[an error occurred while processing this directive]
The report for this spam can be found at: 2008 Deadbeats Page 01.
Return-Path: <Empowerment@use.net>
Received: from sbs.longsea.com.tw (220.130.7.197) by studio42.com with ESMTP
(Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>;
Mon, 18 Feb 2008 14:36:08 -0800
Received: from User ([209.216.150.145]) by sbs.longsea.com.tw with Microsoft SMTPSVC(6.0.3790.1830); Tue, 19 Feb 2008 07:04:32 +0800
From: "Empowerment"<Empowerment@use.net>
Subject: Be the first in your area to find out about this !
Date: Mon, 18 Feb 2008 17:35:23 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: Empowerment@use.net
Message-ID: <SBSOFSgqUYxm5JBMkEo00002fa0@sbs.longsea.com.tw>
X-OriginalArrivalTime: 18 Feb 2008 23:04:33.0828 (UTC) FILETIME=[A026EE40:01C87282]
Be the first in your area to find out about this !
* Make a Fortune!
* Get Your Free Finance support
* Be self Empowered
Go Here >> www.useful.ro << Go Here
*Receive Your Business Starter Kit*
[studio42@flatus studio42]$ host 220.130.7.197
197.7.130.220.in-addr.arpa domain name pointer 220-130-7-197.HINET-IP.hinet.net.
[studio42@flatus studio42]$ whois 220.130.7.197@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 220.129.0.0 - 220.143.255.255
netname: HINET-NET
country: TW
descr: CHTD, Chunghwa Telecom Co.,Ltd.
descr: Data-Bldg.6F, No.21, Sec.21, Hsin-Yi Rd.
descr: Taipei Taiwan 100
admin-c: HN27-AP
tech-c: HN28-AP
status: ALLOCATED PORTABLE
changed: hostmaster@twnic.net 20030611
mnt-by: MAINT-TW-TWNIC
source: APNIC
person: HINET Network-Adm
address: CHTD, Chunghwa Telecom Co., Ltd.
address: Data-Bldg. 6F, No. 21, Sec. 21, Hsin-Yi Rd.,
address: Taipei Taiwan 100
country: TW
phone: +886 2 2322 3495
phone: +886 2 2322 3442
phone: +886 2 2344 3007
fax-no: +886 2 2344 2513
fax-no: +886 2 2395 5671
e-mail: network-adm@hinet.net
nic-hdl: HN27-AP
remarks: same as TWNIC nic-handle HN184-TW
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20000721
source: APNIC
person: HINET Network-Center
address: CHTD, Chunghwa Telecom Co., Ltd.
address: Data-Bldg. 6F, No. 21, Sec. 21, Hsin-Yi Rd.,
address: Taipei Taiwan 100
country: TW
phone: +886 2 2322 3495
phone: +886 2 2322 3442
phone: +886 2 2344 3007
fax-no: +886 2 2344 2513
fax-no: +886 2 2395 5671
e-mail: network-center@hinet.net
nic-hdl: HN28-AP
remarks: same as TWNIC nic-handle HN185-TW
mnt-by: MAINT-TW-TWNIC
changed: hostmaster@twnic.net 20000721
source: APNIC
inetnum: 220.130.7.0 - 220.130.7.255
netname: HINET-NET
descr: Chunghwa Telecom Data Communication Business Group
descr: Taipei Taiwan
country: TW
admin-c: HN184-TW
tech-c: HN184-TW
mnt-by: MAINT-TW-TWNIC
remarks: This information has been partially mirrored by APNIC from
remarks: TWNIC. To obtain more specific information, please use the
remarks: TWNIC whois server at whois.twnic.net.
changed: fkchung@ms1.hinet.net 20030610
status: ASSIGNED NON-PORTABLE
source: TWNIC
person: HINET Network-Adm
address: CHTD, Chunghwa Telecom Co., Ltd.
address: Taipei Taiwan
e-mail: network-adm@hinet.net
nic-hdl: HN184-TW
changed: hostmaster@twnic.net.tw20000721
source: TWNIC
Sounds like a zombie.
Onto spammer?
[studio42@flatus studio42]$ host 209.216.150.145
145.150.216.209.in-addr.arpa domain name pointer mail.beachgrove.net.
[studio42@flatus studio42]$ whois 209.216.150.145@whois.arin.net
[whois.arin.net]
OrgName: Primus Telecommunications Canada Inc.
OrgID: PRCA
Address: 5343 Dundas Street West
Address: Suite 400
City: Etobicoke
StateProv: ON
PostalCode: M9B-6K5
Country: CA
NetRange: 209.216.128.0 - 209.216.159.255
CIDR: 209.216.128.0/19
NetName: PRIMUS-209-216-128-0
NetHandle: NET-209-216-128-0-1
Parent: NET-209-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.WINCOM.NET
NameServer: NS2.WINCOM.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 1998-03-27
Updated: 2003-08-20
OrgAbuseHandle: ABUSE48-ARIN
OrgAbuseName: Abuse Services
OrgAbusePhone: +1-800-265-3600
OrgAbuseEmail: abuse@primus.ca
OrgTechHandle: ANA41-ARIN
OrgTechName: Nadarajah, Ahim
OrgTechPhone: +1-416-236-3636
OrgTechEmail: anadarajah@primustel.ca
# ARIN WHOIS database, last updated 2008-02-17 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
I'm not trusting of that entry. I'm going to ignore it, despite logging it here.
Onto scammer site:
[studio42@flatus studio42]$ host www.useful.ro
www.useful.ro is an alias for useful.ro.
useful.ro has address 82.77.138.250
[studio42@flatus studio42]$ whois 82.77.138.250@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '82.77.138.0 - 82.77.139.255'
inetnum: 82.77.138.0 - 82.77.139.255
netname: RO-RDS-SEVERIN
descr: Romania Data Systems
descr: Severin branch
country: RO
admin-c: RDS-RIPE
tech-c: RDS-RIPE
status: ASSIGNED PA
remarks: INFRA-AW
mnt-by: AS8708-MNT
remarks: +-----------------------------------------------------------+
remarks: | ABUSE CONTACT: abuse@rdsnet.ro IN CASE OF HACK ATTACKS, |
remarks: | ILLEGAL ACTIVITY, VIOLATION, SCANS, PROBES, SPAM, ETC. |
remarks: +-----------------------------------------------------------+
source: RIPE # Filtered
role: Romania Data Systems NOC
address: 71-75 Dr. Staicovici
address: Bucharest / ROMANIA
phone: +40 21 30 10 888
fax-no: +40 21 30 10 892
abuse-mailbox: abuse@rcs-rds.ro
admin-c: CN19-RIPE
admin-c: GEPU1-RIPE
tech-c: CN19-RIPE
tech-c: GEPU1-RIPE
nic-hdl: RDS-RIPE
mnt-by: AS8708-MNT
remarks: +--------------------------------------------------------------+
remarks: | ABUSE CONTACT: abuse@rcs-rds.ro IN CASE OF HACK ATTACKS, |
remarks: | ILLEGAL ACTIVITY, VIOLATION, SCANS, PROBES, SPAM, ETC. |
remarks: | !! PLEASE DO NOT CONTACT OTHER PERSONS FOR THESE PROBLEMS !! |
remarks: +--------------------------------------------------------------+
source: RIPE # Filtered
% Information related to '82.76.0.0/14AS8708'
route: 82.76.0.0/14
descr: RDSNET
origin: AS8708
mnt-by: AS8708-MNT
source: RIPE # Filtered
[studio42@flatus studio42]$ whois useful.ro@whois.geektools.com
[whois.geektools.com]
GeekTools Whois Proxy v5.0.4 Ready.
Checking access for 69.85.141.229... ok.
Checking server [whois.rotld.ro]
Results:
% whois.rotld.ro :
%
% Rights restricted by copyright.
%
% Specifically, this data MAY ONLY be used for Internet operational
% purposes. It may not be used for targeted advertising or any
% other purpose.
%
% Este INTERZISA folosirea datelor de pe acest server in oricare
% alt scop decat operarea retelei. In special este INTERZISA
% folosirea lor in scopuri publicitare.
%
domain-name: useful.ro
description: Bostina Ovidiu-Adelin
description: Str. Mihail Kogalniceanu, nr. 1, bl. V15, sc. 1, ap. 1
description: Drobeta-Turnu Severin
description: Romania
description: Country: RO
description: Phone: +4.0764350978
description: Email: yo_cruncher@yahoo.com
description: [...]
admin-contact: BO215-ROTLD
technical-contact: BO217-ROTLD
zone-contact: BO217-ROTLD
billing-contact: BO216-ROTLD
nameserver: efh1.no-ip.org
nameserver: efh2.no-ip.org
info: Registered via ABO
info: The NIC for Romania is http://www.rotld.ro/
notify: domain-admin@listserv.rnc.ro
object-maintained-by: ROTLD-MNT
updated: domain-admin@listserv.rnc.ro 20071004
updated: modify@rotld.ro.REMOVE.THIS.SUFFIX 20071005
updated: modify@rotld.ro.REMOVE.THIS.SUFFIX 20071007
updated: modify@rotld.ro.REMOVE.THIS.SUFFIX 20071010
updated: modify@rotld.ro.REMOVE.THIS.SUFFIX 20071227
source: ROTLD
application-date: 20071004
domain-status: active
registration-date: 20071004
person: Bostina Ovidiu-Adelin
address: strada
address: orasu
address: tara
address: Country: RO
phone: +4.0764350978
e-mail: admin@useful.ro
nic-hdl: BO215-ROTLD
notify: domain-admin@listserv.rnc.ro
object-maintained-by: ROTLD-MNT
updated: domain-admin@listserv.rnc.ro 20071004
updated: modify@rotld.ro.REMOVE.THIS.SUFFIX 20071226
source: ROTLD
person: Bostina Ovidiu-Adelin
address: Str. Mihail Kogalniceanu, nr. 1, bl. V15, sc. 1, ap. 1
address: Drobeta-Turnu Severin
address: Romania
address: Country: RO
phone: +4.0764350978
e-mail: yo_cruncher@yahoo.com
nic-hdl: BO217-ROTLD
notify: domain-admin@listserv.rnc.ro
object-maintained-by: ROTLD-MNT
updated: domain-admin@listserv.rnc.ro 20071004
source: ROTLD
person: Bostina Ovidiu-Adelin
address: Str. Mihail Kogalniceanu, nr. 1, bl. V15, sc. 1, ap. 1
address: Drobeta-Turnu Severin
address: Romania
address: Country: RO
phone: +4.0764350978
e-mail: yo_cruncher@yahoo.com
nic-hdl: BO216-ROTLD
notify: domain-admin@listserv.rnc.ro
object-maintained-by: ROTLD-MNT
updated: domain-admin@listserv.rnc.ro 20071004
source: ROTLD
