[email] [software piracy] (palaitece.com - needingei.com) Software
TomezNet
IP 222.218.107.220
(at CHINANET-GX)
Spamvert:
9gfyw3fafyx4a9rme994e999.palaitece.com IP 58.19.254.157
(ROK4932 - SBL40684 / SBL40685) (at CNCGROUP-HB)
mo.needingei.com IP 59.191.125.254
(SBL40188) (at crc.net.cn)
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.164; Sat, 29 Apr 2006
19:43:50 -0700
X-YahooFilteredBulk: 222.218.107.220
X-Originating-IP: [222.218.107.220]
Return-Path: <kev...@mailexcite.com>
Authentication-Results: mta293.mail.scd.yahoo.com from=mailexcite.com;
domainkeys=neutral (no sig)
Received: from 207.228....... (EHLO xxx.web-hosting.com)
(207.228.......) by mta293.mail.scd.yahoo.com with SMTP; Sat, 29 Apr
2006 19:43:50 -0700
Received: from -1214086336 ([222.218.107.220]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k3U2hk919267 for <xx..xx@xx..xx.com>; Sat,
29 Apr 2006 22:43:47 -0400 (EDT)
Received: from mailexcite.com (-1213320152 [-1213909960]) by e-hkma.com
(Qmailv1) with ESMTP id 7DC6461471 for <xx..xx@xx..xx.com>; Sat, 29 Apr
2006 21:27:55 -0500
Date: Sat, 29 Apr 2006 21:27:55 -0500
From:"Scrubbiest V. Windowsills" <kev...@mailexcite.com>
X-Mailer: The Bat! (v2.00.7) Personal
X-Priority: 3
Message-ID: <3526385090.2...@mailexcite.com>
To:"Webmaster" <xx..xx@xx..xx.com>
Subject: Software
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-AntiVirus: skaner antywirusowy poczty Wirtualnej Polski S. A.
Content-Length: 621
You know how it? to work with stable software!
some software u need!
New software on our site:
Picture It Premium 9 - $59.95
Creative Suite Standard (3 CD) - $129.95
Windows XP Professional - $69.95
LiveMotion 2.0 - $69.95
Plus! XP - $59.95
Exchange 2003 Enterprise Server - $69.95
Visual Studio .NET Architect Edition (8CD) - $139.95
Office 2000 Premium Edition PE (2CD) - $59.95
Windows XP Professional - $69.95
Fireworks MX 2004 - $69.95
InDesign CS - $69.95
CorelDraw Graphics Suite 11 - $59.95
Windows Millenium - $59.95
Windows XP Professional - $69.95
Our site:
http://9gfyw3fafyx4a9rme994e999.palaitece.com/
-- END OF SPAM --
See:
IP 222.218.107.220
http://www.moensted.dk/spam/?addr=222.218.107.220
http://cbl.abuseat.org/lookup.cgi?ip=222.218.107.220
http://www.spamhaus.org/query/bl?ip=222.218.107.220
inetnum: 222.216.0.0 - 222.218.255.255
netname: CHINANET-GX
descr: CHINANET Guangxi province network
descr: China Telecom
descr: No1,jin-rong Street
descr: Beijing 100032
country: CN
route: 222.218.0.0/16
descr: China Telecom Guangxi province
origin: AS4134
mnt-by: MAINT-AS4134
changed: li...@cndata.com
http://www.cidr-report.org/cgi-bin/as-report?as=4134
Spamvert
9gfyw3fafyx4a9rme994e999.palaitece.com IP 58.19.254.157
mo.needingei.com A IN 3600 59.191.125.254
qo.needingei.com A IN 3600 58.19.254.157
9gfyw3fafyx4a9rme994e999.palaitece.com has no MX records ->
palaitece.com has no MX records
http://www.moensted.dk/spam/?addr=58.19.254.157
http://www.spamhaus.org/query/bl?ip=58.19.254.157
inetnum: 58.19.0.0 - 58.19.255.255
netname: CNCGROUP-HB
descr: CNCGROUP HuBei Province Network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
route: 58.19.0.0/16
descr: CNC Group CHINA169 Hubei Province Network
country: CN
origin: AS4837
http://www.cidr-report.org/cgi-bin/as-report?as=4837
More 58.19.254.157 sightings:
http://groups.google.com/groups/search?q=58.19.254.157+group%3A*abuse&start=0&scoring=d&
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40684
58.19.254.157/32 is listed on the Spamhaus Block List (SBL/ROKSO)
21-Apr-2006 08:09 GMT | SR02
Leo Kuvayev / BadCow
ns2.cantonec.com
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40685
58.19.254.156/31 is listed on the Spamhaus Block List (SBL)
28-Apr-2006 23:59 GMT | SR02
BESTDNSSERVICES.COM ; ns1.nettlerfl.com ; etc
4 SBL/ROKSO listings for IPs under the responsibility of cncgroup-hb
http://www.spamhaus.org/sbl/listings.lasso?isp=cncgroup-hb
Let see whois:
Registrar: ONLINE SAS
Domain Name : palaitece.com (PALAIT2-BMN-DOM)
Registrar : BookMyName
Registrant / Admin Contact :
PERSON
Tram TELPIL (TELPIL2-BMN-PE)
795 Farmers Lane, Suite 23
95405 Santa Rosa
UNITED STATES
phone : (707) 575 1468
fax :
e-mail : tramtelpil[]yahoo.com
Billing Contact :
PERSON
Tram TELPIL (TELPIL2-BMN-PE)
795 Farmers Lane, Suite 23
95405 Santa Rosa
UNITED STATES
phone : (707) 575 1468
fax :
e-mail : tramt...@yahoo.com
Technical Contact :
PERSON
Tram TELPIL (TELPIL2-BMN-PE)
795 Farmers Lane, Suite 23
95405 Santa Rosa
UNITED STATES
phone : (707) 575 1468
fax :
e-mail : tramt...@yahoo.com
Domain servers :
qo.needingei.com (QNC2-BMN-HST)
mo.needingei.com (MNC5-BMN-HST)
Created on 04/27/2006 16:39:24
Updated on 04/27/2006 18:00:39
Expires on 04/27/2007 12:39:24
More palaitece.com sightings:
http://groups.google.com/groups/search?q=palaitece.com+group%3A*abuse
See:
mo.needingei.com IP 59.191.125.254
inetnum: 59.191.96.0 - 59.191.127.255
netname: gxdianli
country: CN
descr: Liu zhou Feifan ELECTRON Co., LTD.
descr: Gao Xi 1Road,KeJi Gong Ye Yuan, liuzhou,
descr: GuangXi, P.R.China
country: CN
ASN: 4134
ASN Name: CHINANET-BACKBONE (No.31,Jin-rong Street)
http://www.cidr-report.org/cgi-bin/as-report?as=4134
http://www.spamhaus.org/query/bl?ip=59.191.125.254
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40188
59.191.125.254/32 is listed on the Spamhaus Block List (SBL)
13-Apr-2006 05:43 GMT | SR22
Spammer DNS - ns2.cantonec.com
17 SBL/ROKSO listings for IPs under the responsibility of crc.net.cn
http://www.spamhaus.org/sbl/listings.lasso?isp=crc.net.cn
Let see whois:
Registrar: TUCOWS INC.
Registrant:
Personal Usage
Worchovsky Ave #92
Trimpton, NA 37328
TW
Domain name: NEEDINGEI.COM
Administrative Contact:
Maers, Baren clarkaveri[]yahoo.com
Worchovsky Ave #92
Trimpton, NA 37328
TW
+48.223895469
Technical Contact:
Fenison, Elden el...@cybcon.com
30240 SW Parkway #10
Wilsonville, OR 97070
US
+1.5032484449 Fax: +1.5036827701
Registration Service Provider:
CyberConnectics, sup...@cybcon.com
503-248-4449
503-682-7701 (fax)
http://www.cyberconnectics.com
This company may be contacted for domain login/passwords,
DNS/Nameserver changes, and general domain support questions.
Registrar of Record: TUCOWS, INC.
Record last updated on 28-Apr-2006.
Record expires on 27-Apr-2007.
Record created on 27-Apr-2006.
Domain servers in listed order:
QO.NEEDINGEI.COM 58.19.254.157
MO.NEEDINGEI.COM 59.191.125.254
Domain status: ACTIVE
More needingei.com sightings:
http://groups.google.com/groups/search?q=needingei.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/e7cde070d4423206
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
TomezNet
IP 60.0.99.199
(at CNCGROUP-HE)
Spamvert:
palaitece.com IP 58.19.254.157
(ROK4932 - SBL40684 / SBL40685) (at CNCGROUP-HB)
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.174; Sun, 30 Apr 2006
09:37:37 -0700
X-YahooFilteredBulk: 207.228.238.14
X-Originating-IP: [207.228.238.14]
Return-Path: <mdal...@boardermail.com>
Authentication-Results: mta186.mail.mud.yahoo.com from=boardermail.com;
domainkeys=neutral (no sig)
Received: from 207.228..... (EHLO xxx.web-hosting.com) (207.228......)
by mta186.mail.mud.yahoo.com with SMTP; Sun, 30 Apr 2006 09:37:37 -0700
Received: from -1213051080 ([60.0.99.199]) by xxx.web-hosting.com
(8.11.6/8.11.1) with SMTP id k3UGbWJ00879 for <xx..xx@xx..xx.com>; Sun,
30 Apr 2006 12:37:33 -0400 (EDT)
Received: from boardermail.com (-1213093448 [-1213094056]) by
comidamexicana.com (Qmailv1) with ESMTP id 6311F85245 for
<xx..xx@xx..xx.com>; Fri, 05 May 2006 11:16:07 -0500
Date: Fri, 05 May 2006 11:16:07 -0500
From:"Sulfurous U. Neckline" <mdal...@boardermail.com>
X-Mailer: The Bat! (v2.00.4) Personal
X-Priority: 3
Message-ID: <6193846275.2...@boardermail.com>
To:"Webmaster" <xx..xx@xx..xx.com>
Subject: Software
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-RAV-AntiVirus: This message has been scanned for viruses on
comidamexicana.com
Content-Length: 712
75% Off for All New Software. microsoft, adobe, macromedia!
Just click to buy OEM! best worldwide soft at increadeable prices!!!
New software on our site:
Windows XP Professional With SP2 Full Version - $79.95
WordPerfect Office 10 - $69.95
Photo Painter 8 - $59.95
Office 2000 Premium Edition PE (2CD) - $59.95
InDesign CS PageMaker Edition (2CD) - $69.95
Freehand MX 11 - $69.95
Premiere 6.5 - $89.95
Quark Xpress 6 Passport Multilanguage - $69.95
PhotoRetouch Pro 3.0 - $59.95
Photoshop CS with ImageReady CS - $99.95
Extensis Portfolio 7.0 - $59.95
Windows 98 - $49.95
InDesign CS PageMaker Edition (2CD) - $69.95
Windows NT 4.0 Server - $49.95
Our site:
http://uy0nipzo02h7vcu7hcc7zuuu.palaitece.com/
-- END OF SPAM --
See:
IP 60.0.99.199
http://www.moensted.dk/spam/?addr=60.0.99.199
http://cbl.abuseat.org/lookup.cgi?ip=60.0.99.199
http://www.spamhaus.org/query/bl?ip=60.0.99.199
inetnum: 60.0.0.0 - 60.10.255.255
netname: CNCGROUP-HE
descr: CNCGROUP Hebei Province Network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
route: 60.0.0.0/13
descr: CNC Group HeBei Network
origin: AS4837
mnt-by: MAINT-AS4837
changed: I...@cnc-noc.net
http://www.cidr-report.org/cgi-bin/as-report?as=4837
1 SBL listings for IPs under the responsibility of CNCGROUP-HE
http://www.spamhaus.org/sbl/listings.lasso?isp=CNCGROUP-HE
4 SBL/ROKSO listings for IPs under the responsibility of CHINANET-HE
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-HE
Spamvert
palaitece.com IP 58.19.254.157
mo.needingei.com A IN 360059.191.125.254
qo.needingei.com A IN 3600 58.19.254.157
palaitece.com has no MX records
http://www.moensted.dk/spam/?addr=58.19.254.157
http://www.spamhaus.org/query/bl?ip=58.19.254.157
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40684
Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
BESTDNSSERVICES.COM ; ns1.nettlerfl.com ; etc
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/9e25926078f75cab