VoyForums
[ Show ]
Support VoyForums
[ Shrink ]
VoyForums Announcement: Programming and providing support for this service has been a labor of love since 1997. We are one of the few services online who values our users' privacy, and have never sold your information. We have even fought hard to defend your privacy in legal cases; however, we've done it with almost no financial support -- paying out of pocket to continue providing the service. Due to the issues imposed on us by advertisers, we also stopped hosting most ads on the forums many years ago. We hope you appreciate our efforts.

Show your support by donating any amount. (Note: We are still technically a for-profit company, so your contribution is not tax-deductible.) PayPal Acct: Feedback:

Donate to VoyForums (PayPal):

Login ] [ Contact Forum Admin ] [ Main index ] [ Post a new message ] [ Search | Check update time | Archives: 123[4] ]


[ Next Thread | Previous Thread | Next Message | Previous Message ]

Date Posted: 21:57:34 01/23/04 Fri
Author: Repost
Subject: Counterfeit software

D. Blinker wrote:

>>>These are about the worst piracy spammers I know. I forwarded every mail
>>> to Adobe, Corel and Microsoft.
>>>
>>> Better do it by e-mail, not by posting the entire spam here. Neither
>>> Adobe nor Corel and Microsoft read this group.
>
> I mailed them too, I was hoping someone could look at the origin of the
> spam. Hence the full thing.
>

cdatlow.com: Mourad Shakhbanov - mourik@mail.ru
(a.k.a. Mourad Chakhbanov):
http://www.google.com/groups?q=mourik%40mail.ru
http://www.google.com/groups?q=mourik5%40mail.ru

'mourik' is his nickname, his (official) ICQ is 11304026.

A.K.A. host4bulk.com - SBL5165 (same ICQ contact) cdcheap.net,
cdcheap.biz, cdsforyou.biz, wlycos.com, werbat.net and a bunch of other
domains):
http://www.google.com/groups?selm=fd05tuoav4ac3mq7m255kr774iqtv8iadj%404ax.com

The fastest way to contact us and to order your bullet proof bulk
hosting or email campaign for your product or service is using email
or ICQ

ICQ 11304026
Telephone 1-800-8594298
FAX 1-800-8594298
Postal address 1080 S. Hoagland Blvd. #186, Florida, USA
Electronic mail for your inquiries and orders General Information:
info@host4bulk.com
Sales: sales@host4bulk.com
Customer Support: support@host4bulk.com
Webmaster: webmaster@host4bulk.com


http://www.google.com/groups?selm=ar3qen%2414e0%241%40node21.cwnet.roc.gblx.net

http://80.235.78.212/ :
http://www.google.com/groups?selm=BCHza.10606%24xh1.1474%40news-binary.blueyonder.co.uk

http://www.google.com/groups?selm=s6bA9.7%240F2.629%40psinet-eu-nl

cdcheap.biz -> 82.138.63.134 (dead)
cdcheap.net -> 82.138.63.67:
http://www.google.com/groups?selm=uJedKpN4CHA.2248%40TK2MSFTNGP12.phx.gbl
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL11047

www.wlycos.com -> 213.219.122.17
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL12437

Although his page says it was last modified in 1998 look at these:
http://mourad.chat.ru/cd-rom.html
http://mourad.chat.ru/business.htm

Alexander Popov is a rather common Russian name, and most probably fake.

Sergey Aftaev looks like a real name, but knowing the nature of their
business, it might also be a fake one. No hits in Russian search engines.

Other clues are spromo.ru and promo-mail.net (213.171.60.43) which
belong to the same gang, but I think both have bogus registration info:

domain: SPROMO.RU
type: CORPORATE
nserver: ns1.spromo.ru. 82.138.63.136
nserver: ns2.spromo.ru. 213.171.60.117
state: REGISTERED, DELEGATED
person: Sergei B Petrenko
phone: +7 916 0000000
e-mail: spromo@yandex.ru
registrar: RUCENTER-REG-RIPN
created: 2003.10.13
paid-till: 2004.10.13
source: RIPN

Domain: promo-mail.net
Registrant:
Vad Kaz
Vernadskogo str. 87
Kiev, 03142
Ukraine

Registered through: GoDaddy.com
Domain Name: PROMO-MAIL.NET
Created on: 22-Sep-03
Expires on: 22-Sep-04
Last Updated on: 23-Sep-03

Administrative Contact:
Kaz, Vad wolf1@ukrpost.net
Vernadskogo str. 87
Kiev, 03142
Ukraine
(044) 444-3456
Technical Contact:
Kaz, Vad wolf1@ukrpost.net
Vernadskogo str. 87
Kiev, 03142
Ukraine
(044) 444-3456

Domain servers in listed order:
NS1.PROMO-MAIL.NET
NS2.PROMO-MAIL.NET

--
Yes, I do have a spellchequer

[ Next Thread | Previous Thread | Next Message | Previous Message ]


Replies:



[ Contact Forum Admin ]


Forum timezone: GMT-8
VF Version: 3.00b, ConfDB:
Before posting please read our privacy policy.
VoyForums(tm) is a Free Service from Voyager Info-Systems.
Copyright © 1998-2019 Voyager Info-Systems. All Rights Reserved.