Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [software piracy] (goblinware.net - springbreaksoft.net) News from DLsoft: new Mac's products added

2 views

Skip to first unread message

TomezNet

unread,

Mar 27, 2006, 8:00:12 AM3/27/06

Received From:
IP 82.59.7.84 host84-7.pool8259.interbusiness.it
(at dnsti.interbusiness.it / telecomitalia.it)

Spamvert:
springbreaksoft.net IP 81.177.14.14
(ROK4932 - SBL39478 / SBL35048) (at ns.rt-comm.ru / rtcomm.ru / rt.ru)

www.softbydl.com IP 208.160.156.28
(at ns.aimhigh.net / ns02.savvis.net)

See also more software piracy (Amazon spoof) sightings by Leo Kuvayev /
BadCow:
http://groups.google.com/groups?q=oemsalo.com+group%3A*abuse*&start=0&scoring=d&

Received at an address harvested from domain registration.

More info below:
====================
X-SID-PRA: Amanda Padilla <Ingrid...@megabytesistemi.com>
X-SID-Result: TempError
X-Message-Info: moY6YVwXQ46s5mZGAdMRqwal0vyXIIa6SZWot8kWGYs=
Received: from tomts17-srv.bellnexxia.net ([209.226.175.71]) by
bay0-pamc1-f12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.1830);
Wed, 22 Mar 2006 03:30:24 -0800
Received: from xx..xx..xx.net ([207.58.1....])
by toip6.bellnexxia.net with ESMTP; 22 Mar 2006 06:30:21 -0500
Received: (qmail 7483 invoked by uid 110); 22 Mar 2006 11:30:19 -0000
Delivered-To: xx..xx@xx..xx.com
Received: (qmail 21890 invoked from network); 22 Mar 2006 11:30:19
-0000
Received: from host84-7.pool8259.interbusiness.it (HELO
megabytesistemi.com) (82.59.7.84)
by xx..xx..xx.net with SMTP; 22 Mar 2006 11:29:43 -0000
Message-ID: <33986062...@megabytesistemi.com>
Date: Wed, 22 Mar 2006 05:36:44 -0700
Reply-To: "Amanda Padilla" <Ingrid...@megabytesistemi.com>
From: "Amanda Padilla" <Ingrid...@megabytesistemi.com>
X-Accept-Language: en-us
MIME-Version: 1.0
To: <xx..xx@xx..xx.com>
Subject: News from DLsoft: new Mac's products added
Content-Type: multipart/related;
boundary="------------377664515088185404706012"
Return-Path: Ingrid...@megabytesistemi.com
X-OriginalArrivalTime: 22 Mar 2006 11:30:25.0067 (UTC)
FILETIME=[0338D7B0:01C64DA4]

--------------377664515088185404706012
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: 8bit

<html><head>
<title>[MUNGED]</title>
</head>
<body>
(Mailing list
information,
including unsubscription instructions, is located at the end of this
message.)
<table style="border: 1px groove orange;" align="left"
bgcolor="#fcfcfc"
cellpadding="0" cellspacing="0" width="635" height="322">
<tr>
<td bgcolor="#a7c201" height="58" width="633">

<img src="cid:3311C3E5...@megabytesistemi.com" alt border="0"
width="229" height="91">

</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="padding-left: 5px; padding-top: 5px;
padding-right: 5px;" height="218" width="623">

Dear members and friends of
DLsoft
Team, 
 
* Our products'
list has been recently updated.
More products for Mac were
added
.. 
Are you interested ? Then click on

<a href="http://SPRINGBREAKSOFT.NET/det43.html">More details
</a> link. 
 
<a
href="http://SPRINGBREAKSOFT.NET/det43.html">Click here for more
specials ...</a> 
Your cooperation will be met with a great gratitude and
appreciation,
and we'll be glad to create more special offers for you in the
future. 
 

Sincerely
yours, DLsoft Team.  
</td>
</tr>
<tr>
<td height="46" align="center" bgcolor="#a7c201"
style="padding-left:
5px; padding-top: 9px; padding-right: 5px;" width="623">

(C) 2006, DLsoft PTE.
All
rights reserved. All logos, trademarks, etc. are property of
their
respectful owners.
</td>
</tr>
</table>
 
 
 
 
 
 
 
 
 
 
The following
information
is a reminder of your current mailing list subscription: 
You are subscribed to
the
following list: 
DLsoft
customers Weekly specials
using the following
email:
support @
softbydl
com
You may automatically
unsubscribe from this list at any time by visiting the following
URL:

<a
href="http://SPRINGBREAKSOFT.NET/cgi-bin/members/unsubscribe.cgi/?[MUNGED]">http://SPRINGBREAKSOFT.NET/cgi-bin/members/unsubscribe.cgi/?[MUNGED]</a>
If the above URL is
inoperable, make sure that you have copied the entire address. Some
mail
readers will wrap a long URL and thus break this automatic unsubscribe
mechanism.
You may also change
your
subscription by visiting this list's main screen:

<a
href="http://SPRINGBREAKSOFT.NET/cgi-bin/members/change.cgi/?[MUNGED]">http://SPRINGBREAKSOFT.NET/cgi-bin/members/change.cgi/?[MUNGED]</a>
If you're still
having
trouble, please contact the list owner at:
support @ softbydl .
com 
The following physical
address is associated with this mailing list:
DLsoft, P.O. Box 5009
Pirae 
Tahiti FP
</body></html>

--------------377664515088185404706012
Content-Type: image/gif;
name="rxbqufwtv.gif"
Content-Transfer-Encoding: base64
Content-ID: <3311C3E5...@megabytesistemi.com>

--------------377664515088185404706012--

*** REMOVED Attachment: rxbqufwtv.gif (16k) ***

----------
From: "Amanda Padilla" <Ingrid...@megabytesistemi.com>
Reply-To: "Amanda Padilla" <Ingrid...@megabytesistemi.com>
Date: Wed, 22 Mar 2006 05:36:44 -0700
To: xx..xx@xx..xx.com
Subject: News from DLsoft: new Mac's products added

(Mailing list information, including unsubscription instructions, is
located at the end of this message.)

Dear members and friends of DLsoft Team,

* Our products' list has been recently updated. More products for Mac
were added ..
Are you interested ? Then click on More details
<http://SPRINGBREAKSOFT.NET/det43.html> link.

Click here for more specials ...
<http://SPRINGBREAKSOFT.NET/det43.html>
Your cooperation will be met with a great gratitude and appreciation,
and we'll be glad to create more special offers for you in the future.

Sincerely yours, DLsoft Team.

The following information is a reminder of your current mailing list
subscription:

You are subscribed to the following list:

DLsoft customers Weekly specials

using the following email:

support @ softbydl com

You may automatically unsubscribe from this list at any time by
visiting the following URL:

http://SPRINGBREAKSOFT.NET/cgi-bin/members/unsubscribe.cgi/?phb
lrtkwlgnc
<http://SPRINGBREAKSOFT.NET/cgi-bin/members/unsubscribe.cgi/?[MUNGED]>

If the above URL is inoperable, make sure that you have copied the
entire address. Some mail readers will wrap a long URL and thus break
this automatic unsubscribe mechanism.

You may also change your subscription by visiting this list's main
screen:

http://SPRINGBREAKSOFT.NET/cgi-bin/members/change.cgi/?[MUNGED]
<http://SPRINGBREAKSOFT.NET/cgi-bin/members/change.cgi/?[MUNGED]>

If you're still having trouble, please contact the list owner at:

support @ softbydl . com

The following physical address is associated with this mailing list:

DLsoft, P.O. Box 5009 Pirae
Tahiti FP

-- END OF SPAM --

See:
IP 82.59.7.84 host84-7.pool8259.interbusiness.it

http://www.moensted.dk/spam/?addr=82.59.7.84
http://cbl.abuseat.org/lookup.cgi?ip=82.59.7.84
http://www.spamhaus.org/query/bl?ip=82.59.7.84

inetnum: 82.56.0.0 - 82.59.255.255
netname: TELECOM-ADSL-6
descr: Telecom Italia S.p.A. TIN EASY LITE
country: IT

route: 82.59.0.0/16
descr: INTERBUSINESS
origin: AS3269
http://www.cidr-report.org/cgi-bin/as-report?as=3269

36 SBL/ROKSO listings for IPs under the responsibility of
interbusiness.it
http://www.spamhaus.org/sbl/listings.lasso?isp=interbusiness.it

See:
springbreaksoft.net IP 81.177.14.14
ns1.springbreaksoft.net A IN 3600 81.177.14.14
ns2.springbreaksoft.net A IN 3600 81.177.14.14
ns1.goblinware.net [81.177.14.14]
ns2.goblinware.net [81.177.14.14]

SPRINGBREAKSOFT.NET has no MX records

Website Title: Downloadable Software

More 81.177.14.14 sightings:
http://groups.google.com/groups/search?q=81.177.14.14+group%3A*abuse

http://www.moensted.dk/spam/?addr=81.177.14.14
http://www.spambag.org/cgi-bin/spambag?mailfrom=rtcomm
http://www.spamhaus.org/query/bl?ip=81.177.14.14

inetnum: 81.177.14.0 - 81.177.15.255
netname: IN-TELECOM
descr: IN-Telecom Limited - IT-service corporation
descr: http://ServerBox.ru - Dedicated Servers, Collocation
descr: http://NODEK.ru - Quality web-hosting, domain
registration
descr: http:// Domingo.ru - Web-solitions studio
country: RU

route: 81.176.0.0/15
descr: RTCOMM-RU
origin: AS8342
http://www.cidr-report.org/cgi-bin/as-report?as=8342

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL35048
81.177.14.0/23 is listed on the Spamhaus Block List (SBL)

20-Mar-2006 21:38 GMT | SR04

IN-Telecom Limited: Spammer hosting (escalation)

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39478
81.177.14.14/32 is listed on the Spamhaus Block List (SBL/ROKSO)

26-Mar-2006 12:00 GMT | SR02

Leo Kuvayev / BadCow
proemilo.com warez

Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow

http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932

16 SBL/ROKSO listings for IPs under the responsibility of rtcomm.ru
http://www.spamhaus.org/sbl/listings.lasso?isp=rtcomm.ru

Let see whois:
Registrar: BLUE RAZOR DOMAINS, INC (bluerazor.com / godaddy.com)

Registrant:
Biz4less Inc.

7009 CARTA VALLEY DR
Plano, Texas 75024
United States
Registered through: Blue Razor Domains, Inc.
Domain Name: SPRINGBREAKSOFT.NET
Created on: 21-Mar-06
Expires on: 22-Mar-07
Last Updated on: 21-Mar-06
Administrative Contact:
Navas, Teresa biz4...@etn.org
Biz4less Inc.
7009 CARTA VALLEY DR
Plano, Texas 75024
United States
(972) 473-6628
Technical Contact:
Navas, Teresa biz4less[]etn.org
Biz4less Inc.
7009 CARTA VALLEY DR
Plano, Texas 75024
United States
(972) 473-6628
Domain servers in listed order:
NS1.GOBLINWARE.NET
NS2.GOBLINWARE.NET
Registry Status: ACTIVE

More Biz4less sightings:
http://groups.google.com/groups/search?q=%22Biz4less%22+group%3A*abuse&start=0&scoring=d&

Let see whois (goblinware.net):
Registrar: CAPITAL NETWORKS PTY LTD

Domain name: GOBLINWARE.NET
Registrar: PacNames

Domain Registrant: TOTALNIC-127503 (XSALSA[]ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Administrative, Technical Contact: TOTALNIC-127503 (XSA...@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Name Server: NS1.PACNAMES.NET [208.160.156.23]
Name Server: NS2.PACNAMES.NET [208.160.156.39]

Domain creation date: 2006-03-04 22:32:39.0
Domain expiration date: 2007-03-04 23:09:16.0

More goblinware.net sightings:
http://groups.google.com/groups/search?q=goblinware.net+group%3A*abuse&start=0&scoring=d&

See:
www.softbydl.com IP 208.160.156.28
ns2.pacnames.net [208.160.156.39]
ns1.pacnames.net [208.160.156.23]
Primary DNS server: ns1.pacnames.softbydl.com.
Responsible Name: hostm...@pacnames.softbydl.com
com. NS IN 86400 208.160.156.39
com. NS IN 86400 208.160.156.23

[www.softbydl.com has 1 MX record mailhost.softbydl.com (10)]

More 208.160.156.28 sightings:
http://groups.google.com/groups/search?q=208.160.156.28+group%3A*abuse

http://www.moensted.dk/spam/?addr=208.160.156.28

208.160.156.28 PTR record: device18.aimhigh.com
[Could be forged: hostname device18.aimhigh.com. does not exist

Savvis SAVVIS (NET-208-157-192-0-1)
208.157.192.0 - 208.163.31.255
AIM HIGH, INC. CW-208-160-156 (NET-208-160-156-0-1)
208.160.156.0 - 208.160.159.255

OrgName: AIM HIGH, INC.
OrgID: AMHI
Address: PO BOX 1417
City: GOLDEN
StateProv: CO
PostalCode: 80402
Country: US

NetRange: 208.160.156.0 - 208.160.159.255
CIDR: 208.160.156.0/22
NetName: CW-208-160-156
NetHandle: NET-208-160-156-0-1

ASN: 13700
ASN Name: CAPITAL-NETWORKS
http://www.cidr-report.org/cgi-bin/as-report?as=13700

12 SBL/ROKSO listings for IPs under the responsibility of savvis.net
http://www.spamhaus.org/sbl/listings.lasso?isp=savvis.net

More softbydl.com sightings:
http://groups.google.com/groups/search?q=softbydl.com+group%3A*abuse&start=0&scoring=d&

Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD

Domain name: SOFTBYDL.COM
Registrar: PacNames

Domain Registrant: TOTALNIC-127765 (JIMJIM1[]POST.CZ)
Wolfgang Gustavson
Weblingo Inc.
142 Park Lane
London England W1K 7AA
GB
Telephone: +44.2074938333
Fax: +44.2074938333
Administrative, Technical Contact: TOTALNIC-127765 (JIM...@POST.CZ)
Wolfgang Gustavson
Weblingo Inc.
142 Park Lane
London England W1K 7AA
GB
Telephone: +44.2074938333
Fax: +44.2074938333
Name Server: NS1.PACNAMES.NET
Name Server: NS2.PACNAMES.NET
Domain creation date: 2006-01-11 16:16:57.0
Domain expiration date: 2007-01-11 16:57:48.0

More CAPITAL NETWORKS sightings:
http://groups.google.com/groups/search?q=%22CAPITAL+NETWORKS%22+group%3A*abuse&start=0&scoring=d&

AND:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/3783c324076f8600

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages