DD Support Board and Research Team

[DaReal]

Some odd things about the fake Pennypic AQNM! Mail

Running the Header through a little Prog named eMailTrackerPro revealed some more information:
Computer 78.47.55.70 has been found. It is almost certainly located in Germany as it has an exact match in the eMailTrackerPro database.

This system is a web and secure web server (click here for details).

Network Contact Information: The following details refer to the network that the system is on.
[e-mail]
No. 1 Mapp Street, Belize City, Belize

The sender's IP was - 78.47.55.70

The sender of this email appeared to have the address [e-mail]. This information is easily faked so should not be treated as conclusive.


The following map shows the route between you and the entity to which you traced. A solid line represents a hop to a known location, and a dotted line represents a hop to a guessed location.

The table below identifies the Internet route taken to reach the destination requested.

This is valuable data when tracking the end location because it helps qualify the actual final position. In some instances the final location has been derived from the network registration details, which is often the head office location for the Internet Service Provider (ISP). The ISP location is often local to the destination traced, but sometimes also located elsewhere, particularly in the case of large national ISPs. The physical (authoritative) locations of systems in last 2 or 3 hops of the route provide helpful location information as they are often in the vicinity of the destination being traced. Authoritative locations are shown in bold, locations derived from registration details appear in italic.


Address of Hop Name of Hop Location

62.154.14.214 f-ed4-i.F.DE.NET.DTAG.DE Frankfurt, Germany
62.157.251.34 Germany
213.239.240.152 hos-bb2.juniper1.rz14.hetzner.de Germany
213.239.224.169 hos-tr2.ex3k8.rz14.hetzner.de Germany
46.4.95.111 node46.doip.net Germany
78.47.55.70 static.78-47-55-70.clients.your-server.de Germany

Network Owner Information
The following information refers to the network on which this system lies. This is useful information because it describes who you need to report to if someone on their network has been abusive. (How to effectively report network abuse)
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '78.47.55.64 - 78.47.55.79'

inetnum: 78.47.55.64 - 78.47.55.79
netname: DOLOREM-IPSUM-SRO
descr: Dolorem Ipsum, s.r.o.
country: DE
admin-c: DS247-RIPE
tech-c: DS247-RIPE
status: ASSIGNED PA
mnt-by: HOS-GUN
source: RIPE # Filtered

person: Dmitriy Skotnikov
address: No. 1 Mapp Street, Belize City, Belize
phone: [phone]
nic-hdl: DS247-RIPE
remarks: Please contact by email in case of any questions
abuse-mailbox: [e-mail]
mnt-by: HOS-GUN
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.19.5 (WHOIS3)
---------------
It seems as he's using also a CZ Address:
here:http://www.whoismind.com/resource/ripe/DOLOREM-IPSUM.html

Inetnum : 78.46.13.160 - 78.46.13.191
Netname : DOLOREM-IPSUM
Descr : Dolorem Ipsum
Country : DE
Admin-c : DS247-RIPE
Tech-c : DS247-RIPE
Status : ASSIGNED PA
Mnt-by : HOS-GUN


Person : Dmitriy Skotnikov
Address : PSC 15500
Address : U dalnice 815/6
Address : Praha 5, Stodulky
Address : Czech Republic
Phone : [phone]
Nic-hdl : DS247-RIPE
Abuse-mailbox :
Mnt-by : HOS-GUN

---------------

Dmitry Skotnikov
CEO at Dolorem Ipsum

Location
Czech Republic
Industry
Telecommunications
Overview
Current CEO/Founder at Dolorem Ipsum
Past Technical Manager at NetCracker
Presales consultant and Business developing manager at Comptel
Project manager at Vimpelcom
Connections 43 connections
Public Profilehttp://cz.linkedin.com/in/dmitryskotnikov
Summary
BSS/OSS telecom interfaces and data formats
Billing and mediation business and technical functionality

Experience
CEO/Founder Dolorem Ipsum
February 2010 – Present (2 years 7 months)

Technical Manager NetCracker Public Company; 1001-5000 employees; Telecommunications industry

December 2009 – December 2010 (1 year 1 month)

Presales consultant and Business developing manager Comptel Public Company; 501-1000 employees; CTL1V; Telecommunications industry

October 2008 – November 2009 (1 year 2 months)

Project manager Vimpelcom Public Company; 10,001+ employees; VIP; Telecommunications industry

March 2005 – September 2008 (3 years 7 months)

------------------

http://www.spambusted.com/geo.php?ip=78.47.167.50

Whois Info

RESULTS FOUND FOR IP# 78.47.167.50: 2
-------------
Whois results for 78.47.167.50 from whois.lacnic.net lookup server:

inetnum: 78.47.167.48 - 78.47.167.55
netname: DOLOREM-IPSUM-SRO
descr: Dolorem Ipsum, s.r.o.
country: DE
admin-c: DS247-RIPE
tech-c: DS247-RIPE
status: ASSIGNED PA
mnt-by: HOS-GUN
source: RIPE # Filtered
person: Dmitriy Skotnikov
address: No. 1 Mapp Street, Belize City, Belize
phone: [phone] begin_of_the_skype_highlighting [phone] end_of_the_skype_highlighting
nic-hdl: DS247-RIPE
remarks: Please contact by email in case of any questions
abuse-mailbox: [e-mail]
mnt-by: HOS-GUN
source: RIPE # Filtered
route: 78.46.0.0/15
descr: HETZNER-RZ-NBG-BLK5
origin: AS24940
org: ORG-HOA1-RIPE
mnt-by: HOS-GUN
source: RIPE # Filtered
organisation: ORG-HOA1-RIPE
org-name: Hetzner Online AG
org-type: LIR
address: Hetzner Online AG
Attn. Martin Hetzner
Stuttgarter Str. 1
91710 Gunzenhausen
GERMANY
phone: [phone] begin_of_the_skype_highlighting [phone] end_of_the_skype_highlighting
fax-no: [phone]
admin-c: DM93-RIPE
admin-c: GM834-RIPE
admin-c: HOAC1-RIPE
admin-c: MH375-RIPE
admin-c: RB1502-RIPE
admin-c: SK2374-RIPE
admin-c: TF2013-RIPE
admin-c: MF1400-RIPE
mnt-ref: HOS-GUN
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

-------------
Whois results for 78.47.167.50 from whois.arin.net lookup server:

NetRange: 78.0.0.0 - 78.255.255.255
CIDR: 78.0.0.0/8
OriginAS:
NetName: 78-RIPE
NetHandle: NET-78-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2006-08-29
Updated: 2009-05-18
Ref: http://whois.arin.net/rest/net/NET-78-0-0-0-1
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/RIPE
ReferralServer: whois://whois.ripe.net:43
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: [phone] begin_of_the_skype_highlighting [phone] end_of_the_skype_highlighting
OrgTechEmail: [e-mail]
OrgTechRef: http://whois.arin.net/rest/poc/RNO29-ARIN
OrgAbuseHandle: RNO29-ARIN
OrgAbuseName: RIPE NCC Operations
OrgAbusePhone: [phone] begin_of_the_skype_highlighting [phone] end_of_the_skype_highlighting
OrgAbuseEmail: [e-mail]
OrgAbuseRef: http://whois.arin.net/rest/poc/RNO29-ARIN
Created :08-13-2012 09:59:55.

Maybe it's nothing... just sharing