To: Lou Farrell who wrote (221 ) 4/4/1999 2:19:00 PM From: jjs64 Respond to of 10354
More Evidence of ZiaSun involvement in spamming, this time to promote Momentum Finance (aka as Mfinance). Now, I don't expect everyone to be able to decipher the following, unless you have some UNIX knowledge. Perhaps a patient third party would be kind enough to explain it to the newbies. Courtesy of some friends on USENET, here is evidence linking Momentum / Anthony Tobin / ZiaSun to the spamming of newsgroups with ads for mfinance. The typical spamvertisement is posted via imsbiz.com/hkt.net and looks like this: From: mf@pinmail.com Newsgroups: misc.invest.stocks Subject: Win $5,000 - Momentum Finance NNTP-Posting-Host: 202.84.175.165 Message-ID: <3623544a.0@news01.imsbiz.com> Path: news3.enter.net!newsserver.jvnc.net!newshub.northeast.verio.net!news + -peer.gip.net!news.gsl.net!gip.net!newsfeed.cwix.com!202.84.255.3! + news.hkt.net!news01.imsbiz.com!202.84.175.165 Remember this number... MOMENTUM FINANCE Global markets - Free financial data and news. PLUS the chance to win a $5,000 on-line stock trading account.mfinance.com Now, to find out the source of the spam, we need to find out who is 202.84.175.165 (This is called a Reverse DNS Lookup, for the newbies, and so FG and Lou can follow along) : Registrant: : Momentum Internet Inc. (MOMENTUMPLUS-DOM) : PO Box 71, Craigmuir Chambers, Road : Town : Tortola, n/a n/a : VG : momentum-hk.com : origin = momentum.com.hk : mail addr = gdaley.momentum.com.hk : momentum-hk.com nameserver = ws1.momentum-hk.com : momentum-hk.com nameserver = ns2.momentum.com.hk : ws1.momentum-hk.com internet address = 204.254.71.158 : ns2.momentum.com.hk internet address = 202.84.175.165 Hey, look at that! I think we are on to something here....Let's go a little further, using a whois lookup. |usr10# whois -h whois.apnic.net 202.84.175.165 | |inetnum: 202.84.175.160 - 202.84.175.191 |netname: MOMENTUM-HK |descr: Momentum Campaigns Ltd |descr: 17/F, 53-55 Lockhart Road |descr: Wan Chai |descr: Hong Kong |country: HK |source: APNIC |person: Anthony Tobin (Oh My Gosh! Its the CEO of ZSUN!) |address: 17/F, 53-55 Lockhart Road |address: Wan Chai |address: HK |phone: +852-28778097 |fax-no: +852-28778016 |e-mail: tony@pinmail.com |nic-hdl: AT12-AP |notify: dbmon@apnic.net |mnt-by: MAINT-HKT |source: APNIC |person: Graham Daley |address: 17/F, 53-55 Lockhart Road |address: Wan Chai |address: Hong Kong |phone: +852-28778059 |fax-no: +852-28778016 |e-mail: gdaley@pinmail.com Buyer Beware!