Re: [email] [UBE] [VA] Client Referral

POPULAR GROUPS

more...

Re: [email] [UBE] [VA] Client Referral

Group: news.admin.netabuse.sightings · Group Profile
Author: Ehud Gavron
Date: May 14, 2008 02:29

Hey Shmulik.

Nothing was sent to you by our customer.
We hate spam as much as you. (Maybe more; I don't know you that well ;)

Perhaps you will be successful in getting the FTC to do their job and
make spam unlawful instead of pandering to them and allowing them to do
spam within some ridiculously open rules.

Please note: Spammers often include links to other sites in their spam.
That doesn't mean those other sites are related to the spam at all.

Go after the spammers.
Beat them, kill them, remove them.
But don't involve the rest of us.

Thanks

Ehud
PS Precedent law has held that registrars may not suspend domains for
any reason.

Shmuel Metz (Seymour J.) wrote:

> The following junk E-mail was sent to me by your customer. Please deal
> with him. Thank you. I am sending this both to the domains shown in the
> header data and to their upstream providers, as listed in WHOIS.
>
> activeregistrar.com: you are the registry for spam domain
> loans-commercial.com
>
> AG, FTC: this fraudulent spam, with forged header data, violates S877, the
> you CAN-SPAM act of 2003.
>
> contactprivacy.com, the contact for spam domain unsubscribezeop.com, is
> yours.
>
> EARTHLINK, Inc.: spam sites http://www.loans-commercial.com,
> http://www.loans-commercial.com/ContactUs.htm,
> http://www.loans-commercial.com/Programs.htm and
> http://www.loans-commercial.com/Scenario.htm are at [207.217.125.50] in
> your IP space; the spam was sent from corpgate0.mail.atl.earthlink.ne
> (corpgate0.mail.atl.earthlink.net [207.69.200.182]) in your IP space; the
> spam was posted by IP 66.32.153.34 in your IP space; you provide DNS for
> spam domain LOANS-COMMERCIAL.COM.
>
> LOANS-COMMERCIAL.COM: spam sites
> http://www.loans-commercial.com/Scenario.htm,
> http://www.loans-commercial.com/ContactUs.htm,
> http://www.loans-commercial.com and
> http://www.loans-commercial.com/Programs.htm are at
> WWW.LOANS-COMMERCIAL.COM.
>
> Login, Inc.: spam site
> http://www.unsubscribezeop.com/unsubscribe.asp?EMDID is at
> www.unsubscribezeop.com [204.17.32.92] in your IP space.
>
> Patriot.net: please block 207.69.200/24; please consider blocking a wider
> range.
>
> tucows.com: you are the registry for spam domain unsubscribezeop.com
>
> ULTRADNS: you provide DNS for spam domain unsubscribezeop.com
>
> UNSUBSCRIBEZEOP.COM: spam site
> http://www.unsubscribezeop.com/unsubscribe.asp?EMDID is at
> WWW.UNSUBSCRIBEZEOP.COM.
>
> Webseed.com: you are the Registration Service Provider for spam domain
> unsubscribezeop.com
>
> whoisproof.com: spam sites http://www.loans-commercial.com/Scenario.htm,
> http://www.loans-commercial.com/ContactUs.htm,
> http://www.loans-commercial.com and
> http://www.loans-commercial.com/Programs.htm are yours.
>
> If the header or INTERNIC information identifying you was a forgery, I
> recommend that you take appropriate steps to prevent that misuse of your
> domain name. Likewise if someone was bouncing their message traffic off of
> your port 25 without authorization. IANAL, but several court cases suggest
> that you may have good cause for legal action. Should you decide to pursue
> litigation against the sender, I will be willing to sign an affidavit that
> I did in fact receive the message that I am forwarding.
>
> If you were the victim of relay rape, you may want to take a look at
> www.sendmail.org, http://relays.osirusoft.com/mtafix/,
> hexadecimal.uoregon.edu/antirelay/ and anti-relay.unicom.com/anti-relay/
> for information on blocking spam relays.
>
> If you are the customer, your bulk E-mail constitutes postage-due
> advertising, which is unethical and not a good way to earn customer good
> will. In several court cases, judges have held it to constitute theft of
> service and trespass. I demand that you remove me from all present and
> future mailing lists, and will take appropriate steps if I receive any
> further junk E-mail from you.
>
>
>
> Deobfuscation analysis of I:\COMM\MAIL\MR2ICE\MAIL\48230743.RCV
>
> e-mail and URL list for host CORPGATE0.MAIL.ATL.EARTHLINK.NE:
> SMTP: corpgate0.mail.atl.earthlink.ne (corpgate0.mail.atl.earthlink.net
> [207.69.200.182])
>
> e-mail and URL list for host CORPGATE0.MAIL.ATL.EARTHLINK.NET:
> SMTP: corpgate0.mail.atl.earthlink.ne (corpgate0.mail.atl.earthlink.net
> [207.69.200.182])
>
> e-mail and URL list for host WWW.LOANS-COMMERCIAL.COM:
> URL: http://www.loans-commercial.com
> URL: http://www.loans-commercial.com/ContactUs.htm
> URL: http://www.loans-commercial.com/Programs.htm
> URL: http://www.loans-commercial.com/Scenario.htm
>
> e-mail and URL list for host WWW.UNSUBSCRIBEZEOP.COM:
> URL: http://www.unsubscribezeop.com/unsubscribe.asp?EMDID
>
> e-mail and URL list for host [207.69.200.182]:
> SMTP: corpgate0.mail.atl.earthlink.ne (corpgate0.mail.atl.earthlink.net
> [207.69.200.182])
>
> e-mail and URL list for host [66.32.153.34]:
> NetNews: X-Originating-IP specified as 66.32.153.34
>
> CORPGATE0.MAIL.ATL.EARTHLINK.NE:
>
> :CORPGATE0.MAIL.ATL.EARTHLINK.NE does not resolve
>
> : the spam was sent from corpgate0.mail.atl.earthlink.ne
> (corpgate0.mail.atl.earthlink.net [207.69.200.182])
>
>
> No DNS information for HELO CORPGATE0.MAIL.ATL.EARTHLINK.NE; may be bogus.
>
>
> BWwhois --shift 1 --stripdisclaimer CORPGATE0.MAIL.ATL.EARTHLINK.NE
> MAIL.ATL.EARTHLINK.NE ATL.EARTHLINK.NE EARTHLINK.NE 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: CORPGATE0.MAIL.ATL.EARTHLINK.NE
> connected to whois.crsnic.net [199.7.55.74:43] ...
>
> Whois Server Version 2.0
>
>
> No match for domain "CORPGATE0.MAIL.ATL.EARTHLINK.NE".

>>>> Last update of whois database: Thu, 08 May 2008 14:00:58 UTC <<<

>
> Request: MAIL.ATL.EARTHLINK.NE
> connected to whois.crsnic.net [199.7.55.74:43] ...
>
> Whois Server Version 2.0
>
>
> No match for domain "MAIL.ATL.EARTHLINK.NE".

>>>> Last update of whois database: Thu, 08 May 2008 14:00:58 UTC <<<

>
> Request: ATL.EARTHLINK.NE
> connected to whois.crsnic.net [199.7.55.74:43] ...
>
> Whois Server Version 2.0
>
>
> No match for domain "ATL.EARTHLINK.NE".

>>>> Last update of whois database: Thu, 08 May 2008 14:00:58 UTC <<<

>
> Request: EARTHLINK.NE
> connected to whois.crsnic.net [199.7.52.74:43] ...
>
> Whois Server Version 2.0
>
>
> No match for domain "EARTHLINK.NE".

>>>> Last update of whois database: Thu, 08 May 2008 10:00:58 EDT <<<

>
>
> nslookup -type=any CORPGATE0.MAIL.ATL.EARTHLINK.NE 2>&1
> *** monroe.patriot.net can't find CORPGATE0.MAIL.ATL.EARTHLINK.NE:
> Non-existent host/domain
> Server: monroe.patriot.net
> Address: 209.249.176.5
>
>
> CORPGATE0.MAIL.ATL.EARTHLINK.NET:
> : the spam was sent from corpgate0.mail.atl.earthlink.ne
> (corpgate0.mail.atl.earthlink.net [207.69.200.182])
>
>
> BWwhois --shift 1 --stripdisclaimer EARTHLINK.NET 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: EARTHLINK.NET
> whois server for *.net is whois.crsnic.net ...
> connected to whois.crsnic.net [199.7.55.74:43] ...
> connected to whois.melbourneit.com [203.27.227.114:43] ...
>
> Domain Name.......... earthlink.net
> Creation Date........ 1994-06-06
> Registration Date.... 2003-04-29
> Expiry Date.......... 2009-06-05
> Organisation Name.... Earthlink, Inc.
> Organisation Address. 1375 Peachtree St.
> Organisation Address. Level A
> Organisation Address. Atlanta
> Organisation Address. 30309
> Organisation Address. GA
> Organisation Address. UNITED STATES
>
> Admin Name........... Earthlink Hostmaster
> Admin Address........ 1375 Peachtree St.
> Admin Address........ Level A
> Admin Address........ Atlanta
> Admin Address........ 30309
> Admin Address........ GA
> Admin Address........ UNITED STATES
> Admin Email.......... hostmaster@earthlink.net
> Admin Phone.......... +1.4048150770
> Admin Fax............ _
>
> Tech Name............ Earthlink Hostmaster
> Tech Address......... 1375 Peachtree St.
> Tech Address......... Level A
> Tech Address......... Atlanta
> Tech Address......... 30309
> Tech Address......... GA
> Tech Address......... UNITED STATES
> Tech Email........... hostmaster@earthlink.net
> Tech Phone........... +1.4048150770
> Tech Fax............. _
> Name Server.......... itchy.earthlink.net
> Name Server.......... scratchy.earthlink.net
>
>
>
> nslookup -type=any CORPGATE0.MAIL.ATL.EARTHLINK.NET 2>&1
> Server: monroe.patriot.net
> Address: 209.249.176.5
>
> Non-authoritative answer:
> CORPGATE0.MAIL.ATL.EARTHLINK.NET internet address = 207.69.200.182
>
> Authoritative answers can be found from:
> MAIL.ATL.EARTHLINK.NET nameserver = itchy.EARTHLINK.NET
> MAIL.ATL.EARTHLINK.NET nameserver = scratchy.EARTHLINK.NET
> scratchy.EARTHLINK.NET internet address = 207.69.188.197
>
> WWW.LOANS-COMMERCIAL.COM:
> : spam site http://www.loans-commercial.com/Scenario.htm is at
> WWW.LOANS-COMMERCIAL.COM.
>
> : spam site http://www.loans-commercial.com/ContactUs.htm is at
> WWW.LOANS-COMMERCIAL.COM.
>
> : spam site http://www.loans-commercial.com is at
> WWW.LOANS-COMMERCIAL.COM.
>
> : spam site http://www.loans-commercial.com/Programs.htm is at
> WWW.LOANS-COMMERCIAL.COM.
>
>
> BWwhois --shift 1 --stripdisclaimer LOANS-COMMERCIAL.COM 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: LOANS-COMMERCIAL.COM
> whois server for *.com is whois.crsnic.net ...
> connected to whois.crsnic.net [199.7.57.74:43] ...
> connected to whois.activeregistrar.com [67.15.47.4:43] ...
> Registration Service Provided By: Active-Domain LLC
> Contact: http://www.active-domain.com
>
> Domain Name: LOANS-COMMERCIAL.COM
>
> Registrant:
> Whois Proof LLP
> Whois Manager (bsz7ti0lgl@whoisproof.com)
> PO Box 4120
> Portland
> OR,97208-4120
> US
> Tel. +1.2024700599
> Fax. +1.8663666681
>
> Creation Date: 08-Jan-2003
> Expiration Date: 08-Jan-2010
>
> Domain servers in listed order:
> dns3.earthlink.net
> dns2.earthlink.net
>
>
> Administrative Contact:
> Whois Proof LLP
> Whois Manager (bsz7ti0lgl@whoisproof.com)
> PO Box 4120
> Portland
> OR,97208-4120
> US
> Tel. +1.2024700599
> Fax. +1.8663666681
>
> Technical Contact:
> Whois Proof LLP
> Whois Manager (bsz7ti0lgl@whoisproof.com)
> PO Box 4120
> Portland
> OR,97208-4120
> US
> Tel. +1.2024700599
> Fax. +1.8663666681
>
> Billing Contact:
> Whois Proof LLP
> Whois Manager (bsz7ti0lgl@whoisproof.com)
> PO Box 4120
> Portland
> OR,97208-4120
> US
> Tel. +1.2024700599
> Fax. +1.8663666681
>
> Status:ACTIVE
>
>
> nslookup -type=any WWW.LOANS-COMMERCIAL.COM 2>&1
> Server: monroe.patriot.net
> Address: 209.249.176.5
>
> Non-authoritative answer:
> WWW.LOANS-COMMERCIAL.COM internet address = 207.217.125.50
>
> Authoritative answers can be found from:
> LOANS-COMMERCIAL.COM nameserver = dns2.earthlink.net
> LOANS-COMMERCIAL.COM nameserver = dns3.earthlink.net
> LOANS-COMMERCIAL.COM nameserver = dns1.earthlink.net
> dns1.earthlink.net internet address = 207.217.126.11
> dns2.earthlink.net internet address = 207.217.77.12
> dns3.earthlink.net internet address = 207.217.120.13
>
> WWW.UNSUBSCRIBEZEOP.COM:
> : spam site http://www.unsubscribezeop.com/unsubscribe.asp?EMDID is at
> WWW.UNSUBSCRIBEZEOP.COM.
>
>
> BWwhois --shift 1 --stripdisclaimer UNSUBSCRIBEZEOP.COM 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: UNSUBSCRIBEZEOP.COM
> whois server for *.com is whois.crsnic.net ...
> connected to whois.crsnic.net [199.7.59.74:43] ...
> connected to whois.tucows.com [216.40.33.170:43] ...
> Registrant:
> Contactprivacy.com
> 96 Mowat Ave
> Toronto, ON M6K 3M1
> CA
>
> Domain name: UNSUBSCRIBEZEOP.COM
>
> Administrative Contact:
> contactprivacy.com, unsubscribezeop.com@contactprivacy.com
> 96 Mowat Ave
> Toronto, ON M6K 3M1
> CA
> +1.4165385457
> Technical Contact:
> contactprivacy.com, unsubscribezeop.com@contactprivacy.com
> 96 Mowat Ave
> Toronto, ON M6K 3M1
> CA
> +1.4165385457
>
>
> Registration Service Provider:
> WebSeed.com, srs@webseed.com
> (307) 587-1338
> http://www.webseed.com
> This company may be contacted for domain login/passwords,
> DNS/Nameserver changes, and general domain support questions.
>
>
> Registrar of Record: TUCOWS, INC.
> Record last updated on 30-Apr-2008.
> Record expires on 07-Feb-2010.
> Record created on 25-Apr-2005.
>
> Registrar Domain Name Help Center:
> http://domainhelp.tucows.com
>
> Domain servers in listed order:
> PDNS3.ULTRADNS.ORG
> PDNS2.ULTRADNS.NET
> PDNS5.ULTRADNS.INFO
> PDNS6.ULTRADNS.CO.UK
> PDNS1.ULTRADNS.NET
> PDNS4.ULTRADNS.ORG
>
>
> Domain status: ok
>
>
> This domain's privacy is protected by contactprivacy.com. To reach the
> domain contacts, please go to http://www.contactprivacy.com and follow the
> instructions.
>
>
>
>
> nslookup -type=any WWW.UNSUBSCRIBEZEOP.COM 2>&1
> Server: monroe.patriot.net
> Address: 209.249.176.5
>
> Non-authoritative answer:
> WWW.UNSUBSCRIBEZEOP.COM internet address = 204.17.32.92
>
> Authoritative answers can be found from:
> UNSUBSCRIBEZEOP.COM nameserver = pdns6.ultradns.co.uk
> UNSUBSCRIBEZEOP.COM nameserver = pdns1.ultradns.net
> UNSUBSCRIBEZEOP.COM nameserver = pdns2.ultradns.net
> UNSUBSCRIBEZEOP.COM nameserver = pdns3.ultradns.org
> UNSUBSCRIBEZEOP.COM nameserver = pdns4.ultradns.org
> UNSUBSCRIBEZEOP.COM nameserver = pdns5.ultradns.info
> pdns1.ultradns.net internet address = 204.74.108.1
> pdns1.ultradns.net ??? unknown type 28 ???
> pdns2.ultradns.net internet address = 204.74.109.1
> pdns3.ultradns.org internet address = 199.7.68.1
> pdns4.ultradns.org internet address = 199.7.69.1
> pdns4.ultradns.org ??? unknown type 28 ???
> pdns5.ultradns.info internet address = 204.74.114.1
> pdns6.ultradns.co.uk internet address = 204.74.115.1
>
> [204.17.32.92]:
> contacts: gavron@wetwork.net
> : spam site http://www.unsubscribezeop.com/unsubscribe.asp?EMDID is at
> www.unsubscribezeop.com [204.17.32.92] in your IP space.
>
>
> BWwhois --shift 1 --stripdisclaimer 204.17.32.92 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: 204.17.32.92
> connected to whois.arin.net [192.149.252.44:43] ...
> Login, Inc. CUSTNET1 (NET-204-17-32-0-1)
> 204.17.32.0 - 204.17.63.255
> Login, Inc. LOGIN-M127B (NET-204-17-32-0-2)
> 204.17.32.0 - 204.17.39.255
>
> Nested BWwhois for Login, Inc. CUSTNET1 (204.17.32.0 - 204.17.63.255)
>
> BWwhois --shift 1 --stripdisclaimer NET-204-17-32-0-1 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: NET-204-17-32-0-1
> connected to whois.arin.net [192.149.252.44:43] ...
>
> OrgName: Login, Inc.
> OrgID: LOGI
> Address: 4003 E Speedway Ste 119
> City: Tucson
> StateProv: AZ
> PostalCode: 85712
> Country: US
>
> NetRange: 204.17.32.0 - 204.17.63.255
> CIDR: 204.17.32.0/19
> NetName: CUSTNET1
> NetHandle: NET-204-17-32-0-1
> Parent: NET-204-0-0-0-0
> NetType: Direct Allocation
> NameServer: DNS1.LOGIN.COM
> NameServer: NS2.OPUS1.COM
> NameServer: DNS3.LOGIN.COM
> Comment: RWHOIS: five.aces.com 4321
> RegDate: 1994-01-01
> Updated: 2005-07-06
>
> OrgTechHandle: EG76-ARIN
> OrgTechName: Gavron, Ehud
> OrgTechPhone: +1-877-543-1082
> OrgTechEmail: gavron@wetwork.net
>
> Nested BWwhois for Login, Inc. LOGIN-M127B (204.17.32.0 - 204.17.39.255)
>
> BWwhois --shift 1 --stripdisclaimer NET-204-17-32-0-2 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: NET-204-17-32-0-2
> connected to whois.arin.net [199.43.0.144:43] ...
>
> OrgName: Login, Inc.
> OrgID: LOGI
> Address: 4003 E Speedway Ste 119
> City: Tucson
> StateProv: AZ
> PostalCode: 85712
> Country: US
>
> NetRange: 204.17.32.0 - 204.17.39.255
> CIDR: 204.17.32.0/21
> NetName: LOGIN-M127B
> NetHandle: NET-204-17-32-0-2
> Parent: NET-204-17-32-0-1
> NetType: Reallocated
> NameServer: DNS1.LOGIN.COM
> NameServer: NS2.OPUS1.COM
> Comment:
> RegDate: 2001-11-28
> Updated: 2001-11-28
>
> RTechHandle: EG76-ARIN
> RTechName: Gavron, Ehud
> RTechPhone: +1-877-543-1082
> RTechEmail: gavron@wetwork.net
>
> OrgTechHandle: EG76-ARIN
> OrgTechName: Gavron, Ehud
> OrgTechPhone: +1-877-543-1082
> OrgTechEmail: gavron@wetwork.net
>
> nslookup -type=any 92.32.17.204.in-addr.arpa 2>&1
> Server: monroe.patriot.net
> Address: 209.249.176.5
>
> Non-authoritative answer:
> 92.32.17.204.in-addr.arpa name = mailer.newstarget.com
>
> Authoritative answers can be found from:
> 32.17.204.in-addr.arpa nameserver = ns2.opus1.com
> 32.17.204.in-addr.arpa nameserver = dns1.login.com
> dns1.login.com internet address = 192.195.240.1
>
> [207.217.125.50]:
> Abuse contacts: abuse@abuse.earthlink.net
> : spam site http://www.loans-commercial.com is at
> www.loans-commercial.com [207.217.125.50] in your IP space.
>
> : spam site http://www.loans-commercial.com/ContactUs.htm is at
> www.loans-commercial.com [207.217.125.50] in your IP space.
>
> : spam site http://www.loans-commercial.com/Programs.htm is at
> www.loans-commercial.com [207.217.125.50] in your IP space.
>
> : spam site http://www.loans-commercial.com/Scenario.htm is at
> www.loans-commercial.com [207.217.125.50] in your IP space.
>
>
> BWwhois --shift 1 --stripdisclaimer 207.217.125.50 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: 207.217.125.50
> connected to whois.arin.net [192.149.252.44:43] ...
>
> OrgName: EARTHLINK, Inc.
> OrgID: EARTH-21
> Address: 1375 PEACHTREE STREET
> Address: LEVEL A
> City: ATLANTA
> StateProv: GA
> PostalCode: 30309
> Country: US
>
> NetRange: 207.217.0.0 - 207.217.255.255
> CIDR: 207.217.0.0/16
> OriginAS: AS4355
> NetName: EARTHLINK-CIDR
> NetHandle: NET-207-217-0-0-1
> Parent: NET-207-0-0-0-0
> NetType: Direct Allocation
> NameServer: ITCHY.EARTHLINK.NET
> NameServer: SCRATCHY.EARTHLINK.NET
> Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
> RegDate: 1996-10-04
> Updated: 2007-06-22
>
> RAbuseHandle: ABUSE60-ARIN
> RAbuseName: ABUSE TEAM
> RAbusePhone: +1-404-815-0770
> RAbuseEmail: abuse@abuse.earthlink.net
>
> RNOCHandle: ELNK-ORG-ARIN
> RNOCName: EarthLink, Inc.
> RNOCPhone: +1-404-815-0770
> RNOCEmail: arin_tech@lists.corp.earthlink.net
>
> RTechHandle: DAE4-ARIN
> RTechName: Domain Administrator, Administrator
> RTechPhone: +1-404-815-0770
> RTechEmail: arinpoc@corp.earthlink.net
>
> OrgAbuseHandle: ABUSE60-ARIN
> OrgAbuseName: ABUSE TEAM
> OrgAbusePhone: +1-404-815-0770
> OrgAbuseEmail: abuse@abuse.earthlink.net
>
> OrgTechHandle: ELNK-ORG-ARIN
> OrgTechName: EarthLink, Inc.
> OrgTechPhone: +1-404-815-0770
> OrgTechEmail: arin_tech@lists.corp.earthlink.net
>
> # ARIN WHOIS database, last updated 2008-05-07 19:10
> # Enter ? for additional hints on searching ARIN's WHOIS database.
>
> nslookup -type=any 50.125.217.207.in-addr.arpa 2>&1
> Server: monroe.patriot.net
> Address: 209.249.176.5
>
> Non-authoritative answer:
> 50.125.217.207.in-addr.arpa name = webhost.earthlink.net
>
> Authoritative answers can be found from:
> 125.217.207.in-addr.arpa nameserver = itchy.earthlink.net
> 125.217.207.in-addr.arpa nameserver = scratchy.earthlink.net
> scratchy.earthlink.net internet address = 207.69.188.197
>
> [207.69.200.182]:
> Abuse contacts: abuse@abuse.earthlink.net
> : the spam was sent from corpgate0.mail.atl.earthlink.ne
> (corpgate0.mail.atl.earthlink.net [207.69.200.182]) in your IP space.
>
>
> BWwhois --shift 1 --stripdisclaimer 207.69.200.182 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: 207.69.200.182
> connected to whois.arin.net [199.43.0.144:43] ...
>
> OrgName: EarthLink, Inc.
> OrgID: ERMS
> Address: 1375 PEACHTREE ST, LEVEL A
> City: ATLANTA
> StateProv: GA
> PostalCode: 30309
> Country: US
>
> NetRange: 207.69.0.0 - 207.69.255.255
> CIDR: 207.69.0.0/16
> NetName: EARTHLINK2000-D
> NetHandle: NET-207-69-0-0-1
> Parent: NET-207-0-0-0-0
> NetType: Direct Allocation
> NameServer: ITCHY.EARTHLINK.NET
> NameServer: SCRATCHY.EARTHLINK.NET
> Comment:
> RegDate: 1998-10-20
> Updated: 2007-03-30
>
> RTechHandle: DAE4-ARIN
> RTechName: Domain Administrator, Administrator
> RTechPhone: +1-404-815-0770
> RTechEmail: arinpoc@corp.earthlink.net
>
> OrgAbuseHandle: ABUSE60-ARIN
> OrgAbuseName: ABUSE TEAM
> OrgAbusePhone: +1-404-815-0770
> OrgAbuseEmail: abuse@abuse.earthlink.net
>
> OrgTechHandle: ELNK-ORG-ARIN
> OrgTechName: EarthLink, Inc.
> OrgTechPhone: +1-404-815-0770
> OrgTechEmail: arin_tech@lists.corp.earthlink.net
>
> # ARIN WHOIS database, last updated 2008-05-07 19:10
> # Enter ? for additional hints on searching ARIN's WHOIS database.
>
> nslookup -type=any 182.200.69.207.in-addr.arpa 2>&1
> Server: monroe.patriot.net
> Address: 209.249.176.5
>
> Non-authoritative answer:
> 182.200.69.207.in-addr.arpa name = corpgate0.mail.atl.earthlink.net
>
> Authoritative answers can be found from:
> 200.69.207.in-addr.arpa nameserver = itchy.earthlink.net
> 200.69.207.in-addr.arpa nameserver = scratchy.earthlink.net
> scratchy.earthlink.net internet address = 207.69.188.197
>
> [66.32.153.34]:
> Abuse contacts: abuse@abuse.earthlink.net
> : the spam was posted by IP 66.32.153.34 in your IP space.
>
>
> BWwhois --shift 1 --stripdisclaimer 66.32.153.34 2>&1
> BW whois 5.0 by Bill Weinman (http://whois.bw.org/)
> Copyright 1999-2006 William E. Weinman
> Request: 66.32.153.34
> connected to whois.arin.net [199.43.0.144:43] ...
>
> OrgName: Earthlink, Inc.
> OrgID: EARTH-19
> Address: 1375 PEACHTREE STREET
> Address: LEVEL A
> City: ATLANTA
> StateProv: GA
> PostalCode: 30309
> Country: US
>
> NetRange: 66.32.0.0 - 66.32.255.255
> CIDR: 66.32.0.0/16
> NetName: EARTHLINKDSL-2BLK
> NetHandle: NET-66-32-0-0-1
> Parent: NET-66-0-0-0-0
> NetType: Direct Allocation
> NameServer: ITCHY.EARTHLINK.NET
> NameServer: SCRATCHY.EARTHLINK.NET
> Comment:
> RegDate: 2000-10-13
> Updated: 2007-06-22
>
> RTechHandle: DAE4-ARIN
> RTechName: Domain Administrator, Administrator
> RTechPhone: +1-404-815-0770
> RTechEmail: arinpoc@corp.earthlink.net
>
> OrgAbuseHandle: ABUSE60-ARIN
> OrgAbuseName: ABUSE TEAM
> OrgAbusePhone: +1-404-815-0770
> OrgAbuseEmail: abuse@abuse.earthlink.net
>
> OrgTechHandle: ELNK-ORG-ARIN
> OrgTechName: EarthLink, Inc.
> OrgTechPhone: +1-404-815-0770
> OrgTechEmail: arin_tech@lists.corp.earthlink.net
>
> nslookup -type=any 34.153.32.66.in-addr.arpa 2>&1
> Server: monroe.patriot.net
> Address: 209.249.176.5
>
> Non-authoritative answer:
> 34.153.32.66.in-addr.arpa name = user-1121692.dsl.mindspring.com
>
> Authoritative answers can be found from:
> 153.32.66.in-addr.arpa nameserver = itchy.earthlink.net
> 153.32.66.in-addr.arpa nameserver = scratchy.earthlink.net
> scratchy.earthlink.net internet address = 207.69.188.197
>
>
> ------------------------------------------------------------------------
>
> Content-Type: text/html; charset="ISO-8859-1"
> Content-Transfer-Encoding: 8bit
>
>
>

>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

> Atlanta
> Mortgage Group, Inc

> Personalized Commercial Mortgage Financing

> If you have a client in need of
> commercial financing we may be able to help. We offer a wide
> array of loan programs and we specialize in Hard Money commercial financing
> with limited paperwork.

>
> 70%%+ Cash Out - Rates start at
> 11.99%% - No PPP available - Interest Only - 5 Yr

> Minimum Loan
> Amount $500,000

>
> Send us your
> http://www.loans-commercial.com/Scenario.htm">scenario
> or you may call or
> http://www.loans-commercial.com/ContactUs.htm">contact us today to find out how we may be able to
> assist you or your client with personalized commercial financing.

>
> Tony Johnson

> Director of Commercial Financing

> 404.462.9885

>
>
> loans-commercial.com">
> tony@loans-commercial.com

>
> Recent Closings:

> 70%% Miami Beach $102 Million - 80%% Palm $880 Thousand -

> Orlando $5.7 Million-
> 80%% Louisiana $2 Million - 70%% Bahamas $90 Million

> Land

> Restaurants

> Office Buildings

> Convenience Stores

> Motels-Hotels

> Multi-Family

> Condos

> Warehouses

> Assisted Living

> Self Storage

> Mobile Home Parks

> Gas Stations

> and more

>
> http://www.loans-commercial.com">loans-commercial.com

>
> We simply offer personalized customer service, competitive rates and innovative
> http://www.loans-commercial.com/Programs.htm">loan programs.
> We work with lenders across the nation, allowing us the ability to
> offer a wide range of financing options for almost every type of property.

>
>
>
>
>
>

>
> http://www.unsubscribezeop.com/unsubscribe.asp?EMDID=133361977&ID=88482&CID=83&Email...@patriot.net" target="_blank">unsubscribe

> 6650
> River Crest Point Suite B Suwanee, GA 30024

>
>
>
>
> ------------------------------------------------------------------------
>
>
>
>
>
> -----------------------------------------------------
> -- End of forwarded message
> -----------------------------------------------------
>

--
All postings to news.admin.net-abuse.sightings are unconfirmed and unverified
unless stated otherwise by the moderators. All opinions expressed above are
considered the opinions of the original poster, not the moderators or their
respective employers. For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/

no comments
	diggit!			del.icio.us!			reddit!