITA Cable Network,Inc.
route: 219.112.128.0/19
descr: KITANET
origin: AS18134
notify: as-a...@gw.odn.ad.jp
mnt-by: MAINT-AS4722
changed: i...@gw.odn.ad.jp
ASN: 18134
ASN Name: JPNIC-ASBLOCK-AP (JPNIC)
Country IP Range: 219.96.0.0 to 219.127.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=18134
See:
www.hotofluxury.com IP 218.234.22.15
pf1.rgpack.com [218.234.22.15] [TTL=172800] [KR]
pf2.rgpack.com [218.234.22.16] [TTL=172800] [KR]
www.hotofluxury.com has no MX records -> [hotofluxury.com has 1 MX
record rx.hotofluxury.com (10)]
rx.hotofluxury.com claims to be non-existent host filter.rgnames.com:
220 filter.rgnames.com ESMTP
http://www.moensted.dk/spam/?addr=218.234.22.15
http://www.spamhaus.org/query/bl?ip=218.234.22.15
More 218.234.22.15 sightings:
http://groups.google.com/groups/search?q=218.234.22.15+group%3A*abuse&start=0&scoring=d&
Listed in:
SBL42301, SBL44274, SBL46402, SBL46586
8 SBL/ROKSO listings for IPs under the responsibility of hanaro.com
http://www.spamhaus.org/sbl/listings.lasso?isp=hanaro.com
http://www.cidr-report.org/cgi-bin/as-report?as=
Let see whois:
Registrar: WOOHO T&C CO., LTD. D/B/A RGNAMES.COM
Domain Name: HOTOFLUXURY.COM
Domain Status: ACTIVE
Registrar: Wooho T&C Co., Ltd. d/b/a RGNames.com
Referral URL: http://www.RGNames.com
Domain Registration Date....: 2006-07-15 GMT.
Domain Expiration Date......: 2007-07-15 GMT.
Domain Last Updated Date....: 2006-07-15 18:33:54 GMT.
Registrant:
Valod Maloich
7411 Grandview St.,
Chicago, IL 63221
US
Administrative, Technical, Billing Contact:
Valod Maloich mydo...@SEOULSEARCHING.COM
7411 Grandview St.,
Chicago, IL 63221
US
(PHONE) +1-312-448-7741 (FAX) +--
Domain Name Servers in listed order:
PF1.RGPACK.COM 218.234.22.15
PF2.RGPACK.COM 218.234.22.16
See:
www.hormonalisation.com IP 203.186.92.80
ns1.whoisnowgood.com [203.186.92.76] [TTL=172800] [HK]
ns2.whoisnowgood.com [202.103.172.106] [TTL=172800] [CN]
www.hormonalisation.com has no MX records -> hormonalisation.com has no
MX records
http://www.moensted.dk/spam/?addr=203.186.92.80
More 203.186.92.80 sightings:
http://groups.google.com/groups/search?q=203.186.92.80+group%3A*abuse
203.186.92.80 PTR record: 203186092080.ctinets.com
at ns1o.ctihk.com
inetnum: 203.186.92.64 - 203.186.92.95
netname: ISERVHKLTD
country: HK [Hong Kong]
descr: I Services Ltd- TAC
admin-c: CH134-AP
tech-c: SL113-AP
status: ASSIGNED NON-PORTABLE
changed: ken...@ctihk.com
route: 203.186.92.0/24
descr: Hong Kong CTI
origin: AS9269
mnt-by: MAINT-AS9269
changed: saml...@ctihk.com
route: 203.186.92.0/24
descr: AS9269/CTI
origin: AS9269
remarks: City Telecom (H.K.) Ltd.
notify: kwo...@ctihk.com
mnt-by: MAINT-AS9269
changed: kwo...@ctihk.com
route: 203.186.92.0/24
descr: CTI/HKBN
origin: AS9267
mnt-by: MAINT-AS7586
changed: trent.oc...@paradox.net.au
ASN: 9269
ASN Name: CTIHK-AS-AP (City Telecom (H.K.) Ltd.)
Country IP Range: 203.186.0.0 to 203.186.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9269
12 SBL/ROKSO listings for IPs under the responsibility of ctihk.com
http://www.spamhaus.org/sbl/listings.lasso?isp=ctihk.com
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/
Domain name: hormonalisation.com
Registrant Contact:
PrivateDomainRegistrations
Gary Reed (privacydomains[]hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA
Administrative Contact:
PrivateDomainRegistrations
Gary Reed (privacy...@hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA
Technical Contact:
PrivateDomainRegistrations
Gary Reed (privacy...@hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA
Status: Locked
Name Servers:
ns1.whoisnowgood.com
ns2.whoisnowgood.com
Creation date: 26 Sep 2006 02:56:05
Expiration date: 26 Sep 2007 02:56:05
See also More whoisnowgood.com sightings:
http://groups.google.com/groups/search?q=whoisnowgood.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/7314d06af43a26b2
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: