[email] [drugs] (beauti-full.com) Become stronger - show your volume
TomezNet
IP 217.82.83.99 pD9525363.dip0.t-ipconnect.de
(at dns04.btx.dtag.de / t-ipnet.de / telekom.de)
Spamvert:
beauti-full.com IP 203.146.186.25
(at ns2.tnet.co.th / loxinfo.co.th / warnerbros.co.th)
ns1.beauti-full.com IP 212.208.63.3
at ns1.nan1.fr.uu.net / fr.mci.com / fr.verizonbusiness.com
ns2.beauti-full.com IP 217.193.140.187
at hulk.idea-lab.ch / swisscom.com / ns1.ip-plus.net
website:
© www.spur-m.md 2001 - 2005
SPUR-M PILLS
NSA.CCTLDMD.NET
The same spam as for => didysir.com
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.177; Thu, 22 Jun 2006
07:33:48 -0700
X-Originating-IP: [217.82.83.99]
Return-Path: <finch...@earthlink.net>
Authentication-Results: mta237.mail.re4.yahoo.com
from=earthlink.net; domainkeys=neutral (no sig)
Received: from 207.58.1.... (EHLO xx..xx..xx.net) (207.58.1....) by
mta237.mail.re4.yahoo.com with SMTP; Thu, 22 Jun 2006 07:33:48 -0700
Received: (qmail 24395 invoked by uid 110); 22 Jun 2006 07:27:07
-0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 24064 invoked from network); 22 Jun 2006 07:27:07
-0000
Received: from pd9525363.dip0.t-ipconnect.de (HELO
PEITZ-54C6HQGU4.n3aya.net) (217.82.83.99) by xx..xx..xx.net with SMTP;
22 Jun 2006 07:27:07 -0000
Message-ID: <35083812077544.AC673121BA@GMJX3>
From: "Finch" <Finch...@earthlink.net>
To: xx..xx@xx..xx.com
Subject: Become stronger - show your volume
Date: Thu, 22 Jun 2006 09:29:41 +0200
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: sOhuNwip2NwXjLgMWsqwwTBmGz1JX4gUNgyg
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Content-Length: 191
<pre><tt>You crave to shoot like a film star... <a
href="http://beauti-full.com/gall/gsm" target=_blank
>http://beauti-full.com/gall/gsm</a> It
will be greatBut some of us think it's impossibleTry it now!Buy it
now
- and this night will be the best in your life
</tt></pre>
-- END OF SPAM --
See more spur-m.md sightings:
http://groups.google.com/groups/search?q=spur-m.md+group%3A*abuse
See:
IP 217.82.83.99 pD9525363.dip0.t-ipconnect.de
http://www.moensted.dk/spam/?addr=217.82.83.99
http://njabl.org/cgi-bin/lookup.cgi?query=217.82.83.99
http://cbl.abuseat.org/lookup.cgi?ip=217.82.83.99
http://spamcop.net/w3m?action=checkblock&ip=217.82.83.99
http://www.spamhaus.org/query/bl?ip=217.82.83.99
inetnum: 217.80.0.0 - 217.86.127.255
netname: DTAG-DIAL14
descr: Deutsche Telekom AG
country: DE [Germany]
route: 217.80.0.0/12
descr: Deutsche Telekom AG, Internet service provider
origin: AS3320
member-of: AS3320:RS-PA-TELEKOM
mnt-by: DTAG-RR
changed: r...@NIC.DTAG.DE
ASN Name: DTAG (Deutsche Telekom AG)
Country IP Range: 217.80.0.0 to 217.95.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=3320
2 SBL listings for IPs under the responsibility of t-ipconnect.de
http://www.spamhaus.org/sbl/listings.lasso?isp=t-ipconnect.de
3 SBL/ROKSO listings for IPs under the responsibility of telekom.de
http://www.spamhaus.org/sbl/listings.lasso?isp=telekom.de
5 SBL/ROKSO listings for IPs under the responsibility of dtag.de
http://www.spamhaus.org/sbl/listings.lasso?isp=dtag.de
See:
beauti-full.com IP 203.146.186.25
ns1.beauti-full.com A IN 300 203.146.186.25
ns2.beauti-full.com A IN 300 203.146.186.25
mx.beauti-full.com A IN 300 203.146.186.25
ns1.beauti-full.com [212.208.63.3]
ns2.beauti-full.com [217.193.140.187]
[beauti-full.com has 1 MX record mx.beauti-full.com (10)]
http://www.moensted.dk/spam/?addr=203.146.186.25
203.146.186.25 PTR record: pop3.warnerbros.co.th
inetnum: 203.146.186.16 - 203.146.186.31
netname: twentiethfox-th
country: TH
descr: reassign to "Twentieth Century Fox Thailand, Inc. "
route: 203.146.184.0/22
descr: CSLoxinfo route object for Corporate Customer Network
origin: AS4750
mnt-by: MAINT-AS4750
changed: bgpa...@noc.loxinfo.co.th
Country fraud profile: High
Country IP Range: 203.146.0.0 to 203.146.255.255
ASN Name: loxley-th (Loxley Information Co., Ltd.)
http://www.cidr-report.org/cgi-bin/as-report?as=4750
6 SBL listings for IPs under the responsibility of loxinfo.co.th
http://www.spamhaus.org/sbl/listings.lasso?isp=loxinfo.co.th
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: Registerfly.com
Contact: sup...@registerfly.com
Visit: http://www.registerfly.com
Domain name: beauti-full.com
Registrant Contact:
RegisterFly.com - Ref# 18179875
Whois Protection Service - ProtectFly.com (181798...@spamfly.com)
+1.2122952121
Fax: +1.2122952153
230 Park Avenue
Suite 864
New York, NY 10169
US
Administrative Contact:
RegisterFly.com - Ref# 18179875
Whois Protection Service - ProtectFly.com (181798...@spamfly.com)
+1.2122952121
Fax: +1.2122952153
230 Park Avenue
Suite 864
New York, NY 10169
US
Technical Contact:
RegisterFly.com - Ref# 18179875
Whois Protection Service - ProtectFly.com (181798...@spamfly.com)
+1.2122952121
Fax: +1.2122952153
230 Park Avenue
Suite 864
New York, NY 10169
US
Status: Locked
Name Servers:
ns1.beauti-full.com
ns2.beauti-full.com
Creation date: 22 May 2005 02:02:26
Expiration date: 22 May 2007 02:02:26
More beauti-full.com sightings:
http://groups.google.com/groups/search?q=beauti-full.com+group%3A*abuse
See:
ns1.beauti-full.com IP 212.208.63.3
ns1.beauti-full.com has no MX records -> [beauti-full.com has 1 MX
record mx.beauti-full.com (10)]
http://www.moensted.dk/spam/?addr=212.208.63.3
More 212.208.63.3 sightings:
http://groups.google.com/groups/search?q=212.208.63.3+group%3A*abuse
No PTR records exist for 212.208.63.3
at ns1.nan1.fr.uu.net / fr.mci.com / fr.verizonbusiness.com
inetnum: 212.208.63.0 - 212.208.63.7
netname: COMMUNICATIC-NET1
descr: Communicatic
country: FR [France]
route: 212.208.0.0/16
descr: FR PA route
origin: AS702
member-of: AS702:RS-FR,
AS702:RS-FR-PA ab...@ip-plus.net
ASN Name: AS702 (MCI EMEA - Commercial IP service provider in Europe)
Country IP Range: 212.208.0.0 to 212.208.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=702
218 SBL/ROKSO listings for IPs under the responsibility of mci.com
http://www.spamhaus.org/sbl/listings.lasso?isp=mci.com
See:
ns2.beauti-full.com IP 217.193.140.187
http://www.moensted.dk/spam/?addr=217.193.140.187
No PTR records exist for 217.193.140.187
at hulk.idea-lab.ch / swisscom.com / ns1.ip-plus.net
inetnum: 217.193.140.184 - 217.193.140.191
netname: IDEALAB-NET
descr: IDEALAB Sagl
descr: 6934 Bioggio
country: CH
route: 217.192.0.0/15
descr: Swisscom IP-Plus aggregate
origin: AS3303
mnt-by: CH-UNISOURCE-MNT
ASN Name: SWISSCOM (Swisscom Solutions Ltd)
http://www.cidr-report.org/cgi-bin/as-report?as=3303
More 217.193.140.187 sightings:
http://groups.google.com/groups/search?q=217.193.140.187+group%3A*abuse
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: