[an error occurred while processing this directive]
The report for this spam can be found at: 2008 Penis Scam Edition.
Return-Path: <aloha@inmunomedica.cl>
Received: from dhcp-194-103-182.in2cable.com (203.194.103.182) by
studio42.com with SMTP (Eudora Internet Mail Server 3.2.10) for
<chris@studio42.com>; Sun, 23 Mar 2008 22:52:38 -0800
Received: from lnyeu ([224.34.220.154]) by dhcp-194-103-182.in2cable.com
(8.13.2/8.13.2) with SMTP id m2O5w0G2002484; Mon, 24 Mar 2008 11:28:00 +0530
Message-ID: <47E741D4.2070300@inmunomedica.cl>
Date: Mon, 24 Mar 2008 11:23:24 +0530
From: <aloha@inmunomedica.cl>
User-Agent: Thunderbird 1.5.0.13 (Windows/20070809)
MIME-Version: 1.0
To: chris@studio42.com
Subject: Weight loss, Anti-Depressant, Antibiotics and even more!
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Get ready to the wildest nights of your life with the original blue-pill
http://onisj.surfpart.com
[studio42@flatus studio42]$ host 203.194.103.182
182.103.194.203.in-addr.arpa domain name pointer dhcp-194-103-182.in2cable.com.
[studio42@flatus studio42]$ whois 203.194.103.182@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 203.194.96.0 - 203.194.111.255
netname: IN2CABLE
descr: BROADBAND INTERNET SERVICE PROVIDER
country: IN
admin-c: SG79-AP
tech-c: JS920-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-IN-IN2CABLE
mnt-routes: MAINT-IN-IN2CABLE
remarks: ---------------------------------------------------
remarks: ***This object can only modify by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your organisation
remarks: account in the subject line.***
remarks: ---------------------------------------------------
status: ALLOCATED PORTABLE
changed: hm-changed@apnic.net 20041206
source: APNIC
person: Sudhir Gosar
nic-hdl: SG79-AP
e-mail: sudhir@in2cable.com
address: 49/50, IN CENTRE , 12th ROAD,
address: MIDC, ANDHERI(E)
address: MUMBAI-400093
phone: +91-2-2820-8585
fax-no: +91-2-2824-8372
country: IN
changed: jagdishs@in2cable.com 20080108
mnt-by: MAINT-IN-IN2CABLE
source: APNIC
person: Jagdish Salian
nic-hdl: JS920-AP
e-mail: jagdishs@in2cable.com
address: 49/50, IN CENTRE
address: MIDC , ANDHERI (EAST)
address: MUMBAI -400093
address: INDIA
phone: +91-2-2820-8585
fax-no: +91-2-2824-8372
country: IN
changed: jagdishs@in2cable.com 20041202
mnt-by: MAINT-IN-IN2CABLE
source: APNIC
To be blacklisted.
Onto scammer site:
[studio42@flatus studio42]$ host onisj.surfpart.com
onisj.surfpart.com has address 216.94.112.39
[studio42@flatus studio42]$ whois 216.94.112.39@whois.arin.net
[whois.arin.net]
MCI Communications Services, Inc. d/b/a Verizon Business UUNETCA6-A (NET-216-94-0-0-1)
216.94.0.0 - 216.95.255.255
Cable VDN Inc. CVDN-UUBLK3A (NET-216-94-112-0-1)
216.94.112.0 - 216.94.112.255
Vison Globale VDN-VISIONGLOBALE (NET-216-94-112-32-1)
216.94.112.32 - 216.94.112.47
# ARIN WHOIS database, last updated 2008-03-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
[studio42@flatus studio42]$ whois NET-216-94-112-32-1@whois.arin.net
[whois.arin.net]
OrgName: Vison Globale
OrgID: VISONG
Address: 80, rue Queen, suie 201
City: Montreal
StateProv: QC
PostalCode: H3C 2M5
Country: CA
NetRange: 216.94.112.32 - 216.94.112.47
CIDR: 216.94.112.32/28
NetName: VDN-VISIONGLOBALE
NetHandle: NET-216-94-112-32-1
Parent: NET-216-94-112-0-1
NetType: Reassigned
Comment:
RegDate: 2002-02-16
Updated: 2002-02-16
RTechHandle: MC1782-ARIN
RTechName: Chouinard, Michel
RTechPhone: +1-514-879-0020
RTechEmail: info@visionglobale.ca
OrgTechHandle: MC1782-ARIN
OrgTechName: Chouinard, Michel
OrgTechPhone: +1-514-879-0020
OrgTechEmail: info@visionglobale.ca
# ARIN WHOIS database, last updated 2008-03-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
[studio42@flatus studio42]$ whois NET-216-94-112-0-1@whois.arin.net
[whois.arin.net]
OrgName: Cable VDN Inc.
OrgID: CVDN
Address: 2600 Ontario East, Suite 152
City: Montreal
StateProv: QC
PostalCode: H2K-4K4
Country: CA
NetRange: 216.94.112.0 - 216.94.112.255
CIDR: 216.94.112.0/24
NetName: CVDN-UUBLK3A
NetHandle: NET-216-94-112-0-1
Parent: NET-216-94-0-0-1
NetType: Reallocated
Comment:
RegDate: 2001-08-13
Updated: 2001-10-04
RTechHandle: CM892-ARIN
RTechName: Malo, Christian
RTechPhone: +1-514-522-1590
RTechEmail: chris@vdn.ca
OrgTechHandle: CM892-ARIN
OrgTechName: Malo, Christian
OrgTechPhone: +1-514-522-1590
OrgTechEmail: chris@vdn.ca
# ARIN WHOIS database, last updated 2008-03-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
[studio42@flatus studio42]$ whois NET-216-94-0-0-1@whois.arin.net
[whois.arin.net]
OrgName: MCI Communications Services, Inc. d/b/a Verizon Business
OrgID: MCICS
Address: 22001 Loudoun County Pkwy
City: Ashburn
StateProv: VA
PostalCode: 20147
Country: US
NetRange: 216.94.0.0 - 216.95.255.255
CIDR: 216.94.0.0/15
NetName: UUNETCA6-A
NetHandle: NET-216-94-0-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS.UUNET.CA
NameServer: NS2.UUNET.CA
NameServer: AUTH01.NS.UU.NET
Comment:
RegDate:
Updated: 2006-12-14
RTechHandle: UC24-ORG-ARIN
RTechName: UUNET Canada Registrar
RTechPhone: +1-888-886-3865
RTechEmail: registrar@uunet.ca
OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail@verizonbusiness.com
OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u@verizonbusiness.com
OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper@verizonbusiness.com
# ARIN WHOIS database, last updated 2008-03-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
[studio42@flatus studio42]$ whois surfpart.com
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: SURFPART.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com
Name Server: NS1.THETHRILLPILLS.COM
Name Server: NS2.THETHRILLPILLS.COM
Status: ok
Updated Date: 11-mar-2008
Creation Date: 10-mar-2008
Expiration Date: 10-mar-2009
>>> Last update of whois database: Mon, 24 Mar 2008 06:21:02 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.paycenter.com.cn]
The Data in Paycenter's WHOIS database is provided by Paycenter
for information purposes, and to assist persons in obtaining
information about or related to a domain name registration
record.
Paycenter does not guarantee its accuracy. By submitting
a WHOIS query, you agree that you will use this Data only
for lawful purposes and that, under no circumstances will
you use this Data to:
(1) allow, enable, or otherwise support the transmission
of mass unsolicited, commercial advertising or solicitations
via e-mail (spam); or
(2) enable high volume, automated, electronic processes that
apply to Paycenter or its systems.
Paycenter reserves the right to modify these terms at any time.
By submitting this query, you agree to abide by this policy.
Domain Name:surfpart.com
Registrant:
palmera
6119 Madison St
Administrative Contact:
palmera ra
palmera
6119 Madison St
West New Yor
United States
tel: 86 1 8681055
fax: 86 1 8681055
sideelevenpenaltykick@aol.com
Technical Contact:
palmera ra
palmera
6119 Madison St
West New Yor
United States
tel: 86 1 8681055
fax: 86 1 8681055
sideelevenpenaltykick@aol.com
Billing Contact:
palmera ra
palmera
6119 Madison St
West New Yor
United States
tel: 86 1 8681055
fax: 86 1 8681055
sideelevenpenaltykick@aol.com
Registration Date: 2008-03-10
Update Date: 2008-03-12
Expiration Date: 2009-03-10
Primary DNS: ns1.thethrillpills.com 158.49.21.92
Secondary DNS: ns2.thethrillpills.com 61.14.72.245
Sounds druggy.
Onto DNS:
[studio42@flatus studio42]$ host 158.49.21.92
Host 92.21.49.158.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ host ns1.thethrillpills.com
ns1.thethrillpills.com has address 200.35.188.28
[studio42@flatus studio42]$ whois 200.35.188.28@whois.lacnic.net
[whois.lacnic.net]
% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2008-03-24 03:22:30 (BRT -03:00)
inetnum: 200.35.176/20
status: allocated
owner: Navega.com S.A.
ownerid: GT-NASA-LACNIC
responsible: Roberto Rodriguez
address: Calzada Roosevelt, 22-43, zona 11
address: 01011 - Guatemala -
country: GT
phone: +502 4 288888 [114]
owner-c: ROR
tech-c: ROR
inetrev: 200.35.188/24
nserver: DNS1.NAVEGA.NET.GT
nsstat: 20080321 AA
nslastaa: 20080321
nserver: DNS2.NAVEGA.NET.GT
nsstat: 20080321 AA
nslastaa: 20080321
created: 20060626
changed: 20060626
nic-hdl: ROR
person: david munoz
e-mail: dmunoz@NAVEGA.COM
address: Calzada Roosevelt 22-43 zona 11 T. Futura, Torre, Luna Nivel 6
address: 01011 - Guatemala -
country: SV
phone: +502 24 288888 [1210]
created: 20021022
changed: 20080317
% whois.lacnic.net accepts only direct match queries.
% Types of queries are: POCs, ownerid, CIDR blocks, IP
% and AS numbers.
[studio42@flatus studio42]$ host 61.14.72.245
Host 245.72.14.61.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ host ns2.thethrillpills.com
ns2.thethrillpills.com has address 12.164.51.18
[studio42@flatus studio42]$ whois 12.164.51.18@whois.arin.net
[whois.arin.net]
AT&T WorldNet Services ATT (NET-12-0-0-0-1)
12.0.0.0 - 12.255.255.255
AVIATION CONCEPTS I AVIATION13-51-16 (NET-12-164-51-16-1)
12.164.51.16 - 12.164.51.23
# ARIN WHOIS database, last updated 2008-03-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
[studio42@flatus studio42]$ whois NET-12-164-51-16-1@whois.arin.net
[whois.arin.net]
OrgName: AVIATION CONCEPTS I
OrgID: ACI-97
Address: 5259 NW 108TH AV
City: SUNRISE
StateProv: FL
PostalCode: 33351
Country: US
NetRange: 12.164.51.16 - 12.164.51.23
CIDR: 12.164.51.16/29
NetName: AVIATION13-51-16
NetHandle: NET-12-164-51-16-1
Parent: NET-12-0-0-0-1
NetType: Reassigned
Comment:
RegDate: 2007-08-08
Updated: 2007-08-08
OrgTechHandle: PJA27-ARIN
OrgTechName: Jaric, Peter
OrgTechPhone: +1-954-288-7132
OrgTechEmail: pjaric@reliantinfosys.com
# ARIN WHOIS database, last updated 2008-03-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
[studio42@flatus studio42]$ whois NET-12-0-0-0-1@whois.arin.net
[whois.arin.net]
OrgName: AT&T WorldNet Services
OrgID: ATTW
Address: 200 S. Laurel AVE.
City: MIDDLETOWN
StateProv: NJ
PostalCode: 07748
Country: US
NetRange: 12.0.0.0 - 12.255.255.255
CIDR: 12.0.0.0/8
NetName: ATT
NetHandle: NET-12-0-0-0-1
Parent:
NetType: Direct Allocation
NameServer: DBRU.BR.NS.ELS-GMS.ATT.NET
NameServer: DMTU.MT.NS.ELS-GMS.ATT.NET
NameServer: CBRU.BR.NS.ELS-GMS.ATT.NET
NameServer: CMTU.MT.NS.ELS-GMS.ATT.NET
Comment: For abuse issues contact abuse@att.net
RegDate: 1983-08-23
Updated: 2007-05-22
RTechHandle: IAA17-ARIN
RTechName: IP Address Administration
RTechPhone: +1-732-420-2071
RTechEmail: addrmgt@qsun.att.com
OrgAbuseHandle: ATTAB-ARIN
OrgAbuseName: ATT Abuse
OrgAbusePhone: +1-919-319-8130
OrgAbuseEmail: abuse@att.net
OrgTechHandle: ICC-ARIN
OrgTechName: IP Customer Care
OrgTechPhone: +1-888-613-6330
OrgTechEmail: qhoang@att.com
OrgTechHandle: IPSWI-ARIN
OrgTechName: IP SWIP
OrgTechPhone: +1-888-613-6330
OrgTechEmail: swipid@icorefep2.noc.att.com
# ARIN WHOIS database, last updated 2008-03-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
[studio42@flatus studio42]$ whois thethrillpills.com
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: THETHRILLPILLS.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.THETHRILLPILLS.COM
Name Server: NS2.THETHRILLPILLS.COM
Status: ok
Updated Date: 17-mar-2008
Creation Date: 26-feb-2008
Expiration Date: 26-feb-2009
>>> Last update of whois database: Mon, 24 Mar 2008 06:22:49 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.dns.com.cn]
Domain Name.......... thethrillpills.com
Creation Date........ 2008-02-27 01:52:16
Registration Date.... 2008-02-27 01:52:16
Expiry Date.......... 2009-02-27 01:52:16
Organisation Name.... Paypal Sdn Bhd
Organisation Address. Seremban
Organisation Address.
Organisation Address. Foreignness
Organisation Address. 34678
Organisation Address. WG
Organisation Address. TD
Admin Name........... Paypal Sdn Bhd
Admin Address........ Seremban
Admin Address........
Admin Address........ Foreignness
Admin Address........ 34678
Admin Address........ WG
Admin Address........ TD
Admin Email.......... agent15591@agent.dns.com.cn
Admin Phone.......... +86.234782
Admin Fax............ +86.328487
Tech Name............ Paypal Sdn Bhd
Tech Address......... Seremban
Tech Address.........
Tech Address......... Foreignness
Tech Address......... 34678
Tech Address......... WG
Tech Address......... TD
Tech Email........... agent15591@agent.dns.com.cn
Tech Phone........... +86.234782
Tech Fax............. +86.328487
Bill Name............ Paypal Sdn Bhd
Bill Address......... Seremban
Bill Address.........
Bill Address......... Foreignness
Bill Address......... 34678
Bill Address......... WG
Bill Address......... TD
Bill Email........... agent15591@agent.dns.com.cn
Bill Phone........... +86.234782
Bill Fax............. +86.328487
Name Server.......... ns2.thethrillpills.com
Name Server.......... ns1.thethrillpills.com
