ScamFraudAlert  


Go Back   ScamFraudAlert > Identity Theft- Phishing - Spam - BlackMails
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Identity Theft- Phishing - Spam - BlackMails Are you a victim of Identity Theft? Please share your experience or nightmare with us. This is a CRIME and the PUBLIC NEEDS TO KNOW how to AVOID or RESOLVE THIS

   

Citizen Media Law Project: Legal Resources for Citizen Journalists
Reply
 
LinkBack Thread Tools Rate Thread Display Modes
  #1  
Old 08-22-08, 05:42 PM
ScamBuster's Avatar
Admin Assistance
 
Join Date: Mar 2005
Location: Washington
Age: 30
Posts: 5,646
Rep Power: 10
ScamBuster is on a distinguished road
WHOIS - masterhost.ru

WHOIS - masterhost.ru
mail iconEmail link to results
Generated by DNS Network Tools: Network Monitoring and DNS Monitoring from DNSstuff


Found WHOIS server for .ru: whois.ripn.ru. Looking up.


% By submitting a query to RIPN's Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% Terms of Use (in English).

domain: MASTERHOST.RU
type: CORPORATE
nserver: ns.masterhost.ru. 217.16.20.30
nserver: ns1.masterhost.ru. 217.16.16.30
nserver: ns2.masterhost.ru. 217.16.22.30
state: REGISTERED, DELEGATED
org: ZAO MASTERHOST
phone: +7 495 7729720
phone: +7 800 2009720
fax-no: +7 495 7729723
e-mail: ****@masterhost.ru
registrar: REGISTRATOR-REG-RIPN
created: 1999.12.15
paid-till: 2009.01.01
source: TC-RIPN


Last updated on 2008.08.23 01:28:30 MSK/MSD

masterhost.ru is a domain controlled by three nameservers at masterhost.ru themselves. All of them are on the same IP network. Incoming mail for masterhost.ru is handled by one mailserver which are also at masterhost.ru. masterhost.ru has two IP records. They are on the same IP network. standartpark.net use this as a nameserver. bzc.ru, 1sb.ru, c-e.ru, vse.ru, drw.ru and at least 100 other hosts share nameservers with this domain. mhost.ru, spylog.ru, spylog.com, spylog.net, openstat.net and at least eight other hosts share mailservers with this domain. ns.masterhost.ru, ac5.masterhost.ru, ac7.masterhost.ru, fe9.masterhost.ru, cm2.masterhost.ru and at least 100 other hosts are subdomains to this hostname.

ase record name ip reverse route as
masterhost.ru a 217.16.22.65 fea.masterhost.ru 217.16.16.0/20 .masterhost AS25532 MASTERHOST AS masterhost autonomous system Moscow, Russia
217.16.22.66 feb.masterhost.ru
ns ns.masterhost.ru 217.16.20.30 -
ns1.masterhost.ru 217.16.16.30 -
ns2.masterhost.ru 217.16.22.30 -
mx cmx1.masterhost.ru 83.222.22.202 - 83.222.0.0/19 .masterhost
ru ns ns.ripn.net 194.85.105.17 - 194.85.105.0/24 RELARN-MSK Research & Education Network AS3316 RELARN MSK Research & Education Network Moscow Department Moscow, Russia
ns2.ripn.net 194.226.96.30 - 194.226.96.0/24 RIPN AS5568 RBNet Russian Backbone Network
ns5.msk-ix.net 193.232.128.6 - 193.232.128.0/24 Moscow Network Access Point Russian Institute for Public Networks AS43832 RIPN NS5 RU MSK Russian Institute for Public Network
ns9.ripn.net 194.85.252.62 - 194.85.252.0/24 RIPN-RU-NET NS9.RIPN.NET origin AS AS42385 RIPN RU Russian Institute for Public Network
sunic.sunet.se 192.36.125.2 - 192.36.125.0/24 SUNET-BACKBONE AS1653 SUNET Swedish University Network
ns2.nic.fr 192.93.0.4 - 192.93.0.0/24 NIC-FR-DNS-SITE-ST-QUENTIN AS2485 FRNIC SITE AFNIC immeuble international 2, rue Stephenson 78181 Saint Quentin en Yvelines Cedex FR
auth60.ns.uu.net 198.6.1.181 - 198.6.0.0/16 UUNET, An MCI Worldcom Company 3060 Williams Drive Fairfax, VA 22031 US AS701 UUNET Alternet
net ripn.net msk-ix.net se ns.uu.net sunet.se fr nic.fr uu.net

__________________

Netflix, Inc.


Last edited by ScamBuster; 08-22-08 at 05:43 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2  
Old 08-22-08, 07:14 PM
Junior Member
 
Join Date: Aug 2008
Posts: 2
Rep Power: 0
rustelekom is on a distinguished road
Re: WHOIS - masterhost.ru

Sorry for may be stupid question but may i ask for what reason domain masterhost.ru listed in "Identity Theft- Phishing - Spam - BlackMails" as well as our own domain rustelekom.biz and few other?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3  
Old 08-22-08, 07:32 PM
ScamBuster's Avatar
Admin Assistance
 
Join Date: Mar 2005
Location: Washington
Age: 30
Posts: 5,646
Rep Power: 10
ScamBuster is on a distinguished road
WHOIS - masterhost.ru

Quote:
Originally Posted by rustelekom View Post
Sorry for may be stupid question but may i ask for what reason domain masterhost.ru listed in "Identity Theft- Phishing - Spam - BlackMails" as well as our own domain rustelekom.biz and few other?
Absolutely.... This is not a stupid question. Your domain is listed because we've seen it as a hub or sanctuary for money mule or repackaging/escrow domain registrations.

Here is your example:
Domain name: ACECHECKEXPRESS.NET
Name Server: ns.masterhost.ru
Name Server: ns1.masterhost.ru
Name Server: ns2.masterhost.ru

Creation Date: 2008.07.09
Expiration Date: 2009.07.09

Status: DELEGATED

Registrant ID: XIWAOKB-RU
Registrant Name: Evgenij V Filippov
Registrant Organization: Evgenij V Filippov
Registrant Street1: ul. Juzhnaja, d. 5, kv. 40
Registrant City: Syktyvkar
Registrant State: n/a
Registrant Postal Code: 425689
Registrant Country: RU

Administrative, Technical Contact
Contact ID: XIWAOKB-RU
Contact Name: Evgenij V Filippov
Contact Organization: Evgenij V Filippov
Contact Street1: ul. Juzhnaja, d. 5, kv. 40
Contact City: Syktyvkar
Contact State: n/a
Contact Postal Code: 425689
Contact Country: RU
Contact Phone: +7 950 3654598
Contact Fax: +7 950 3654598
Contact E-mail: fenny.express@gmail.com

Registrar: ANO Regional Network Information Center dba RU-CENTER

http://www.bobbear.co.uk/mynesconsultingandfinance.html
http://www.scamfraudalert.com/f37/pa...ost-biz-10793/ (Packages Processing Manager Needed - Global-post.biz)
http://www.scamfraudalert.com/f37/ea...way-biz-13284/ (East Way Inc. www.eastway.biz)
http://www.bobbear.co.uk/acecheckexpress.html
__________________

Netflix, Inc.


Last edited by ScamBuster; 08-22-08 at 09:31 PM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4  
Old 08-22-08, 09:24 PM
ScamBuster's Avatar
Admin Assistance
 
Join Date: Mar 2005
Location: Washington
Age: 30
Posts: 5,646
Rep Power: 10
ScamBuster is on a distinguished road
WHOIS - masterhost.ru

[SpamCop-List] Re: masterhost.ru - puzzling? Any ideas?
Spambo spamcop-list@news.spamcop.net
Tue, 11 Jun 2002 04:41:14 -0500

* Previous message: [SpamCop-List] masterhost.ru - puzzling? Any ideas?
* Next message: [SpamCop-List] masterhost.ru is an ISP
* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Miss Betsy wrote:
>
> I decided to look up the website spamvertized. I have been getting many
> spam from masterhost.ru. When I looked it up by going to the site, there
> was a note on the site that probably I had gotten there by mistake. I then
> tried it from the spam itself and went to the same page - all in Russian.
>
> This is strange. What is the point of sending a spam that sends you to a
> site that is in Russian to find an "american babe"? As far as I could tell
> there were no obvious links to a porn site. - Everything was in Russian and
> the few links I tried just got me more pages in Russian. I tried non-porn
> links and got the same thing.
>
> What do you think is going on?
>
> --
> Miss Betsy, an almost new spamcop user


It could be that the site had already been shut down and you were seeing the
Russian version of the GeoCities/AngelFire/etc. 'page not found' page that
touts the rest of their site in hopes you'll find something else of interest
while you're there.

It's not uncommon for American porn-mongers to use foreign hosts for their
material, it makes it difficult for the owner to be investigated for any
alleged wrongdoing - or blindsided by an angry spam recipient.

Spambo


http://news.spamcop.net/pipermail/sp...ne/006205.html
__________________

Netflix, Inc.

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5  
Old 08-23-08, 05:36 AM
Junior Member
 
Join Date: Aug 2008
Posts: 2
Rep Power: 0
rustelekom is on a distinguished road
Re: WHOIS - masterhost.ru

Thanks for quick reply. I am not owner of masterhost.ru and not regards to them by any way i just accidentally found your site and this topic make me surprised. Let me explain why:

Masterhost.ru is one of the Russian host monster. Here you can check how many domains they host on their nameservers http://1stat.ru/?ns=masterhost.ru It is about 90000 for July.
Here in Russia if you want sale hosting you need to be licensed by government and masterhost.ru is licensed operator.
Due to Russian legislation licensed operator cannot terminate customer service just for complain. By Russian law operator need have a court subpoena to terminate customer subscription. Of course, if someone send SPAM from their servers they will suspend guilty account but actually it is all what they can do. It is main problem here in Russia. From one side such legislation protect end user rights from host arbitrariness but from other side it is contrary West practice.
Sorry for long explanation but it is just was required to give you clear understanding why when you send complain to Russian host they do not immediately terminate domain/hosting. They just cannot do it - otherwise they will be under risks: guilty customer can sued host and government can terminate host license because customer rights was violated.

I think i wouldn't need comment SpamCop issue because reply from SpamCop was selfexplanatory.

In continue to story with domain acecheckexpress.net. Any host is not responsible for their customer action. Only end user who has account under host responsible for all action doing from his account and with domain which he own. So, listing host domain - masterhost.ru in topic "Identity Theft- Phishing - Spam - BlackMails" look for me as detrimental to the reputation of the company. Just replace Masterhost.ru with for example Hostgator.com and you will understand me very well.
I know guys from www.bobbear.co.uk and i trust them in their investigation and i will ask them what reply they got from masterhost.ru abuse departments in regard to domain acecheckexpress.net. I will be happy help them to get this fraudsters to down.
I hope i was clear in my explanation and my reply give a some light to how Russian host work with abuses. If anything still unexplained please reply me and i will try answer.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Bookmarks

Tags
masterhostru , whois


Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
Packages Processing Manager Needed - globalpost.biz Scrub Employment or Job Offers Alerts 12 12-10-07 07:31 AM
Packages Processing Manager Needed - globalpost.biz Scrub Work At Home Scam 7 11-25-07 08:20 AM


All times are GMT -5. The time now is 07:31 AM.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.1.0
Page generated in 0.17544 seconds with 11 queries

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49