Spamvert:
chooseforyoursakes.com IP 222.122.149.99
(SBL45236 - SBL45498) (at ns1.nasmedia.co.kr / kornet.net)
ns1.hirrupyes.com IP 211.156.254.115
(at WANTONGNET - wantong.net.cn / wtonline.net)
Web: LowestMortgageQuotes © 2006
More LowestMortgageQuotes sightings:
http://groups.google.com/groups/search?q=LowestMortgageQuotes+group%3A*abuse
Forged Logos:
TRUSTE
VeriSign
More info below:
====================
X-SID-PRA: Eric Moore <Scottzj...@thejakartapost.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW429bz6920xIMjQlnWcYOKSpdRK4RlXCx4E=
Received: from tomts38-srv.bellnexxia.net ([209.226.175.95]) by
bay0-pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 15 Aug 2006 14:01:28 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 15 Aug 2006 17:00:12 -0400
Message-Id: <58h3sd$17s...@toip3.bellnexxia.net>
Received: (qmail 3091 invoked by uid 110); 15 Aug 2006 17:00:11 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 1776 invoked from network); 15 Aug 2006 17:00:10 -0400
Received: from pool-71-100-29-27.tampfl.dsl-w.verizon.net (HELO
DH5ZK1B1) (71.100.29.27)
by xx..xx..xx.net with SMTP; 15 Aug 2006 17:00:10 -0400
Received: from squibb
by thejakartapost.com with SMTP id LznODjpJJO
for <xx..xx@xx..xx.com>; Tue, 15 Aug 2006 16:57:57 +0500
From: "Eric Moore" <Scottzj...@thejakartapost.com>
To: xx..xx@xx..xx.com
Subject: Re: answer
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Date: Tue, 15 Aug 2006 17:01:27 -0400
Return-Path: Scottzj...@thejakartapost.com
X-OriginalArrivalTime: 15 Aug 2006 21:01:28.0724 (UTC)
FILETIME=[FA437D40:01C6C0AD]
Hello,
You have been chosen to participate in an invitation only limited time
event!
Are you currently paying over 3% for your mortgage? STOP! We can help
you lower that today!
Answer only a few questions and we can give you an approval in under 30
seconds it is that simple!
http://www.chooseforyoursakes.com/
And stop fighting for lenders let them fight for you! Make them work
for your business by giving you the lowest rates around!
Two hundred and thirty thousand dollar loans are available for only
three hundred and forty dollars/month! WE ARE PRACTICALLY GIVING AWAY
MONEY!
http://www.chooseforyoursakes.com/
Think your credit is too bad to get a deal like this? THINK AGAIN! We
will have you saving your money in no time!
Are you ready to save your money?
http://www.chooseforyoursakes.com/
Regards,
Robert Hill
-- END OF SPAM --
See:
IP 71.100.29.27 pool-71-100-29-27.tampfl.dsl-w.verizon.net
http://www.moensted.dk/spam/?addr=71.100.29.27
http://spamcop.net/w3m?action=checkblock&ip=71.100.29.27
OrgName: Verizon Internet Services Inc.
OrgID: VRIS
NetRange: 71.96.0.0 - 71.127.255.255
CIDR: 71.96.0.0/11
NetName: VIS-71-96
NetHandle: NET-71-96-0-0-1
ASN: 19262
ASN Name: VZGNI-TRANSIT
Country IP Range: 71.96.0.0 to 71.127.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=19262
12 SBL/ROKSO listings for IPs under the responsibility of verizon.net
http://www.spamhaus.org/sbl/listings.lasso?isp=verizon.net
179 SBL/ROKSO listings for IPs under the responsibility of
verizonbusiness.com
http://www.spamhaus.org/sbl/listings.lasso?isp=verizonbusiness.com
See:
chooseforyoursakes.com IP 222.122.149.99
ns1.hirrupyes.com [211.156.254.115] [TTL=172800] [CN]
ns2.hirrupyes.com [222.122.149.99] [TTL=172800] [KR]
dns2.chooseforyoursakes.com [222.122.149.99]
dns1.chooseforyoursakes.com [222.122.149.99]
chooseforyoursakes.com has no MX records
http://www.moensted.dk/spam/?addr=222.122.149.99
http://www.spamhaus.org/query/bl?ip=222.122.149.99
http://korea.services.net/blocked.phtml?addr=222.122.149.99
http://www.spambag.org/cgi-bin/spambag?mailfrom=kornet
More 222.122.149.99 sightings:
http://groups.google.com/groups/search?q=222.122.149.99+group%3A*abuse&start=0&scoring=d&
Org Name : Korea Telecom
Service Name : KORNET
route: 222.122.0.0/16
descr: Korea Telecom, Seoul, Korea
origin: AS4766
mnt-by: MAINT-AS4766
changed: chs...@soback.kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 222.122.0.0 to 222.122.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45236
222.122.149.99/32 is listed on the Spamhaus Block List (SBL)
06-Aug-2006 00:25 GMT | SR23
Spam webhosting - busyjoints.com etc
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45498
222.122.149.0/24 is listed on the Spamhaus Block List (SBL)
15-Aug-2006 01:17 GMT | SR02
bulletproof hosting on Kornet
21 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
Let see whois:
Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/
Domain name: chooseforyoursakes.com
Registrant Contact:
PrivateDomainRegistrations
Gary Reed (publicdomains[]hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA
Administrative Contact:
PrivateDomainRegistrations
Gary Reed (public...@hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA
Technical Contact:
PrivateDomainRegistrations
Gary Reed (public...@hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA
Status: Locked
Name Servers:
ns1.hirrupyes.com
ns2.hirrupyes.com
Creation date: 15 Aug 2006 15:41:36
Expiration date: 15 Aug 2007 15:41:36
See:
ns1.hirrupyes.com IP 211.156.254.115
ns1.hirrupyes.com has no MX records -> hirrupyes.com has no MX records
http://www.moensted.dk/spam/?addr=211.156.254.115
More 211.156.254.115 sightings:
http://groups.google.com/groups/search?q=211.156.254.115+group%3A*abuse
inetnum: 211.156.240.0 - 211.156.255.255
netname: ZhanjiangWantong
country: CN
descr: Zhan Jiang Wan Tong Co.,Ltd.
route: 211.156.240.0/20
descr: CNC Group Guangdong Network User
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 211.144.0.0 to 211.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com
More hirrupyes.com sightings:
http://groups.google.com/groups/search?q=hirrupyes.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/3434a58a0ee899df
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: