[an error occurred while processing this directive]
The report for this spam can be found at: 2008 Deadbeats 01.
Received: from bpmd04.net (81.93.252.251) by studio42.com with SMTP (Eudora
Internet Mail Server 3.2.10) for <postmaster@studio42.com>;
Wed, 6 Feb 2008 11:00:17 -0800
Received: (qmail 9326 invoked from network); 6 Feb 2008 13:12:22 -0000
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=bpmd04.net;
b=N6oGEhcTAviw+D1sYOjlcRe6Zq/Flq7IRBxT0Bq04wpqXjoP/AfQCwB/OyvRNE2+9kMiznyWjBeu4bj6Gff8pO/NhMS5IDeJwd+Z4kY3RkeO/RYFXeb2XqXd1vTH6nv5 ;
Received: from unknown (HELO localhost.localdomain) (10.93.240.148)
by 10.93.240.58 with SMTP; 6 Feb 2008 13:12:22 -0000
Date: Wed, 6 Feb 2008 14:12:22 +0100
Return-Path: bahu-5705@bpmd04.net
To: "postmaster@studio42.com" <postmaster@studio42.com>
From: Bahu <bahu-5705@bpmd04.net>
Reply-to: Bahu <aa@fm5id.com>
Subject: Salut !
Message-ID: <cced29af3679295fb4e7f56198304b5e@localhost.localdomain>
X-Priority: 3
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_cced29af3679295fb4e7f56198304b5e"
--b1_cced29af3679295fb4e7f56198304b5e
Content-Type: text/plain; charset = "iso-8859-1"
Content-Transfer-Encoding: 8bit
Si vous dÈsirez visualiser ce mail au format html, recopiez l'adresse suivante dans votre navigateur: http://www.vytispod.info/view.html?id=5705&ref=h4e6cf55a9fb3
--b1_cced29af3679295fb4e7f56198304b5e
Content-Type: text/html; charset = "iso-8859-1"
Content-Transfer-Encoding: 8bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><style type="text/css">a.tLinks { text-decoration:none; color:#000; font:bold 10px verdana,arial,helvetica,sans-serif;}
a.tLinks:hover { color:#333; }
a.cLinks { text-decoration:none; color:#000; font:bold 11px verdana,arial,helvetica,sans-serif; }
a.cLinks:hover { color:#333; }
a.bLinks { text-decoration:none; color:#000; font:bold 10px verdana,arial,helvetica,sans-serif;}
a.bLinks:hover { color:#333;}
a.AllezSurLink { text-decoration:none; color:#000; font:bold 11px arial,helvetica,sans-serif; }
a.AllezSurLink:hover { color:#333; }
a.inscrivez { text-decoration:underline; color:#f60; font:bold 12px verdana,arial,helvetica,sans-serif; }
a.inscrivez:hover { color:#333; }
a.BlueLink { text-decoration:none; color:#06c; font:bold 11px arial,helvetica,sans-serif;}
a.BlueLink:hover { text-decoration:underline; color:#06c; }
a.NewsLinks { text-decoration:none; color:#000; font-size:11px; font-family:arial,sans-serif;}
a.NewsLinks:hover { text-decoration:underline; color:#333; }
.news { font:bold 11px arial,sans-serif; color: #000; text-decoration:none; }
a.news { font-size:12px; color:#f00; }
a.news:hover { font-size:12px; color:#00f; }
a.bb { font:bold 12px arial,sans-serif; color:#b1a; text-decoration:none; }
.plaintext { color:#2a3a57; font-size:12px; font-family:arial,sans-serif;}
.copyright { color:#666; font-size:10px; font-family:arial,sans-serif;}
.orange { color:#f60; font-size:11px; font-family:arial,sans-serif;}
.pink { color:#c0c; font-size:11px; font-family:arial,sans-serif;}
.loginBox { height:17px; width:120px; background-color:#fff; font-family:arial,helvetica,sans-serif; font-size:10px; }
.loginText { font-family:arial,helvetica,sans-serif; font-size:10px; color:#000; text-decoration:none; }
a.loginText { font-family:arial,helvetica,sans-serif; font-size:10px; color:#000; text-decoration:none; }
.topBoredrBlack { border-top:1px solid #999; border-left:1px solid #999; }
.rBoredrBlack { border-right:1px solid #000;}
.titres { font:normal 10px arial,helvetica,sans-serif; color:#000; text-decoration:none; }
.newsTitre { font:bold 11px arial,helvetica,sans-serif; color:#06C; }
.roseUp { border:1px solid; border-color:#e6dff2 #8a67c5 #8A67c5 #c2b3e1; }
.roseDown { border:1px solid; border-color:#b19cda #fff #fff #b19cda; }
.bViolet { border:1px solid; border-color:#e9dcef #884ba4 #884ba4 #e9dcef; }
.Black11Thin { font:bold 11px arial,helvetica,sans-serif; color:#000; text-decoration:none; }
.Black11Bold { font:normal 11px arial,helvetica,sans-serif; color:#000; }
.Blue11Bold { font:bold 11px arial,helvetica,sans-serif; color: #06c; }
.bVioContenu { border:1px solid; border-color:#eae0E9 #A88AA8 #A88AA8 #EAE0E9; }
.bOrange { border:1px solid; border-color:#ffecd5 #ffb557 #ffb557 #ffecd5; }
.orangeT { border-top:1px solid #ffd49d; background-color:#fff; }
.orangeB { border-bottom:1px solid #ffd49d; background-color:#fff; }
.orangeL { border-left:1px solid #ffd49d; background-color:#fff; }
.orangeR { border-right:1px solid #ffd49d; background-color:#fff; }
.titleO { font:bolder 10px arial,helvetica,sans-serif; color:#000; text-decoration:none; }
.titleW { font:bolder 10px arial,helvetica,sans-serif; color:#fff; text-decoration:none; }
.titleWBold { font:bold 12px arial,helvetica,sans-serif; color:#fff; text-decoration: none; }
.cDown { border:1px solid; border-color:#896589 #cbc #cbc #896589; font:bolder 11px verdana,arial,helvetica,sans-serif; color:#000; }
.titleOsub { font:bolder 12px arial,helvetica,sans-serif; color:#f60; text-decoration:none; }
.titleOtxt { font:normal 12px arial,helvetica,sans-serif; color:#613061; text-decoration:none; }
.allezsur { font:bold 11px arial,helvetica,sans-serif; color:#639; text-decoration:none; }
.expliq { font:bold 11px arial,helvetica,sans-serif; color:#000; text-decoration:none; }
.raiseButton { border:1px solid; border-color:#896589 #cbc #cbc #896589; padding:0; text-align:left; cursor:pointer; }
.whiteNormal { font-size:12px; font-family:arial,helvetica,sans-serif; color:#fff; text-decoration:none; }
.WhiteFAQTitleBold { font:bold 13px arial,helvetica,sans-serif; color:#fff; text-decoration:none; }
.OrangeSign { font:bold 12px arial,helvetica,sans-serif; color:#ffd200; text-decoration:none; }
.Inputa { font-family:arial,helvetica,sans-serif; font-size:12px; color:#639; text-decoration:none; }</style></head><body ><table width="100%" height="1" border="0" cellpadding="0" cellspacing="0"><tr><td><img src="http://www.vytispod.info/trafic/include/new-visitor.inc.php?operation=5705&ref=177582" width="1" height="1"></td></tr></table><body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<table width='730' border='0' cellspacing='0' cellpadding='0'>
<tr>
<td>
<font size='2' face='Verdana, Arial'>
Salut !<br><br>Un de tes amis t'as invité sur ... <a href="http://www.emlsrv.fr/go.php?lien=71758&editrack=h4e6cf55a9fb3">www.bahu.com</a>
<br><br>
Ca t'en coutera une visite :) Tous tes amis les plus cools sont déjà dessus !<br>
<br>En plus de ta page perso (zik, fotos, videos), tu pourras devenir la prochaine star du web en dévoilant tes talents !<br/><br/>Alors <a href="http://www.emlsrv.fr/go.php?lien=71758&editrack=h4e6cf55a9fb3">rejoins-nous</a> vite !!<br>
<br>
<br>
@toute</font></td>
</tr>
</table>
<p><a href="http://www.emlsrv.fr/go.php?lien=71760&editrack=h4e6cf55a9fb3"><img src="http://www.sac3.info/des-fr.gif" width="638" height="55" border="0" /></a></p>
</body>
</body></html>
--b1_cced29af3679295fb4e7f56198304b5e--
[studio42@flatus studio42]$ host 81.93.252.251
251.252.93.81.in-addr.arpa domain name pointer ns-252-251.bpmd04.net.
[studio42@flatus studio42]$ whois 81.93.252.251@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '81.93.252.192 - 81.93.252.255'
inetnum: 81.93.252.192 - 81.93.252.255
netname: EDIWARE
descr: EDIWARE - Servers c3
country: fr
org: ORG-EW2-RIPE
admin-c: EWDC1-RIPE
tech-c: EWDC1-RIPE
status: ASSIGNED PA
mnt-by: FR-EURO-WEB-MNT
mnt-lower: FR-EURO-WEB-MNT
mnt-domains: FR-EURO-WEB-MNT
mnt-routes: FR-EURO-WEB-MNT
remarks: INFRA-AW
source: RIPE # Filtered
organisation: ORG-EW2-RIPE
org-name: Euro Web
org-type: LIR
address: 13 av Charles De Gaulle
address: 92100
address: Boulogne Billancourt
address: France
phone: +33172440261
fax-no: +33153016501
e-mail: comptes@euro-web.fr
admin-c: EWMF1-RIPE
admin-c: EWDC1-RIPE
mnt-ref: FR-EURO-WEB-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
person: David CHANIAL
address: 13 ave Charles de Gaulle
92100 Boulogne Billancourt
France
phone: +33 6 78 08 62 04
fax-no: +33 1 53 01 65 01
e-mail: david@euro-web.fr
nic-hdl: EWDC1-RIPE
org: ORG-EW2-RIPE
remarks: Technical director
mnt-by: FR-EURO-WEB-MNT
source: RIPE # Filtered
% Information related to '81.93.240.0/20AS35393'
route: 81.93.240.0/20
descr: global route /20 euro-web
origin: AS35393
org: ORG-EW2-RIPE
mnt-lower: FR-EURO-WEB-MNT
mnt-routes: FR-EURO-WEB-MNT
mnt-by: FR-EURO-WEB-MNT
source: RIPE # Filtered
organisation: ORG-EW2-RIPE
org-name: Euro Web
org-type: LIR
address: 13 av Charles De Gaulle
address: 92100
address: Boulogne Billancourt
address: France
phone: +33172440261
fax-no: +33153016501
e-mail: comptes@euro-web.fr
admin-c: EWMF1-RIPE
admin-c: EWDC1-RIPE
mnt-ref: FR-EURO-WEB-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
% Information related to '81.93.252.0/22AS35393'
route: 81.93.252.0/22
descr: EuroWeb telecity
origin: AS35393
holes: 81.93.252.64/26
holes: 81.93.252.128/26
holes: 81.93.252.192/26
holes: 81.93.254.0/24
holes: 81.93.255.0/24
mnt-by: FR-EURO-WEB-MNT
source: RIPE # Filtered
Spammer or zombie.
Onto scammer site:
studio42@flatus studio42]$ host www.vytispod.info
www.vytispod.info has address 193.200.171.13
[studio42@flatus studio42]$ whois 193.200.171.13@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '193.200.171.0 - 193.200.171.255'
inetnum: 193.200.171.0 - 193.200.171.255
netname: Ediware
descr: Ediware
country: FR
org: ORG-EA318-RIPE
admin-c: EWDC1-RIPE
tech-c: EWDC1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: FR-EURO-WEB-MNT
mnt-routes: FR-EURO-WEB-MNT
mnt-domains: FR-EURO-WEB-MNT
source: RIPE # Filtered
organisation: ORG-EA318-RIPE
org-name: Ediware
org-type: OTHER
address: 15 rue de l Etang
address: 78470
address: Saint Remy les chevreuse
phone: +33175437705
fax-no: +33140848804
e-mail: lbresler@ediware.net
admin-c: EWDC1-RIPE
admin-c: EWMF1-RIPE
tech-c: EWDC1-RIPE
mnt-ref: FR-EURO-WEB-MNT
mnt-by: FR-EURO-WEB-MNT
source: RIPE # Filtered
person: David CHANIAL
address: 13 ave Charles de Gaulle
92100 Boulogne Billancourt
France
phone: +33 6 78 08 62 04
fax-no: +33 1 53 01 65 01
e-mail: david@euro-web.fr
nic-hdl: EWDC1-RIPE
org: ORG-EW2-RIPE
remarks: Technical director
mnt-by: FR-EURO-WEB-MNT
source: RIPE # Filtered
% Information related to '193.200.171.0/24AS35393'
route: 193.200.171.0/24
descr: Ediware
origin: AS35393
mnt-by: FR-EURO-WEB-MNT
source: RIPE # Filtered
[studio42@flatus studio42]$ whois vytispod.info@whois.geektools.com
[whois.geektools.com]
GeekTools Whois Proxy v5.0.4 Ready.
Checking access for 69.85.141.229... ok.
Checking server [whois.afilias.info]
Results:
Access to INFO WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the
Afilias registry database. The data in this record is provided by
Afilias Limited for informational purposes only, and Afilias does not
guarantee its accuracy. This service is intended only for query-based
access. You agree that you will use this data only for lawful purposes
and that, under no circumstances will you use this data to: (a) allow,
enable, or otherwise support the transmission by e-mail, telephone, or
facsimile of mass unsolicited, commercial advertising or solicitations
to entities other than the data recipient's own existing customers; or
(b) enable high volume, automated, electronic processes that send
queries or data to the systems of Registry Operator, a Registrar, or
Afilias except as reasonably necessary to register domain names or
modify existing registrations. All rights reserved. Afilias reserves
the right to modify these terms at any time. By submitting this query,
you agree to abide by this policy.
Domain ID:D23054599-LRMS
Domain Name:VYTISPOD.INFO
Created On:29-Dec-2007 09:12:08 UTC
Last Updated On:03-Feb-2008 10:57:36 UTC
Expiration Date:29-Dec-2008 09:12:08 UTC
Sponsoring Registrar:OVH (R268-LRMS)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:ovh47a59e0fehrt
Registrant Name:Bresler Loic
Registrant Organization:Ediware
Registrant Street1:15 rue de l'Etang
Registrant Street2:
Registrant Street3:
Registrant City:St Remy les Chevreuse
Registrant State/Province:
Registrant Postal Code:78470
Registrant Country:FR
Registrant Phone:+33.175437705
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:lbresler@ediware.net
Admin ID:ovh47a59e0fjuvj
Admin Name:Bresler Loic
Admin Organization:Ediware
Admin Street1:15 rue de l'Etang
Admin Street2:
Admin Street3:
Admin City:St Remy les Chevreuse
Admin State/Province:
Admin Postal Code:78470
Admin Country:FR
Admin Phone:+33.175437705
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:lbresler@ediware.net
Billing ID:ovh47a59e0fjuvj
Billing Name:Bresler Loic
Billing Organization:Ediware
Billing Street1:15 rue de l'Etang
Billing Street2:
Billing Street3:
Billing City:St Remy les Chevreuse
Billing State/Province:
Billing Postal Code:78470
Billing Country:FR
Billing Phone:+33.175437705
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:lbresler@ediware.net
Tech ID:ovh47a59e0fjuvj
Tech Name:Bresler Loic
Tech Organization:Ediware
Tech Street1:15 rue de l'Etang
Tech Street2:
Tech Street3:
Tech City:St Remy les Chevreuse
Tech State/Province:
Tech Postal Code:78470
Tech Country:FR
Tech Phone:+33.175437705
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:lbresler@ediware.net
Name Server:NS2.SD-FRANCE.NET
Name Server:SRV142.SD-FRANCE.NET
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Results brought to you by the GeekTools WHOIS Proxy
Server results may be copyrighted and are used with permission.
Your host (69.85.141.229) has visited 1 times today.
And the site they are spamming for:
[studio42@flatus studio42]$ host www.emlsrv.fr
www.emlsrv.fr has address 193.200.171.13
Further research shows this is a spam farm.
