Status: U
Return-Path: <xxxhottxxx@gmx.net>
Received: from ool-4356a00f.dyn.optonline.net
([67.86.160.15]) by sparrow.mail.pas.earthlink.net (EarthLink SMTP
Server) with SMTP id 18mSrf52J3NZFjV0 for <wlevinso@ix.netcom.com>;
Fri, 13 Dec
2002 08:13:17 -0800 (PST)
Received: from relay.seanet.ru (relay.seanet.ru
[195.5.158.34]) by lensveld.com (8.10.2/8.10.2) with SMTP id gAPHcX700601
for <wlevinso ix.netcom.com>; Fri, 13 Dec 2002 16:13:46 +0000
Received: from eposta.kablonet.com.tr (unknown
[62.248.102.66]) by n2.peterstar.net (8.11.6/8.11.4) with SMTP id gAR8vj815706
for <wlevinso ix.netcom.com>; Fri, 13 Dec 2002 16:13:46 +0000
Received: from unknown (HELO manch.terra.net.lb)
(212.98.130.3) by master.overseas.spb.ru (8.9.3/8.9.3) with ESMTP id NAA62560;
for <wlevinso ix.netcom.com>; Fri, 13 Dec 2002 16:13:46 +0000
From: "awiper" <xxxhottxxx@gmx.net>
To: "" <wlevinso ix.netcom.com>
Subject: Free DVD
<==== see statement at right
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer:
Mozilla 4.75 [en] (Win95; U)
Date: Fri, 13 Dec 2002 16:13:46 +0000
Message-ID:
<36894D0B18FCD6118FD000B0D078BB59377E00@DW_ANTWERP_II>
Mime-Version: 1.0
Content-Type:
text/plain; charset="us-ascii"
X-Mozilla-Status: 8001
X-Mozilla-Status2: 00000000
X-UIDL: 18mSrf52J3NZFjV0.0
*****100% FREE ADULT DVD & VIDEOS***500+ choices ************
Celebrities in compromising positions!
[various obsceneties deleted]
Asians, Ebony, Farm Girls and VIRGINS!!
http://pornadultdvds.com/store15/index.htm
<===== TARGET
31472-30428-21903
10 (A.1)
DISSEMINATION OF EXPLICIT SEXUAL MATERIAL VIA AN
11 ELECTRONIC COMMUNICATION.--NO PERSON,
KNOWING THE CONTENT OF THE
12 ADVERTISEMENT TO BE EXPLICIT SEXUAL MATERIALS,
AS DEFINED IN
13 SUBSECTION (C)(1) AND (C)(2), SHALL TRANSMIT
OR CAUSE TO BE
14 TRANSMITTED AN UNSOLICITED ADVERTISEMENT IN
AN ELECTRONIC
15 COMMUNICATION AS DEFINED IN SECTION 5702
(RELATING TO
16 DEFINITIONS) TO ONE OR MORE PERSONS WITHIN
THIS COMMONWEALTH
17 THAT CONTAINS EXPLICIT SEXUAL MATERIALS
AS DEFINED IN
18 SUBSECTIONS (C)(1) AND (C)(2) WITHOUT
INCLUDING IN THE
19 ADVERTISEMENT THE TERM "ADV-ADULT"
AT THE BEGINNING OF THE
20 SUBJECT LINE OF THE ADVERTISEMENT.
See the subject line at left. As for the phony address:
28 (l) Penalty for attempt to evade prosecution.--Any
person
29 who violates subsection (a)(10) (A.1) and attempts to
avoid <--
30 prosecution by knowingly including false or misleading
1 information in the return address portion of the electronic
<--
2 COMMUNICATIONS such that the recipient would be
unable
3 to send a reply message to the original, authentic sender shall,
4 in addition to any other penalty imposed, upon conviction,
be
5 sentenced to pay a fine of not less than $100 nor more
than $500
6 per message or to imprisonment for not more than 90
days, or
7 both, for a first offense and a fine of not less
than $500 nor
8 more than $1,000 or to imprisonment for not more than one year,
9 or both, for a second OR SUBSEQUENT offense.
It's possible that the spam has to include explicit material (like photos) as opposed to linking to it, but this might be usable against some spammers.
This gives you very extensive information on the spammer, including the domain's IP address and WhoIs lookup.
whois -h magic pornadultdvds.com
pornadultdvds.com is registered with ABACUS AMERICA, INC. DBA NAMES4EVER - redirecting to whois.names4ever.com
whois -h whois.names4ever.com pornadultdvds.com
...
Registrant:
R T H, Inc.
PO Box 801123
Aventura, FL 33180
United States
Domain Name: pornadultdvds.com
Administrative Contact:
G M (2GZKP)
info@ahugepenis.com [I'll grant that the guy is a BIG PRICK]
R T H, Inc.
PO Box 801123
Aventura,
FL 33180
United States
Phone: 786-417-3506
Technical Contact:
G M (2GZKP)
info@ahugepenis.com
R T H, Inc.
PO Box 801123
Aventura,
FL 33180
United States
Phone: 786-417-3506
Billing Contact:
G M (2GZKP)
info@ahugepenis.com
R T H, Inc.
PO Box 801123
Aventura,
FL 33180
United States
Phone: 786-417-3506
Record last updated on 2002-11-21
15:18:10.453
Record created on 2002-11-18
16:10:35.673
Record expires on 2003-11-18
16:10:35.673
Domain servers in listed order:
ns1.fakinbacon.com
<==== See if it has an abuse address
ns2.fakinbacon.com
Registration Service Provider: R T H, Inc.
info "at" bozombo.com
(305) 9818525
....
]Sam Spade automatically performs a traceroute as well.]
traceroute pornadultdvds.com
pornadultdvds.com resolves to 64.70.23.243
Do not contact either Los Nettos (ln.net) or Centergate Research Group (centergate.com) based on the results of this traceroute.
Your computer, or the tracing computer (at
ln.net) is at the top.
Do not complain to the service providers at the
top!
3 130.152.180.21
3.603 ms isi-1-lngw2-atm.ln.net [AS226] Los Nettos origin AS
4 198.172.117.161
9.217 ms ge-2-3-0.a02.lsanca02.us.ra.verio.net [AS2914] Verio
5 129.250.29.136
5.580 ms xe-1-0-0.r21.lsanca01.us.bb.verio.net [AS2914] Verio
6 129.250.2.187
11.784 ms p16-1-1-0.r21.snjsca04.us.bb.verio.net [AS2914] Verio
7 129.250.2.198
14.569 ms p16-1-1-2.r21.plalca01.us.bb.verio.net [AS2914] Verio
8 129.250.3.85
11.809 ms p16-1-0-0.r00.plalca01.us.bb.verio.net [AS2914] Verio
9 129.250.9.58
11.819 ms p4-0.cw.plalca01.us.bb.verio.net [AS2914] Verio
10 208.172.146.101
15.150 ms agr1-loopback.SantaClara.cw.net
11 208.172.156.165
16.502 ms dcr2-so-6-0-0.SantaClara.cw.net
12 208.172.34.99
15.244 ms dcr1-loopback.Anaheim.cw.net
13 208.172.44.98
15.341 ms dhr1-pos-0-0.Elsegundola1.cw.net
14 216.34.192.33
16.383 ms dcr01-g2-0.elsg01.exodus.net (DNS error) [AS3967] Exodus
Communications
15 216.34.192.243
18.737 ms csr12-ve242.elsg01.exodus.net(DNS
error) [AS3967] Exodus Communications
16 64.70.23.243
15.525 ms DNS error [AS3967] Exodus Communications
The spammer is at the bottom. In this case,
complain to abuse "at" exodus.net.
Summary: complaints were sent to abuse "at" exodus.net and fakinbacon.com, and postmaster "at" fakinbacon.com
Fakinbacon.com was undeliverable, but abuse "at" exodus.net works.
Checking server [whois.crsnic.net]
Checking server [whois.names4ever.com]
In some cases, it is worth checking to see if the registrar has an abuse (spamming) policy. This one does not, but godaddy.com may revoke proven spammers' domain name registrations.
Results:
...
Registrar for .com .org and .net domain names.
Registrant:
R T H, Inc.
PO Box 801123
Aventura, FL 33180
United States
Domain Name: pornadultdvds.com
Administrative Contact:
G M (2GZKP) info@ahugepenis.com
[The BIG PRICK again]
R T H, Inc.
PO Box 801123
Aventura, FL 33180
United States
Phone: 786-417-3506
Administrative Contact:
G M (2GZKP)
info@ahugepenis.com
R T H, Inc.
PO Box 801123
Aventura,
FL 33180
United States
Phone: 786-417-3506
Technical Contact:
G M (2GZKP)
info@ahugepenis.com
R T H, Inc.
PO Box 801123
Aventura,
FL 33180
United States
Phone: 786-417-3506
Billing Contact:
G M (2GZKP)
info@ahugepenis.com
R T H, Inc.
PO Box 801123
Aventura,
FL 33180
United States
Phone: 786-417-3506
Record last updated on 2002-11-21
15:18:10.453
Record created on 2002-11-18
16:10:35.673
Record expires on 2003-11-18
16:10:35.673
Domain servers in listed order:
ns1.fakinbacon.com
ns2.fakinbacon.com
Registration Service Provider: R T H, Inc.
info@bozombo.com
(305) 9818525
You can actually do a traceroute on the doman name itself:
traceroute to PORNADULTDVDS.COM (64.70.23.243), 30 hops
max, 40 byte packets
1 manny.Firewall.Opus1.COM (192.245.12.95)
4.883 ms
2 Opus-GW (207.182.35.49) 17.577 ms
3 66.62.80.165 (66.62.80.165) 28.319
ms
4 lax1-core-02.tamerica.net (66.62.5.130)
49.802 ms
5 slc1-core-01.tamerica.net (66.62.3.6)
47.848 ms
6 slc1-core-02.tamerica.net (66.62.3.33)
54.684 ms
7 den1-core-01.tamerica.net (66.62.3.22)
51.754 ms
8 den1-edge-01.tamerica.net (66.62.4.3)
54.684 ms
9 den-core-01.tamerica.net (205.171.4.177)
94.721 ms
10 * * *
11 * * *
12 acr2.Denver.cw.net (208.172.162.62) 52.731
ms
13 * * *
14 dcr1-so-0-2-0.Anaheim.cw.net (208.172.44.9)
86.908 ms
15 dhr1-pos-0-0.Elsegundola1.cw.net (208.172.44.98)
88.861 ms
16 dcr01-g2-0.elsg01.exodus.net (216.34.192.33)
89.838 ms
17 csr12-ve242.elsg01.exodus.net
(216.34.192.243)
90.814 ms
18 64.70.23.243 (64.70.23.243) 91.791 ms
