[an error occurred while processing this directive]
The report for this spam can be found at: 2008 Porno Spam Edition.
Return-Path: <beverlyvvalencia7680@hotmail.com>
Received: from bay0-omc3-s21.bay0.hotmail.com (65.54.246.221) by
studio42.com with ESMTP (Eudora Internet Mail Server 3.2.10) for
<myfreepaysite@studio42.com>; Tue, 8 Apr 2008 09:27:08 -0700
Received: from BAY114-W45 ([65.54.169.145]) by bay0-omc3-s21.bay0.hotmail.com
with Microsoft SMTPSVC(6.0.3790.3959); Tue, 8 Apr 2008 09:27:00 -0700
Message-ID: <BAY114-W458033B161DC53CEA2DDE1D8F20@phx.gbl>
Return-Path: beverlyvvalencia7680@hotmail.com
X-Originating-IP: [84.47.187.5]
From: Beverly Valencia <beverlyvvalencia7680@hotmail.com>
To: <jingle.jackson@gmaili.com>
Subject: He then sits down and she continues to go down on him at the foot of the bed. Thank you K-Fed for re
Date: Tue, 8 Apr 2008 16:27:00 +0000
Importance: Normal
Content-Type: text/plain; charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginalArrivalTime: 08 Apr 2008 16:27:01.0079 (UTC) FILETIME=[5F75C670:01C89995]
Explosive, scandalous, real celebrity photos! Most women would quickly raise their tops if their tits became exposed while surfing. Not Paris.
http://onlinehomewvxz.info
_________________________________________________________________
Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy!
http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us
[studio42@flatus studio42]$ host 65.54.246.221
221.246.54.65.in-addr.arpa domain name pointer bay0-omc3-s21.bay0.hotmail.com.
[studio42@flatus studio42]$ whois 65.54.246.221@whois.arin.net
[whois.arin.net]
OrgName: Microsoft Corp
OrgID: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US
NetRange: 65.52.0.0 - 65.55.255.255
CIDR: 65.52.0.0/14
NetName: MICROSOFT-1BLK
NetHandle: NET-65-52-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Assignment
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
Comment:
RegDate: 2001-02-14
Updated: 2004-12-09
RTechHandle: ZM23-ARIN
RTechName: Microsoft Corporation
RTechPhone: +1-425-882-8080
RTechEmail: noc@microsoft.com
OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com
OrgAbuseHandle: HOTMA-ARIN
OrgAbuseName: Hotmail Abuse
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@hotmail.com
OrgAbuseHandle: MSNAB-ARIN
OrgAbuseName: MSN ABUSE
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@msn.com
OrgNOCHandle: ZM23-ARIN
OrgNOCName: Microsoft Corporation
OrgNOCPhone: +1-425-882-8080
OrgNOCEmail: noc@microsoft.com
OrgTechHandle: MSFTP-ARIN
OrgTechName: MSFT-POC
OrgTechPhone: +1-425-882-8080
OrgTechEmail: iprrms@microsoft.com
# ARIN WHOIS database, last updated 2008-04-07 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
Hotmail and their spammers....
And who be the scum bag today?
[studio42@flatus studio42]$ host 84.47.187.5
5.187.47.84.in-addr.arpa domain name pointer stats.fzz.ru.
[studio42@flatus studio42]$ whois 84.47.187.5@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '84.47.128.0 - 84.47.191.255'
inetnum: 84.47.128.0 - 84.47.191.255
org: ORG-NA41-RIPE
netname: RU-NAUKANET-20041015
descr: PROVIDER Local Registry
descr: Nauka-Svyaz
country: RU
admin-c: VV290-RIPE
tech-c: VS1972-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: NAUKANET-MNT
mnt-routes: NAUKANET-MNT
source: RIPE # Filtered
organisation: ORG-NA41-RIPE
org-name: Nauka-Svyaz
org-type: LIR
address: 3-rd Yamskogo Polya street
vladenie 2
address: 125124
address: Moscow
address: Russian Federation
phone: +7 495 257 0880
fax-no: +7 495 937 3412
e-mail: lir@naukanet.ru
admin-c: EVK10-RIPE
admin-c: VV290-RIPE
admin-c: LY10-RIPE
admin-c: VS1972-RIPE
admin-c: NL799-RIPE
mnt-ref: NAUKANET-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
person: Vadim Vakhrushin
address: OOO Nauka-Svyaz
address: 3-ya ulitsa Yamskogo Polia, vladenie 2
address: 125124 Moscow
address: Russia
phone: +7 495 5029092
fax-no: +7 495 9373412
e-mail: noc@naukanet.ru
nic-hdl: VV290-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes
person: Vladimir Schedrin
address: OOO Naukasvias
address: 3-ya ulitsa Yamskogo Polia, vladenie 2
address: 111240 Moscow
address: Russia
phone: +7 495 5029092
fax-no: +7 495 9373412
e-mail: noc@naukanet.ru
nic-hdl: VS1972-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes
% Information related to '84.47.128.0/18AS28809'
route: 84.47.128.0/18
descr: Nauka-Svyaz
origin: AS28809
mnt-by: NAUKANET-MNT
source: RIPE # Filtered
Protected Russian dirtbags. Russians aren't dirtbags. Russian spammers are dirtbags.
Onto scammer site:
[studio42@flatus studio42]$ host onlinehomewvxz.info
onlinehomewvxz.info has address 60.2.99.37
[studio42@flatus studio42]$ whois 60.2.99.37@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 60.0.0.0 - 60.10.255.255
netname: CNCGROUP-HE
descr: CNCGROUP Hebei Province Network
descr: China Network Communications Group Corporation
descr: No.156,Fu-Xing-Men-Nei Street,
descr: Beijing 100031
country: CN
admin-c: CH455-AP
tech-c: KL984-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HE
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20040329
changed: hm-changed@apnic.net 20060113
changed: hm-changed@apnic.net 20060124
changed: hm-changed@apnic.net 20080314
source: APNIC
route: 60.0.0.0/13
descr: CNC Group CHINA169 Hebei Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20060118
source: APNIC
role: CNCGroup Hostmaster
e-mail: abuse@cnc-noc.net
address: No.156,Fu-Xing-Men-Nei Street,
address: Beijing,100031,P.R.China
nic-hdl: CH455-AP
phone: +86-10-82993155
fax-no: +86-10-82993102
country: CN
admin-c: CH444-AP
tech-c: CH444-AP
changed: abuse@cnc-noc.net 20041119
mnt-by: MAINT-CNCGROUP
source: APNIC
person: Kong Lingfei
nic-hdl: KL984-AP
e-mail: konglf5@cnc.cn
address: Shi Jiazhuang City, HeBei Province,050011,CN
phone: +86-311-85128637
fax-no: +86-311-86685210
country: cn
changed: konglf5@cnc.cn 20071226
mnt-by: MAINT-CNCGROUP-HE
source: APNIC
[studio42@flatus studio42]$ whois onlinehomewvxz.info@whois.geektools.com
[whois.geektools.com]
GeekTools Whois Proxy v5.0.4 Ready.
Checking access for 69.85.141.229... ok.
Checking server [whois.afilias.info]
Results:
Access to INFO WHOIS information is provided to assist persons in
determining the contents of a domain name registration record in the
Afilias registry database. The data in this record is provided by
Afilias Limited for informational purposes only, and Afilias does not
guarantee its accuracy. This service is intended only for query-based
access. You agree that you will use this data only for lawful purposes
and that, under no circumstances will you use this data to: (a) allow,
enable, or otherwise support the transmission by e-mail, telephone, or
facsimile of mass unsolicited, commercial advertising or solicitations
to entities other than the data recipient's own existing customers; or
(b) enable high volume, automated, electronic processes that send
queries or data to the systems of Registry Operator, a Registrar, or
Afilias except as reasonably necessary to register domain names or
modify existing registrations. All rights reserved. Afilias reserves
the right to modify these terms at any time. By submitting this query,
you agree to abide by this policy.
Domain ID:D24341288-LRMS
Domain Name:ONLINEHOMEWVXZ.INFO
Created On:03-Apr-2008 11:34:46 UTC
Last Updated On:03-Apr-2008 11:43:50 UTC
Expiration Date:03-Apr-2009 11:34:46 UTC
Sponsoring Registrar:Directi Information Pvt. Ltd. d/b/a PublicDomainRegistry.co
m (R159-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:PP-SP-001
Registrant Name:Domain Admin
Registrant Organization:PrivacyProtect.org
Registrant Street1:P.O. Box 97
Registrant Street2:All Postal Mails Rejected, visit Privacyprotect.org
Registrant Street3:
Registrant City:Moergestel
Registrant State/Province:
Registrant Postal Code:5066 ZH
Registrant Country:NL
Registrant Phone:+45.36946676
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:contact@privacyprotect.org
Admin ID:PP-SP-001
Admin Name:Domain Admin
Admin Organization:PrivacyProtect.org
Admin Street1:P.O. Box 97
Admin Street2:All Postal Mails Rejected, visit Privacyprotect.org
Admin Street3:
Admin City:Moergestel
Admin State/Province:
Admin Postal Code:5066 ZH
Admin Country:NL
Admin Phone:+45.36946676
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:contact@privacyprotect.org
Billing ID:PP-SP-001
Billing Name:Domain Admin
Billing Organization:PrivacyProtect.org
Billing Street1:P.O. Box 97
Billing Street2:All Postal Mails Rejected, visit Privacyprotect.org
Billing Street3:
Billing City:Moergestel
Billing State/Province:
Billing Postal Code:5066 ZH
Billing Country:NL
Billing Phone:+45.36946676
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:contact@privacyprotect.org
Tech ID:PP-SP-001
Tech Name:Domain Admin
Tech Organization:PrivacyProtect.org
Tech Street1:P.O. Box 97
Tech Street2:All Postal Mails Rejected, visit Privacyprotect.org
Tech Street3:
Tech City:Moergestel
Tech State/Province:
Tech Postal Code:5066 ZH
Tech Country:NL
Tech Phone:+45.36946676
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:contact@privacyprotect.org
Name Server:NS1.BESTTRUCKIN.COM
Name Server:NS2.BESTTRUCKIN.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
And it shills for:
http://www.celebrityx.com:
[studio42@flatus studio42]$ host www.celebrityx.com
www.celebrityx.com has address 213.19.163.149
[studio42@flatus studio42]$ whois 213.19.163.149@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '213.19.163.0 - 213.19.163.255'
inetnum: 213.19.163.0 - 213.19.163.255
netname: THAIINTERNATIONAL-NL
descr: THAIINTERNATIONAL-NL
country: nl
admin-c: RK858-ARIN
tech-c: LTHM
status: ASSIGNED PA
remarks: all abuse reports to abuse@level3.com
mnt-by: LEVEL3-MNT
mnt-lower: LEVEL3-MNT
source: RIPE # Filtered
role: LEVEL3 Hostmaster
address: Level (3) Communications
address: 100 Leman Street
address: London
address: E1 8EU
phone: +44-20-7864-4444
remarks: trouble: 24 Hour Call +44-08000-927-729
remarks: trouble: Abuse reports to abuse@eu.level3.net
admin-c: STUD1-RIPE
admin-c: DT16-RIPE
admin-c: MATT69-RIPE
admin-c: JA600-RIPE
admin-c: JT4883-RIPE
tech-c: LTEE
nic-hdl: LTHM
remarks: Peering issues to peering@eu.level3.net
mnt-by: LEVEL3-MNT
source: RIPE # Filtered
abuse-mailbox: abuse@eu.level3.net
person: Dummy Person Object
remarks: This object has been created
remarks: to correct invalid references.
remarks: For more information,
remarks: please contact ripe-dbm@ripe.net.
address: No Address # unknown address
phone: +00 00 # unknown phone number
nic-hdl: RK858-ARIN
mnt-by: RIPE-NCC-LOCKED-MNT
remarks: Maintainer RIPE-NCC-NONE-MNT removed and object
remarks: LOCKED by the RIPE NCC due to
remarks: deprecation of the NONE authentication scheme.
remarks: Please visit the following URL to unlock this object
remarks: http://www.ripe.net/db/none-deprecation-042004.html
source: RIPE # Filtered
% Information related to '213.19.128.0/17AS9057'
route: 213.19.128.0/17
descr: Level 3 NL RIPE block
origin: AS9057
remarks: Abuse reports to abuse@eu.level3.net
remarks: Peering contact is peering@eu.level3.net
mnt-by: LEVEL3-MNT
source: RIPE # Filtered
[studio42@flatus studio42]$ whois celebrityx.com
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: CELEBRITYX.COM
Registrar: MONIKER ONLINE SERVICES, INC.
Whois Server: whois.moniker.com
Referral URL: http://www.moniker.com/whois.html
Name Server: NS1.MEDIACONTENTINTERNATIONAL.COM
Name Server: NS2.MEDIACONTENTINTERNATIONAL.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 04-apr-2008
Creation Date: 19-aug-1998
Expiration Date: 18-aug-2009
>>> Last update of whois database: Tue, 08 Apr 2008 16:44:11 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.moniker.com]
Moniker.Com Whois Server Version 2.1
The Data in Moniker.Com's WHOIS database
is provided for information purposes only, and is
designed to assist persons in obtaining information
related to domain name registration records.
Moniker.Com does not guarantee its accuracy.
By submitting a WHOIS query, you agree that you
will use this Data only for lawful purposes and
that, under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the
transmission of mass unsolicited, commercial
advertising or solicitations via e-mail (spam); or
(2) enable high volume, automated, electronic
processes that apply to Moniker.Com (or its
systems). Moniker.Com reserves the right
to modify these terms at any time. By submitting
this query, you agree to abide by this policy.
Domain Name: CELEBRITYX.COM
Registrant [1263387]:
Whitelands s.r.o.
18600 Praha 8
Prague 8
Pobrezni
370/4
CZ
Administrative Contact [1263387]:
Nikki Cutts-White domains@whitelandsinternet.com
Whitelands s.r.o.
18600 Praha 8
Prague 8
Pobrezni
370/4
CZ
Phone: +420.3233723627
Billing Contact [1263387]:
Nikki Cutts-White domains@whitelandsinternet.com
Whitelands s.r.o.
18600 Praha 8
Prague 8
Pobrezni
370/4
CZ
Phone: +420.3233723627
Technical Contact [1263387]:
Nikki Cutts-White domains@whitelandsinternet.com
Whitelands s.r.o.
18600 Praha 8
Prague 8
Pobrezni
370/4
CZ
Phone: +420.3233723627
Domain servers in listed order:
NS1.MEDIACONTENTINTERNATIONAL.COM
NS2.MEDIACONTENTINTERNATIONAL.COM
Record created on: 1998-08-19 00:00:00.0
Database last updated on: 2008-04-04 12:41:10.9
Domain Expires on: 2009-08-18 00:00:00.0
