Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [counterfeit] (valuecreatorineworld.org - uyew.org - dns.com.cn) finally, think i found it

15 views

Skip to first unread message

TomezNet

unread,

Aug 13, 2006, 1:00:03 PM8/13/06

Received From:
IP 201.214.49.15 pc-15-49-214-201.cm.vtr.net
(at NS00.VTR.NET / VTR.CL)

Spamvert:
www.laxr.valuecreatorineworld.org IP 85.100.115.116
(SBL45045) (at ttnet.net.tr / turktelekom.com.tr)

Frames Redirected to:
http://www.uyew.org/

www.uyew.org IP 211.95.79.58
(SBL45091) (at cnuninet.com)

>From web:
Copiright © 2003 Exquisite Replicas. All rights reserved.

More Exquisite Replicas sightings:
http://groups.google.com/groups/search?q=%22Exquisite+Replicas%22+group%3A*abuse&start=0&scoring=d&

More info below:
====================

X-SID-PRA: Vanessa <hou...@vtr.net>
X-SID-Result: TempError
X-Message-Info: txF49lGdW42yG3f8mpRi55sqPNdxQvGVXp5pgh0XSYk=
Received: from tomts2-srv.bellnexxia.net ([209.226.175.114]) by
bay0-pamc1-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 11 Aug 2006 15:45:47 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 11 Aug 2006 18:45:41 -0400
Received: (qmail 9500 invoked by uid 110); 11 Aug 2006 18:45:40 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 9494 invoked from network); 11 Aug 2006 18:45:40 -0400
Received: from pc-15-49-214-201.cm.vtr.net (HELO vtr.net)
(201.214.49.15)
by xx..xx..xx.net with SMTP; 11 Aug 2006 18:45:40 -0400
Message-ID: <13CCC3A4...@vtr.net>
Date: Fri, 11 Aug 2006 16:35:50 -0600
Reply-To: "Vanessa" <hou...@vtr.net>
From: "Vanessa" <hou...@vtr.net>
User-Agent: Mozilla 4.77C-CCK-MCD {C-UDP; EBM-APPLE} (Macintosh; U;
PPC)
X-Accept-Language: en-us
MIME-Version: 1.0
To: xx..xx@xx..xx.com
Subject: finally, think i found it
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: hou...@vtr.net
X-OriginalArrivalTime: 11 Aug 2006 22:45:47.0867 (UTC)
FILETIME=[E359EAB0:01C6BD97]

Experience the Elegance and Stature of being the owner of the
industries
best watches, at a small portion of the usual price tag.

Everybody will know you've "Arrived" when you wear these beautiful
watches.

You have earned the best! Immediately have possession of the ultimate.

http://www.laxr.valuecreatorineworld.org/ow/

It fist was a sad leave-taking as hate in silence
and narrow ledges formed by listen nature
And this time he jerked potato his

-- END OF SPAM --

See:
IP 201.214.49.15 pc-15-49-214-201.cm.vtr.net

http://www.moensted.dk/spam/?addr=201.214.49.15
http://cbl.abuseat.org/lookup.cgi?ip=201.214.49.15
http://www.spamhaus.org/query/bl?ip=201.214.49.15
http://spamcop.net/w3m?action=checkblock&ip=201.214.49.15

inetnum: 201.214.0/17
status: allocated
owner: VTR BANDA ANCHA S.A.
ownerid: CL-VPNS-LACNIC
responsible: Italo Sambuceti

ASN: 22047
ASN Name: LACNIC-22047
Country IP Range: 201.214.0.0 to 201.215.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=22047

7 SBL listings for IPs under the responsibility of vtr.net
http://www.spamhaus.org/sbl/listings.lasso?isp=vtr.net

See:
www.laxr.valuecreatorineworld.org IP 85.100.115.116
ns2.dns.com.cn [218.244.47.6 (NO GLUE)] [CN]
ns1.dns.com.cn [218.244.47.5 (NO GLUE)] [CN]

www.laxr.valuecreatorineworld.org has no MX records ->
laxr.valuecreatorineworld.org has no MX records ->
valuecreatorineworld.org has no MX records

http://www.moensted.dk/spam/?addr=85.100.115.116
http://www.spamhaus.org/query/bl?ip=85.100.115.116

More 85.100.115.116 sightings:
http://groups.google.com/groups/search?q=85.100.115.116+group%3A*abuse

85.100.115.116 PTR record: dsl.static85100115116.ttnet.net.tr

inetnum: 85.100.114.0 - 85.100.115.255
netname: TurkTelekom
descr: ADSL-ALC-Ulus-Static Pool
country: TR [Turkey]

route: 85.100.0.0/17
descr: TurkTelecom
origin: AS9121
mnt-by: AS9121-MNT
changed: i...@turktelekom.com.tr
ASN: 9121
ASN Name: TTNet (TTnet Autonomous System
Country IP Range: 85.96.0.0 to 85.111.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9121

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45045
85.100.115.116/32 is listed on the Spamhaus Block List (SBL)

31-Jul-2006 12:42 GMT | SR22

Spam webhosting - industrieswelfare.org

50 SBL/ROKSO listings for IPs under the responsibility of ttnet.net.tr
http://www.spamhaus.org/sbl/listings.lasso?isp=ttnet.net.tr

Let see whois.publicinterestregistry.net:

Domain ID:D127119652-LROR
Domain Name: VALUECREATORINEWORLD.ORG
Created On:11-Aug-2006 21:47:54 UTC
Last Updated On:11-Aug-2006 21:52:00 UTC
Expiration Date:11-Aug-2007 21:47:54 UTC
Sponsoring Registrar:Beijing Innovative Linkage Technology Ltd.
(R1292-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:CT3C6FVNATHI6XT
Registrant Name: Chuyi ZHU
Registrant Organization:Chuyi ZHU
Registrant Street1:379 West Yingze Boulevard
Registrant Street2:
Registrant Street3:
Registrant City:Taiyuan
Registrant State/Province:SX
Registrant Postal Code:030024
Registrant Country:CN
Registrant Phone:+86.3516010332
Registrant Phone Ext.:
Registrant FAX:+86.3516010332
Registrant FAX Ext.:
Registrant Email: vince_stebbins[]hotmail.com
Admin ID:CTSC7RJVX94MEBO
Admin Name:Chuyi ZHU
Admin Organization:Chuyi ZHU
Admin Street1:379 West Yingze Boulevard
Admin Street2:
Admin Street3:
Admin City:Taiyuan
Admin State/Province:SX
Admin Postal Code:030024
Admin Country:CN
Admin Phone:+86.3516010332
Admin Phone Ext.:
Admin FAX:+86.3516010332
Admin FAX Ext.:
Admin Email: vince_s...@hotmail.com
Tech ID:CTS78SN3DUEBVSR
Tech Name:he wenjie
Tech Organization:shenzhen zhongbaohong industrial comany
Tech Street1:706,huanandianli building,shennanzhong rd
Tech Street2:
Tech Street3:
Tech City:shenzhen
Tech State/Province:SZ
Tech Postal Code:518031
Tech Country:CN
Tech Phone:+86.75561280100
Tech Phone Ext.:
Tech FAX:+86.75561280100
Tech FAX Ext.:
Tech Email: admins...@126.com
Name Server: NS1.DNS.COM.CN
Name Server: NS2.DNS.COM.CN

See more Registrant vince_stebbins[]hotmail.com sightings:
http://groups.google.com/groups/search?q=%22vince_stebbins%40hotmail.com%22+group%3A*abuse&start=0&scoring=d&

See frames source:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<meta name="language" content="en-us">
<title>Welcome</title>
<SCRIPT LANGUAGE="JavaScript">

</SCRIPT>
</head>
<body>
Loading...<br>
You must have Javascript enabled.
</body>
</html>

See:
www.uyew.org IP 211.95.79.58
ns1.dns.com.cn A IN 3600 218.244.47.5
ns2.dns.com.cn A IN 3600 218.244.47.6

www.uyew.org has no MX records -> uyew.org has no MX records

http://www.moensted.dk/spam/?addr=211.95.79.58
http://www.spamhaus.org/query/bl?ip=211.95.79.58

No PTR Record, stuck in a loop at dns.sh.cnuninet.net

inetnum: 211.90.0.0 - 211.97.255.255
netname: UNICOM

route: 211.95.0.0/17
descr: China United Telecom
origin: AS9800
mnt-by: MAINT-AS9800
changed: jin...@bj.cnuninet.net
ASN: 9800
ASN Name: UNICOM (CHINA UNICOM)
Country IP Range: 211.80.0.0 to 211.95.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9800

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45091
211.95.79.0/24 is listed on the Spamhaus Block List (SBL)

01-Aug-2006 12:02 GMT | SR04

Dirty block - crawling with spammers for months

4 SBL listings for IPs under the responsibility of cnuninet.com
http://www.spamhaus.org/sbl/listings.lasso?isp=cnuninet.com

Let see whois.publicinterestregistry.net:

Domain ID:D114219621-LROR
Domain Name: UYEW.ORG
Created On:02-Feb-2006 04:44:44 UTC
Last Updated On:11-Aug-2006 07:20:58 UTC
Expiration Date:02-Feb-2007 04:44:44 UTC
Sponsoring Registrar: Beijing Innovative Linkage Technology Ltd.
(R1292-LROR)
Status:OK
Registrant ID:CTMSSNABK7W5C63
Registrant Name:Wenxuan ZHAO
Registrant Organization:Wenxuan ZHAO
Registrant Street1:158 Daijia Yuan, Dongxing Times Garden
Registrant Street2:
Registrant Street3:
Registrant City:Changchun
Registrant State/Province:JL
Registrant Postal Code:110032
Registrant Country:CN
Registrant Phone:+86.24225732576
Registrant Phone Ext.:
Registrant FAX:+86.24225732576
Registrant FAX Ext.:
Registrant Email: emil_fernberg[]hotmail.com
Admin ID:CTMYQHTQT6TEP55
Admin Name:Wenxuan ZHAO
Admin Organization:Wenxuan ZHAO
Admin Street1:158 Daijia Yuan, Dongxing Times Garden
Admin Street2:
Admin Street3:
Admin City:Changchun
Admin State/Province:JL
Admin Postal Code:110032
Admin Country:CN
Admin Phone:+86.24225732576
Admin Phone Ext.:
Admin FAX:+86.24225732576
Admin FAX Ext.:
Admin Email: emil_f...@hotmail.com
Tech ID:CTXQ764BSLUK6XE
Tech Name:he wenjie
Tech Organization:shenzhen zhongbaohong industrial comany
Tech Street1:706,huanandianli building,shennanzhong rd
Tech Street2:
Tech Street3:
Tech City:shenzhen
Tech State/Province:SZ
Tech Postal Code:518031
Tech Country:CN
Tech Phone:+86.75561320100
Tech Phone Ext.:
Tech FAX:+86.61320100
Tech FAX Ext.:
Tech Email: sup...@speed123.com
Name Server: NS1.DNS.COM.CN
Name Server: NS2.DNS.COM.CN

More Registrant emil_fernberg[]hotmail.com sightings:
http://groups.google.com/groups/search?q=%22emil_...@hotmail.com%22+group%3A*abuse

More uyew.org sightings:
http://groups.google.com/groups/search?q=uyew.org+group%3A*abuse

And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/1cb259a28ea7feb1

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages