[email] [software piracy] (pluralismsoft.com - oemguy.com) Photoshop, Windows, Office
TomezNet
IP 124.80.90.168
(at GINAMHANVITNET / a.dns.kr / epnetworks.co.kr)
Spamvert:
pluralismsoft.com IP 194.135.124.20
(ROK4932 - SBL40344) (at ns.wtr.ru / relcom.net)
More sightings by the same spammer:
http://groups.google.com/groups/search?q=%22%40ETN.ORG%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 09.73.179.39; Fri, 14 Apr 2006
04:44:19 -0700
X-YahooFilteredBulk: 124.80.90.168
X-Originating-IP: [124.80.90.168]
Return-Path: <edu...@vadivorceattorney.com>
Authentication-Results: mta156.mail.re4.yahoo.com
from=vadivorceattorney.com; domainkeys=neutral (no sig)
Received: from 124.80.90.168 (HELO localhost) (124.80.90.168) by
mta156.mail.re4.yahoo.com with SMTP; Fri, 14 Apr 2006 04:44:19 -0700
Message-ID: <000001c65fe3$80d07d80$0100007f@localhost>
From: "Lorenzo Peterson" <edu...@vadivorceattorney.com>
To: xx..xx@xx..xx.com
Subject: Photoshop, Windows, Office
Date: Fri, 14 Apr 2006 20:40:54 +0900
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative";
boundary="----=_NextPart_000_0001_01C65FE3.80D07D80"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Content-Length: 10152
By the time Scarlett had undressed and blown out the
candle, her
plan for tomorrow had worked itself out in every
detail. It was a
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Software</TITLE><META http-equiv="Content-Type"
content="text/html; charset=windows-1252"><STYLE></STYLE></HEAD>
<xbody bgColor=#ffffff>
<TABLE border=0><TBODY><TR vAlign=top><TD width=158><a target="_blank"
href=http://pluralismsoft.com/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=7829_0_6051_1382_10152_0_15897_15862_3165576109_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiOckflC4CVxzZOcv6cqCLeymWF4lohNYVbV66Wau0MsCZuuPAGc5jBLAqo393ON_0nWkHt3DvR7psanAIREW5kpjf3OddHxnU__tgqCGU1tFwzPx.ev.HhsjW5hF0Im&bodyPart=2&YY=12126&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
border=0></a></TD><TD><TABLE border=0><TBODY><TR vAlign=top><TD><a
target="_blank" href=http://pluralismsoft.com/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD>
<TD> <a target="_blank"
href=http://mail.yahoo.com/config/login?/3http://pluralismsoft.com/><IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=7829_0_6051_1382_10152_0_15897_15862_3165576109_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiOckflC4CVxzZOcv6cqCLeymWF4lohNYVbV66Wau0MsCZuuPAGc5jBLAqo393ON_0nWkHt3DvR7psanAIREW5kpjf3OddHxnU__tgqCGU1tFwzPx.ev.HhsjW5hF0Im&bodyPart=5&YY=12126&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0></a><HR></TD></TR><TR vAlign=top>
<TD><a target="_blank" href=http://pluralismsoft.com/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD><TD><a target="_blank"
href=http://pluralismsoft.com/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=7829_0_6051_1382_10152_0_15897_15862_3165576109_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiOckflC4CVxzZOcv6cqCLeymWF4lohNYVbV66Wau0MsCZuuPAGc5jBLAqo393ON_0nWkHt3DvR7psanAIREW5kpjf3OddHxnU__tgqCGU1tFwzPx.ev.HhsjW5hF0Im&bodyPart=3&YY=12126&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0></a>
<HR></TD></TR><TR vAlign=top><TD><a target="_blank"
href=http://pluralismsoft.com/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD><TD><a target="_blank"
href=http://pluralismsoft.com/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=7829_0_6051_1382_10152_0_15897_15862_3165576109_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiOckflC4CVxzZOcv6cqCLeymWF4lohNYVbV66Wau0MsCZuuPAGc5jBLAqo393ON_0nWkHt3DvR7psanAIREW5kpjf3OddHxnU__tgqCGU1tFwzPx.ev.HhsjW5hF0Im&bodyPart=4&YY=12126&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0>
</a><HR></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE>
<TEXTAREA style="visibility: hidden;">
By the time Scarlett had undressed and blown out the candle, her
plan for tomorrow had worked itself out in every detail. It was a
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
simple plan, for, with Gerald's single mindedness of purpose, her
eyes were centered on the goal and she thought only of the most direct
steps by which to reach it.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
Scarlett obeyed, bracing herself and catching firm hold of one of the
bedposts. Mammy pulled and jerked vigorously and, as the tiny
circumference
of whalebone girdled waist grew smaller, a proud, fond look came into
her eyes.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
There was no one to tell Scarlett that her own personality,
frighteningly
vital though it was, was more attractive than any masquerade she might
adopt.
Had she been told, she would have been pleased but unbelieving. And the
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
civilization of which she was a part would have been unbelieving too,
for
at no time, before or since, had so low a premium been placed on
feminine naturalness.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
As they neared the intersecting road that came down the thickly wooded
hill from Mimosa and Fairhill, the sound of hooves and carriage wheels
became
plainer and clamorous feminine voices raised in pleasant dispute
sounded from
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
behind the screen of trees. Gerald, riding ahead, pulled up his horse
and signed
to Toby to stop the carriage where the two roads met.
</TEXTAREA>
</xbody></HTML>
-- END OF SPAM --
See also more oemguy.com sightings:
http://groups.google.com/groups/search?q=oemguy.com+group%3A*abuse&start=0&scoring=d&
See:
IP 124.80.90.168
http://www.moensted.dk/spam/?addr=124.80.90.168
http://cbl.abuseat.org/lookup.cgi?ip=124.80.90.168
http://www.spamhaus.org/query/bl?ip=124.80.90.168
inetnum: 124.80.0.0 - 124.80.255.255
netname: GINAMHANVITNET
descr: Hanvit Ginam Broadcating Co.
descr: 140-7, Jukbaek-dong, Pyeongtaek-si, Kyonggi
Country: KR [Korea-KR]
route: 124.80.0.0/16
descr: EnterpriseNetworks
origin: AS17849
notify: net...@epnetworks.co.kr
Country IP Range: 124.80.0.0 to 124.80.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=17849
route: 124.80.90.0/24
descr: Proxy-Registered Route Object by DACOM(AS3786)
origin: AS17849
4 SBL/ROKSO listings for IPs under the responsibility of bora.net
http://www.spamhaus.org/sbl/listings.lasso?isp=bora.net
See Leo Kuvayev / BadCow:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL33836
See:
pluralismsoft.com IP 194.135.124.20
ns1.pluralismsoft.com A IN 3600 194.135.124.20
ns2.pluralismsoft.com A IN 3600 194.135.124.20
ns1.oemguy.com [194.135.124.20]
ns2.oemguy.com [194.135.124.20]
pluralismsoft.com has no MX records
http://www.moensted.dk/spam/?addr=194.135.124.20
http://www.spamhaus.org/query/bl?ip=194.135.124.20
More 194.135.124.20 sightings:
http://groups.google.com/groups/search?q=194.135.124.20+group%3A*abuse
inetnum: 194.135.124.0 - 194.135.125.255
netname: relcom
descr: "RELCOM.BUSINESS NETWORK" Ltd.
country: RU
route: 194.135.0.0/16
descr: DELEGATED BLOCK
descr: Provider Local Registry
descr: Provider block for EUnet/RELCOM
origin: AS2118
notify: n...@Relcom.net
mnt-by: AS2118-MNT
changed: ch...@Relcom.EU.net
http://www.cidr-report.org/cgi-bin/as-report?as=2118
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL40344
194.135.124.20/32 is listed on the Spamhaus Block List (SBL/ROKSO)
14-Apr-2006 11:37 GMT | SR22
Leo Kuvayev / BadCow
Spammer webhosting and DNS - griboem.com / oemguy.com
Main info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
17 SBL/ROKSO listings for IPs under the responsibility of relcom.net
http://www.spamhaus.org/sbl/listings.lasso?isp=relcom.net
More pluralismsoft.com sightings:
http://groups.google.com/groups/search?q=pluralismsoft.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/979b1db8d1c0540b
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: