Re: [CH] chile-heads Get the Cash you need now!!!

The Old Bear (oldbear@arctos.com)
Tue, 04 Aug 1998 08:44:53 -0400 

In Chile-Heads Digest, v.5 #4, "fastfund@yahoo.com" wrote:

>Date: Mon, 03 Aug 1998 10:25:15 -0500
>From: fastfund@yahoo.com
>Subject: [CH] chile-heads Get the Cash you need now!!!
>
>Hello chile-heads 
>
>GET THE MONEY YOU NEED RIGHT NOW!
>. . .

It may or may not do any good to write or contact the organization 
running "fortunecity.com" domain about this spam.  They look legit 
and may just have been being duped by one of their users.  But 
here is the info anyway:

        Software Direct (FORTUNECITY-DOM)
        139 Kensington High Street
        London, W8 6SU   UK

        Domain Name: FORTUNECITY.COM

        Administrative Contact:
           Jones, Richard  (RJ694)  richard@SOFTWARE-DIRECT.COM
           +44 0 7010 709860 (FAX) +44 0 7010 709858
        Technical Contact, Zone Contact:
           Hostmaster  (HO1080-ORG)  hostmaster@FORTUNECITY.COM
           +44 171 700 1617
        Billing Contact:
           Jones, Richard  (RJ694)  richard@SOFTWARE-DIRECT.COM
           +44 0 7010 709860 (FAX) +44 0 7010 709858

        DNS0.FORTUNECITY.NET         195.224.181.32
        DNS3.FORTUNECITY.COM         130.244.127.114

Doing a traceroute on their name service, one finds that their 
connectivity is via Xara Networks:

    traceroute to dns0.fortunecity.net (195.224.181.32)
     . . . . .
      8  fd2-0-llb-x-me.me1.core.rtr.xara.net (192.41.177.215)
      9  at5-0-llb-d200-me1.TH1.core.rtr.xara.net (194.143.164.149)
     10  fd5-1-0-llb-x-many.TH7.core.rtr.xara.net (194.143.163.34)
     11  se0-xfr-d279-th7.fortunecity.cust.rtr.xara.net
     12  dns0.fortunecity.net (195.224.181.32)

        Xara Networks Ltd (XARA2-DOM)
        Gaddesden Place
        Hemel Hempstead, Hertfordshire HP2 6EX  UK

        Domain Name: XARA.NET

        Administrative Contact:
           Bligh, Alex  (AB446)  amb@XARA.NET
           +44 1442 351100 (FAX) +44 1442 350010
        Technical Contact, Zone Contact:
           GX Networks Hostmaster  (XNN-ORG)  hostmaster@GXN.NET
           +44 181 957 1250
           Fax- +44 181 957 1240


But what is more interesting is doing a traceroute to their 
www.fortunecity.com web server:

   traceroute to www.fortunecity.com (204.198.135.20):
     . . . . .
      5  h8-1-0.atlanta1-br1.bbnplanet.net
      6  s4-0-0.vienna1-br2.bbnplanet.net
      7  p1-0-0.vienna1-br1.bbnplanet.net
      8  p1-0-0.chantilly-colo1.bbnplanet.net
      9  fa1-0.router01.cva-colo.bbnplanet.net 
     10  * 204.198.135.20 (204.198.135.20)

Which shows that their server is being hosted by the very legit 
BBNplanet (a GTE/BellAtlantic Company) and is alive and well not 
in the UK, but in Colorado.

I am sure that Chile-Head mail to BBNplanet will receive prompt 
and courteous attention.  I suggest that anyone who cares to write 
strongly suggest that BBN ask their customer (fortunecity) to do a 
better job of monitoring their users' sites. ;)

            BBNplanet
            150 CambridgePark Drive
            Cambridge, MA 02140
            (617) 873-2000 (phone)
            (617) 873-5011 (fax)

            ops@bbnplanet.com  and  abuse@bbnplanet.com

Unfortunately, because the Chile-Heads Digest mailing list software 
strips the full headers off of the actual spam email, it's impossible 
to tell the origin of the spam itself.

Cheers,
The Old Bear