Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[email] [software piracy] (plo9.com - oemguy.com) Buy OEM Software

0 views
Skip to first unread message

TomezNet

unread,
Mar 30, 2006, 12:00:42 PM3/30/06
to
Received From:
IP 221.9.30.216
(at CNCGROUP-JL / CHINANET-JL)

Spamvert:
plo9.com IP 81.177.14.144
(SBL35048 / SBL39221) (at ns.rt-comm.ru / rtcomm.ru / rt.ru)

Received at an address harvested from this abuse group.

More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 209.73.179.42; Sat, 25 Mar 2006
21:26:50 -0800
X-Originating-IP: [221.9.30.216]
Return-Path: <him...@keywordmail.com>
Authentication-Results: mta187.mail.re2.yahoo.com domainkeys=fail
(bad syntax)
Received: from 221.9.30.216 (HELO localhost) (221.9.30.216) by
mta187.mail.re2.yahoo.com with SMTP; Sat, 25 Mar 2006 21:26:50 -0800
Message-ID: <000001c650c0$6a0fc880$0100007f@localhost>
From: [%from_name%]@
Subject: Buy OEM Software
Date: Sun, 26 Mar 2006 13:27:01 +0800
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative";
boundary="----=_NextPart_000_0001_01C650C0.6A0FC880"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Content-Length: 10143

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Software</TITLE><META http-equiv="Content-Type"
content="text/html; charset=windows-1252"><STYLE></STYLE></HEAD>
<xbody bgColor=#ffffff>
<TABLE border=0><TBODY><TR vAlign=top><TD width=158><a target="_blank"
href=http://plo9.com/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=3786_0_44210_1279_10143_0_15764_15799_2799812731_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiWG3OgC4_AJHxPB02tSOvDqIU8ut6IOQy.oDZWyrI_t3NdO0rkmgTODfOQrKp0I3Qk5gvhPEyrKURB4Tg11cspweZgQBtLpElu2WMzM5l4b8pUs8xAH2RLeW13kbiQ-&bodyPart=2&YY=36130&order=down&sort=date&pos=0&view=a&head=f&Idx=21"
border=0></a></TD><TD><TABLE border=0><TBODY><TR vAlign=top><TD><a
target="_blank" href=http://plo9.com/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD>
<TD> <a target="_blank"
href=http://mail.yahoo.com/config/login?/3http://plo9.com/><IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=3786_0_44210_1279_10143_0_15764_15799_2799812731_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiWG3OgC4_AJHxPB02tSOvDqIU8ut6IOQy.oDZWyrI_t3NdO0rkmgTODfOQrKp0I3Qk5gvhPEyrKURB4Tg11cspweZgQBtLpElu2WMzM5l4b8pUs8xAH2RLeW13kbiQ-&bodyPart=5&YY=36130&order=down&sort=date&pos=0&view=a&head=f&Idx=21"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0></a><HR></TD></TR><TR vAlign=top>
<TD><a target="_blank" href=http://plo9.com/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD><TD><a target="_blank"
href=http://plo9.com/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=3786_0_44210_1279_10143_0_15764_15799_2799812731_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiWG3OgC4_AJHxPB02tSOvDqIU8ut6IOQy.oDZWyrI_t3NdO0rkmgTODfOQrKp0I3Qk5gvhPEyrKURB4Tg11cspweZgQBtLpElu2WMzM5l4b8pUs8xAH2RLeW13kbiQ-&bodyPart=3&YY=36130&order=down&sort=date&pos=0&view=a&head=f&Idx=21"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0></a>
<HR></TD></TR><TR vAlign=top><TD><a target="_blank"
href=http://plo9.com/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD><TD><a target="_blank"
href=http://plo9.com/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=3786_0_44210_1279_10143_0_15764_15799_2799812731_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiWG3OgC4_AJHxPB02tSOvDqIU8ut6IOQy.oDZWyrI_t3NdO0rkmgTODfOQrKp0I3Qk5gvhPEyrKURB4Tg11cspweZgQBtLpElu2WMzM5l4b8pUs8xAH2RLeW13kbiQ-&bodyPart=4&YY=36130&order=down&sort=date&pos=0&view=a&head=f&Idx=21"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0>
</a><HR></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE>
<TEXTAREA style="visibility: hidden;">
By the time Scarlett had undressed and blown out the candle, her
plan for tomorrow had worked itself out in every detail. It was a
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
simple plan, for, with Gerald's single mindedness of purpose, her
eyes were centered on the goal and she thought only of the most direct
steps by which to reach it.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
Scarlett obeyed, bracing herself and catching firm hold of one of the
bedposts. Mammy pulled and jerked vigorously and, as the tiny
circumference
of whalebone girdled waist grew smaller, a proud, fond look came into
her eyes.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
There was no one to tell Scarlett that her own personality,
frighteningly
vital though it was, was more attractive than any masquerade she might
adopt. Had she been told, she would have been pleased but unbelieving.
And the
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
civilization of which she was a part would have been unbelieving too,
for
at no time, before or since, had so low a premium been placed on
feminine naturalness.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
As they neared the intersecting road that came down the thickly wooded
hill from Mimosa and Fairhill, the sound of hooves and carriage wheels
became plainer and clamorous feminine voices raised in pleasant dispute
sounded from
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
behind the screen of trees. Gerald, riding ahead, pulled up his horse
and signed to Toby to stop the carriage where the two roads met.
</TEXTAREA>
</xbody></HTML>

-- END OF SPAM --

See:
IP 221.9.30.216

http://www.moensted.dk/spam/?addr=221.9.30.216
http://cbl.abuseat.org/lookup.cgi?ip=221.9.30.216
http://www.spamhaus.org/query/bl?ip=221.9.30.216

inetnum: 221.8.0.0 - 221.9.255.255
netname: CNCGROUP-JL
descr: No.156,Fu-Xing-Men-Nei Street,
descr: CNC Group JILIN province network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN

ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
http://www.cidr-report.org/cgi-bin/as-report?as=4837

8 SBL/ROKSO listings for IPs under the responsibility of CHINANET-JL
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-JL

See:
plo9.com IP 81.177.14.144
ns1.plo9.com A IN 3600 81.177.14.144
ns2.plo9.com A IN 3600 81.177.14.144
ns1.oemguy.com [81.177.14.144]
ns2.oemguy.com [81.177.14.144]

plo9.com has no MX records

http://www.moensted.dk/spam/?addr=81.177.14.144
http://www.spamhaus.org/query/bl?ip=81.177.14.144

inetnum: 81.177.14.0 - 81.177.15.255
netname: IN-TELECOM
descr: IN-Telecom Limited - IT-service corporation
descr: http://ServerBox.ru - Dedicated Servers, Collocation
descr: http://NODEK.ru - Quality web-hosting, domain
registration
descr: http:// Domingo.ru - Web-solitions studio
country: RU

route: 81.176.0.0/15
descr: RTCOMM-RU
origin: AS8342
http://www.cidr-report.org/cgi-bin/as-report?as=8342

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL35048
81.177.14.0/23 is listed on the Spamhaus Block List (SBL)

20-Mar-2006 21:38 GMT | SR04

IN-Telecom Limited: Spammer hosting (escalation)

See also SBL39221
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL39221
81.177.14.9/32 is listed on the Spamhaus Block List (SBL)

20-Mar-2006 21:38 GMT | SR21

OEM/Warez Spam Hosting

17 SBL/ROKSO listings for IPs under the responsibility of rtcomm.ru
http://www.spamhaus.org/sbl/listings.lasso?isp=rtcomm.ru

Let see whois (plo9.com):
Registrar: CAPITAL NETWORKS PTY LTD

Domain name: PLO9.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/

Domain Registrant: TOTALNIC-127503 (XSALSA[]ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Administrative, Technical Contact: TOTALNIC-127503 (XSA...@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Name Server: NS1.OEMGUY.COM
Name Server: NS2.OEMGUY.COM

Domain creation date: 2006-03-23 01:18:55.0
Domain expiration date: 2007-03-23 01:54:03.0

More plo9.com sightings:
http://groups.google.com/groups/search?q=plo9.com+group%3A*abuse

See:
oemguy.com IP 81.177.14.144
ns1.oemguy.com A IN 3600 81.177.14.144
ns2.oemguy.com A IN 3600 81.177.14.144

oemguy.com has no MX records

http://www.moensted.dk/spam/?addr=81.177.14.144
http://www.spamhaus.org/query/bl?ip=81.177.14.144

More oemguy.com sightings:
http://groups.google.com/groups/search?q=oemguy.com+group%3A*abuse

Let see whois (oemguy.com):
Registrar: CAPITAL NETWORKS PTY LTD

Domain name: OEMGUY.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/

Domain Registrant: TOTALNIC-127503 (XSA...@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Administrative, Technical Contact: TOTALNIC-127503 (XSA...@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Name Server: NS1.OEM-ADD.BIZ [195.206.123.50]
Name Server: NS1.OEMGUY.COM [81.177.14.144]
Name Server: NS2.OEMGUY.COM [81.177.14.144]

Domain creation date: 2006-03-06 22:45:43.0
Domain expiration date: 2007-03-06 23:22:09.0

See also more OEM-ADD.BIZ sightings:
http://groups.google.com/groups/search?q=OEM-ADD.BIZ+group%3A*abuse&start=0&scoring=d&

Let see whois:

Domain Name OEM-ADD.BIZ
Domain ID D7667963-BIZ
Sponsoring Registrar ESTDOMAINS INC
Sponsoring Registrar IANA ID 832
Domain Status ok
Registrant ID DI_1329867
Registrant Name anatolly vasin
Registrant Organization VioSoftware Corporation
Registrant Address1 5723 Arapahoe Ave. Suite 1-A
Registrant City Boulder
Registrant State/Province CO
Registrant Postal Code 80303
Registrant Country United States
Registrant Country Code US
Registrant Phone Number +1.304481105
Registrant Email anat_671[]yahoo.com
Administrative Contact ID DI_1329867
Administrative Contact Name anatolly vasin
Administrative Contact Organization VioSoftware Corporation
Administrative Contact Address1 5723 Arapahoe Ave. Suite 1-A
Administrative Contact City Boulder
Administrative Contact State/Province CO
Administrative Contact Postal Code 80303
Administrative Contact Country United States
Administrative Contact Country Code US
Administrative Contact Phone Number +1.304481105
Administrative Contact Email anat...@yahoo.com
Billing Contact ID DI_1329867
Billing Contact Name anatolly vasin
Billing Contact Organization VioSoftware Corporation
Billing Contact Address1 5723 Arapahoe Ave. Suite 1-A
Billing Contact City Boulder
Billing Contact State/Province CO
Billing Contact Postal Code 80303
Billing Contact Country United States
Billing Contact Country Code US
Billing Contact Phone Number +1.304481105
Billing Contact Email anat_671[]yahoo.com
Technical Contact ID DI_1329867
Technical Contact Name anatolly vasin
Technical Contact Organization VioSoftware Corporation
Technical Contact Address1 5723 Arapahoe Ave. Suite 1-A
Technical Contact City Boulder
Technical Contact State/Province CO
Technical Contact Postal Code 80303
Technical Contact Country United States
Technical Contact Country Code US
Technical Contact Phone Number +1.304481105
Technical Contact Email anat...@yahoo.com
Name Server NS1.OEM-ADD.BIZ [195.206.123.50]
Name Server NS2.OEM-ADD.BIZ [195.206.123.51]
Created by Registrar DIRECT INFORMATION PVT LTD DBA
PUBLICDOMAINREGISTRY.COM
Last Updated by Registrar ESTDOMAINS INC
Last Transferred Date Wed Sep 07 12:11:51 GMT 2005
Domain Registration Date Wed Sep 01 20:38:27 GMT 2004
Domain Expiration Date Thu Aug 31 23:59:59 GMT 2006
Domain Last Updated Date Wed Sep 07 12:11:55 GMT 2005

Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/21971d3d926105ec

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages