[email] [software piracy] (safedroching.com - vtumane.com) Buy OEM Software
TomezNet
IP 85.50.129.149 85-50-129-149.bcn1.adsl.uni2.es
(at m2dnscache1.net.uni2.es / es.francetelecom.com)
Spamvert:
zloeeeebuchka.com IP 211.156.120.11
(SBL43357 - ROK4932) (at wantong.net.cn / wtonline.net / kornet.net)
See spammer change of domains Registration E-mail:
>From previously XSALSA[]ETN.ORG to XSALSA[]GMAIL.COM
More spammer sightings:
http://groups.google.com/groups/search?q=%22XSALSA%40%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 209.73.179.30; Sun, 11 Jun 2006
09:36:31 -0700
X-YahooFilteredBulk: 85.50.129.149
X-Originating-IP: [85.50.129.149]
Return-Path: <c.lo...@vegasrealtoronline.com>
Authentication-Results: mta252.mail.re4.yahoo.com
from=vegasrealtoronline.com; domainkeys=neutral (no sig)
Received: from 85.50.129.149 (HELO localhost) (85.50.129.149) by
mta252.mail.re4.yahoo.com with SMTP; Sun, 11 Jun 2006 09:36:31 -0700
Message-ID: <000001c68d74$c5bf2900$0100007f@localhost>
From: "Johnny Mitchell" <c.lo...@vegasrealtoronline.com>
To: xx..xx@xx..xx.com
Subject: Buy OEM Software
Date: Sun, 11 Jun 2006 18:36:23 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C68D74.C5BF2900"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Content-Length: 2345
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01
Transitional//EN"><HTML><HEAD><TITLE> DS</TITLE><meta
http-equiv="Content-Type" content="text/html;
charset=windows-1252"><style>
#message { FONT-SIZE: 11px; COLOR: #000; FONT-FAMILY: Verdana,
sans-serif } #message TD { FONT-SIZE: 11px; MARGIN: 0px; COLOR: #000;
FONT-FAMILY: Verdana, sans-serif } #message A { COLOR: #00c;
TEXT-DECORATION: underline} #message A:visited { COLOR: #00c} #message
.product_table {PADDING-RIGHT: 0px; MARGIN-TOP: 0px; PADDING-LEFT: 0px;
PADDING-BOTTOM: 3px; WIDTH: 100%; PADDING-TOP: 3px; BORDER-COLLAPSE:
collapse} #message .product_table TD { BORDER-BOTTOM: #ddd 1px solid}
#message .product_table .compacted_image {PADDING-RIGHT: 15px;
PADDING-LEFT: 0px; PADDING-BOTTOM: 13px; VERTICAL-ALIGN: top; WIDTH:
1%; PADDING-TOP: 15px; TEXT-ALIGN: center} #message .product_table
.compacted_image IMG {BORDER-RIGHT: #ddd 1px solid; BORDER-TOP: #ddd
1px solid; MARGIN: 5px 0px 5px 5px; BORDER-LEFT: #ddd 1px solid;
BORDER-BOTTOM: #ddd 1px solid}#message .product_table
.compacted_description {PADDING-RIGHT: 15px; PADDING-LEFT: 0px;
PADDING-BOTTOM: 13px; VERTICAL-ALIGN: top; WIDTH: auto; PADDING-TOP:
15px} #message .product_table .titlelink {FONT-WEIGHT: bold; FONT-SIZE:
13px} #message .product_table .compacted_description P {DISPLAY: block;
FONT-WEIGHT: normal; FONT-SIZE: 11px; MARGIN: 4px 0px; COLOR: #666}
#message .product_table .compacted_description .mediadescription
{FONT-SIZE: 12px; MARGIN: 10px 0px 0px} #message .product_table .rating
{FONT-WEIGHT: normal; FONT-SIZE: 11px; MARGIN: 10px 0px 0px} #message
.product_table .rating IMG {BORDER-RIGHT: medium none; BORDER-TOP:
medium none; VERTICAL-ALIGN: middle; BORDER-LEFT: medium none;
BORDER-BOTTOM: medium none} #message .product_table .compacted_price
{PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 13px;
VERTICAL-ALIGN: top; WIDTH: 1%; PADDING-TOP: 15px; WHITE-SPACE: nowrap;
TEXT-ALIGN: center}#message .product_table .compacted_price IMG
{BORDER-RIGHT: medium none; BORDER-TOP: medium none; DISPLAY: block;
MARGIN: 5px auto; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none}
#message .product_table .addtolist_ {PADDING-RIGHT: 0px; DISPLAY:
block; PADDING-LEFT: 0px; FONT-WEIGHT: normal; FONT-SIZE: 10px;
PADDING-BOTTOM: 0px; PADDING-TOP: 5px;} #message .product_table
.greylink {FONT-WEIGHT: normal; COLOR: #666; TEXT-DECORATION: none}
#message .product_table .greylink:visited {FONT-WEIGHT: normal; COLOR:
#666; TEXT-DECORATION: none} #message .product_table .odd
{BACKGROUND-COLOR: #fff} #message .hp_main_table {background: #ccc;}
#message .hp_main_center {background: #fff;} #message .hp_main_left
{background: #fff;} #message div.top{background: #F2F2F2; padding: 5px;
text-align: center; color: #ca0000;font-size: 18px;font-weight: bold;}
#message .hw{font-size: 10px;} #message .padding_0{padding: 0px;}
#message .sp_title{font-weight: bold;color: #0000ff;font-size: 13px;}
#message .sp_cont{font-weight: bold;} #message .sp_cont { margin-left:
10px; padding-left: 10px; } #message .sp_price{color: #FF0000;
font-size: 16px; font-weight: bold;}#message .b_price{color: #6B9E28;
font-size: 20px;}#message .dgts{color:#FF0000; font-weight: bold;}
#message .border{ border: 1px solid #ddd; padding:3px; }
</style></HEAD><xbody><table border="0" width="600"
class="hp_main_table" cellpadding="3" cellspacing="1"><tr> <td
class="padding_0"><div class="top"> Special Offer</div></td></tr><tr>
<td class="hp_main_center" valign="top"><TABLE class=product_table
cellSpacing=0 cellPadding=3><TR class=odd> <TD width="33%"
valign="top"><div class="border"> <a target="_blank"
href="http://zloeeeebuchka.com/" class="sp_title"> Adobe Video
Collection</a><ul class="sp_cont"><li>Adobe Premiere 1.5
Professional<li>Adobe After Effects 6.5 Professional<li>Adobe Audition
1.5<li>Adobe Encore DVD 1.5</ul><div align="right" class="sp_price">
<u>$149.95</u> </div></span> <a target="_blank"
href="http://zloeeeebuchka.com/" > More Info >></a></div></TD> <TD
width="33%" valign="top"><div class="border"> <a target="_blank"
href="http://zloeeeebuchka.com/" class="sp_title"> Microsoft 2 in
1</a><ul class="sp_cont"><li> MS Windows XP Pro<li>MS Office 2003
Pro</ul> <br> <br> <br> <br><div align="right" class="sp_price">
<u>$99.95</u> </div></span> <a target="_blank"
href="http://zloeeeebuchka.com/" > More Info >></a></div></TD>
<TD width="33%" valign="top"><div class="border"> <a target="_blank"
href="http://zloeeeebuchka.com/" class="sp_title"> Microsoft + Adobe 3
in 1</a> <br><ul class="sp_cont"><li>MS Windows XP Pro<li>MS Office
2003 Pro<li>Adobe Acrobat 7.0 Professional</ul> <br> <br><div
align="right" class="sp_price"> <u>$149.95</u>
</div></span> <a target="_blank"
href="http://zloeeeebuchka.com/" > More Info
>></a></div></TD></TR></TABLE></td></tr><tr> <td class="padding_0"><div class="top" class="hw"> Bestsellers</div></td></tr><tr> <td class="hp_main_center" valign="top"><TABLE class=product_table cellSpacing=0 cellPadding=0><TR class=odd> <TD class=compacted_image> <A target="_blank" href="http://zloeeeebuchka.com/" > <IMG height=100 alt="" src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif" width=100></A></TD> <TD class=compacted_description> <A target="_blank" class=titlelink href="http://zloeeeebuchka.com/" > Microsoft Office Professional Edition 2003</A><div class="rating"> Rating: <a target="_blank" class="greylink" href="http://zloeeeebuchka.com/" > <img src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"> 6 reviews</a></div>
<s> Retail price: $550.00</s><br> <font color="#6B9E28"> You save:
$480.05 (87%)</font> <br> <span class="b_price"> Our price: <SPAN
class="dgts"> <u>$69.95</u></span></SPAN></TD> <TD> </TD> <TD
class=compacted_price><center> <A target="_blank"
href="http://zloeeeebuchka.com/"> <img
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
border="0"> <br>Add to cart</A></center> <br></TD></TR></TABLE><TABLE
class=product_table cellSpacing=0 cellPadding=0><TR class=odd> <TD
class=compacted_image> <A target="_blank"
href="http://zloeeeebuchka.com/" > <IMG height=100 alt=""
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=100></A></TD> <TD class=compacted_description> <A target="_blank"
class=titlelink href="http://zloeeeebuchka.com/" > Microsoft Windows
XP Professional</A><div class="rating"> Rating: <a target="_blank"
class="greylink" href="http://zloeeeebuchka.com/" > <img
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"> 8
reviews</a></div> <s> Retail price: <SPAN class=money>
$200.00</SPAN></s> <br> <font color="#6B9E28"> You save: <SPAN
class=money> $150.05 (75%)</font></SPAN> <br> <span class="b_price">
Our price:
<SPAN class="dgts"> <u>$49.95</u></SPAN></SPAN></TD> <TD> </TD>
<TD class=compacted_price><center> <A target="_blank"
href="http://zloeeeebuchka.com/" > <img
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
border="0"> <br>Add to cart</A></center> <br></TD></TR></TABLE><TABLE
class=product_table cellSpacing=0 cellPadding=0><TR class=odd> <TD
class=compacted_image> <A target="_blank"
href="http://zloeeeebuchka.com/" > <IMG height=100 alt=""
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=100></A></TD> <TD class=compacted_description> <A target="_blank"
class=titlelink href="http://zloeeeebuchka.com/" > Adobe Photoshop CS2
V 9.0</A><div class="rating"> Rating: <a target="_blank"
class="greylink" href="http://zloeeeebuchka.com/" > <img
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"> 3
reviews</a></div> <s> Retail price: <SPAN class=money>
$599.00</SPAN></s> <br> <font color="#6B9E28"> You save: <SPAN
class=money> $529.05 (88%)</font></SPAN> <br> <span class="b_price">
Our price: <SPAN class="dgts"> <u>$69.95</u></SPAN></SPAN></TD> <TD>
</TD> <TD class=compacted_price><center>
<A target="_blank" href="http://zloeeeebuchka.com/" > <img
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
border="0"> <br>Add to cart</A></center>
<br></TD></TR></TABLE></td></tr></table></xbody></HTML>
-- END OF SPAM --
See:
IP 85.50.129.149 85-50-129-149.bcn1.adsl.uni2.es
http://www.moensted.dk/spam/?addr=85.50.129.149
http://cbl.abuseat.org/lookup.cgi?ip=85.50.129.149
http://www.spamhaus.org/query/bl?ip=85.50.129.149
inetnum: 85.48.0.0 - 85.55.255.255
netname: UNI2-NET
descr: Addresses IP for Home clients
descr: Uni2 - Woo
country: ES
ASN Name: UNI2-AS (Uni2 Autonomous System)
http://www.cidr-report.org/cgi-bin/as-report?as=12479
6 SBL listings for IPs under the responsibility of es.francetelecom.com
http://www.spamhaus.org/sbl/listings.lasso?isp=es.francetelecom.com
See:
zloeeeebuchka.com IP 211.156.120.11
ns1.zloeeeebuchka.com A IN 3600 211.156.120.11
ns2.zloeeeebuchka.com A IN 3600 211.156.120.11
ns1.vtumane.com [211.156.120.11]
ns2.vtumane.com [221.4.247.45]
www.zloeeeebuchka.com has no MX records -> zloeeeebuchka.com has no MX
records
See more 211.156.120.11 sightings:
http://groups.google.com/groups/search?q=211.156.120.11+group%3A*abuse
http://www.moensted.dk/spam/?addr=211.156.120.11
http://www.spamhaus.org/query/bl?ip=211.156.120.11
inetnum: 211.156.120.0 - 211.156.121.255
netname: ZNY
country: cn
route: 211.156.120.0/22
descr: China Netcom
origin: AS9929
mnt-by: MAINT-AS9929
changed: xu...@china-netcom.com
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
Country IP Range: 211.144.0.0 to 211.159.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=4134
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL43357
211.156.120.0/24 is listed on the Spamhaus Block List (SBL/ROKSO)
14-Jun-2006 08:15 GMT | SR02
Leo Kuvayev / BadCow
ns1.pinkyakor.com @ 211.156.120.11 (dirty block)
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
31 SBL/ROKSO listings for IPs under the responsibility of kornet.net
http://www.spamhaus.org/sbl/listings.lasso?isp=kornet.net
More safedroching.com sightings:
http://groups.google.com/groups/search?q=safedroching.com+group%3A*abuse
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Domain name: ZLOEEEEBUCHKA.COM
Registrar: PacNames
Domain Registrant: TOTALNIC-128733 (ADMIN[]GORLOK.NET)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (AD...@GORLOK.NET)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.GREYTORMOZ.COM [211.156.120.11]
Name Server: NS2.GREYTORMOZ.COM [211.156.120.11]
Domain creation date: 2006-06-06 13:42:26.0
Domain expiration date: 2007-06-06 14:14:14.0
See:
ns2.vtumane.com IP 221.4.247.45
http://www.moensted.dk/spam/?addr=221.4.247.45
Spam Received See: http://www.sorbs.net/lookup.shtml?221.4.247.45
Let See see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Domain name: VTUMANE.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: TOTALNIC-128733 (XSALSA[]GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (XSA...@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.DRUNOSOFT.COM [211.156.120.11]
Name Server: NS2.DRUNOSOFT.COM [211.156.120.11]
Domain creation date: 2006-05-16 01:04:55.0
Domain expiration date: 2007-05-16 01:37:52.0
More vtumane.com sightings:
http://groups.google.com/groups/search?q=vtumane.com+group%3A*abuse&start=0&scoring=d&
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Domain name: DRUNOSOFT.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: TOTALNIC-128733 (XSALSA[]GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (XSA...@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.DRUNOSOFT.COM
Name Server: NS2.DRUNOSOFT.COM
Domain creation date: 2006-03-04 22:21:55.0
Domain expiration date: 2007-03-04 22:58:33.0
See:
ns1.greytormoz.com IP 211.156.120.11
AND let see whois:
Domain Name: GREYTORMOZ.COM
Registrar: CAPITAL NETWORKS PTY LTD
Whois Server: whois.pacnames.com
Referral URL: http://www.pacnames.com
Name Server: NS1.DRUNOSOFT.COM
Name Server: NS2.DRUNOSOFT.COM
Status: ACTIVE
Updated Date: 12-jun-2006
Creation Date: 07-jun-2006
Expiration Date: 07-jun-2007
See:
ns1.gorlok.net [193.238.38.233]
ns2.gorlok.net [193.238.38.234]
http://www.moensted.dk/spam/?addr=193.238.38.233
http://www.spamhaus.org/query/bl?ip=193.238.38.233
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40543
193.238.36.0/22 is listed on the Spamhaus Block List (SBL/ROKSO)
06-Jun-2006 09:16 GMT | SR04
Leo Kuvayev / BadCow
Nic.ru aka ConnectCom.ru spamhaus - oemguy.com ; etc
Known "fake ISP hosting" criminal spammers. AS34596 via << AS24919
4 SBL/ROKSO listings for IPs under the responsibility of cubio.net
http://www.spamhaus.org/sbl/listings.lasso?isp=cubio.net
AND let see whois:
Registrar: BULKREGISTER, LLC.
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta, NA 53101
FI
Domain Name: GORLOK.NET
Administrative Contact:
Alex Rodrigez admin[]gorlok.net
Private person
PO box 109 WP 1432
Lappeenranta, 53101
FI
Phone: +358.207818027
Fax: +358.207818027
Technical Contact:
Alex Rodrigez ad...@gorlok.net
Private person
PO box 109 WP 1432
Lappeenranta, 53101
FI
Phone: +358.207818027
Fax: +358.207818027
Billing Contact:
Alex Rodrigez ad...@gorlok.net
Private person
PO box 109 WP 1432
Lappeenranta, 53101
FI
Phone: +358.207818027
Fax: +358.207818027
Record updated on 2006-06-01 21:36:16
Record created on 2005-09-22
Record expires on 2006-09-22
Database last updated on 2006-06-14 09:52:46 EST
Domain servers in listed order:
NS1.GORLOK.NET 193.238.38.233
NS2.GORLOK.NET 193.238.38.234
TransferGuard LOCK Status => ENABLED
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/22ca42cfcbab4888
And:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/d403c9ffa02841fc
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: