[email] [software piracy] (coollinksworld.com) PHOTOSHOP, OFFICE 2OO3, XP PR0, AD0BE & 200 MORE SOFTWARES FROM 15-70 ONLY rich
TomezNet
IP 222.137.1.153
(at CNCGROUP-HA)
Spamvert URL:
http://ca.geocities.com/gwynne10178karita7788/
Redirected to:
http://147.46.133.109/rx03/
AND next Redirected to:
http://wsevew.coollinksworld.com
Spamvert:
wsevew.coollinksworld.com IP 221.11.114.68 (OLD IP 211.156.249.70)
(at CNCGROUP-SN)
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.49.58; Mon, 27 Feb 2006
22:57:21 -0800
X-YahooFilteredBulk: 222.137.1.153
X-Originating-IP: [222.137.1.153]
Return-Path: <zip4...@psyber.com>
Authentication-Results: mta134.mail.mud.yahoo.com from=psyber.com;
domainkeys=fail (bad syntax)
Received: from 222.137.1.153 (HELO 4.79.181.12) (222.137.1.153) by
mta134.mail.mud.yahoo.com with SMTP; Mon, 27 Feb 2006 22:57:21 -0800
Received: from [192.168.1.1] ([222.137.1.153]) by afes.com (Sendmail
8.7.7) with ESMTP (SSL) id IYT96946 for <xx..xx@xx..xx.com>; Tue, 28
Feb 2006 00:57:28 -0600
Message-ID: <368a233a...@afes.com>
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=purpose.carefully; d=afes.com;
b=53zK2CkccewUkOpSGrMlxvoa3IwsC5eb98swAJwUPMxSNKqYdSl42JXUpIUx9WKo2sitYiSStnPgWQ0U;
Date: Tue, 28 Feb 2006 00:57:28 -0600
From: "Adelaide Darline" <zip4...@psyber.com>
User-Agent: Mozilla Thunderbird 1.5 (Windows/2006011)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: xx..xx@xx..xx.com
Subject: PHOTOSHOP, OFFICE 2OO3, XP PR0, AD0BE & 200 MORE SOFTWARES
FROM 15-70 ONLY rich
Content-Type: multipart/related;
boundary="------------14783963==.MRA"
Content-Length: 1052
Instant Download Software
We give you LICENSE instantly!
http://ca.geocities.com/gwynne10178karita7788/ (Download ur needed
software here - Click Here)
bought we explain fly. filled force he across wrong pretty.
development least servants use young teach? human a tying disappoint
corner am. bad steps motor back how development. bought prison
window.
---------------------------------
my here she yours purpose, allow across again again? wife miserable she
sandwich am?
why turning social off pride wrong,
allow suddenly allow.Instant Download Software
We give you LICENSE instantly!
Fast Respond Customer Support To serve u Better
XP Pro SP2, MS Office Pro 2OO3, Creative Suite v2, All Ad0be softwares,
Macromedia and 250 more
allow Download ur needed software here happenedletters raise reference
latter how out. prison speaking am she money,
wife fascinate end,
speaking immediate embarrass sugar taught,
appearance carefully motor young few. commit side raise appearance,
thus shining find you we.
<html><head>
<meta http-equiv="Content-Type" content="text; charset=iso-8859-1">
</head>
<body>
<font color=64FF64 size=1>my here she yours purpose, allow across again
again? wife miserable she sandwich am?<br>
why turning social off pride wrong,<br>
allow suddenly allow.</font>
<center><table border=5 cellspacing=0 cellpadding=10 width=540
bordercolor=BEFC30>
<tr><td bgcolor=ffffff align=left>
<font size=1 face=arial color=000000><center>
<font size=4 color=2828FF><b>Instant Download Software<br><font
color=D9D900 size=3>We give you LICENSE instantly!<br><font
color=B7B7B7>Fast Respond Customer Support To serve u
Better</font></font></font></b></center><br><font color=000000
size=2>XP Pro SP2, MS Office Pro 2OO3, Creative Suite v2, All Ad0be
softwares, Macromedia and 250 more</font><br><br>
<center>
<a href=http://ca.geocities.com/gwynne10178karita7788/
target=_blank><font size=4 color=FF1C1C><u>allow <b>Download ur needed
software here</b>
happened</font></u></a></center></td></tr></table><font color=64FF64
size=1>letters raise reference latter how out. prison speaking am she
money,<br>
wife fascinate end,<br>
speaking immediate embarrass sugar taught,<br>
appearance carefully motor young few. commit side raise appearance,
thus shining find you we.<br>
</font>
</body></html>
-- END OF SPAM --
See:
IP 222.137.1.153
http://www.moensted.dk/spam/?addr=222.137.1.153
http://cbl.abuseat.org/lookup.cgi?ip=222.137.1.153
inetnum: 222.136.0.0 - 222.143.255.255
netname: CNCGROUP-HA
descr: CNCGROUP Henan province network
descr: China Network Communications Group Corporation
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
http://www.cidr-report.org/cgi-bin/as-report?as=4837
10 SBL/ROKSO listings for IPs under the responsibility of CNCGROUP-HA
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-HA
See:
wsevew.coollinksworld.com IP 221.11.114.68 (OLD IP 211.156.249.70)
coollinksworld.com NS IN 3600 ns1.yournextload.com
coollinksworld.com NS IN 3600 ns2.yournextload.com
coollinksworld.com NS IN 3600 ns3.yournextload.com
coollinksworld.com NS IN 3600 ns4.yournextload.com
ns1.yournextload.com A IN 600 222.36.42.123
ns2.yournextload.com A IN 600 219.148.3.162
[wsevew.coollinksworld.com has 1 MX record 127.0.0.1.(0)]
http://www.moensted.dk/spam/?addr=221.11.114.68
inetnum: 221.11.0.0 - 221.11.127.255
netname: CNCGROUP-SN
descr: CNC Group Shannxi province network
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
http://www.cidr-report.org/cgi-bin/as-report?as=4837
7 SBL/ROKSO listings for IPs under the responsibility of CNCGROUP-SN
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-SN
More coollinksworld.com sightings:
http://groups.google.com/groups?q=coollinksworld.com+group%3A*abuse
See:
yournextload.com IP 221.209.2.151
ns1.yournextload.com A IN 600 222.36.42.123
ns2.yournextload.com A IN 600 219.148.3.162
www.yournextload.com has no MX records -> yournextload.com has no MX
records
More 221.209.2.151 sightings:
http://groups.google.com/groups?q=221.209.2.151+group%3A*abuse
http://www.moensted.dk/spam/?addr=221.209.2.151
inetnum: 221.208.0.0 - 221.212.255.255
netname: CNCGROUP-HL
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
http://www.cidr-report.org/cgi-bin/as-report?as=4837
5 SBL/ROKSO listings for IPs under the responsibility of CNCGROUP-HL
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-HL
More yournextload.com sightings:
http://groups.google.com/groups?q=yournextload.com+group%3A*abuse
Let see whois:
Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
domain: yournextload.com
owner: Vladimir Mironov
email: c.al...@mail.com
address: P.O. Box 16
city: Moscow
state: --
postal-code: 117525
country: RU
phone: +7 095 2349449
admin-c: kyoung_stale[]yahoo.com#0
tech-c: c.al...@mail.com#0
billing-c: c.al...@mail.com#0
nserver: ns1.yournextload.com 221.11.114.104
nserver: ns2.yournextload.com 221.11.114.68
status: lock
created: 2006-01-30 10:05:36 UTC
modified: 2006-02-07 14:29:56 UTC
expires: 2007-01-30 05:03:44 UTC
source: joker.com live whois service
query-time: 0.015932
db-updated: 2006-03-02 13:34:37
More Vladimir Mironov JOKER.COM spam support sightings:
http://groups.google.com/groups?q=%22Vladimir+Mironov%22+group%3A*abuse*&start=0&scoring=d&
Read More:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/7ebfa046ec22e6f8
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: