Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [LowestMortgageQuotes] (chooseforyoursakes.com - hirrupyes.com) Re: answer

1 view
Skip to first unread message

TomezNet

unread,
Aug 15, 2006, 6:02:16 PM8/15/06
to
Received From:
IP 71.100.29.27 pool-71-100-29-27.tampfl.dsl-w.verizon.net
(at NS1.BELLATLANTIC.NET / verizon.com)

Spamvert:
chooseforyoursakes.com IP 222.122.149.99
(SBL45236 - SBL45498) (at ns1.nasmedia.co.kr / kornet.net)

ns1.hirrupyes.com IP 211.156.254.115
(at WANTONGNET - wantong.net.cn / wtonline.net)

Web: LowestMortgageQuotes © 2006

More LowestMortgageQuotes sightings:
http://groups.google.com/groups/search?q=LowestMortgageQuotes+group%3A*abuse

Forged Logos:
TRUSTE
VeriSign

More info below:
====================

X-SID-PRA: Eric Moore <Scottzj...@thejakartapost.com>
X-SID-Result: TempError
X-Message-Info: txF49lGdW429bz6920xIMjQlnWcYOKSpdRK4RlXCx4E=
Received: from tomts38-srv.bellnexxia.net ([209.226.175.95]) by
bay0-pamc1-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 15 Aug 2006 14:01:28 -0700
Received: from xx..xx..xx.net ([207.58.1....])
by toip3.bellnexxia.net with ESMTP; 15 Aug 2006 17:00:12 -0400
Message-Id: <58h3sd$17s...@toip3.bellnexxia.net>
Received: (qmail 3091 invoked by uid 110); 15 Aug 2006 17:00:11 -0400
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 1776 invoked from network); 15 Aug 2006 17:00:10 -0400
Received: from pool-71-100-29-27.tampfl.dsl-w.verizon.net (HELO
DH5ZK1B1) (71.100.29.27)
by xx..xx..xx.net with SMTP; 15 Aug 2006 17:00:10 -0400
Received: from squibb
by thejakartapost.com with SMTP id LznODjpJJO
for <xx..xx@xx..xx.com>; Tue, 15 Aug 2006 16:57:57 +0500
From: "Eric Moore" <Scottzj...@thejakartapost.com>
To: xx..xx@xx..xx.com
Subject: Re: answer
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Date: Tue, 15 Aug 2006 17:01:27 -0400
Return-Path: Scottzj...@thejakartapost.com
X-OriginalArrivalTime: 15 Aug 2006 21:01:28.0724 (UTC)
FILETIME=[FA437D40:01C6C0AD]

Hello,

You have been chosen to participate in an invitation only limited time
event!
Are you currently paying over 3% for your mortgage? STOP! We can help
you lower that today!
Answer only a few questions and we can give you an approval in under 30
seconds it is that simple!

http://www.chooseforyoursakes.com/

And stop fighting for lenders let them fight for you! Make them work
for your business by giving you the lowest rates around!
Two hundred and thirty thousand dollar loans are available for only
three hundred and forty dollars/month! WE ARE PRACTICALLY GIVING AWAY
MONEY!

http://www.chooseforyoursakes.com/

Think your credit is too bad to get a deal like this? THINK AGAIN! We
will have you saving your money in no time!
Are you ready to save your money?

http://www.chooseforyoursakes.com/

Regards,
Robert Hill

-- END OF SPAM --

See:
IP 71.100.29.27 pool-71-100-29-27.tampfl.dsl-w.verizon.net

http://www.moensted.dk/spam/?addr=71.100.29.27
http://spamcop.net/w3m?action=checkblock&ip=71.100.29.27

OrgName: Verizon Internet Services Inc.
OrgID: VRIS
NetRange: 71.96.0.0 - 71.127.255.255
CIDR: 71.96.0.0/11
NetName: VIS-71-96
NetHandle: NET-71-96-0-0-1

ASN: 19262
ASN Name: VZGNI-TRANSIT
Country IP Range: 71.96.0.0 to 71.127.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=19262

12 SBL/ROKSO listings for IPs under the responsibility of verizon.net
http://www.spamhaus.org/sbl/listings.lasso?isp=verizon.net

179 SBL/ROKSO listings for IPs under the responsibility of
verizonbusiness.com
http://www.spamhaus.org/sbl/listings.lasso?isp=verizonbusiness.com

See:
chooseforyoursakes.com IP 222.122.149.99
ns1.hirrupyes.com [211.156.254.115] [TTL=172800] [CN]
ns2.hirrupyes.com [222.122.149.99] [TTL=172800] [KR]

dns2.chooseforyoursakes.com [222.122.149.99]
dns1.chooseforyoursakes.com [222.122.149.99]

chooseforyoursakes.com has no MX records

http://www.moensted.dk/spam/?addr=222.122.149.99
http://www.spamhaus.org/query/bl?ip=222.122.149.99
http://korea.services.net/blocked.phtml?addr=222.122.149.99
http://www.spambag.org/cgi-bin/spambag?mailfrom=kornet

More 222.122.149.99 sightings:
http://groups.google.com/groups/search?q=222.122.149.99+group%3A*abuse&start=0&scoring=d&

Org Name : Korea Telecom
Service Name : KORNET

route: 222.122.0.0/16
descr: Korea Telecom, Seoul, Korea
origin: AS4766
mnt-by: MAINT-AS4766
changed: chs...@soback.kornet.net
ASN: 4766
ASN Name: KIXS-AS-KR (Korea Telecom)
Country IP Range: 222.122.0.0 to 222.122.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4766

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45236
222.122.149.99/32 is listed on the Spamhaus Block List (SBL)

06-Aug-2006 00:25 GMT | SR23

Spam webhosting - busyjoints.com etc

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL45498
222.122.149.0/24 is listed on the Spamhaus Block List (SBL)

15-Aug-2006 01:17 GMT | SR02

bulletproof hosting on Kornet

21 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net

Let see whois:
Registrar: ENOM, INC.

Registration Service Provided By: NameCheap.com
Contact: sup...@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: chooseforyoursakes.com

Registrant Contact:
PrivateDomainRegistrations
Gary Reed (publicdomains[]hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA

Administrative Contact:
PrivateDomainRegistrations
Gary Reed (public...@hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA

Technical Contact:
PrivateDomainRegistrations
Gary Reed (public...@hush.ai)
+1.6047678695
Fax: +1.
150-3495 Cambie Street
Vancouver, ST V5Z 4R3
CA

Status: Locked

Name Servers:
ns1.hirrupyes.com
ns2.hirrupyes.com

Creation date: 15 Aug 2006 15:41:36
Expiration date: 15 Aug 2007 15:41:36

See:
ns1.hirrupyes.com IP 211.156.254.115

ns1.hirrupyes.com has no MX records -> hirrupyes.com has no MX records

http://www.moensted.dk/spam/?addr=211.156.254.115

More 211.156.254.115 sightings:
http://groups.google.com/groups/search?q=211.156.254.115+group%3A*abuse

inetnum: 211.156.240.0 - 211.156.255.255
netname: ZhanjiangWantong
country: CN
descr: Zhan Jiang Wan Tong Co.,Ltd.

route: 211.156.240.0/20
descr: CNC Group Guangdong Network User
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 211.144.0.0 to 211.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134

Registrar: ENOM, INC.
Registration Service Provided By: NameCheap.com

More hirrupyes.com sightings:
http://groups.google.com/groups/search?q=hirrupyes.com+group%3A*abuse

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/3434a58a0ee899df

Cheers, Tomez


--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages