[email] [software piracy] [88.140.57.137] (quatro-oem.com - srul5.com - aimhigh.com) OEM Windows License
TomezNet
IP 88.140.57.137 137.57.140-88.rev.gaoland.net
(at dns1.gaoland.net / neufcegetel.fr / cegetel.net)
Spamvert:
quatro-oem.com IP 208.160.156.44
(at ns.aimhigh.net / ns05.savvis.net)
Web:
This site coming soon
More info below:
====================
X-SID-PRA: corenda belita <anabel...@yalovarest.com>
X-Message-Info: txF49lGdW40VgNMOz5YjlokqQ0MoCArDaltWuYXeNJQ=
Received: from tomts42-srv.bellnexxia.net ([209.226.175.99]) by bay0-
pamc1-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sat, 24 Feb 2007 16:32:35 -0800
Received: from [MUNGED]
by toip18.srvr.bell.ca with ESMTP; 24 Feb 2007 19:32:21 -0500
Received: (qmail 9216 invoked by uid 110); 24 Feb 2007 19:32:20 -0500
Delivered-To: [MUNGED]
Received: (qmail 8181 invoked from network); 24 Feb 2007 19:32:19
-0500
Received: from 137.57.140-88.rev.gaoland.net (HELO nomeb85c523610)
(88.140.57.137)
by [MUNGED] with SMTP; 24 Feb 2007 19:32:19 -0500
To: [MUNGED]
Date: Sun, 25 Feb 2007 01:31:45 +0100
From: "corenda belita" <anabel...@yalovarest.com>
Sender: "corenda belita" <anabel...@yalovarest.com>
Subject: OEM Windows License
MIME-Version: 1.0
Message-ID: <71b66101c75874$541e21e0$0a1ea8c0@nomeb85c523610>
Content-Type: multipart/related;
boundary="----=_NextPart_000_71B166_01C7587C.9BA8ABE0"
X-Mailer: Microsoft Outlook Express 6.00.2900.2527
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
Return-Path: anabel...@yalovarest.com
X-OriginalArrivalTime: 25 Feb 2007 00:32:35.0118 (UTC)
FILETIME=[71BF94E0:01C75874]
This is a multi-part message in MIME format.
------=_NextPart_000_71B166_01C7587C.9BA8ABE0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_71B167_01C7587C.9BA8ABE0"
------=_NextPart_001_71B167_01C7587C.9BA8ABE0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Cuts out of its width (81). Unfair
That this mud draws on the stone.
I bring down a bit of its light
Is it almost honey, is it snow?
Dim, and die tonight?
Writhing their stunted limbs,
Over the chilly dale.
And beyond, the same sound of bees
Appear to lift up from the lake;
Chose to walk out of it, they'd have to pass
II. List of Franklin Search Parties
To mark that square, perhaps: were M=E8re and P=E8re
Come, swallows, it's good-bye.
Clear-voiced despite its years, strong, eloquent-
He terrifies the Vast, he seems so wild;
This third day of our January thaw,
That open before me? What I see
>From which, thanks to symmetry,
Between the high and the low, in this night.
------=_NextPart_001_71B167_01C7587C.9BA8ABE0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2><IMG alt="" hspace=0
src="cid:0b4701c75874$39c2ecb8$_CDOSYS2.0" align=baseline
border=0></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Cuts out of its width (81). Unfair<br>
That this mud draws on the stone.<br>
I bring down a bit of its light<br>
Is it almost honey, is it snow?<br>
Dim, and die tonight?<br>
Writhing their stunted limbs,<br>
Over the chilly dale.<br>
And beyond, the same sound of bees<br>
Appear to lift up from the lake;<br>
Chose to walk out of it, they'd have to pass<br>
II. List of Franklin Search Parties<br>
To mark that square, perhaps: were Mère and Père<br>
Come, swallows, it's good-bye.<br>
Clear-voiced despite its years, strong, eloquent-<br>
He terrifies the Vast, he seems so wild;<br>
This third day of our January thaw,<br>
That open before me? What I see<br>
>From which, thanks to symmetry,<br>
Between the high and the low, in this night.<br></DIV></BODY></HTML>
------=_NextPart_001_71B167_01C7587C.9BA8ABE0--
------=_NextPart_000_71B166_01C7587C.9BA8ABE0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: base64
Content-ID: <0b4701c75874$39c2ecb8$_CDOSYS2.0>
Content-Disposition: inline
------=_NextPart_000_71B166_01C7587C.9BA8ABE0--
*** REMOVED image attachment
Decoded base64 text:
MICROSOFT OFFICE 2007 ENTERPRICE $79.95
ADOBE ACROBAT 8.0 PROFESSIONAL $79.95
ADOBE CREATIVE SUITE 2 PREMIUM $149.95
AUTODESK AUTOCAD 2007 $129.95
MACROMEDIA STUDIO 8 $ 89.95
MICROSOFT WINDOWS XP PROFESSIONAL SP2 $49.95
ADOBE PHOTOSHOPCS2 V 9.0 $69.95
QUATRO-OEM.COM
(Please don't click, just enter the link in address bar of your
browser)
- END of decoded text -
-- END OF SPAM --
See:
IP 88.140.57.137 137.57.140-88.rev.gaoland.net
http://www.moensted.dk/spam/?addr=88.140.57.137
http://www.spamhaus.org/query/bl?ip=88.140.57.137
http://www.spamhaus.org/pbl/query/PBL043667
inetnum: 88.136.0.0 - 88.140.120.255
netname: CEGETEL-INTERNET-RESIDENTIEL
descr: INTERNET RESIDENTIEL CEGETEL France
descr: Bloc - 15
mnt-by: CEGETEL-ENTREPRISES
changed: jean-pier...@neufcegetel.fr
abuse[]cegetel.net is listed in rfc-ignorant.org database
route: 88.140.0.0/16
descr: CEGETEL CIDR Block
descr: CEGETEL France
origin: AS8228
mnt-by: CEGETEL-ENTREPRISES
changed: jean-pier...@neufcegetel.fr
Prefix: 88.140.0.0/16
Prefix Name: CEGETEL CIDR Block CEGETEL France
ASN: CEGETEL AS CEGETEL ENTREPRISES Internet Network Cegetel SAS
ASN Name: 8228
Country (per IP registrar): FR [France]
Country IP Range: 88.136.0.0 to 88.143.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=8228
10 SBL/ROKSO listings for IPs under the responsibility of gaoland.net
http://www.spamhaus.org/sbl/listings.lasso?isp=gaoland.net
2 SBL/ROKSO listings for IPs under the responsibility of cegetel.fr
http://www.spamhaus.org/sbl/listings.lasso?isp=cegetel.fr
See:
quatro-oem.com IP 208.160.156.44
ns1.srul5.com [208.160.156.52] [TTL=172800] [US]
ns2.srul5.com [208.160.156.52] [TTL=172800] [US]
[quatro-oem.com has 1 MX record mailhost.com (10)]
http://www.moensted.dk/spam/?addr=208.160.156.44
208.160.156.44 PTR record: device34.aimhigh.com
at ns.aimhigh.net / ns05.savvis.net
More aimhigh.com sightings:
http://groups.google.com/groups/search?q=aimhigh.com+group%3A*abuse
Aliases on the same IP:
gnuworld.com
burlyman.org
www.burlyman.org
chemfish.org
mail.reply2it.com
www.reply2it.com
stf.hmm.hm
hmm.hm
hm.hmm.hm
reply2it.com
Savvis SAVVIS (NET-208-157-192-0-1)
208.157.192.0 - 208.163.31.255
Internet Name Register CW-208-160-156 (NET-208-160-156-0-1)
208.160.156.0 - 208.160.159.255
OrgName: Savvis
OrgID: SAVVI-3
NetRange: 208.157.192.0 - 208.163.31.255
CIDR: 208.157.192.0/18, 208.158.0.0/15, 208.160.0.0/15,
208.162.0.0/16, 208.163.0.0/19
NetName: SAVVIS
NetHandle: NET-208-157-192-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Allocation
OrgName: Aim High Internet Services
OrgID: AMHI
Address: PO Box 1417
City: Golden
StateProv: CO
PostalCode: 80402
Country: US
NetRange: 208.160.156.0 - 208.160.159.255
CIDR: 208.160.156.0/22
NetName: CW-208-160-156
NetHandle: NET-208-160-156-0-1
Parent: NET-208-157-192-0-1
NetType: Reallocated
RTechEmail: e...@aimhigh.net
OrgTechEmail: in...@aimhigh.net
route: 208.160.156.0/22
descr: PNAP-DEN NETRACK-ROUTES
origin: AS13700
mnt-by: INAP-MAINT-RADB
changed: dheid...@internap.com
Prefix: 208.160.156.0/22
Prefix Name: PNAP DEN NETRACK ROUTES REACH Route Object CNAH route
object
ASN: 13700
ASN Name: CAPITAL-NETWORKS Capital Networks Pty Ltd
Country (per IP registrar): US [United States]
Country IP Range: 208.160.0.0 to 208.175.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=13700
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
PacNames WHOIS Server Version 1.1.0
Domain name: QUATRO-OEM.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: (Private Contact)
(pws.c7636cd1d07e793[]shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Administrative, Technical Contact: (Private Contact)
(pws.c7636...@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Name Server: NS1.SRUL5.COM
Name Server: NS2.SRUL5.COM
Domain creation date: 2007-01-02 00:33:31.0
Domain expiration date: 2008-01-02 05:48:07.0
See:
ns1.srul5.com IP 208.160.156.52
[ns1.srul5.com has 1 MX record mailhost.com (10)]
http://www.moensted.dk/spam/?addr=208.160.156.52
at panther.aimhigh.net / ns01.savvis.net
ASN Name: CAPITAL-NETWORKS
http://www.cidr-report.org/cgi-bin/as-report?as= 13700
More srul5.com sightings:
http://groups.google.com/groups/search?q=srul5.com+group%3A*abuse&start=0&scoring=d&
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/593664ca2e8ad5d5
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: