[email] [counterfeit] (reniconr.com - muhlberierdns.com - quintanadnsbenji.com) Luxury: Versace
TomezNet
IP 61.246.61.38 dsl-kk-038.61.246.61.touchtelindia.net
(at dnsbom.mantraonline.com)
Spamvert:
reniconr.com IP 210.51.190.119
(at dns1.cnc-idc.com / china-netcom.com)
ns1.muhlberierdns.com IP 195.144.21.94
(at rx-host.net / rx-name.net)
ns2.quintanadnsbenji.com IP 140.113.203.146
(at edu.tw / ns3.nctu.edu.tw)
More info below:
====================
X-SID-PRA: kinny tomkin <eald...@alignaspine.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW43vgbPr6SR9QmWX9SFgUu2XOeKrtifAX+I=
Received: from tomts1-srv.bellnexxia.net ([209.226.175.113]) by
bay0-pamc1-f10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Mon, 14 Aug 2006 01:38:23 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip4.bellnexxia.net with ESMTP; 14 Aug 2006 04:38:14 -0400
Received: (qmail 28209 invoked by uid 110); 14 Aug 2006 04:38:10 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 28158 invoked from network); 14 Aug 2006 04:38:03
-0400
Received: from dsl-kk-038.61.246.61.touchtelindia.net (HELO novatek)
(61.246.61.38)
by xx..xx..xx.net with SMTP; 14 Aug 2006 04:38:03 -0400
Message-Id: <008d01c6bf75$8e881680$9397c0a8@veradis>
From: "kinny tomkin" <eald...@alignaspine.com>
To: xx..xx@xx..xx.com
Subject: Luxury: Versace
Date: Mon, 14 Aug 2006 07:45:05 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0040_01C6BF75.8E881680"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Return-Path: eald...@alignaspine.com
X-OriginalArrivalTime: 14 Aug 2006 08:38:23.0958 (UTC)
FILETIME=[01425760:01C6BF7D]
This is a multi-part message in MIME format.
------=_NextPart_000_0040_01C6BF75.8E881680
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
TODAYS SPECIAL
Jewelry * Handbags * Pens * Watches * Neckties * Clutches * Wallets
Natural leather, silk, white gold and real jewels!
http://reniconr.com/gold/
cellar pipe Ganges dolphin
sweet-faced territory wool
cross sighting loose-jointed
coat money black-haired
bull grass beauty plaster
catawba tree stand method
------=_NextPart_000_0040_01C6BF75.8E881680
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html;
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2180" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV><STRONG>TODAYS SPECIAL</STRONG></DIV>
<DIV><STRONG>Jewelry * Handbags * Pens * Watches * Neckties * Clutches
* Wallets</STRONG></DIV>
<DIV>Natural leather, silk, white gold and real jewels!</DIV>
<DIV><A
href=3D"http://reniconr.com/gold/">http://reniconr.com/gold/</A></DIV>
<BR><BR>
<DIV><FONT face=3DArial size=3D2>cellar pipe Ganges dolphin<BR>
sweet-faced territory wool<BR>
cross sighting loose-jointed<BR>
coat money black-haired<BR>
bull grass beauty plaster<BR>
catawba tree stand method</FONT></DIV></BODY></HTML>
------=_NextPart_000_0040_01C6BF75.8E881680--
-- END OF SPAM --
See:
IP 61.246.61.38 dsl-kk-038.61.246.61.touchtelindia.net
http://www.moensted.dk/spam/?addr=61.246.61.38
http://cbl.abuseat.org/lookup.cgi?ip=61.246.61.38
http://www.spamhaus.org/query/bl?ip=61.246.61.38
http://spamcop.net/w3m?action=checkblock&ip=61.246.61.38
inetnum: 61.246.61.0 - 61.246.61.255
netname: BHARTI-IN
descr: BTNL-KK-DSL
descr: BhartiinfotelLtd(BroadbandandTelephoneServices,KK)
descr: TouchtelHouse,,No.1106/10&1106/11,
route: 61.246.0.0/16
descr: Bharti Infotel Ltd
origin: AS9498
remarks: Route Object ISP
notify: sohan...@bharti.com
notify: aru...@bharti.com
mnt-by: MAINT-AS9498
changed: ar...@bhartibroadband.com
changed: sohan...@bharti.com
ASN: 9498
ASN Name: BBIL-AP (BHARTI BT INTERNET LTD.)
Country IP Range: 61.246.0.0 to 61.246.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9498
10 SBL/ROKSO listings for IPs under the responsibility of
bhartibroadband.com
http://www.spamhaus.org/sbl/listings.lasso?isp=bhartibroadband.com
See:
reniconr.com IP 210.51.190.119
ns1.reniconr.com A IN 300 210.51.190.119
ns2.reniconr.com A IN 300 210.51.190.119
ns1.muhlberierdns.com [195.144.21.94] [TTL=172800] [UA]
ns2.quintanadnsbenji.com [140.113.203.146] [TTL=172800] [TW]
reniconr.com has no MX records
http://www.moensted.dk/spam/?addr=210.51.190.119
http://www.spamhaus.org/query/bl?ip=210.51.190.119
More 210.51.190.119 sightings:
http://groups.google.com/groups/search?q=210.51.190.119+group%3A*abuse
inetnum: 210.51.190.0 - 210.51.191.255
netname: ZHONGSUO
country: CN
descr: ZHONGSUO
route: 210.51.0.0/16
descr: CNC Group CncNet
route: 210.51.0.0/16
descr: CNC Route Object
origin: AS9929
member-of: rs-Secondary
mnt-by: CHINANETCOM-MNT
changed: liu...@china-netcom.com
http://www.cidr-report.org/cgi-bin/as-report?as=9929
9 SBL/ROKSO listings for IPs under the responsibility of
china-netcom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=china-netcom.com
Let see whois:
Registrar: DSTR ACQUISITION VII, LLC
Registrant:
Galold Fincher (RENICONR-COM-DOM)
453 General John Payne Blvd.
Georgetown, KY 40324
US
5028673832
kvincydin[]list.com
Domain Name: RENICONR.COM
Status: PROTECTED
Administrative Contact:
Galold Fincher kvin...@list.com
453 General John Payne Blvd.
Georgetown, KY 40324
US
5028673832
Technical Contact, Zone Contact:
Galold Fincher kvin...@list.com
453 General John Payne Blvd.
Georgetown, KY 40324
US
5028673832
Record last updated on 11-Aug-2006.
Record expires on 11-Aug-2007.
Record created on 11-Aug-2006.
Domain servers in listed order:
Name Server: ns1.muhlberierdns.com
Name Server: ns2.quintanadnsbenji.com
See:
ns1.muhlberierdns.com IP 195.144.21.94
http://www.moensted.dk/spam/?addr=195.144.21.94
No PTR records exist for 195.144.21.94 at ns3.rx-name.net
inetnum: 195.144.21.0 - 195.144.21.255
netname: RX-NET
descr: RX-HOST UKRAINE DATACENTER
descr: 54001, PBOX 297, Mykolayiv - 001
descr: Mykolayiv, Ukraine
country: UA [Ukraine]
route: 195.144.21.0/24
descr: RX-HOST NOC
origin: AS38957
notify: al...@rx-host.net
ASN: 38957
ASN Name: RX-HOST-AS (RX-HOST UKRAINE HOSTING, Mykolayiv)
Country IP Range: 195.144.21.0 to 195.144.21.255
http://www.cidr-report.org/cgi-bin/as-report?as=38957
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: Active-Domain Co.
Contact: regi...@active-domain.com
Domain name: muhlberierdns.com
Registrant Contact:
Adam Bertrop (distartert[]yahoo.com)
+1.2068782448
Fax:
22724 10th Ave South
Des Moines, WA 98198
US
Administrative Contact:
Adam Bertrop (dista...@yahoo.com)
+1.2068782448
Fax:
22724 10th Ave South
Des Moines, WA 98198
US
Technical Contact:
Adam Bertrop (dista...@yahoo.com)
+1.2068782448
Fax:
22724 10th Ave South
Des Moines, WA 98198
US
Status: Locked
Name Servers:
dns1.name-services.com 69.25.142.1
dns2.name-services.com 216.52.184.230
dns3.name-services.com 63.251.92.193
dns4.name-services.com 64.74.96.242
dns5.name-services.com 70.42.37.1
Creation date: 11 Aug 2006 02:01:17
Expiration date: 11 Aug 2007 02:01:17
See:
ns2.quintanadnsbenji.com IP 140.113.203.146
ns2.quintanadnsbenji.com has no MX records -> quintanadnsbenji.com has
no MX records
http://www.moensted.dk/spam/?addr=140.113.203.146
More 140.113.203.146 sightings:
http://groups.google.com/groups/search?q=140.113.203.146+group%3A*abuse
inetnum: 140.113.0.0 - 140.113.255.255
netname: TANET
descr: Taiwan Academic Network
descr: Ministry of Education computer Center
descr: 12F, No 106, Sec. 2, Heping E. Rd., Taipei
country: TW
inetnum: 140.113.0.0 - 140.113.255.255
netname: T-NCTU.EDU.TW-NET
descr: National Chiao Tung University
descr: HSINCHU Taiwan
country: TW
route: 140.113.0.0/16
descr: NCTU (proxy-registered route object)
origin: AS9916
notify: ylc...@gate.sinica.edu.tw
ASN: 9916
ASN Name: NCTU-TW (National Chiao Tung University,)
Country IP Range: 140.112.0.0 to 140.127.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9916
37 SBL/ROKSO listings for IPs under the responsibility of edu.tw
http://www.spamhaus.org/sbl/listings.lasso?isp=edu.tw
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: Active-Domain Co.
Contact: regi...@active-domain.com
Domain name: quintanadnsbenji.com
Registrant Contact:
Daniel Grosso (tominecon[]yahoo.com)
+1.9744427775
Fax:
14 Laverne Ct
Wharton, NJ 07885
US
Administrative Contact:
Daniel Grosso (tomi...@yahoo.com)
+1.9744427775
Fax:
14 Laverne Ct
Wharton, NJ 07885
US
Technical Contact:
Daniel Grosso (tomi...@yahoo.com)
+1.9744427775
Fax:
14 Laverne Ct
Wharton, NJ 07885
US
Status: Locked
Name Servers:
dns1.name-services.com
dns2.name-services.com
dns3.name-services.com
dns4.name-services.com
dns5.name-services.com
Creation date: 11 Aug 2006 02:01:54
Expiration date: 11 Aug 2007 02:01:54
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/8a3dd2350995fb27
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: