[email] [software piracy] (haglinbh.com - lakeletid.com) Software
TomezNet
IP 70.69.39.189 S0106000c76b7a1b8.vf.shawcable.net
(at bigpipeinc.com / pd1ns1.st.vc.shawcable.net / sjrb.ca)
Spamvert:
pbdivkcjvxc287pku7pkcp7p.haglinbh.com IP 222.170.97.137
(ROK4932 - SBL41604) (at chinanet-hl)
ld.lakeletid.com IP 222.178.181.23 => SBL40705
jk.lakeletid.com IP 59.191.125.254 => SBL40188
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.176; Fri, 05 May 2006
17:14:03 -0700
X-YahooFilteredBulk: 70.69.39.189
X-Originating-IP: [70.69.39.189]
Return-Path: <nol...@purinmail.com>
Authentication-Results: mta160.mail.re2.yahoo.com from=purinmail.com;
domainkeys=neutral (no sig)
Received: from 207.228.2..... (EHLO xxx.web-hosting.com)
(207.228.2......) by mta160.mail.re2.yahoo.com with SMTP; Fri, 05 May
2006 17:14:03 -0700
Received: from 140687240 (S0106000c76b7a1b8.vf.shawcable.net
[70.69.39.189]) by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id
k460E2f04638 for <xx..xx@xx..xx.com>; Fri, 5 May 2006 20:14:02 -0400
(EDT)
Received: from purinmail.com (141534336 [141593240]) by
S0106000c76b7a1b8.vf.shawcable.net (Qmailv1) with ESMTP id C00DC42D93
for <xx..xx@xx..xx.com>; Thu, 11 May 2006 04:51:32 -0500
Date: Thu, 11 May 2006 04:51:32 -0500
From:"Sluggers K. Baseline" <nol...@purinmail.com>
X-Mailer: The Bat! (v2.00.0) Personal
X-Priority: 3
Message-ID: <8830632990.2...@purinmail.com>
To: xx..xx@xx..xx.com
Subject: Software
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-AntiVirus: scanned for viruses by AMaViS 0.2.1 (http://amavis.org/)
Content-Length: 640
What IS 0EM software and why do you care?
Software Compatibility....ain't it great?
New software on our site:
Plus! XP - $59.95
Office 2003 Professional (1 CD Edition) - $89.95
FileMaker 7.0 Professional - $69.95
Premiere 6.5 - $89.95
Windows NT 4.0 Terminal Server - $49.95
InDesign CS - $69.95
SQL Server 2000 Enterprise Edition - $69.95
Creative Suite Premium (5 CD) - $149.95
Office 2003 Professional (1 CD Edition) - $89.95
Visio 2003 Professional - $69.95
Picture It Premium 9 - $59.95
Illustrator CS CE - $69.95
Creative Suite Standard (3 CD) - $129.95
Plus! XP - $59.95
Our site:
http://pbdivkcjvxc287pku7pkcp7p.haglinbh.com/
-- END OF SPAM --
See also more cybcon.com sightings:
http://groups.google.com/groups/search?q=cybcon.com+group%3A*abuse&start=0&scoring=d&
See:
IP 70.69.39.189 S0106000c76b7a1b8.vf.shawcable.net
http://www.moensted.dk/spam/?addr=70.69.39.189
[1] shawcable, see http://spews.org/html/S3163.html
OrgName: Shaw Communications Inc.
OrgID: SHAWC
NetRange: 70.64.0.0 - 70.79.255.255
CIDR: 70.64.0.0/12
NetName: SHAW-COMM
route: 70.69.32.0/19
descr: (scripted block addition)
Shaw Communications Inc.
origin: AS6327
notify: ipa...@sjrb.ca
notify: ipadmin...@bigpipeinc.com
9 SBL/ ROKSOlistings for IPs under the responsibility of bigpipeinc.com
http://www.spamhaus.org/sbl/listings.lasso?isp=bigpipeinc.com
4 SBL listings for IPs under the responsibility of shawcable.net
http://www.spamhaus.org/sbl/listings.lasso?isp=shawcable.net
See Spamvert:
pbdivkcjvxc287pku7pkcp7p.haglinbh.com IP 222.170.97.137
jk.lakeletid.com A IN 3600 59.191.125.254
ld.lakeletid.com A IN 3600 222.178.181.23
pbdivkcjvxc287pku7pkcp7p.haglinbh.com has no MX records -> haglinbh.com
has no MX records
http://www.moensted.dk/spam/?addr=222.170.97.137
http://www.spamhaus.org/query/bl?ip=222.170.97.137
More 222.170.97.137 sightings:
http://groups.google.com/groups/search?q=222.170.97.137+group%3A*abuse
inetnum: 222.170.0.0 - 222.171.31.255
netname: HEILONGJIANG-QIQIHAER-TELECOM
country: CN
descr: QIQIHAER TELECOM
descr: QIQIHAER
descr: HEILONGJIANG PROVINCE
ASN: 17897
ASN Name: HINATELECOM-HLJ-AS-AP (asn for Heilongjiang Provincial Net of
CT)
http://www.cidr-report.org/cgi-bin/as-report?as=17897
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL41604
222.170.97.137/32 is listed on the Spamhaus Block List (SBL/ROKSO)
10-May-2006 12:18 GMT | SR22
Leo Kuvayev / BadCow
Spammer webhosting and DNS - barrulygc.com
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
9 SBL/ROKSO listings for IPs under the responsibility of chinanet-hl
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-hl
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : haglinbh.com (HAGLIN2-BMN-DOM)
Registrar : BookMyName
Registrant / Admin Contact :
PERSON
Khanh NGUYEN (NGUYEN86-BMN-PE)
4200 SE 82ND AVE
97266 PORTLAND
UNITED STATES orlean
phone : +48 22 3895469
fax :
e-mail : G_NGUYENKHANH[]yahoo.com
Billing Contact :
PERSON
Khanh NGUYEN (NGUYEN86-BMN-PE)
4200 SE 82ND AVE
97266 PORTLAND
UNITED STATES orlean
phone : +48 22 3895469
fax :
e-mail : G_NGUY...@yahoo.com
Technical Contact :
PERSON
Khanh NGUYEN (NGUYEN86-BMN-PE)
4200 SE 82ND AVE
97266 PORTLAND
UNITED STATES orlean
phone : +48 22 3895469
fax :
e-mail : G_NGUY...@yahoo.com
Domain servers :
ld.lakeletid.com (LLC2-BMN-HST)
jk.lakeletid.com (JLC4-BMN-HST)
Created on 05/04/2006 13:41:51
Updated on 05/04/2006 15:03:23
Expires on 05/04/2007 09:41:51
More haglinbh.com sightings:
http://groups.google.com/groups/search?q=haglinbh.com+group%3A*abuse
See:
ld.lakeletid.com IP 222.178.181.23
http://www.moensted.dk/spam/?addr=222.178.181.23
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40705
222.178.181.0/24 is listed on the Spamhaus Block List (SBL)
21-Apr-2006 18:41 GMT | SR02
spammer DNS @ 222.178.181.25 (dirty block / bestdnsservices)
4 SBL/ROKSO listings for IPs under the responsibility of chinanet-cq
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-cq
Let see whois:
Registrar: TUCOWS INC.
Registrant:
Opra House Ltd.
BrainBeach Prist Ave 199
Lamonte, LO 44942
JM
Domain name: LAKELETID.COM
Administrative Contact:
Forneigure, Lester NAGAH...@yahoo.com
BrainBeach Prist Ave 199
Lamonte, LO 44942
JM
+48.223895469
Technical Contact:
Fenison, Elden el...@cybcon.com
30240 SW Parkway #10
Wilsonville, OR 97070
US
+1.5032484449 Fax: +1.5036827701
Registration Service Provider:
CyberConnectics, sup...@cybcon.com
503-248-4449
503-682-7701 (fax)
http://www.cyberconnectics.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: TUCOWS, INC.
Record last updated on 04-May-2006.
Record expires on 02-May-2007.
Record created on 02-May-2006.
Domain servers in listed order:
NS1.CYBCON.COM 216.190.188.1
NS.CYBCON.COM 208.187.208.1
LD.LAKELETID.COM 222.60.86.10
JK.LAKELETID.COM 59.191.125.254
Domain status: ACTIVE
More lakeletid.com sightings:
http://groups.google.com/groups/search?q=lakeletid.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/1c750dec6fac8fe6
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: