Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [software piracy] (gidravlikaprogs.com - gesheftoem.com) Adobe Premiere Elements 1.0

0 views

Skip to first unread message

TomezNet

unread,

Jul 5, 2006, 4:00:20 AM7/5/06

Received From:
IP 66.9.27.195
(at ns2.intellispace.net)

open proxy -- 1147435205 (Fri May 12 14:00:05 2006)
http://njabl.org/cgi-bin/lookup.cgi?query=66.9.27.195

Spamvert:
704.gidravlikaprogs.com IP 58.20.179.105
(SBL43439) (at CNCGROUP-HN)

More the same spammer (Leo Kuvayev / BadCow ROK4932) sightings:
http://groups.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&

Received at an address harvested from this abuse group.

More info below:
====================

X-Apparently-To: xx..xx@xx..xx.com via 209.73.179.32; Tue, 04 Jul 2006
14:46:28 -0700
X-YahooFilteredBulk: 66.9.27.195
X-Originating-IP: [66.9.27.195]
Return-Path: <debbie...@barallat.com>
Authentication-Results: mta227.mail.mud.yahoo.com from=barallat.com;
domainkeys=neutral (no sig)
Received: from 66.9.27.195 (HELO barallat.com) (66.9.27.195) by
mta227.mail.mud.yahoo.com with SMTP; Tue, 04 Jul 2006 14:46:28 -0700
Message-ID: <B264CC15...@barallat.com>
Date: Wed, 05 Jul 2006 01:41:10 +0300
From: "Fran Romo" <Debbie...@barallat.com>
X-Accept-Language: en-us
MIME-Version: 1.0
To: lsin...@yahoo.com
Subject: Adobe Premiere Elements 1.0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 8bit
Content-Length: 2427

<html> <head> <title>Software</title>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<style type="text/css"> .sans { FONT-SIZE: small; FONT-FAMILY:
verdana,arial,helvetica,sans-serif } .small { FONT-SIZE: x-small;
FONT-FAMILY: verdana,arial,helvetica,sans-serif } .tn {
FONT-SIZE:
xx-small; FONT-FAMILY: verdana,arial,helvetica, sans-serif } .lp
{
FONT-SIZE: x-small; FONT-FAMILY: arial,verdana,sans-serif;
TEXT-DECORATION:
line-through } .pc { FONT-SIZE: x-small; COLOR: #990000; FONT-FAMILY:
verdana,arial,helvetica,sans-serif } .eyebrow { FONT-WEIGHT:
bold;
FONT-SIZE: 10px; TEXT-TRANSFORM: uppercase; COLOR: #ffffff;
FONT-FAMILY:
verdana,arial,helvetica,sans-serif; TEXT-DECORATION: none }
A.eyebrow:link
{ TEXT-DECORATION: none } .z1 { FONT-SIZE: xx-small; FONT-FAMILY:
verdana,arial,helvetica } .z2 { FONT-SIZE: xx-small; FONT-FAMILY:
verdana
}
</style>
</head>
<body> Opt-in Email Special
Offer     <a
href="http://704.gidravlikaprogs.com/cgi-bin/sub/app/index.cgi">unsubscribe
me </a> <table cellSpacing="0" cellPadding="0"
width="579" border="0"> <td vAlign="top" width="175"> <table
cellSpacing="0" cellPadding="0" width="169" bgColor="#eeeecc"
border="0"> <td width="171"> <table cellSpacing="0" cellPadding="0"
width="170" border="0"> <tr vAlign="top" height="20"> <td width="5"
bgcolor="#000080"> <img
src="http://g-images.amazon.com/images/G/01/icons/eyebrow-upper-left-corner.gif"
height="5"></td> <td bgcolor="#000080" vAlign="center"> TOP 10 NEW
TITLES </td> <td align="right" width="5"
bgcolor="#000080"> <img
src="http://g-images.amazon.com/images/G/01/icons/eyebrow-upper-right-corner.gif"
height="5"></td> </table> </td> <td vAlign="top" width="4"
bgColor="#eeeecc">  </td> </tr> <tr> <td width="171"> <table
border="0" cellpadding="3" cellspacing="0" style="border-collapse:
collapse" bordercolor="#111111" width="171"> <tr> <td width="168"
colspan="2">
ON SALE
NOW! </td> </tr> <tr> <td width="26">1</td> <td width="142"><a
href="http://704.gidravlikaprogs.com/?arvki" class="z1">Office Pro
2003</a></td> </tr> <tr> <td width="26">2</td>
<td width="142"><a href="http://704.gidravlikaprogs.com/?fob"
class="z1">Adobe Photoshop 9.0</a></td> </tr> <tr> <td width="26">3</td>
<td width="142"><a href="http://704.gidravlikaprogs.com/?fmqauy"
class="z1">Windows XP Pro</a></td> </tr> <tr> <td width="26">4</td> <td width="142"><a
href="http://704.gidravlikaprogs.com/?ofteyp" class="z1">Adobe Acrobat
7 Pro</a></td> </tr> <tr> <td width="26">5</td>
<td width="142"><a href="http://704.gidravlikaprogs.com/?ertsqso"
class="z1">Flash MX 2004</a></td> </tr> <tr> <td width="26">6</td> <td width="142"><a
href="http://704.gidravlikaprogs.com/?xblib" class="z1">Corel Draw
12</a></td> </tr> <tr> <td width="26">7</td>
<td width="142"><a href="http://704.gidravlikaprogs.com/?ynnbyq"
class="z1">Norton Antivirus 2005</a></td> </tr> <tr> <td
width="26">8</td> <td width="142"><a
href="http://704.gidravlikaprogs.com/?ddrbh" class="z1">Windows 2003
Server</a></td> </tr> <tr> <td width="26">9</td> <td width="142"><a
href="http://704.gidravlikaprogs.com/?jcrixi" class="z1">Alias Maya 6
Wavefrt</a></td> </tr> <tr> <td width="26">10</td> <td width="142"><a
href="http://704.gidravlikaprogs.com/?afwfij" class="z1">Adobe
Illustrator 11</a></td> </tr> <tr> <td width="26"></td> <td
width="142">See more by this
manufacturer</td> </tr> <tr> <td
width="26"> </td> <td width="142"> <a
href="http://704.gidravlikaprogs.com/?nekkh"
class="z1">Microsoft</a></td> </tr> <tr> <td width="26"> </td> <td
width="142"> <a href="http://704.gidravlikaprogs.com/?oaucbs"
class="z1">Symantec</a></td> </tr> <tr> <td width="26"> </td> <td
width="142"> <a href="http://704.gidravlikaprogs.com/?mqgd"
class="z1">Adobe</a></td> </tr> <tr> <td width="26"> </td> </tr>
</table> </td> </tr> </table> </td> <td vAlign="top" align="left"
width="1" 6> <table border="0" cellpadding="0" cellspacing="0"
style="border-collapse: collapse" bordercolor="#111111" width="100%"
height="55"> <tr> <td width="100%"> Microsoft Office
Professional Edition 2003    by
Microsoft<img border="0"
src="http://g-images.amazon.com/images/G/01/promotions/sticker/newest_versio
n.gif" width="82" height="14"> <a
href="http://704.gidravlikaprogs.com/?eym"> <img height="150"
src="http://ec1.images-amazon.com/images/P/B0000C
1204.01._SCMZZZZZZZ_.jpg" width="188" align="left" border="0"
hspace="5"></a> <table cellSpacing="0"
cellPadding="0" border="0" height="21" width="250" class="small"> <tr>
<td vAlign="top" noWrap align="left" width="100">Regular
price:</td> <td width="8"></td> <td>$550.00</td> </tr> <tr> <td vAlign="top" noWrap
align="left" width="100">Our offer:</td> <td width="8"></td>
<td>$69.95</td> </tr> <tr> <td Align="left" noWrap
align="right" width="100">You save:</td> <td width="8"></td>
<td>$480.05 ( 87%)</td> </tr> </table> <a
href="http://704.gidravlikaprogs.com/?cumg"> <img border="0"
src="http://g-images.amazon.com/images/G/01/buttons/add-to-cart-yellow-short.gif"
width="113" height="23"></a> Availability: Pay and
download IMMEDIATELY! Sales
Rank: #1 Average Customer Review: ***** (based on 44
reviews) <hr noShade SIZE="1"></td> </tr> <tr> <td
width="100%"> Microsoft Windows XP
Professional    by Microsoft<img
border="0"
src="http://g-images.amazon.com/images/G/01/promotions/sticker/newest_version.gif"
width="82" height="14"> <a
href="http://704.gidravlikaprogs.com/?aswxq"> <img height="139"
src="http://ec1.images-amazon.com/images/P/B00022PTT8.01._SCMZZZZZZZ_.jpg"
B00005MOTG.01._SCMZZZZZZZ_.jpg width="135" align="left" border="0"
hspace="5"></a> <table cellSpacing="0"
cellPadding="0" border="0" height="21" width="250" class="small"> <tr>
<td vAlign="top" noWrap align="left" width="100">Market
price:</td> <td width="11"></td> <td>$200.00</td> </tr> <tr> <td vAlign="top"
noWrap align="left" width="100">We propose:</td> <td
width="11"></td> <td>$49.95</td> </tr> <tr> <td
vAlign="top" noWrap align="left" width="100">Your profit:</td>
<td width="11"></td> <td>$150.05 ( 75%)</td>
</tr> </table> <a href="http://704.gidravlikaprogs.com/?obaex"> <img
border="0"
src="http://g-images.amazon.com/images/G/01/buttons/add-to-cart-yellow-short.gif"
width="113" height="23"></a> Availability: Available
for INSTANT download! Top-ranked item! Average Customer Review:
***** (based on 47 reviews) <hr noShade SIZE="1"></td>
</tr> <tr> <td width="100%"> Adobe Photoshop CS2 V
9.0    by Adobe<img border="0"
src="http://g-images.amazon.com/images/G/01/promotions/sticker/newest_version.gif"
width="82" height="14"> <a
href="http://704.gidravlikaprogs.com/?jbb"> <img height="122"
src="http://ec1.images-amazon.com/images/P/B00081I6JI.01._PE7_SCMZZZZZZZ_.jpg"
width="125" align="left" border="0" hspace="5"></a> <table cellSpacing="0" cellPadding="0" border="0"
height="21" width="250" class="small"> <tr> <td vAlign="top" noWrap
align="left" width="100">Retail price:</td> <td width="11"></td>
<td>$599.00</td> </tr> <tr> <td vAlign="top"
noWrap align="left" width="100">Proposition:</td> <td
width="11"></td> <td>$69.95</td> </tr> <tr> <td
vAlign="top" noWrap gn="right" width="100" align="left">Your
benefit:</td> <td width="11"></td> <td>$529.05 (
88%)</td> </tr> </table> <a
href="http://704.gidravlikaprogs.com/?msrrff"> <img border="0"
src="http://g-images.amazon.com/images/G/01/buttons
/add-to-cart-yellow-short.gif" width="113" height="23"></a> 
Availability: Can be downloaded INSTANTLY! 
Best choice for professional! Average
Customer Review: ***** (based on 43 reviews) <hr noShade
SIZE="1"></td> </tr> </table> </td> </tr> </table> </body> </html>

-- END OF SPAM --

OLD Domain Registrant E-mail sightings: TOTALNIC-127503
(XSALSA[]ETN.ORG)
http://groups.google.com/groups?q=%22XSALSA%40ETN.ORG%22+group%3A*abuse&start=0&scoring=d&

See:
IP 66.9.27.195

http://www.moensted.dk/spam/?addr=66.9.27.195
http://cbl.abuseat.org/lookup.cgi?ip=66.9.27.195
http://www.spamhaus.org/query/bl?ip=66.9.27.195
http://spamcop.net/w3m?action=checkblock&ip=66.9.27.195
Open Proxy - http://www.ahbl.org/tools/lookup.php?ip=66.9.27.195

More 66.9.27.195 sightings:
http://groups.google.com/groups/search?q=66.9.27.195+group%3A*abuse&start=0&scoring=d&

OrgName: INTELLISPACE, INC
OrgID: ITLS
NetRange: 66.9.0.0 - 66.9.255.255
CIDR: 66.9.0.0/16
NetName: ISPACE-NET-2
NetHandle: NET-66-9-0-0-1

route: 66.9.0.0/16
descr: ISPACE-NET-B
origin: AS6221
mnt-by: MAINT-ISPACE
changed: dig...@intellispace.net
ASN Name: USCYBERSITES
http://www.cidr-report.org/cgi-bin/as-report?as=6221

12 SBL/ROKSO listings for IPs under the responsibility of
intellispace.net
http://www.spamhaus.org/sbl/listings.lasso?isp=intellispace.net

See:
704.gidravlikaprogs.com IP 58.20.179.105
ns1.gidravlikaprogs.com A IN 3600 58.20.179.105
ns2.gidravlikaprogs.com A IN 3600 58.20.179.105
ns1.gesheftoem.com [58.20.179.105]
ns2.gesheftoem.com [58.20.179.105]

704.gidravlikaprogs.com has no MX records -> gidravlikaprogs.com has no
MX records

http://www.moensted.dk/spam/?addr=58.20.179.105
http://www.spamhaus.org/query/bl?ip=58.20.179.105

inetnum: 58.20.0.0 - 58.20.255.255
netname: CNCGROUP-HN
descr: CNC Group HuNan province network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN

route: 58.20.0.0/16
descr: CNC Group CHINA169 Hunan Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: ab...@cnc-noc.net

route: 58.20.0.0/16
descr: CNCGroup HuNan province network
country: CN
origin: AS9929
mnt-by: MAINT-CNCGROUP-RR
changed: hm-ch...@apnic.net
ASN Name: CNCNET-CN (China Netcom Corp.)
Country IP Range: 58.16.0.0 to 58.23.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=9929

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43439
58.20.179.0/24 is listed on the Spamhaus Block List (SBL)

16-Jun-2006 05:45 GMT | SR04

Dirty block - run by spammers or Chinese agents

15 SBL/ROKSO listings for IPs under the responsibility of cncgroup-hn
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hn

Let see whois:
Domain name: GIDRAVLIKAPROGS.COM
Registrar: PacNames

Domain Registrant: TOTALNIC-128733 (XSALSA[]GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI

Telephone: +358.207818027
Fax: +358.207818027

Administrative, Technical Contact: TOTALNIC-128733 (XSA...@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI

Telephone: +358.207818027
Fax: +358.207818027

Name Server: NS1.GESHEFTOEM.COM
Name Server: NS2.GESHEFTOEM.COM

Domain creation date: 2006-07-03 20:31:00.0
Domain expiration date: 2007-07-03 21:01:05.0

See:
ns1.gesheftoem.com IP 58.20.179.105

Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Domain name: GESHEFTOEM.COM
Registrar: PacNames

Domain Registrant: TOTALNIC-128733 (XSALSA[]GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI

Telephone: +358.207818027
Fax: +358.207818027

Administrative, Technical Contact: TOTALNIC-128733 (XSA...@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI

Telephone: +358.207818027
Fax: +358.207818027

Name Server: NS1.GESHEFTOEM.COM [58.20.179.105]
Name Server: NS2.GESHEFTOEM.COM [58.20.179.105]

Domain creation date: 2006-03-13 22:46:36.0
Domain expiration date: 2007-03-13 23:22:29.0

More gesheftoem.com sightings:
http://groups.google.com/groups?q=gesheftoem.com+group%3A*abuse

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages