Pirated software

CheapSoft etc. - new (and old) domains

Their "newsletter" is now sent from 194.135.19.58.
(They used agava.net earlier, for years)
Tracking bugs and unsubscribe at premiumsubscriber.net.
From and Reply-To addresses at response@premiumsubscriber.org.
Return-Path at zaza@ns2.downloadsoft.info.

Related domains:
downloadsoft.info (194.135.19.58 - relcom.ru)
premiumsubscriber.org (205.178.189.131 - Netsol)
premiumsubscriber.net (194.135.19.58)
pcflashsoft.com (ns1.pcflashsoft.com - earlier at 194.135.26.234)
csubscriber.com (ns.csubscriber.com - 194.135.19.58)
transasoft.com (194.135.26.43)

Patterns and connections: Drugs, illegal software and mule scams

I don't get much spam these days. The reason is mainly that I have deleted all the emailaddresses I used when posting to usenet some years ago. And that I have turned off catchall everywhere.

With less spam it can be easier to see similarities between the different spam I receive.

Drugs and software

Let's take the previous post about "Canadian" pharmacy using redirects from Googles blogspot. That particular emailaddress has also received spam earlier, so today I started looking for similarities.
Redirectors were used in those too.

Pirated software - would you buy?

From the (or one of the?) support site of anasoft/Cheap Soft/ Pavka/Artofit:

I have not received refund after one week
Solution Sometimes to process refund, it's needed over 30 month. Plesae [sic] be patience.

2 1/2 year waiting for a refund?
For pirated software, probably with a trojan or two as an added bonus.

They have an SBL-listing as of writing:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL23527

There is another IP not listed: 194.135.19.104. hun.bz, ana.bz and probably others live there.
hun.bz redirects to azupd.net, also at 194.135.19.104.
With their support site at lpsupport.ws, 194.135.26.217, covered nicely by the listing mentioned above.

"anaSoft Global Communications" was new to me, never seen that name used before.

Their "newsletter" is proudly sent by zinester.com:
http://archives.zinester.com/39268
http://subs.zinester.com/39268/

Back to waiting 30 months for a "refund". Do you think you will get it?
Would you buy?

Syndicate content