Replies to post #12 on The Post of all your SPAM thread

[sno43wolf]

AHHA I see why!

[Stock]

I got the "IRS Refund" email from a person in Bologna, Italy. Do you think I should fill out his link?

I used this web site to paste the IP Address in the link. Look at the world map at the bottom of the link, and see how many hits this spammer got from his email:

http://www.hostip.info/index.html

Domain to IP or Host name lookup

Host name: 212.97.48.179
IP address: 212.97.48.179
Location: Bologna, ITALY (change)

Address lookup
canonical name
aliases
addresses 212.97.48.179

Domain Whois record
Queried whois.iana.org with "aisrouter"...

Domain aisrouter. not found. Please note that this whois server
only provides information for a very few domains.

Network Whois record
Queried whois.ripe.net with "-B 212.97.48.179"...

% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '212.97.48.0 - 212.97.48.255'

inetnum: 212.97.48.0 - 212.97.48.255
netname: MESSAGENET-KQ
descr: Messagenet
descr: Milano (MI) - Italy
country: IT
admin-c: MF641-RIPE
tech-c: GM2292-RIPE
tech-c: MV957-RIPE
rev-srv: ns.kpnqwest.it
rev-srv: ns2.kpnqwest.it
status: ASSIGNED PA
notify: [e-mail]
mnt-by: AS5602-MNT
changed: [e-mail] 20030210
source: RIPE

person: Marco Fiorentino
address: KPNQwest Italia S.p.a.
address: Via Leopardi, 9
address: I-20123 Milano - Italy
phone: [phone]
fax-no: [phone]
e-mail: [e-mail]
nic-hdl: MF641-RIPE
mnt-by: AS5602-MNT
changed: [e-mail] 20010216
source: RIPE

person: Marcello Vago
address: KPNQwest Italia S.p.a.
address: via Leopardi, 9
address: I-20123 Milano - MI
address: Italy
phone: [phone]
fax-no: [phone]
e-mail: [e-mail]
e-mail: [e-mail]
nic-hdl: MV957-RIPE
mnt-by: AS5602-MNT
changed: [e-mail] 20010216
changed: [e-mail] 20020904
source: RIPE

person: Gaetano Mercandalli
address: KPNQwest Italia S.p.a.
address: Via Leopardi, 9
address: I-20123 Milano - Italy
phone: [phone]
fax-no: [phone]
e-mail: [e-mail]
nic-hdl: GM2292-RIPE
mnt-by: AS5602-MNT
changed: [e-mail] 20030108
source: RIPE

% Information related to '212.97.32.0/19AS5602'

route: 212.97.32.0/19
descr: KPNQwest Italia S.p.a. netblock
origin: AS5602
notify: [e-mail]
mnt-by: AS5602-MNT
changed: [e-mail] 20010223
source: RIPE

This is the link to the scammer's email. Don't click this link:

http://212.97.48.179:84/irs.gov/online_form/www.irs.gov/0,,id=96596,00.html