[email] [software piracy] (CruiserWareg.com - oemguy.com) 0EM Software
TomezNet
IP 60.6.102.76
(at CNCGROUP-HE / ns.hesjptt.net.cn)
open proxy -- 1145109606 (Sat Apr 15 16:00:06 2006)
http://njabl.org/cgi-bin/lookup.cgi?query=60.6.102.76
Spamvert:
Land.CruiserWareg.com IP 194.135.124.20
(ROK4932 - SBL40344) (at ns.wtr.ru / relcom.net)
More sightings by the same spammer:
http://groups.google.com/groups/search?q=%22%40ETN.ORG%22+group%3A*abuse&start=0&scoring=d&
Received at an address harvested from this abuse group.
More info below:
====================
X-Apparently-To: xx..xx@xx..xx.com via 209.73.179.40; Sat, 15 Apr 2006
06:37:01 -0700
X-YahooFilteredBulk: 60.6.102.76
X-Originating-IP: [60.6.102.76]
Return-Path: <kirk...@guilfordvikings.com>
Authentication-Results: mta155.mail.re2.yahoo.com
from=guilfordvikings.com; domainkeys=neutral (no sig)
Received: from 60.6.102.76 (HELO localhost) (60.6.102.76) by
mta155.mail.re2.yahoo.com with SMTP; Sat, 15 Apr 2006 06:37:01 -0700
Message-ID: <000001c660bc$61f1ea00$0100007f@localhost>
From: "Dylan Washington" <kirk...@guilfordvikings.com>
To: xx..xx@xx..xx.com
Subject: 0EM Software
Date: Sat, 15 Apr 2006 21:36:46 +0800
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative";
boundary="----=_NextPart_000_0001_01C660BC.61F1EA00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Content-Length: 10155
By the time Scarlett had undressed and blown out the
candle, her
plan for tomorrow had worked itself out in every
detail. It was a
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Software</TITLE><META http-equiv="Content-Type"
content="text/html; charset=windows-1252"><STYLE></STYLE></HEAD>
<xbody bgColor=#ffffff>
<TABLE border=0><TBODY><TR vAlign=top><TD width=158><a target="_blank"
href=http://Land.CruiserWareg.com/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=1210_0_619_1322_10155_0_15901_15890_4090892691_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiSekflC4Dg8GmjkpzEhG2LJf0gfeELWJB0Hp_t9Pc2_6arz8L0413ty6JvBRaf_v06oipuwcDlwXEyGg6R.UzOLNEgBkbDPFpLd3AecdboajN3h1.OsHBO.mvcGuq.j&bodyPart=2&YY=99612&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
border=0></a></TD><TD><TABLE border=0><TBODY><TR vAlign=top><TD><a
target="_blank" href=http://Land.CruiserWareg.com/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD>
<TD> <a target="_blank"
href=http://mail.yahoo.com/config/login?/3http://Land.CruiserWareg.com/><IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=1210_0_619_1322_10155_0_15901_15890_4090892691_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiSekflC4Dg8GmjkpzEhG2LJf0gfeELWJB0Hp_t9Pc2_6arz8L0413ty6JvBRaf_v06oipuwcDlwXEyGg6R.UzOLNEgBkbDPFpLd3AecdboajN3h1.OsHBO.mvcGuq.j&bodyPart=5&YY=99612&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0></a><HR></TD></TR><TR vAlign=top>
<TD><a target="_blank" href=http://Land.CruiserWareg.com/> <IMG
height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD><TD><a target="_blank"
href=http://Land.CruiserWareg.com/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=1210_0_619_1322_10155_0_15901_15890_4090892691_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiSekflC4Dg8GmjkpzEhG2LJf0gfeELWJB0Hp_t9Pc2_6arz8L0413ty6JvBRaf_v06oipuwcDlwXEyGg6R.UzOLNEgBkbDPFpLd3AecdboajN3h1.OsHBO.mvcGuq.j&bodyPart=3&YY=99612&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0></a>
<HR></TD></TR><TR vAlign=top><TD><a target="_blank"
href=http://Land.CruiserWareg.com/> <IMG height=150
src="http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif"
width=118 border=0></a></TD><TD><a target="_blank"
href=http://Land.CruiserWareg.com/> <IMG
src="/ym/us/ShowLetter?box=%40B%40Bulk&MsgId=1210_0_619_1322_10155_0_15901_15890_4090892691_oSOYkYn4Ur6Rg9WuJfSMZ.Sr6r3ayXRfTqZHlxUjpQI1uiSekflC4Dg8GmjkpzEhG2LJf0gfeELWJB0Hp_t9Pc2_6arz8L0413ty6JvBRaf_v06oipuwcDlwXEyGg6R.UzOLNEgBkbDPFpLd3AecdboajN3h1.OsHBO.mvcGuq.j&bodyPart=4&YY=99612&order=down&sort=date&pos=0&view=a&head=f&Idx=1"
align=top border=0><BR><BR><IMG
src=http://us.i1.yimg.com/us.yimg.com/i/us/pim/el/spc_eee1.gif
align=top border=0>
</a><HR></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE>
<TEXTAREA style="visibility: hidden;">
By the time Scarlett had undressed and blown out the candle, her
plan for tomorrow had worked itself out in every detail. It was a
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
simple plan, for, with Gerald's single mindedness of purpose, her
eyes were centered on the goal and she thought only of the most direct
steps by which to reach it.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
Scarlett obeyed, bracing herself and catching firm hold of one of the
bedposts. Mammy pulled and jerked vigorously and, as the tiny
circumference
of whalebone girdled waist grew smaller, a proud, fond look came into
her eyes.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
There was no one to tell Scarlett that her own personality,
frighteningly
vital though it was, was more attractive than any masquerade she might
adopt.
Had she been told, she would have been pleased but unbelieving. And the
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
civilization of which she was a part would have been unbelieving too,
for
at no time, before or since, had so low a premium been placed on
feminine naturalness.
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
As they neared the intersecting road that came down the thickly wooded
hill from Mimosa and Fairhill, the sound of hooves and carriage wheels
became
plainer and clamorous feminine voices raised in pleasant dispute
sounded from
</TEXTAREA>
<TEXTAREA style="visibility: hidden;">
behind the screen of trees. Gerald, riding ahead, pulled up his horse
and signed
to Toby to stop the carriage where the two roads met.
</TEXTAREA>
</xbody></HTML>
-- END OF SPAM --
See also more oemguy.com sightings:
http://groups.google.com/groups/search?q=oemguy.com+group%3A*abuse&start=0&scoring=d&
See:
IP 60.6.102.76
http://www.moensted.dk/spam/?addr=60.6.102.76
http://cbl.abuseat.org/lookup.cgi?ip=60.6.102.76
http://www.spamhaus.org/query/bl?ip=60.6.102.76
http://dsbl.org/listing?60.6.102.76
Open proxy - see http://opm.blitzed.org/60.6.102.76
inetnum: 60.0.0.0 - 60.10.255.255
netname: CNCGROUP-HE
descr: CNCGROUP Hebei Province Network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
ASN: 4837
ASN Name: CHINA169-Backbone (CNCGROUP China169 Backbone)
http://www.cidr-report.org/cgi-bin/as-report?as=4837
7 SBL/ROKSO listings for IPs under the responsibility of CHINANET-HE
http://www.spamhaus.org/sbl/listings.lasso?isp=CHINANET-HE
See:
Land.CruiserWareg.com IP 194.135.124.20
ns1.cruiserwareg.com A IN 3600 194.135.124.20
ns2.cruiserwareg.com A IN 3600 194.135.124.20
ns1.oemguy.com [194.135.124.20]
ns2.oemguy.com [194.135.124.20]
Land.CruiserWareg.com has no MX records -> CruiserWareg.com has no MX
records
http://www.moensted.dk/spam/?addr=194.135.124.20
http://www.spamhaus.org/query/bl?ip=194.135.124.20
More 194.135.124.20 sightings:
http://groups.google.com/groups/search?q=194.135.124.20+group%3A*abuse
inetnum: 194.135.124.0 - 194.135.125.255
netname: relcom
descr: "RELCOM.BUSINESS NETWORK" Ltd.
country: RU
route: 194.135.0.0/16
descr: DELEGATED BLOCK
descr: Provider Local Registry
descr: Provider block for EUnet/RELCOM
origin: AS2118
notify: n...@Relcom.net
mnt-by: AS2118-MNT
changed: ch...@Relcom.EU.net
ASN: 2118
ASN Name: RELCOM-AS (RELCOM Autonomous System)
Country (per IP registrar): RU [Russian Federation]
Country IP Range: 194.135.0.0 to 194.135.255.255
http://www.cidr-report.org/cgi-bin/as-report?as=2118
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL40344
194.135.124.20/32 is listed on the Spamhaus Block List (SBL/ROKSO)
14-Apr-2006 11:37 GMT | SR22
Leo Kuvayev / BadCow
Spammer webhosting and DNS - griboem.com / oemguy.com
Main info:
http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Leo%20Kuvayev%20/%20BadCow
http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK4932
17 SBL/ROKSO listings for IPs under the responsibility of relcom.net
http://www.spamhaus.org/sbl/listings.lasso?isp=relcom.net
Let see whois:
Registrar: CAPITAL NETWORKS PTY LTD
Registrar: PacNames
Domain name: CRUISERWAREG.COM
Domain Registrant: TOTALNIC-127503 (XSALSA[]ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF
Telephone: +689.435695
Fax: +689.435695
Administrative, Technical Contact: TOTALNIC-127503 (XSA...@ETN.ORG)
Alex Rodrigez
Alex Rodrigez
P.O. Box 5009 Pirae TAHITI
Pirae TF 98716
PF
Telephone: +689.435695
Fax: +689.435695
Name Server: NS1.OEMGUY.COM
Name Server: NS2.OEMGUY.COM
Domain creation date: 2006-04-09 02:20:44.0
Domain expiration date: 2007-04-09 02:56:19.0
More CruiserWareg.com sightings:
http://groups.google.com/groups/search?q=CruiserWareg.com+group%3A*abuse
Read more:
http://groups.google.com/group/news.admin.net-abuse.sightings/msg/f3d4ab175f5ecdeb
Cheers, Tomez
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see: