[an error occurred while processing this directive]
The report for this spam can be found at: 2008 Penis Spam Edition.
Return-Path: <dwvideostationm@videostation.com>
Received: from [78.153.156.129] (78.153.156.129) by studio42.com with ESMTP (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; Fri, 8 Aug 2008 17:09:03 -0700
Received: from [78.153.156.129] by videostation.com; Sat, 9 Aug 2008 03:08:59 +0300
From: "Rico Castle" <dwvideostationm@videostation.com>
To: <chris@studio42.com>
Subject: Don't be left behind- enlarge yourself now!
Date: Sat, 9 Aug 2008 03:08:59 +0300
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: Aca6Q66X4UQFONFFZ51Z09BRSQTJF4==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2741.2600
Message-ID: <01c8f9cd$44539780$819c994e@dwvideostationm>
CIALIS is the only ED tablet clinically proven to both work up to
36 hours and work in some men as fast as 15 minutes .
http://reflectionvoice.com
With CIALIS you don’t have to hurry if you don’t want to and you
don’t have to schedule your love making. You and your partner can
relax and take time to choose the moment that’s right for you, whether
it's right now, or later on. You've got time.
[studio42@flatus studio42]$ host 78.153.156.129
Host 129.156.153.78.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 78.153.156.129@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '78.153.156.0 - 78.153.159.255'
inetnum: 78.153.156.0 - 78.153.159.255
netname: INTEK-M-1
descr: INTEK-M LLC
country: RU
admin-c: RB2671-RIPE
tech-c: DE393-RIPE
status: ASSIGNED PA
mnt-by: INTERLAN-MNT
mnt-lower: INTERLAN-MNT
source: RIPE # Filtered
person: Roman Boldin
address: OOO "Intek-M"
phone: +7 495 7801707
abuse-mailbox: boldin@isen.ru
nic-hdl: RB2671-RIPE
mnt-by: MACOMNET-MNT
source: RIPE # Filtered
person: Dmitry Evmeshkin
address: OOO "Intek-M"
phone: +7 495 7801707
abuse-mailbox: kenvis@mail.ru
nic-hdl: DE393-RIPE
mnt-by: MACOMNET-MNT
source: RIPE # Filtered
% Information related to '78.153.128.0/19AS28738'
route: 78.153.128.0/19
descr: Interlan Communications
origin: AS28738
mnt-by: INTERLAN-MNT
source: RIPE # Filtered
% Information related to '78.153.156.0/22AS43865'
route: 78.153.156.0/22
descr: INTEK-M-1
origin: AS43865
mnt-by: INTERLAN-MNT
source: RIPE # Filtered
% Information related to '78.153.156.0/24AS43865'
route: 78.153.156.0/24
descr: INTEK-M-2
origin: AS43865
mnt-by: INTERLAN-MNT
source: RIPE # Filtered
Idiot ISP located. Zombie spotted.
Onto scammer site:
[studio42@flatus studio42]$ host reflectionvoice.com
reflectionvoice.com has address 91.201.48.184
reflectionvoice.com has address 93.95.167.142
reflectionvoice.com has address 118.161.172.13
reflectionvoice.com has address 213.248.16.92
reflectionvoice.com has address 218.254.132.123
reflectionvoice.com has address 220.129.41.164
reflectionvoice.com has address 221.127.40.203
reflectionvoice.com has address 59.20.126.52
reflectionvoice.com has address 59.21.113.226
reflectionvoice.com has address 59.116.0.94
reflectionvoice.com has address 61.93.124.77
reflectionvoice.com has address 61.224.207.186
reflectionvoice.com has address 61.244.145.133
reflectionvoice.com has address 78.106.81.87
reflectionvoice.com has address 78.106.178.54
reflectionvoice.com has address 79.111.237.226
reflectionvoice.com has address 89.169.184.21
reflectionvoice.com has address 89.208.26.244
reflectionvoice.com has address 89.208.65.21
reflectionvoice.com has address 89.242.150.229
Another long day....
[studio42@flatus studio42]$ host 91.201.48.184
Host 184.48.201.91.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 91.201.48.184@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '91.201.48.0 - 91.201.51.255'
inetnum: 91.201.48.0 - 91.201.51.255
netname: COMPLEXTELESYS-NET
descr: Complex Telesystems Ltd.
country: RU
org: ORG-CTL20-RIPE
admin-c: SAS153-RIPE
tech-c: SAS153-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-by: MNT-COMPLEXTELESYS
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-routes: MNT-COMPLEXTELESYS
mnt-domains: MNT-COMPLEXTELESYS
source: RIPE # Filtered
organisation: ORG-CTL20-RIPE
org-name: Complex Telesystems Ltd.
org-type: OTHER
address: 196650, Saint Petersburg, Kolpino, Pavlovskaya st., 1
e-mail: support@itns.ru
mnt-ref: MNT-COMPLEXTELESYS
mnt-by: MNT-COMPLEXTELESYS
source: RIPE # Filtered
person: Smirnov Alexandr Sergeevich
address: 196650, Saint Petersburg, Kolpino, Pavlovskaya st., 1
phone: +7 812 4956928
nic-hdl: SAS153-RIPE
source: RIPE # Filtered
% Information related to '91.201.48.0/22AS42827'
route: 91.201.48.0/22
descr: Izhora Telecom IP-Pool 2
origin: AS42827
mnt-by: MNT-COMPLEXTELESYS
source: RIPE # Filtered
Next:
[studio42@flatus studio42]$ host 93.95.167.142
Host 142.167.95.93.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 93.95.167.142@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '93.95.164.0 - 93.95.167.255'
inetnum: 93.95.164.0 - 93.95.167.255
netname: Elsite-NET
descr: Internet & VoIP service provider
country: RU
admin-c: SBB18-RIPE
tech-c: BVP7-RIPE
tech-c: NNT1-RIPE
status: ASSIGNED PA
mnt-by: CP-MNT
mnt-lower: CP-MNT
mnt-domains: CP-MNT
mnt-routes: CP-MNT
source: RIPE # Filtered
person: Serge B Borodulin
address: C & P Ltd
address: 22-1, Pobedy str.,
address: 144000, Elektrostal, Moscow region
remarks: phone: +7 095 9239163
phone: +7 495 9239163
remarks: phone: +7 09657 23121
phone: +7 49657 23121
remarks: fax-no: +7 095 9239163
fax-no: +7 495 9239163
remarks: fax-no: +7 09657 23121
fax-no: +7 49657 23121
e-mail: bsb@elsite.ru
nic-hdl: SBB18-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes
person: Nicholas N Tretyachenko
address: 144001 Electrostal, Moscow region Russia
address: 13/30 Sovetskaya st. Aelita C&P LTD
e-mail: tkola@rambler.ru
e-mail: tklaus@ok.ru
e-mail: tklaus@elsite.ru
remarks: phone: +7 095 9239163
phone: +7 495 9239163
remarks: phone: +7 09657 23121
phone: +7 49657 23121
phone: +7 903 6124011
remarks: fax-no: +7 095 9239163
fax-no: +7 495 9239163
mnt-by: SOVINTEL-MNT
nic-hdl: NNT1-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes
person: Belintsev V Pavel
address: Computer and Peripherals Ltd.
address: Lenina 30/13 st., Electrostal,
address: 144000, Moscow region, Russia
remarks: phone: +7 09657 70567
phone: +7 49657 70567
remarks: fax-no: +7 09657 70566
fax-no: +7 49657 70566
e-mail: pavel@elsite.ru
nic-hdl: BVP7-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes
% Information related to '93.95.167.0/24AS33993'
route: 93.95.167.0/24
descr: Elsite Autonomous System
origin: AS33993
mnt-by: CP-MNT
source: RIPE # Filtered
Next:
[studio42@flatus studio42]$ host 118.161.172.13
13.172.161.118.in-addr.arpa domain name pointer 118-161-172-13.dynamic.hinet.net
.
[studio42@flatus studio42]$ whois 118.161.172.13@whois.twnic.net
[whois.twnic.net]
Chunghwa Telecom Data Communication Business Group
Netname: HINET-NET
Netblock: 118.161.0.0/16
Administrator contact:
network-adm@hinet.net
Technical contact:
network-adm@hinet.net
Next:
[studio42@flatus studio42]$ host 213.248.16.92
92.16.248.213.in-addr.arpa domain name pointer ppp-4-92.vpdn.msm.ru.
[studio42@flatus studio42]$ whois 213.248.16.92@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '213.248.15.0 - 213.248.17.255'
inetnum: 213.248.15.0 - 213.248.17.255
netname: DINET
descr: customers VPN aggregation
descr: Reutov, Moscow Region, Russia
descr: http://www.msm.ru
country: RU
remarks: INFRA-AW
admin-c: DNO-RIPE
tech-c: DNO-RIPE
status: ASSIGNED PA
mnt-by: DN-MNT
source: RIPE # Filtered
role: Digital Network NOC
address: 13a, Yaroslavskaya st.,
address: Moscow, Russia, 129366
phone: +7 495 723 8332
fax-no: +7 495 723 8332
admin-c: MIF
admin-c: MA5939-RIPE
tech-c: MY270-RIPE
tech-c: EY103-RIPE
nic-hdl: DNO-RIPE
mnt-by: DN-MNT
e-mail: noc@di-net.ru
source: RIPE # Filtered
% Information related to '213.248.0.0/19AS12695'
route: 213.248.0.0/19
descr: Digital Network JSC
descr: Moscow, Russia
descr: http://www.msm.ru
descr: aggregate prefix
origin: AS12695
mnt-by: DN-MNT
source: RIPE # Filtered
% Information related to '213.248.0.0/18AS12695'
route: 213.248.0.0/18
descr: Digital Network JSC
descr: Moscow, Russia
descr: http://www.msm.ru
descr: backup aggregate prefix
origin: AS12695
mnt-by: DN-MNT
source: RIPE # Filtered
% Information related to '213.248.16.0/23AS12695'
route: 213.248.16.0/23
descr: Digital Network JSC
descr: Moscow, Russia
descr: http://www.msm.ru
descr: aggregate prefix
origin: AS12695
mnt-by: DN-MNT
source: RIPE # Filtered
Next:
[studio42@flatus studio42]$ host 218.254.132.123
123.132.254.218.in-addr.arpa domain name pointer cm218-254-132-123.hkcable.com.h
k.
[studio42@flatus studio42]$ whois 218.254.132.123@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 218.252.0.0 - 218.255.255.255
netname: HKCABLE-HK
descr: HK Cable TV Ltd
descr: Cable Multi-Media Services
country: HK
admin-c: AD23-AP
tech-c: AD23-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-ICABLE
remarks: include previous allocations
changed: hm-changed@apnic.net 20030922
status: ALLOCATED PORTABLE
source: APNIC
person: administrator dns
address: 12/F., Cable TV Tower,
address: 9 Hoi Shing Road,
address: Tsuen Wan,
address: N.T.,
address: HK
country: HK
phone: +852-2112-7516
fax-no: +852-2112-7977
e-mail: dnsadmin@cms.hkcable.com
nic-hdl: AD23-AP
mnt-by: MAINT-HK-ICABLE
changed: dnsadmin@cms.hkcable.com 20000811
source: APNIC
Next:
[studio42@flatus studio42]$ host 220.129.41.164
164.41.129.220.in-addr.arpa domain name pointer 220-129-41-164.dynamic.hinet.net
.
[studio42@flatus studio42]$ whois 220.129.41.164@whois.twnic.net
[whois.twnic.net]
Chunghwa Telecom Data communication Business Group
Netname: HINET-NET
Netblock: 220.129.0.0/16
Administrator contact:
cykang@ms1.hinet.net
Technical contact:
cykang@ms1.hinet.net
Next:
[studio42@flatus studio42]$ host 221.127.40.203
Host 203.40.127.221.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 221.127.40.203@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 221.124.0.0 - 221.127.255.255
netname: HGC
descr: Hutchison Global Communications
country: HK
admin-c: IH17-AP
tech-c: IH17-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-HGCADMIN
status: ALLOCATED PORTABLE
remarks: This object can only be modified by APNIC hostmaster
remarks: If you wish to modify this object details please
remarks: send email to hostmaster@apnic.net with your organisation
remarks: account name in the subject line.
changed: andycw@hgc.com.hk 20040209
changed: hm-changed@apnic.net 20040212
source: APNIC
person: ITMM HGC
nic-hdl: IH17-AP
e-mail: hgcnetwork@hgc.com.hk
address: 9/F Low Block ,
address: Hutchison Telecom Tower,
address: 99 Cheung Fai Rd, Tsing Yi,
address: HONG KONG
phone: +852-21229555
fax-no: +852-21239523
country: HK
remarks: Send spam reports to abuse@on-nets.com
remarks: and abuse reports to abuse@on-nets.com
remarks: Please include detailed information and
remarks: times in HKT
changed: hgcnetwork@hgc.com.hk 20050620
mnt-by: MAINT-HK-HGCADMIN
source: APNIC
Next:
[studio42@flatus studio42]$ host 59.20.126.52
Host 52.126.20.59.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 59.20.126.52@whois.krnic.net
[whois.krnic.net]
query: 59.20.126.52
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
The following is organization information that is using the IPv4 address.
IPv4 Address : 59.20.126.0-59.20.126.255
Network Name : KORNET-INFRA000001
Connect ISP Name : KORNET
Registration Date : 20060405
Publishes : N
[ Organization Information ]
Organization ID : ORG1600
Org Name : Korea Telecom
Address : Jungja-dong, Bundang-gu, Sungnam-ci
Zip Code : 463-711
[ Technical Contact Information ]
Org Name : Korea Telecom
Address : Jungja-dong, Bundang-gu, Sungnam-ci
Zip Code : 463-711
E-Mail : kornet_ip@kt.com
--------------------------------------------------------------------------------
If the above contacts are not reachable, please contact following ISP
for further information.
[ ISP IPv4 Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-3674-5708
E-Mail : kornet_ip@kt.com
[ ISP IPv4 Tech Contact Information ]
Name : IP Manager
Phone : +82-2-3674-5708
E-Mail : kornet_ip@kt.com
[ ISP Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-100-0000
E-Mail : abuse@kornet.net
At least I can skip one.
Next:
[studio42@flatus studio42]$ host 59.116.0.94
94.0.116.59.in-addr.arpa domain name pointer 59-116-0-94.dynamic.hinet.net.
[studio42@flatus studio42]$ whois 59.116.0.94@whois.twnic.net
[whois.twnic.net]
Chunghwa Telecom Data Communication Business Group
Netname: HINET-NET
Netblock: 59.116.0.0/16
Administrator contact:
cykang@ms1.hinet.net
Technical contact:
cykang@ms1.hinet.net
Next:
[studio42@flatus studio42]$ host 61.93.124.77
77.124.93.61.in-addr.arpa domain name pointer 061093124077.ctinets.com.
[studio42@flatus studio42]$ whois 61.93.124.77@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 61.93.0.0 - 61.93.255.255
netname: CTIHK
descr: City Telecom (H.K.) Ltd
descr: Internet Service Provider in Hong Kong
country: HK
admin-c: CH134-AP
tech-c: SL113-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-CTI
changed: hostmaster@apnic.net 20020517
status: ALLOCATED PORTABLE
source: APNIC
person: CTINETS HOSTMASTER
address: 15/F, Trans Asia Centre,
address: 18 Kin Hong Street,
address: Kwai Chung, N.T.,
address: Hong Kong
country: HK
phone: +852-3145-5111
fax-no: +852-3145-5267
e-mail: hostmaster@ctihk.com
nic-hdl: CH134-AP
mnt-by: MAINT-HK-CTI
changed: hostmaster@ctihk.com 20000831
source: APNIC
person: Sam Leung
nic-hdl: SL113-AP
e-mail: fionat@ctihk.com
address: 15/F, Trans Asia Centre, 18 Kin Hong Street, Kwai Chung, Hong Kong
address:
address: + Send spam and abuse reports to
address: +
address: + <fionat@ctihk.com>
address: +
phone: +852-3145-5190
fax-no: +852-2199-8010
country: HK
changed: hostmaster@ctihk.com 20040707
mnt-by: MAINT-HK-CTI
source: APNIC
Next:
[studio42@flatus studio42]$ host 61.224.207.186
186.207.224.61.in-addr.arpa domain name pointer 61-224-207-186.dynamic.hinet.net
.
[studio42@flatus studio42]$ whois 61.224.207.186@whois.twnic.net
[whois.twnic.net]
Chunghwa Telecom Data communication Business Group
Netname: HINET-NET
Netblock: 61.224.0.0/16
Administrator contact:
cykang@ms1.hinet.net
Technical contact:
cykang@ms1.hinet.net
I get to skip another one.
Next:
[studio42@flatus studio42]$ host 78.106.81.87
87.81.106.78.in-addr.arpa domain name pointer 78-106-81-87.broadband.corbina.ru.
[studio42@flatus studio42]$ whois 78.106.81.87@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '78.106.0.0 - 78.106.255.255'
inetnum: 78.106.0.0 - 78.106.255.255
netname: CORBINA-BROADBAND
descr: Broadband customers in Moscow
country: RU
admin-c: CORB1-RIPE
tech-c: CORB1-RIPE
status: ASSIGNED PA
mnt-by: RU-CORBINA-MNT
source: RIPE # Filtered
role: CORBINA TELECOM Network Operations
address: CORBINA TELECOM/Internet Network Operations
address: Ryazanskii pr. 30/15
address: Moscow, Russia
address: 109428
phone: +7 495 728 4000
fax-no: +7 495 728 4001
remarks: ----------------------------------------------------------------
---
remarks: Feel free to contact Corbina Telecom NOC to
remarks: resolve networking problems related to Corbina
remarks: ----------------------------------------------------------------
---
remarks: User support, general questions: support@corbina.net
remarks: Routing, peering, security: noc@corbina.net
remarks: Report spam and abuse: abuse@corbina.net
remarks: Mail and news: postmaster@corbina.net
remarks: DNS: hostmaster@corbina.net
remarks: ----------------------------------------------------------------
---
admin-c: DM300-RIPE
admin-c: ARTK83-RIPE
tech-c: DM300-RIPE
tech-c: SM2059-RIPE
tech-c: AS8048-RIPE
tech-c: AZY1-RIPE
nic-hdl: CORB1-RIPE
mnt-by: RU-CORBINA-MNT
abuse-mailbox: abuse@corbina.net
source: RIPE # Filtered
% Information related to '78.106.0.0/15AS8402'
route: 78.106.0.0/15
descr: RU-CORBINA BLOCK #7
origin: AS8402
mnt-by: RU-CORBINA-MNT
source: RIPE # Filtered
% Information related to '78.106.0.0/16AS8402'
route: 78.106.0.0/16
descr: RU-CORBINA BLOCK MOSCOW BROADBAND #2
origin: AS8402
mnt-by: RU-CORBINA-MNT
source: RIPE # Filtered
Whew, another skip.
Next:
[studio42@flatus studio42]$ host 79.111.237.226
Host 226.237.111.79.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 79.111.237.226@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '79.111.0.0 - 79.111.255.255'
inetnum: 79.111.0.0 - 79.111.255.255
org: ORG-TL8-RIPE
netname: RU-TI-20080215
descr: Fairlie Holding & Finance Limited
country: RU
admin-c: TI
tech-c: TI
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: TI-MNT
mnt-routes: TI-MNT
source: RIPE # Filtered
organisation: ORG-TL8-RIPE
org-name: Fairlie Holding & Finance Limited
org-type: LIR
address: NetByNet Holding
Andrey Ryazanov
Varshavskoe highway, 9 bld. 1B
117105 Moscow
RUSSIAN FEDERATION
phone: +7 495 980 2800
fax-no: +7 495 740 4811
admin-c: ALI224-RIPE
admin-c: SGR
mnt-ref: TI-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: TI NOC
address: NetByNet holding
address: Moscow, Russia, 117105
address: Varshavskoe highway, 9 bld. 1B
remarks: *****************************************
remarks: Please send abuse reports to abuse@ti.ru.
remarks: *****************************************
abuse-mailbox: abuse@ti.ru
phone: +7 495 980 2800
fax-no: +7 495 740 4811
admin-c: SGR
admin-c: ALI224-RIPE
tech-c: SGR
nic-hdl: TI
mnt-by: TI-MNT
source: RIPE # Filtered
% Information related to '79.111.0.0/16AS12714'
route: 79.111.0.0/16
descr: TI route block
origin: AS12714
mnt-by: TI-MNT
source: RIPE # Filtered
Next:
[studio42@flatus studio42]$ host 89.169.184.21
Host 21.184.169.89.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 89.169.184.21@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '89.169.0.0 - 89.169.255.255'
inetnum: 89.169.0.0 - 89.169.255.255
org: ORG-ZA3-RIPE
netname: RU-MOSINFOLINE-20060224
descr: ZAO "Infoline"
country: RU
admin-c: IFLN-RIPE
tech-c: IFLN-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: INFOLINE-MNT
mnt-routes: INFOLINE-MNT
source: RIPE # Filtered
organisation: ORG-ZA3-RIPE
org-name: ZAO "Infoline"
org-type: LIR
address: Pushkinskaya, 19 - 24
address: 141092
address: Yubileynyy, Moscow Region
address: Russian Federation
phone: +7 495 974 3623
fax-no: +7 495 755 5344
e-mail: lir-adm@infoline.su
admin-c: AAC-RIPE
admin-c: DIV-RIPE
mnt-ref: INFOLINE-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: INFOLINE Contact Role
address: 8, Sokolova Street
address: 141092 YUBILEYNYY
address: Moscow Region
address: RUSSIA
org: ORG-ZA3-RIPE
phone: +7 495 974 3623
fax-no: +7 495 755 5344
remarks: trouble: +7 496 3009225
e-mail: lir-adm@infoline.su
admin-c: AAC-RIPE
tech-c: DIV-RIPE
tech-c: AAC-RIPE
nic-hdl: IFLN-RIPE
mnt-by: INFOLINE-MNT
source: RIPE # Filtered
% Information related to '89.169.128.0/17AS31514'
route: 89.169.128.0/17
descr: INFOLINE
origin: AS31514
mnt-by: INFOLINE-MNT
source: RIPE # Filtered
Next:
[studio42@flatus studio42]$ host 89.208.26.244
Host 244.26.208.89.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 89.208.26.244@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '89.208.26.0 - 89.208.26.255'
inetnum: 89.208.26.0 - 89.208.26.255
netname: DINET
descr: customers VPN aggregation
descr: Reutov, Moscow Region, Russia
descr: http://www.msm.ru
country: RU
remarks: INFRA-AW
admin-c: DNO-RIPE
tech-c: DNO-RIPE
status: ASSIGNED PA
mnt-by: DN-MNT
source: RIPE # Filtered
role: Digital Network NOC
address: 13a, Yaroslavskaya st.,
address: Moscow, Russia, 129366
phone: +7 495 723 8332
fax-no: +7 495 723 8332
admin-c: MIF
admin-c: MA5939-RIPE
tech-c: MY270-RIPE
tech-c: EY103-RIPE
nic-hdl: DNO-RIPE
mnt-by: DN-MNT
e-mail: noc@di-net.ru
source: RIPE # Filtered
% Information related to '89.208.0.0/19AS12695'
route: 89.208.0.0/19
descr: Digital Network JSC
descr: Moscow, Russia
descr: http://www.msm.ru
descr: aggregate prefix
origin: AS12695
mnt-by: DN-MNT
source: RIPE # Filtered
Next:
[studio42@flatus studio42]$ host 89.208.65.21
Host 21.65.208.89.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 89.208.65.21@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '89.208.65.0 - 89.208.65.255'
inetnum: 89.208.65.0 - 89.208.65.255
netname: ELITSTUDIO
descr: Moscow, Russia
country: RU
admin-c: AAM51-RIPE
tech-c: AAM51-RIPE
status: ASSIGNED PA
mnt-by: DN-MNT
source: RIPE # Filtered
person: Aleksander A. Maslov
address: OOO "ElitStudio"
address: Borysheva str., 23
address: Moscow, Russia
phone: +7 495 139 3427
e-mail: maslov@moscow-telecom.ru
nic-hdl: AAM51-RIPE
mnt-by: DN-MNT
source: RIPE # Filtered
% Information related to '89.208.64.0/19AS12695'
route: 89.208.64.0/19
descr: Digital Network JSC
descr: Moscow, Russia
descr: http://www.msm.ru
descr: aggregate prefix
origin: AS12695
mnt-by: DN-MNT
source: RIPE # Filtered
Last:
[studio42@flatus studio42]$ host 89.242.150.229
Host 229.150.242.89.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 89.242.150.229@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '89.241.0.0 - 89.243.255.255'
inetnum: 89.241.0.0 - 89.243.255.255
netname: OPAL-DSL
descr: Opal Telecom DSL
country: GB
admin-c: PM58-RIPE
admin-c: GD1052-RIPE
tech-c: PM58-RIPE
tech-c: GD1052-RIPE
status: ASSIGNED PA
mnt-by: OPAL-MNT
source: RIPE # Filtered
person: Phill Magill
address: Opal Telecommunications Plc
address: Northbank Industrial Estate
address: Irlam
address: Manchester
address: M44 5BL
address: United Kingdom
phone: +44 161 222-2000
fax-no: +44 161 222-2008
e-mail: pmagill@opaltelecom.co.uk
nic-hdl: PM58-RIPE
mnt-by: OPAL-MNT
source: RIPE # Filtered
person: Gavin Ditchfield
address: Opal Telecommunications Plc
address: Northbank Industrial Estate
address: Irlam
address: Manchester
address: M44 5BL
address: United Kingdom
phone: +44 161 222-2000
fax-no: +44 161 222-2008
e-mail: gditchfield@opaltelecom.co.uk
nic-hdl: GD1052-RIPE
mnt-by: OPAL-MNT
source: RIPE # Filtered
% Information related to '89.240.0.0/14AS13285'
route: 89.240.0.0/14
descr: Opal-Net Autonomous System
origin: AS13285
mnt-by: OPAL-MNT
source: RIPE # Filtered
% Information related to '89.242.0.0/15AS13285'
route: 89.242.0.0/15
descr: Opal-Net Autonomous System
origin: AS13285
mnt-by: OPAL-MNT
source: RIPE # Filtered
Just so you can enjoy the scummy nature, let's compare:
First host resolve:
[studio42@flatus studio42]$ host reflectionvoice.com
reflectionvoice.com has address 91.201.48.184
reflectionvoice.com has address 93.95.167.142
reflectionvoice.com has address 118.161.172.13
reflectionvoice.com has address 213.248.16.92
reflectionvoice.com has address 218.254.132.123
reflectionvoice.com has address 220.129.41.164
reflectionvoice.com has address 221.127.40.203
reflectionvoice.com has address 59.20.126.52
reflectionvoice.com has address 59.21.113.226
reflectionvoice.com has address 59.116.0.94
reflectionvoice.com has address 61.93.124.77
reflectionvoice.com has address 61.224.207.186
reflectionvoice.com has address 61.244.145.133
reflectionvoice.com has address 78.106.81.87
reflectionvoice.com has address 78.106.178.54
reflectionvoice.com has address 79.111.237.226
reflectionvoice.com has address 89.169.184.21
reflectionvoice.com has address 89.208.26.244
reflectionvoice.com has address 89.208.65.21
reflectionvoice.com has address 89.242.150.229
Now after resolving those or at least investigating:
[studio42@flatus studio42]$ host reflectionvoice.com
reflectionvoice.com has address 59.21.113.226
reflectionvoice.com has address 59.116.0.94
reflectionvoice.com has address 61.93.124.77
reflectionvoice.com has address 61.224.207.186
reflectionvoice.com has address 61.231.83.55
reflectionvoice.com has address 61.244.145.133
reflectionvoice.com has address 78.106.81.87
reflectionvoice.com has address 78.106.178.54
reflectionvoice.com has address 79.111.237.226
reflectionvoice.com has address 85.183.153.174
reflectionvoice.com has address 88.134.175.249
reflectionvoice.com has address 89.169.184.21
reflectionvoice.com has address 89.208.65.21
reflectionvoice.com has address 118.161.172.13
reflectionvoice.com has address 203.80.202.154
reflectionvoice.com has address 213.248.16.92
reflectionvoice.com has address 219.241.141.84
reflectionvoice.com has address 220.129.41.164
reflectionvoice.com has address 221.127.40.203
reflectionvoice.com has address 59.20.126.52
Randomly rotating DNS for zombie'd sites.
Onto the whois data:
[studio42@flatus studio42]$ whois reflectionvoice.com
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: REFLECTIONVOICE.COM
Registrar: HICHINA ZHICHENG TECHNOLOGY LTD.
Whois Server: grs.hichina.com
Referral URL: http://www.net.cn
Name Server: NS0.OKAREYOU123.COM
Name Server: NS0.RENTHANKS7895.COM
Name Server: NS0.WE-CARECEDD.COM
Name Server: NS0.WMZEGO245ER.COM
Status: ok
Updated Date: 07-aug-2008
Creation Date: 05-aug-2008
Expiration Date: 05-aug-2009
>>> Last update of whois database: Fri, 08 Aug 2008 20:32:24 EDT <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[grs.hichina.com]
Domain Name ..................... reflectionvoice.com
Name Server ..................... ns0.renthanks7895.com
ns0.okareyou123.com
ns0.we-carecedd.com
ns0.wmzego245er.com
Registrant ID ................... hc146022836-cn
Registrant Name ................. wenwen zhang
Registrant Organization ......... zhang wenwen
Registrant Address .............. hubei
Registrant City ................. hubei
Registrant Province/State ....... hubei
Registrant Postal Code .......... 434000
Registrant Country Code ......... CN
Registrant Phone Number ......... +86.07168128558 -
Registrant Fax .................. +86.07168128558 -
Registrant Email ................ 9819970850@vip.sina.com
Administrative ID ............... hc146022836-cn
Administrative Name ............. wenwen zhang
Administrative Organization ..... zhang wenwen
Administrative Address .......... hubei
Administrative City ............. hubei
Administrative Province/State ... hubei
Administrative Postal Code ...... 434000
Administrative Country Code ..... CN
Administrative Phone Number ..... +86.07168128558 -
Administrative Fax .............. +86.07168128558 -
Administrative Email ............ 9819970850@vip.sina.com
Billing ID ...................... hichina001-cn
Billing Name .................... hichina
Billing Organization ............ HiChina Web Solutions Limited
Billing Address ................. 3/F., HiChina Mansion
No.27 Gulouwai Avenue
Dongcheng District
Billing City .................... Beijing
Billing Province/State .......... Beijing
Billing Postal Code ............. 100011
Billing Country Code ............ CN
Billing Phone Number ............ +86.01064242299 -
Billing Fax ..................... +86.01064258796 -
Billing Email ................... domainadm@hichina.com
Technical ID .................... hichina001-cn
Technical Name .................. hichina
Technical Organization .......... HiChina Web Solutions Limited
Technical Address ............... 3/F., HiChina Mansion
No.27 Gulouwai Avenue
Dongcheng District
Technical City .................. Beijing
Technical Province/State ........ Beijing
Technical Postal Code ........... 100011
Technical Country Code .......... CN
Technical Phone Number .......... +86.01064242299 -
Technical Fax ................... +86.01064258796 -
Technical Email ................. domainadm@hichina.com
Expiration Date ................. 2009-08-05 15:04:35
That scummy DNS looks familiar:
[studio42@flatus studio42]$ host ns0.OKAREYOU123.COM
ns0.OKAREYOU123.COM has address 77.239.232.105
[studio42@flatus studio42]$ whois 77.239.232.105@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '77.239.224.0 - 77.239.255.255'
inetnum: 77.239.224.0 - 77.239.255.255
netname: RU-SATEL-20070312
descr: Satel Ltd
country: RU
org: ORG-SA474-RIPE
admin-c: UD104-RIPE
tech-c: UD104-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: MNT-SATEL
mnt-routes: MNT-SATEL
source: RIPE # Filtered
organisation: ORG-SA474-RIPE
org-name: Satel
org-type: LIR
address: Satel
TAVRICHESKAYA 45A
191015 ST PETERSBURG
RUSSIAN FEDERATION
phone: +7 812 7033773
fax-no: +7 812 335 3977
e-mail: noc@satel.spb.ru
admin-c: UD104-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: MNT-SATEL
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
person: Udaltsov Dmitry
address: Tavricheskaya 45A
address: 191015 St.-Petersburg
address: Russia
phone: +7 812 332 2233
fax-no: +7 812 3320597
e-mail: udaltsov@satel-telecom.ru
nic-hdl: UD104-RIPE
source: RIPE # Filtered
% Information related to '77.239.224.0/19AS42563'
route: 77.239.224.0/19
descr: Satel Telecomunications Ltd.
origin: AS42563
mnt-by: MNT-SATEL
source: RIPE # Filtered
[studio42@flatus studio42]$ whois OKAREYOU123.COM
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: OKAREYOU123.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com
Name Server: NS2.XINNET.CN
Name Server: NS2.XINNETDNS.COM
Status: clientHold
Status: clientUpdateProhibited
Updated Date: 30-jul-2008
Creation Date: 02-jun-2008
Expiration Date: 02-jun-2009
>>> Last update of whois database: Fri, 08 Aug 2008 20:34:57 EDT <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.paycenter.com.cn]
Sounds familiar, but has relocatd an dis having some other technical problems!
Next scummy DNS:
[studio42@flatus studio42]$ host ns0.RENTHANKS7895.COM
ns0.RENTHANKS7895.COM has address 61.18.180.230
[studio42@flatus studio42]$ whois 61.18.180.230@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 61.18.0.0 - 61.18.255.255
netname: HKCABLE-HK
descr: HK Cable TV Ltd
descr: Cable Multi-Media Services
country: HK
admin-c: AD23-AP
tech-c: AD23-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-HK-ICABLE
changed: hostmaster@apnic.net 20001213
status: ALLOCATED PORTABLE
source: APNIC
person: administrator dns
address: 12/F., Cable TV Tower,
address: 9 Hoi Shing Road,
address: Tsuen Wan,
address: N.T.,
address: HK
country: HK
phone: +852-2112-7516
fax-no: +852-2112-7977
e-mail: dnsadmin@cms.hkcable.com
nic-hdl: AD23-AP
mnt-by: MAINT-HK-ICABLE
changed: dnsadmin@cms.hkcable.com 20000811
source: APNIC
[studio42@flatus studio42]$ whois RENTHANKS7895.COM
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: RENTHANKS7895.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com
Name Server: NS2.XINNET.CN
Name Server: NS2.XINNETDNS.COM
Status: clientHold
Status: clientUpdateProhibited
Updated Date: 30-jul-2008
Creation Date: 02-jun-2008
Expiration Date: 02-jun-2009
>>> Last update of whois database: Fri, 08 Aug 2008 20:36:29 EDT <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.paycenter.com.cn]
Hmm, seems despite the scumminess and partial shut downs, they still
seem to be able to do damage.
Next:
[studio42@flatus studio42]$ host ns0.WE-CARECEDD.COM
ns0.WE-CARECEDD.COM has address 67.184.29.131
[studio42@flatus studio42]$ whois 67.184.29.131@whois.arin.net
[whois.arin.net]
Comcast Cable Communications, Inc. COMCAST (NET-67-160-0-0-1)
67.160.0.0 - 67.191.255.255
Comcast Cable Communications, Inc. ILLINOIS-22 (NET-67-184-0-0-1)
67.184.0.0 - 67.184.255.255
# ARIN WHOIS database, last updated 2008-08-07 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
[studio42@flatus studio42]$ whois WE-CARECEDD.COM
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: WE-CARECEDD.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com
Name Server: NS2.XINNET.CN
Name Server: NS2.XINNETDNS.COM
Status: clientHold
Status: clientUpdateProhibited
Updated Date: 30-jul-2008
Creation Date: 02-jun-2008
Expiration Date: 02-jun-2009
>>> Last update of whois database: Fri, 08 Aug 2008 20:42:07 EDT <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.paycenter.com.cn]
The Data in Paycenter's WHOIS database is provided by Paycenter
for information purposes, and to assist persons in obtaining
information about or related to a domain name registration
record.
Paycenter does not guarantee its accuracy. By submitting
a WHOIS query, you agree that you will use this Data only
for lawful purposes and that, under no circumstances will
you use this Data to:
(1) allow, enable, or otherwise support the transmission
of mass unsolicited, commercial advertising or solicitations
via e-mail (spam); or
(2) enable high volume, automated, electronic processes that
apply to Paycenter or its systems.
Paycenter reserves the right to modify these terms at any time.
By submitting this query, you agree to abide by this policy.
Domain Name:we-carecedd.com
Registrant:
luo rui
xichang
615212
Administrative Contact:
luo rui
luo rui
xichang
xichang Beijing 615212
CN
tel: 431 2196356
fax: 431 2196356
luorui@yahoo.com
Technical Contact:
luo rui
luo rui
xichang
xichang Beijing 615212
CN
tel: 2196356
fax: 2196356
luorui@yahoo.com
Billing Contact:
luo rui
luo rui
xichang
xichang Beijing 615212
CN
tel: 2196356
fax: 2196356
luorui@yahoo.com
Registration Date: 2008-06-03
Update Date: 2008-06-03
Expiration Date: 2009-06-03
Primary DNS: ns2.xinnetdns.com 210.51.170.48
Secondary DNS: ns2.xinnet.cn 210.51.170.67
And last and certainly just as sucky:
[studio42@flatus studio42]$ whois WMZEGO245ER.COM
[whois.crsnic.net]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Domain Name: WMZEGO245ER.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com
Name Server: NS2.XINNET.CN
Name Server: NS2.XINNETDNS.COM
Status: clientHold
Status: clientUpdateProhibited
Updated Date: 30-jul-2008
Creation Date: 02-jun-2008
Expiration Date: 02-jun-2009
>>> Last update of whois database: Sat, 09 Aug 2008 00:43:08 UTC <<<
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.
The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
[whois.paycenter.com.cn]
[studio42@flatus studio42]$ host ns0.WMZEGO245ER.COM
ns0.WMZEGO245ER.COM has address 59.20.126.52
[studio42@flatus studio42]$ whois 59.20.126.52@whois.krnic.net
[whois.krnic.net]
query: 59.20.126.52
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
The following is organization information that is using the IPv4 address.
IPv4 Address : 59.20.126.0-59.20.126.255
Network Name : KORNET-INFRA000001
Connect ISP Name : KORNET
Registration Date : 20060405
Publishes : N
[ Organization Information ]
Organization ID : ORG1600
Org Name : Korea Telecom
Address : Jungja-dong, Bundang-gu, Sungnam-ci
Zip Code : 463-711
[ Technical Contact Information ]
Org Name : Korea Telecom
Address : Jungja-dong, Bundang-gu, Sungnam-ci
Zip Code : 463-711
E-Mail : kornet_ip@kt.com
--------------------------------------------------------------------------------
If the above contacts are not reachable, please contact following ISP
for further information.
[ ISP IPv4 Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-3674-5708
E-Mail : kornet_ip@kt.com
[ ISP IPv4 Tech Contact Information ]
Name : IP Manager
Phone : +82-2-3674-5708
E-Mail : kornet_ip@kt.com
[ ISP Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-100-0000
E-Mail : abuse@kornet.net
