[email] [Mortgage - LowestMortgageQuotes] (perrrfecct.com - whoisnowgood.com) Fwd:
TomezNet
IP 67.11.218.113 cpe-67-11-218-113.satx.res.rr.com
(at DNS2.RR.COM)
Spamvert:
www.perrrfecct.com IP 203.186.92.80
(at ctinets.com / ns1o.ctihk.com)
ns2.whoisnowgood.com IP 202.103.172.106 and IP 60.200.228.30
(SBL46182 / SBL46188) (at jxtvnet.com)
ns1.whoisnowgood.com IP 203.186.92.76
(SBL46240) (ctihk.com)
Web: LowestMortgageQuotes Š 2006
More LowestMortgageQuotes sightings:
http://groups.google.com/groups/search?q=LowestMortgageQuotes+group%3A*abuse&start=0&scoring=d&
Forged Logos:
TRUSTE
VeriSign
More info below:
====================
X-SID-PRA: Landon Russo <Pasquale...@bonsaipotato.com>
X-SID-Result: TempError
X-Message-Info: lDUZrA13SoWLliUdwX0Oes7KZd6QQwknj7xcLQ35HGQ=
Received: from tomts3-srv.bellnexxia.net ([209.226.175.115]) by
bay0-pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 27 Sep 2006 17:15:56 -0700
Received: from [MUNGED]
by toip3.bellnexxia.net with ESMTP; 27 Sep 2006 20:15:46 -0400
Message-Id: <594t48$2oh...@toip3.bellnexxia.net>
Received: (qmail 23565 invoked by uid 110); 27 Sep 2006 20:15:46 -0400
Delivered-To: [MUNGED]
Received: (qmail 23562 invoked from network); 27 Sep 2006 20:15:45
-0400
Received: from cpe-67-11-218-113.satx.res.rr.com (HELO
your-727a0a4e7c.satx.rr.com) (67.11.218.113)
by [MUNGED] with SMTP; 27 Sep 2006 20:15:45 -0400
Received: from gloriana
by bonsaipotato.com with SMTP id bJf6EfeRVO
for <[MUNGED]>; Wed, 27 Sep 2006 19:15:19 +0600
From: "Landon Russo" <Pasquale...@bonsaipotato.com>
To: [MUNGED]
Subject: Fwd:
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Date: Wed, 27 Sep 2006 20:18:11 -0400
Return-Path: Pasquale...@bonsaipotato.com
X-OriginalArrivalTime: 28 Sep 2006 00:15:56.0915 (UTC)
FILETIME=[44CF6430:01C6E293]
Hello,
You have been chosen to participate in an invitation only limited time
event!
Are you currently paying too much for your mortgage? STOP! We can help
you lower that today!
Answer only a few questions and we can give you an approval in under 30
seconds it is that simple!
And stop fighting for lenders let them fight for you! Make them work
for your business by giving you the lowest rates around!
Two hundred and thirty thousand dollar loans are available for only
three hundred and forty dollars/month! WE ARE PRACTICALLY GIVING AWAY
MONEY!
Think your credit is too bad to get a deal like this? THINK AGAIN! We
will have you saving your money in no time!
Are you ready to save your money?
Regards,
Numbers Nolan
I just meant that a lien isnt much compared to what they could do if
you got seriously in arrears.
Lets not kid ourselves.
-- END OF SPAM --
See:
IP 67.11.218.113 cpe-67-11-218-113.satx.res.rr.com
http://www.moensted.dk/spam/?addr=67.11.218.113
OrgName: Road Runner HoldCo LLC
OrgID: RRSW
NetRange: 67.8.0.0 - 67.11.255.255
CIDR: 67.8.0.0/14
NetName: RR-SOUTHEAST-BLK2
NetHandle: NET-67-8-0-0-1
route: 67.11.128.0/17
descr: RR-Route
origin: AS11427
remarks:
notify: ipad...@rr.com
ASN: 11427
ASN Name: SCRR-11427
Country IP Range: 67.0.0.0 to 67.31.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=11427
25 SBL/ROKSO listings for IPs under the responsibility of rr.com
http://www.spamhaus.org/sbl/listings.lasso?isp=rr.com
See:
www.perrrfecct.com IP 203.186.92.80
ns1.whoisnowgood.com [203.186.92.76] [TTL=172800] [HK]
ns2.whoisnowgood.com [202.103.172.106] [TTL=172800] [CN]
www.perrrfecct.com has no MX records -> perrrfecct.com has no MX
records
http://www.moensted.dk/spam/?addr=203.186.92.80
203.186.92.80 PTR record: 203186092080.ctinets.com
at ns1o.ctihk.com
inetnum: 203.186.92.64 - 203.186.92.95
netname: ISERVHKLTD
country: HK [Hong Kong]
descr: I Services Ltd- TAC
admin-c: CH134-AP
tech-c: SL113-AP
status: ASSIGNED NON-PORTABLE
changed: ken...@ctihk.com
route: 203.186.92.0/24
descr: Hong Kong CTI
origin: AS9269
mnt-by: MAINT-AS9269
changed: saml...@ctihk.com
route: 203.186.92.0/24
descr: AS9269/CTI
origin: AS9269
remarks: City Telecom (H.K.) Ltd.
notify: kwo...@ctihk.com
mnt-by: MAINT-AS9269
changed: kwo...@ctihk.com
route: 203.186.92.0/24
descr: CTI/HKBN
origin: AS9267
mnt-by: MAINT-AS7586
changed: trent.oc...@paradox.net.au
ASN: 9269
ASN Name: CTIHK-AS-AP (City Telecom (H.K.) Ltd.)
Country IP Range: 203.186.0.0 to 203.186.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9269
12 SBL/ROKSO listings for IPs under the responsibility of ctihk.com
http://www.spamhaus.org/sbl/listings.lasso?isp=ctihk.com
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/
Domain name: perrrfecct.com
Registrant Contact:
PrivateDomainRegistrations
Gary Reed (privacy...@hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA
Administrative Contact:
PrivateDomainRegistrations
Gary Reed (privacy...@hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA
Technical Contact:
PrivateDomainRegistrations
Gary Reed (privacy...@hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA
Status: Locked
Name Servers:
ns1.whoisnowgood.com
ns2.whoisnowgood.com
Creation date: 27 Sep 2006 04:33:50
Expiration date: 27 Sep 2007 04:33:50
More perrrfecct.com sightings:
http://groups.google.com/groups/search?q=perrrfecct.com+group%3A*abuse
See:
ns2.whoisnowgood.com IP 202.103.172.106 and IP 60.200.228.30
ns2.whoisnowgood.com has no MX records -> whoisnowgood.com has no MX
records
http://www.moensted.dk/spam/?addr=60.200.228.30
http://www.spamhaus.org/query/bl?ip=60.200.228.30
More 60.200.228.30 sightings:
http://groups.google.com/groups/search?q=60.200.228.30+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL46182
60.200.228.30/32 is listed on the Spamhaus Block List (SBL)
05-Sep-2006 04:33 GMT | SR23
mortgage spam nameserver - ns2.j00l.info
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL46188
60.200.228.0/24 is listed on the Spamhaus Block List (SBL)
01-Sep-2006 02:11 GMT | SR04
Dirty block
5 SBL/ROKSO listings for IPs under the responsibility of jxtvnet.com
http://www.spamhaus.org/sbl/listings.lasso?isp=jxtvnet.com
postmaster and abuse[]jxtvnet.com are listed in rfc-ignorant.org
database
See:
ns1.whoisnowgood.com IP 203.186.92.76
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL46240
203.186.92.76/32 is listed on the Spamhaus Block List (SBL)
15-Sep-2006 06:36 GMT | SR23
Spam webhosting - timeloanisfour.com
12 SBL/ROKSO listings for IPs under the responsibility of ctihk.com
http://www.spamhaus.org/sbl/listings.lasso?isp=ctihk.com
More whoisnowgood.com sightings:
http://groups.google.com/groups/search?q=whoisnowgood.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/71dfd78325090120
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: