[an error occurred while processing this directive]
The report for this spam can be found at: 2008 Deadbeats Page 01.
Received: from ag-out-0708.google.com (72.14.246.243) by studio42.com with
ESMTP (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>;
Tue, 19 Feb 2008 17:37:22 -0800
Received: by ag-out-0708.google.com with SMTP id 23so3660683agd.6
for <chris@studio42.com>; Tue, 19 Feb 2008 17:40:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received:received:message-id:to:reply-to:subject:date:x-priority:importance:x-mailer:mime-version:content-type:from;
bh=Ayjtf8kUCbJTYK+2p0shyQvzVph1C8KX2OWXlCc3SCk=;
b=v64Xu2baSfiMdK1khOB+SEVrRjuFix4GsQLmxJmo+aXLNzvx38bqLBIBco6aaDL+SZC9IPdbYxSC4HHKh9MM/37MCapXeylY+Q+QbEhfBej4yo7+16fE0pcnNKRUy+Yy8MPZ71QGdDerMcWoBGiiYAX1NLCKTqL3l245/gdx38I=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=message-id:to:reply-to:subject:date:x-priority:importance:x-mailer:mime-version:content-type:from;
b=ccxZK2xmmNlOSkmywpsCNYtnpd5H4kaVUn77qwI/mzUl+OPEW1nEoXEo2Bkrf0m/1WoZDExDlP91svvZNaKMhJtiF8mTvAGjtHepuTuJPddTIds83a4TJJ01Xv62yOEb0kcc+LmIgJEXinevAKxLNTxpXjETc0u+yjIY5f/wqeo=
Received: by 10.143.187.2 with SMTP id o2mr5959254wfp.162.1203471617243;
Tue, 19 Feb 2008 17:40:17 -0800 (PST)
Return-Path: <lulululily@gmail.com>
Received: from wth ( [123.112.6.178])
by mx.google.com with ESMTPS id 24sm21149838wfc.18.2008.02.19.17.40.15
(version=SSLv3 cipher=OTHER);
Tue, 19 Feb 2008 17:40:16 -0800 (PST)
Message-ID: <20080220.ZMPTJSGJJZMLOXQU@howdychina.cn>
To: "chris" <chris@studio42.com>
Reply-To: "Howdychina" <info@howdychina.cn>
Return-Path: <info@howdychina.cn>
Subject: Hottest trend in 2008?
Date: Wed, 20 Feb 2008 09:40:25 +0800
X-Priority: 1
Importance: Highest
X-Mailer: Email Marketer Business Edition 1.80
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_437_9551_84320485.16711681"
From: Howdychina <lulululily@gmail.com>
This message is in MIME format with multi-part. Since your mail reader does not
understand this format, some or all of this message may not be legible.
------=_NextPart_437_9551_84320485.16711681
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64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------=_NextPart_437_9551_84320485.16711681
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64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------=_NextPart_437_9551_84320485.16711681--
[studio42@flatus studio42]$ host 72.14.246.243
243.246.14.72.in-addr.arpa domain name pointer ag-out-0708.google.com.
[studio42@flatus studio42]$ whois 72.14.246.243@whois.arin.net
[whois.arin.net]
OrgName: Google Inc.
OrgID: GOGL
Address: 1600 Amphitheatre Parkway
City: Mountain View
StateProv: CA
PostalCode: 94043
Country: US
NetRange: 72.14.192.0 - 72.14.255.255
CIDR: 72.14.192.0/18
NetName: GOOGLE
NetHandle: NET-72-14-192-0-1
Parent: NET-72-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.GOOGLE.COM
NameServer: NS2.GOOGLE.COM
NameServer: NS3.GOOGLE.COM
NameServer: NS4.GOOGLE.COM
Comment:
RegDate: 2004-11-10
Updated: 2007-04-10
RTechHandle: ZG39-ARIN
RTechName: Google Inc.
RTechPhone: +1-650-318-0200
RTechEmail: arin-contact@google.com
OrgTechHandle: ZG39-ARIN
OrgTechName: Google Inc.
OrgTechPhone: +1-650-318-0200
OrgTechEmail: arin-contact@google.com
# ARIN WHOIS database, last updated 2008-02-18 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
Idiots at Google.
Who from?
[studio42@flatus studio42]$ host 123.112.6.178
Host 178.6.112.123.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 123.112.6.178@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 123.112.0.0 - 123.127.255.255
netname: CNCGROUP-BJ
descr: CNCGROUP Beijing province network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
admin-c: CH455-AP
tech-c: SY21-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-BJ
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20070129
source: APNIC
role: CNCGroup Hostmaster
e-mail: abuse@cnc-noc.net
address: No.156,Fu-Xing-Men-Nei Street,
address: Beijing,100031,P.R.China
nic-hdl: CH455-AP
phone: +86-10-82993155
fax-no: +86-10-82993102
country: CN
admin-c: CH444-AP
tech-c: CH444-AP
changed: abuse@cnc-noc.net 20041119
mnt-by: MAINT-CNCGROUP
source: APNIC
person: sun ying
address: fu xing men nei da jie 97, Xicheng District
address: Beijing 100800
country: CN
phone: +86-10-66030657
fax-no: +86-10-66078815
e-mail: suny@publicf.bta.net.cn
nic-hdl: SY21-AP
mnt-by: MAINT-CNCGROUP-BJ
changed: suny@publicf.bta.net.cn 19980824
changed: hm-changed@apnic.net 20060717
source: APNIC
Idiots in China.
What for?
Here's the decoded body of the spam:
Hi chris!
What's the hottest topic for 2008?
-- 2008 Beijing Olympics!!!
2008 is gonna be the year of China...
Don't wanna be dropped behind the trend?
Just set out on your China journey right now!
Don't have enough budget?
No problem! Internet is always the most ecomonical choice!
You can learn Chinese and make Chinese friends simply with your pc!
Come and visit us at www.HowdyChina.cn, there's more surprise for you!
---------------------
This email is sent to you by HowdyChina.cn
For more information, please visit: www.howdychina.cn
[studio42@flatus studio42]$ host www.howdychina.cn
www.howdychina.cn has address 211.160.78.97
[studio42@flatus studio42]$ whois 211.160.78.97@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 211.160.0.0 - 211.160.255.255
netname: FibrLINK
descr: FibrLINK Communications Co., Ltd.
descr: Chaoyang District, Beijing
country: CN
admin-c: JD276-AP
tech-c: ZS110-AP
mnt-by: MAINT-CNNIC-AP
mnt-lower: MAINT-CNNIC-AP
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
remarks: abuse and attack reports sent to abuse@fibrlink.com
changed: ipas@cnnic.cn 20070306
source: APNIC
route: 211.160.0.0/16
descr: FibrLINK
descr: Beijing FibrLINK Networks Co.,Ltd.
country: CN
origin: AS9814
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20040213
source: APNIC
person: Jie Deng
nic-hdl: JD276-AP
e-mail: jie.deng@fibrlink.com
address: 10-2 Anzhenxilisanqu,Chaoyang District,Beijing
phone: +86-010-51961149
fax-no: +86-010-64422237
country: CN
changed: shenzhi@cnnic.cn 20050803
mnt-by: MAINT-CNNIC-AP
mnt-by: MAINT-CN-FIBRLINK
source: APNIC
person: Zheng Shengjun
nic-hdl: ZS110-AP
address: No.10 Building,2nd Floor,3rd Block, Anzhen Xili
address: Chaoyang District, Beijing
country: CN
phone: +86-10-51961071
fax-no: +86-10-64422237
e-mail: shengjun.zheng@fibrlink.com
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20070306
source: APNIC
inetnum: 211.160.78.0 - 211.160.79.255
netname: SFDS
country: CN
descr: Shengfu building
descr: Shengfu building,maizidian street,chaoyang district,Beijing
admin-c: ZS110-CN
tech-c: DJ2-CN
status: ASSIGNED NON-PORTABLE
changed: jie.deng@fibrlink.com 20050812
mnt-by: MAINT-CN-FIBRLINK
source: CNNIC
person: Zheng Shengjun
nic-hdl: ZS110-CN
address: No.10 Building,2nd Floor,3rd Block, Anzhen Xili
address: Chaoyang District, Beijing
country: CN
phone: +86-10-51961071
fax-no: +86-10-64422237
e-mail: shengjun.zheng@fibrlink.net
mnt-by: MAINT-CNNIC-AP
changed: ipas@cnnic.net.cn 20020314
changed: shengjun.zheng@fibrlink.com 20030319
changed: shengjun.zheng@fibrlink.net 20030408
source: CNNIC
person: Deng Jie
nic-hdl: DJ2-CN
e-mail: jie.deng@fibrlink.com
address: 10-2 Anzhenxilisanqu,Chaoyang District,Beijing
phone: +86-010-51961149
fax-no: +86-010-64422237
country: CN
changed: jie.deng@fibrlink.com 20050812
mnt-by: MAINT-CN-FIBRLINK
source: CNNIC
[studio42@flatus studio42]$ whois howdychina.cn@whois.geektools.com
[whois.geektools.com]
GeekTools Whois Proxy v5.0.4 Ready.
Checking access for 69.85.141.229... ok.
Checking server [whois.cnnic.net.cn]
Results:
Domain Name: howdychina.cn
ROID: 20071227s10001s93273099-cn
Domain Status: ok
Registrant Organization: ea Sc La
Registrant Name: C# up Up
Administrative Email: tequila.qiu@gmail.com
Sponsoring Registrar: ao S" Pa Oe oo ae Se aA ua oe O" eP
Name Server:dns21.hichina.com
Name Server:dns22.hichina.com
Registration Date: 2007-12-27 12:47
Expiration Date: 2008-12-27 12:47