[an error occurred while processing this directive]
The report for this spam can be found at: 2008 Deadbeats Page 1.
Return-Path: <info@advertrust.net>
Received: from mailbox-us-s-8a.mailhostingserver.com (209.62.85.102) by
studio42.com with SMTP (Eudora Internet Mail Server 3.2.10) for
<spam-hater@studio42.com>; Sun, 3 Feb 2008 17:20:27 -0800
Received: (qmail 10167 invoked from network); 4 Feb 2008 00:27:29 -0000
Received: from host158-56-dynamic.9-79-r.retail.telecomitalia.it (HELO MEDIOCREDIT)
(info@advertrust.net@79.9.56.158) by mailbox-us-s-8a.mailhostingserver.com with ESMTPA; 4 Feb 2008 00:27:09 -0000
Message-ID: <41313-2200821402735109@MEDIOCREDIT>
X-Priority: 1
To: "subscribers" <info@advertrust.net>
X-MSMail-Priority: High
From: "Advertrust Inc." <info@advertrust.net>
Subject: Get Unlimited $4 Payments in your Paypal Account!
Date: Mon, 4 Feb 2008 01:27:35 +0100
MIME-Version: 1.0
Content-type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
Hey
Flood Your Paypal Account With Unlimited Payments!
Earn Cash - Instant Payments!
Get Paid $4 Over & Over Again!
http://www.advertrust.net/adv/index.jsp?cod=690
Just Promote the Website and watch your paypal account
grow by multiples of $4!!
Very Exciting and Easy way to make an extra income!!
So what are you waiting for? Just pay the $4 Start up Fee!!
http://www.advertrust.net/adv/index.jsp?cod=690
See You at the Top
Peter Heller
*************************************************************************************
You are subscribed to this email announcement because you are a member of Advetrust Inc. newsletter. If you do not wish to receive any further announcements from us you can unsubscribe simply send a blank email with subject "unsubscribe" to info@advertrust.net
[studio42@flatus studio42]$ host 209.62.85.102
102.85.62.209.in-addr.arpa is an alias for 102.85.62.209.in-addr.ev1.opticaljung
le.com.
102.85.62.209.in-addr.ev1.opticaljungle.com domain name pointer mailbox-us-s-8a.
mailhostingserver.com.
[studio42@flatus studio42]$ whois 209.62.85.102@whois.arin.net
[whois.arin.net]
Everyones Internet EVRY-BLK-16 (NET-209-62-0-0-1)
209.62.0.0 - 209.62.127.255
Optical Jungle EVRY-746 (NET-209-62-85-0-1)
209.62.85.0 - 209.62.85.255
# ARIN WHOIS database, last updated 2008-02-03 19:03
# Enter ? for additional hints on searching ARIN's WHOIS database.
[studio42@flatus studio42]$ whois NET-209-62-0-0-1@whois.arin.net
[whois.arin.net]
OrgName: Everyones Internet
OrgID: EVRY
Address: 315 Capitol Street
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
ReferralServer: rwhois://rwhois.ev1servers.net:4321/
NetRange: 209.62.0.0 - 209.62.127.255
CIDR: 209.62.0.0/17
NetName: EVRY-BLK-16
NetHandle: NET-209-62-0-0-1
Parent: NET-209-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.EV1SERVERS.NET
NameServer: NS2.EV1SERVERS.NET
Comment:
RegDate: 2007-03-19
Updated: 2007-06-11
RAbuseHandle: ABUSE477-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-713-579-2850
RAbuseEmail: abuse@ev1servers.net
RNOCHandle: NOC1445-ARIN
RNOCName: Noc
RNOCPhone: +1-713-579-2850
RNOCEmail: noc@ev1servers.net
RTechHandle: VST3-ARIN
RTechName: Stinson, Valarie
RTechPhone: +1-713-579-2850
RTechEmail: admin2@ev1servers.net
OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-214-782-7802
OrgAbuseEmail: abuse@theplanet.com
OrgNOCHandle: NOC1445-ARIN
OrgNOCName: Noc
OrgNOCPhone: +1-713-579-2850
OrgNOCEmail: noc@ev1servers.net
OrgTechHandle: VST3-ARIN
OrgTechName: Stinson, Valarie
OrgTechPhone: +1-713-579-2850
OrgTechEmail: admin2@ev1servers.net
# ARIN WHOIS database, last updated 2008-02-03 19:03
# Enter ? for additional hints on searching ARIN's WHOIS database.
Why do I keep seeing this network show up again and again?
Onto scammer, IF accurate:
[studio42@flatus studio42]$ host host158-56-dynamic.9-79-r.retail.telecomitalia.
it
host158-56-dynamic.9-79-r.retail.telecomitalia.it has address 79.9.56.158
[studio42@flatus studio42]$ whois 79.9.56.158@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '79.0.0.0 - 79.63.255.255'
inetnum: 79.0.0.0 - 79.63.255.255
org: ORG-TIN1-RIPE
netname: IT-TIN-20070221
descr: Telecom Italia Net
descr: Provider Local Registry
country: IT
admin-c: LV357-RIPE
tech-c: ES785-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: TIWS-MNT
mnt-routes: INTERB-MNT
source: RIPE # Filtered
organisation: ORG-TIN1-RIPE
org-name: Telecom Italia Net
org-type: LIR
address: Telecom Italia S.p.A.
Thomas Tozzi
VIA DI VAL CANNUTA 250
00166 ROME
IT
phone: +39 06 36881
fax-no: +39 06 36885566
admin-c: GP1340-RIPE
admin-c: TT616-RIPE
mnt-ref: TIWS-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: EASYIP STAFF
address: Via Val Cannuta, 250
address: I-00100 Roma
address: Italy
phone: +39 06 36881
fax-no: +39 06 36885661
remarks: trouble: Please report spam/abuse notification to
remarks: trouble: abuse@telecomitalia.it
admin-c: LV357-RIPE
tech-c: CC297-RIPE
tech-c: VS4572-RIPE
nic-hdl: ES785-RIPE
source: RIPE # Filtered
abuse-mailbox: abuse@telecomitalia.it
person: Luigi Vassallo
address: Telecom Italia
address: 00100 Roma
address: Italy
phone: +39-6-3688
fax-no: +39-6-3688
nic-hdl: LV357-RIPE
source: RIPE # Filtered
mnt-by: TIWS-MNT
% Information related to '79.8.0.0/15AS3269'
route: 79.8.0.0/15
descr: INTERBUSINESS
origin: AS3269
mnt-by: TIWS-MNT
mnt-routes: INTERB-MNT
source: RIPE # Filtered
And the scammer site:
[studio42@flatus studio42]$ host www.advertrust.net
www.advertrust.net has address 62.149.193.41
[studio42@flatus studio42]$ whois 62.149.193.41@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '62.149.192.0 - 62.149.223.255'
inetnum: 62.149.192.0 - 62.149.223.255
netname: TECHNORAIL-NET
descr: Technorail srl
descr: Internet Service and Access Provider
country: IT
admin-c: SC279-RIPE
tech-c: SC279-RIPE
status: ASSIGNED PA
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered
person: Stefano Cecconi
address: Aruba S.p.A.
address: Piazza Garibaldi 8
address: 52010 soci (AR)
phone: +39 0575 51571
fax-no: +39 0575 561831
e-mail: hostmaster@technorail.com
nic-hdl: SC279-RIPE
source: RIPE # Filtered
% Information related to '62.149.128.0/17AS31034'
route: 62.149.128.0/17
descr: Technorail S.r.l. - Aruba.it
origin: AS31034
mnt-by: TECHNORAIL-MNT
source: RIPE # Filtered
[studio42@flatus studio42]$ whois advertrust.net
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: ADVERTRUST.NET
Registrar: DIRECT INFORMATION PVT LTD D/B/A PUBLICDOMAINREGISTRY.COM
Whois Server: whois.PublicDomainRegistry.com
Referral URL: http://www.PublicDomainRegistry.com
Name Server: NS1.HOSTLEVEL.NET
Name Server: NS2.HOSTLEVEL.NET
Name Server: NS3.HOSTLEVEL.NET
Name Server: NS4.HOSTLEVEL.NET
Status: ok
Updated Date: 22-jan-2008
Creation Date: 23-nov-2007
Expiration Date: 23-nov-2008
>>> Last update of whois database: Mon, 04 Feb 2008 03:34:58 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.PublicDomainRegistry.com]
Registration Service Provided By: HOSTLEVEL
Contact: +212.9210244
Website: http://www.hostlevel.net
Domain Name: ADVERTRUST.NET
Registrant:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Creation Date: 23-Nov-2007
Expiration Date: 23-Nov-2008
Domain servers in listed order:
ns4.hostlevel.net
ns3.hostlevel.net
ns2.hostlevel.net
ns1.hostlevel.net
Administrative Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Technical Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Billing Contact:
PrivacyProtect.org
Domain Admin (contact@privacyprotect.org)
P.O. Box 97
All Postal Mails Rejected, visit Privacyprotect.org
Moergestel
null,5066 ZH
NL
Tel. +45.36946676
Status:ACTIVE
The data in this whois database is provided to you for information
purposes only, that is, to assist you in obtaining information about or
related to a domain name registration record. We make this information
available "as is", and do not guarantee its accuracy. By submitting a
whois query, you agree that you will use this data only for lawful
purposes and that, under no circumstances will you use this data to:
(1) enable high volume, automated, electronic processes that stress or
load this whois database system providing you this information; or
(2) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via fascimile,
electronic mail, or by telephone. The compilation, repackaging,
dissemination or other use of this data is expressly prohibited without
prior written consent from us. The registrar of record is
PublicDomainRegistry. We reserve the right to modify
these terms at any time. By submitting this query, you agree to abide
by these terms.
