Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

[email] [software piracy] (leonardoem.com) Windows 100's of titles by Adobe Windows & Symantec starting @ 9.99

0 views

Skip to first unread message

TomezNet

unread,

Mar 9, 2006, 6:00:27 AM3/9/06

Received From:
IP 201.236.18.82 236-18-82.adsl.cust.tie.cl

Spamvert:
leonardoem.com IP 219.146.165.198
(ROK4932 - SBL38650) (at chinanet-sd)

Much More Amazon spoof sightings by oemsalo.com (Leo Kuvayev / BadCow):
http://groups.google.com/groups?q=oemsalo.com+group%3A*abuse*&start=0&scoring=d&

Received at an address harvested from this abuse group.

More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 209.73.179.32; Wed, 08 Mar 2006
08:25:54 -0800
X-Originating-IP: [201.236.18.82]
Return-Path: <melani...@egghartlawfirm.com>
Authentication-Results: mta323.mail.scd.yahoo.com
from=fossilgrasses.com; domainkeys=neutral (no sig)
Received: from 201.236.18.82 (HELO 236-18-82.adsl.cust.tie.cl)
(201.236.18.82) by mta323.mail.scd.yahoo.com with SMTP; Wed, 08 Mar
2006 08:25:52 -0800
Received: from l7G@localhost by 1UPr.int (8.11.6/8.11.6); Wed, 08
Mar 2006 17:37:40 +0100
Message-ID: <uXh0r6yaRgMImcSaxh...@fossilgrasses.com>
From: "Fran Jorgensen" <TerriSp...@fossilgrasses.com>
Reply-to: "Fran Jorgensen" <TerriSp...@fossilgrasses.com>
To: xx..xx@xx..xx.com
Subject: Windows 100's of titles by Adobe Windows & Symantec
starting @ 9.99
Date: Wed, 08 Mar 2006 13:38:40 -0300
MIME-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.2730.2
X-Sender: TerriSp...@fossilgrasses.com
Content-Type: multipart/mixed; boundary="--zR29IQ1Q3FgJqnxqSwiz"
Content-Length: 1895

<html><head><meta http-equiv=Content-Language content=en-us><meta
name=0QlnYiIMtIqryN content=8Tp12UKeBgOS4Tiu><meta
name=558wi9eA9UKsDKdLy6PY content=z5z45RRzefMNxy90n><meta
http-equiv=Content-Type content="text/html;
charset=windows-1252"><title>spDOkwdeLt7QyLYk</title></head><body><table
border=0 cellspacing=1 style="border-collapse: collapse"
bordercolor=#111111 width=1 id=AutoNumber1 height=234><tr><td width=10
height=231> D 
M A M 
A  </td><td width=18 height=231> ow ic 
do   ac ut 
 </td><td width=25 height=231>    V nlo 
ros be   
rom ode  </td><td width=25
height=231> isi   
ad   oft Acr Pho 
Cre Go Ill edi sk  
 </td><td width=33 height=231>  t Ou Inst  Win 
 Off  Off  Ser  Ser obat 
tosh ativ Live ustr a St   Dr 
  Fl Auto   </td><td width=33
height=231> r On antl 
  dows ice ice ver ver 
 v7. op C e Su  CS2 ator 
udio eamw ash CAD  </td><td width=17
height=231> li 
y!  X  X 2K 2K  2 
0 S2 it  1  M ea MX 
20  </td><td width=17 height=231> ne P P 3 
3 K Pr e 1. X ve 
 P 05  </td><td width=33
height=231>   Sto     Pro 
Pro Pro Ent. Pro o 2 0 CS 
2004 r 8 ro  </td><td width=17
height=231> re Re 
.. 
 </td><td width=17 height=231>  & t. ..  $ 
 $  $  $  $  $ 
 $  $  $  $  $ 
 $  $    $ 
 </td><td width=17 height=231>  S  P .. 27 49 
59 79 66 44 59 11 39 49 99 
39 54 37  </td><td width=17
height=231> av ri 
.. 9. 9. 9. 9. 9. 9. 9. 99 
9. 9. 9. 9. 9. 50 
 </td><td width=17 height=231> e ce . 00 00 00 00 
00 00 00 .0 00 00 00 00 
00 .0  </td><td width=17
height=231> Up 
  
0 0  </td><td
width=18 height=231>  t Ou 
.. 
 </td><td width=18 height=231> o r .. 
$4 $4 $6 $6 $6 $6 $6 $9 $4 
$4 $6 $4 $3 $9 
 </td><td width=18 height=231> 90 Pr .. 
9. 9. 9. 9. 9. 9. 9. 9. 9. 
9. 9. 9. 9. 9. 
 </td><td width=18 height=231> % ic .. 
99 99 99 99 99 99 99 99 99 
99 99 99 99 95 
 </td><td width=18 height=231> Of e 
. 
 </td><td width=18 height=231> f!  Y 
 .  O  O  O  O 
 O  O  O  O  O 
 O  O  O  O Ov 
 </td><td width=18 height=231> ou .. ve ve 
ve ve ve ve ve vr ve ve ve 
ve ve er  </td><td width=18
height=231> 
 S .. r r r r r r r 
 $ r r r r r  $ 
 </td><td width=18 height=231> av .. $2 $4 
$5 $7 $7 $3 $5 10 $3 $4 $9 
$3 $5 36  </td><td width=20
height=231> e 
. 29 49 29 29 00 79 29 49 
49 49 29 49 09 50 
 </td></tr></table><a
href=http://leonardoem.com/?NsIJTvjKr8CXIuCDD1>http://leonardoem.com/?UCCetiqHLp1KMBq</a></a></body></html>

-- END OF SPAM --

See:
IP 201.236.18.82 236-18-82.adsl.cust.tie.cl

http://www.moensted.dk/spam/?addr=201.236.18.82

inetnum: 201.236.0/18
status: allocated
owner: Telefonica Empresas
ownerid: CL-TEEM-LACNIC
responsible: Rodrigo Chacon

See:
www.leonardoem.com IP 219.146.165.198
ns11.oemsalo.com A IN 172800 219.146.165.198
ns12.oemsalo.com A IN 172800 219.146.165.198
ns1.leonardoem.com A IN 3600 219.146.165.198
ns2.leonardoem.com A IN 3600 219.146.165.198

leonardoem.com has no MX records

http://www.moensted.dk/spam/?addr=219.146.165.198
http://www.spamhaus.org/query/bl?ip=219.146.165.198
[1] Global Media, see http://spews.org/html/S3056.html
http://www.whois.sc/rbl/?ip=219.146.165.198

More 219.146.165.198 sightings:
http://groups.google.com/groups/search?q=219.146.165.198+group%3A*abuse

inetnum: 219.146.0.0 - 219.147.31.255
netname: CHINATELECOM-sd
descr: CHINANET shandong province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN

http://www.spamhaus.org/sbl/sbl.lasso?query=SBL38650
219.146.165.198/32 is listed on the Spamhaus Block List (SBL/ROKSO)

05-Mar-2006 01:07 GMT | SR02

Leo Kuvayev / BadCow
new.udmurtiaware.com

Main Info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow

http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932

19 SBL/ROKSO listings for IPs under the responsibility of chinanet-sd
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-sd

Let see whois (leonardoem.com):
ICANN Registrar: CAPITAL NETWORKS PTY LTD

Domain Registrant: TOTALNIC-127503 (XSA...@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Administrative, Technical Contact: TOTALNIC-127503 (XSALSA[]ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF

Telephone: +689.435695
Fax: +689.435695

Name Server: NS11.OEMSALO.COM
Name Server: NS12.OEMSALO.COM

More leonardoem.com sightings:
http://groups.google.com/groups/search?q=leonardoem.com+group%3A*abuse

Cheers, Tomez

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

0 new messages