[email] [software piracy] (slonopotam.net - oemguy.com) Software At Low Pr1ce
TomezNet
IP 201.30.243.19 agua19.wnetrj.com.br
(at salome.wnt.com.BR / b.dns.br / embratel.net.br)
Spamvert:
slonopotam.net IP 194.135.124.22
(ROK4932 - SBL40508) (at relcom.net)
More sightings by the same spammer:
http://groups.google.com/groups/search?q=%22%40ETN.ORG%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 209.73.179.37; Mon, 17 Apr 2006
04:12:49 -0700
X-YahooFilteredBulk: 201.30.243.19
X-Originating-IP: [201.30.243.19]
Return-Path: <horst....@itsower.com>
Authentication-Results: mta204.mail.re2.yahoo.com from=holiway.net;
domainkeys=neutral (no sig)
Received: from 201.30.243.19 (HELO localhost) (201.30.243.19) by
mta204.mail.re2.yahoo.com with SMTP; Mon, 17 Apr 2006 04:12:49 -0700
Message-ID: <000001c6623a$9095cf00$0100007f@localhost>
From: "Logan Gonzalez" <tit...@holiway.net>
To: xx..xx@xx..xx.com
Subject: Software At Low Pr1ce
Date: Mon, 17 Apr 2006 08:12:46 -0300
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative";
boundary="----=_NextPart_000_0001_01C6623A.9095CF00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Content-Length: 10146
By the time Scarlett had undressed and blown out the
candle, her
plan for tomorrow had worked itself out in every
detail. It was a
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Software</TITLE><META http-equiv="Content-Type"
content="text/html; charset=windows-1252"><STYLE></STYLE></HEAD>
<xbody bgColor=#ffffff>
<TABLE border=0><TBODY><TR vAlign=top><TD width=158><a target="_blank"
href=http://slonopotam.net/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=5287_0_7881_1319_10146_0_15915_15842_2555945695_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiKekflC4Kas1.3mN7BkEkQkuRD3viEb0aLBVet3rjd2CmMFISqTNlkAPvDrVgLWJego8HsiomlGm6LwEStUEajDLIkyqez5apjr778CiV.FPW4EIQcCh.nKfkcIjhGp&bodyPart=2&YY=645&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
border=0></a></TD><TD><TABLE border=0><TBODY><TR vAlign=top><TD><a
target="_blank" href=http://slonopotam.net/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD>
<TD> <a target="_blank" href=http://slonopotam.net/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=5287_0_7881_1319_10146_0_15915_15842_2555945695_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiKekflC4Kas1.3mN7BkEkQkuRD3viEb0aLBVet3rjd2CmMFISqTNlkAPvDrVgLWJego8HsiomlGm6LwEStUEajDLIkyqez5apjr778CiV.FPW4EIQcCh.nKfkcIjhGp&bodyPart=5&YY=645&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0></a><HR></TD></TR><TR vAlign=top>
<TD><a target="_blank" href=http://slonopotam.net/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD><TD><a target="_blank"
href=http://slonopotam.net/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=5287_0_7881_1319_10146_0_15915_15842_2555945695_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiKekflC4Kas1.3mN7BkEkQkuRD3viEb0aLBVet3rjd2CmMFISqTNlkAPvDrVgLWJego8HsiomlGm6LwEStUEajDLIkyqez5apjr778CiV.FPW4EIQcCh.nKfkcIjhGp&bodyPart=3&YY=645&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0></a>
<HR></TD></TR><TR vAlign=top><TD><a target="_blank"
href=http://slonopotam.net/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD><TD><a target="_blank"
href=http://slonopotam.net/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=5287_0_7881_1319_10146_0_15915_15842_2555945695_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiKekflC4Kas1.3mN7BkEkQkuRD3viEb0aLBVet3rjd2CmMFISqTNlkAPvDrVgLWJego8HsiomlGm6LwEStUEajDLIkyqez5apjr778CiV.FPW4EIQcCh.nKfkcIjhGp&bodyPart=4&YY=645&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0>
</a><HR></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE>
<TEXTAREA style="visibility: hidden;">
By the time Scarlett had undressed and blown out the candle, her
plan for tomorrow had worked itself out in every detail. It was a
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
simple plan, for, with Gerald's single mindedness of purpose, her
eyes were centered on the goal and she thought only of the most direct
steps by which to reach it.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
Scarlett obeyed, bracing herself and catching firm hold of one of the
bedposts. Mammy pulled and jerked vigorously and, as the tiny
circumference
of whalebone girdled waist grew smaller, a proud, fond look came into
her eyes.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
There was no one to tell Scarlett that her own personality,
frighteningly
vital though it was, was more attractive than any masquerade she might
adopt.
Had she been told, she would have been pleased but unbelieving. And the
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
civilization of which she was a part would have been unbelieving too,
for
at no time, before or since, had so low a premium been placed on
feminine naturalness.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
As they neared the intersecting road that came down the thickly wooded
hill from Mimosa and Fairhill, the sound of hooves and carriage wheels
became
plainer and clamorous feminine voices raised in pleasant dispute
sounded from
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
behind the screen of trees. Gerald, riding ahead, pulled up his horse
and signed
to Toby to stop the carriage where the two roads met.
</TEXTAREA>
</xbody></HTML>
-- END OF SPAM --
See also more oemguy.com sightings:
http://groups.google.com/groups/search?q=oemguy.com+group%3A*abuse&start=0&scoring=d&
See:
IP 201.30.243.19 agua19.wnetrj.com.br
http://www.moensted.dk/spam/?addr=201.30.243.19
http://cbl.abuseat.org/lookup.cgi?ip=201.30.243.19
http://www.spamhaus.org/query/bl?ip=201.30.243.19
inetnum: 201.30.243/24
aut-num: AS4230
abuse-c: GSE6
owner: Wireless Internet S.A.
ownerid: 003.088.530/0001-21
responsible: Henrique Fontenelle Furtado
route: 201.30.0.0/16
descr: EMBRATEL BRAZIL
origin: AS4230
notify: neta...@embratel.net.br
http://www.cidr-report.org/cgi-bin/as-report?as=4230
15 SBL/ROKSO listings for IPs under the responsibility of
embratel.net.br
http://www.spamhaus.org/sbl/listings.lasso?isp=embratel.net.br
See:
slonopotam.net IP 194.135.124.22
ns1.slonopotam.net A IN 3600 194.135.124.22
ns2.slonopotam.net A IN 3600 194.135.124.22
slonopotam.net has no MX records
http://www.moensted.dk/spam/?addr=194.135.124.22
http://www.spamhaus.org/query/bl?ip=194.135.124.22
More 194.135.124.22 sightings:
http://groups.google.com/groups/search?q=194.135.124.22+group%3A*abuse
inetnum: 194.135.124.0 - 194.135.125.255
netname: relcom
descr: "RELCOM.BUSINESS NETWORK" Ltd.
country: RU
route: 194.135.0.0/16
descr: DELEGATED BLOCK
descr: Provider Local Registry
descr: Provider block for EUnet/RELCOM
origin: AS2118
notify: n...@Relcom.net
mnt-by: AS2118-MNT
changed: ch...@Relcom.EU.net
ASN: 2118
ASN Name: RELCOM-AS (RELCOM Autonomous System)
Country (per IP registrar): RU [Russian Federation]
Country IP Range: 194.135.0.0 to 194.135.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=2118
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40508
194.135.124.22/32 is listed on the Spamhaus Block List (SBL/ROKSO)
17-Apr-2006 18:56 GMT | SR22
Leo Kuvayev / BadCow
Spammer webhosting and DNS - mazasoft.net / oemguy.com
Main info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
17 SBL/ROKSO listings for IPs under the responsibility of relcom.net
http://www.spamhaus.org/sbl/listings.lasso?isp=relcom.net
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Registrar: PacNames
Domain name: SLONOPOTAM.NET
Domain Registrant: TOTALNIC-127503 (XSA...@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF
Telephone: +689.435695
Fax: +689.435695
Administrative, Technical Contact: TOTALNIC-127503 (XSALSA[]ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF
Telephone: +689.435695
Fax: +689.435695
Name Server: NS1.OEMGUY.COM
Name Server: NS2.OEMGUY.COM
Domain creation date: 2006-04-13 21:51:53.0
Domain expiration date: 2007-04-13 22:27:04.0
More slonopotam.net sightings:
http://groups.google.com/groups/search?q=slonopotam.net+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/b66536c5514d4cd3
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: