Spamvert:
dz1o1qip1liqwvv80dd8idvv.spyej.com IP 211.156.244.6
(SBL42057) (at chinanet-gd)
Another software piracy spam by Leo Kuvayev / BadCow and friends.
See ROK4932
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 206.190.48.173; Mon, 15 May 2006
03:49:30 -0700
X-YahooFilteredBulk: 68.118.61.105
X-Originating-IP: [68.118.61.105]
Return-Path: <rsan...@gorospe-associates.com>
Authentication-Results: mta108.mail.re4.yahoo.com
from=gorospe-associates.com; domainkeys=neutral (no sig)
Received: from 207.228.238.14 (EHLO xxx.web-hosting.com)
(207.228.238.14) by mta108.mail.re4.yahoo.com with SMTP; Mon, 15 May
2006 03:49:29 -0700
Received: from -1212611864 (68-118-61-105.dhcp.csby.or.charter.com
[68.118.61.105]) by xxx.web-hosting.com (8.11.6/8.11.1) with SMTP id
k4FAiJK29515 for <xx..xx@xx..xx.com>; Mon, 15 May 2006 06:44:24 -0400
(EDT)
Received: from gorospe-associates.com (-1217042200 [-1213066880]) by
68-118-61-105.dhcp.csby.or.charter.com (Qmailv1) with ESMTP id
135F8F6F57 for <xx..xx@xx..xx.com>; Mon, 15 May 2006 06:08:31 -0400
Date: Mon, 15 May 2006 06:08:31 -0400
From:"Glisten J. Trendier" <rsan...@gorospe-associates.com>
X-Mailer: The Bat! (v2.00.8) Personal
X-Priority: 3
Message-ID: <4490880017.2...@gorospe-associates.com>
To: xx..xx@xx..xx.com
Subject: Software
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-GMX-Antivirus: 0 (no virus found)
Content-Length: 637
Photoshop, Windows, Office. CHEAP.
Learn to build simple and clean websites that can bring in the dough...
New software on our site:
After Effects 6 - $69.95
Painter 8 - $59.95
PhotoRetouch Pro 3.0 - $59.95
Windows 98 Second Edition - $49.95
Project 2003 Professional - $69.95
Creative Suite Standard (3 CD) - $129.95
Illustrator CS CE - $69.95
Encarta Encyclopedia Delux 2004 (3CD) - $89.95
LiveMotion 2.0 - $69.95
Creative Suite Standard (3 CD) - $129.95
Flash MX 2004 - $69.95
Creative Suite Premium (5 CD) - $149.95
Photoshop CS $99.95
Windows 2000 Advanced Server - $69.95
Our site:
http://dz1o1qip1liqwvv80dd8idvv.spyej.com/
-- END OF SPAM --
See:
IP 68.118.61.105 68-118-61-105.dhcp.csby.or.charter.com
http://www.moensted.dk/spam/?addr=68.118.61.105
http://www.spamhaus.org/query/bl?ip=68.118.61.105
http://www.spamcop.net/bl.shtml?68.118.61.105
Charter Communications CHARTER-NET-6BLK (NET-68-112-0-0-1)
68.112.0.0 - 68.119.255.255
Charter Communications MDFRD-OR-68-118-48 (NET-68-118-48-0-1)
68.118.48.0 - 68.118.63.255
route: 68.118.48.0/20
descr: Residential Cable Aggregates, NorthWest
origin: AS22291
http://www.cidr-report.org/cgi-bin/as-report?as=22291
22 SBL/ROKSO listings for IPs under the responsibility of charter.com
http://www.spamhaus.org/sbl/listings.lasso?isp=charter.com
See Spamvert:
dz1o1qip1liqwvv80dd8idvv.spyej.com IP 211.156.244.6
dd.genosmg.com A IN 3600 222.170.97.137
ff.genosmg.com A IN 3600 59.191.125.254
dz1o1qip1liqwvv80dd8idvv.spyej.com has no MX records -> spyej.com has
no MX records
http://www.moensted.dk/spam/?addr=211.156.244.6
http://www.spamhaus.org/query/bl?ip=211.156.244.6
More 211.156.244.6 sightings:
http://groups.google.com/groups/search?q=211.156.244.6+group%3A*abuse
http://www.cidr-report.org/cgi-bin/as-report?as=
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL42057
211.156.244.0/24 is listed on the Spamhaus Block List (SBL)
17-May-2006 10:54 GMT | SR02
dirty block
15 SBL/ROKSO listings for IPs under the responsibility of chinanet-gd
http://www.spamhaus.org/sbl/listings.lasso?isp=chinanet-gd
Let see whois:
Registrar: ONLINE SAS
DOMAIN
Domain Name : spyej.com (SPYEJC2-BMN-DOM)
Registrar : BookMyName (whoo else !!??)
Registrant / Admin Contact :
PERSON
Scott ANDERSON (ANDERS14-BMN-PE)
Studer Rd
72223 Little Rock
UNITED STATES
phone : +501 8213143
fax :
e-mail : scottinanderson[]yahoo.com
Billing Contact :
PERSON
Scott ANDERSON (ANDERS14-BMN-PE)
Studer Rd
72223 Little Rock
UNITED STATES
phone : +501 8213143
fax :
e-mail : scottin...@yahoo.com
Technical Contact :
PERSON
Scott ANDERSON (ANDERS14-BMN-PE)
Studer Rd
72223 Little Rock
UNITED STATES
phone : +501 8213143
fax :
e-mail : scottin...@yahoo.com
Domain servers :
ff.genosmg.com (FGC2-BMN-HST)
dd.genosmg.com (DGC14-BMN-HST)
Created on 05/14/2006 05:22:20
Updated on 05/14/2006 06:25:14
Expires on 05/14/2007 01:22:20
More spyej.com sightings:
http://groups.google.com/groups/search?q=spyej.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/1427b29662dbe172
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: